S5130系列交换机三层IP路由命令参考
三层交换机命令
三层交换机配置命令
一、端口命令：
(一)设置该端口最多可以学习到的MAC地址数量
首先进入该端口：interface ethernet1/0/18
设置以太网端口最多可以学习到的MAC地址：mac-address max-mac-count 5
取消对以太网端口最多可以学习到的MAC地址数的限制：
undo mac-address max-mac-count
（二）配置IP地址与端口之间的绑定关系
首先进入该端口：interface ethernet1/0/18
配置IP地址与端口之间的绑定关系：am ip-pool 10.11.41.76
（三）.配置PC机的MAC地址与端口0/1的静态绑定
mac-address static 00e0-fc35-dc71 interface Ethernet 1/0/2 vlan 1
（四）在系统视图下查看MAC地址配置。
display mac-address interface Ethernet 1/0/2
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s) 00-e0-fc-35-dc-71 1 Static Ethernet1/0/2 NOAGED
00-e0-fc-17-a7-d6 1 Learned Ethernet1/0/2 AGING
00-e0-fc-5e-b1-fb 1 Learned Ethernet1/0/2 AGING
00-e0-fc-55-f1-16 1 Learned Ethernet1/0/2 AGING
--- 4 mac address(es) found ---。
S5130系列交换机基础配置指导
H3C S5130-HI 系列以太网交换机基础配置指导前言H3C S5130-HI 系列以太网交换机配置指导介绍了S5130-HI 系列交换机各软件特性的原理及其配置方法，包含原理简介、配置任务描述和配置举例。
《基础配置指导》主要介绍如何使用命令行接口、如何登录设备、对设备进行文件系统管理、设备管理、软件升级等功能的配置，包括CLI、登录设备、RBAC 配置、FTP 和TFTP、文件系统管理、配置文件管理、软件升级、设备管理、Tcl、Python、自动配置。
前言部分包含如下内容：•读者对象•本书约定•产品配套资料•资料获取方式•技术支持•资料意见反馈读者对象本手册主要适用于如下工程师：•网络规划人员•现场技术支持与维护人员•负责网络配置和维护的网络管理员本书约定1. 命令行格式约定2. 图形界面格式约定3. 各类标志本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：4. 图标约定本书使用的图标及其含义如下：5. 端口编号示例约定本手册中出现的端口编号仅作示例，并不代表设备上实际具有此编号的端口，实际使用中请以设备上存在的端口编号为准。
产品配套资料H3C S5130-HI 系列以太网交换机的配套资料包括如下部分：目录1 CLI ····························································································································· 1-11.1 命令行接口简介···································1-11.2 命令视图······································1-11.2.1 命令视图简介·································1-11.2.2 进入系统视图·································1-21.2.3 返回上一级视图································1-21.2.4 返回用户视图·································1-31.3 使用命令行在线帮助·································1-31.4 命令的undo形式···································1-41.5 命令行输入·····································1-41.5.1 编辑命令行··································1-41.5.2 STRING和TEXT类型参数的输入·························1-41.5.3 快速输入命令行································1-51.5.4 配置命令字符串的别名·····························1-51.5.5 配置命令行的快捷键······························1-61.5.6 命令行输入回显功能······························1-71.6 解读输入错误提示信息································1-71.7 重复执行历史记录命令································1-81.8 使用历史命令····································1-81.9 便捷地查看显示信息·································1-91.9.1 分屏显示···································1-91.9.2 查看带行号的显示信息····························1-101.9.3 使用正则表达式过滤显示信息·························1-101.9.4 将显示信息保存到指定文件··························1-131.9.5 各种便捷查看方式的综合应用·························1-131.10 保存当前配置··································1-141CLI1.1 命令行接口简介CLI（Command Line Interface，命令行接口）是用户与设备之间的文本类指令交互界面。
三层交换机配置命令以及中文解释
三层交换机配置命令以及中文解释基本配置S> enable 进入特权模式S# configure terminal 进入全局配置模式S(config)# hostname name 改变交换机名称S(config)# enable password level level_# password 设置用户口令（level_#=1)或特权口令（level_#=15)S(config)# line console 0 进入控制台接口S(config-line)# password console_password 接上一条命令，设置控制台口令S(config)# line vty 0 15 进入虚拟终端S(config-line)# password telnet_password 接上一条命令，设置Telnet口令S(config-line)# login 允许Telnet登录S(config)# enable password|secret privilege_password 配置特权口令（加密或不加密）S(config)# interface ethernet|fastethernet|gigabitethernet slot_#/port_# 进入接口子配置模式S(config-if)# [no] shutdown 关闭或启用该接口（默认启用）S(config)# ip address IP_address sunbet_mask 指定IP地址S(config)# ip default-gateway router's_IP_address 指定哪台路由器地址为默认网关S# show running-config 查看当前的配置S# copy running-config startup-config 将RAM中的当前配置保存到NVRAM中S> show interface [type slot_#/port_#] 查看所有或指定接口的信息S> show ip 显示交换机的IP配置（只在1900系列上可用）S> show version 查看设备信息S# show ip interface brief 验证IP配置S(config-if)# speed 10|100|auto 设置接口速率S(config-if)# duplex auto|full|half 设置接口双工模式S> show mac-address-table 查看CAM表S# clear mac-address-table 清除CAM表中的动态条目1900(config)# mac-address-table permanent MAC_address type [slot_#/]port_# 在CAM表中创建静态条目2950(config)# mac-address-table static MAC_address vlan VLAN_# interface type [slot_#/]port_# 在CAM表中创建静态条目1900(config)# mac-address-table restricted static MAC_address source_portlist_of_allowed_interface 设置静态端口安全措施1900(config-if)# port secure 启用粘性学习1900(config-if)# port secure max-mac-count value 设置粘性学习特性能够学到的地址数量（默认132，取值范围是1-132）1900(config)# address-violation suspend|ignore|disable 改变安全选项1900> show mac-address-table security 验证端口安全措施2950(config)# switchport mode access 定义接口为主机端口而不是中继端口2950(config)# switchport port-security 启用端口安全措施2950(config)# switchport port-security maximum value 指定可与此接口相关的设备的最大数量2950(config)# switchport port-security violation protect|restrict|shutdown 指定出现安全违规时应该发生的事2950(config)# switchport port-security mac-address MAC_address 指定允许与此接口相关的确切的MAC地址2950(config)# switchport port-security mac-address sticky 启用粘性学习特性2950(config)# show port interface type [slot_#/] port_# 验证接口配置2950(config-if) description name 设置接口描述信息2950# show buffers 查看系统缓存的大小1900# copy nvram tftp:// IP_address_of_TFTP_server/ file_name 将配置文件备份到TFTP服务器上1900# copy tftp:// IP_address_of_TFTP_server/ file_name nvram 从TFTP服务器上恢复配置到NVRAM1900# delete nvram 删除配置文件2950# erase startup-config 删除配置文件3550# show tcam qos TCAM_ID statistics 查看TCAM剩余容量4000> enable 进入特权模式4000>(enable) set password 设置用户模式密码4000>(enable) set enablepass 设置授权密码4000>(enable) set interface sc0 IP_address mask 配置IP地址4000>(enable) set port enable|disable slot_#/port_# 启用/禁用接口4000>(enable) show port [slot_#/port_#] 显示接口信息4000>(enable) set port name slot_#/port_# name 设置交换机接口描述信息4000>(enable) set port speed slot_#/port_# 4|10|16|100|auto 设置交换机接口速率4000>(enable) set port duplex slot_#/port_# full|half 设置交换机接口双工模式4000>(enable) clear config all 删除NVRAM中的配置信息4000>(enable) erase all 删除FLASH中的内容4000>(enable) show flash 显示FLASH中的内容4000>(enable) show cam [count] dynamic|static|permanent|system [vlan_#] 显示CAM表VLAN 1900(config)# vtp domain VTP_domain_name 定义交换机域名1900(config)# vtp server|client|transparent 定义交换机VTP模式（默认服务器）1900(config)# vtp password VTP_password 配置VTP口令1900(config)# vtp pruning enable|disable 启用/禁用修剪（默认启用）1900(config)# vtp trap enable 启用SNMP陷阱（默认启用）1900# show vtp 验证VTP配置2950# vtp database 访问VLAN和VTP配置（以下均是在IOS12.1前用，12.1后全是在全局配置模式下）2950(vlan)# vtp domain VTP_domain_name 定义交换机域名2950(vlan)# vtp server|client|transparent 定义交换机VTP模式（默认服务器）2950(vlan)# vtp password VTP_password 配置VTP口令2950(vlan)# vtp pruning 启用/禁用修剪（默认启用）2950(config)# snmp-server enable traps vtp 启用SNMP陷阱（默认启用）2950# show vtp status 检查VTP配置2950# show vtp counters 显示与VTP消息发送与接收相关的VTP统计信息1900(config-if)# trunk on|off|desirable|auto 指定中继类型1900# show trunk A|B 验证接口中继（A是fa0/26，B是fa0/27）2950(config-if)# switchport mode trunk|dynamic desirable|dynamic auto|nonegotiate 指定中继类型(默认自动协商）2950(config-if)# switchport trunk native|allowed|pruning vlan VLAN_# 配置中继2950(config-if)# switchport trunk pruning vlan remove VLAN_# 清除不希望消减的VLAN 2950# show interfaces [type 0/port_#] switchport|trunk 验证接口中继1900(config)# vlan VLAN_# [name VLAN_name] 创建VLAN1900(config-if)# vlan-membership static VLAN_# 将该接口静态地分配给一个VLAN1900# show vlan 验证VLAN1900# show vlan-membership 查看VLAN成员关系1900# show spantree [VLAN_#] 查看VLAN的STP信息2950# vlan database 进入VLAN数据库（ISO12.1前用）2950(vlan)# vlan VLAN_# [name VLAN_name] 创建VLAN2950(config)# vlan VLAN_# 进入VLAN数据库（ISO12.1后用）2950(config-vlan)# name VLAN_name 创建VLAN2950(config-if)# switchport mode access 指定连接是接入链路连接2950(config-if)# switchport access vlan VLAN_# 指定VLAN是接入链路连接4000>(enable) set vlan VLAN_# name VLAN_name 配置VLAN4000>(enable) set vlan VLAN_# slot_#/port_#-port_# 为VLAN分配端口4000>(enable) set trunk slot_#/port_# [on|off|desirable|auto|nonegotiate] [VLAN_#][isl|dot1q|dot10|lane|negotiate] 配置中继4000>(enable) clear trunk slot_#/port_# VLAN_# 删除VLAN4000>(enable) show trunk slot_#/port_# 验证中继端口4000>(enable) set vtp v2 enable 配置VTPv24000>(enable) set vtp [domain name] [mode client|server|transparent] [passwd password] [pruning enable|disable] [v2 enable|disable] 设置VTP4000>(enable) show vtp domain 验证VTP域的信息4000>(enable) show vtp statistics 显示发出或收到的VTP通告信息的摘要内容4000>(enable) set vtp pruneeligible VLAN_# 设置VTP消减4000>(enable) clear vtp pruneeligible VLAN_# 清除不希望消减的VLANSTP 4000>(enable) set spantree enable|disable VLAN_# 启用/禁用STP（默认启用）2950(config)# [no] spanning-tree vlan VLAN_# 启用/禁用STP（默认启用）4000>(enable) show spantree [VLAN_#] 验证STP状态2950# show spanning-tree 验证STP状态4000>(enable) set spantree root [secondary] VLAN_# [dia network_diameter] [hello hello_time] 设置主根节点桥、备份节点桥、最大桥数量（2-7）、持续时间（1-10，默认2）4000>(enable) set spantree portcost slot_#/port_# cost_# 设置端口开销2950(config-if)# spanning-tree cost cost_# 设置端口开销4000>(enable) set spantree portpri slot_#/port_# priority_# 设置端口优先级4000>(enable) set spantree portvlanpri slot_#/port_# priority_# [VLAN_#] 改变VLAN的优先级设置2950(config-if)# spanning-tree vlan VLAN_# port-priority priority_# 设置端口优先级4000>(enable) set spantree fwddelay delay_# [VLAN_#] 设置从侦听状态到学习状态再到转发状态的时间间隔（默认15秒，取值范围是4-30秒）4000>(enable) set spantree hello interval_time [VLAN_#] 设置根节点交换机发送BPDU的时间间隔（默认2秒，取值范围是1-10秒）4000>(enable) set spantree maxage agingtime [VLAN_#] 设置交换机持有BPDU的时间（默认20秒，取值范围是6-40秒）2950(config)# spanning-tree vlan VLAN_# forward-time forward_time 设置从侦听状态到学习状态再到转发状态的时间间隔（默认15秒，取值范围是4-30秒）2950(config)# spanning-tree vlan VLAN_# hello-time hello_time 设置根节点交换机发送BPDU的时间间隔（默认2秒，取值范围是1-10秒）2950(config)# spanning-tree vlan VLAN_# max-age maxage 设置交换机持有BPDU的时间（默认20秒，取值范围是6-40秒）4000>(enable) set port channel slot_#/port_# on 建立以太通道集合4000>(enable) show port capabilities slot_#/port_# 查看端口的配置4000>(enable) show port channel 验证以太通道集合的配置2950(config-if)# channel-group group_number mode auto|desirable|on 建立以太通道集合2950# show etherchannel group_number|brief|detail|load-balance|port|port-channel|summary 验证以太通道集合的配置4000>(enable) set spantree portfast slot_#/port_# enable 配置PortFast2950(config-if)# spanning-tree portfast 配置PortFast4000>(enable) set spantree uplinkfast enable|disable [rate station_update_rate] [all-protocolsoff|on] 启用/禁用UplinkFast4000>(enable) show spantree uplinkfast 验证UplinkFast配置2950(config)# spanning-tree uplinkfast [max_update_rate] 启用/禁用UplinkFast2950# show spanning-tree uplinkfast 验证UplinkFast配置4000>(enable) set spantree backbonefast enable|disable 启用/禁用BackboneFast4000>(enable) show spantree backbonefast 验证BackboneFast配置2950(config)# spanning-tree backbonefast 启用BackboneFast虚拟网间路由2600(config)# interface type slot_#/port_#.subint_number 配置子接口2600(config-subif)# encapsulation dot1q|isl|sde|tr-isl VLAN_# 配置封装类型4000>(enable) show module 查看交换机的硬件配置4000>(enable) session module_# 访问L3SML3SM(config-if)# mac-address mac_address 分配MAC地址MLS 2600(config)# mls rp ip 启动MLS2600(config-if)# mls rp vtp-domain domain_name 分配路由器接口到VTP域中2600(config-if)# mls rp vlan-id VLAN_# 向接口分配VLAN2600(config-if)# mls rp management-interface 指定该接口为管理接口2600# show mls rp 提供全局MLS信息2600# show mls rp interface type slot_#/port_# 提供指定接口的MLS信息2600# show mls rp vtp-domain domain_name 提供VTP域的MLS信息6500>(enable) set mls enable 在MLS-SE上启动MLS6500>(enable) set mls include rp_ip_address 告诉交换机哪一个IP地址是正确的6500>(enable) show mls include 显示外部路由处理器的IP地址列表6500>(enable) set mls flow [destination|destination-source|full] 告诉MLS交换机要缓存候选数据包的哪些信息6500>(enable) show mls entry 显示第三层缓存表6500>(enable) set mls agingtime aging_time 改变缓存的衰老时间（默认256秒，取值范围是8-2032秒中的8的倍数值）6500>(enable) set mls agingtime fast fast_aging_time pkt_threshold 改变快速衰老周期和数据包门限值6500>(enable) show mls ip 验证MLS-SE的配置6500>(enable) clear mls entry [destination IP_address] [source IP_address] [flow protocol] [source_port] [destination_port] [all] 删除所有或指定MLS缓存记录3550(config)# ip routing 启动IP路由3550(config)# ip cef 启动CEF3550(config-if)# no switchport 将第二层接口转换为第三层接口3550(config-if)# ip route-cache cef 在接口上启动CEF3550# show ip cef 验证CEF组播3640(config)# ip multicast-routing 启动路由器上的组播服务3640(config-if)# ip pim dense-mode 将接口设置为PIM密集模式3640(config-if)# ip pim sparse-mode 将接口设置为PIM稀疏模式3640(config-if)# ip pim sparsed-dense-mode 将接口设置为PIM稀疏-密集模式3640(config)# ip pim rp-address IP_address group_ACL_# [override] 手工配置RP3640(config)# ip pim send-rp-announce type slot_#/port_# scope ttl_value group-list ACL_# 通告RP组的分配3640(config)# ip pim send-rp-discovery scope ttl_value 配置RP映射代理3640(config-if)# ip multicast ttl-threshold ttl_value 设置TTL门限值3640(config-if)# ip igmp join-group group_address 加入组播组3640# show ip mroute 查看组播信息3640# ping 验证RP之间或其他组播路由器之间的连接3640# mtrace source_IP_address [destination_IP_address] [group] 组播traceroute3640(config-if)# ip cgmp 配置CGMP路由器4000>(enable) set cgmp enable 启动CGMP4000>(enable) show cgmp statistics 查看CGMP统计信息4000>(enable) show multicast group cgmp 查看交换机了解到的组播组信息4000>(enable) set cgmp leave enable 检查由客户端产生的IGMPv2的离开信息4000>(enable) set igmp enable 启动IGMP4000>(enable) ip igmp snooping 启动IGMP探听4000>(enable) set igmp fastleave enable 启动快速离开过程4000>(enable) show igmp statistics 显示交换机上IGMP探听的状态信息QoS 2950(config)# wrr-queue cos-map queue_ID cos_value 建立队列2950(config)# wrr-queue bandwidth bandwidth_value 设置队列门限2950(config)# class-maps name 定义对信息传输分类时的匹配标准2950(config-cmap)# match access-group ACL_# 识别被分类的信息传输2950(config)# policy-map name 确定为接入信息传输所设置的分类标准2950(config-pmap)# class name2950(config-pmap-c)# set ip dscp number2950(config-if)# service-policy input name 对该接口应用策略3550(config)# mls qos 启动QoS3550(config-if)# auto qos voip 在接口上启动自动服务质量3550(config)# priority-list priority_queue_# protocol protocol high|medium|normal|low [list ACL_#] 为优先级队列定义信息流3550(config)# priority-list priority_queue_# queue-limit limit_# 定义特定优先级队列的最大队列空间3550(config-if)# priority-group priority_queue_# 向特定输出接口分配优先级队列3550(config)# queue-list queue_list_# interface type slot_#/port_# queue_number 为一个特定的定制队列定义信息流3550(config)# queue-list queue_list_# queue queue_number byte-count size_in_bytes [limit number_of_queue] 为特定的定制队列定义队列的最大空间3550(config-if)# custom-queue-list custom_queue_number 为特定的输出接口分配优先级队列4840(config)# ip slb serverfarm serverfarm_name 配置SLB冗余4840(config-slb-sfarm)# real IP_address [port_#] 指定虚拟IP地址4840(config-slb-sfarm)# inservice 启动服务器4840(config)# virtual IP_address [network_mask] tcp|udp[port_number|wsp|wsp-wtp|wsp-wtls|wsp-wtp-wtls] [service service_name] 建立虚拟服务器IP 地址。
H3C5130接入型交换机标准并配置文件
红色字体为需要自己修改对应的的内容。
##sysname 二基地一区1#telnet server enable#irf mac-address persistent timerirf auto-update enableundo irf link-delay#####vlan 1#vlan 200#vlan 238#####interface GigabitEthernet1/0/1port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/2port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/3port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/4####ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/9port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/10port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/11port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#####interface GigabitEthernet1/0/16port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/17port access vlan 238ip verify source ip-address mac-address loopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/18port access vlan 238ip verify source ip-address mac-addressloopback-detection action shutdowndhcp snooping binding record#interface GigabitEthernet1/0/19port access vlan 238ip verify source ip-address mac-address####dhcp snooping binding record#interface GigabitEthernet1/0/24port access vlan 238ip verify source ip-address mac-addressloopback-detection action shutdowndhcp snooping binding record#interface Ten-GigabitEthernet1/0/25description link to 二基地核心S10508-2-29port link-type trunkport trunk permit vlan alldhcp snooping trust#interface Ten-GigabitEthernet1/0/26port link-type trunkport trunk permit vlan alldhcp snooping trust#interface Ten-GigabitEthernet1/0/27port link-type trunk#########snmp-agentsnmp-agent local-engineid 800063A2033822D69CCCC2 snmp-agent community write privatesnmp-agent community read publicsnmp-agent sys-info version all#radius scheme systemuser-name-format without-domain#domain system#domain default enable system#role name level-0description Predefined level-0 role #role name level-1description Predefined level-1 role #########role name level-10description Predefined level-10 role #role name level-11description Predefined level-11 role #role name level-12description Predefined level-12 role #role name level-13description Predefined level-13 role#role name level-14description Predefined level-14 role#user-group system#local-user admin class managepassword simple admin@123service-type ssh telnetauthorization-attribute user-role network-admin###。
20150630-H3CS5130-EI系列以太网交换机命令参考导
• 以太网 OAM • CFD • DLDP • RRPP • Smart Link • Monitor Link • BFD • Track
手册名称
手册名称 可靠性命令参考
内容简介
• AAA • 802.1X • MAC 地址认证 • Portal • 端口安全 • Password Control • 公钥管理 • PKI • IPsec（IPsec、IKE） • SSH • SSL • IP Source Guard • ARP 攻击防御 • MFF • 加密引擎 • FIPS • User Profile • 攻击检测与防范 • ND 攻击防御
内容简介
网络管理和监控命令 参考
介绍了如何对网络进行管理相关的配置命令，以及如何查看系统信息，并且使用ping、 tracert、debug等命令来检查、调试当前网络的连接情况，包括如下内容：
• 系统维护与调试 • NTP（NTP、SNTP） • 信息中心 • SNMP • RMON • NQA • 镜像（端口镜像、流镜像） • sFlow • 进程监控和维护 • EAA • PoE • NETCONF
ቤተ መጻሕፍቲ ባይዱ
三层技术-IP路由命 令参考
介绍了各种路由协议的配置命令，包括如下内容：
• IP 路由基础 • 静态路由 • RIP • OSPF • 策略路由 • IPv6 静态路由 • RIPng • OSPFv3 • IPv6 策略路由 • 路由策略
IP组播命令参考
介绍了各种二层组播业务的配置命令。具体内容如下：
S5130系列交换机OpenFlow命令参考
S5130系列交换机OpenFlow命令参考H3C S5130-HI 系列以太网交换机OpenFlow 命令参考前言H3C S5130-HI 系列以太网交换机命令参考主要针对S5130-HI 系列交换机Release 1111 软件版本支持的命令进行了介绍。
《OpenFlow 命令参考》主要介绍了OpenFlow 特性的配置命令。
前言部分包含如下内容：读者对象本书约定产品配套资料资料获取方式技术支持资料意见反馈读者对象本手册主要适用于如下工程师：网络规划人员现场技术支持与维护人员负责网络配置和维护的网络管理员本书约定1. 命令行格式约定2. 图形界面格式约定3. 各类标志本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：4. 图标约定本书使用的图标及其含义如下：5. 端口编号示例约定本手册中出现的端口编号仅作示例，并不代表设备上实际具有此编号的端口，实际使用中请以设备上存在的端口编号为准。
产品配套资料H3C S5130-HI 系列以太网交换机的配套资料包括如下部分：目录1OpenFlow ···················································································································· 1-11.1 OpenFlow配置命令·································1-11.1.1 active instance ··································································································1-11.1.2 classification vlan ·······························································································1-11.1.3 controller address ······························································································1-21.1.4 controller connect interval ····················································································1-31.1.5 controller echo-request interval ·············································································1-41.1.6 controller mode ·································································································1-41.1.7 datapath-id ·······································································································1-51.1.8description ·······································································································1-51.1.9 default table-miss permit ·····················································································1-61.1.10 display openflow1.1.11 display openflow flow-table ·················································································1-81.1.12 display openflow group ···················································································· 1-121.1.13 display openflow instance ················································································ 1-131.1.14 display openflow meter ···················································································· 1-151.1.15 display openflow summary ··············································································· 1-171.1.16 fail-open mode ······························································································ 1-181.1.17 flow-entry max-limit ························································································ 1-191.1.18 flow-log disable ······························································································ 1-191.1.19 flow-table ····································································································· 1-201.1.20 forbidden port ································································································ 1-201.1.21 in-band management vlan ················································································ 1-211.1.22 mac-ip dynamic-mac aware ·············································································· 1-221.1.23 mac-learning forbidden ···················································································· 1-221.1.24 openflow instance ·························································································· 1-231.1.25 openflow lossless1.1.26 refresh ip-flow ······························································································· 1-24 i1OpenFlow1.1 OpenFlow配置命令1.1.1 active instanceactive instance 命令用来激活OpenFlow 实例。
S5130系列交换机IP组播命令参考
H3C S5130-HI 系列以太网交换机IP 组播命令参考前言H3C S5130-HI 系列以太网交换机命令参考主要针对S5130-HI 系列交换机Release 1111 软件版本支持的命令进行了介绍。
《IP 组播命令参考》主要介绍组播相关命令，包括IPv4 组播业务配置命令及IPv6 组播业务配置命令。
利用这些组播命令，可以实现网络中点到多点的高效数据传送。
前言部分包含如下内容：∙读者对象∙本书约定∙产品配套资料∙资料获取方式∙技术支持∙资料意见反馈读者对象本手册主要适用于如下工程师：∙网络规划人员∙现场技术支持与维护人员∙负责网络配置和维护的网络管理员本书约定1. 命令行格式约定2. 图形界面格式约定3. 各类标志本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：4. 图标约定本书使用的图标及其含义如下：5. 端口编号示例约定本手册中出现的端口编号仅作示例，并不代表设备上实际具有此编号的端口，实际使用中请以设备上存在的端口编号为准。
产品配套资料H3C S5130-HI 系列以太网交换机的配套资料包括如下部分：目录1 IGMP Snooping ············································································································· 1-11.1 IGMP Snooping配置命令·······························1-11.1.1 display igmp-snooping ························································································1-11.1.2 display igmp-snooping group ················································································1-31.1.3 display igmp-snooping router-port ·········································································1-41.1.4 display igmp-snooping static-group ········································································1-51.1.5 display igmp-snooping static-router-port··································································1-61.1.6 display igmp-snooping statistics ············································································1-71.1.7 display l2-multicast ip··························································································1-81.1.8 display l2-multicast ip forwarding ···········································································1-91.1.9 display l2-multicast mac ···················································································· 1-101.1.10 display l2-multicast mac forwarding ···································································· 1-111.1.11 enable (IGMP-Snooping view) ·········································································· 1-121.1.12 entry-limit (IGMP-Snooping view) ······································································ 1-131.1.13 fast-leave (IGMP-Snooping view) ······································································ 1-141.1.14 group-policy (IGMP-Snooping view) ··································································· 1-141.1.15 host-aging-time (IGMP-Snooping view) ······························································· 1-151.1.16 igmp-snooping······························································································· 1-161.1.17 igmp-snooping drop-unknown ··········································································· 1-171.1.18 igmp-snooping enable ····················································································· 1-171.1.19 igmp-snooping fast-leave ················································································· 1-181.1.20 igmp-snooping general-query source-ip ······························································ 1-191.1.21 igmp-snooping group-limit ················································································ 1-201.1.22 igmp-snooping group-policy·············································································· 1-201.1.23 igmp-snooping host-aging-time ········································································· 1-221.1.24 igmp-snooping host-join ·················································································· 1-221.1.25 igmp-snooping last-member-query-interval ·························································· 1-231.1.26 igmp-snooping leave source-ip ·········································································· 1-241.1.27 igmp-snooping max-response-time ···································································· 1-251.1.28 igmp-snooping overflow-replace ········································································ 1-261.1.29 igmp-snooping querier ···················································································· 1-271.1.30 igmp-snooping query-interval ············································································ 1-281.1.31 igmp-snooping report source-ip ········································································· 1-28i1.1.32 igmp-snooping router-aging-time ······································································· 1-29 1.1.33 igmp-snooping source-deny ············································································· 1-30 1.1.34 igmp-snooping special-query source-ip ······························································· 1-31 1.1.35 igmp-snooping static-group ·············································································· 1-32 1.1.36 igmp-snooping static-router-port ········································································ 1-32 1.1.37 igmp-snooping version ···················································································· 1-33 1.1.38 last-member-query-interval (IGMP-Snooping view) ················································ 1-34 1.1.39 max-response-time (IGMP-Snooping view) ·························································· 1-35 1.1.40 overflow-replace (IGMP-Snooping view)······························································ 1-35 1.1.41 report-aggregation (IGMP-Snooping view) ··························································· 1-36 1.1.42 reset igmp-snooping group ··············································································· 1-37 1.1.43 reset igmp-snooping router-port ········································································ 1-37 1.1.44 reset igmp-snooping statistics ··········································································· 1-38 1.1.45 router-aging-time (IGMP-Snooping view) ····························································· 1-38 1.1.46 source-deny (IGMP-Snooping view) ··································································· 1-39 1.1.47 version (IGMP-Snooping view) ·········································································· 1-40ii1IGMP Snooping1.1 IGMP Snooping配置命令1.1.1 display igmp-snoopingdisplay igmp-snooping 命令用来显示IGMP Snooping 的状态信息。
交换机路由器命令大全(结合配置实例)
交换机路由器命令大全(结合配置实例)交换机路由器命令大全(结合配置实例)交换机和路由器是计算机网络中常用的网络设备，用于实现数据包的转发和路由选择。
在实际应用中，我们需要使用命令来配置交换机和路由器的各项参数。
本文将给出交换机和路由器常用命令的大全，并结合实际配置示例进行说明。
一、交换机命令1. 查看交换机基本信息查看交换机型号、固件版本、序列号等基本信息：show version2. 配置交换机端口设置交换机接口的速率、全双工模式等参数：interface interface_namespeed speed_valueduplex {full | half}3. 查看交换机端口状态查看交换机端口的连接状态、速率、工作模式等信息：show interfaces status4. 配置交换机VLAN创建VLAN和端口关联，实现VLAN的隔离和管理：vlan vlan_idname vlan_nameinterface interface_name5. 查看交换机MAC表显示交换机学习到的MAC地址和对应的端口：show mac-address-table6. 配置交换机链路聚合将多个物理端口绑定为一个逻辑端口，提高带宽和冗余性：interface port-channel channel_numberdescription description_textswitchport mode trunk/access7. 交换机Spanning Tree配置配置交换机的Spanning Tree协议参数，避免网络环路：spanning-tree vlan vlan_idpriority priority_value二、路由器命令1. 查看路由表显示路由器的路由表，包括直连路由、静态路由和动态路由表项：show ip route2. 配置静态路由手动配置路由器的静态路由表，指定目的网络和下一跳信息：ip route destination_network subnet_mask next_hop_ip3. 配置路由器接口配置路由器的接口参数，包括IP地址、子网掩码、描述等：interface interface_nameip address ip_address subnet_maskdescription description_text4. 配置路由器OSPF协议配置路由器之间的OSPF动态路由协议，实现网络的动态路由选择：router ospf process_idnetwork network_address wildcard_mask area area_number5. 配置路由器ACL配置路由器的访问控制列表，用于控制数据包的流量：access-list access_list_number permit/deny source destination6. 配置路由器NAT配置路由器的网络地址转换功能，实现内网与外网的互通：interface interface_nameip nat inside/outside三、配置实例1. 配置交换机端口接口GigabitEthernet0/1配置为100Mbps全双工模式：interface GigabitEthernet0/1speed 100duplex full2. 配置交换机VLAN创建VLAN10，将接口GigabitEthernet0/1划分到VLAN10：vlan 10name VLAN10interface GigabitEthernet0/13. 配置路由器接口将接口GigabitEthernet0/0配置为192.168.1.1/24的IP地址：interface GigabitEthernet0/0ip address 192.168.1.1 255.255.255.0description LAN interface4. 配置静态路由配置路由器的静态路由表，将目的网络192.168.2.0/24指向下一跳192.168.1.2：ip route 192.168.2.0 255.255.255.0 192.168.1.25. 配置路由器ACL设置访问控制列表，允许源IP地址为192.168.1.0/24的流量通过：access-list 1 permit 192.168.1.0 0.0.0.2556. 配置路由器NAT设置路由器的NAT，将内部接口GigabitEthernet0/1地址转换为公网地址：interface GigabitEthernet0/1ip nat inside以上是交换机和路由器常用命令的大全以及配置实例。
三层交换机NTP典型配置举例
H3C S5130-EI NTP 典型配置举例目录1 简介···························································································································· 1-12 配置前提······················································································································ 1-13 NTP服务器/客户端模式典型配置举例················································································· 3-13.1 组网需求···················································································································3-13.2 使用版本···················································································································3-13.3 配置步骤···················································································································3-23.3.1 Device A的配置·································································································3-23.3.2 Device B的配置·································································································3-23.3.3 Device C的配置·································································································3-23.4 验证配置···················································································································3-23.5 配置文件···················································································································3-34 NTP广播模式典型配置举例 ····························································································· 4-34.1 组网需求···················································································································4-34.2 使用版本···················································································································4-44.3 配置步骤···················································································································4-44.3.1 Device C的配置·································································································4-44.3.2 Device A的配置·································································································4-44.4 验证配置···················································································································4-54.5 配置文件···················································································································4-55 NTP组播模式典型配置举例 ····························································································· 5-65.1 组网需求···················································································································5-65.2 使用版本···················································································································5-75.3 配置步骤···················································································································5-75.3.1 Device C的配置·································································································5-75.3.2 Device D的配置·································································································5-75.3.3 Device B的配置·································································································5-85.3.4 Device A的配置·································································································5-85.4 验证配置···················································································································5-85.5 配置文件···················································································································5-96 带身份验证的NTP客户端/服务器模式典型配置举例 ·····························································6-106.1 组网需求················································································································· 6-106.2 使用版本················································································································· 6-106.3 配置步骤················································································································· 6-116.3.1 Device A的配置······························································································· 6-116.3.2 Device B的配置······························································································· 6-116.3.3 Device C的配置······························································································· 6-116.4 验证配置················································································································· 6-126.5 配置文件················································································································· 6-127 SNTP典型配置举例·······································································································7-137.1 组网需求················································································································· 7-137.2 使用版本················································································································· 7-147.3 配置步骤················································································································· 7-147.3.1 Device A的配置······························································································· 7-147.3.2 Device B的配置······························································································· 7-147.3.3 Device C的配置······························································································· 7-147.4 验证配置················································································································· 7-157.5 配置文件················································································································· 7-158 IPv6 NTP服务器/客户端模式典型配置举例·········································································8-168.1 组网需求················································································································· 8-168.2 使用版本················································································································· 8-168.3 配置步骤················································································································· 8-168.3.1 Device A的配置······························································································· 8-168.3.2 Device B的配置······························································································· 8-168.3.3 Device C的配置······························································································· 8-178.4 验证配置················································································································· 8-178.5 配置文件················································································································· 8-189 IPv6 NTP组播模式典型配置举例······················································································9-189.1 组网需求················································································································· 9-189.2 使用版本················································································································· 9-199.3 配置步骤················································································································· 9-199.3.1 Device C的配置······························································································· 9-199.3.2 Device D的配置······························································································· 9-199.3.3 Device B的配置······························································································· 9-209.3.4 Device A的配置······························································································· 9-209.4 验证配置················································································································· 9-209.5 配置文件················································································································· 9-2110 带身份验证的NTP广播模式典型配置举例······································································· 10-2210.1 组网需求··············································································································10-2210.2 使用版本··············································································································10-23。
H3C S5130-EI系列以太网交换机 典型配置举例-6W100-NTP典型配置举例
H3C S5130-EI NTP典型配置举例Copyright © 2014 杭州华三通信技术有限公司版权所有，保留一切权利。
非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。
本文档中的信息可能变动，恕不另行通知。
目录1 简介 ··················································································································································· 1-12 配置前提 ············································································································································ 1-13 NTP服务器/客户端模式典型配置举例 ································································································ 3-13.1 组网需求············································································································································ 3-13.2 使用版本············································································································································ 3-13.3 配置步骤············································································································································ 3-23.3.1 Device A的配置 ······················································································································ 3-23.3.2 Device B的配置 ······················································································································ 3-23.3.3 Device C的配置 ······················································································································ 3-23.4 验证配置············································································································································ 3-23.5 配置文件············································································································································ 3-34 NTP广播模式典型配置举例 ··············································································································· 4-34.1 组网需求············································································································································ 4-34.2 使用版本············································································································································ 4-44.3 配置步骤············································································································································ 4-44.3.1 Device C的配置 ······················································································································ 4-44.3.2 Device A的配置 ······················································································································ 4-44.4 验证配置············································································································································ 4-54.5 配置文件············································································································································ 4-55 NTP组播模式典型配置举例 ··············································································································· 5-65.1 组网需求············································································································································ 5-65.2 使用版本············································································································································ 5-75.3 配置步骤············································································································································ 5-75.3.1 Device C的配置 ······················································································································ 5-75.3.2 Device D的配置 ······················································································································ 5-75.3.3 Device B的配置 ······················································································································ 5-85.3.4 Device A的配置 ······················································································································ 5-85.4 验证配置············································································································································ 5-85.5 配置文件············································································································································ 5-96 带身份验证的NTP客户端/服务器模式典型配置举例········································································· 6-106.1 组网需求·········································································································································· 6-106.2 使用版本·········································································································································· 6-106.3 配置步骤·········································································································································· 6-116.3.1 Device A的配置 ···················································································································· 6-116.3.2 Device B的配置 ···················································································································· 6-116.3.3 Device C的配置 ···················································································································· 6-116.4 验证配置·········································································································································· 6-126.5 配置文件·········································································································································· 6-127 SNTP典型配置举例 ························································································································· 7-137.1 组网需求·········································································································································· 7-137.2 使用版本·········································································································································· 7-147.3 配置步骤·········································································································································· 7-147.3.1 Device A的配置 ···················································································································· 7-147.3.2 Device B的配置 ···················································································································· 7-147.3.3 Device C的配置 ···················································································································· 7-147.4 验证配置·········································································································································· 7-157.5 配置文件·········································································································································· 7-158 IPv6 NTP服务器/客户端模式典型配置举例 ······················································································ 8-168.1 组网需求·········································································································································· 8-168.2 使用版本·········································································································································· 8-168.3 配置步骤·········································································································································· 8-168.3.1 Device A的配置 ···················································································································· 8-168.3.2 Device B的配置 ···················································································································· 8-168.3.3 Device C的配置 ···················································································································· 8-178.4 验证配置·········································································································································· 8-178.5 配置文件·········································································································································· 8-189 IPv6 NTP组播模式典型配置举例 ····································································································· 9-189.1 组网需求·········································································································································· 9-189.2 使用版本·········································································································································· 9-199.3 配置步骤·········································································································································· 9-199.3.1 Device C的配置 ···················································································································· 9-199.3.2 Device D的配置 ···················································································································· 9-199.3.3 Device B的配置 ···················································································································· 9-209.3.4 Device A的配置 ···················································································································· 9-209.4 验证配置·········································································································································· 9-209.5 配置文件·········································································································································· 9-2110 带身份验证的NTP广播模式典型配置举例 ···················································································· 10-2210.1 组网需求······································································································································ 10-2210.2 使用版本······································································································································ 10-23。
三层路由配置命令
配置三层路由：sw1:conf tip routing //开启三层路由功能int vlan 2 //为vlan2配置网关ip add 20.1.1.254 255.255.255.0no shexitint vlan 3 //为vlan3配置网关ip add 30.1.1.254 255.255.255.0no shexit*********************************************** 二层接口是无法配置IP地址！！！！将二层接口配置成三层接口：int f0/0no switchportip add 30.1.1.1 255.255.255.0no sh*********************************************** 将一台路由器模拟成PC：Conf tNo ip routing //关闭路由功能int f0/0ip add 20.1.1.2 255.255.255.0no shexitip default-gataway 20.1.1.254int f0/0no ip add //删除ipip add dhcp //将该接口设置为自动获取IP配置DHCP中继：(在三层交换机上配置)Int vlan 3 DHCP服务器的IPIp helper-address 20.1.1.1ExitInt vlan 4Ip helper-address 20.1.1.1Exit哪个VLAN需要DHCP帮助,在哪个VLAN里配置DHCP中继!!! STP:逻辑上断开环路，防止广播风暴的产生当线路故障，阻塞接口被激活，恢复通信，起备份线路的作用生成树算法分为3个步骤：1.选择根网桥（Root Bridge）**网桥ID是唯一的**选择交换网络中网桥ID最小的交换机成为根网桥依据：1.到达根网桥最低的根路径成本2.直连的对端的网桥ID最小3.直连的对端的端口ID最小根路径成本:到达根所经过的所有线路的成本之和！成本：是与带宽成反比的一个值!! 成本(cost)带宽成本1000M 4100M 1910M 100端口ID = 端口优选级+端口编号0-255默认：128F0/1是端口号，不是端口编号，但跟端口编号成正比!!3.选择指定端口（Designated Ports）在每个线路上，都要选且只选择1个指定端口根桥上的端口全是指定端口选择指定端口的依据：1.到达根网桥最低的根路径成本2.端口所在交换机自己的网桥ID最小3.端口自己的端口ID最小STP3个步骤全是自动完成的！不需要人为干预！那为什么还要学习其过程呢？***可以通过修改优先级等来让稳定性，可靠性高的设备作为根网桥！！CST：通用生成树（不考虑VLAN）PVST：每VLAN生成树（考虑VLAN）, cisco私有的PVST+：每VLAN生成树（考虑VLAN）, 公有的协议，默认的PVST+相比CST的优点：**在可以有备份线路的同时，实现了网络内网流量的负载均衡上行链路：uplinkfast(只在低端的二层设备上配置)1.把优先级提升为409602.把本地的所有端口的路径代价增加了3000命令Conf tSpanning-tree uplinkfast速端口：（在access链路上配置）int f0/1Spanning-tree portfast***速端口仍然参与STP计算，但是直接进入转发状态！！当速端口检测到有环路是，会进入block阻塞状态!!重点：在三层设备上更改网桥优先级：Conf tSpanning-tree vlan 2 priority 8192快捷命令：Spanning-tree vlan 2 root primary 首要的Spanning-tree vlan 3 root secondary 次要的Show run理论部分命令部分:NAT讲解：NAT的三种转换方法：前提：int f0/0ip nat inside 定义NAT的内网接口int f1/0ip nat outside 定义NAT的外网接口1.静态NAT：（一对一）适合外网访问内网时使用.conf tip nat inside source static 192.168.1.3 200.1.1.1(静态NAT是双向的)2.动态NAT：acc 1 per 192.168.1.0 0.0.0.255ip nat pool wencoll 200.1.1.1 200.1.1.1 netmask 255.255.255.0 外部地址池ip nat inside source list 1 pool wencoll内对外映射3.PAT (适合内网访问外网使用，可同时上网)acc 1 per 192.168.1.0 0.0.0.255ip nat pool wencoll 200.1.1.1 200.1.1.1 netmask 255.255.255.0 外部地址池ip nat inside source list 1 pool wencoll overload 内对外映射acc 1 per 192.168.1.0 0.0.0.255ip nat inside source list 1 int f1/0 overload内对外映射Show ip nat translations查看NAT地址转换表静态端口映射(静态PAT)ip nat inside source static tcp 192.168.1.1 80 200.1.1.1 80 ip nat inside source static tcp 192.168.1.2 23 200.1.1.1 23将内网的2个服务器都映射到外网上去!(节省了IP，同时增加了(相对静态NAT)安全性)。
三层交换机09-DHCP Snooping典型配置举例
H3C S5130-EI DHCP Snooping 典型配置举例目录1 简介 (1)2 配置前提 (1)3 DHCP Snooping配置举例 (1)3.1 组网需求 (1)3.2 配置思路 (2)3.3 使用版本 (2)3.4 配置步骤 (2)3.5 验证配置 (5)3.6 配置文件 (6)4 相关资料 (7)1 简介本文档介绍了DHCP Snooping 相关应用的配置举例。
2 配置前提本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。
如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
本文假设您已了解DHCP 相关特性。
3 DHCP Snooping配置举例3.1 组网需求如图1 所示，某科研机构有三个项目组，分布在不同的楼层中，通过楼层间的DHCP Snooping 设备与DHCP Server相连。
为了方便管理，希望通过DHCP 服务器统一分配IP 地址，同时要求：•根据项目组的规模，分配不同范围的IP 地址，为group1 分配192.168.0.2～192.168.0.39之间的IP 地址，为group2 分配192.168.0.40～192.168.0.99 之间的IP 地址，为group3 分配192.168.0.100～192.168.0.200 之间的IP 地址；•保证客户端从合法的服务器获取IP 地址；•禁止用户通过配置静态IP 地址的方式接入网络。
图1 DHCP Snooping 配置组网图UnauthorizedDHCP serverDHCP snoopingDevice A GE1/0/4GE1/0/1 GE1/0/2 GE1/0/1 GE1/0/2Vlan-int2 192.168.0.1GE1/0/1Group1 GE1/0/3 GE1/0/3 DHCP snoopingDevice C DHCP server Device DGE1/0/1 GE1/0/4GE1/0/2Group2 GE1/0/3 DHCP snoopingDevice B Group33.2 配置思路•在多个DHCP Snooping设备级联的网络中，为了节省系统资源，不需要每台DHCP Snooping设备都记录所有DHCP客户端的IP地址和MAC地址的绑定信息，只需在与客户端直接相连的不信任端口上记录绑定信息。
三层交换机常用命令
三层交换机常用命令
1、常用命令模式
用户模式：查看初始化信息
特权模式：查看所有信息、调试、保存配置信息
全局模式：配置所有信息，针对整个交换机或路由器的所有接口
接口模式：针对某一个接口的配置
2、模式转化命令
用户模式——特权模式，使用“enable”命令。
特权模式——全局模式，使用“config term”命令。
全局模式——接口模式，使用“interface+接口类型+接口号”。
返回上一模式，使用“exit”命令。
3、常用命令
Show running config 显示所有配置
Shut down 关闭接口
No shut down 打开接口
Ip add +IP地址配置接口的IP地址
Vlan + vlan号创建VLAN
Interface vlan+vlan号进入vlan接口模式
Ip route 配置静态路由
Port access vlan+vlan号指定某一端口为某一VLAN Wr 保存配置。
三层交换机端口IP地址配置方法
三层交换机端口IP地址配置方法1.确定网络拓扑和地址规划：在配置三层交换机端口IP地址之前，首先要确定网络拓扑结构和地址规划方案。
包括网络的子网划分、IP地址段的分配等。
2.登录交换机管理页面：通过终端设备或者管理电脑的浏览器，使用网络交换机的管理IP地址登录交换机的管理页面。
3.进入端口配置界面：在交换机的管理页面上，找到端口配置界面。
这个界面可能会以“VLAN”、“端口设置”或者“接口配置”等名称出现。
4.选择端口并配置IP地址：在端口配置界面中，选择需要配置IP地址的端口。
通常情况下，三层交换机端口都有一个默认VLAN1，可以为其配置IP地址。
5.配置VLAN信息：如果没有默认VLAN1，或者需要为其他VLAN配置IP地址，需要先创建或者配置相应的VLAN。
在创建或者选择VLAN后，为该VLAN配置IP地址。
6.配置IP地址：选择需要配置IP地址的接口或者端口后，在相应的框中输入IP地址、子网掩码、默认网关等相关信息。
7.保存配置：在完成IP地址的配置后，一定要及时保存配置，以确保配置的正确性和稳定性。
8. 测试连接：在配置完成后，可以通过ping命令或者其他方式，测试交换机端口是否能够正常联通。
需要注意的是，在进行三层交换机端口IP地址配置时，还需要考虑以下几个方面：1.子网划分：根据实际需要，合理划分网络子网，避免IP地址冲突和跨网段通信困难。
2.IP地址分配：为每个子网分配足够的IP地址，并合理规划IP地址段，便于管理和维护。
3.路由配置：如果需要进行不同子网之间的通信，还需要配置路由信息，将不同子网的流量进行转发和路由选择。
4.安全设置：可以对交换机进行访问控制列表（ACL）和安全策略的配置，增强网络的安全性。
总结起来，三层交换机端口IP地址的配置方法相对简单，但需要根据实际网络需求进行恰当的规划和设置。
通过正确的配置，可以实现网络子网的划分和互通，提升网络性能和管理效率。
三层交换机05-端口隔离配置举例
H3C S5130-EI 端口隔离配置举例目录1 简介 (1)2 配置前提 (1)3 端口隔离典型配置举例 (1)3.1 组网需求 (1)3.2 使用版本 (2)3.3 配置注意事项 (2)3.4 配置步骤 (2)3.5 验证配置 (3)3.6 配置文件 (3)4 相关资料 (4)1 简介本文档介绍了端口隔离的配置举例。
2 配置前提本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。
如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
本文假设您已了解端口隔离特性。
3 端口隔离典型配置举例3.1 组网需求如图1 所示：•Site 1 和Site 2 是某公司的两个部门，分别在VLAN 2 和VLAN 3 上承载业务，并接入Device A。
•Device A 通过GigabitEthernet1/0/1 端口与外部网络相连。
•公司希望这两个部门都可以通过Device A 和外部网络通信，但两部门内部的二层流量都互相隔离。
图1 配置端口隔离组网图3.2 使用版本本举例是在S5130EI_E-CMW710-R3106 版本上进行配置和验证的。
3.3 配置注意事项•在设备上将端口加入到指定的隔离组中前，必须先完成该隔离组的创建。
•一个端口最多只能加入一个隔离组。
3.4 配置步骤# 在Device A 上创建VLAN 2 和VLAN 3，将端口GigabitEthernet1/0/1 的链路类型配置为Trunk，并允许VLAN 2 和VLAN 3 的报文通过。
将端口GigabitEthernet1/0/2 和GigabitEthernet1/0/3 加入VLAN2；将端口GigabitEthernet1/0/4 和GigabitEthernet1/0/5 加入VLAN3。
<DeviceA> system-view[DeviceA] vlan 2[DeviceA-vlan2] port gigabitethernet 1/0/2[DeviceA-vlan2] port gigabitethernet 1/0/3[DeviceA-vlan2] quit[DeviceA] vlan 3[DeviceA-vlan3] port gigabitethernet 1/0/4[DeviceA-vlan3] port gigabitethernet 1/0/5[DeviceA-vlan3] quit[DeviceA] interface gigabitethernet 1/0/1[DeviceA-GigabitEthernet1/0/1] port link-type trunk[DeviceA-GigabitEthernet1/0/1] port trunk permit vlan 2 3[DeviceA-GigabitEthernet1/0/1] quit# 创建隔离组1 和隔离组2。
三层交换机10-跨网段动态分配IP地址典型配置举例
H3C S5130-EI 跨网段动态分配IP 地址典型配置举例目录1 简介 (1)2 配置前提 (1)3 跨网段动态分配IP地址配置举例 (1)3.1 组网需求 (1)3.2 配置思路 (2)3.3 使用版本 (2)3.4 配置步骤 (2)3.5 验证配置 (5)3.6 配置文件 (5)4 相关资料 (7)1 简介本文档介绍了通过 DHCP 服务器和 DHCP 中继为用户动态分配 IP 地址的配置举例。
2 配置前提本文档中的配置均是在实验室环境下进行的配置和验证，配置前设备的所有参数均采用出厂时的缺省配置。
如果您已经对设备进行了配置，为了保证配置效果，请确认现有配置和以下举例中的配置不冲突。
本文假设您已了解 DHCP 相关特性。
3 跨网段动态分配IP 地址配置举例3.1 组网需求如 图 1 所示，公司总部和分支机构处于不同的网段，网关DeviceA 充当DHCP 服务器，要求：• 为总部分配 10.1.1.2～10.1.1.100 之间的 IP 地址；• 为分支机构分配 10.1.3.2～10.1.3.100 之间的 IP 地址，其中 10.1.3.2～10.1.3.48 之间的 IP地址分配给分支机构 1，10.1.3.49～10.1.3.100 之间的 IP 地址分配给分支机构 2；• 指定 DNS 服务器的固定 IP 地址为 10.1.1.3/24，TFTP 服务器的固定 IP 地址为 10.1.1.4/24； •分配 DNS 服务器、TFTP 服务器和网关等配置信息。
网关 DeviceB 充当 DHCP 中继，要求：• 通过配置 DHCP 中继功能，使得 DHCP 服务器能够为分支机构分配 IP 地址、DNS 服务器、TFTP 服务器和网关等配置信息；• 防止分支机构中存在非法主机配置静态 IP 地址访问网络； •为每个区域分配特定范围内的 IP 地址。
图1 跨网段动态分配 IP 地址配置组网图设备接口 IP 地址 设备 接口 IP 地址DNS TFTP serverserver10.1.1.3/24 10.1.1.4/24branch1Vlan-int3 GE1/0/1Vlan-int2 GE1/0/2Vlan-int2 GE1/0/2Vlan-int3 GE1/0/1 Device A DHCP server Device B DHCP relayVlan-int3 GE1/0/3headquartersbranch23.2 配置思路•DHCP Server 分配IP 地址时，不能将DNS Server 和TFTP Server 的IP 地址分配出去，所以需要将这两台服务器的IP 地址配置为不参与自动分配的IP 地址。
S5130系列交换机三层IP路由命令参考
S5130系列交换机三层IP路由命令参考H3C S5130-HI 系列以太⽹交换机三层技术-IP 路由命令参考前⾔H3C S5130-HI 系列以太⽹交换机命令参考主要针对S5130-HI 系列交换机Release 1111 软件版本⽀持的命令进⾏了介绍。
《三层技术-IP 路由命令参考》主要介绍各路由协议命令，包括IPv4、IPv6 ⽹络的各种路由命令，以及影响路由选择或者路由表⽣成策略的命令。
前⾔部分包含如下内容：读者对象本书约定产品配套资料资料获取⽅式技术⽀持资料意见反馈读者对象本⼿册主要适⽤于如下⼯程师：⽹络规划⼈员现场技术⽀持与维护⼈员负责⽹络配置和维护的⽹络管理员本书约定1. 命令⾏格式约定2. 图形界⾯格式约定3. 各类标志本书还采⽤各种醒⽬标志来表⽰在操作过程中应该特别注意的地⽅，这些标志的意义如下：4. 图标约定本书使⽤的图标及其含义如下：5. 端⼝编号⽰例约定本⼿册中出现的端⼝编号仅作⽰例，并不代表设备上实际具有此编号的端⼝，实际使⽤中请以设备上存在的端⼝编号为准。
产品配套资料H3C S5130-HI 系列以太⽹交换机的配套资料包括如下部分：⽬录1 IP路由基础·····································1-11.1 IP路由基础配置命令·································1-11.1.1 address-family ipv4 ····························································································1-11.1.2 address-family ipv6 ····························································································1-11.1.3 display ecmp mode ····························································································1-21.1.4 display ip routing-table ························································································1-2 1.1.5 display ip routing-table acl ···················································································1-5 1.1.6 display ip routing-table ip-address ·········································································1-8 1.1.7 display ip routing-table prefix-list ········································································· 1-10 1.1.8 display ip routing-table protocol ··········································································· 1-11 1.1.9 display ip routing-table statistics ·········································································· 1-13 1.1.10 display ipv6 rib attribute ··················································································· 1-14 1.1.11 display ipv6 rib graceful-restart ·········································································· 1-15 1.1.12 display ipv6 rib nib ·························································································· 1-15 1.1.13 display ipv6 route-direct nib ·············································································· 1-17 1.1.14 display ipv6 routing-table ················································································· 1-19 1.1.15 display ipv6 routing-table acl ············································································· 1-23 1.1.16 display ipv6 routing-table ipv6-address ·······························································1-24 1.1.17 display ipv6 routing-table prefix-list ···································································· 1-26 1.1.18 display ipv6 routing-table protocol ······································································ 1-28 1.1.19 display ipv6 routing-table statistics ····································································· 1-29 1.1.20 display max-ecmp-num ··················································································· 1-30 1.1.21 display rib attribute ························································································· 1-31 1.1.22 display rib graceful-restart ················································································ 1-32 1.1.23 display rib nib ································································································ 1-341.1.24 display switch-routing-mode status ···································································· 1-38 1.1.25 display route-direct nib ···················································································· 1-38 1.1.26 ecmp mode enhanced ····················································································· 1-41 1.1.27 fib lifetime ····································································································· 1-411.1.28 max-ecmp-num ····························································································· 1-421.1.29 protocol lifetime ····························································································· 1-421.1.30 reset ip routing-table statistics protocol ······························································· 1-431.1.31 reset ipv6 routing-table statistics protocol ···························································· 1-44i1.1.32 rib ··············································································································· 1-44 1.1.33 switch-routing-mode ipv6-128··········································································· 1-45ii1IP路由基础1.1 IP路由基础配置命令1.1.1 address-family ipv4address-family ipv4 命令⽤来创建RIB IPv4 地址族，并进⼊RIB IPv4 地址族视图。
07-三层技术-IP路由命令参考-静态路由命令
目录1 静态路由配置命令..............................................................................................................................1-11.1 静态路由配置命令.............................................................................................................................1-11.1.1 delete static-routes all............................................................................................................1-11.1.2 ip route-static..........................................................................................................................1-11.1.3 ip route-static default-preference............................................................................................1-41 静态路由配置命令1.1 静态路由配置命令1.1.1 delete static-routes all【命令】delete [ vpn-instance vpn-instance-name ] static-routes all【视图】系统视图【缺省级别】2：系统级【参数】vpn-instance vpn-instance-name：删除指定VPN的所有静态路由。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
帮助您了解该接口模块扩展卡的外观、规格、安装及拆卸方法
可插拔模块手册
帮助您了解产品支持的可插拔模块类型、外观和规格
H3C可插拔SFP[SFP+][XFP]模块安
装指南
帮助您掌握SFP/SFP+/XFP模块的正确安装方法，避免因操作不当而造成器件损坏
业务配置
配置指导
帮助您掌握设备软件功能的配置方法及配置步骤
配置、操作、或使用设备的技巧、小窍门。
4.图标约定
本书使用的图标及其含义如下：
该图标及其相关描述文字代表一般网络设备，如路由器、交换机、防火墙等。
该图标及其相关描述文字代表一般意义下的路由器，以及其他运行了路由协议的设备。
该图标及其相关描述文字代表二、三层以太网交换机，以及运行了二层协议的设备。
该图标及其相关描述文字代表无线控制器、无线控制器业务板和有线无线一体化交换机的无线控制引擎设备。
1.1.16display ipv6routing-tableipv6-address1-24
1.1.17display ipv6routing-tableprefix-list1-26
1.1.18display ipv6routing-tableprotocol1-28
1.1.19display ipv6routing-tablestatistics1-29
5.端口编号示例约定
本手册中出现的端口编号仅作示例，并不代表设备上实际具有此编号的端口，实际使用中请以设备上存在的端口编号为准。
产品配套资料
H3C S5130-HI系列以太网交换机的配套资料包括如下部分：
大类
资料名称
内容介绍
硬件介绍及安装
安全兼容性手册
列出产品的兼容性声明，并对兼容性和安全的细节进行说明
1.1.7display iprouting-tableprefix-list1-10
1.1.8display iprouting-tableprotocol1-11
1.1.9display iprouting-tablestatistics1-13
1.1.10display ipv6ribattribute1-14
快速安装指南
指导您对设备进行初始安装，通常针对最常用的情况， 减少您的检索时间
安装指导
帮助您详细了解设备硬件规格和安装方法，指导您对设备进行安装
风扇安装手册
帮助您了解产品支持的可插拔风扇模块的外观、功能、规格、安装及拆卸方法
电源手册
帮助您了解产品支持的可插拔电源模块的外观、功能、规格、安装及拆卸方法
&<1-n>
表示符号&前面的参数可以重复输入1～n次。
#
由“#”号开始的行表示为注释行。
2.图形界面格式约定
格式
意义
< >
带尖括号“< >”表示按钮名，如“单击<确定>按钮”。
[ ]
带方括号“[ ]”菜单用“/”隔开。如[文件/新建/文件夹]多级菜单表示[文件]菜单下的[新建]子菜单下的[文件夹]菜单项。
命令参考
详细介绍设备的命令，相当于命令字典，方便您查阅各个命令的功能
运行维护
MIB Companion
与软件版本配套的MIB Companion
版本说明书
帮助您了解产品版本的相关信息（包括：版本配套说明、兼容性说明、特性变更说明、技术支持信息）及软件升级方法
1IP路由基础1-1
1.1IP路由基础配置命令1-1
3.各类标志
本书还采用各种醒目标志来表示在操作过程中应该特别注意的地方，这些标志的意义如下：
该标志后的注释需给予格外关注，不当的操作可能会对人身造成伤害。
提醒操作中应注意的事项，不当的操作可能会导致数据丢失或者设备损坏。
为确保设备配置成功或者正常工作而需要特别关注的操作或信息。
对操作内容的描述进行必要的补充和说明。
H3C S5130-HI 系列以太网交换机
三层技术-IP 路由命令参考
前 言
H3C S5130-HI系列以太网交换机命令参考主要针对S5130-HI系列交换机Release1111软件版本支持的命令进行了介绍。《三层技术-IP路由命令参考》主要介绍各路由协议命令，包括IPv4、IPv6网络的各种路由命令，以及影响路由选择或者路由表生成策略的命令。
1.1.1address-familyipv41-1
1.1.2address-familyipv61-1
1.1.3displayecmpmode1-2
1.1.4displayiprouting-table1-2
1.1.5display iprouting-tableacl1-5
1.1.6display iprouting-tableip-address1-8
前言部分包含如下内容：
读者对象
本书约定
产品配套资料
资料获取方式
技术支持
资料意见反馈
读者对象
本手册主要适用于如下工程师：
网络规划人员
现场技术支持与维护人员
负责网络配置和维护的网络管理员
本书约定
1.命令行格式约定
格式
意义
粗体
命令行关键字（命令中保持不变、必须照输的部分）采用加粗字体表示。
斜体
命令行参数（命令中必须由实际值进行替代的部分）采用斜体表示。
[ ]
表示用“[ ]”括起来的部分在命令配置时是可选的。
{ x | y | ... }
表示从多个选项中仅选取一个。
[ x | y | ... ]
表示从多个选项中选取一个或者不选。
{ x | y | ... } *
表示从多个选项中至少选取一个。
[ x | y | ... ] *
表示从多个选项中选取一个、多个或者不选。
1.1.11display ipv6ribgraceful-restart1-15
1.1.12display ipv6ribnib1-15
1.1.13display ipv6route-directnib1-17
1.1.14displayipv6routing-table1-19
1.1.15display ipv6routing-tableacl1-23
该图标及其相关描述文字代表无线接入点设备。
该图标及其相关描述文字代表无线Mesh设备。
该图标代表发散的无线射频信号。
该图标代表点到点的无线射频信号。
该图标及其相关描述文字代表防火墙、UTM、多业务安全网关、负载均衡等安全设备。
该图标及其相关描述文字代表防火墙插卡、负载均衡插卡、NetStream插卡、SSL VPN插卡、IPS插卡、ACG插卡等安全插卡。