H3C交换机_典型配置举例-6W100-以太网链路聚合典型配置举例
h3c链路聚合配置及实例
1 以太网链路聚合配置任务简介表1-5 以太网链路聚合配置任务简介配置任务说明详细配置配置聚合组配置静态聚合组二者必选其一1.3.1 配置动态聚合组 1.3.2聚合接口相关配置配置聚合接口的描述信息可选 1.4.1 配置三层聚合接口MTU 可选 1.4.2 配置处理或转发三层聚合接口流量的业务处理板可选 1.4.3 开启聚合接口链路状态变化Trap功能可选 1.4.4 限制聚合组内选中端口的数量可选 1.4.5 关闭聚合接口可选 1.4.6 恢复聚合接口的缺省配置可选 1.4.7配置聚合负载分担配置聚合负载分担类型可选 1.5.1配置聚合负载分担为本地转发优先可选 1.5.2 配置聚合流量重定向功能可选 1.6 2 1.3 配置聚合组请根据需要聚合的以太网接口类型来配置相应类型的聚合组：当需要聚合的是二层以太网接口时，请配置二层聚合组；当需要聚合的是三层以太网接口时，请配置三层聚合组。
聚合链路的两端应配置相同的聚合模式。
●配置或使能了下列功能的端口将不能加入二层聚合组：RRPP（请参见“可靠性配置指导/RRPP”）、MAC地址认证（请参见“安全配置指导/MAC地址认证”）、端口安全模式（请参见“安全配置指导/端口安全”）、报文过滤功能（请参见“安全配置指导/防火墙”）、以太网帧过滤功能（请参见“安全配置指导/防火墙”）、IP Source Guard功能（请参见“安全配置指导/IP Source Guard”）、802.1X功能（请参见“安全配置指导/802.1X”）以及Portal免认证规则源接口（请参见“安全配置指导/Portal”）。
●配置或使能了下列功能的接口将不能加入三层聚合组：IP地址（请参见“三层技术-IP业务配置指导/IP地址”）、DHCP客户端（请参见“三层技术-IP业务配置指导/DHCP”）、BOOTP客户端（请参见“三层技术-IP业务配置指导/DHCP”）、VRRP功能（请参见“可靠性配置指导/VRRP”）和Portal功能（请参见“安全配置指导/Portal”）。
H3C配置案例大全(内部分享)
光纤链路排错经验一、组网：用户采用4台S5500作为接入交换机、1台S5500作为核心交换机组网，4台接入交换机分别在三个仓库以及门卫处与核心机房都是通过2根八芯单模光纤走地井连接，在这5个机房再通过跳纤来连接到交换上。
用户要求实现内网的用户主机访问公共服务器资源，并实现全网互通。
组网如下图所示：二、问题描述：PC现无法访问server服务器，进一步发现S5500光纤端口灯不亮，端口信息显示down状态。
在核心交换机端通过自环测试发现该端口以及光模块正常，接入交换机端也同样测试发现正常。
监控网络正常使用，再将网络接口转接到监控主干链路上，发现网络同样无法正常使用。
三、过程分析：想要恢复链路，首先要排查出故障点，根据故障点情况结合实际恢复链路通畅。
在这里主要分析光纤通路，光信号从接入交换机光口出来通过跳线，转接到主干光纤，然后再通过核心跳线转接到核心交换上。
由于该链路不通，首先要排除两端接口以及光模块问题，这里使用自环检测(如果是超远距离传输光纤线缆需要接光衰然后在自环，防止烧坏光模块)。
当检测完成发现无问题，再测试接入端的光纤跳纤：如果是多模光纤可以将一端接到多模光纤模块的tx口，检测对端是否有光；单模光纤如果没有光功率计可以使用光电笔检测(该方法只能检测出中间无断路，并不能检测出线路光衰较大的情况)。
最后再检测主线路部分，检测方式同跳线一样。
光路走向流程如图所示：四、解决方法：从上述的分析可以看出，只要保证了光信号一出一收两条路径都能正常就可以解决用户无法访问服务器的问题。
为了保证光路正常通路，最好的解决方法就是，通过使用光功率计来检测对端发射光在本端的光功率是否在光口可接受范围内。
由于用户组网使用了一些监控设备来接入该主干光缆，并且该光路现正常使用，通过将网络光纤转接到该监控主干光缆，发现网络光路仍然不通；并且两端端口自环检测正常。
由此可以判断出主要问题在两端的跳纤上。
如图所示：在没有光功率计并且客户业务又比较着急恢复的情况，可以先将两端的接入跳纤更换。
H3C SecPath系列防火墙典型配置案例集-6W100-SecPath系列防火墙IPSec典型配置举例
SecPath系列防火墙IPSec典型配置举例关键词：IKE、IPSec摘要：本章首先介绍了IKE和IPSec的基本概念，随后说明了防火墙的配置方法，最后给出两种典型应用的举例。
缩略语：缩略语英文全名中文解释IKE Internet Key Exchange 因特网密钥交换Security IP网络安全协议IPsec IP目录1 特性简介 (3)1.1 IPSec基本概念 (3)1.1.1 SA (3)1.1.2 封装模式 (3)2 应用场合 (4)3 配置指南 (4)3.1 配置概述 (4)3.2 配置ACL (6)3.3 配置IKE (6)3.3.1 配置IKE全局参数 (6)3.3.2 配置IKE安全提议 (7)3.3.3 配置IKE对等体 (8)3.4 IPSec安全提议 (10)3.5 配置安全策略模板 (12)3.6 配置安全策略 (14)3.7 应用安全策略组 (16)4 配置举例一：基本应用 (17)4.1 组网需求 (17)4.2 使用版本 (18)4.3 配置步骤 (18)4.4 配置结果验证 (27)4.4.1 查看IPSec安全联盟 (27)4.4.2 查看报文统计 (27)5 配置举例二：与NAT结合 (27)5.1 组网需求 (27)5.2 配置说明 (28)5.3 配置步骤 (28)5.4 配置验证结果 (34)5.4.1 查看IPSec安全联盟 (34)5.4.2 查看报文统计 (35)6 注意事项 (35)7 相关资料 (35)7.1 相关协议和标准 (35)7.2 其它相关资料 (36)1 特性简介IPsec（IP Security）协议族是IETF制定的一系列协议，它为IP数据报提供了高质量的、可互操作的、基于密码学的安全性。
特定的通信方之间在IP层通过加密与数据源验证等方式，来保证数据报在网络上传输时的私有性、完整性、真实性和防重放。
IPsec通过AH（Authentication Header，认证头）和ESP（Encapsulating Security Payload，封装安全载荷）这两个安全协议来实现上述目标，并且还可以通过IKE（Internet Key Exchange，因特网密钥交换协议）为IPsec提供自动协商交换密钥、建立和维护安全联盟的服务，以简化IPsec 的使用和管理。
H3C和CISCO交换机做聚合配置实例教学
H3C和CISCO交换机做聚合配置实例教学H3C和CISCO交换机做聚合配置实例教学端口聚合也叫做以太通道，主要用于交换机之间连接。
那么两种不同的交换机怎么做聚合配置呢?下面跟yjbys店铺一起来看看H3C和CISCO交换机做聚合配置实例教程，希望对同学们学习交换机有所帮助!一、网络环境本网络是xx大厦，3台交换机做端口聚合的课题网络环境：H3C_A交换机<----------------->H3C_B交换机<----- ----------------------->cisco(3560)交换机H3C_B交换机做为中心交换机由于带宽需要，加上该9楼上了很多美国著名的avocentKVM的监控设备，需要很大的带宽，因此做了4组的端口链路聚合的需要因此以下配置命令1、H3C_A的.配置如下：(动态链路聚合，LACP默认启动)[H3C_A]sys[H3C_A]int bridge-aggregation 1[H3C_A]link-aggregation mode dynamil[H3C_A]int giabthernet1/0/26[H3C_A_giabthernet1/0/26]duplex full[H3C_A_giabthernet1/0/26]speed 1000[H3C_A_giabthernet1/0/26]port link-type trunk[H3C_A_giabthernet1/0/26]port trunk permit vlan all因此，其它三个端口都是一样，如以上配置就可以了，同时H3C_B也是同样如H3C_A的配置一样，配好了，检查下端口的问题。
2、思科的配置[cisco]int port-channel 2[cisco]swit trunk encapsulation dot1q[cisco]swit mode trunk[cisco]swit trunk allowed vlan all[cisco]进入端口模式配置[cisco]int gig0/19[cisco]duplex full[cisco]speed 1000[cisco]swit trun encapsulation dot1q[cisco]swit mode trunk[cisco]swit trunk allowed vlan all[cisco]channel-group 2 mode active其它的端口同样的配置配置好了在H3C交换机用 dis link-aggregation summary查看信息同时，在思科交换机用show ethernetchannel summary查看信息最后经过上面的配置，端口聚合就可以通了。
[史上最详细]H3C路由器NAT典型配置案例
![[史上最详细]H3C路由器NAT典型配置案例](https://img.taocdn.com/s3/m/882e4d6942323968011ca300a6c30c225801f060.png)
H3C路由器NAT典型配置案列（史上最详细）神马CCIE，H3CIE,HCIE等网络工程师日常实施运维必备，你懂的。
1.11 NAT典型配置举例1.11.1 内网用户通过NAT地址访问外网（静态地址转换）1. 组网需求内部网络用户10.110.10.8/24使用外网地址202.38.1.100访问Internet。
2. 组网图图1-5 静态地址转换典型配置组网图3. 配置步骤# 按照组网图配置各接口的IP地址，具体配置过程略。
# 配置内网IP地址10.110.10.8到外网地址202.38.1.100之间的一对一静态地址转换映射。
<Router> system-view[Router] nat static outbound 10.110.10.8 202.38.1.100# 使配置的静态地址转换在接口GigabitEthernet1/2上生效。
[Router] interface gigabitethernet 1/2[Router-GigabitEthernet1/2] nat static enable[Router-GigabitEthernet1/2] quit4. 验证配置# 以上配置完成后，内网主机可以访问外网服务器。
通过查看如下显示信息，可以验证以上配置成功。
[Router] display nat staticStatic NAT mappings:There are 1 outbound static NAT mappings.IP-to-IP:Local IP : 10.110.10.8Global IP : 202.38.1.100Interfaces enabled with static NAT:There are 1 interfaces enabled with static NAT.Interface: GigabitEthernet1/2# 通过以下显示命令，可以看到Host访问某外网服务器时生成NAT会话信息。
H3C三层交换机配置实例
H3C三层交换机配置实例H3C三层交换机配置实例1 网络拓扑图 02 配置要求 03划分VLAN并描述 (1)3.1进入系统视图 (1)3.2 创建VLAN并描述 (1)4 给VLAN设置网关 (2)4.1 VLAN1的IP地址设置 (2)4.2 VLAN100的网关设置 (2)4.3 VLAN101的网关设置 (2)4.4 VLAN102的网关设置 (3)4.5 VLAN103的网关设置 (3)5 给VLAN指定端口，设置端口类型 (3)5.1 VLAN100指定端口 (3)5.2 VLAN102指定端口 (4)5.3 VLAN1/101/103指定端口 (4)6 配置路由协议 (5)6.1 默认路由 (5)6.2配置流分类 (5)6.3 定义行为 (5)6.4 应用QOS策略 (6)6.5 接口配置QOS策略 (6)1 网络拓扑图图1-1 网络拓扑图2 配置要求用户1网络：172.16.1.0/24 至出口1网络：172.16.100.0/24 用户2网络：192.168.1.0/24 至出口2网络：192.168.100.0/24实现功能：用户1通过互联网出口1，用户2通过互联网出口2。
3划分VLAN并描述3.1进入系统视图<H3C>system-view //进入系统视图图3-1 系统视图3.2 创建VLAN并描述[H3C]vlan 1 //本交换机使用[H3C-vlan1]description Manager //描述为“Manager”[H3C-vlan1]quit[H3C]vlan 100 //划分vlan100[H3C-vlan100]description VLAN 100 //描述为“VLAN 100”[H3C-vlan100]quit[H3C]vlan 101 //划分vlan101[H3C-vlan101]description VLAN 101 //描述为“VLAN 101”[H3C-vlan101]quit[H3C]vlan 102 //划分vlan102[H3C-vlan102]description VLAN 102 //描述为“VLAN 102”[H3C-vlan102]quit[H3C]vlan 103 //划分vlan103[H3C-vlan103]description VLAN 103 //描述为“VLAN 103”[H3C-vlan103]quit[H3C]图3-2 划分VLAN及描述4 给VLAN设置网关4.1 VLAN1的IP地址设置把VLAN1的IP地址设置为192.168.0.254，子网掩码为255.255.255.0，用于本地使用。
H3C交换机配置链路聚合
H3C交换机配置链路聚合H3C交换机配置链路聚合如何?要如何弄H3C交换机配置链路聚合.下面是店铺收集整理的H3C交换机配置链路聚合，希望对大家有帮助~~H3C交换机配置链路聚合创建聚合组1(根据具体情况选择下面两种方式之一)。
l采用静态聚合模式：创建二层聚合接口1system-view[SwitchA] interface bridge-aggregation 1[SwitchA-Bridge-Aggregation1] quitl采用动态聚合模式：创建二层聚合接口，并配置动态聚合模式system-view[SwitchA] interface bridge-aggregation 1[SwitchA-Bridge-Aggregation1] link-aggregation mode dynamic# 将以太网端口GigabitEthernet1/0/1至GigabitEthernet1/0/3加入聚合组1。
[SwitchA] interface GigabitEthernet 1/0/1[SwitchA-GigabitEthernet1/0/1] port link-aggregation group 1[SwitchA-GigabitEthernet1/0/1] interface GigabitEthernet 1/0/2[SwitchA-GigabitEthernet1/0/2] port link-aggregation group 1[SwitchA-GigabitEthernet1/0/2] interface GigabitEthernet 1/0/3[SwitchA-GigabitEthernet1/0/3] port link-aggregation group 1[SwitchA-GigabitEthernet1/0/3] quit# 配置二层聚合接口1所属VLAN，并将该配置批量下发到各成员端口上。
H3C华三链路聚合的原理及配置
H3C华三链路聚合的原理及配置1.链路聚合的作⽤：将多条物理链路捆绑在⼀起形成⼀条以太⽹逻辑链路，实现增加链路带宽的⽬的，同时这些捆绑在⼀起的链路通过相互动态备份，可以有效地提⾼链路的可靠性2.聚合模式：⑴静态聚合：⼀旦配置好后，端⼝的选中/⾮选中状态就不会受⽹络环境的影响，⽐较稳定⑵动态聚合：通过LACP协议实现，能够根据对端和本端的信息调整端⼝的选中/⾮选中状态，⽐较灵活3.静态聚合的⼯作机制⑴参考端⼝的选举：⽤来选择聚合成员端⼝的标准端⼝；优先级->全双⼯/⾼速率->全双⼯/低速率->半双⼯/⾼速率->半双⼯/低速率的优先次序，若优先级相同则选择端⼝号最⼩的的端⼝⑵确定成员端⼝状态为选中端⼝①端⼝要处于up状态②端⼝的操作key和属性类配置与参考端⼝要相同③聚合组中候选端⼝的数量没有超过上限*操作key：⽤于选择链路聚合成员端⼝的配置信息，由参考端⼝的第⼆类配置⽣成，第⼆类配置与操作Key⼀致，端⼝才能被选中*属性类配置：包括速率、双⼯模式、链路状态(UP/DOWN）这三项配置，速率和双⼯模式会参与参考端⼝选举，链路状态会影响成员端⼝是否被选中*端⼝的第⼀类配置：不参与操作Key计算的配置信息；例如：MVRP、MSTP等*端⼝的第⼆类配置：参与操作Key计算的配置信息；例如：Vlan配置、端⼝类型、QinQ、Mac地址学习配置4.动态聚合的⼯作机制⑴参考端⼝的选举：⽤来选择聚合成员端⼝的标准端⼝；设备ID越⼩的优先，设备ID=LACP优先级+MAC地址（LACP优先级默认为32768），如果优先级相同再⽐较其系统MAC地址，MAC地址越⼩其设备ID越⼩聚合端⼝ID⼩的优先，端⼝ID=端⼝优先级+端⼝编号（端⼝优先级默认为32768）⑵确定成员端⼝状态为选中端⼝①端⼝要处于up状态②端⼝的操作key和属性类配置与参考端⼝要相同③聚合组中候选端⼝的数量没有超过上限5.静态聚合的配置⑴组⽹图⑵配置步骤①配置S1# 创建⼆层聚合接⼝1[S1] interface bridge-aggregation 1[S1-Bridge-Aggregation1] quit# 分别将端⼝GigabitEthernet1/0/1和GigabitEthernet1/0/2加⼊到聚合组1中。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
1 链路聚合典型配置举例······················································································································· 1-1 1.1 简介 ···················································································································································1-1 1.2 二层链路聚合配置举例 ······················································································································1-1 1.2.1 适用产品和版本 ······················································································································1-1 1.2.2 组网需求 ·································································································································1-1 1.2.3 配置思路 ·································································································································1-1 1.2.4 配置注意事项 ··························································································································1-2 1.2.5 配置步骤 ·································································································································1-2 1.2.6 验证配置 ································································································································1-3 1.2.7 配置文件 ·································································································································1-4 1.3 二层聚合负载分担配置举例···············································································································1-5 1.3.1 适用产品和版本 ······················································································································1-5 1.3.2 组网需求 ·································································································································1-5 1.3.3 配置思路 ·································································································································1-6 1.3.4 配置注意事项 ··························································································································1-6 1.3.5 配置步骤 ·································································································································1-6 1.3.6 验证配置 ·································································································································1-7 1.3.7 配置文件 ·································································································································1-8 1.4 三层链路聚合配置举例 ······················································································································1-9 1.4.1 适用产品和版本 ······················································································································1-9 1.4.2 组网需求 ·······························································································································1-10 1.4.3 配置思路 ·······························································································································1-10 1.4.4 配置注意事项 ························································································································1-10 1.4.5 配置步骤 ·······························································································································1-10 1.4.6 验证配置 ·······························································································································1-11 1.4.7 配置文件 ·······························································································································1-12
• 由于静态聚合组中端口选中状态不受对端端口是否在聚合组中及是否处于选中状态的影响。这 样有可能导致两端设备所确定的 Selected 状态端口不一致，当两端都支持配置静态和动态聚 合组的情况下，建议用户优选动态聚合组。
• 配置或使能了下列功能的端口将不能加入二层聚合组：RRPP、MAC 地址认证、端口安全模 式、IP Source Guard 功能、802.1X 功能以及 Portal 免认证规则源接口。
• 配置聚合组的成员端口过程中，建议配置顺序：在端口视图下使用 display this 命令查看端口 上是否存在第二类配置（包括端口隔离配置、QinQ 配置、VLAN 配置、MAC 地址学习配置）， 如果有这类配置，请使用对应的 undo 命令删除这些配置，使端口保持在缺省第二类配置状态， 然后再把端口加入到新创建的聚合组内。
• 只有工作在二层模式下的端口才能加入二层链路聚合组。
1.2.5 配置步骤
1. Switch A的配置 # 进入系统视图，并配置全局按照报文的源 MAC 地址和目的 MAC 地址进行聚合负载分担。
<SwitchA> system-view [SwitchA] link-aggregation load-sharing mode source-mac destination-mac
软件版本 Release 1120系列，Release 1130系列，Release 1200系列 Release 1808 Release 1115，Release 1118 Release 2220