思科 H3C

设置交换机的主机名 [Quidway]sysname switch(config)#hostname 设置加密口令 [Quidway]super password switch(config)#enable password xx 进入接口视图 [Quidway]interface ethernet 0/1 switch(config)#int f0/1 进入VLAN视图 [Quidway]interface vlan x switch(config)#interface vlan 1 进入虚拟终端 [Quidway]user-interface vty 0 4 switch(config-line)#line vty 0 4 配置VLAN的IP地址[Quidway-Vlan-interfacex]ip address 10.65.1.1 255.255.0.0

switch(config-if)#ip address

静态路由 [Quidway]ip route-static 0.0.0.0 0.0.0.0 10.65.1.2

router(config)#ip route 2.0.0.0 255.0.0.0 1.1.1.2

基本访问控制列表 [Sysname] acl basic 2000 router(config)#access-list permit|deny 扩展访问控制列表[Sysname] acl advanced 3000

router(config)#access-list 101 deny icmp any 10..0.2 0.0.0.0 echo

交换机显示当前配置display current-configuration router#show run 交换机显示端口信息[H3C]display interface router#show interface

添加本地用户 [H3C]local-user telnet R1(config)# username Bob secret cisco 将端口类型设置为trunk [H3C]port link-type trunk switch(config-if)#switchport mode trunk 关闭端口 [H3C-GigabitEthernet1/1/1]shutdown switch(config-if)#shutdown

设置生成树 [Quidway]stp {enable|disable} Switch(config)#spanning-tree vlan vlan-list 设置生成树模式为rstp [Quidway]stp mode rstp Switch(config)#spanning-tree vlan vlan-list mode rstp 设置交换机的优先级[Quidway]stp priority 4096

Switch(config-if)#spanning-tree vlan vlan-listport-priority

重新起动reboot router#reload

启动端口安全功能[Switch] port-security enable Switch(config-if)#switchport port-security

设置端口允许接入的最大MAC地址数[Switch-Ethernet1/0/1] port-security max-mac-count

Switch(config-if)switchport port-security maximum

配置端口的安全模式[Switch-Ethernet1/0/1] port-security port-mode autolearn

Switch(config-if)switchport port-security violation shutdown

添加一条默认路由[H3C]ip route-static 0.0.0.0 0.0.0.0 192.168.0.1

router(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.2

OSPF配置[H3C-ospf-1]area 1 router(config)#router ospf 10 宣告网络[H3C-ospf-1-area-0.0.0.1]abr-summary 192.168.0.0 255.255.0.0 not-advertise router(config-router)#neywork 192.168.1.0 0.0.0.255 area 0 将某个端口加入到vlan中[H3C-vlan100]port ethernet 0/1

Switch(config-if)#switchport access vlan 10

创建vlan虚拟口[H3C]interface vlan-interface 1 Switch(config)#int vlan 10 取消所有debug Ctrl+d Switch#no debug all 保存 [H3C]save Switch#write 查看vlan display vlan 10 Switch#show vlan brief 查看路由表 display ip routing-table Router#show ip route 删除命令 undo Switch#no

启用RIP [H3C]rip Router(config)#router rip 启用ospf [H3C]ospf Router(config)#router ospf 开启DHCP dhcp enable service dhcp 关闭DHCP undo dhcp enable no service dhcp 建立DHCP地址池 DHCP service ip-pool A ip dhcp pool A 删除DHCP地址池 undo dhcp service ip-pool A no ip dhcp pool A

定义地址池范围 network 192.168.100.0 network 192.168.100.1 255.255.255.0 删除地址池范围 undo neywork no network

被动接口 silent-interface g0/0 passive-interface g0/0 重分配静态路由 import-router static redistribute statistic subnet 定义DNS服务器地址 dns-list 10.10.8.9 dns-server 10.10.8.9 默认网关 getway-list 192.168.100.1 default-router 192.168.100.1

查看接口配置 dis int brief show int brief