H3C switch Common commands

Source: Internet
Author: User
Tags snmp
H3C switch Common commands
1. System-View
Enter System View Mode
2. sysname: Device Name
3. display current-configuration current configuration
4,
Language-mode Chinese | switch between English and Chinese
5. Enter the Ethernet port view through interface Ethernet 1/0/1

6. Port Link-type access | trunk | hybrid sets the port access mode
7. Undo Shutdown
Enable the Ethernet port
8. shutdown the Ethernet port
9. Quit exits the current view mode.
10. VLAN
10 create VLAN 10 and enter the view mode of VLAN 10
11. Port Access VLAN 10 Add the current port to the VLAN in Port Mode
Medium 10
12. Port E1/0/2 to E1/0/5 Add the specified port to the current VLAN in VLAN Mode
13. Port trunk
Permit VLAN all allows all VLANs to pass through

H3C router Common commands
1. System-View
Enter System View Mode
2. sysname R1 is the device named r1
3. Display IP routing-table to display the current route table
4,
Language-mode Chinese | switch between English and Chinese
5. Enter the Ethernet port view through interface Ethernet 0/0

6. IP address 192.168.1.1 255.255.255.0 configure the IP address and subnet mask
7. Undo Shutdown
Enable the Ethernet port
8. shutdown the Ethernet port
9. Quit exits the current view mode.
10. IP
Route-static 192.168.2.0 255.255.255.0 192.168.12.2 description to. r2
Configure Static Routing
11. IP route-static 0.0.0.0 0.0.0.0 192.168.12.2 description to. r2
Configure the default route
H3C s3100 Switch
H3C s3600 Switch
H3C MSR 20-20 Router
Small
Technical Skill
1. Adjust the font size of the Super Terminal;
2. Capture the Super Terminal command line for future check;
3. Language-Mode
Chinese | switch between English and Chinese;
4. Copy the command to the Super Terminal command line and paste it to the host;
5. Switch clearing configuration: <H3C> Reset
Save; <H3C> Reboot;
6. When configuring vrouters and vswitches, the power cannot be switched off. Before Connectivity testing, you must

Check network connectivity and do not make the lowest-level errors.
7. 192.168.1.1/24 is equivalent to 192.168.1.1
255.255.255.0; When configuring vswitches and vrouters, 192.168.1.1 255.255.255.0 can be written as 192.168.1.1
24
8. device naming rules: Place Name-device name-serial number example: PingGu-R-S3600

Common configurations of Huawei switches for small and medium-sized enterprises or large enterprise branches

In branches of small and medium-sized enterprises or large enterprises, L2 Ethernet switches act as L2 aggregation switches, which can be directly connected to users and uplinked to L2/L3 Ethernet switches, you can connect to the network of the headquarters or other branches through a vro.
Each department is divided into one VLAN in the network. To facilitate network management, SNMP must be configured. to prevent unauthorized access to the switch, ACL control must be configured on the switch.
The entire network uses vlan10 as the management VLAN. The IP addresses of vlan10 interfaces on all vswitches are in the same network segment 10.110.110.0/24, the IP address of the master RADIUS server is 10.110.10.18, And the IP address of the network management station is 10.11.10.1. The IP address of the router is 10.100.11.1.
The vlan2 interface is connected to the vro. the IP address of the vlan2 interface is 10.100.11.2.
Configure L2 switches as follows: Manage VLAN configuration, network management route configuration, SNMP configuration, ACL control configuration for various access modes, and hybrid port configuration.
Configure the gateway, hybrid port, SNMP, ACL control for various access methods, and mutual access control between departments on the second/third-layer switch.
This article only describes the basic configurations on the vswitch.
1.
Tch B Configuration
The following uses tch B as an example to describe the basic configuration process. All computers in this department are configured in one VLAN.
(1)
Configure a VLAN.
[Quidway] VLAN 5
[Quidway-vlan5] port ethernet 0/1 to Ethernet 0/24
Ethernet 1, 1/1
[Quidway-vlan5] Quit
(2) configure and manage VLANs and routes.
# VLAN management
10.
[Quidway] interface VLAN 10
[Quidway-Vlan-interface10] IP Address
10.110.110.2 255.255.255.0
# Configure the route. The next hop is 10.110.110.1.
[Quidway] IP Route
10.11.10.1 255.255.255.248 10.110.110.1
(3)
Configure the uplink port ethernet1/1 as the hybrid port to allow packets from vlan10 and vlan5 to pass through.
[Quidway] Interface
Ethernet1/1
[Quidway-Ethernet1/1] Port Link-type
Hybrid
[Quidway-Ethernet1/1] Port hybrid pvid vlan 5
[Quidway-Ethernet1/1]
Port hybrid VLAN 10 tagged
(4) Configure SNMP
# Enter the global configuration mode.
System-View
#
Set group names and access permissions.
[Quidway] SNMP-Agent Community read Huawei
[Quidway]
SNMP-Agent community write beiyan
# Set the administrator ID, contact method, and physical location of the Ethernet switch.
[Quidway]
SNMP-Agent sys-Info contact Mr. Wang-Tel: 3306
[Quidway] SNMP-Agent sys-Info
Location telephone-closet, 3rd-floor
# Send traps.
[Quidway] SNMP-Agent trap
Enable
# Define the access control list to control the ACL of users who access the vswitch through SNMP.
[Quidway] ACL Number 1

[Quidway-acl-basic-1] Rule 0 permit source 10.11.10.1 0
#
Create an SNMP group and define access control.
[Quidway] SNMP-agent group V3 using weigroup ACL 1
#
Add a user to the SNMP group, set the authentication password to hello, and configure access control. Only the network management workstation can access the switch.
[Quidway] SNMP-agent
USM-user V3 authentication weimanager authentication weigroup auth MD5 Huawei ACL 1
(5)
Configure access control for telnet users. Only users with IP addresses 10.110.110.46 and 10.110.110.52 can access the vswitch through Telnet.
#
Define the basic access control list.
[Quidway] ACL number 20
[Quidway-acl-basic-20] Rule 0 Permit
Source 10.110.110.46 0
[Quidway-acl-basic-20] Rule 1 permit Source
10.110.110.52 0
# Reference the access control list.
[Quidway] user-interface vty 0
4
[Quidway-ui-vty0-4] ACL 20 inbound
(6)
Configure access control for HTTP users. Only hosts with the IP address 10.110.110.46 can access the vswitch through the Web.
#
Define the basic access control list.
[Quidway] ACL number 30
[Quidway-acl-basic-30] Rule 0 Permit
Source 10.110.110.46 0
# Reference the access control list.
[Quidway] ip http ACL
30

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.