进入管理模式 system-view 显示正在运行的配置信息 [H3C] dis cur 保存配置信息 [H3C]quit save 配置telnet 管理的用户和口令 [H3C]local-user admin [H3C-]password simple password123 [H3C-]service-type telnet [H3C-]level 3 [H3C-]quit [H3C]user-interface vty 0 4 [H3C-]authentication-mode scheme 一、 H3C 3600交换机 1、 划 分 VLAN，并对 VLAN进 行IP路由 创建 vlan1 ? [H3C] VLAN 1 [H3C]int vlan 1 [H3C-Vlan-interface1]ip add 192.168.1.253 255.255.255.0 [H3C-Vlan-interface1]quit [H3C]int e1/0/1 [H3C-Ethernet1/0/1]port access vlan 1 [H3C-Ethernet1/0/1]quit [H3C]int e1/0/2 [H3C-Ethernet1/0/2]port access vlan 1 [H3C-Ethernet1/0/2]quit 创建 vlan 2 [H3C]vlan 2 [H3C]int vlan 2 [H3C-Vlan-interface2]ip add 192.168.2.253 255.255.255.0 [H3C-Vlan-interface2]quit [H3C]int e1/0/3 [H3C-Ethernet1/0/3]port access vlan 2 [H3C-Ethernet1/0/3]quit [H3C]int e1/0/4 [H3C-Ethernet1/0/4]port access vlan 2 [H3C-Ethernet1/0/4]quit [H3C]int g1/0/1 [H3C-G1/0/1]port access vlan 2 [H3C-G1/0/1]quit 3100及3600交换机TRUNK口应用： 两台交换机级联SwitchA与SwitchB用 trunk互连，相同VLAN的PC之间可以互访，不同VLAN的PC之间禁止互访 l 配置方法： # 进入GigabitEthernet 1/1 以太网端口视图。 [SWA] interface GigabitEthernet 1/1 # 配置端口GigabitEthernet 1/1为Trunk端口,并允许VLAN10、VLAN 20的报文通过。 [SWA-Gthernet1/0/1] port link-type trunk [SWA-Gthernet1/0/1] port trunk permit vlan 10 20 [SWA]int e10/1 [SWA-E1/0/1]port acc vlan 10 [SWA-E1/0/2]port acc vlan 20 注：SWB交换机配置相同 增加路由 [H3C]ip route 0.0.0.0 0.0.0.0 192.168.1.254 [H3C]quit save 端 口映像: [H3C]mirroring-group 1 local [H3C]mirroring-group 1 monitor-port GigabitEthernet 1/1/4 [H3C]mirroring-group 1 mirroring-port GigabitEthernet 1/1/1 both 端口汇 聚： system-view [H3C]link-aggregation group 1 mode manual [H3C]interface ethernet1/0/1 [H3C-Ethernet1/0/1] port link-aggregation group 1 [H3C-Ethernet1/0/1] interface ethernet1/0/2 [H3C-Ethernet1/0/2] port link-aggregation group 1 [H3C-Ethernet1/0/2] interface ethernet1/0/3 [H3C-Ethernet1/0/3] port link-aggregation group 1 <<在互联网出口的路由器上需要配置返回路由 192.168.2.0 255.255.255.0 192.168.1.253 >> IP MAC 端口绑定 [H3C]interface Ethernet1/0/1 [H3C-Ethernet1/0/1]am user-bind mac-addr 0001-0002-0003 ip-addr 10.12.1.1 二、 H3C 3100交换机 1、广播抑制 [H3C]int e1/0/1 [H3C]broadcast-suppression 5 [H3C]int e1/0/2 [H3C]broadcast-suppression 5 2、配置web管理 [H3C]int vlan 1 [H3C-]ip add 192.168.1.253 255.255.255.0 [H3C-]quit [H3C]undo ip http shutdown [H3C]local-user admin [H3C-]password simple password123 [H3C-]service-type telnet [H3C-]level 3 [H3C-]quit [H3C]user-interface vty 0 4 [H3C-]authentication-mode scheme [H3C-]quit [H3C]quit save
