华为交换机配置模版脚本.docx

总体模版

sys

user-interfacevty04authentication-modepassword

setauthenticationpasswordciphersdsy/sdsyuserprivilegelevel15

qui

user-interfaceconso0authentication-modepassword

setauthenticationpasswordciphersdsy/sdsyqui

iproute-static

vlan39qui

intvlan1qui

undointvlan1vlan255

intvlan255

ipadd0224

intg0/0/8

portlink-typetrunk

porttrunkallow-passvlanallqui

intrangeg0/0/1tog0/0/7portlink-typaccess

portdefaulvlan39stpedged-portenable

loopback-detectionenableexit

errdisablerecoverycauseloopback-detetionerrdisablerecoveryinterval60

dhcp-snoopingenable

intrangeg0/0/8dhcp-snoopingtrustdhcpenable

3A认证

Aaa

local-usermengpasswordciphermengprivilegelevel15User-interfacevty04

Authenticationmodeaaa

端口聚合

创建聚合组命令如下：

[S9303]interfaceEth-Trunk1 //聚合组名称为ETH-Trunk1[S9303-Eth-Trunk1]descriptionTo-S9303-2//描述

[S9303-Eth-Trunk1]undoporthybridvlan//去1掉VLAN1 的透传[S9303-Eth-Trunk1]porthybridtaggedvlan100t/o/V2L0A0N透传3

进入端口，将端口加入聚合组，命令如下:

[S9303]interfaceGigabitEthernet1/1/16 //进入G1/1/16端口[S9303-GigabitEthernet1/1/16]descriptionTo-S7810-G端7/口0/描31述//

[S9303-GigabitEthernet1/1/16]eth-trunk1 //加入聚合组1[S9303]interfaceGigabitEthernet1/1/17 //进入G1/1/17端口[S9303-GigabitEthernet1/1/17]descriptionTo-S7810-G7//端/口30描述

[S9303-GigabitEthernet1/1/17]eth-trunk1 //加入聚合组1

dhcpenable

#

dhcpsnoopingenable

user-bindstaticip-address192.168.－1.－20－0的地址没法使用

保留手动分配的地址，不加保留的手动分配

user-bindstaticip-address01mac-address4c1f-cc58-379e －－保留手动分配的地址和MAC 地址捆绑

#

interfaceVlanif1000

ipaddress

dhcpselectinterface

dhcpserverexcluded-ip-address00192.1－68－.1－.2保54留手动分配的地址段

expiredday0hour5

dhcpserverforbidden-ip0153displaydhcpclient

#

interfaceGigabitEthernet0/0/1portlink-typeaccess

portdefaultvlan1000

ipsourcecheckuser-bindenable

ipsourcecheckuser-bindcheck-itemip-addressmac-addressdhcpsnoopingenable

dhcpsnoopingcheckuser-bindenable

expiredday0hour5

dhcpserver