H3C核心交換機配置

(資料圖片僅供參考)

H3C每年將銷售額的15%以上用于研發(fā)投入，在中國的"北京、杭州和深圳設(shè)有研發(fā)機構(gòu)，在北京和杭州設(shè)有可靠性試驗室以及產(chǎn)品鑒定測試中心。以下是小編整理的關(guān)于H3C核心交換機配置，希望大家認(rèn)真閱讀!

1、核心交換機新建用戶admin密碼admin@h3c，并關(guān)聯(lián)遠(yuǎn)程登錄服務(wù)，如telnet web網(wǎng)頁登錄、ssh遠(yuǎn)程登錄。并開啟telnet、web登錄服務(wù)、ftp服務(wù)

#

local-user admin

password cipher admin@h3c

authorization-attribute level 3

service-type telnet

service-type ftp

service-type web

#

telnet server enable

#

ip http enable

#

user-interface vty 0 15

authentication-mode scheme

2、如需新增vlan網(wǎng)段，先新建對應(yīng)vlan，新建網(wǎng)關(guān)、把網(wǎng)線口加入到此vlan，這里例舉新增vlan11，網(wǎng)關(guān)172.30.162.1/24,把0/0/27-0/0/28口添加到vlan162

#

vlan 162

port GigabitEthernet 0/0/27 to GigabitEthernet 0/0/28

#

interface Vlan-interface162

ip address 172.30.162.1 255.255.255.0

3、開啟DHCP自動獲取功能，此功能一般只需要在核心交換機上開啟，比如這里開啟vlan162網(wǎng)段的DHCP功能，并禁止分配172.30.162.1-100

#

dhcp server ip-pool 162

network 172.30.162.0 mask 255.255.255.0

gateway-list 172.30.162.1

dns-list 88.0.0.216 88.0.0.218

#

dhcp enable

#

dhcp server forbidden-ip 172.30.162.1 172.30.162.100

關(guān)閉192.168.11.0網(wǎng)段的DHCP自動獲取功能

#

undo dhcp server ip-pool 11

4、下聯(lián)交換機口必須配置成trunk口，并允許所有vlan通過，比如2槽位板卡，開啟trunk配置，這里例舉2/0/1和2/0/2口要下接接入交換機

#

interface GigabitEthernet2/0/1

port link-type trunk

port trunk permit vlan 10 20 30 40 50 80 162 500 1000

#

interface GigabitEthernet2/0/2

port link-type trunk

port trunk permit vlan 10 20 30 40 50 80 162 500 1000

5、查看交換機端口使用情況，可查看端口激活狀態(tài)up或者DOWN，端口工作速率，端口模式，端口對應(yīng)的vlan號

dis interface brief

The brief information of interface(s) under route mode:

Link: ADM - administratively down; Stby - standby

Protocol: (s) - spoofing

Interface Link Protocol Main IP Description

M-E0/0/0 DOWN DOWN --

NULL0 UP UP(s) --

Vlan1 UP UP --

Vlan10 UP UP 192.168.10.1 POS

Vlan20 UP UP 192.168.20.1 KELIU

Vlan30 UP UP 192.168.30.1 MENJIN

Vlan40 UP UP 192.168.40.1 TINGCHECHANG

Vlan50 UP UP 172.15.0.1 KEYONG-WIFI-IP

Vlan80 UP UP 192.168.80.1 OFFICE-WIFI-IP

Vlan162 UP UP 172.30.162.1 OFFICE

Vlan500 UP UP 192.168.60.1 AP-IP

Vlan1000 UP UP 172.16.100.1 MANGENT&TO-F100-E-G

Vlan1101 UP UP 11.1.1.2 TO-CISCO-11.1.1.1

Vlan1102 UP UP 11.1.1.6 TO-CISCO-11.1.1.5

The brief information of interface(s) under bridge mode:

Link: ADM - administratively down; Stby - standby

Speed or Duplex: (a)/A - auto; H - half; F - full

Type: A - access; T - trunk; H - hybrid

Interface Link Speed Duplex Type PVID Description

BAGG1 UP 2G(a) F(a) A 1000 TO-F100-E-G

BAGG2 UP 2G(a) F(a) T 1 WLAN-COTROL

GE0/0/1 DOWN auto A T 1

GE0/0/2 DOWN auto A T 1

GE0/0/3 DOWN auto A T 1

6、查看各個vlan所有在線電腦ip，可通過命令查看在線ip地址-mac地址-學(xué)習(xí)來源(所接端口)，下面列舉查看管理vlan 1000網(wǎng)段交換機在線情況，可以看到下列ip的交換機都在正常工作，都在線

dis arp vlan 1000

Type: S-Static D-Dynamic M-Multiport

IP Address MAC Address VLAN ID Interface Aging Type

172.16.100.36 5cdd-703f-6e50 1000 GE0/0/13 18 D

172.16.100.14 7425-8aef-811a 1000 GE0/0/13 13 D

172.16.100.37 e468-a38e-ee5b 1000 GE0/0/14 3 D

172.16.100.2 70ba-ef69-4adf 1000 BAGG1 3 D

172.16.100.3 70f9-6d0d-e4d6 1000 BAGG2 15 D