华为S5700_交换机_操作手册
华为s5700交换机配置
华为s5700交换机配置1.通过串口和交换机的console口相连2. 在PC上单击“开始> 所有程序> 附件> 通讯> 超级终端”打开超级终端软件，如图4-15所示新建一个连接。
3. 设置连接端口，如图4-16所示。
14. 设置端口通信参数，如果用户配置过用户界面，参数需要保持一致，如果没配置过，则与设备缺省值保持一致。
图4-17 端口通信参数设置#添加VLAN<Quidway> system-view[Quidway] vlan 10[Quidway-vlan10] quit#设定端口模式<Quidway> system-view[Quidway] int gigabitethernet 0/0/21[Quidway-GigabitEthernet0/0/21] port link-type access[Quidway-GigabitEthernet0/0/21]quit#将端口加入Vlan<Quidway> system-view[Quidway] vlan 10[Quidway-vlan10] port gigabitethernet 0/0/21[Quidway- vlan10] quit#设置VLAN IP(管理IP)<Quidway> system-view[Quidway] interface vlanif 10[Quidway-Vlanif10] ip address 192.168.0.253 255.255.255.0[Quidway- Vlanif10] shutdown[Quidway- Vlanif10] undo shutdown#开启http 服务< Quidway >dirDirectory of flash:/Idx Attr Size(Byte) Date Time FileName0 -rw- 955 Feb 09 2012 16:16:09 private-data.txt1 -rw- 1,089,840 Jan 01 1970 00:02:05S5700SI-V100R005C01SPC100.web.zip2 -rw- 10,215,068 Oct 01 2008 00:02:28 3 -rw- 626,426 Jan 01 1970 00:03:17 s27_37_57-v100r005sph008.pat4 -rw- 12,240 Jan 01 1970 00:03:19 $_patchstate_reboot5 -rw- 706 Feb 09 2012 17:33:05 vrpcfg.zip31,620 KB total (19,928 KB free)< Quidway >system-view[Quidway]http server load S5700SI-V100R005C01SPC100.web.zip[Quidway]http server enable设置电脑ip和192.168.0.253 在同一网段并且电脑能够和192.168.0.253ping通检测方法：浏览器打开http://192.168.0.253User:admin Pwd:admin#重启[Quidway] reboot。
华为 S系列 S2750 S5700 S6700 交换机 配置指南-接口管理
和其他华为商标均为华为技术有限公司的商标。 本文档提及的其他所有商标或注册商标，由各自的所有人拥有。
注意 您购买的产品、服务或特性等应受华为公司商业合同和条款的约束，本文档中描述的全部或部分产品、服务或 特性可能不在您的购买或使用范围之内。除非合同另有约定，华为公司对本文档内容不做任何明示或默示的声 明或保证。
2 以太网接口配置.............................................................................................................................10
2.1 以太网接口简介..........................................................................................................................................................11 2.2 规格..............................................................................................................................................................................12 2.3 缺省配置......................................................................................................................................................................13 2.4 配置端口组..................................................................................................................................................................14 2.5 配置以太网接口..........................................................................................................................................................14 2.5.1 配置 Combo 接口工作模式.....................................................................................................................................14 2.5.2 配置 MDI 类型.........................................................................................................................................................15 2.5.3 配置电缆检测...........................................................................................................................................................16 2.5.4 配置自协商功能.......................................................................................................................................................17 2.5.5 配置双工模式...........................................................................................................................................................17 2.5.6 配置接口速率...........................................................................................................................................................18 2.5.7 配置流量控制...........................................................................................................................................................19 2.5.8 配置端口隔离...........................................................................................................................................................20 2.5.9 配置帧间隙...............................................................................................................................................................21 2.5.10 配置允许超大帧通过.............................................................................................................................................22 2.5.11 配置切换到三层模式.............................................................................................................................................22 2.5.12 配置上报状态变化延时时间.................................................................................................................................23
华为s5700交换机配置全局地址池dhcp
SW1配置如下：<Huawei><Huawei>sy<Huawei>system-view （进入全局模式）Enter system view, return user view with Ctrl+Z.[Huawei]sy[Huawei]sysname SW1 ( 设备命名）[SW1][SW1]d[SW1]dhcp en[SW1]dhcp enable （使用DHCP功能）Info: The operation may take a few seconds. Please wait for a moment.done.[SW1][SW1]ip pool 10 （创建全局地址池，同时进入全局地址池视图）Info:It's successful to create an IP address pool.[SW1-ip-pool-10]netw[SW1-ip-pool-10]network 192.168.10.0 m[SW1-ip-pool-10]network 192.168.10.0 mask 24（配置全局地址池可动态分配的IP地址范围）[SW1-ip-pool-10][SW1-ip-pool-10]dns-list 8.8.8.8 （配置DNS ）[SW1-ip-pool-10][SW1-ip-pool-10]gateway-list 192.168.10.1 （配置网关）[SW1-ip-pool-10]ex[SW1-ip-pool-10]excluded-ip-address 192.168.10.201 192.168.10.254 （保留不被分配的地址）[SW1-ip-pool-10][SW1-ip-pool-10]lease d[SW1-ip-pool-10]lease day 7 （IP租约期限）[SW1-ip-pool-10][SW1-ip-pool-10]dis this （查询当前模式的配置）#ip pool 10gateway-list 192.168.10.1 （网关）network 192.168.10.0 mask 255.255.255.0 （IP地址范围）excluded-ip-address 192.168.10.201 192.168.10.254 （保留IP地址范围）lease day 7 hour 0 minute 0 （IP租约周期）dns-list 8.8.8.8#return[SW1-ip-pool-10][SW1-ip-pool-10][SW1-ip-pool-10]quit (退出）[SW1][SW1][SW1][SW1]ip pool 20Info:It's successful to create an IP address pool.[SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]netw[SW1-ip-pool-20]network 192.168.20.0 m[SW1-ip-pool-20]network 192.168.20.0 mask 24[SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]d[SW1-ip-pool-20]dns-list 8.8.8.8[SW1-ip-pool-20][SW1-ip-pool-20]g[SW1-ip-pool-20]gateway-list 192.168.20.1[SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]ex[SW1-ip-pool-20]excluded-ip-address 192.168.20.201 192.168.20.254 [SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]l[SW1-ip-pool-20]lease d[SW1-ip-pool-20]lease day 7[SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]dis this#ip pool 20gateway-list 192.168.20.1network 192.168.20.0 mask 255.255.255.0excluded-ip-address 192.168.20.201 192.168.20.254lease day 7 hour 0 minute 0dns-list 8.8.8.8#return[SW1-ip-pool-20][SW1-ip-pool-20][SW1-ip-pool-20]q[SW1][SW1][SW1]v[SW1]vlan b[SW1]vlan batch 10 20 （批量创建vlan）Info: This operation may take a few seconds. Please wait for a moment...done. [SW1][SW1][SW1]int[SW1]interface g[SW1]interface GigabitEthernet 0/0/1 （进入port 1)[SW1-GigabitEthernet0/0/1]por[SW1-GigabitEthernet0/0/1]port l[SW1-GigabitEthernet0/0/1]port link-t[SW1-GigabitEthernet0/0/1]port link-type a[SW1-GigabitEthernet0/0/1]port link-type access (配置port 1 类型）[SW1-GigabitEthernet0/0/1][SW1-GigabitEthernet0/0/1][SW1-GigabitEthernet0/0/1]port[SW1-GigabitEthernet0/0/1]port def[SW1-GigabitEthernet0/0/1]port default v[SW1-GigabitEthernet0/0/1]port default vlan 10 （配置port 1 vlan) [SW1-GigabitEthernet0/0/1][SW1-GigabitEthernet0/0/1]quit (退出）[SW1][SW1]int[SW1]interface g[SW1]interface GigabitEthernet 0/0/2[SW1-GigabitEthernet0/0/2][SW1-GigabitEthernet0/0/2][SW1-GigabitEthernet0/0/2][SW1-GigabitEthernet0/0/2]por[SW1-GigabitEthernet0/0/2]port l[SW1-GigabitEthernet0/0/2]port link-t[SW1-GigabitEthernet0/0/2]port link-type a[SW1-GigabitEthernet0/0/2]port link-type access[SW1-GigabitEthernet0/0/2][SW1-GigabitEthernet0/0/2]por[SW1-GigabitEthernet0/0/2]port def[SW1-GigabitEthernet0/0/2]port default v[SW1-GigabitEthernet0/0/2]port default vlan 20[SW1-GigabitEthernet0/0/2][SW1-GigabitEthernet0/0/2]quit[SW1][SW1][SW1][SW1]int[SW1]interface v （配置VLANIF10接口下的客户端从全局地址池中获取IP地址）[SW1]interface Vlanif 10 （创建vlanif 10)[SW1-Vlanif10][SW1-Vlanif10][SW1-Vlanif10]ip add[SW1-Vlanif10]ip address 192.168.10.1 24 (配置IP地址）[SW1-Vlanif10][SW1-Vlanif10]dhcp sel[SW1-Vlanif10]dhcp select g[SW1-Vlanif10]dhcp select global （在vlanif 10模式下调用全局地址池）[SW1-Vlanif10][SW1-Vlanif10][SW1-Vlanif10]dis[SW1-Vlanif10]display this （查询当前配置参数）#interface Vlanif10ip address 192.168.10.1 255.255.255.0dhcp select global#return[SW1-Vlanif10][SW1-Vlanif10][SW1-Vlanif10]quit[SW1][SW1][SW1]int[SW1]interface v[SW1]interface Vlanif 20[SW1-Vlanif20][SW1-Vlanif20][SW1-Vlanif20]ip add[SW1-Vlanif20]ip address 192.168.20.1 24 [SW1-Vlanif20][SW1-Vlanif20]dhcp[SW1-Vlanif20]dhcp sel[SW1-Vlanif20]dhcp select g[SW1-Vlanif20]dhcp select global[SW1-Vlanif20][SW1-Vlanif20]dis this#interface Vlanif20ip address 192.168.20.1 255.255.255.0dhcp select global#return[SW1-Vlanif20][SW1-Vlanif20][SW1-Vlanif20]quit[SW1][SW1]dis[SW1]display ip pool （查看IP地址池配置情况）-----------------------------------------------------------------------Pool-name : 10Pool-No : 0Position : Local Status : UnlockedGateway-0 : 192.168.10.1Mask : 255.255.255.0VPN instance : -------------------------------------------------------------------------Pool-name : 20Pool-No : 1Position : Local Status : Unlocked Gateway-0 : 192.168.20.1Mask : 255.255.255.0VPN instance : --IP address StatisticTotal :506Used :0 Idle :398Expired :0 Conflict :0 Disable :108 [SW1][SW1][SW1]quit<SW1><SW1><SW1>save （保存配置，写入设备）The current configuration will be written to the device.Are you sure to continue?[Y/N]yNow saving the current configuration to the slot 0.Mar 18 2017 13:30:47-08:00 SW1 %%01CFM/4/SAVE(l)[63]:The user chose Y when deciding whether to save the configuration to the device.Save the configuration successfully.<SW1>PC情况如下。
QuidwayS5700系列交换机V100R006C00-01配置一指禅
QuidwayS5700系列交换机V100R006C00-01配置一指禅产品概述QuidwayS5700系列全千兆企业网交换机（以下简称S5700），是华为公司为满足大带宽接入和以太网多业务汇聚而推出的新一代绿色节能的全千兆高性能以太网交换机。
它基于新一代高性能硬件和华为公司统一的VRP（VeratileRoutingPlatform）平台，具备大容量、高密度千兆端口，可提供万兆上行，充分满足客户对高密度千兆和万兆上行设备的需求，同时针对企业网用户的园区网接入、汇聚、IDC千兆接入以及千兆到桌面等多种应用场景，融合了可靠、安全、绿色环保等先进技术，采用简单便利的安装维护手段，帮助客户减轻网络规划、建设和维护的压力，助力企业搭建面向未来的IT网络。
S5700系列以太网交换机为盒式设备，机箱高度为1U，提供标准型（SI）和增强型（EI）两种产品版本。
标准型支持二层和基本的三层功能，增强型支持复杂的路由协议和更为丰富的业务特性。
配置步骤指导配置S5700交换机的典型步骤：选型号-》选配件-》选特殊配件–》选辅料1.选型号：1）根据上下行端口/电源/POE/特性需求选择合适的设备：EIVSSISIEIMAC8K16K单播路由4K12KBGPNY静态路由1K1KRIPYYISISNYPIMNYIGMPNYPBRNYUSBNY3）选择是否需要POE机型：如果企业需要交换机下联IPPhone，蓝牙AP等PD设备，需要使用POE机型，S5700POE机型每端口最高支持30W供电功率。
2.选配件：1）选电源模块：S5700-24TP、S5700-48TP非PWR系列主机中已经包含电源；S5700的其他非POE机型根据需要配置交流（编码02316784，型号：LS5M100PWA00）或者直流（编码：02316783，型号：LS5M100PWD00）电源模块，可支持1+1电源备份；S5700的POE机型根据下挂PD设备的数量和功率进行电源模块。
S5700交换机初始化和配置
华为S5700交换机初始化和配置TELNET远程登录方法：1,交换机开启Telnet服务<Huawei>system-view #进入系统视图[Huawei]telnet server ？ #查看有enable还是disable选项，选择对应的开启方式。
[Huawei]telnet server enable #enable选项开启Telnet服务（普通系列一般为这个）[Huawei]undo telnet server disable #disable选项开启Telnet服务（CE高端系列一般为这个）2，配置VTY用户界面的最大个数（同时可以登录的最大数）[Huawei]user-interface maximum-vty 15 #默认是5，这个可以不设置3，配置VTY用户界面的终端属性[Huawei]user-interface vty 0 14 #上面是15所有这里是0 14 如果选择默认这里是0 4 [Huawei-ui-vty0-14]protocol inbound telnet #配置vty支持telnet协议4，配置VTY用户界面的用户验证方式[Huawei-ui-vty0-14]authentication-mode aaa #配置用户终端的身份验证模式为aaa认证为aaa认证[Huawei-ui-vty0-14]quit #退出vty配置界面5，配置登录验证方式[Huawei]aaa #进入aaa配置模式[Huawei-aaa]local-user admin1234 password ? #查看可以选择的密码选择[Huawei-aaa]local-user admin1234 password simple Huawei1234 #密码选项simple 账号admin1234 密码Huawei1234 (普通系列一般为这个)[Huawei-aaa]local-user admin1234 password irreversible-cipher Huawei12#$ #密码选项irreversible-cipher 账号admin1234 密码Huawei12#$ (CE高端系列一般为这个)[Huawei-aaa]local-user admin1234 service-type telnet #配置接入服务类型，如果还需要SSH 登录请加上[Huawei-aaa]local-user admin1234 privilege level 3 #配置账号的级别，默认3级是超级管理员的权限[Huawei-aaa]quit #退出<Huawei>telnet 127.0.0.1 #测试telnet配置是否OK<Huawei>save #保存配置===================================================================华为S5700交换机初始化和配置SSH和TELNET远程登录方法：AAA是指：authentication（认证）、authorization（授权）、accounting（计费）的简称，是网络安全的一种管理机制；Authentication是本地认证/授权，authorization和accounting是由远处radius（远程拨号认证系统）服务或hwtacacs（华为终端访问控制系统）服务器完成认证/授权；AAA是基于用户进行认证、授权、计费的，而NAC方案是基于接入设备接口进行认证的,在实际应用中，可以使用AAA的一种或两种服务。
华为 Quidway S5700 系列以太网交换机 V100R005C01 说明书
Quidway S5700系列以太网交换机V100R005C01产品描述文档版本01发布日期2010-09-10华为技术有限公司版权所有 © 华为技术有限公司 2010。
保留一切权利。
非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。
商标声明和其他华为商标均为华为技术有限公司的商标。
本文档提及的其他所有商标或注册商标，由各自的所有人拥有。
注意您购买的产品、服务或特性等应受华为公司商业合同和条款的约束，本文档中描述的全部或部分产品、服务或特性可能不在您的购买或使用范围之内。
除非合同另有约定，华为公司对本文档内容不做任何明示或默示的声明或保证。
由于产品版本升级或其他原因，本文档内容会不定期进行更新。
除非另有约定，本文档仅作为使用指导，本文档中的所有陈述、信息和建议不构成任何明示或暗示的担保。
华为技术有限公司地址：深圳市龙岗区坂田华为总部办公楼邮编：518129网址：客户服务邮箱：support@客户服务电话：0755-******** 4008302118客户服务传真：0755-********Quidway S5700系列以太网交换机产品描述前言前言读者对象本文档针对S5700设备，介绍了产品定位和特点、产品架构、链路特性、业务特性、应用场景、操作和维护、技术指标。
本文档提供S5700设备的总体情况，便于读者全面了解产品特征。
本文档主要适用于以下工程师：l网络规划工程师l硬件安装工程师l调测工程师l数据配置工程师l现场维护工程师l网络监控工程师l系统维护工程师符号约定在本文中可能出现下列标志，它们所代表的含义如下。
修订记录修改记录累积了每次文档更新的说明。
最新版本的文档包含以前所有文档版本的更新内容。
文档版本 01 (2010-09-10)第一次正式发布。
前 言Quidway S5700系列以太网交换机产品描述Quidway S5700系列以太网交换机产品描述目录目录前言 (iii)1 产品定位和特点............................................................................................................................1-11.1 产品定位.........................................................................................................................................................1-21.2 产品特点.........................................................................................................................................................1-21.2.1 电信级的可维护性................................................................................................................................1-21.2.2 强大的多业务接入能力........................................................................................................................1-31.2.3 灵活的组网能力....................................................................................................................................1-31.2.4 网络级QoS保障...................................................................................................................................1-31.2.5 多层面的扩展能力................................................................................................................................1-31.2.6 周密的安全措施....................................................................................................................................1-31.2.7 便捷的操作维护....................................................................................................................................1-41.2.8 绿色节能设计........................................................................................................................................1-41.2.9 先进的防雷技术....................................................................................................................................1-41.2.10 人性化的PoE供电方式.....................................................................................................................1-42 产品架构........................................................................................................................................2-12.1 概述.................................................................................................................................................................2-22.2 整机结构.........................................................................................................................................................2-22.3 硬件模块.........................................................................................................................................................2-72.3.1 交换主控板............................................................................................................................................2-82.3.2 电源........................................................................................................................................................2-82.3.3 风扇........................................................................................................................................................2-82.3.4 插卡........................................................................................................................................................2-82.4 软件结构.........................................................................................................................................................2-93 链路特性........................................................................................................................................3-13.1 以太网特性.....................................................................................................................................................3-23.1.1 链路聚合................................................................................................................................................3-23.1.2 接口流控................................................................................................................................................3-23.1.3 流量抑制................................................................................................................................................3-23.1.4 VLAN.....................................................................................................................................................3-33.1.5 QinQ.......................................................................................................................................................3-53.2 STP/RSTP/MSTP............................................................................................................................................3-53.2.1 STP和RSTP.........................................................................................................................................3-53.2.2 MSTP.....................................................................................................................................................3-53.2.3 MSTP 保护功能....................................................................................................................................3-63.2.4 局部STP 和BPDU 隧道......................................................................................................................3-63.3 RRPP...............................................................................................................................................................3-73.3.1 RRPP 环网组成.....................................................................................................................................3-73.3.2 RRPP 工作机制.....................................................................................................................................3-73.3.3 多种拓扑结构........................................................................................................................................3-73.4 Smart Link.......................................................................................................................................................3-83.5 SEP..................................................................................................................................................................3-83.6 接口安全保护.................................................................................................................................................3-93.7 链路检测.........................................................................................................................................................3-94 业务特性........................................................................................................................................4-14.1 IPv4转发........................................................................................................................................................4-24.1.1 IPv4特性...............................................................................................................................................4-24.1.2 单播路由特征........................................................................................................................................4-24.1.3 组播路由特性........................................................................................................................................4-24.2 IPv6.................................................................................................................................................................4-34.3 路由协议.........................................................................................................................................................4-34.4 组播.................................................................................................................................................................4-34.4.1 IGMP Snooping......................................................................................................................................4-44.4.2 IGMP Proxy...........................................................................................................................................4-44.4.3 组播成员接口快速离开........................................................................................................................4-44.4.4 组播流量控制........................................................................................................................................4-44.4.5 跨VLAN 组播复制...............................................................................................................................4-44.4.6 可控组播................................................................................................................................................4-44.5 QoS..................................................................................................................................................................4-44.5.1 流分类....................................................................................................................................................4-54.5.2 访问控制和重标记................................................................................................................................4-54.5.3 流量监管................................................................................................................................................4-54.5.4 拥塞管理................................................................................................................................................4-64.5.5 拥塞避免................................................................................................................................................4-64.5.6 接口限速................................................................................................................................................4-64.5.7 支持双速三色........................................................................................................................................4-64.5.8 支持聚合CAR.......................................................................................................................................4-74.6 安全.................................................................................................................................................................4-74.6.1 设备的安全............................................................................................................................................4-74.6.2 业务的安全............................................................................................................................................4-84.6.3 安全认证................................................................................................................................................4-84.7 MAC 强制转发...............................................................................................................................................4-94.8 DHCP............................................................................................................................................................4-104.9 网络级可靠性...............................................................................................................................................4-104.9.1 MSTP 保护倒换..................................................................................................................................4-11目 录Quidway S5700系列以太网交换机产品描述Quidway S5700系列以太网交换机产品描述目录4.9.2 RRPP快速保护倒换...........................................................................................................................4-114.9.3 Smart Link双归属保护.......................................................................................................................4-114.9.4 以太网OAM........................................................................................................................................4-114.10 LLDP...........................................................................................................................................................4-124.11 NQA............................................................................................................................................................4-124.12 集群管理.....................................................................................................................................................4-124.13 堆叠.............................................................................................................................................................4-134.14 Web Server..................................................................................................................................................4-135 特性组网应用................................................................................................................................5-15.1 企业网络和园区网的汇聚.............................................................................................................................5-25.2 桌面终端接入.................................................................................................................................................5-25.3 iStack技术的应用..........................................................................................................................................5-35.4 作为小型企业的核心设备.............................................................................................................................5-46 操作维护和网管系统....................................................................................................................6-16.1 维护和管理.....................................................................................................................................................6-26.1.1 多种配置方式........................................................................................................................................6-26.1.2 监控和维护............................................................................................................................................6-26.1.3 诊断和调测............................................................................................................................................6-36.1.4 软件升级和热补丁................................................................................................................................6-46.1.5 硬件异常处理........................................................................................................................................6-46.2 U2000网管.....................................................................................................................................................6-46.2.1 网管组网方式........................................................................................................................................6-46.2.2 U2000网管站........................................................................................................................................6-57 系统技术指标................................................................................................................................7-17.1 物理参数.........................................................................................................................................................7-27.2 光模块属性.....................................................................................................................................................7-37.3 系统配置.........................................................................................................................................................7-57.4 软件特性列表.................................................................................................................................................7-6Quidway S5700系列以太网交换机产品描述插图目录插图目录图2-1 S5700-28C-EI-24S产品外观....................................................................................................................2-2图2-2 S5700-28C-EI产品外观...........................................................................................................................2-2图2-3 S5700-28C-PWR-EI产品外观.................................................................................................................2-3图2-4 S5700-28C-SI产品外观...........................................................................................................................2-3图2-5 S5700-52C-EI产品外观...........................................................................................................................2-4图2-6 S5700-52C-PWR-EI产品外观.................................................................................................................2-4图2-7 S5700-52C-SI产品外观...........................................................................................................................2-4图2-8 S5700-24TP-SI-AC产品外观...................................................................................................................2-5图2-9 S5700-24TP-SI-DC产品外观...................................................................................................................2-5图2-10 S5700-48TP-SI产品正面外观...............................................................................................................2-5图2-11 S5700-48TP-SI-AC产品背面外观.........................................................................................................2-5图2-12 S5700-48TP-SI-DC产品背面外观.........................................................................................................2-6图2-13 S5700-24TP-PWR-SI产品外观.............................................................................................................2-6图2-14 S5700-48TP-PWR-SI产品外观.............................................................................................................2-7图2-15 S5700硬件模块的逻辑结构..................................................................................................................2-7图4-1接入层连接示意图....................................................................................................................................4-9图5-1企业网络和园区网的接入........................................................................................................................5-2图5-2桌面终端接入............................................................................................................................................5-3图5-3 iStack技术的应用.....................................................................................................................................5-4图5-4作为小型企业的核心设备........................................................................................................................5-4Quidway S5700系列以太网交换机产品描述表格目录表格目录表7-1物理参数....................................................................................................................................................7-2表7-2 ESFP光模块(FE)的属性..........................................................................................................................7-3表7-3 ESFP光模块（GE）的属性....................................................................................................................7-4表7-4 ESFP光模块（CWDM彩光）的属性....................................................................................................7-4表7-5 SFP+光模块（10GE）的属性.................................................................................................................7-5表7-6系统配置....................................................................................................................................................7-5表7-7功能特性列表............................................................................................................................................7-6Quidway S5700系列以太网交换机产品描述 1 产品定位和特点1产品定位和特点关于本章1.1 产品定位1.2 产品特点1.1 产品定位Quidway S5700系列以太网交换机为A 类产品，在生活环境中，该产品可能会造成无线电干扰。
最新整理华为S5700交换机端口镜像配置命令教程
华为S5700交换机端口镜像配置命令教程交换机除了能够连接同种类型的网络之外，还可以在不同类型的网络(如以太网和快速以太网)之间起到互连作用。
华为S5700交换机配置怎么端口镜像?今天我们通过电脑的c o m接口连接华为交换机为例，来显示交换机配置端口镜像的图文教程，过程很简单，需要的朋友可以参考下方法帮助1、演示环境中是通过电脑的c o m接口连接华为交换机的，你也可以通过t e l n e t来操作2、先确认你电脑的c o m接口编号3、然后运行超级终端工具4、选择你电脑的c o m接口编号5、设置比特率6、成功登陆交换机7、在系统视图下配置端口镜像先配置观察端口[Q u i d w a y]o b s e r v e-p o r t1i n t e r f a c eG i g a b i t E t h e r n e t0/0/248、然后再进入需要镜像的端口[Q u i d w a y]i n t e r f a c e G i g a b i t E t h e r n e t0/0/239、在配置镜像端口模式[Q u i d w a y-G i g a b i t E t h e r n e t0/0/23]p o r t-m i r r o r i n g t o o b s e r v e-p o r t1b o t h10、配置完成之后用d i s p l a y c u r r e n t查看下配置11、剩下的就是你吧电脑接入到24端口来观察23端口的数据了相关阅读：交换机工作原理过程交换机工作于O S I参考模型的第二层，即数据链路层。
交换机内部的C P U会在每个端口成功连接时，通过将M A C地址和端口对应，形成一张M A C表。
在今后的通讯中，发往该M A C地址的数据包将仅送往其对应的端口，而不是所有的端口。
因此，交换机可用于划分数据链路层广播，即冲突域;但它不能划分网络层广播，即广播域。
华为S5700交换机端口镜像配置命令教程
华为S5700交换机端口镜像配置命令教程交换机除了能够连接同种类型的网络之外，还可以在不同类型的网络(如以太网和快速以太网)之间起到互连作用。
华为S5700交换机配置怎么端口镜像?今天我们通过电脑的com接口连接华为交换机为例，来显示交换机配置端口镜像的图文教程，过程很简单，需要的朋友可以参考下方法帮助1、演示环境中是通过电脑的com接口连接华为交换机的，你也可以通过telnet来操作2、先确认你电脑的com接口编号3、然后运行超级终端工具4、选择你电脑的com接口编号5、设置比特率6、成功登陆交换机7、在系统视图下配置端口镜像先配置观察端口[Quidway]observe-port1 interface GigabitEthernet 0/0/248、然后再进入需要镜像的端口[Quidway]interfaceGigabitEthernet 0/0/239、在配置镜像端口模式[Quidway-GigabitEthernet0/0/23]port-mirroringto observe-port 1 both10、配置完成之后用display current 查看下配置11、剩下的就是你吧电脑接入到24端口来观察23端口的数据了相关阅读：交换机工作原理过程交换机工作于OSI参考模型的第二层，即数据链路层。
交换机内部的CPU会在每个端口成功连接时，通过将MAC地址和端口对应，形成一张MAC表。
在今后的通讯中，发往该MAC地址的数据包将仅送往其对应的端口，而不是所有的端口。
因此，交换机可用于划分数据链路层广播，即冲突域;但它不能划分网络层广播，即广播域。
交换机拥有一条很高带宽的背部总线和内部交换矩阵。
交换机的所有的端口都挂接在这条背部总线上，控制电路收到数据包以后，处理端口会查找内存中的地址对照表以确定目的MAC(网卡的硬件地址)的NIC(网卡)挂接在哪个端口上，通过内部交换矩阵迅速将数据包传送到目的端口，目的MAC若不存在，广播到所有的端口，接收端口回应后交换机会“学习”新的MAC地址，并把它添加入内部MAC地址表中。
s5700 ssh用法
s5700 ssh用法SSH（Secure Shell）是一种加密的网络传输协议，用于在不安全的网络环境中实现安全的远程登录和数据传输。
华为S5700系列交换机支持SSH功能，可以帮助您安全地管理网络设备。
要在S5700交换机上使用SSH，请按照以下步骤操作：1. 配置加密密钥：交换机上配置SSH时，首先需要生成一对加密密钥，用于加密和解密数据。
使用以下命令配置加密密钥：```crypto key generate rsa```2. 配置SSH：使用以下命令启用SSH服务，并设置端口号、加密算法等参数：```interface vlan 1ip address 192.168.1.1 255.255.255.0crypto map SSL-MAP-1map ip address 192.168.1.1 255.255.255.0map layer 3 address 192.168.1.1 255.255.255.0```3. 配置登录认证：使用以下命令配置SSH登录认证，指定用户名和密码：```user-interface vlan 1authentication ip-address your-username your-password ```4. 保存配置：使用以下命令保存配置：```save```完成以上步骤后，您可以通过SSH客户端（如PuTTY）连接到S5700交换机。
在使用SSH连接时，请确保使用正确的IP地址、端口号、用户名和密码。
需要注意的是，为了保证安全，建议使用加密的SSH传输数据，避免使用明文传输。
同时，定期更改密码也是提高安全性的重要措施。
华为S5700交换机如何从web登录
华为S5700交换机如何从web登录需要使用通讯控制线缆连接电脑和交换机,一头接交换机的Console口,一头接电脑(应该需要串口,没有的话得用USB转串口).在PC机上运行终端仿真程序,设置终端通信参数为：波特率为9600bit/s、8位数据位、1位停止位、无校验和无流控，并选择终端类型为VT100.下面抄一段控制台界面登录后的手册内容:[H3C] local-user admin（设置用户名为admin）[H3C-luser-admin] service-type telnet level 3（设置级别3）[H3C-luser-admin] password simple admin（设置密码admin）在通过WEB方式登录以太网交换机之前，用户先通过Console口正确配置以太网交换机管理VLAN接口的IP地址。
通过Console口在超级终端中执行以下命令，配置以太网交换机管理VLAN的IP地址。
<H3C> system-view[H3C] interface Vlan-interface 1（进入管理VLAN）[H3C-Vlan-interface1] undo ip address（取消管理VLAN原有的IP地址）[H3C-Vlan-interface1] ip address （配置以太网交换机管理VLAN的IP地址为，子网掩码为）交换机是没有初始IP的，先按楼上说的方法用控制线连接交换机，再用网线连接交换机，给电脑配上（这里的IP地址可随便定）的ip地址。
<Quidway>sys[Quidway]int vlan 1[Quidway]iP add （这里的IP地址要与电脑里的IP地址在同一网段）[Quidway]q[Quidway]q<Quidway>dir找到类似的文件名，找后缀是.的复制下来<Quidway>sys[Quidway]http server load “这里是复制下来web的文件名”[Quidway]http server enable[Quidway]aaa[Quidway]local-user “用户名” password simple “密码”[Quidway]local-user “用户名” service-type http[Quidway]quit[Quidway]quit<Quidway>save例<Quidway>sys[Quidway]http server load[Quidway]http server enable[Quidway]aaa[Quidway]local-user admin password simple admin123 [Quidway]local-user admin service-type http [Quidway]quit<Quidway>saveY注：如果没有文件就不能开启web。
华为S5700-LI系列简化高速ги格比交换机产品介绍说明书
BrochureProduct OverviewBuilding on next-generation, high-performance hardware and the Huawei Versatile Routing Platform (VRP), the S5700-LI supports Advanced Hibernation Management (AHM), intelligent stack (iStack), flexible Ethernet networking, and diversified security control. It provides customers with a green, easy-to-manage, easy-to-expand, and cost-effective gigabit to the desktop solution. In addition, Huawei customizes specialized models to meet customer requirements to suit special scenarios.● Huawei S5700-LI-BAT series battery LAN switches (S5700-LI-BAT for short) are the industry's first switch series to support batteries and provide visualized battery status management. The S5700-LI-BAT can ensure uninterrupted services inenvironments facing frequent mains power failures at the access layer. Access switches are usually distributed; therefore, it is costly and space-consuming to deploy high-performance Uninterruptible Power Supplies (UPSs) for the access switches.Huawei battery LAN switches solve this problem. The use of batteries ensures stable operation of the access layer in the event of mains power failures.● CSFP switches support downlink CSFP ports, and each downlink CSFP port provides 2 Gbit/s bandwidth bidirectionally. CSFP switches apply to scenarios where users increase continuously and demand higher bandwidth, and scenarios where deploying fibers is costly and difficult and construction timeframes are long. The switches with front power sockets can be installed in the 300 mm deep cabinet.Models and AppearancesModels and AppearancesDescriptionS5700-28P-LI-BAT●24x10/100/1000Base-T Ethernet ports, 4xGE SFP ports ● AC power supply●One battery slot for an external lead-acid battery used in the event of a mains power failure or a 150 W AC or DC power module used as the redundant power source ● Forwarding performance: 42 Mpps ● Switching Capacity: 256 GbpsS5700-28P-LI-24S-BAT●28 xGE SFP ports, 4 xCombo 10/100/1000Base-T Ethernet ports ● AC power supply●One battery slot for an external lead-acid battery used in the event of a mains power failure or a 150 W AC or DC power module used as the redundant power source ● Forwarding performance: 42 Mpps ●Switching Capacity: 256 GbpsS5700-52X-LI-48CS-AC ●48 xGE CSFP ports or 24 x GE SFP ports, 4 xCombo 10/100/1000Base-T Ethernetports, 4 x 10GE SFP+ ports●AC power supply, front power sockets, front access●Forwarding performance: 132 Mpps●Switching Capacity: 256 GbpsFeatures and HighlightsInnovative Energy Saving Design●The S5700-LI series smart energy-saving switches reduce power consumption without degrading system performance or user experience. The S5700-LI series uses innovative energy-saving technologies including energy efficient Ethernet (EEE), port power detection, dynamic CPU frequency adjustment, and device sleep mode. These technologies help reduce power consumption by adjusting power depending on the Up/Down states of links, presence/absence of optical modules, shutdown and undo shutdown operations on ports, and peak and off-peak hours. The S5700-LI series is the industry's first switch series that supports device sleep mode, and provides three energy saving modes to adapt to different usage scenarios: standard, basic, and deep modes.Flexible Ethernet Networking●In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP), the S5700-LI supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.●The S5700-LI supports SmartLink, which implements backup of uplinks. One S5700-LI switch can connect to multiple aggregation switches through multiple links, significantly improving reliability of access devices.●The S5700-LI supports Ethernet OAM (IEEE 802.3ah/802.1ag) to fast-detect link faults.Diversified Security Control●The S5700-LI supports 802.1x authentication, MAC address authentication, and combined authentication on a per port basis, as well as Portal authentication on a per VLANIF interface basis, and implements dynamic policy delivery (VLAN, QoS, and ACL) to users.●The S5700-LI provides a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing of the DHCP CHADDR value.●The S5700-LI collects and maintains information about access users, such as IP addresses, MAC addresses, IP address leases, VLAN IDs, and interface numbers in a DHCP snooping binding table. In this way, IP addresses and access interfaces of DHCP users can be tracked. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.●The S5700-LI supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally.Easy Operation and Maintenance●The S5700-LI supports Huawei Easy Operation, a solution that provides zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment, batch configuration, and batch remote upgrade. The Easy Operation solution facilitates device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduces costs of operation and maintenance. The S5700-LI can be managed and maintained using Simple Network Management Protocol (SNMP) V1, V2, and V3, Command Line Interface (CLI), web-based network management system, or Secure Shell (SSH) V2.0. Additionally, it supports remote network monitoring (RMON), multiple log hosts, port traffic statistics collection, and network quality analysis that helps with network consolidation and reconstruction.●EasyDeploy: The Commander collects information about the topology of the client connecting to the Commander and saves client startup information based on the topology. The client can be replaced without configuration. Configuration and scripts can be delivered to the client in batches. In addition, the configuration delivery result can be queried.●The Commander can collect and display power consumption on the entire network.●The S5700-LI can use the GARP VLAN Registration Protocol (GVRP) to implement dynamic distribution, registration, and propagation of VLAN attributes. GVRP reduces manual configuration workload and ensures correct configuration. Additionally, the S5700-LI supports MUX VLAN, which involves a principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and separate VLANs. Ports in the principal VLAN can communicate with ports in subordinate VLANs. Ports in a subordinate group VLAN can communicate with each other, whereas ports in a subordinate separate VLAN can communicate only with ports in the principal VLAN. The S5700-LI also supports VLAN Central Management Protocol (VCMP) and VLAN-Based Spanning Tree (VBST) protocol.iStack●The S5700-LI supports intelligent stack (iStack). This technology combines multiple switches into a logical switch. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability. iStack provides high network scalability. You can increase ports, bandwidth, and processing capacity of a stack by simply adding member switches to the stack. iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in the stack to manage all the member switches in the stack.Excellent Network Traffic Analysis●The S5700-LI supports the sFlow function. It uses a method defined in the sFlow standard to sample traffic passing through it and sends sampled traffic to the collector in real time. The collected traffic statistics are used to generate statistical reports, helping enterprises maintain their networks.CSFP Providing High-density Access and Increased Bandwidth●CSFP switches support downlink CSFP ports. Each downlink CSFP port equipped with a CSFP GE optical module and one pair of fibers can provide 2 Gbit/s bandwidth bidirectionally, which is two times the bandwidth of standard SFP optical modules. The 24 downlink CSFP ports can provide 48 Gbit/s bandwidth bidirectionally, implementing high-density access (equal to access of 48 standard SFP ports) and saving the cost of deploying fibers and adding optical modules.Easy O&M with Front Panel●The models with front power sockets can be installed in a 300 mm deep cabinet, and can be maintained through the front panel. This simplifies operation and maintenance. The cabinets can be placed against the wall or back to back, and is well-suited for shallow cabinets and limited equipment room space.Product SpecificationsFixed ports ●S5700-28P-LI-BAT: 24 10/100/1000Base-TEthernet ports, 4 GE SFP ports●S5700-28P-LI-24S-BAT: 28 GE SFP ports,4 Combo 10/100/1000Base-T Ethernetports 48 GE CSFP ports or 24 GE SFP ports, 4 Combo 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ portsMAC address table 16K MAC address entriesMAC address learning and agingStatic, dynamic, and blackhole MAC address entriesPacket filtering based on source MAC addressesInterface-based MAC learning limitingVLAN features 4K VLANsGuest VLAN and voice VLANGVRPMUX VLANVLAN assignment based on MAC addresses, protocols, IP subnets, policies, and interfaces1:1 and N:1 VLAN mappingJumbo frame 10KReliability RRPP ring topology and RRPP multi-instanceSmart Link tree topology and Smart Link multi-instance, providing millisecond-level protectionswitchoverSEPERPS (G.8032)STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)BPDU protection, root protection, and loop protectionBPDU tunnelIP routing Static route, RIP, RIPngIPv6 features Neighbor Discovery (ND)Path MTU (PMTU)IPv6 ping, IPv6 tracert, and IPv6 TelnetACLs based on the source IPv6 address, destination IPv6 address, Layer 4 ports, and protocol typeMLDv1/v2 snoopingMulticast IGMPv1/v2/v3 snooping and IGMP fast leaveMulticast forwarding in a VLAN and multicast replication between VLANsMulticast load balancing among member ports of a trunkControllable multicastInterface-based multicast traffic statisticsQoS/ACL Rate limiting on packets sent and received by an interfacePacket redirectionInterface-based traffic policing and two-rate and three-color CAREight queues on each interfaceWRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithmsRe-marking of the 802.1p priority and DSCP priorityPacket filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address,destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocoltype, and VLAN IDRate limiting in each queue and traffic shaping on interfacesSecurity Hierarchical user management and password protectionDoS attack defense, ARP attack defense, and ICMP attack defenseBinding of the IP address, MAC address, interface number, and VLAN IDPort isolation, port security, and sticky MACMFFBlackhole MAC address entriesLimit on the number of learned MAC addressesIEEE 802.1x authentication and limit on the number of users on an interfaceAAA authentication, RADIUS authentication, HWTACACS authentication, and NACSSH V2.0Hypertext Transfer Protocol Secure (HTTPS)CPU defenseBlacklist and whitelistAccess Security DHCP relay, DHCP server, DHCP snooping, and DHCP securityLightning protection Service interface: 6 kV Service interface: 2 kVSuper Virtual Fabric (SVF) Working as an SVF client that is plug-and-play with zero configuration Automatically loading the system software package and patches of clients One-click and automatic delivery of service configurationsSupports independent running clientManagement and maintenance iStack (excluding battery LAN switches)Virtual Cable Test (VCT)Remote configuration and maintenance using Telnet SNMPv1/v2c/v3RMONeSight and web-based NMSHTTPSLLDP/LLDP-MEDSystem logs and multi-level alarms802.3az EEEDying Gasp (excluding battery LAN switches)Interoperability Supports VBST (Compatible with PVST/PVST+/RPVST)Supports LNP (Similar to DTP)Supports VCMP (Similar to VTP)Operating environment ●Long-term operating temperature: 0°C to45°C●Relative humidity: 5% to 95% (non-condensing)●Long-term operating temperature: 0°C to 45°C●Relative humidity: 5% to 95% (non-condensing)Input voltage AC:●Rated voltage range: 100 V to 240 V AC,50/60 Hz●Maximum voltage range: 90 V to 264 V AC,47/63 HzDC:●Rated voltage range: –48 V to –60 V, DC●Maximum voltage range: –36 V to –72 V,DC AC:●Rated voltage range: 100 V to 240 V AC, 50/60Hz●Maximum voltage range: 90 V to 264 V AC,47/63 HzDC:●Rated voltage range: –48 V to –60 V, DC●Maximum voltage range: –36 V to –72 V, DCPower socketpositionRear power sockets Front power sockets Battery One slot for lead-acid battery charger module NADimensions (W x D442 mm x 310 mm x 43.6 mm 442 mm x 220 mm x 43.6 mmx H)<79.9 WPower consumption ●S5700-28P-LI-BAT: <23 W●S5700-28P-LI-24S-BAT: <34.1 WNetworking and ApplicationsThe S5700-LI provides 1000M desktop access functions for a high performance network, such as voice VLAN, NAC and so on.The S5700-LI-BAT uses a battery as the backup power supply. When a mains power failure occurs, the battery begins powering the switch. When the mains power supply recovers, the switch automatically charges the battery. The use of batteries ensures high reliability at the access layer in the case of frequent mains power failures.Ordering Information98010509 S5700-28P-LI-BAT (24x10/100/1000Base-T Ethernet ports, 4xGE SFP ports, 1 battery slot, AC power supply)98010511 S5700-28P-LI-24S-BAT (28xGE SFP ports, 4xCombo 10/100/1000Base-T Ethernet ports, 1 battery slot,AC power supply)02357823 S5700-52X-LI-48CS-AC (48xGE CSFP ports or 24xGE SFP ports, 4xCombo 10/100/1000Base-T Ethernet ports, 4x10GE SFP+ ports, AC power supply, front power sockets, front access)02310TEE 100/1000BASE-BIDI CSFP single-fiber bidirectional optical module-CSFP-GE/FE-single-mode optical module (Tx1490/Rx1310 nm, 10 km, LC)02353857 RPS1800 Redundant Power System98010517 PBB-12AHA (12AH lead-acid battery charger module)02310JFA 150 W AC power module (optional for battery LAN switches, used as the redundancy for the internal power module)02310JFD 150 W DC power module (optional for battery LAN switches, used as the redundancy for the internal power module)More InformationFor more information about Huawei Campus Switches, visit or contact us in the following ways:●Global service hotline: /en/service-hotline●Logging in to the Huawei Enterprise technical support website: /enterprise/●Sending an email to the customer service mailbox: ********************Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd.Trademarks and Permissionsand other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respective holders.NoticeThe purchased products, services and features are stipulated by the contract made between Huawei and thecustomer. All or part of the products, services and features described in this document may not be within thepurchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, andrecommendations in this document are provided "AS IS" without warranties, guarantees or representations ofany kind, either express or implied.The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.Huawei Technologies Co., Ltd.Address:Huawei Industrial Base Bantian,Longgang Shenzhen 518129 People'sRepublic of ChinaWebsite:。
华为S5700常用基础配置命令
华为 S5700 常用基本配置命令以下配置中，红色字体是需要自定义的.#清除设备配置<Quidway>reset saved-configurationWarning: The action will delete the saved configuration in the device.The configuration will be erased to reconfigure. Continue? [Y/N]:Y<Quidway>rebootWarning: All the configuration will be saved to the configuration file for the next startup:flash:/vrpcfg.zip, Continue?[Y/N]:NSystem will reboot! Continue?[Y/N]:Y# 设置设备的名称为GSH-FZ-Front<Quidway> system-view[Quidway] sysname Quidway# 设置查看设备的时区,时间<Quidway> clock timezone BJ add 8<Quidway> clock datetime 18:20:30 2012-02-08<Quidway> display clock#telnet 远程登录<Quidway> system-view[Quidway] aaa//////[Quidway-aaa] local-user huawei password cipher p@ssw0rd privilege level 15[Quidway-aaa] local-user huawei password simple huawei [Quidway-aaa] local-user huawei service-type telnet [Quidway-aaa] local-user huawei privilege level 15 [Quidway-aaa] quit[Quidway]user-interface vty 0 4 //设置5个虚拟终端，也就是说最多有5个终端同时连接[Quidway - vty0-4]authentication-mode aaa[Quidway -ui-vty0-4]quit#添加VLAN<Quidway> system-view[Quidway] vlan 10[Quidway-vlan10] quit#设定端口模式<Quidway> system-view[Quidway] int gigabitethernet 0/0/1[Quidway-GigabitEthernet0/0/1] port link-type access [Quidway-GigabitEthernet0/0/1]quit#将端口加入Vlan<Quidway> system-view[Quidway] vlan 131[Quidway-vlan131] port gigabitethernet 0/0/21 to 0/0/22 [Quidway-Vlan131] quit#设置Trunk<Quidway> system-view[Quidway] interface GigabitEthernet 0/0/23[Quidway-GigabitEthernet0/0/23] port link-type trunk [Quidway-GigabitEthernet0/0/23] port trunk allow-pass vlan 128 131#设置VLAN IP(管理IP)<Quidway> system-view[Quidway] interface vlanif 131[Quidway-Vlanif131] ip address 192.168.0.253 255.255.255.0 [Quidway-Vlanif131] shutdown[Quidway-Vlanif131] undo shutdown#设置默认路由<Quidway> system-view[Quidway] ip route-static 0.0.0.0 0.0.0.0 192.168.0.254#设定NTP （Network Time Protocol）<Quidway> system-view[Quidway] ntp-service unicast-peer 192.168.0.254#关闭WEB Server,dhcp<Quidway> system-view[Quidway] undo http server enable[Quidway] undo dhcp enable#保存配置<Quidway> save#相关查看命令[Quidway] display version //显示VRP 版本号[Quidway] display current-configuration //显示系统运行配置信息[Quidway] display saved-configuration //显示保存的配置信息[Quidway] display interfaces brief //显示接口配置信息[Quidway]display ip routing-table //显示路由表[Quidway]display systname //命令用来显示路由器的名称#删除vlan，先删除3 层口，再删除2 层vlan [Quidway] undo interface Vlanif 20[Quidway] undo vlan 20#增加/删除静态路由[Quidway]ip route-static 0.0.0.0 0.0.0.0 192.168.0.254 //命令用来配置静态路由，[Quidway]undo ip route-static 0.0.0.0 0.0.0.0 192.168.0.254//命令用来删除静态路由#开启http 服务< Quidway >dirDirectory of flash:/31,620 KB total (19,928 KB free)< Quidway >system-view[Quidway]http server loadS5700SI-V100R005C01SPC100.web.zip [Quidway]http server enable 检测方法：浏览器打开http://133.160.70.1/view/login.htmlUser:admin Pwd:admin#重启[Quidway] reboot。
华为S5700-EI系列交换机产品手册说明书
Huawei S5700-EI Series SwitchesProduct BrochureThe S5700-EI series gigabit enterprise switches (S5700-EI) are next-generation energy-saving switchesdeveloped by Huawei to meet the demand for high-bandwidth access and Ethernet multi-servicemaintain, reducing workloads for network planning, construction, and maintenance. The S5700-EI usesS5700-EI Series Gigabit Enterprise Switches Product OverviewProduct Appearance•Switching capacity: 416Gbps2-2Huawei Enterprise Sx700 Series Switch Product•Switching capacity: 416GbpsProduct Features and highlightsPowerful support for services•The S5700-EI supports IGMP v1/v2/v3 snooping, IGMP filter, IGMP fast leave, and IGMP proxy. It supportsline-speed replication of multicast packets between VLANs, multicast load balancing among member interfaces of a trunk, and controllable multicast, meeting requirements for IPTV services and othermulticast services.•The S5700-EI provides the Multi-VPN-Instance CE (MCE) function to isolate users in different VPNs on a device, ensuring data security and reducing costs.•The S5710-EI supports multiple MPLS & VPN features, including Label Distribution Protocol (LDP) or Resource Reservation Protocol for Traffic Engineering (RSVP-TE), MPLS TE, VLL, VPLS, and MPLS L3VPN. Comprehensive reliability mechanisms•Besides STP, RSTP, and MSTP, the S5700-EI supports enhanced Ethernet reliability technologies such asSmart Link and RRPP (Rapid Ring Protection Protocol), which implement millisecond-level protection switchover and ensure network reliability. It also provides Smart Link multi-instance and RRPP multi-instance to implement load balancing among links, optimizing bandwidth usage.Huawei Enterprise Sx700 Series Switch Product2-3•The S5700-EI supports enhanced trunk (E-Trunk) that enables a CE to be dual-homed to two PEs (S5700s).E-Trunk greatly enhances link reliability between devices and implements link aggregation betweendevices. This improves reliability of access devices.•The S5700-EI supports the Smart Ethernet Protection (SEP) protocol, a ring network protocol applied tothe link layer on an Ethernet network. SEP can be used on open ring networks and can be deployed onupper-layer aggregation devices to provide fast switchover, ensuring non-stop transmission of services.SEP features simplicity, high reliability, fast switchover, easy maintenance, and flexible topology, facilitatingnetwork planning and management.•The S5700-EI supports Ethernet Ring Protection Switching (ERPS), also referred to as G.8032. As the latestring network protocol, ERPS was developed based on traditional Ethernet MAC and bridging functionsand uses mature Ethernet OAM function and a Ring Automatic Protection Switching (R-APS) mechanismto implement millisecond-level protection switching. ERPS supports various services and allows flexiblenetworking, helping customers build a network with lower OPEX and CAPEX.•The S5700-EI supports redundant power supplies, and can use an AC power supply and a DC powersimultaneously. Users can choose a single power supply or use two power supplies to ensure devicereliability.•The S5700-EI supports VRRP, and can set up VRRP groups with other Layer 3 switches. VRRP providesredundant routes to ensure stable and reliable communication. Multiple equal-cost routes to an uplinkdevice can be configured on the S5700-EI to provide route redundancy. When an active route isunreachable, traffic is switched to a backup route.•The S5700-EI supports Bidirectional Forwarding Detection (BFD) and provides millisecond-level detectionfor protocols such as OSPF, IS-IS, VRRP, and PIM to improve network reliability. The S5700-EI complies withIEEE 802.3ah and 802.1ag. IEEE 802.3ah defines the mechanism for detecting faults on direct links overthe Ethernet in the first mile, and 802.1ag defines the mechanism for end-to-end service fault detection.The S5700-EI supports Y.1731. Besides fast end-to-end service fault detection, the S5700-EI can use theperformance measurement tools defined in Y.1731 to monitor network performance, providing accuratedata about network quality.Well-designed QoS policies and security mechanisms•The S5700-EI implements complex traffic classification based on packet information such as the 5-tuple,IP precedence, ToS, DSCP, IP protocol type, ICMP type, TCP/UDP port number, VLAN ID, Ethernet protocoltype. ACLs can be applied to inbound or outbound direction on an interface. The S5700-EI supportsa flow-based two-rate three-color CAR. Each port supports eight priority queues and multiple queuescheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP. All of these ensure the quality ofvoice, video, and data services.Huawei Enterprise Sx700 Series Switch Product•The S5700-EI provides multiple security measures to defend against Denial of Service (DoS) attacks,and attacks against networks or users. DoS attack types include SYN Flood attacks, Land attacks, Smurf attacks, and ICMP Flood attacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP server attacks, man-in-the-middle attacks, IP/MAC spoofing attacks, DHCP requestflood attacks. DoS attacks that change the CHADDR field in DHCP packets are also attacks against users.•The S5700-EI supports DHCP snooping, which discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofing packets. This prevents man-in-the-middle attacksto campus networks that hackers initiate by using ARP packets. The interface connected to a DHCP server can be configured as a trusted interface to protect the system against bogus DHCP server attacks.•The S5700-EI supports strict ARP learning, which prevents ARP spoofing attacks that will exhaust ARP entries. It also provides IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.•The S5700-EI supports 802.1x authentication, MAC address authentication, and combined authentication on a per port basis, as well as Portal authentication on a per VLANIF interface basis. The S5700-EI also supports NAC. The S5700-EI authenticates users based on statically or dynamically bound user information such as the user name, IP address, MAC address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs, QoS policies, and ACLs can be applied to users dynamically.•The S5700-EI can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. This function minimizes packetflooding that occurs when MAC addresses of users cannot be found in the MAC address table.Fine-grained traffic management•The S5710-EI supports NetStream. The NetStream module supports V5, V8, and V9 packet formats and provides various traffic analysis functions, such as real-time traffic sampling, dynamic report generation, traffic attribute analysis, and traffic exception report. The Netstream module enables administrators to monitor network status in real time and provides applications and analysis functions including potential fault detection, effective fault rectification, fast problem handling, and security monitoring, to help customers optimize network structure and adjust resource deployment.•The S5700-EI supports the Sampled Flow (sFlow) function, which uses a sampling mechanism to obtain statistics about traffic forwarded on a network and sends the statistics to the Collector in real time. The Collector analyzes traffic statistics to help customers manage network traffic efficiently. The S5700-EI integrates the sFlow Agent module and uses hardware for traffic monitoring. Unlike traffic monitoring through port mirroring, sFlow does not degrade network performance during traffic monitoring.Easy deployment and maintenance free•The S5700-EI supports automatic configuration, plug-and-play, and batch remote upgrade. These capabilities simplify device management and maintenance and reduce maintenance costs. The S5700-EI supports SNMP v1/v2c/v3 and provides flexible methods for managing devices. Users can manageHuawei Enterprise Sx700 Series Switch Productthe S5700-EI using the CLI and Web NMS. The NQA function helps users with network planning andupgrading. In addition, the S5700-EI supports NTP, SSH v2, HWTACACS+, RMON, log hosts, and port-based traffic statistics.•EasyDeploy: The Commander collects information about the topology of the client connecting to theCommander and saves client startup information based on the topology. The client can be replacedwithout configuration. Configuration and scripts can be delivered to the client in batches. In addition, theconfiguration delivery result can be queried. The Commander can collect and display power consumptionon the entire network.•The S5700-EI supports the GARP VLAN Registration Protocol (GVRP), which dynamically distributes,registers, and propagates VLAN attributes to reduce manual configuration workloads of networkadministrators and to ensure correct VLAN configuration. In a complex network topology, GVRP simplifiesVLAN configuration and reduces network communication faults caused by incorrect VLAN configuration.•The S5700-EI supports MUX VLAN. MUX VLAN isolates Layer 2 traffic between interfaces in a VLAN.Interfaces in a subordinate separate VLAN can communicate with ports in the principal VLAN but cannotcommunicate with each other. MUX VLAN is usually used on an enterprise intranet to isolate userinterfaces from each other but allow them to communicate with server interfaces. This function preventscommunication between network devices connected to certain interfaces or interface groups but allowsthe devices to communicate with the default gateway.PoE function•The S5700-EI PWR can use PoE power supplies with different power levels to provide -48V DC power forPowered Devices (PDs) such as IP phones, WLAN APs, and Bluetooth APs. In its role as Power SourcingEquipment (PSE), the S5700-EI PWR complies with IEEE 802.3af and 802.3at (PoE+) and can work with PDsthat are incompatible with 802.3af or 802.3at. Each port provides a maximum of 30 W power, complyingwith IEEE 802.3at. The PoE+ function increases the maximum power of each port and implements intelligentpower management for high-power consumption applications. This facilitates the use of PDs. PoE portscan work in power-saving mode. The S5700-EI PWR provides improved PoE solutions. Users can configurewhether and when a PoE port supplies power.High scalability•The S5700-EI supports intelligent stacking (iStack). Multiple S5700-EI switches can be connected withstack cables to set up a stack, which functions as a virtual switch. A stack consists of a master switch,a backup switch, and several slave switches. The backup switch takes over services when the masterswitch fails, reducing service interruption time. Stacks support intelligent upgrade so that users do notneed to change the software version of a switch when adding it to a stack. The iStack function allowsusers to connect multiple switches with stack cables to expand system capacity. These switches can bemanaged using a single IP address, which greatly reduces the costs of system expansion, operation, andmaintenance. Compared with traditional networking technologies, iStack has advantages in scalability,reliability, and system architecture.Huawei Enterprise Sx700 Series Switch ProductVarious IPv6 features•The S5700-EI supports IPv4/IPv6 dual stack and can migrate from an IPv4 network to an IPv6 network.S5700-EI hardware supports IPv4/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. The S5700-EI can be deployed on IPv4networks, IPv6 networks, or networks that run both IPv4 and IPv6. This makes networking flexible andenables easy migration from IPv4 to IPv6.Product Specifications2-7Huawei Enterprise Sx700 Series Switch ProductHuawei Enterprise Sx700 Series Switch Product*:The S5700 switches of the EI series are collectively called S5700-EI. S5710-EI is a sub-series switches of S5700-EI .2-9Huawei Enterprise Sx700 Series Switch ProductOn Large-sized Enterprise NetworksThe S5700-EI can function as an access device on a large-sized enterprise network or an aggregation device on a small-sized or medium-sized campus network. It supports link aggregation and dual-homing to improve network reliability.In Data CentersThe S5700-EI can be used in a data center. It connects to gigabit servers and aggregates traffic from the servers to uplink devices through trunk links. If multiple servers are available, an S5700-EI stack can be used to facilitate network maintenance and improve network reliability.InternetWANApplicationsHuawei Enterprise Sx700 Series Switch ProductFor more information, visit or contact your local Huawei sales office.S5710-28C-EI(24xEthernet 10/100/1000 ports,4 of which are dual-purpose 10/100/1000 or SFP ,4x10 GigSFP+, without power module)S5710-28C-PWR-EI-AC(24xEthernet 10/100/1000 PoE+ ports,4 of which are dual-purpose 10/100/1000 orSFP ,4x10 Gig SFP+, with 580W AC power)S5710-52C-EI(48xEthernet 10/100/1000 ports,4x10 Gig SFP+, with 2 interface slots, without powermodule)S5710-52C-PWR-EI(48xEthernet 10/100/1000 PoE+ ports, 4x10 Gig SFP+, with 2 interface slots, withoutpower module)8xGig SFP interface card(used in S5710-EI series)8xEthernet 10/100/1000 ports interface card(used in S5710-EI series)4xGig SFP interface card(including 4xGig SFP optical interface, extend channel card)(used in S5700-EI series)2x10GE SFP+ interface card(used in S5710-EI series)2x10GE SFP+ interface card(used in S5700-SI and S5700-EI series)4x10GE SFP+ optical interface card(including 4x10GE SFP+ interface, extend channel card)(used in S5700-SIand S5700-EI series)Ethernet Stack Interface Card(Including stack card,100cm stack cable)Ethernet Stack Interface Card(Including stack card,300cm stack cable)150W AC Power Module150W DC Power Module500W AC PoE Power Module580W AC PoE Power Module 1150W AC PoE Power Module Product List2-11Huawei Enterprise Sx700 Series Switch ProductCopyright © Huawei Technologies Co., Ltd. 2015. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor anacceptance. Huawei may change the information at any time without notice.。
华为s5700交换机如何从web登录
华为S5700交换机如何从web登录需要使用通讯控制线缆连接电脑和交换机,一头接交换机的Console口,一头接电脑(应该需要串口,没有的话得用USB转串口).在PC机上运行终端仿真程序,设置终端通信参数为：波特率为9600bit/s、8位数据位、1位停止位、无校验和无流控，并选择终端类型为VT100.下面抄一段控制台界面登录后的手册内容:[H3C] local-user admin（设置用户名为admin）[H3C-luser-admin] service-type telnet level 3（设置级别3）[H3C-luser-admin] password simple admin（设置密码admin）在通过WEB方式登录以太网交换机之前，用户先通过Console口正确配置以太网交换机管理VLAN接口的IP地址。
通过Console口在超级终端中执行以下命令，配置以太网交换机管理VLAN的IP地址。
<H3C> system-view[H3C] interface Vlan-interface 1（进入管理VLAN）[H3C-Vlan-interface1] undo ip address（取消管理VLAN原有的IP地址）[H3C-Vlan-interface1] ip address 202.38.160.92 255.255.255.0（配置以太网交换机管理VLAN 的IP地址为202.38.160.92，子网掩码为255.255.255.0）交换机是没有初始IP的，先按楼上说的方法用控制线连接交换机，再用网线连接交换机，给电脑配上1.1.1.1 255.255.255.0（这里的IP地址可随便定）的ip地址。
<Quidway>sys[Quidway]int vlan 1[Quidway]iP add 1.1.1.2 255.255.255.0 （这里的IP地址要与电脑里的IP地址在同一网段）[Quidway]q[Quidway]q<Quidway>dir找到类似S5700-V100R005.002.web.zip 的文件名，找后缀是.web.zip的复制下来<Quidway>sys[Quidway]http server load “这里是复制下来web的文件名”[Quidway]http server enable[Quidway]aaa[Quidway]local-user “用户名” password simple “密码”[Quidway]local-user “用户名” service-type http[Quidway]quit[Quidway]quit<Quidway>save例<Quidway>sys[Quidway]http server load S5700-V100R005.002.web.zip[Quidway]http server enable[Quidway]aaa[Quidway]local-user admin password simple admin123[Quidway]local-user admin service-type http[Quidway]quit<Quidway>saveY注：如果没有S5700-V100R005c01spc100.web.zip文件就不能开启web文案编辑词条B 添加义项?文案，原指放书的桌子，后来指在桌子上写字的人。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
CONSOLE:
通过密码：
[Quidway]user-interface con 0
[Quidway-ui-console0]authentication-mode password
[Quidway-ui-console0]set authentication password simple h3c
[Quidway-ui-vty0-4]authentication-mode password
[Quidway-ui-vty0-4]set authentication password simple h3c
[Quidway-ui-vty0-4]user privilege level 3
通过用户名和密码：
[Quidway]user-interface vty 0 4
[Quidway-ui-vty0-4]authentication-mode password
[Quidway-ui-vty0-4]set authentication password simple h3c
[Quidway]local-user quidway
只有VRP3.4的有缺省用户名和密码：
USER：admin
PASSWORD:admin
但是如果用户把它删除就没有了。
[Quidway-luser-quidway]password simple h3c
[Quidway-luser-quidway]service-type telnet level 3
默认是VRP1.74和1.44是没有缺省用户名和密码的。必须配置。
默认是VRP3.3是没有缺省用户名和密码的。必须配置。
display interface brief
dis interface XGigabitEthernet 2/0/0
MEth 0/0/1 属于管理口
<Quidway>system-view
[Quidway]interface MEth 0/0/1
[Quidway]ip adddress 192.168.5.2 255.255.255.0 #设置管理ip
[Quidway-ui-console0]user privilege level 3------------->可以不配置，默认级别是3
通过用户名和密码：
[Quidway]local-user quidway
[Quidway-luser-quidway]password simple h3c
[Quidway-luser-quidway]service-type terminal level 3
[Quidway]user-interface con 0
[Quidway-ui-console0]authentication-mode scheme
TELNET:
通过密码：
[Quidway]user-interface vty 操作
sys
aaa
local-user huawei password cipher admin
local-user huawei level15
local-user huawei ftp-directory flash;
local-user hawed service-type telnet terminal http