H3C 交换机配置命令手册

目录H3C交换机配置命令手册：..........................................................................................................2交换机端口链路类型介绍：...........................................................................................2认证方式为Scheme时Telnet登录方式的配置............................................................2Vlan的创建及描述..........................................................................................................2将端口配置为Trunk端口，并允许VLAN10和VLAN20通过......................................3DHCP典型配制举例：.....................................................................................................3链路聚合典型配置...........................................................................................................4三层交换的IP路由配置：.....................................................................................................5(1)配置各接口的IP地址.................................................................................................5(2)配置静态路由............................................................................................................5#在SwitchB上配置两条静态路由。...........................................................................5配置举例：建立SSLProxy服务器..............................................................................................51.组网需求..............................................................................................................................52.组网图..................................................................................................................................63.配置步骤..............................................................................................................................6#配置接口IP地址。......................................................................................................6SSL服务器端策略配置：................................................................................................6证书属性过滤组的配置：...............................................................................................7证书ACP策略配置：......................................................................................................7SSLProxy服务器策略配置：..........................................................................................7#配置目标HTTP服务器。............................................................................................8运行SSLProxy服务器：.................................................................................................8#配置ACL，用来匹配将要进行SSL代理的数据流。.................................................8#将路由策略应用到接口上。.......................................................................................9H3C交换机配置命令手册：交换机端口链路类型介绍：1．Access类型的端口只能属于1个VLAN，一般用于连接计算机的端口；2．Trunk类型的端口可以属于多个VLAN，可以接收和发送多个VLAN的报文，一般用于交换机之间连接的端口；3．Hybrid类型的端口可以属于多个VLAN，可以接收和发送多个VLAN的报文，可以用于交换机之间连接，也可以用于连接用户的计算机。认证方式为Scheme时Telnet登录方式的配置#telnetserverenable#local-userguestservice-typetelnetlevel3passwordsimple123456#Vlan的创建及描述#SwitchAsystem-view#进入配置选项命令行[SwitchA]vlan100#创建当前VLAN[SwitchA-vlan100]descriptionDept1#当前VLAN的描述[SwitchA-vlan100]portGigabitEthernet1/0/1#将当前端口加入到对就的VLAN下面将端口配置为Trunk端口，并允许VLAN10和VLAN20通过[SwitchA]interfaceGigabitEthernet1/1#进入当前端口[SwitchA-GigabitEthernet1/1]portlink-typetrunk#将当前端口设为中继[SwitchA-GigabitEthernet1/1]porttrunkpermitvlanall#允许所有VLAN通过[SwitchA-vlan100]quit#退出DHCP典型配制举例：#[SwitchA]dhcpserverip-pool0#建立DHCP组[SwitchA-dhcp-pool-0]network10.1.1.0mask255.255.255.0#地址池范围[SwitchA-dhcp-pool-0]domain-nameaabbcc.com#WINS服务器地址[SwitchA-dhcp-pool-0]dns-list10.1.1.2#DNS服务器地址[SwitchA-dhcp-pool-0]nbns-list10.1.1.4#从DNS的配制[SwitchA]dhcpserverforbidden-ip10.1.1.2#不参与的地址分配的地址（保留地址）[SwitchA]dhcpserverdetect#配置伪服务器检测功能。[SwitchA-dhcp-pool-0]quit#退出配置服务选项[SwitchA]dhcpenable#启用DHCP服务DHCP中继代理#使能DHCP服务。[SwitchB]dhcpenable#配置DHCP服务器的地址[SwitchB]dhcprelayserver-group1ip192.168.1.42#配置VLAN接口3工作在DHCP中继模式。[SwitchB]interfacevlan-interface3[SwitchB-Vlan-interface3]dhcpselectrelay#配置VLAN接口3对应DHCP服务器组1。[SwitchB-Vlan-interface3]dhcprelayserver-select1链路聚合典型配置链路聚合是将多个物理以太网端口聚合在一起形成一个逻辑上的聚合组，使用链路聚合服务的上层实体把同一聚合组内的多条物理链路视为一条逻辑链路。链路聚合可以实现出/入负荷在聚合组中各个成员端口之间分担，以增加带宽。同时，同一聚合组的各个成员端口之间彼此动态备份，提高了连接可靠性。#创建二层聚合端口1。DeviceAsystem-view[DeviceA]interfacebridge-aggregation1#创建端口聚合组[DeviceA-Bridge-Aggregation1]quit#将以太网端口Ethernet2/0/1至Ethernet2/0/3加入聚合组1。[DeviceA]interfaceethernet2/0/1[DeviceA-Ethernet2/0/1]portlink-aggregationgroup1#加入端口聚合组[DeviceA-Ethernet2/0/1]interfaceethernet2/0/2#进入端口[DeviceA-Ethernet2/0/2]portlink-aggregationgroup1#加入端口聚合组[DeviceA-Ethernet2/0/2]interfaceethernet2/0/3[DeviceA-Ethernet2/0/3]portlink-aggregationgroup1采用动态聚合模式#创建二层聚合端口1，并配置成动态聚合模式。DeviceAsystem-view[DeviceA]interfacebridge-aggregation1[DeviceA-Bridge-Aggregation1]link-aggregationmodedynamic[DeviceA-Bridge-Aggregation1]quit三层交换的IP路由配置：(1)配置各接口的IP地址interfaceVlan-interface300#ipaddress1.1.2.3255.255.255.0#给VLAN指定IP地址#(2)配置静态路由#在SwitchA上配置缺省路由。SwitchAsystem-view[SwitchA]iproute-static0.0.0.00.0.0.01.1.4.2#配置缺省路由#在SwitchB上配置两条静态路由。SwitchBsystem-view[SwitchB]iproute-static1.1.2.0255.255.255.01.1.