H3C三層交換機(jī)配置實(shí)例知識(shí)分享

H3C三層交換機(jī)配置實(shí)例H3C三層交換機(jī)配置實(shí)例TOC\o"1-5"\h\z\o"CurrentDocument"1網(wǎng)絡(luò)拓?fù)鋱D 0\o"CurrentDocument"2配置要求 0\o"CurrentDocument"3劃分VLAN并描述 1\o"CurrentDocument"3.1進(jìn)入系統(tǒng)視圖 1\o"CurrentDocument"3.2創(chuàng)建VLAN并描述 1\o"CurrentDocument"4給VLAN設(shè)置網(wǎng)關(guān) 2\o"CurrentDocument"VLAN1的IP地址設(shè)置 2\o"CurrentDocument"VLAN100的網(wǎng)關(guān)設(shè)置 2\o"CurrentDocument"VLAN101的網(wǎng)關(guān)設(shè)置 2\o"CurrentDocument"VLAN102的網(wǎng)關(guān)設(shè)置 2\o"CurrentDocument"VLAN103的網(wǎng)關(guān)設(shè)置 3\o"CurrentDocument"5給VLAN指定端口，設(shè)置端口類型 3\o"CurrentDocument"VLAN100指定端口 3\o"CurrentDocument"VLAN102指定端口 3\o"CurrentDocument"VLAN1/101/103指定端口 4\o"CurrentDocument"6配置路由協(xié)議 5\o"CurrentDocument"6.1默認(rèn)路由 5\o"CurrentDocument"6.2配置流分類 5\o"CurrentDocument"6.3定義行為 5\o"CurrentDocument"6.4應(yīng)用QOS策略 5\o"CurrentDocument"6.5接口配置QOS策略 61網(wǎng)絡(luò)拓?fù)鋱D三層交換機(jī) /17Z16.10CL254/32 192.168.100.254/3217Z16.1254/32 192.1G8.L254/32172.16.1.0/24192,168,1.0/24172.16.1.0/24圖1-1網(wǎng)絡(luò)拓?fù)鋱D2配置要求用戶1網(wǎng)絡(luò)：172.16.1.0/24至出口1網(wǎng)絡(luò)：172.16.100.0/24用戶2網(wǎng)絡(luò)：192.168.1.0/24至出口2網(wǎng)絡(luò)：192.168.100.0/24實(shí)現(xiàn)功能：用戶1通過互聯(lián)網(wǎng)出口1，用戶2通過互聯(lián)網(wǎng)出口2。3劃分VLAN并描述3.1進(jìn)入系統(tǒng)視圖<H3C>system-view//進(jìn)入系統(tǒng)視圖<；H3&-systein-viewSystemView：returntoUserViewwithCtrl+Z.LH3C10圖3-1系統(tǒng)視圖3.2創(chuàng)建VLAN并描述[H3C]vlan1//本交換機(jī)使用[H3C-vlan1]descriptionManager//描述為“Manager”[H3C-vlan1]quit[H3C]vlan100〃劃分vlan100[H3C-vlan100]descriptionVLAN100//描述為“VLAN100”[H3C-vlan100]quit[H3C]vlan101〃劃分vlan101[H3C-vlan101]descriptionVLAN101//描述為“VLAN101”[H3C-vlan101]quit[H3C]vlan102〃劃分vlan102[H3C-vlan102]descriptionVLAN102//描述為“VLAN102”[H3C-vlan102]quit[H3C]vlan103〃劃分vlan103[H3C-vlan103]descriptionVLAN103//描述為“VLAN103”[H3C-vlan103]quit[H3C][HSCjv'lan1[HJC-^lanlldescriptionManager[H3C-■/lanllquLt[H3C]Ylan100[H3C-vlanlGGldescriptianVLAI4100[H3C-^lanl.GG]quit[HJCRlmn101[H3C-an1.Q1]descriptionFLAW101[HSC-vlanlGllquit[H3C]vlan102[H3C-vlan1D2IdescriptioiVLAN102[H3C-\flanlD2]quit[H3C]^lanIDS[H3C-YlanIDSjdescriptiaiVLAhlIDS[H3C-YlanlO3]quit[H3C]|圖3-2劃分VLAN及描述4給VLAN設(shè)置網(wǎng)關(guān)VLAN1的IP地址設(shè)置把VLAN1的IP地址設(shè)置為192.168.0.254，子網(wǎng)掩碼為255.255.255.0,用于本地使用。[H3C]interfacevlan-interface1[H3C-Vlan-interface1]ipaddress192.168.0.254255.255.255.0[H3C-Vlan-interface1]quit[H3C][H3C]interfacevlan-interface1[H3C-/Ian-interface!]ipaddress192.168.0.254255.255.255..0[H3C-/lan-i.nt&rfaceUquii:[H3C]|圖4-1VLAN1的IP設(shè)置VLAN100的網(wǎng)關(guān)設(shè)置把VLAN100的網(wǎng)關(guān)設(shè)置為192.168.100.254，子網(wǎng)掩碼為255.255.255.0。[H3C]interfacevlan-interface100[H3C-Vlan-interface100]ipaddress192.168.100.254255.255.255.0[H3C-Vlan-interface100]quit[H3C]LH3C]interfacevlan-interface106[H3C-Vlan-interfacel0&]ipaddress192.168.100.254255.255.255.0[H3C-Vian-interfacelOO]quit[H3C]|圖4-2VLAN100的網(wǎng)關(guān)設(shè)置VLAN101的網(wǎng)關(guān)設(shè)置把VLAN101的網(wǎng)關(guān)設(shè)置為192.168.1.254，子網(wǎng)掩碼為255.255.255.0。[H3C]interfacevlan-interface101[H3C-Vlan-interface101]ipaddress192.168.1.254255.255.255.0[H3C-Vlan-interface101]quit[H3C][H3C]interfacevlan-interface1D1[H3C-Vlan-interfaceiei]ipaddress192.168.1.254255.255..2i5.0[H3C-Tian-interface101]quit[H3C]|圖4-3VLAN101的網(wǎng)關(guān)設(shè)置VLAN102的網(wǎng)關(guān)設(shè)置把VLAN102的網(wǎng)關(guān)設(shè)置為172.16.100.254，子網(wǎng)掩碼為255.255.255.0。[H3C]interfacevlan-interface102[H3C-Vlan-interface102]ipaddress172.16.100.254255.255.255.0[H3C-Vlan-interface102]quit[H3C]H-ULjinterTacevian-interTace[H3C-V7an-interfacelO2]ipaddress172.16.10G.254255.255..235.0[H3C-Vian-interface!02]quit[H3C]|圖4-4VLAN102的網(wǎng)關(guān)設(shè)置VLAN103的網(wǎng)關(guān)設(shè)置把VLAN103的網(wǎng)關(guān)設(shè)置為172.16.1.254，子網(wǎng)掩碼為255.255.255.0。[H3C]interfacevlan-interface103[H3C-Vlan-interface103]ipaddress172.16.1.254255.255.255.0[H3C-Vlan-interface103]quit[H3C][HSClLritGr-facevlan-interfaceIDS[H3C-Vlan-interfacel03]ipaddress172,16.1,254255.255.255.9[H3C-\Man-interfacelOsiquit[H3C]|圖4-5VLAN103的網(wǎng)關(guān)設(shè)置5給VLAN指定端口，設(shè)置端口類型VLAN100指定端口將端口GigabitEthernet1/0/1指定給vlan100，并配置端口模式。[H3C]interfaceGigabitEthernet1/0/1[H3C-GigabitEthernet1/0/1]portlink-typeaccess[H3C-GigabitEthernet1/0/1]portaccessvlan100[H3C-GigabitEthernet1/0/1]speed1000[H3C-GigabitEthernet1/0/1]duplexfull[H3C-GigabitEthernet1/0/1]quit[H3C]rHJClintG1/0/1[l-ISC-GigabitEthemet1/13/1]partlink-typeacce-ss[H3C-GigabitEthemet accessvlan190[HJC-GigabitEthernet1/G/Illspe-ed1000[H3C-GigabitEthernet1/G/H]duplexfull[H3C-GigabitEthernet[H3C]|圖5-1VLAN100指定端口VLAN102指定端口將端口GigabitEthernet1/0/2指定給vlan102,并配置端口模式。[H3C]intG1/0/2[H3C-GigabitEthernet1/0/2]portlink-typeaccess[H3C-GigabitEthernet1/0/2]portaccessvlan102[H3C-GigabitEthernet1/0/2]speed1000[H3C-GigabitEthernet1/0/2]duplexfull[H3C-GigabitEthernet1/0/2]quit[H3C]:H3C]in1tGL/0/2；H3C-Ciigabi:Ethernet1/0/2]portlint-typeaccess^HJC-Ciigabi:Ethernet1/0/2]portaccessvlai102:H3C-Gigabi:Etherrietl/0/2]5peed1000；H3C-<jigabitEthernet1/0/2]duplexfull；H3C-<5igabitEthernet1/0/2]quit:H3C]|圖5-2VLAN102指定端口VLAN1/101/103指定端口將端口GigabitEthernet1/0/15~16指定給vlan1/101/101，并配置端口模式。[H3C]intG1/0/15[H3C-GigabitEthernet1/0/15]portlink-typetrunk[H3C-GigabitEthernet1/0/15]porttrunkpermitvlan1101103[H3C-GigabitEthernet1/0/15]speed1000[H3C-GigabitEthernet1/0/15]duplexfull[H3C-GigabitEthernet1/0/15]quit[H3C]intG1/0/16[H3C-GigabitEthernet1/0/16]portlink-typetrunk[H3C-GigabitEthernet1/0/16]porttrunkpermitvlan1101103[H3C-GigabitEthernet1/0/16]speed1000[H3C-GigabitEthernet1/0/16]duplexfull[H3C-GigabitEthernet1/0/16]quit[H3C]LH3C]intG1/G/J5EH3C-GigabitEthernet1/0/15]partlink-typetrunkLH3C-GigabitEthernet1/0/15]parttrunkpermilulai11011&3Pleasewait...Done-.LH3C-GigabitEttierroetl/>0/15]speed1000LH3C-GigabitEthernet1/0/25]duplexhill[H3C]int&U0/16[HaC-GigabitEtherne-t1/0/16]portlinktypetrunk[HSC-GigabitEthene-t1/0/16]porttrunkpennitvlan1101103Pleasewait...Dans.[H3C-GigabitEthern&tl/Q/15]9peed10QO[HaC-GiqabitEtheme-tUG/15]duplexfull圖5-3VLAN1/101/103指定端口6配置路由協(xié)議6.1默認(rèn)路由建立默認(rèn)路由，將所有的數(shù)據(jù)包都丟往出口2的下一節(jié)點(diǎn)192.168.100.253：[H3C]iproute-static0.0.0.00.0.0.0192.168.100.2536.2配置流分類配置流分類1，對(duì)象為172.16.1.0/24的數(shù)據(jù)：[H3C]aclnumber3001[H3C-acl-adv-3001]rule0permitipsource172.16.1.00.0.0.255[H3C-acl-adv-3001]quit[H3C]trafficclassifier1[H3C-classifier-1]if-matchacl3001[H3C-classifier-1]quit[H3C]LH3C]aelnumber2001LH3C-acl-adv-2G02]nile-0permitipsource-172.15.1.0G.0.0.25-5LH3C-Ml-adv.aeailqiiitLH3C]traffleclassifier1[H^C-classifier-acl3DQ1[；H3C-classifier-J]quit[：H3C]|圖6-1配置流分類16.3定義行為配置剛才定義的流分類的行為，定義如果匹配就下一跳至出口1即172.16.100.253：[H3C]trafficbehavior1[H3C-behavior-1]redirectnext-hop172.16.100.253[H3C-behavior-1]quit[H3C][H3C]traffic：behavior1[H3C-behavior-l]re-directne-xt-hop172.16.100.252[H3C-behavior-l]quit[H3C]|圖6-2配置流分類行為6.4應(yīng)用QOS策略將剛才設(shè)置的應(yīng)用至QOS策略中，定義policy1：[H3C]qosp1[H3C-qospolicy-1]classifier1behavior1[H3C-qospolicy-1]quit[H3C][HSClqosp1[H3C-qospolicy-1]classifier1behavior1[HJC-qoEpoIicy-llquit圖6-3QOS策略6.5接口配置QOS策略在接口上應(yīng)用定義的QOS策略policy1：[H3C]intG1/0/15[H3C-Gig