交换机数据配置(实际举例)
华为交换机 综合配置案例
2综合配置案例关于本章2.1 中小型园区/分支出口综合配置举例2.2 大型园区出口配置示例（防火墙直连部署）2.3 大型园区出口配置示例（防火墙旁路部署）2.4 校园敏捷网络配置示例2.5 轨道交通承载网快速自愈保护技术配置举例2.6 配置交换机上同时部署ACU2和NGFW的示例2.1 中小型园区/分支出口综合配置举例园区网出口简介园区网出口一般位于企业网内部网络与外部网络的连接处，是内部网络与外部网络之间数据流的唯一出入口。
对于中小型企业来说，考虑到企业网络建设的初期投资与长期运维成本，一般希望将多种业务部署在同一设备上。
企业网络用户一般同时需要访问Internet和私网VPN，而对于中小型企业来说考虑到建设及维护成本问题，一般租用运营商Internet网络组建私网VPN。
对于部分可靠性要求较高的园区网络，一般考虑部署两台出口路由器做冗余备份实现设备级可靠性，同时应用链路聚合、VRRP、主备路由等技术保证园区出口的可靠性。
华为AR系列路由器配合华为S系列交换机是中小型园区网出口设备的理想解决方案。
l园区出口设备需要具备NAT Outbound及NAT Server的功能，实现私网地址和公网地址之间的转换，以满足用户访问Internet或者Internet用户访问内网服务器的需求。
l园区出口设备需要具备通过Internet构建私网VPN的功能，以满足企业用户各个机构之间私网VPN互通的需求。
l园区出口设备需要具备数据加密传输的功能，以保证数据的完整性和机密性，保障用户业务传输的安全。
l中小型园区出口需要具备可靠性、安全性、低成本、易维护等特点。
配置注意事项l本配置案例适用于中小型企业园区/分支出口解决方案。
l本配置案例仅涉及企业网络出口相关配置，涉及企业内网的相关配置请参见华为S 系列园区交换机快速配置中的“中小园区组网场景”。
组网需求某企业总部和分支分别位于不同的城市，地域跨度较远，总部存在A、B两个不同的部门，分支只有一个部门。
举例讲解H3C配置三层交换机4个步骤详细用法
举例讲解H3C配置三层交换机4个步骤详细用法H3C是一家网络设备制造商，其三层交换机是其主要产品之一、配置H3C三层交换机可以提供强大的网络管理和控制功能。
下面将详细介绍配置H3C三层交换机的四个步骤及其用法。
第一步：基本设置在配置H3C三层交换机之前，首先需要进行基本设置，包括设置设备的管理IP地址、主机名、密码等。
以下是一个基本设置的例子：1.登录到H3C三层交换机的控制台，输入用户名和密码。
2. 进入系统视图，通过命令"system-view"进入。
3. 设置设备的主机名，使用命令"sysname [主机名]"进行设置。
例如，"sysname switch1"将设备主机名设置为switch14. 设置设备的管理IP地址，使用命令"interface vlan-interface [vlan号]"进入VLAN接口模式。
然后使用命令"ip address [IP地址] [子网掩码]"设置IP地址。
例如，"interface vlan-interface 1"进入VLAN接口1模式，"ip address 192.168.1.1 255.255.255.0"设置IP地址为192.168.1.1，子网掩码为255.255.255.0。
5. 保存配置，使用命令"save"保存配置。
第二步：VLAN配置VLAN是虚拟局域网的缩写，通过配置VLAN可以将交换机的端口分成不同的虚拟网络，从而实现更好的网络管理和控制。
以下是一个VLAN配置的例子：1. 创建VLAN，使用命令"vlan [vlan号]"进行创建。
例如，"vlan 10"将创建一个VLAN编号为10的VLAN。
2. 将端口加入VLAN，使用命令"port vlan [vlan号] [端口号]"进行配置。
交换机的基本配置
交换机的基本配置计算机网络实验报告实验一交换机的基本配置一、实验目的.（1）熟悉交换机的基本结构（2）熟悉交换机基本命令（3）利用交换机进行网络连接（4）熟悉ip地址属性的设置（5）应用常用的网络测试命令（6）熟悉pt操作二、实验环境.系统软件:windows10应用软件:ciscopackettracer三、实验步骤.1.应用环境.网络拓扑图如下:地址分配表中：设备USBip地址子网掩码预设网关主机pc1主机pc2fa0/0fa0/0192.168.1.1192.168.1.2255.255.255.0255.255.255.02.布局步骤.在pc1、pc2两台主机配置ip地址信息。
（1）主机pc1地址设置（配置地址截图）（2）主机pc2地址设置（布局地址图片）3．测试.（1）在图中右图的1、2、3处为捕捉往复数据，并对数据展开详细分析与表明.1处为传送:pc1向pc2发送icmp包,先在网络层layer3将要传送的源地址和目的地址放入ip报,再经过数据链路层layer2将ip数据报封装入帧,帧首部包含源mac地址和目的mac 地址,最后经过pc1的物理层在fast0端口送出.3处为第一次留言:由于交换机只工作于数据链路层layer2和网络层layer1.所以从fast0/1接到帧,就可以看见真的源mac地址和目的mac地址.交换机此时记录pc1与端口fast0/1对应的mac地址表中.然后将帧从其他口(只有fast0/2)原封不动回赠.2处转发.:pc2从fast0端口发送至帧,将目的地址mac与自身mac比较,发现对应所以接收,读取帧信息,ip数据报信息.得到源mac地址和源ip信息.然后为了将反馈信息送给pc1,所以传送一个ip数据报,将源ip和目的ip交换.然后将ip数据报PCB变成帧从fast0口收到.3处第二次转发:交换机从fast0/2口获得帧,加载帧的信息由于第一次从fast0/2发送信息,所以交换机此时记录pc2与端口fast0/2对应的mac地址表.然后根据目的mac地址,在mac地址表中查询查询成功,将帧从fast0/1口发出.1处为发送:pc1从物理层获得信息将目的mac与自身匹配,成功然后将帧中的ip数据报打开,收到pc2的反馈信息.（2）交换机表明结果（showmac-address-table）.（3）主机arp缓存查看与删除四、实验总结.经过此次实验:对交换机的基本结构,交换机基本命令,利用交换机展开网络连接等都存有一定介绍.对ip地址属性的设置和常用的网络测试命令都存有一定操作方式经验.对交换机留言数据和各终端传送发送信息过程的认知存有非常大协助.问题思考：请从tcp/ip由高层到低层的角度分析数据在发送方是如何封装的？（可举例说明）运输层layer4将应用层数据在加之首部(各种应用层协议)构成tcp报文,网络层layer3将tcp报文加之首部(源ip,目的ip等)构成ip数据报,数据链路层layer2将ip数据报加上首部(源mac地址和目的mac地址等)和用来纠错的尾部形成mac帧.物理层就将帧转变为bit形式传送.。
交换机开局配置
H3C交换机开局配置详述一、配置交换机光端口、开通光链路配置命令<H3C>sys[H3C]interface GigabitEthernet1/1/1 ＃进入GigabitEthernet1/1/1接口＃[H3C- GigabitEthernet1/1/1]speed 1000 ＃配置GigabitEthernet1/1/1接口速率＃[H3C- GigabitEthernet1/1/1]duplex full ＃配置GigabitEthernet1/1/1工作模式为全双工＃[H3C- GigabitEthernet1/1/1]port link-type trunk＃配置GigabitEthernet1/1/1接口模式为trunk＃[H3C- GigabitEthernet1/1/1]port trunk permit vlan 100＃配置允许Vlan 100通过GigabitEthernet1/1/1＃[H3C- GigabitEthernet1/1/1]]undo port trunk permit vlan 1＃取消Vlan 1通过GigabitEthernet1/1/1＃此段命令行即为配置交换机互联光端口，通常互联光端口为GigabitEthernet1/1/1，若为其他端口，则需根据实际情况调整端口号。
如H3C S5500系列，光端口通常为GigabitEthernet 1/0/25。
注意：本段配置命令从用户模式（尖括号符号）开始，在其他模式或接口下也可通过输入interface GigabitEthernet1/1/1进入相应端口，但为配置流程清晰，建议使用ctrl＋z组合键或者quit命名退出至用户模式（尖括号符号），重新输入上述命令完成配置。
二、配置Scheme认证的Telnet登录I 配置过程1. 认证方式为Scheme时Telnet登录方式的配置ii. 配置举例1. 组网需求当前用户通过Console口（AUX用户界面）登录到交换机，且用户级别为管理级（3级）。
交换机的常见配置及举例
图 2 新建连接
图 3 连接端口设置
图 4 端口通信参数设置
3. 交换机上电自检，系统自动进行配置，自检结束后提示用户键入回车，直到出现命令 行提示符（如<Quidway> ）。 此时可以键入命令，查看交换机运行状态，或对交换机进行配置，需要帮助可以随时 键入“? ”。
配置通过 Telnet 登录示例
2. 用户管理
配置用户通过 AAA 方式登录交换机示例
配置通过 AAA 方式登录交换机的示例。在本示例中，通过配置 VTY0 的优先级、断开连接的时间 以及打开本地用户的闲置切断开关等操作，实现使用 AAA 方式登录交换机。
组网需求
PC 机的 COM 口与交换机的 Console 口相连。 配置 VTY0 的优先级为 2 ，对从 VTY0 登录的用户进行 AAA 验证，用户登录时需要输入用户名 “huawei ”，密码“huawei ”。 登录后，如果用户超过 30 分钟未对交换机进行操作，将断开与交换机的连接。
操作步骤
1. 交换机上配置 VTY0 的优先级为 2 ，验证方式为 aaa ，断开连接时间为 30 分钟。 <Quidway> s y stem-view [Quidway] u s er-interface v ty0 [Quidway-ui-vty0] u s er p rivilege l evel 2 [Quidway-ui-vty0] a u thentication-mode a aa [Quidway-ui-vty0] i d le-timeout 3 0 [Quidway-ui-vty0] q u it 2. 配置用户名、密码和用户等级。 [Quidway] a aa [Quidway-aaa] l o cal-user h uawei p assword c ipher h uawei [Quidway-aaa] l o cal-user h uawei p rivilege l evel 2
H3C交换机配置实例范文
H3C交换机配置实例在中国交换机市场，H3C自2003年公司成立以来，已累计出货上百万台，以太网交换机端口数占全球的市场份额%，在交换机领域内综合技术实力和市场份额排名均达到业界第一。
下面小编准备了关于H3C交换机配置的例子，提供给大家参考!配置H3C交换机实例，设置安全策略版。
1.能够通过WEB登录，并且设置安全策略。
通过源IP 地址对WEB登录录用户进行控制。
2.使用SSH+密码认证证(基本SSH配置方法法)H3C交换机配置实实例。
H3C交换机S S S H配置完全攻略。
[同同时也是telnet]3.更改交换机名称称，时间，管理IP配置置IP网管等基本配置。
基础配置改时间启启动ssh 修改co m m口密码关闭一些没用用的服务配置实例：------------------------------------------------------------------------syssys n n ame 交换机名字management-vlan 1in t erface Vl a a n-interfa c c e 1ip ad d d ress IP地址ip r oute 网关dis cur#i n n terface A u u x1/0/0 默认undo ip h t tp shutdo w w nlocal-u s s er 用户ser v v ice-type t elnet lev e e l 3passw o o rd simple密码===使用S S SH+密码认证(基本本SSH配置方法)H33C交换机配置实例。
public-key local cre a a te rsapu b b lic-key l o o cal creat e e dsauser-interface vty 0 4a u u thenticat i on-mode s c c hemeprot o o col inbou n n d ssh===local-user用户passwo r d cipher 密密码service-type ssh l evel 3ss h h user 对应用户户authenti c c ation-typ e e password通过源IP地地址对WEB登录用户户进行控制，仅允许I P 地址为的WE B B用户通过http:// 最划算团购网HTTP方式访问交换换机。
二层交换机常用配置
【说明】设置了上面的命令以后可以关闭和产 生环路的交换机相连的端口，注意，必须 要打开生成树协议。如果要恢复该端口的 正常工作状况，首先要找到产生环路的交 换机，排除环路，然后使用下面的命令来 打开端口。
Switch# set port x eanble X 对应要打开的端口
2021/7/1
13
使用TFTP为交换机升级软件
【说明】被镜像的端口可以有多个，但是用于监 听的端口只能有一个。可以选择镜像的报文 的类型，可以选择镜像进的报文，也可以选 择出的报文。选择all则会镜像所有的报文， 设置为none的时候，取消端口镜像
2021/7/1
6
配置静态链路聚合
【功能需求及组网说明】
【配置过程】
SwitchA上的配置 SwitchZ#set trunk static port 3 to 2
【要求】把交换机端口1加入VLAN2， 端口2加VLAN3。两端口分别用 于和不同的PC相连
【说明】因为交换机的端口是要和PC相连，所以 设置为不加标记的口，也就是命令中的 untaggedport 。对于未加标记的端口，需要 设置该端口的PVID。因为每个端口都有默认 的PVID存在，所以如果没有手动修改，就根 据默认的PVID来填充数据帧，这样往往表现 为配置VLAN不生效，不同VLAN好像可以互 通。
SwitchB上的配置 SwitchB#vlan SwitchB(vlan)#create 2 untaggedport 1
taggedport 3 SwitchB(vlan)#create 3 untaggedport 2
taggedport 3 SwitchB(vlan)#exit SwitchB#set port 1 gvrp pvid 2 SwitchB#set port 2 gvrp pvid 3
交换机的基本配置汇总
交换机的基本配置一、交换机的几种配置方法本部分包括以下内容：控制台远程登录其它配置方法本部分内容适用于交换机、路由器等网络设备。
控制台用一台计算机作为控制台和网络设备相连，通过计算机对网络设备进行配置1、硬件连接：Console 口Console 线把Con sole线一端连接在计算机的串行口上，另一端连接在网络设备的Con sole 口上。
Con sole线在购置网络设备时会提供，它是一条反转线，你也可以自己用双绞线进行制作。
按照上面的线序制作一根双绞线，一端通过一个转接头连接在计算机的串行口上，另一端连接在网络设备的Con sole 口上。
注意：不要把反转线连接在网络设备的其他接口上，这有可能导致设备损坏。
2、软件安装：在计算机上需要安装一个终端仿真软件来登录网络设备。
通常我们使用Windows自带的超级终端”超级终端的安装方法：开始|程序|附件|通信|超级终端。
按照提示的步骤进行安装，其中连接的接口应选择“COM1，端口的速率应选择“9600 :数据流控制应选择无”其它都使用默认值。
Cisco宙入祷捺电话的存嵋店甩1E茅哋区coil Bin登录后，就可以对网络设备进行配置了。
说明：超级终端只需安装一次，下次再使用时可从开始I程序I附件I通信I超级终端”中找到上次安装的超级终端，直接使用即可。
劭远程登录ZE通过一台连接在网络中的计算机，用Telnet命令登录网络设备进行配置。
远程登录条件：1、网络设备已经配置了IP地址、远程登录密码和特权密码。
2、网络设备已经连入网络工作。
3、计算机也连入网络，并且可以和网络设备通信。
说明：远程登录的计算机不是连接在网络设备Con sole 口上的计算机，而是网络中任一台计算机。
远程登录方法：二、交换机的命令行（CLI）操作本部分包括以下内容：命令模式命令模式的切换CLI命令的编辑技巧常见CLI错误提示使用no和default 选项命令模式亘交换机和路由器的命令是按模式分组的，每种模式中定义了一组命令集，所以想要使用某个命令，必须先进入相应的模式。
三层交换机sFlow典型配置举例
H3C S5130-EI sFlow 典型配置举例目录1 简介···························································································································· 1-12 配置前提······················································································································ 2-13 使用限制······················································································································ 3-14 sFlow典型配置举例········································································································ 4-14.1 组网需求···················································································································4-14.2 配置思路···················································································································4-24.3 使用版本···················································································································4-24.4 配置注意事项·············································································································4-24.5 配置步骤···················································································································4-34.6 验证配置···················································································································4-44.7 配置文件···················································································································4-45 相关资料······················································································································ 5-51 简介本文介绍了sFlow 的典型配置举例。
cisco交换机配置实例教程(2024)
2024/1/29
堆叠交换机
允许多个交换机堆叠成一个逻辑单元，简化管理和提高可扩展性。
11
不同场景下的选型建议
01
接入层交换机
02
汇聚层交换机
03
核心层交换机
用于连接用户设备，如PC、打印 机等，通常选择固定配置或堆叠 交换机。
实现接入层交换机之间的汇聚， 需要具备较高性能和端口密度， 常选择模块化交换机。
进入全局配置模式
配置静态路由基本步骤
01
2024/1/29
03 02
26
静态路由协议配置教程
2024/1/29
01
指定目标网络和下一跳地址或出口接口
02
静态路由配置示例
03
配置静态路由到达远程网络
27
静态路由协议配置教程
配置默认路由指向上级路 由器
2024/1/29
优点：简单、稳定、低开 销
静态路由优缺点分析
2024/1/29
17
04
端口配置与VLAN划分实例
2024/1/29
18
端口类型及配置方法
以太网端口（Ethernet Port）
用于连接计算机、服务器等终端设备。
汇聚端口（Trunk Port）
用于交换机之间的连接，可以传输多个VLAN的数据。
2024/1/29
19
端口类型及配置方法
• 访问端口（Access Port）：用于连接属于 某个VLAN的终端设备。
2024/1/29
20
端口类型及配置方法
进入端口配置模式
设置端口类型
配置VLAN
通过命令`interface <端口号>` 进入端口配置模式。
TP-LINK交换机功能举例PORT-VLAN和MTU-VLAN设置
TP LINK交换机功能举例PORT VLAN和MTU VLAN设置Port VLAN是基于端口的VLAN，处于同一VLAN的端口之间才能相互通信，可有效地屏蔽广播风暴，并提高网络安全性能。
基于端口的VLAN具有实现简单，易于管理的优点。
说明：Port VLAN一般适用在同一个交换机下的VLAN划分，若是跨交换机的VLAN划分则需使用基于802.1Q的TAG VLAN。
Port VLAN举例——例如：有两个部门：部门A和部门B，还有一个资源服务器，所有电脑和服务器连接在同一个交换机下。
要求部门A和部门B之间不能通信，但可以共同访问服务器。
如下图：首先确认VLAN类型——Port VLAN。
接着设置VLAN组的划分——部门A属于VLAN 1；部门B属于VLAN 2；服务器同属于VLAN 1和VLAN 2。
Port VLAN设置——对所举例子设置1、在“VLAN管理”——“VLAN模式配置”，选择“Port VLAN”，并“提交”。
2、选中“Port VLAN配置”，选择一个“VLAN号”进入对应的配置界面，为方面记忆，这里选择“VLAN号 1”配置VLAN 1，勾选属于VLAN 1的端口1-6和端口13，并“提交”。
3、选择“VLAN号 2”配置VLAN 2，勾选属于VLAN 2的端口14-20和端口13，并“提交”。
至此，Port VLAN已设置完成。
若想查看所配置VLAN信息，点击该配置界面下的“查看所有”，显示当前已设Port VLAN。
MTU VLAN是Port VLAN的特例，MTU VLAN（Multi-Tenant Unit VLAN）是将每个用户所占用的端口与上联端口划分为一个单独的VLAN。
普通端口只能和预先设置的上联端口进行通信，相互之间无法通信使不同端口的用户之间不能直接通信，以保障了网络的安全。
这种情况很适合使用在智能小区中，用户之间不可以直接访问，从而保证住户的网络安全。
H3C S5130-EI系列以太网交换机 典型配置举例-6W100-NTP典型配置举例
H3C S5130-EI NTP典型配置举例Copyright © 2014 杭州华三通信技术有限公司版权所有，保留一切权利。
非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。
本文档中的信息可能变动，恕不另行通知。
目录1 简介 ··················································································································································· 1-12 配置前提 ············································································································································ 1-13 NTP服务器/客户端模式典型配置举例 ································································································ 3-13.1 组网需求············································································································································ 3-13.2 使用版本············································································································································ 3-13.3 配置步骤············································································································································ 3-23.3.1 Device A的配置 ······················································································································ 3-23.3.2 Device B的配置 ······················································································································ 3-23.3.3 Device C的配置 ······················································································································ 3-23.4 验证配置············································································································································ 3-23.5 配置文件············································································································································ 3-34 NTP广播模式典型配置举例 ··············································································································· 4-34.1 组网需求············································································································································ 4-34.2 使用版本············································································································································ 4-44.3 配置步骤············································································································································ 4-44.3.1 Device C的配置 ······················································································································ 4-44.3.2 Device A的配置 ······················································································································ 4-44.4 验证配置············································································································································ 4-54.5 配置文件············································································································································ 4-55 NTP组播模式典型配置举例 ··············································································································· 5-65.1 组网需求············································································································································ 5-65.2 使用版本············································································································································ 5-75.3 配置步骤············································································································································ 5-75.3.1 Device C的配置 ······················································································································ 5-75.3.2 Device D的配置 ······················································································································ 5-75.3.3 Device B的配置 ······················································································································ 5-85.3.4 Device A的配置 ······················································································································ 5-85.4 验证配置············································································································································ 5-85.5 配置文件············································································································································ 5-96 带身份验证的NTP客户端/服务器模式典型配置举例········································································· 6-106.1 组网需求·········································································································································· 6-106.2 使用版本·········································································································································· 6-106.3 配置步骤·········································································································································· 6-116.3.1 Device A的配置 ···················································································································· 6-116.3.2 Device B的配置 ···················································································································· 6-116.3.3 Device C的配置 ···················································································································· 6-116.4 验证配置·········································································································································· 6-126.5 配置文件·········································································································································· 6-127 SNTP典型配置举例 ························································································································· 7-137.1 组网需求·········································································································································· 7-137.2 使用版本·········································································································································· 7-147.3 配置步骤·········································································································································· 7-147.3.1 Device A的配置 ···················································································································· 7-147.3.2 Device B的配置 ···················································································································· 7-147.3.3 Device C的配置 ···················································································································· 7-147.4 验证配置·········································································································································· 7-157.5 配置文件·········································································································································· 7-158 IPv6 NTP服务器/客户端模式典型配置举例 ······················································································ 8-168.1 组网需求·········································································································································· 8-168.2 使用版本·········································································································································· 8-168.3 配置步骤·········································································································································· 8-168.3.1 Device A的配置 ···················································································································· 8-168.3.2 Device B的配置 ···················································································································· 8-168.3.3 Device C的配置 ···················································································································· 8-178.4 验证配置·········································································································································· 8-178.5 配置文件·········································································································································· 8-189 IPv6 NTP组播模式典型配置举例 ····································································································· 9-189.1 组网需求·········································································································································· 9-189.2 使用版本·········································································································································· 9-199.3 配置步骤·········································································································································· 9-199.3.1 Device C的配置 ···················································································································· 9-199.3.2 Device D的配置 ···················································································································· 9-199.3.3 Device B的配置 ···················································································································· 9-209.3.4 Device A的配置 ···················································································································· 9-209.4 验证配置·········································································································································· 9-209.5 配置文件·········································································································································· 9-2110 带身份验证的NTP广播模式典型配置举例 ···················································································· 10-2210.1 组网需求······································································································································ 10-2210.2 使用版本······································································································································ 10-23。
H3C交换机IRF典型配置举例LACP MAD检测方式
一、组网需求由于公司人员激增，接入层交换机提供的端口数目已经不能满足PC的接入需求。
现需要在保护现有投资的基础上扩展端口接入数量，并要求网络易管理、易维护。
二、组网图三、配置思路Device A提供的接入端口数目已经不能满足网络需求，需要另外增加一台设备Device B。
（本文以两台设备组成IRF为例，在实际组网中可以根据需要，将多台设备组成IRF，配置思路和配置步骤与本例类似）。
鉴于第二代智能弹性架构IRF 技术具有管理简便、网络扩展能力强、可靠性高等优点，所以本例使用IRF技术构建接入层（即在Device A和Device B上配置IRF功能）。
为了防止万一IRF链路故障导致IRF分裂、网络中存在两个配置冲突的IRF，需要启用MAD检测功能。
因为接入层设备较多，我们采用LACP MAD检测。
四、配置步骤为便于区分，下文配置中假设IRF形成前Device A的系统名称为DeviceA，Device B的系统名称为Device B；中间设备Device C的系统名称为DeviceC。
（1）配置设备编号# Device A保留缺省编号为1，不需要进行配置。
# 在Device B上将设备的成咒编号修改为2。
<DeviceB> system-view[DeviceB] irf member 1 renumber 2Warning: Renumbering the switch number may result in configuration change or loss. Continue? [Y/N]:y[DeviceB]（2）将两台设备断电后，按图所示连接IRF链路，然后将两台设备上电。
# 在Device A上创建设备的IRF端口2，与物理端口Ten-GigabitEthernet1/1/2绑定，并保存配置。
<DeviceA> system-view[DeviceA] interface ten-gigabitethernet 1/1/2[DeviceA-Ten-GigabitEthernet1/1/2] shutdown[DeviceA] irf-port 1/2[DeviceA-irf-port1/2] port group interface ten-gigabitethernet 1/1/2 [DeviceA-irf-port1/2] quit[DeviceA] interface ten-gigabitethernet 1/1/2[DeviceA-Ten-GigabitEthernet1/1/2] undo shutdown[DeviceA-Ten-GigabitEthernet1/1/2] save# 在Device B上创建设备的IRF端口1，与物理端口Ten-GigabitEthernet2/1/1绑定，并保存配置。
交换机路由器命令大全(结合配置实例)
交换机路由器命令大全（结合配置实例）一交换机命令switch: ；ROM状态，路由器是rommon>hostname> ；用户模式hostname# ；特权模式hostname(config)# ；全局配置模式hostname(config-if)# ；接口状态switch>enable ；进入特权模式交换机口令设置：switch#config terminal ；进入全局配置模式switch(config)#hostname ；设置交换机的主机名switch(config)#enable secret xxx ；设置特权加密口令switch(config)#enable password xxa ；设置特权非密口令switch(config)#line console 0 ；进入控制台口switch(config-line)#line vty 0 4 ；进入虚拟终端switch(config-line)#login ；允许登录switch(config-line)#password xx ；设置登录口令xxswitch#exit ；返回命令交换机VLAN设置：switch#vlan database ；进入VLAN设置switch(vlan)#vlan 2 ；建VLAN 2switch(vlan)#no vlan 2 ；删vlan 2switch(config)#int f0/1 ；进入端口1switch(config-if)#switchport access vlan 2 ；当前端口加入vlan 2 switch(config-if)#switchport mode trunk ；设置为干线switch(config-if)#switchport trunk allowed vlan 1，2 ；设置允许的vlan switch(config-if)#switchport trunk encap dot1q ；设置vlan 中继switch(config)#vtp domain ；设置发vtp域名switch(config)#vtp password ；设置发vtp密码switch(config)#vtp mode server ；设置发vtp模式switch(config)#vtp mode client ；设置发vtp模式switch(config)#interface vlan 1 ；进入vlan 1switch(config-if)#ip address ；设置IP地址switch(config)#ip default-gateway ；设置默认网关switch#dir flash: ；查看闪存交换机显示命令：switch#write ；保存配置信息switch#show vtp ；查看vtp配置信息switch#show run ；查看当前配置信息switch#show vlan ；查看vlan配置信息switch#show interface ；查看端口信息switch#show int f0/0 ；查看指定端口信息二、路由器命令路由器显示命令：router#show run ；显示配置信息router#show interface ；显示接口信息router#show ip route ；显示路由信息router#show cdp nei ；显示邻居信息router#reload ；重新起动路由器口令设置：router>enable ；进入特权模式router#config terminal ；进入全局配置模式router(config)#hostname ；设置交换机的主机名router(config)#enable secret xxx ；设置特权加密口令router(config)#enable password xxb ；设置特权非密口令router(config)#line console 0 ；进入控制台口router(config-line)#line vty 0 4 ；进入虚拟终端router(config-line)#login ；要求口令验证router(config-line)#password xx ；设置登录口令xxrouter(config)#(Ctrl+z) ；返回特权模式router#exit ；返回命令路由器配置：router(config)#int s0/0 ；进入Serail接口router(config-if)#no shutdown ；激活当前接口router(config-if)#clock rate 64000 ；设置同步时钟router(config-if)#ip address ；设置IP地址router(config-if)#ip address second ；设置第二个IProuter(config-if)#int f0/0.1 ；进入子接口router(config-subif.1)#ip address ；设置子接口IProuter(config-subif.1)#encapsulation dot1q ；绑定vlan中继协议router(config)#config-register 0x2142 ；跳过配置文件router(config)#config-register 0x2102 ；正常使用配置文件router#reload ；重新引导静态路由：ip route ；命令格式router(config)#ip route 2.0.0.0 255.0.0.0 1.1.1.2 ；静态路由举例router(config)#ip route 0.0.0.0 0.0.0.0 1.1.1.2 ；默认路由举例动态路由：router(config)#ip routing ；启动路由转发router(config)#router rip；启动RIP路由协议。
华为S2700 S3700系列交换机 01-12 配置举例
12.4 配置 MSTP 的基本功能示例
介绍配置MSTP的基本功能示例。
组网需求
本例中的交换机都使用二层接口运行MSTP。需求如下：
文档版本 07 (2020-04-15)
版权所有 © 华为技术有限公司
213
S2700, S3700 系列以太网交换机 Web 网管操作指南
12 配置举例
操作结果
d. 单击“确定”。 ● 将接口Ethernet0/0/4加入VLAN3
a. 单击导航树中的“业务管理 > VLAN > Hybrid口”菜单，进入“Hybrid口” 界面。
组网需求
如图12-1所示，某企业包含4个部门。部门1通过Switch1与Switch的接口Eth0/0/1相 连。部门2通过LSW-A与Switch的接口Eth0/0/2相连。部门3通过LSW-B与Switch的接 口Eth0/0/3相连。部门4通过Switch2与Switch的接口Eth0/0/4相连。要求：
b. 在“Hybrid口”页面，单击接口“Ethernet0/0/1”后对应的“ ”图标，进 入“修改接口的VLAN配置”界面。
c. 输入“Tagged”为“2”。 d. 单击“确定”。
说明
所有接口默认的链路类型是hybrid，如果需要配置的接口已经修改了链路类型，需要把它 们转换为hybrid口再进行配置。
● 在域RG2内，SwitchB为CIST域根，SwitchB为实例1的域根。
● SwitchC和SwitchD的Ethernet0/0/2接口与PC机相连，设置为边缘端口，同时在 SwitchC和SwitchD上应用BPDU保护功能。
迈普交换机配置
迈普交换机配置迈普交换机配置1、配置举例2、配置交换机名称为“Switch_1”。
语法描述Switch>enable 进入到Enable模式Switch#configure terminal 进入到全局配置模式Switch(config)#hostname Switch_1 配置交换机名称3、设置enable密码（config t 模式下）：enable password [0 | 7 ] string 设置enable密码，string为所要配置的密码4、创建VLAN：vlan [vlan-num]语法描述vlan-num 打开VLAN命令，并进入到VLAN配置模式，值的范围为1~40945、添加VLAN描述:description string string为所增加描述的内容6、在VLAN下添加端口：port port-list untag| tag 配置端口为打标模式或不打标模式7、在端口下绑定PVID号（也就是端口的默认VLAN号）：pvid pvid-num 在端口配置模式下配置（port下）8、启用全局的igmpsnoop：igmpsnoop enable9、在端口下禁用广播风暴抑制功能：storm-control disable10、交换机三网合一配置Switch#show run //查看配置vlan 1 //删除vlan 1中的端口description defaultport 0/0-0/7untaggedvlan 20description VLAN 20 /创建上网VLAN 20port 0/0 tagged /tagged为打标也就是trunkport 0/1 untagged /untagged为非打标也就是accessport 0/1 pvid 20 /设置端口1的PVID为20vlan 2103description VLAN2103 /创建电话VLAN 2103port 0/0 tagged /tagged为打标也就是trunkport 0/2 untagged /untagged为非打标也就是accessport 0/2 pvid 2103 /设置端口2的PVID为2103vlan 2104description VLAN2104 /创建IPTV VLAN 2104port 0/0 tagged /tagged为打标也就是trunkport 0/3-0/6 untagged /untagged为非打标也就是accessport 0/3-0/6 pvid 2104 /设置端口3-6的PVID为2104exit /退出igmpsnoop enable /开启IGMP组播功能Spanning-tree disable /关闭生成树协议port 0/0storm-control disable /广播风暴控制抑制功能关闭exit /退出wr /保存11、端口环路配置迈普交换机环路检测功能需要在端口下配置：keepalive ，举例说明比如您要在0/1端口下开启端口环路检测功能的话port0/1keepalive 100 //其中100为时间，单位是秒，此命令的意思是每100秒检测一次端口环路12、清空配置迈普交换机清空配置的命令为：在特权模式下也就是#后输入filesystem 回车，然后 dir 可以看到显示出来的文件有个叫startup的，这个文件就是存储配置的文件，把这个文件删除就可以清空配置，使用命令delete startup 将startup文件删除，然后再关电重新启动交换机即可。
交换机常用功能举例管理型交换机IEEE 802.1Q VLAN设置应用实例
交换机常用功能举例（四）——管理型交换机IEEE 802.1Q VLAN设置应用实例一VLAN的概念VLAN（Virtual Local Area Network）即虚拟局域网，是一种通过将局域网内的设备逻辑地而不是物理地划分成一个个网段从而实现虚拟工作组的新兴技术。
IEEE于1999年颁布了用以标准化VLAN实现方案的802.1Q协议标准草案。
VLAN是为解决以太网的广播问题和安全性而提出的一种协议，它在以太网帧的基础上增加了VLAN头，用VLAN ID把用户划分为更小的工作组，限制不同工作组间的用户二层互访，每个工作组就是一个虚拟局域网。
虚拟局域网的好处是控制网络的广播风暴、确保网络安全、简化网络管理、减少了对路由器的需求、灵活的网络分组、减少网络解决方案费用、更合理的利用服务资源。
VLAN是局域交换网的灵魂。
VLAN充分体现了现代网络技术的重要特征：高速、灵活、管理简便和扩展容易。
是否具有VLAN功能是衡量局域网交换机的一项重要指标。
网络的虚拟化是未来网络发展的潮流。
二VLAN的划分方式VLAN的定义方式有：物理端口、MAC地址、协议、IP地址和用户自定义过滤方式等。
802.1Q是VLAN的标准，是将VLAN ID封装在帧头，使得帧跨越不同设备，也能保留VLAN信息。
不同厂家的交换机只要支持802.1Q VLAN就可以跨越交换机，可以统一划分管理。
三802.1q Tag VLAN的设置实例我司的大多数管理型交换机都支持基于端口的VLAN和基于802.1q协议的VLAN功能。
基于端口规则的VLAN这是最早的VLAN类型，也是最简单的VLAN，可以将局域网交换机其中的几个端口指定成一个VLAN。
以下主要介绍管理型交换机的IEEE 802.1Q VLAN设置，设置IEEE802.1Q VLAN大体分三步：1、选择VLAN的类型。
2、设置VLAN组的划分。
3、端口PVID值的设置。
下面用TL-SL3226P交换机举三个实例来说明802.1Q VLAN的划分方法。
H3C-S5600系列交换机典型配置举例
H3C-S5600系列交换机典型配置举例S5600系列交换机典型配置举例2.1.1 静态路由典型配置1. 组网需求(1)需求分析某小型公司办公网络需要任意两个节点之间能够互通，网络结构简单、稳定，用户希望最大限度利用现有设备。
用户现在拥有的设备不支持动态路由协议。
根据用户需求及用户网络环境，选择静态路由实现用户网络之间互通。
(2)网络规划根据用户需求，设计如图2-1所示网络拓扑图。
图2-1 静态路由配置举例组网图2. 配置步骤交换机上的配置步骤：# 设置以太网交换机Switch A的静态路由。
<SwitchA> system-view[SwitchA] ip route-static 1.1.3.0 255.255.255.0 1.1.2.2[SwitchA] ip route-static 1.1.4.0 255.255.255.0 1.1.2.2[SwitchA] ip route-static 1.1.5.0 255.255.255.0 1.1.2.2# 设置以太网交换机Switch B的静态路由。
<SwitchB> system-view[SwitchB] ip route-static 1.1.2.0 255.255.255.0 1.1.3.1[SwitchB] ip route-static 1.1.5.0 255.255.255.0 1.1.3.1[SwitchB] ip route-static 1.1.1.0 255.255.255.0 1.1.3.1# 设置以太网交换机Switch C的静态路由。
<SwitchC> system-view[SwitchC] ip route-static 1.1.1.0 255.255.255.0 1.1.2.1[SwitchC] ip route-static 1.1.4.0 255.255.255.0 1.1.3.2主机上的配置步骤：# 在主机A上配缺省网关为1.1.5.1，具体配置略。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
在用户登陆交换机进行数据配置的时候，首先让我们注意的是命令行视图问题，不同的试图提供不同的数据配置级别，也就是对交换机操作的权限问题。
在利用COUSOLE口登陆交换机以后首先进入的是视图模式。
视图模式只提供对交换机已配数据的浏览但不能进行数据修改。
在不同的视图模式下输入“？”。
就可以看到本视图下能够实施的命令功能。
3）端口操作
以太网端口有三种链路类型：Access、Trunk、Hybrid。
设置以太网端口的广播风暴比
VLAN(Virtual local Area Network)配置
把当前端口加入到指定的vlan中
对上网业务vlan进行基于vlan的端口隔离(不适用于IPTV等组播业务中)
开启/关闭上下行口环路检测功能
CMNET网二层交换机数据配置举例以及应该注意的问题
以下是移动实际网络中接入层二系列交换机的数据配置举例：。