最新H3C交换机操作手册
H3C S6850系列数据中心交换机 用户手册说明书
H3C S6850 Series Data Center Switches Release Date: Nov, 2022New H3C Technologies Co., LimitedH3C S6850 Series Data Center SwitchesProduct overviewH3C S6850 high-density intelligent switch series is developed for data centers and cloud computing networks. It provides powerful hardware forwarding capacity and abundant data center features. It provides up to 48*25G ports and 8*100G ports. The switch supports modular power modules and fan trays. By using different fan trays, the switch can provide field-changeable airflows.The switch is an ideal product for high-density 25GE switching and aggregation at data centers and cloud computing networks. It can also operate as a TOR access switch on an overlay or integrated network.Product AppearanceThe S6850 series come in the following models.∙S6850-56HF: The switch provides 48 × 25G SFP28 ports, 8 × 100G QSFP28 ports, and 2 × 1G SFP portsS6850-56HF front panel S6850-56HF rear panel∙S6850-2C: The switch provides 2 service slots, 2 × 100G QSFP28 portsS6850-2C front panel S6850-2C rear panelFeatures and BenefitsHigh-Density 25GE Access∙The switch offers high-density 100G/40G/25G/10G ports and a wire-speed forwarding capacity as high as 4 Tbps. With standard 25G ports, it can provide high-density server access in high-end data centers.IRF2 (Second Generation Intelligent Resilience Architecture)∙Facing the application requirements of the unified switching architecture of the data center, the series switches support the IRF2 technology, which virtualizes multiple devices into one logical.∙The equipment has strong advantages in scalability, reliability, distributed and availability.∙ IRF2 not only can achieve a long-distance intelligent elastic architecture within a rack, across racks, and even across regions.Abundant Data Center FeaturesThe switch supports abundant data center features, including:∙H3C S6850 switch series supports VXLAN (Virtual Extensible LAN), which provides two major benefits, higher scalability of Layer 2 segmentation and better utilization of available network paths.∙H3C S6850 switch series supports MP-BGP EVPN (Multiprotocol Border Gateway Protocol Ethernet Virtual Private Network) which can run as VXLAN control plane to simplify VXLAN configuration,eliminate traffic flooding and reduce full mesh requirements between VTEPs via the introduction of BGP RR.∙H3C S6850 switch series support Fiber Channel over Ethernet (FCoE), which permits storage, data, and computing services to be transmitted on one network, reducing the costs of networkconstruction and maintenance.∙H3C S6850 switch series support Priority-based Flow Control (PFC), Enhanced Transmission Selection (ETS) and Data Center Bridging eXchange (DCBX). These features ensure low latency and zero packet loss for FC storage, RDMA applications and high-speed computing services.H3C Distributed Resilient Network Interconnection (DRNI)∙H3C S6850 switch series support DRNI(M-LAG), which enables links of multiple switches to aggregate into one to implement device-level link backup. DRNI is applicable to servers dual-homed to a pair of access devices for node redundancy.∙ Streamlined topology: DRNI simplifies the network topology and spanning tree configuration by virtualizing two physical devices into one logical device.∙Independent upgrading: The DR member devices can be upgraded independently one by one to minimize the impact on traffic forwarding.∙High availability: The DR system uses a keepalive link to detect multi-active collision to ensure that only one member device forwards traffic after a DR system splits.Powerful VisibilityWith the rapid development of data center, the scale of the data center expands rapidly; reliability, operation and maintenance become the bottleneck of data center for further expansion. H3C S6850 switch series conform to the trend of automated data operation and maintenance, and support visualization of data center.∙INT (Inband-Telemetry) is a network monitoring technology used to collect data from the device.Compared with the traditional network monitoring technology featuring one query, one reporting, INT requires only one-time configuration for continuous data reporting, thereby reducing therequest processing load of the device. INT can collect timestamp information, device ID, portinformation, and buffer information in real time. INT can be implemented in IP, EVPN, and VXLANnetworks.∙Provides a variety of traffic monitoring and analytic tools, including sFlow, NetStream, SPAN/RSPAN/ERSPAN mirroring, and port mirroring to help customers perform precise trafficanalysis and gain visibility into network application traffic. With these tools, customers can collectnetwork traffic data to evaluate network health status, create traffic analysis reports, perform traffic engineering, and optimize resource allocation.∙Supports realtime monitoring of buffer and port queues, allowing for visible and dynamic network optimization.∙Supports PTP (Precision Time Protocol) to achieve highly precise clock synchronization.RoCE (RDMA over Converged Ethernet)∙Remote Direct Memory Access (RDMA) directly transmits the user application data to the storage space of the servers, and uses the network to fast transmit the data from the local system to thestorage of the remote system. RDMA eliminates multiple data copying and context switchingoperations during the transmission process, and reduces the CPU load.∙RoCE supports RDMA on standard Ethernet infrastructures. H3C S6850 switch support RoCE and can be used to build a lossless Ethernet network to ensure zero packet loss.∙RoCE include the following key features，include PFC(Priority based Flow Control), ECN(Explicit Congestion Notification), DCBX(Data Center Bridging Capability Exchange Protocol), ETS(Enhanced Transmission Selection).Flexible programmability∙The switch uses industry-leading programmable switching chips that allow users to define the forwarding logic as needed.∙Users can develop new features that meet the evolving trend of their networks through simple software updates.Powerful SDN capacity∙ H3C S6850 switch series adopt the next-generation chip with more flexible Openflow FlowTable, more resources and accurate ACL matching, which greatly improves the software-defined network (SDN) capabilities and meet the demand of data center SDN network.∙ H3C S6850 switch series can interconnect with H3C SeerEngine-DC Controller through standard protocols such as OVSDB, Netconf and SNMP to implement network automatic deployment andconfiguration.Comprehensive security control policies∙H3C S6850 series switch supports AAA, RADIUS and user account based authentication, IP, MAC, VLAN, port-based user identification, dynamic and static binding; when working with the H3C iMC platform, it can conduct real time management, instant diagnosis and crackdown on illicit network behavior.∙H3C S6850 series switch supports enhanced ACL control logic, which enables an enormous amount of in-port and out-port ACL, and delegate VLAN based ACL. This simplifies user deployment process and avoids ACL resource wastage. S6850 series switch can also take advantage of Unicast ReversePath Forwarding (Unicast RFP). When the device receives a packet, it will perform the reverse check to verify the source address from which the packets are supposedly originated, and will drop thepacket if such path doesn’t exist. This can effectively prevent the source address spoofing in thenetwork.Multiple reliability protection∙The S6850 series switch provides multiple reliability protection at both switch and link levels. With over current, overvoltage, and overheat protection, all models have a redundant pluggable powermodule, which enables flexible configuration of AC or DC power modules based on actual needs.The entire switch supports fault detection and alarm for power supply and fan, allowing fan speed to change to suit different ambient temperatures.∙The switch supports diverse link redundancy technologies such as H3C proprietary RRPP, VRRPE, and Smart Link. These technologies ensure quick network convergence even when large amount of traffic of multiple services runs on the network.∙Flexible choice of airflow∙To cope with data center cooling aisle design, the H3C S6850 series switch comes with flexible airflow design, which features bi-cooling aisles in the front and back. Users may also choose thedirection of airflow (from front to back or vice versa) by selecting a different fan tray.Excellent manageabilityThe switch improves system management through the following ways:∙Provides multiple management interfaces, including the serial console port, mini USB console port, USB port, two out-of-band management ports, and two SFP ports. The SFP ports can be used as in-band management port through which encapsulated sampling packets are sent to the controller or other management devices for deep analysis.∙Supports multiple access methods, including SNMPv1/v2c/v3, Telnet, SSH 2.0, SSL, and FTP.∙Supports standard NETCONF APIs that allow users to configure and manage the switch, enhancing the compatibility with third-party applications.Hardware SpecificationItem S6850-56HF S6850-2CDimensions (H × W × D) 43.6 × 440 × 460 mm (1.72 × 17.32 × 18.11 in) 44.2 × 440 × 660 mm (1.74 × 17.32 × 18.11 in) Weight ≤ 15 kg (33.07 lb) ≤ 16 kg (35.27 lb)Serial console port 1 1Out-of-band management port One GE copper port and one GE fiber port One GE copper port and one GE fiber port Mini USB console port 1 1USB port 1 1QSFP28 port 8 2SFP28 port 48 -SFP port 2 -Expansion slot - 2CPU 2.2GHz@4Core 2.2GHz@4CoreFlash/SDRAM 4GB/8GB 4GB/8GBLatency <1μs <1μsSwitching capacity 4 Tbps 3.6TbpsForwarding capacity 2024 Mpps 2024 MppsBuffer(byte) 32M 32MAC-input voltage 90v AC to 264v AC 90v AC to 264v ACDC-input voltage –40v DC to –72v DC –40v DC to –72v DCPower module slot 2 2Fan tray slot 5 Hot-swappable fan, fan speed adjustable and wind invertibleAir flow direction From front to rear or from rear to front From front to rear or from rear to frontStatic power consumption Single AC: 167 WDual AC: 179 WSingle DC: 154 WDual DC: 174 WSingle AC: 136 WDual AC: 148 WSingle DC: 132 WDual DC: 146 WTypical power consumption Single AC: 201 WDual AC: 224 WSingle DC: 198 WDual DC: 210 WSingle AC: 273 W ( with LSWM18CQ)Dual AC: 282 W( with LSWM18CQ)Single DC: 268 W( with LSWM18CQ)Dual DC: 275 W( with LSWM18CQ)Maximum heat consumption (BTU/hour) Single AC: 686Dual AC: 765Single DC: 676Dual DC: 717Single AC:932 ( with LSWM18CQ)Dual AC:963( with LSWM18CQ)Single DC:915( with LSWM18CQ)Dual DC: 939( with LSWM18CQ)Operating temperature 0°C to 45°C (32°F to 113°F) Operating humidity 5% to 95%, noncondensingSoftware SpecificationItem Feature descriptionDevice Virtualization IRF2.0M-LAG(DRNI) S-MLAGNetwork Virtualization BGP-EVPN VxLAN EVPN ESVxLAN L2 VxLAN gatewayL3 VxLAN gateway Distributed VxLAN gateway Centralized VxLAN gateway EVPN VxLANmanual configured VxLAN IPv4 VxLAN tunnelIPv6 VxLAN tunnelQinQ VxLAN accessSDN H3C SeerEngine-DCLossless network PFC and ECNDCBXRDMA and ROCEPFC deadlock watchdog ECN overlayROCE stream analysisProgrammability Openflow1.3NetconfAnsiblePython//TCL/Restful API to realize DevOps automated operation and maintenanceTraffic analysis SflowNetstream, only S6850-2CVLAN Port-based VLANsMac-based VLAN ,Subnet-based VLAN and Protocol VLAN VLAN mappingQinQMVRP(Multiple VLAN Registration Protocol)Super VLANPVLANMAC address Dynamic learning and aging of mac address entries Dynamic,static and blackhole entriesMac address limiting on portsIPv4 routing RIP(Routing Information Protocol) v1/2OSPF (Open Shortest Path First) v1/v2ISIS(Intermediate System to Intermediate system) BGP (Border Gateway Protocol)Routing policyVRRPPBRItem SpecificationIPv6 routing RIPng OSPFv3IPv6 ISIS BGP4+ Routing policy VRRPPBRMPLS/VPLS Support L3 MPLS VPNSupport L2 VPN: VLL (Martini, Kompella) Support VPLS, VLLSupport hierarchical VPLS and QinQ+VPLS access Support P/PE functionSupport LDP protocolSupport MCESupport MPLS OAMMulticast IGMP snoopingMLD snoopingIPv4 and IPv6 multicast VLAN IPv4 and IPv6 PIM snooping IGMP and MLDPIM and IPv6 PIMMSDPMulticast VPNReliability LACPSTP/RSTP/MSTP protocol, PVST compatibleSTP Root Guard and BPDU GuardRRPP and ERPSEthernet OAMSmartlinkDLDPBFD for OSPF/OSPFv3, BGP/BGP4, IS-IS/IS-ISv6, PIM/IPM for IPv6 and Static route VRRP and VRRPEQOS Weighted Random Early Detection (WRED) and tail dropFlexible queue scheduling algorithms based on port and queue, including strict priority (SP), Weighted Deficit Round Robin (WDRR), Weighted Fair Queuing (WFQ), SP + WDRR, and SP + WFQ. Traffic shapingPacket filtering at L2 (Layer 2) through L4 (Layer 4); flow classification based on source MAC address, destination MAC address, source IP (IPv4/IPv6) address, destination IP (IPv4/IPv6) address, port, protocol, and VLAN to apply qos policy,including mirroring,redirection,priority remark etc. Committed access rate (CAR)Account by packet and byteCOPPFC/FOCE FC, FC subcard is supported on S6850-2C FCOETelemetry gRPC ERSPAN Mirror on dropItem SpecificationTelemetry Telemetry StreamINTiNQAPacket trace, Packet captureConfiguration and maintenance Console telnet and SSH terminalsSNMPv1/v2/v3ZTPSystem logFile upload and download via FTP/TFTP, BootRom update and remote update NQAping,tracertVxLAN ping and VxLAN tracertNTPPTP(1588v2)GIR Graceful Insertion and RemovalSecurity and management Macsec, Macsec subcard is supported on S6850-2C and only 100G macsec subcard can support 256-bit AES encryptionMicro-SegmentationHierarchical management and password protection of usersAuthentication methods,including AAA,RADIUS and HWTACACSSupport DDos, ARP attack and ICMP attack functionIP-MAC-port binding and IP Source GuardSSH 2.0HTTPSSSLPKIBoot ROM access control (password recovery)RMONEMC FCC Part 15 Subpart B CLASS A ICES-003 CLASS AVCCI CLASS ACISPR 32 CLASS AEN 55032 CLASS AAS/NZS CISPR32 CLASS A CISPR 24EN 55024EN 61000-3-2EN 61000-3-3ETSI EN 300 386GB/T 9254YD/T 993IEEE Standard 802.3x/802.3ad/802.3AH/802.1P/802.1Q/802.1X/802.1D/802.1w/802.1s/802.1AG 802.1x/802.1Qbb/802.1az/802.1QazSafety UL 60950-1CAN/CSA C22.2 No 60950-1 IEC 60950-1EN 60950-1AS/NZS 60950-1FDA 21 CFR Subchapter JPerformance and scalabilityPerformance and scalabilityDescriptionPerformance RIB 1MMSTP instance 64PVST instance 510PVST logical port number 2000VRRP VRID 255VRRP group 256NQA group 32Static table static mac-address 4000static multicast mac-address 1Kstatic ARP 1Kstatic ND 4Kstatic IPv4 routing table 2Kstatic IPv6 routing table 4000Data Center ApplicationThe typical data center application is an EVPN-VxLAN design,S12500G-AF or S12500X-AF switches work as spine or spine/border, S68XX series work as leaf and border or ED. From this design, the usres can get a non-blocking large L2 system.Order informationNew H3C Technologies Co., LimitedBeijing HeadquartersTower 1, LSH Center, 8 Guangshun South Street, Chaoyang District, Beijing, ChinaZip: 100102Hangzhou HeadquartersNo.466 Changhe Road, Binjiang District, Hangzhou, Zhejiang, ChinaZip: 310052Tel: +86-571-86760000 Copyright ©2022 New H3C Technologies Co., Limited Reserves all rightsDisclaimer: Though H3C strives to provide accurate information in this document, we cannot guarantee that details do not contain any technical error or printing error. Therefore, H3C cannot accept responsibility for any inaccuracy in this document. H3C reserves the right for the modification of the contents herein without prior notification。
华为 H3C S1024R使用手册
10Base-T： 3/4/5 类双绞线，支持最大传输距离 100m 100Base-TX： 5 类双绞线，支持最大传输距离 100m
1.2 产品特性
表1-1 S1016R/1024R 以太网交换机产品特性
项目
描述
外形尺寸 （长×宽×高）
440mm×230mm×44mm
重量 固定端口 固定端口属性
网线类型 输入电压
2.5Kg
S1016R：16 个 10/100Base-TX 自适应以太网端口 S1024R：24 个 10/100Base-TX 自适应以太网端口
z 请不要将交换机放在水边或潮湿的地方，并防止水或湿气进 入交换机机壳。
z 请保证交换机工作环境的清洁，过多的灰尘会造成静电吸 附，不但会影响设备寿命，而且容易造成通信故障。
z S1016R/1024R 以太网交换机整机发热量很小，采取自然方 式散热。故应保持交换机通气孔畅通，请勿堆砌放置。
z 交换机要在正确的电压下才能正常工作，请确认工作电压同 交换机所标示的电压相符。
1. 前面板 S1016R/1024R以太网交换机前面板如图 1-1和图 1-2所示，从左 到 右 依 次 排 列 有 电 源 指 示 灯 ， 各 端 口 指 示 灯 ， 16/24 个 （S1016R/S1024R）固定的 10/100Base-TX以太网端口。
图1-1 S1016R 以太网交换机前面板示意图 1-2
灭 绿灯闪烁
以太网链路未建立 端口正在收发数据
1-3
H3C S5500-EI系列以太网交换机操作手册
H3C S7500E系列以太网交换机操作手册
1.7 VLAN显示和维护
.............................................................................................................. 1-13
1.8 VLAN典型配置举例
3.2 配置Voice VLAN ................................................................................................................ 3-3
3.2.1 配置准备
........................................................................................... 2-3
第
3章 Voice VLAN配置
.........................................................................................................3-1
2.3 Isolate-user-vlan显示和维护
.............................................................................................. 2-2
2.4 Isolate-user-vlan典型配置举例
1.1 VLAN简介
.......................................................................................................................... 1-1
(完整版)H3C5120完全配置手册
02-登录交换机配置目录1 登录以太网交换机1.1 登录以太网交换机方法简介1.2 用户界面简介1.2.1 交换机支持的用户界面1.2.2 用户与用户界面的关系1.2.3 交换机用户界面编号1.2.4 用户界面公共配置2 通过Console口进行本地登录2.1 通过Console口进行本地登录简介2.2 通过Console口登录交换机的配置环境搭建2.3 配置Console口登录方式的公共属性2.4 Console口登录配置任务简介2.5 认证方式为None时Console口登录方式的配置2.5.1 配置过程2.5.2 配置举例2.6 认证方式为Password时Console口登录方式的配置2.6.1 配置过程2.6.2 配置举例2.7 认证方式为Scheme时Console口登录方式的配置2.7.1 配置过程2.7.2 配置举例3 通过Telnet/SSH进行远程登录3.1 通过Telnet进行远程登录3.1.1 通过Telnet登录简介3.1.2 Telnet配置环境搭建3.1.3 配置Telnet登录方式的公共属性3.1.4 Telnet登录配置任务简介3.1.5 认证方式为None时Telnet登录方式的配置3.1.6 认证方式为Password时Telnet登录方式的配置3.1.7 认证方式为Scheme时Telnet登录方式的配置3.2 通过SSH进行登录3.2.1 通过SSH进行登录简介3.2.2 通过SSH进行登录配置4 通过Web网管登录4.1 通过Web网管登录简介4.2 通过Web网管登录配置4.3 Web用户显示4.4 通过Web网管登录举例5 通过NMS登录5.1 通过NMS登录简介5.2 通过NMS方式登录组网结构6 Telnet业务报文指定源IP6.1 Telnet业务报文指定源IP简介6.2 配置Telnet业务报文指定源IP6.3 配置Telnet业务报文指定源IP显示7 对登录用户的控制7.1 对登录用户的控制简介7.2 配置对Telnet的控制7.2.1 配置准备7.2.2 通过源IP对Telnet进行控制7.2.3 通过源IP、目的IP对Telnet进行控制7.2.4 通过源MAC地址对Telnet进行控制7.2.5 配置举例7.3 通过源IP对网管用户进行控制7.3.1 配置准备7.3.2 通过源IP对网管用户进行控制7.3.3 配置举例7.4 通过源IP对Web用户进行控制7.4.1 配置准备7.4.2 通过源IP对Web用户进行控制7.4.3 强制在线Web用户下线7.4.4 配置举例1 登录以太网交换机1.1 登录以太网交换机方法简介用户可以通过以下几种方式登录以太网交换机：●通过Console口进行本地登录●通过Telnet或SSH进行远程登录●通过Web网管登录●通过NMS登录1.2 用户界面简介1.2.1 交换机支持的用户界面在S5120-SI系列以太网交换机中，AUX口（Auxiliary port，辅助端口）和Console口是同一个端口，以下称为Console口，与其对应的用户界面类型只有AUX用户界面类型。
H3C华三交换机基本配置命令大全,别到用的时候找不到了
H3C华三交换机基本配置命令大全，别到用的时候找不到了！本期我们一起来学习一下H3C最详细的基础命令。
一、不知道密码，如何恢复出厂设置1、开机启动，Ctrl+B进入bootrom菜单，选择恢复出厂设置。
2、用com线连上电脑，用超级终端进入，然后重启电脑，看提示按ctrl+b 进入bootrom模式，然后按照菜单提示删除flash中的.cfg文件，然后重启就可以了。
二、将Trunk端口添加到vlan中Trunk端口可以允许多个VLAN通过，也就是可以加入多个VLAN，所以Trunk 端口的VLAN加入不可能是一个一个地加，而是采取批量添加的方式进行。
但只能在以太网端口视图下进行配置，配置步骤如表7-11所示。
【示例1】使用port trunk permit vlan命令将中继端口Ethernet2/0/1加入到2、6、10、50～100 VLAN中。
1. <H3C> system-view2. System View: return to User View with Ctrl+Z.3. [H3C] interface Ethernet2/0/14. [H3C-Ethernet2/0/1] port trunk permit vlan 2 6 10 50 to 100【示例2】使用undo port trunk permit vlan命令将中继端口Ethernet2/0/1从VLAN 1中删除。
三、H3C交换机基础配置说明1、以太网端口的链路类型Access link：只能允许某一个vlan的untagged数据流通过。
Trunk link：允许多个vlan的tagged数据流和某一个vlan的untagged数据流通过。
Hybrid link：允许多个vlan的tagged数据流和多个vlan的untagged数据流通过。
hybrid link端口可以允许多个vlan的报文发送时不携带标签，而Trunk端口只允许缺省vlan的报文发送时不携带标签。
H3C S2126-EI以太网交换机 操作手册(V1.02
H3C S5110-CMW520-R1102 版本说明书
H3C S5110-CMW520-R1102版本说明书Copyright © 2013杭州华三通信技术有限公司版权所有，保留一切权利。
非经本公司书面许可，任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部，并不得以任何形式传播。
本文档中的信息可能变动，恕不另行通知。
目录1 版本信息 (1)1.1 版本号 (1)1.2 历史版本信息 (1)1.3 版本配套表 (1)1.4 版本升级注意事项 (2)2 硬件特性变更说明 (2)2.1 S5110-CMW520-R1102版本硬件特性变更说明 (2)2.2 S5110-CMW520-E1101版本硬件特性变更说明 (2)3 软件特性及命令行变更说明 (2)3.1 S5110-CMW520-R1102版本软件特性及命令行变更说明 (2)3.2 S5110-CMW520-E1101版本软件特性及命令行变更说明 (3)4 MIB变更说明 (3)5 操作方式变更说明 (3)5.1 S5110-CMW520-R1102版本操作方式变更 (3)5.2 S5110-CMW520-E1101版本操作方式变更 (3)6 版本使用限制及注意事项 (3)7 存在问题与规避措施 (4)8 解决问题列表 (5)8.1 S5110-CMW520-R1102版本解决问题列表 (5)8.2 S5110-CMW520-E1101版本解决问题列表 (6)9 相关资料 (6)9.1 相关资料清单 (6)9.2 资料获取方式 (6)10 技术支持 (6)附录 A 本版本支持的软、硬件特性列表 (7)A.1 版本硬件特性 (7)A.2 版本软件特性 (8)附录 B 版本升级操作指导 (9)B.1 加载方式简介 (10)B.2 本地加载 (10)B.2.1 BOOT菜单 (10)B.2.2 通过Console口利用XModem完成加载 (11)B.2.3 通过以太网口利用TFTP完成加载 (15)B.3 远程加载 (17)B.3.1 通过FTP实现远程加载 (17)B.3.2 通过TFTP实现远程加载 (18)表目录表1 历史版本信息表 (1)表2 版本配套表 (1)表3 MIB文件变更说明 (3)表4 产品硬件特性 (7)表5 产品软件特性 (8)1 版本信息1.1 版本号版本号：Comware Software, Version 5.20.99, Release 1102注：该版本号可在命令行任何视图下用display version 命令查看，见注①1.2 历史版本信息表1 历史版本信息表 版本号 基础版本号 发布日期 版本类型 备注 S5110_10P-CMW520-R1102 S5110_10P-CMW520-E11012013-11-08 正式版本 S5110_10P_PWR-CMW520-R1102 首次发布S5110_28P-CMW520-R1102 S5110_28P-CMW520-E1101S5110_28P_PWR-CMW520-R1102 首次发布S5110_52P-CMW520-R1102 S5110_52P-CMW520-E1101S5110_10P-CMW520-E1101首次发布 2013-09-02 正式版本首次发布S5110_28P-CMW520-E1101S5110_52P-CMW520-E1101 1.3 版本配套表在升级版本之前，请注意与本版本配套的软、硬件条件必须符合下表的要求。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
目录H3C以太网交换机的基本操作 (1)1.1 知识准备 (1)1.2 操作目的 (1)1.3 网络拓扑 (1)1.4 配置步骤 (2)1.4.1 串口操作配置 (2)1.4.2 查看配置及日志操作 (4)1.4.3 设置密码操作 (5)1.5 验证方法 (6)H3C以太网交换机VLAN配置 (7)1.6 知识准备 (7)1.7 操作目的 (7)1.8 操作内容 (7)1.9 设备准备 (7)1.10 拓扑 (7)1.11 配置步骤 (8)1.12 验证方法 (8)H3C以太网交换机链路聚合配置 (9)1.13 知识准备 (9)1.14 操作目的 (9)1.15 操作内容 (9)1.16 设备准备 (9)1.17 网络拓扑 (9)1.18 配置步骤 (10)1.19 验证方法 (11)H3C以太网交换机STP配置 (12)1.20 知识准备 (12)1.21 操作目的 (12)1.22 操作内容 (12)1.23 设备准备 (12)1.24 网络拓扑 (12)1.25 配置步骤 (13)1.26 验证方法 (14)H3C以太网交换机VRRP配置 (15)1.27 知识准备 (15)1.28 操作目的 (15)1.29 操作内容 (15)1.30 设备准备 (15)1.31 网络拓扑 (16)1.32 配置步骤 (16)1.33 验证方法 (18)H3C以太网交换机镜像配置 (19)1.34 知识准备 (19)1.35 操作目的 (19)1.36 操作内容 (19)1.37 设备准备 (19)1.38 网络拓扑 (20)1.39 配置步骤 (20)1.40 验证方法 (21)H3C以太网交换机路由配置 (22)1.41 知识准备 (22)1.42 操作目的 (22)1.43 操作内容 (22)1.44 设备准备 (22)1.45 网络拓扑 (23)1.46 配置步骤 (23)1.47 验证方法 (24)H3C以太网交换机ACL配置 (25)1.48 知识准备 (25)1.49 操作目的 (25)1.50 操作内容 (25)1.51 网路拓扑 (25)1.52 配置步骤 (25)1.53 验证方法 (26)实验一H3C以太网交换机的基本操作备注：H3C以太网交换机采用统一软件平台VRP，交换机命令完全相同。
1.1 知识准备了解交换机的基本知识，了解交换机的基本原理。
阅读H3C S7500系列以太网交换机操作手册。
1.2 操作目的通过以下举例学会通过串口操作交换机，并对交换机的端口进行基本配置；能够查看所配置的内容；学会如何重新设置密码，实验内容通过串口线连接到7506交换机，对7506交换机进行配置，配置7506交换机端口以及察看配置信息，设置7506交换机密码，包实验设备7506 一台PC 一台串口线一条平行网线一条1.3 网络拓扑1.4 配置步骤1.4.1 串口操作配置H3C 7506的调试配置一般是通过Console口连接的方式进行，Console口连接配置采用VT100终端方式，下面以Windows操作系统提供的超级终端工具配置为例进行说明。
1．将PC机与H3C 7506进行正确连线之后，点击系统的[开始→程序→附件→通讯→超级终端]，进行超级终端连接，如图6.6-1所示。
图1.6-1 超级终端连接2．在出现图6.6-1时，按要求输入有关的位置信息：国家/地区代码、地区电话号码编号和用来拨外线的电话号码。
图1.6-2 位置信息3．弹出[连接说明]对话框时，为新建的连接输入名称并为该连接选择图标。
如图6.6-2所示。
图1.6-3 新建连接4．根据配置线所连接的串行口，选择连接串行口为COM1（依实际情况选择PC机所使用的串口）。
如图6.6-3所示。
图1.6-4 连接配置资料5．设置所选串行口的端口属性端口属性的设置主要包括以下内容：波特率“9600”，数据位“8”，奇偶校验“无”，停止位“1”，数据流控制“无”，如图6.6-4所示。
图1.6-5 端口属性配置设置检查前面设定的各项参数正确无误后，H3C 7506就可以加电启动，进行系统的初始化，进入配置模式进行操作。
以太网交换机上电，终端上显示设备自检信息，自检结束后提示用户键入回车，之后将出现命令行提示符（如<H3C>）。
第四步：键入命令，配置以太网交换机或查看以太网交换机运行状态。
需要帮助可以随时键入“?”，具体的配置命令请参考本书中以后各章节的内容。
1.4.2 查看配置及日志操作在所有模式下均可以查看交换机的配置。
执行display current-configuration 命令将会看到系统的全部配置在全局配置模式下，使用saveconfig命令来保存配置信息。
要查看终端的监控和交换机日志信息，可执行如下操作：[H3C] # display interface//所有可以使用display命令的模式下都可以使用此命令，用于查看接口状态[H3C] # display mac-address //所有可以使用display命令的模式下都可以使用此命令，用于查看mac-address 信息[H3C] # display log //所有可以使用display命令的模式下都可以使用此命令，用于查看日志信息1.4.3 设置密码操作由于全局配置模式下可以对设备进行全部功能的操作，所以进入全局配置模式的密码非常重要，设备在实际应用中都要求修改进入全局配置模式的密码，具体示例如下：<H3C> system-view //进入全局配置模式password:***** //输入进入全局配置模式的密码，缺省没有密码[H3C] # //已经进入全局配置模式为了便于对设备的维护，有时需要修改登录用户名或密码，配置如下：[H3C] #user-interface aux //进入进入AUX用户界面视图[H3C-ui-aux0] authentication-mode password //设置通过Console口登录交换机的用户进行Password认证[H3C-ui-aux0] set authentication password simple 123456 //设置用户的认证口令为明文方式，口令为123456 端口基本配置和端口信息查看下面在H3C 7506上，对端口基本参数进行配置，如自动协商、双工模式、速率、流量控制等，端口参数的配置在全局配置模式下进行。
[H3C] interface ethernet2/0/1 //进入端口Ethernet2/0/1[H3C-Ethernet2/0/1] undo shutdown //使能端口1[H3C-Ethernet2/0/1] undo duplex auto //关闭端口1的自适应功能[H3C-Ethernet2/0/1] duplex full //设置端口1的工作方式为全双工[H3C-Ethernet2/0/1] speed 10 //设置端口1的速率为10M[H3C-Ethernet2/0/1]jumboframe enable //允许长帧通过当前端口使用display 命令可以查看端口的相关信息。
[H3C] display interface2/0/1 //显示端口1的配置和工作状态1.5 验证方法退出重新登陆，验证密码配置是否正确。
其它的可通过display命令查看。
实验二H3C以太网交换机VLAN配置2.1 知识准备了解交换机的基本知识，了解交换机的基本原理，了解VLAN的原理。
2.2 操作目的掌握H3C系列交换机产品VLAN的配置和使用2.3 操作内容VLAN业务的配置2.4 设备准备7506 一台PC机2台直连网线3条串口线一条2.5 拓扑创建VLAN2、VLAN3，指定VLAN2的描述字符串为home；通过配置将端口Ethernet2/0/1和Ethernet2/0/2加入到VLAN2中，将端口Ethernet2/0/3和Ethernet2/0/4加入到VLAN3中。
2.6 配置步骤交换机A的具体配置如下：[H3C]vlan 2 //创建VLAN2并进入其视图[H3C-vlan2] description home //指定VLAN2的描述字符串为home[H3C-vlan2] port Ethernet 2/0/1 Ethernet 2/0/2 //向VLAN2中加入端口Ethernet2/0/1和Ethernet2/0/2[H3C-vlan2] vlan 3 //创建VLAN3并进入其视图[H3C-vlan3] port Ethernet 2/0/3 Ethernet 2/0/4 //向VLAN3中加入端口Ethernet2/0/3和Ethernet2/0/42.7 验证方法1、PC-1和PC-2能互通（同一个VLAN 内）2、PC-1和PC-2不能互通（不同一个VLAN 内）实验三H3C以太网交换机链路聚合配置3.1 知识准备了解链路聚合原理，了解LACP协议。
3.2 操作目的掌握H3C交换机链路聚合的配置和使用。
3.3 操作内容学会聚合配置3.4 设备准备7506 两台直连网线四条PC机二台串口线一条3.5 网络拓扑3.6 配置步骤以下只列出了Switch A的配置，Switch B上应作相应的配置，汇聚才能实际有效：l采用手工汇聚方式：# 创建手工汇聚组1。
<H3C> system-viewSystem View: return to User View with Ctrl+Z[H3C] link-aggregation group 1 mode manual# 将以太网端口Ethernet2/0/1至Ethernet2/0/3加入汇聚组1。
[H3C] interface ethernet2/0/1[H3C-Ethernet2/0/1] port link-aggregation group 1[H3C-Ethernet2/0/1] interface ethernet2/0/2[H3C-Ethernet2/0/2] port link-aggregation group 1[H3C-Ethernet2/0/2] interface ethernet2/0/3[H3C-Ethernet2/0/3] port link-aggregation group 1l采用静态LACP汇聚方式：# 创建静态汇聚组1。
[H3C] link-aggregation group 1 mode static# 将以太网端口Ethernet2/0/1至Ethernet2/0/3加入汇聚组1。
[H3C] interface ethernet2/0/1[H3C-Ethernet2/0/1] port link-aggregation group 1[H3C-Ethernet2/0/1] interface ethernet0/2[H3C-Ethernet2/0/2] port link-aggregation group 1[H3C-Ethernet2/0/2] interface ethernet0/3[H3C-Ethernet2/0/3] port link-aggregation group 1l采用动态LACP汇聚方式：# 开启以太网端口Ethernet2/0/1至Ethernet2/0/3的LACP协议。