H3C互換機(jī)最詳細(xì)配置實(shí)例手冊

資料整頓：h叩oboy

錄

1.登錄互換機(jī)經(jīng)典配置指導(dǎo).............................................................7

1.1通過Console口配置Telnet登錄方式經(jīng)典配置指導(dǎo)..................................7

組網(wǎng)圖........................................................................7

應(yīng)用規(guī)定.....................................................................7

配置過程和解釋...............................................................7

完整配置.....................................................................8

1.2通過Telnet配置Console口登錄方式經(jīng)典配置指導(dǎo)..................................9

組網(wǎng)圖........................................................................9

應(yīng)用規(guī)定.....................................................................9

配置過程和解釋...............................................................9

完整配置....................................................................10

1.3通過WEB網(wǎng)管登錄互換機(jī)經(jīng)典配置指導(dǎo)..........................................11

組網(wǎng)圖.......................................................................11

應(yīng)用規(guī)定....................................................................11

配置過程和解釋..............................................................11

完整配置....................................................................12

配置注意事項.................................................................12

1.4對登錄顧客H勺控制經(jīng)典配置指導(dǎo)..................................................12

1.4.1組網(wǎng)圖..................................................................12

應(yīng)用規(guī)定....................................................................12

配置過程和解釋..............................................................12

完整配置....................................................................13

2.VLAN經(jīng)典配置指導(dǎo)................................................................14

2.1基于端口的VLAN經(jīng)典配置指導(dǎo)..................................................14

組網(wǎng)圖.......................................................................14

應(yīng)用規(guī)定....................................................................14

配置過程和解釋..............................................................14

完整配置.....................................................................15

2.2基于MAC的VLAN經(jīng)典配置指導(dǎo)................................................16

組網(wǎng)圖.......................................................................16

應(yīng)用規(guī)定....................................................................16

配置過程和解釋..............................................................16

完整配置....................................................................17

配置注意事項.................................................................18

2.3基于協(xié)議的JVLAN經(jīng)典配置指導(dǎo).................................................18

組網(wǎng)圖.......................................................................18

應(yīng)用規(guī)定....................................................................19

配置過程和解釋..............................................................19

完整配置....................................................................19

2.4基于IP子網(wǎng)的VLAN經(jīng)典配置指導(dǎo)..............................................20

組網(wǎng)圖.......................................................................20

應(yīng)用規(guī)定....................................................................20

配置過程和解釋..............................................................21

完整配置....................................................................21

2.5Isolate-user-vlan經(jīng)典配置指導(dǎo)..................................................22

組網(wǎng)圖.......................................................................22

應(yīng)用規(guī)定....................................................................22

配置過程和解釋..............................................................22

完整配置....................................................................23

3.IPv4ACL經(jīng)典配置指導(dǎo).............................................................25

3.1基本IPv4ACL經(jīng)典配置指導(dǎo).....................................................25

組網(wǎng)圖.......................................................................25

應(yīng)用規(guī)定....................................................................25

配置過程和解釋..............................................................25

完整配置....................................................................26

配置注意事項................................................................26

3.2高級IPv4ACL經(jīng)典配置指導(dǎo)....................................................27

組網(wǎng)圖.......................................................................28

應(yīng)用規(guī)定....................................................................28

配置過程和解釋..............................................................28

完整配置....................................................................29

配置注意事項................................................................30

3.3二層ACL經(jīng)典配置指導(dǎo)........................................................30

組網(wǎng)圖.......................................................................31

應(yīng)用規(guī)定....................................................................31

配置過程和解釋..............................................................31

完整配置....................................................................31

配置注意事項................................................................32

3.4顧客自定義ACL和流模板經(jīng)典配置指導(dǎo)...........................................32

3.4.1組網(wǎng)圖...................................................................33

應(yīng)用規(guī)定....................................................................33

配置過程和解釋..............................................................33

完整配置....................................................................34

配置注意事項................................................................34

4.IPv6ACL經(jīng)典再己置指導(dǎo).............................................................37

4.1基本IPv6ACL經(jīng)典配置指導(dǎo).....................................................37

組網(wǎng)圖.......................................................................37

應(yīng)用規(guī)定....................................................................37

配置過程和解釋..............................................................37

完整配置....................................................................38

配置注意事項................................................................38

4.2高級IPv6ACL經(jīng)典配置指導(dǎo)....................................................38

組網(wǎng)圖.......................................................................39

應(yīng)用規(guī)定....................................................................39

配置過程和解釋..............................................................39

完整配置....................................................................40

配置注意事項................................................................40

5.QoS經(jīng)典配置指導(dǎo).................................................................41

5.1端口限速和流量監(jiān)管經(jīng)典配置指導(dǎo)................................................41

組網(wǎng)圖.......................................................................41

應(yīng)用規(guī)定....................................................................41

配置過程和解釋..............................................................42

完整配置....................................................................43

配置注意事項................................................................43

5.2優(yōu)先級重標(biāo)識和隊列調(diào)度經(jīng)典配置指導(dǎo)............................................46

組網(wǎng)圖.......................................................................46

應(yīng)用規(guī)定....................................................................46

配置過程和解釋..............................................................47

完整配置....................................................................48

配置注意事項................................................................48

5.3優(yōu)先級映射和隊列調(diào)度經(jīng)典配置指導(dǎo).............................................50

組網(wǎng)圖.......................................................................50

應(yīng)用規(guī)定....................................................................50

配置過程和解釋..............................................................51

完整配置....................................................................51

配置注意事項................................................................52

5.4流鏡像和重定向至端口經(jīng)典配置指導(dǎo).............................................55

組網(wǎng)圖.......................................................................55

應(yīng)用規(guī)定....................................................................55

配置過程和解釋..............................................................56

完整配置....................................................................57

配置注意事項................................................................57

5.5重定向至下一跳經(jīng)典配置指導(dǎo)....................................................58

組網(wǎng)圖.......................................................................58

應(yīng)用規(guī)定....................................................................58

配置過程和解釋..............................................................58

完整配置....................................................................59

配置注意事項................................................................59

6.互換機(jī)端口鏈路類型簡介..........................................................60

6.1互換機(jī)端口鏈路類型簡介........................................................60

6.2各類型端口使用注意事項.......................................................60

6.3各類型端口在接受和發(fā)送報文時口勺處理............................................61

6.4互換機(jī)Trunk端口配置..........................................................62

組網(wǎng)需求：...................................................................62

組網(wǎng)圖：....................................................................62

置環(huán)節(jié)：...................................................................63

6.5互換機(jī)Hybrid端口配置.........................................................64

組網(wǎng)需求：...................................................................64

組網(wǎng)圖：.....................................................................65

配置環(huán)節(jié)：...................................................................66

7.鏈路聚合經(jīng)典配置指導(dǎo)............................................................70

7.1鏈路聚合經(jīng)典配置指導(dǎo)..........................................................70

組網(wǎng)圖.......................................................................70

應(yīng)用規(guī)定....................................................................70

配置過程和解釋..............................................................70

完整配置....................................................................71

配置注意事項................................................................71

7.2鏈路聚合經(jīng)典配置指導(dǎo)..........................................................72

組網(wǎng)圖.......................................................................72

應(yīng)用規(guī)定....................................................................72

配置過程和解釋..............................................................72

配置注意事項................................................................73

8、端口鏡像經(jīng)典配置指導(dǎo).............................................................73

8.1當(dāng)?shù)囟丝阽R像經(jīng)典配置指導(dǎo)......................................................73

組網(wǎng)圖.......................................................................73

應(yīng)用規(guī)定....................................................................74

配置過程和解釋..............................................................74

完整配置....................................................................74

配置注意事項................................................................74

8.2遠(yuǎn)程端口鏡像經(jīng)典配置指導(dǎo)（萬式一）............................................75

組網(wǎng)圖.......................................................................76

應(yīng)用規(guī)定....................................................................76

配置過程和解釋..............................................................76

完整配置....................................................................77

配置注意事項................................................................78

8.3遠(yuǎn)程端口鏡像經(jīng)典配置指導(dǎo)（方式二）............................................79

組網(wǎng)圖.......................................................................80

應(yīng)用規(guī)定....................................................................80

配置過程和解釋..............................................................80

完整配置....................................................................81

配置注意事項................................................................82

9.端口隔離經(jīng)典配置指導(dǎo)...............................................................83

9.1端口隔離概述..................................................................83

9.2端口隔離配置指導(dǎo)（方式一）....................................................83

組網(wǎng)圖.......................................................................83

配置過程和解釋..............................................................84

配置注意事項................................................................84

9.3端口隔離配置指導(dǎo)（方式二）....................................................84

組網(wǎng)圖.......................................................................84

配置過程和解釋..............................................................85

配置注意事項................................................................85

10.LLDP經(jīng)典配置指導(dǎo)...............................................................86

10.1LLDP簡介...................................................................86

10.2LLDP經(jīng)典配置指導(dǎo)...........................................................87

組網(wǎng)圖87

10.2.2應(yīng)用規(guī)定87

配置過程和解釋..............................................................87

10.2.4完整配置89

10.2.5配置注意事項89

11.DHCP經(jīng)典配置指導(dǎo)..............................................................90

11.1DHCP服務(wù)器靜態(tài)綁定地址經(jīng)典配置指導(dǎo)........................................90

組網(wǎng)圖.......................................................................90

11.1.2應(yīng)用規(guī)定...............................................................90

配置過程和解釋..............................................................90

11.1.4完整配置...............................................................90

配置注意事項................................................................91

11.2DHCP服務(wù)器動態(tài)分派地址經(jīng)典配置指導(dǎo)........................................91

組網(wǎng)圖.......................................................................91

11.2.2應(yīng)用規(guī)定..............................................................91

配置過程和解釋..............................................................92

11.2.4完整配置..............................................................92

配置注意事項................................................................93

11.3DHCP中繼經(jīng)典配置指導(dǎo)......................................................93

組網(wǎng)圖.......................................................................94

11.3.2應(yīng)用規(guī)定...............................................................94

配置過程和解釋..............................................................94

11.3.4完整配置...............................................................95

配置注意事項................................................................95

11.4DHCPSnooping經(jīng)典配置指導(dǎo).................................................95

組網(wǎng)圖.......................................................................96

11.4.2應(yīng)用規(guī)定...............................................................96

配置過程和解釋..............................................................96

11.4.4完整配置...............................................................97

配置注意事項................................................................97

11.5DHCPSnooping支持Option82經(jīng)典配置指導(dǎo)...................................97

組網(wǎng)圖98

11.5.2應(yīng)用規(guī)定98

11.5.3配置過程和解釋98

11.5.4完整配置100

1156配置注意事項...........................................................100

11.6自動配置功能經(jīng)典配置指導(dǎo)...................................................100

組網(wǎng)圖......................................................................101

11.6.2應(yīng)用需求.............................................................101

11.6.3配置過程和解釋........................................................102

11.6.4完整配置.............................................................105

11.6.7注意事項.............................................................106

1.登錄互換機(jī)經(jīng)典配置指導(dǎo)

1.1通過Console口配置Telnet登錄方式經(jīng)典配置指導(dǎo)

通過互換機(jī)Console口進(jìn)行當(dāng)?shù)氐卿浭堑卿浕Q機(jī)口勺最基本R勺方式，也是配置通過其他方式登錄

互換機(jī)"勺基礎(chǔ)。

組網(wǎng)圖

NfcRS-232串口Console

配宜電纜

PCSwitch

通過Console口配置Telnet登錄方式H勺組網(wǎng)圖

應(yīng)用規(guī)定

如上組網(wǎng)中，建立當(dāng)?shù)嘏渲铆h(huán)境，只需將PC機(jī)（或終端）歐）串口通過配置電纜與以太網(wǎng)互換機(jī)

Console口連接。目前顧客通過Console口（AUX顧客界面）登錄到互換機(jī)對Telnet登錄方式

進(jìn)行配置，且顧客級別為管理級（3級）。

配置過程和解釋

配置Telnet登錄方式的公共屬性

#進(jìn)入系統(tǒng)視圖，啟動Telnet服務(wù)

<Sysname>system-view

#配置從VTY顧客界面登錄后可以訪問的命令級別為2級

[Sysname]user-interfacevty0

#設(shè)置VTY0顧客界面支持Telnet協(xié)議

[Sysname-ui-vtyO]protocolinboundtelnet

#設(shè)置VTYO顧客的終端屏幕H勺一屏顯示30行命令

[Sysname-ui-vtyO]screen-length30

#設(shè)置VTYO顧客歷史命令緩沖區(qū)可寄存20條命令

[Sysname-ui-vtyO]history-commandmax-size20

#設(shè)置VTYO顧客界面U勺超時時間為6分鐘

[Sysname-ui-vt/0]idle-timeout6

通過Telnet登錄顧客的認(rèn)證方式

Telnet登錄有如下幾種認(rèn)證方式：

認(rèn)證方式為None,認(rèn)證方式為Password,認(rèn)證方式為Scheme。下面我們分別描述這幾種認(rèn)證方

式的配置：

設(shè)置通過VTY0顧客界面登錄互換機(jī)的Telnet顧客不需要進(jìn)行認(rèn)證

[Sysname]user-interfacevty0

[Sysname-ui-vtyO)authentication-modenone

設(shè)置通過VTYO口登錄互換機(jī)日勺Telnet顧客進(jìn)行Password認(rèn)證，并設(shè)置顧客的認(rèn)

證口令為明文方式，口令為123456

[Sysname]user-interfacevty0

[Sysname-ui-vtyO]authentication-modepassword

設(shè)置登錄顧客時認(rèn)證方式為Scheme,采用當(dāng)?shù)卣J(rèn)證"勺方式

#創(chuàng)立當(dāng)?shù)仡櫩蚲uest,并進(jìn)入當(dāng)?shù)仡櫩鸵晥D

[Sysname]local-userguest

#設(shè)置當(dāng)?shù)仡櫩偷恼J(rèn)證口令為明文方式，口令為123456

[Sysname-luser-guest]passwordsimple123456

#設(shè)置VTY顧客的J服務(wù)類型為Telnet且顧客級別為2

[Sysname-luser-guest]service-typetelnetlevel2

#進(jìn)入VTY顧客界面視圖

[Sysname]user-interfacevty0

it設(shè)置通過VTYO口登錄互換機(jī)的Telnet顧客進(jìn)行Scheme認(rèn)證

[Sysname-ui-vtyO]authentication-modescheme

#指定system域為缺省域，并設(shè)置該域Scheme認(rèn)證方式local

[Sysname]domaindefaultenablesystem

[Sysname]domainsystem

完整配置

認(rèn)證方式為None時Telnet登錄方式H勺配置

telnetserverenable

user-interfacevty0

authentication-modenone

userprivilegelevel2

history-conunandmax-size20

idle-timeout60

screen-length30

protocolinboundtelnet

認(rèn)證方式為Password時Telnet登錄方式的配置

telnetserverenable

user-interfacevty0

authentication-modenone

userprivilegelevel2

setauthenticationpasswordsimple123456

history-conunandmax-size20

idle-timeout60

screen-length30

protocolinboundtelnet

認(rèn)證方式為Scheme時Telnet登錄方式的配置

domainsystem

authenticationdefaultlocal

tt

telnetserverenable

user-interfacevty0

authentication-modescheme

userprivilegelevel2

history-conunandmax-size20

idle-timeout60

screen-length30

protocolinboundtelnet

1.2通過Telnet配置Console口登錄方式經(jīng)典配置指導(dǎo)

互換機(jī)支持Telnet功能，顧客可以通過Telnet方式對互換機(jī)進(jìn)行遠(yuǎn)程管理和維護(hù)。

組網(wǎng)圖

運(yùn)彳rTelnet

通過Telnet配置Console口登錄方式的組網(wǎng)圖

應(yīng)用規(guī)定

如上組網(wǎng)中，目前顧客通過Telnet方式登錄到互換機(jī)對Console口登錄方式進(jìn)行配置，且領(lǐng)客級

別為管理級（3級

配置過程和解釋

配置Console口登錄方式的公共屬性

#配置從AUX顧客界面登錄后可以訪問的命令級別為2級.

[Sy3nome]user-interfaceaux0

#配置Console口使用的波特率為19200bit/s

[Sysname-ui-auxO]speed19200

#配置終端屏幕H勺一屏顯示30行命令

[Sysname-ui-auxO]screen-length30

#配置歷史命令緩沖區(qū)可寄存20條命令

[Sysname-ui-auxO]history-commandmax-size20

#配置AUX顧客界面H勺超時時間為6分鐘

[Sysname-ui-auxO]idle-timeout6

配置Console匚登錄顧客R勺認(rèn)證方式

Console口登錄有如下幾種認(rèn)證方式：

認(rèn)證方式為None,認(rèn)證方式為Password,認(rèn)證方式為Scheme。下面我們分別描述這幾種認(rèn)證方

式的配置：

設(shè)置登錄顧客的認(rèn)證方式為None

[Sysname]user-interfaceaux0

設(shè)置登錄顧客的認(rèn)證方式為Password,并設(shè)置顧客的認(rèn)證口令為明文方式，口令為

123456

[Sysname]user-interfaceaux0

[Sysname-ui-auxO)authentication-modepassword

設(shè)置登錄顧客的認(rèn)證方式為Scheme,采用當(dāng)?shù)卣J(rèn)證H勺方式

#創(chuàng)立當(dāng)?shù)仡櫩蚲uest,并進(jìn)入當(dāng)?shù)仡櫩鸵晥D

[Sysname]local-userguest

#設(shè)置當(dāng)?shù)仡櫩蜁r認(rèn)證II令為明文方式，口令為123456

[Sysname-luser-guest]passwordsimple123456

#設(shè)置當(dāng)?shù)仡櫩偷姆?wù)類型為Terminal且顧客級別為2

[Sysname-luser-guest]service-typeterminallevel2

#進(jìn)入AUX顧客界面視圖

#設(shè)置通過Console口登錄互換機(jī)的顧客進(jìn)行Scheme認(rèn)證

[Sysname-ui-auxO]authentication-modescheme

完整配置

認(rèn)證方式為None時Console口登錄方式的配置

user-interfaceaux0

authentication-modenone

userprivilegelevel2

history-commandmax-size20

idle-timeout60

speed19200

screen-length30

認(rèn)證方式為Password時Console口登錄方式的配置

七

user-interfaceaux0

authentication-modepassword

userprivilegelevel2

setauthenticationpasswordsimple123456

history-commandmax-size20

idle-timeout60

speed19200

screen-length30

認(rèn)證方式為Scheme時ConsoleU登錄方式的配置

local-userguest

passwordsimple123456

service-typeterminal

I

user-interfaceaux0

authentication-modescheme

userprivilegelevel2

history-commandmax-size20

idle-timeout60

speed19200

screen-length30

1.3通過WEB網(wǎng)管登錄互換機(jī)經(jīng)典配置指導(dǎo)

組網(wǎng)圖

PCSwitch

通過WEB網(wǎng)管登錄互換機(jī)示意圖

應(yīng)用規(guī)定

如上組網(wǎng)圖所示，PC通過WEB網(wǎng)管登錄互換機(jī)，實(shí)現(xiàn)對互換機(jī)的遠(yuǎn)程管理。

配置過程和解釋

#通過Console口對的配置以太網(wǎng)互換機(jī)VLAN1接口W、JIP地址（VLAN1為互換機(jī)的缺省VLAN）

為，子網(wǎng)掩碼為。

<Sysname>system-view

[Sysname]interfacevlan-interface1

#配置WEB網(wǎng)管顧客名為admin,認(rèn)證口令為admin,顧客級別為3級。

[Sysnamellocal-useradmin

[Sysname-luser-admin]service-typetelnetlevel3

#啟動互換機(jī)日勺WEBServer功能。

[Sysname]ipenable

#通過瀏覽器登錄互換機(jī)：在WEB網(wǎng)管終端（PC）的瀏覽器地址欄內(nèi)輸入（WEB網(wǎng)管終端和以太

網(wǎng)互換機(jī)之間要路由可達(dá)），瀏覽器會顯示W(wǎng)EB網(wǎng)管II勺登錄頁面，如WEB網(wǎng)管登錄頁面所示。

Web網(wǎng)管用戶登錄

用戶名

WEB網(wǎng)管登錄頁面

#輸入在互換機(jī)上添加的顧客名和密碼，點(diǎn)擊＜登錄〉按鈕后即可登錄，顯示W(wǎng)EB網(wǎng)管初始頁面。

完整配置

local-useradmin

passwordsimpleadmin