当前位置：文档之家 › H3C SOHO交换机 典型配置举例(Comware V5)-6W101-VLAN典型配置举例

H3C SOHO交换机 典型配置举例(Comware V5)-6W101-VLAN典型配置举例

  • 格式：pdf
  • 大小：352.41 KB
  • 文档页数：14
GigabitEthernet1/0/3 Untagged Ports:
GigabitEtherห้องสมุดไป่ตู้et1/0/1 [DeviceA] display vlan 200
VLAN ID: 200 VLAN Type: static Route Interface: configured IP Address: 192.168.2.2 Subnet Mask: 255.255.255.0 Description: VLAN 0200 Name: VLAN 0200 Tagged Ports:
1.2.3 验证配置
(1) 通过 display vlan 命令查看显示信息验证配置是否成功，以查看 Device A 上 VLAN 100 和 VLAN 200 的配置信息为例。
[DeviceA] display vlan 100 VLAN ID: 100
2
VLAN Type: static Route Interface: configured IP Address: 192.168.1.1 Subnet Mask: 255.255.255.0 Description: VLAN 0100 Name: VLAN 0100 Tagged Ports:
# 创建 VLAN 200，并将 GigabitEthernet 1/0/2 加入 VLAN 200。
[DeviceB] vlan 200 [DeviceB-vlan200] port gigabitethernet 1/0/2 [DeviceB-vlan200] quit
# 创建 Vlan-interface 200，并配置其 IP 地址为 192.168.2.1/24。
目录
1 VLAN典型配置举例··········································································································· 1 1.1 简介 ···························································································································1 1.2 基于端口的VLAN和VLAN接口典型配置举例 ········································································1 1.2.1 组网需求·············································································································1 1.2.2 配置步骤·············································································································1 1.2.3 验证配置·············································································································2 1.2.4 配置文件·············································································································3 1.3 动态MAC VLAN典型配置举例 ··························································································4 1.3.1 组网需求·············································································································4 1.3.2 配置注意事项 ·······································································································5 1.3.3 配置步骤·············································································································6 1.3.4 验证配置 ··········································································································· 11 1.3.5 配置文件 ··········································································································· 12
i
1 VLAN典型配置举例
1.1 简介
本章介绍了基于端口的 VLAN 和动态 MAC VLAN 典型配置举例。
1.2 基于端口的VLAN和VLAN接口典型配置举例
1.2.1 组网需求
如 图 1 所示： • 为了避免广播报文泛滥和通信的安全性，某公司网络中使用 VLAN 技术来隔离部门间的二层
流量。其中部门 A 使用 VLAN 100，部门 B 使用 VLAN 200。 • 部门 A 的终端用户使用 192.168.1.0/24 IP 网段，各终端用户配置的网关地址为 192.168.1.1；
[DeviceB] interface Vlan-interface 200 [DeviceB-Vlan-interface200] ip address 192.168.2.1 24 [DeviceB-Vlan-interface200] quit
# 为了使 Device A 上 VLAN 100 和 VLAN 200 的报文能发送给 Device B，将 GigabitEthernet 1/0/3 的链路类型配置为 Trunk，并允许 VLAN 100 和 VLAN 200 的报文通过，取消允许 VLAN 1 通过。
[DeviceA] interface Vlan-interface 200 [DeviceA-Vlan-interface200] ip address 192.168.2.2 24 [DeviceA-Vlan-interface200] quit
# 为了使 Device A 上 VLAN 100 和 VLAN 200 的报文能发送给 Device B，将 GigabitEthernet 1/0/3 的链路类型配置为 Trunk，并允许 VLAN 100 和 VLAN 200 的报文通过，取消允许 VLAN 1 通过。
(2) 配置 Device B # 创建 VLAN 100，并将 GigabitEthernet 1/0/1 加入 VLAN 100。
<DeviceB> system-view [DeviceB] vlan 100 [DeviceB-vlan100] port gigabitethernet 1/0/1 [DeviceB-vlan100] quit
(3) Host A 和 Host D 能够互相 ping 通。查看 Host A 的 ARP 表，表中没有 Host D 的 ARP 表项。 查看 Host D 的 ARP 表，表中也没有 Host A 的 ARP 表项。
1.2.4 配置文件
• Device A
# vlan 100 # vlan 200 # interface Vlan-interface100
[DeviceA] interface gigabitethernet 1/0/3 [DeviceA-GigabitEthernet1/0/3] port link-type trunk [DeviceA-GigabitEthernet1/0/3] port trunk permit vlan 100 200 [DeviceA-GigabitEthernet1/0/3] undo port trunk permit vlan 1 [DeviceA-GigabitEthernet1/0/3] quit
[DeviceB] interface gigabitethernet 1/0/3 [DeviceB-GigabitEthernet1/0/3] port link-type trunk [DeviceB-GigabitEthernet1/0/3] port trunk permit vlan 100 200 [DeviceB-GigabitEthernet1/0/3] undo port trunk permit vlan 1 [DeviceB-GigabitEthernet1/0/3] quit
GigabitEthernet1/0/3 Untagged Ports:
GigabitEthernet1/0/2
(2) Host A 和 Host C 能够互相 ping 通。查看 Host A 的 ARP 表，表中有 Host C 的 IP 地址和 MAC 地址对应的 ARP 表项。查看 Host C 的 ARP 表，表中有 Host A 的 IP 地址和 MAC 地址对应 的 ARP 表项。
# 创建 Vlan-interface 100，并配置其 IP 地址为 192.168.1.1/24。
[DeviceA] interface Vlan-interface 100 [DeviceA-Vlan-interface100] ip address 192.168.1.1 24 [DeviceA-Vlan-interface100] quit

合集下载

新华三SOHO产品手册说明书

新华三SOHO产品手册说明书

新华三SOHO 管理型产品手册客服热线：400-810-0504杭州总部杭州市滨江区长河路466号邮编:310052新华三集团北京总部北京市朝阳区广顺南大街8号院 利星行中心1号楼邮编:100102Copyright2021新华三集团 保留一切权利免责声明：虽然新华三集团试图在本资料中提供准确的信息，但不保证本资料的内容不含有技术性误差或印刷性错误，为此新华三集团对本资料中信息的准确性不承担任何责任。

新华三集团保留在没有任何通知或提示的情况下对本资料的内容进行修改的权利。

CN-202030-20210519-BR-HZ-V2.0SOHO 产品手册02SOHO 产品手册目录CONTENTS01S1850V2系列WEB 管理型千兆交换机03S2600系列全管理型百兆交换机05S5000PV5系列全管理千兆交换机07S1850-X 系列万兆上行交换机08S5000E-X 系列全管理型万兆交换机09桌面防火墙系列产品11解决方案展示S1850V2系列WEB管理型千兆交换机产品定位普遍应用于中小型企业、市县政企、普职教、连锁型酒店等流量数据大，有划分VLAN及子网需要，需要对网络进行适当维护且对数据安全性有一定要求的应用场景；作为组网中的接入层，多端口型号可作为汇聚层设备使用。

S1800系列千兆交换机产品型号端口形态交换容量/包转发率软硬件特性产品尺寸(mm)S1850v2-9P8个千兆电口+1个千兆光口192Gbps/30MppsWEB管理、端口限速、端口聚合/Vlan划分、端口镜像、ACL限速、QoS策略、IGMP V1/V2/V3 Snooping、6KV防雷、端口绑定、动态链路聚266×162×44 S1850v2-10P8个千兆电口+2个千兆光口192Gbps/30Mpps266×162×44S1850v2-10P-PWR8个千兆电口+2个千兆光口192Gbps/30Mpps330×230×44 S1850v2-26P24个千兆电口+2个千兆光口240Gbps/78Mpps440×173×44注：S1850-28P-PWR整机POE供电功率190W，单端口最大供电功率30W产品参数0102S2600系列全管理型百兆交换机产品定位普遍应用于连锁商铺、大中小学校、商务型酒店、政企单位等对数据安全性要求高，有较复杂组网需求，需要多种维护手段维护的应用场景；作为组网中的接入层或汇聚层设备使用。

华三交换机配置方法及操作案例

华三交换机配置方法及操作案例

华三交换机配置方法及操作案例一、系统IP配置:[H3C]vlan20[H3C]management-vlan20[H3C]interfacevlan-interface 20 创建并进入管理VLAN[H3C]undointerface vlan-interface 20 删除管理VLAN接口[H3C-Vlan-interface20]ipaddress 192.168.1.2 255.255.255.0 配置管理VLAN接口静态IP地址(缺省为192.168.0.234)[H3C-Vlan-interface20]undoip address 删除IP 地址[H3C-Vlan-interface20]ipgateway192.168.1.1 指定缺省网关(默认无网关地址) [H3C-Vlan-interface20]undoip gateway[H3C-Vlan-interface20]shutdown 关闭接口[H3C-Vlan-interface20]undoshutdown 开启[H3C]displayip 显示管理VLAN接口IP的相关信息[H3C]displayinterface vlan-interface 20 查看管理VLAN的接口信息<H3C>debuggingip 开启IP调试功能<H3C>undodebugging ip二、DHCP客户端配置:[H3C-Vlan-interface20]ipaddress dhcp-alloc 管理VLAN接口通过DHCP方式获取IP地址[H3C-Vlan-interface20]undoip address dhcp-alloc 取消[H3C]displaydhcp 显示DHCP客户信息<H3C>debuggingdhcp-alloc 开启DHCP调试功能<H3C>undodebugging dhcp-alloc三、端口配置:[H3C]interfaceEthernet0/3[H3C-Ethernet0/3]shutdown[H3C-Ethernet0/3]speed100 速率,可为10,100,1000和auto(缺省)[H3C-Ethernet0/3]duplexfull 双工,可为half,full 和auto(缺省) 光口和汇聚后不能配置[H3C-Ethernet0/3]flow-control 开启流控,默认为关闭[H3C-Ethernet0/3]broadcast-suppression20 设置抑制广播百分比为20%,可取5,10,20,100,缺省为100,同时组播和未知单播也受此影响[H3C-Ethernet0/3]loopbackinternal 内环测试[H3C-Ethernet0/3]loopbackexternal 外环测试,需插接自环头,必须为全双工或者自协商模式[H3C-Ethernet0/3]portlink-type trunk 设置链路的类型为trunk,可为access(缺省),trunk[H3C-Ethernet0/3]porttrunk pvid vlan 20 设置20为该trunk的缺省VLAN,默认为1(trunk线路两端的PVID必须一致)[H3C-Ethernet0/3]portaccess vlan 20 将当前access端口加入指定的VLAN[H3C-Ethernet0/3]porttrunk permit vlan all 允许所有的VLAN通过当前的trunk端口,可多次使用该命令[H3C-Ethernet0/3]mdiauto 设置以太端口为自动监测,normal(缺省)为直通线,across为交叉线[H3C]link-aggregationEthernet 0/1 to Ethernet 0/4 将1-4口加入汇聚组,1为主端口,两端需要同时配置,设置了端口镜像以及端口隔离的端口无法汇聚[H3C]undolink-aggregation Ethernet 0/1 删除该汇聚组[H3C]link-aggregationmode egress 配置端口汇聚模式为根据目的MAC地址进行负荷分担,可选为 ingress,egress和both,缺省为both[H3C]monitor-portEthernet 0/2 将该端口设置为镜像端口,必须先设置镜像端口,删除时必须先删除被镜像端口,而且它们不能同在一个端口,该端口不能在汇聚组中,设置新镜像端口时,新取代旧,被镜像不变[H3C]mirroring-portEthernet 0/3 to Ethernet 0/4 both 将端口3和4设置为被镜像端口,both为同时监控接收和发送的报文,inbound表示仅监控接收的报文,outbound表示仅监控发送的报文[H3C]displaymirror[H3C]displayinterface Ethernet 0/3<H3C>resetcounters 清除所有端口的统计信息[H3C]displaylink-aggregation Ethernet 0/3 显示端口汇聚信息[H3C-Ethernet0/3]virtual-cable-test 诊断该端口的电路状况四、VLAN配置:[H3C]vlan2[H3C]undovlan all 删除除缺省VLAN外的所有VLAN,缺省VLAN不能被删除[H3C-vlan2]portEthernet 0/4 to Ethernet 0/7 将4到7号端口加入到VLAN2中,此命令只能用来加access端口,不能用来增加trunk或者hybrid端口[H3C-vlan2]port-isolateenable 打开VLAN内端口隔离特性,不能二层转发,默认不启用该功能[H3C-Ethernet0/4]port-isolateuplink-port vlan 2 设置4为VLAN2的隔离上行端口,用于转发二层数据,只能配置一个上行端口,若为trunk,则建议允许所有VLAN通过,隔离不能与汇聚同时配置[H3C]displayvlan all 显示所有VLAN的详细信息S1550E支持基于端口的VLAN,通过创建不同的user-group来实现,一个端口可以属于多个user-group,不属于同一个user-group的端口不能互相通信,最多支持50个user-group[H3C]user-group20 创建user-group 20,默认只存在user-group 1[H3C-UserGroup20]portEthernet 0/4 to Ethernet 0/7 将4到7号端口加入到VLAN20中,初始时都属于user-group1中[H3C]displayuser-group 20 显示user-group 20的相关信息五、系统管理:[H3C]mac-addressblackhole H-H-H vlan 1 在VLAN1中添加黑洞MAC[H3C]mac-addressstatic H-H-H interface Ethernet 0/1 vlan 1 在VLAN1中添加端口一的一个mac [H3C]mac-addresstimer aging 500 设置MAC地址表的老化时间为500s[H3C]displaymac-address[H3C]displayarp[H3C]mac-addressport-binding H-H-H interface Ethernet 0/1 vlan 1 配置端口邦定[H3C]displaymac-address port-binding[H3C]displaysaved-configuration[H3C]displaycurrent-configuration<H3C>save[H3C]restoredefault 恢复交换机出厂默认配置,恢复后需重启才能生效[H3C]displayversion<H3C>reboot[H3C]displaydevice[H3C]sysnamebigheap[H3C]info-centerenable 启用系统日志功能,缺省情况下启用[H3C]info-centerloghost ip 192.168.0.3 向指定日志主机(只能为UNIX或LINUX,不能为Windows)输出信息,需先开启日志功能,缺省关闭[H3C]info-centerloghost level 8 设置系统日志级别为8,默认为 5.级别说明:1.emergencies2.alerts 3.critical 4.errors 5.warnings 6.notifications rmational8.debugging<H3C>terminaldebugging 启用控制台对调试信息的显示,缺省控制台为禁用<H3C>terminallogging 启用控制台对日志信息的显示,缺省控制台为启用<H3C>terminaltrapping 启用控制台对告警信息的显示,缺省控制台为启用[H3C]displayinfo-center 显示系统日志的配置和缓冲区记录的信息[H3C]displaylogbuffer 显示日志缓冲区最近记录的指定数目的日志信息[H3C]displaytrapbuffer 显示告警缓冲区最近记录的指定数目的日志信息<H3C>resetlogbuffer 清除日志缓冲区的信息<H3C>resettrapbuffer 清除告警缓冲区的信息六、案例:某公司有一台三层交换机、两台二层交换机，给每个部门划分不用VLAN，但是VLAN要互联，三层到二层交换机为了防止单线故障使用链路聚合，vlan2为销售部，vlan3为财务部。

H3C交换机配置指导201805025【最新V5版本】

H3C交换机配置指导201805025【最新V5版本】

H3C交换机配置指导201805025【最新V5版本】1、用户账号与密码强化管理员帐户密码，密码长度大于等于8位并包含数字、大小写字母及特殊字符，密码使用密文形式存储，绑定console口登录和SSH服务。

Zdhb*2660<D-SD-ZZ-BeiXinB.S1>suPassword:Zdhb*2660<D-SD-ZZ-BeiXinB.S1>sys[D-SD-ZZ-BeiXinB.S1]local-user admin[D-SD-ZZ-BeiXinB.S1-luser-admin]password cipher Zdhb*2660[D-SD-ZZ-BeiXinB.S1-luser-admin]authorization-attribute level 3[D-SD-ZZ-BeiXinB.S1-luser-admin]service-type ssh terminal telnet[D-SD-ZZ-BeiXinB.S1-luser-admin]quit####################################2、设备本地管理（1）设备本地通过console口登录需输入用户名和口令；[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]dis cu //查看全部配置信息，敲空格到最后，查看后几行信息如果看到有user-interface aux 0 8信息//显示aux口，则进入aux口进行配置[D-SD-ZZ-BeiXinB.S1] user-interface aux 0 8[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]authentication-mode scheme[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]undo set authentication password[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]quit####################################（2）登录后超过5分钟无动作自动退出；[D-SD-ZZ-BeiXinB.S1]user-interface aux 0 8[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]idle-timeout 5[D-SD-ZZ-BeiXinB.S1-ui-aux0-8]quit####################################（3）连续登录失败5次后，账户锁定10分钟。

H3C交换机_典型配置举例-6W100-以太网链路聚合典型配置举例

H3C交换机_典型配置举例-6W100-以太网链路聚合典型配置举例

目录
1 链路聚合典型配置举例······················································································································· 1-1 1.1 简介 ···················································································································································1-1 1.2 二层链路聚合配置举例 ······················································································································1-1 1.2.1 适用产品和版本 ······················································································································1-1 1.2.2 组网需求 ·································································································································1-1 1.2.3 配置思路 ·································································································································1-1 1.2.4 配置注意事项 ··························································································································1-2 1.2.5 配置步骤 ·································································································································1-2 1.2.6 验证配置 ································································································································1-3 1.2.7 配置文件 ·································································································································1-4 1.3 二层聚合负载分担配置举例···············································································································1-5 1.3.1 适用产品和版本 ······················································································································1-5 1.3.2 组网需求 ·································································································································1-5 1.3.3 配置思路 ·································································································································1-6 1.3.4 配置注意事项 ··························································································································1-6 1.3.5 配置步骤 ·································································································································1-6 1.3.6 验证配置 ·································································································································1-7 1.3.7 配置文件 ·································································································································1-8 1.4 三层链路聚合配置举例 ······················································································································1-9 1.4.1 适用产品和版本 ······················································································································1-9 1.4.2 组网需求 ·······························································································································1-10 1.4.3 配置思路 ·······························································································································1-10 1.4.4 配置注意事项 ························································································································1-10 1.4.5 配置步骤 ·······························································································································1-10 1.4.6 验证配置 ·······························································································································1-11 1.4.7 配置文件 ·······························································································································1-12