H3C交换机配置命令详解

一、基本配置

<H3C> system-view
[H3C] sysname S5120-SW1
[H3C] vlan 10
[H3C-vlan10] name SERVER
[H3C-vlan10] quit

[H3C] interface Vlan-interface 10
[H3C-Vlan-interface10] ip address 192.168.10.254 255.255.255.0
[H3C-Vlan-interface10] undo shutdown

二、端口配置

! Access端口
[H3C] interface GigabitEthernet 1/0/1
[H3C-GigabitEthernet1/0/1] port link-type access
[H3C-GigabitEthernet1/0/1] port default vlan 10
[H3C-GigabitEthernet1/0/1] quit

! Trunk端口
[H3C] interface GigabitEthernet 1/0/24
[H3C-GigabitEthernet1/0/24] port link-type trunk
[H3C-GigabitEthernet1/0/24] port trunk permit vlan 10 20
[H3C-GigabitEthernet1/0/24] quit

三、IRF堆叠配置

! 配置IRF成员
[H3C] irf member 1 priority 32
[H3C] irf member 1 domain 1

! 保存配置并重启
[H3C] save force

! 堆叠连接后，激活IRF
[H3C] irf-port-configuration active

四、ACL配置

! 基本ACL
[H3C] acl basic 2000
[H3C-acl-ipv4-basic-2000] rule permit source 192.168.1.0 0.0.0.255
[H3C-acl-ipv4-basic-2000] rule deny

! 高级ACL
[H3C] acl advanced 3000
[H3C-acl-ipv4-adv-3000] rule permit tcp source 192.168.1.0 0.0.0.255 destination-port eq 80
[H3C-acl-ipv4-adv-3000] rule deny ip