H3C学习笔记
进入系统视图
system-view
查看接口摘要信息
dis ip int brief
显示当前配置信息
dis cu（current-configuration）
显示当前端口配置
dis this
进入端口
int GE0/1(gi 0/1)
关闭/重启接口
shutdown/undo shutdown
配置IP地址
ip add ip地址 掩码
删除ip地址
undo ip add
显示stp信息
dis stp
配置桥ID
stp priority 0/4096
显示stp端口信息
dis stp brief
显示路由表
dis ip routing-table
静态路由配置
ip rout-static 目标网段网络地址 掩码 下一跳IP地址 [preference 优先级]
添加回环路由
int LoopBack 2
ip add 192.168.2.2 24
添加缺省路由
ip rout-static 0.0.0.0 0 下一跳IP地址
显示vlan
dis vlan brief
新增vlan
vlan 10
修改接口模式
port link-type access/trunk
进入端口后，将端口加入vlan
port access vlan 10
关闭消息中心
undo in en
删除vlan配置
undo port access vlan
为trunk端口指派vlan
port permit vlan 10 20
配置本真vlan,通信时不打标记
port trunk pvid vlan 20
启用端口
undo shutdown
接入子接口
int gi 0/0.1
为路由子接口指定vlan
vlan-type dot1q vid 10
创建虚拟端口
int vlan 10
为虚拟端口配置ip地址
ip add ip地址
dhcp配置
dhcp enable
dhcp server ip-pool a
gateway-list 12.1.1.1
network 12.1.1.0 mask 255.255.255.0
dns-list 8.8.8.8 9.9.9.9
dhcp select server
dhcp server forbidden-ip 12.1.1.1 12.1.1.10#排除ip地址
ip address dhcp-alloc#自动获取ip地址
NAT配置
nat outbound#使用端口外网地址
na address-group 1 #使用固定ip地址
address 12.1.1.3 12.1.1.4
acl basic 2000
rule permit source 192.168.10.0 0.0.0.255
int gi 0/1#进入端口
nat outbound 2000 address-group 1
开启telnet
telnet server enable
line vty 0 4
authentication-mode scheme
quit
local-user hcnp
password simple 123
#service-type terminal
service-type telnet
NAT内网地址
int gi 0/1
nat server protocal tcp global 外网地址 inside 内网地址 端口
dis nat session#显示nat信息
NAT调试命令
terminal debugging
terminal monitor
debugging nat event
debugging nat packet
二层链路聚合
int bridge-Aggrengation 1
int range gi 1/0/2 to gi 1/0/3
port link-aggregation group 1
acl配置
acl basic 2000#基本acl
rule deny source 192.168.10.1 0 #精确匹配
int gi 0/2
packet-filter 2000 outbound #阻塞指定源数据包
acl advanced 3000#高级acl
rule deny icmp source 192.168.10.0 0.0.0.255 destination 172.16.10.2 0 #阻塞指定网段ping目标地址
int gi 0/2
packet-filter 3000 outbound
智能弹性架构irf
交换机1
dis irf
irf member 1 priority 32
int rang Ten 1/0/50 to Ten 1/0/51
shutdown
irf-port 1/1
port group interface Ten-GigabitEthernet1/0/50
port group interface Ten-GigabitEthernet1/0/51
irf-port-configuration active
int rang Ten 1/0/50 to Ten 1/0/51
undo shutdown
save
插网线
交换机2
dis irf
irf member 1 renumber 2
int rang Ten 1/0/50 to Ten 1/0/51
shutdown
irf-port 1/1
port group interface Ten-GigabitEthernet1/0/50
port group interface Ten-GigabitEthernet1/0/51
irf-port-configuration active
int rang Ten 1/0/50 to Ten 1/0/51
undo shutdown
save
插网线
