1、網(wǎng)絡(luò)設(shè)備維護(hù)手冊(cè)第一章 交換機(jī)操作手冊(cè)此部分檔使用本項(xiàng)目交換機(jī)型號(hào)如下：S7506E/S5120/S5130/WX3024E1.1設(shè)備登陸1.1.1 Console登陸1、通過(guò)交換機(jī)Console 口進(jìn)行本地登錄是登錄交換機(jī)的最基本的方式，也是配置通過(guò)其他方式登錄交換機(jī)的基礎(chǔ)。連接示意圖如下：2、把電腦和交換機(jī)連接好后，交換機(jī)上電開(kāi)機(jī)，然后在電腦上進(jìn)行如下操作，首先點(diǎn)擊開(kāi)始程序附件通訊超級(jí)終端打開(kāi)后出現(xiàn)下面圖示，輸入名稱(chēng)，可以任意輸入。輸入完成點(diǎn)擊確定，出現(xiàn)下面界面，連接時(shí)使用選擇COM口，一般臺(tái)式機(jī)為COM1或COM2，而筆記本經(jīng)過(guò)轉(zhuǎn)接，可能會(huì)產(chǎn)生COM3或COM4，也有可能是其他的，你可以

2、在下面的選擇項(xiàng)里看到，選擇完成后點(diǎn)擊確定。通過(guò)上面的選擇，現(xiàn)在到了對(duì)端口屬性進(jìn)行設(shè)置，一般情況下沒(méi)有進(jìn)行過(guò)修改，默認(rèn)只要點(diǎn)擊還原為默認(rèn)值就可以了，然后再單擊確定。之后敲回車(chē)即可，會(huì)出現(xiàn)H3C提示符，說(shuō)明已經(jīng)與交換機(jī)連接，可以進(jìn)行配置了，如果沒(méi)有可以重啟交換機(jī)或檢查連接是否正確。1.1.2 telnet登陸1、新建用戶(hù)名密碼local-user admin /admin為用戶(hù)名 password cipher h3c123 /h3c123為密碼 authorization-attribute level 3 /授權(quán)admin用戶(hù)的等級(jí)為3,3為最高級(jí) service-type telnet /授

3、權(quán)admin用戶(hù)的登陸方式，可以為ftp、telnet等#telnet server enable /開(kāi)啟telnet服務(wù)使用電腦連接至交換機(jī)：開(kāi)始菜單-輸入cmd,如下圖，輸入telnet 54，輸入用戶(hù)名密碼admin/h3c123即可登錄交換機(jī)1.2 交換機(jī)加電開(kāi)機(jī)顯示sarting. * * * * H3C S5510-24P BOOTROM, Version 142 * * * * Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. Creation date: Mar 12 2008, 11:17:30 CPU

4、Clock Speed : 200MHz BUS Clock Speed : 33MHz Memory Size : 128MB The switch Mac is: 000F-E2B1-BD60Press Ctrl-B to enter Boot Menu. 1 0Auto-booting.Decompress Image.OK!Starting .* Copyright (c) 2004-2008 Hangzhou H3C Tech. Co., Ltd. All rights reserved. * Without the owners prior written consent, * n

5、o decompiling or reverse-engineering shall be allowed. *It will take a long time to get configuration file, please wait. Startup configuration file does not exist. User interface aux0 is available. /開(kāi)機(jī)自檢過(guò)程1.3 交換機(jī)常用Press ENTER to get started.%Apr 26 12:03:53:611 2000 H3C SHELL/4/LOGIN: Console login

6、from aux0sys /進(jìn)入視圖模式System View: return to User View with Ctrl+Z.H3CH3Csysname neiwang /對(duì)交換機(jī)進(jìn)行命名neiwangdis cu /查看交換機(jī)配置# version 5.20, Release 5303# sysname neiwang# domain default enable system#domain system access-limit disable state active idle-cut disable self-service-url disable#interface NULL0#

7、interface GigabitEthernet1/0/1#interface GigabitEthernet1/0/2#interface GigabitEthernet1/0/3#interface GigabitEthernet1/0/4#interface GigabitEthernet1/0/5#interface GigabitEthernet1/0/6#interface GigabitEthernet1/0/7#interface GigabitEthernet1/0/8#interface GigabitEthernet1/0/9#interface GigabitEthe

8、rnet1/0/10#interface GigabitEthernet1/0/11#interface GigabitEthernet1/0/12#interface GigabitEthernet1/0/13#interface GigabitEthernet1/0/14#interface GigabitEthernet1/0/15#interface GigabitEthernet1/0/16#interface GigabitEthernet1/0/17#interface GigabitEthernet1/0/18#interface GigabitEthernet1/0/19#i

9、nterface GigabitEthernet1/0/20#interface GigabitEthernet1/0/21#interface GigabitEthernet1/0/22#interface GigabitEthernet1/0/23#interface GigabitEthernet1/0/24#interface GigabitEthernet1/0/25 shutdown#interface GigabitEthernet1/0/26 shutdown#interface GigabitEthernet1/0/27 shutdown#interface GigabitE

10、thernet1/0/28 shutdown#user-interface aux 0user-interface vty 0 4#returnneiwangneiwangvlan 25 /創(chuàng)建VLANneiwang-vlan25port GigabitEthernet 1/0/1 to GigabitEthernet 1/0/10 /給VLAN批量添加端口neiwang-vlan25qu /退出VLAN視圖neiwanginterface vlan 25 /進(jìn)入VLAN接口視圖neiwang-Vlan-interface25 ip address 24 /給VLA

11、N添加IP地址 neiwang-Vlan-interface25qu /退出VLAn接口視圖neiwangdis cu /再次查看交換機(jī)配置,可以看到多了一個(gè)VLAN及這個(gè)VLAN的IP地址# version 5.20, Release 5303# sysname neiwang# domain default enable system#vlan 1#vlan 25#domain system access-limit disable state active idle-cut disable self-service-url disable#interface NULL0#interfac

12、e Vlan-interface25 ip address #interface GigabitEthernet1/0/1 port access vlan 25#interface GigabitEthernet1/0/2 port access vlan 25#interface GigabitEthernet1/0/3 port access vlan 25#interface GigabitEthernet1/0/4 port access vlan 25#interface GigabitEthernet1/0/5 port ac

13、cess vlan 25#interface GigabitEthernet1/0/6 port access vlan 25#interface GigabitEthernet1/0/7 port access vlan 25#interface GigabitEthernet1/0/8 port access vlan 25#interface GigabitEthernet1/0/9 port access vlan 25#interface GigabitEthernet1/0/10 port access vlan 25#interface GigabitEthernet1/0/11

14、#interface GigabitEthernet1/0/12#interface GigabitEthernet1/0/13#interface GigabitEthernet1/0/14#interface GigabitEthernet1/0/15#interface GigabitEthernet1/0/16#interface GigabitEthernet1/0/17#interface GigabitEthernet1/0/18#interface GigabitEthernet1/0/19#interface GigabitEthernet1/0/20#interface G

15、igabitEthernet1/0/21#interface GigabitEthernet1/0/22#interface GigabitEthernet1/0/23#interface GigabitEthernet1/0/24#interface GigabitEthernet1/0/25 shutdown#interface GigabitEthernet1/0/26 shutdown#interface GigabitEthernet1/0/27 shutdown#interface GigabitEthernet1/0/28 shutdown#user-interface aux

16、0user-interface vty 0 4#returnneiwangtelnet server enable % Start Telnet server/下面是為交換機(jī)添加一個(gè)新用戶(hù)操作neiwanglocal-user admin /添加新用戶(hù)New local user added.neiwang-luser-adminpa sin admin /為新用戶(hù)設(shè)置密碼neiwang-luser-adminservice-type telnet level 3 /為新用戶(hù)設(shè)置服務(wù)及權(quán)限neiwang-luser-adminqu/下面為該用戶(hù)配置telnet服務(wù) neiwanguser-in

17、terface vty ? INTEGER First user terminal interface number to be configuredneiwanguser-interface vty 0 4 /進(jìn)入telnet視圖模式neiwang-ui-vty0-4authentication-mode scheme ? /認(rèn)證模式設(shè)置 none Login without checking password Authentication use password of user terminal interface scheme Authentication use AAA neiwan

18、g-ui-vty0-4authentication-mode sneiwang-ui-vty0-4authentication-mode scheme /設(shè)備認(rèn)證模式為用戶(hù)名密碼neiwang-ui-vty0-4quneiwangtelnet server enable /開(kāi)啟telnet服務(wù)neiwangsave ? STRING The name of specific file(*.cfg) safely Save current configuration safely neiwangsave sneiwangsave safely /保存交換機(jī)設(shè)置,以防斷電交換機(jī)配置丟失neiwan

19、gsave s ? save sftp shutdown-interval snmp-agent ssh ssl stp super switch-mode sysnameneiwangsave safely The current configuration will be written to the device. Are you sure? Y/N:yPlease input the file name(*.cfg)flash:/startup.cfg(To leave the existing filename unchanged, press the enter key):Vali

20、dating file. Please wait.Now saving current configuration to the device.Saving configuration flash:/startup.cfg. Please wait.Configuration is saved to flash successfully.neiwangqusaveThe current configuration will be written to the device. Are you sure? Y/N:nsysSystem View: return to User View with

21、Ctrl+Z.neiwang DHCP Snooping was enabled./下面為對(duì)VLAN及端口增加刪除進(jìn)行操作先輸入 sys 進(jìn)入全局模式，必須輸，然后輸命令前面字母按TABneiwangneiwangneiwangintneiwanginterface gneiwanginterface GigabitEthernet 1/0/15 /進(jìn)入交換機(jī)端口模式neiwang-GigabitEthernet1/0/15port accneiwang-GigabitEthernet1/0/15port access vlan 25 /單一端口添加到VLANneiwang-GigabitEt

22、hernet1/0/15port access vlan 26 /如果VLAN沒(méi)有創(chuàng)建,提示如下 Error: This VLAN does not exist.neiwang-GigabitEthernet1/0/15quneiwangvlan 26neiwang-vlan26neiwang-GigabitEthernet1/0/15port access vlan 26neiwang-GigabitEthernet1/0/15qu/下面為對(duì)單一端口屬性進(jìn)行設(shè)置neiwangint g 1/0/25neiwang-GigabitEthernet1/0/25spneiwang-GigabitE

23、thernet1/0/25speed 1000 /把25號(hào)端口強(qiáng)制為1000Mneiwang-GigabitEthernet1/0/25duneiwang-GigabitEthernet1/0/25duplex fulneiwang-GigabitEthernet1/0/25duplex full /把25號(hào)端口強(qiáng)制為全雙工neiwang-GigabitEthernet1/0/25portneiwang-GigabitEthernet1/0/25port link-tneiwang-GigabitEthernet1/0/25port link-type ? access Access link

24、-type hybrid Hybrid VLAN link-type trunk VLAN Trunk link-typeneiwang-GigabitEthernet1/0/25port link-type trneiwang-GigabitEthernet1/0/25port link-type trunk /定義該端口為trunk屬性 neiwang-GigabitEthernet1/0/25port trunk permit all ? % Unrecognized command found at position.neiwang-GigabitEthernet1/0/25port

25、trunk permit all ? /允許所有VLAN通過(guò)該端口 INTEGER VLAN ID all All the VLANsneiwang-GigabitEthernet1/0/25port trunk permit vlan all ? neiwang-GigabitEthernet1/0/25port trunk permit vlan all Please wait. Done. neiwang-GigabitEthernet1/0/25undo port link-type /取消該端口屬性前面加undo Please wait. Done.neiwang-GigabitEt

26、hernet1/0/25spneiwang-GigabitEthernet1/0/25speed ? 10 Specify speed of current port 10Mb/s 100 Specify speed of current port 100Mb/s 1000 Specify speed of current port 1000Mb/s auto Enable ports speed negotiation automaticallyneiwang-GigabitEthernet1/0/25speed auneiwang-GigabitEthernet1/0/25speed au

27、to neiwang-GigabitEthernet1/0/25duneiwang-GigabitEthernet1/0/25duplex auneiwang-GigabitEthernet1/0/25duplex auto neiwang-GigabitEthernet1/0/25quneiwangdhcpneiwangdhcp-snooping ? neiwangdhcp-snooping DHCP Snooping has already been enabled.neiwangint g 1/0/25neiwang-GigabitEthernet1/0/25dhcpneiwang-Gi

28、gabitEthernet1/0/25dhcp-snooping ? information Specify Option 82 service trust Trusted portneiwang-GigabitEthernet1/0/25dhcp-snooping trneiwang-GigabitEthernet1/0/25dhcp-snooping trust ? neiwang-GigabitEthernet1/0/25dhcp-snooping trust neiwang-GigabitEthernet1/0/25quneiwangdis valn ? INTEGER VLAN ID

29、 all All the VLANs dynamic Dynamic VLAN ID reserved Reserved VLAN ID static Static VLAN ID neiwangdis vlan all /查看顯示VLAN VLAN ID: 1 VLAN Type: static Route Interface: not configured Description: VLAN 0001 Tagged Ports: none Untagged Ports: GigabitEthernet1/0/11 GigabitEthernet1/0/12 GigabitEthernet1

30、/0/13 GigabitEthernet1/0/14 GigabitEthernet1/0/15 GigabitEthernet1/0/16 GigabitEthernet1/0/17 GigabitEthernet1/0/18 GigabitEthernet1/0/19 GigabitEthernet1/0/20 GigabitEthernet1/0/21 GigabitEthernet1/0/22 GigabitEthernet1/0/23 GigabitEthernet1/0/24 GigabitEthernet1/0/25 GigabitEthernet1/0/26 GigabitE

31、thernet1/0/27 GigabitEthernet1/0/28 VLAN ID: 25 VLAN Type: static Route Interface: configured IP Address: Subnet Mask: Description: VLAN 0025 Tagged Ports: none Untagged Ports: GigabitEthernet1/0/1 GigabitEthernet1/0/2 GigabitEthernet1/0/3 GigabitEthernet1/0/4 GigabitEthe

32、rnet1/0/5 GigabitEthernet1/0/6 GigabitEthernet1/0/7 GigabitEthernet1/0/8 GigabitEthernet1/0/9 GigabitEthernet1/0/10 neiwangdis vlan all%Apr 26 12:28:45:14 2000 neiwang IFNET/4/LINK UPDOWN: GigabitEthernet1/0/13: link status is DOWN %Apr 26 12:28:46:904 2000 neiwang IFNET/4/LINK UPDOWN: GigabitEthern

33、et1/0/9: link status is UP %Apr 26 12:28:46:914 2000 neiwang IFNET/4/LINK UPDOWN: Vlan-interface25: link status is UP %Apr 26 12:28:46:917 2000 neiwang IFNET/4/UPDOWN: Line protocol on the interface Vlan-interface25 is UP DHCP Snooping has already been enabled.neiwangdis arp /三層交換機(jī)查看arp列表 % Incomple

34、te command found at position.neiwangdis arp ? X.X.X.X Display ARP entry by special IP address all Display static&dynamic ARP entry dynamic Display dynamic ARP entry interface Display by Interface source-suppression Display ARP source suppression static Display static ARP entry timer Display ARP time

35、r vlan Display by VLAN vpn-instance Display ARP entries by VPN name neiwangdis arp all Type: S-Static D-DynamicIP Address MAC Address VLAN ID Interface Aging Typeneiwangdis mac-aneiwangdis mac-address ? /查看交換機(jī)mac地址列表 H-H-H MAC address aging-time Global aging time blackhole Blackhole entry, without aging, can be added/deleted, saved to the configuration file count MAC entries count dynamic Dynamic entry, with aging, can be added/deleted, lost after res