华为交换机开局配置

最新推荐文章于 2025-11-24 10:54:07 发布

原创最新推荐文章于 2025-11-24 10:54:07 发布 · 4.1k 阅读

9 ·

CC 4.0 BY-SA版权

文章标签：

#华为 #开局 #配置

网络专栏收录该内容

24 篇文章

订阅专栏

本文详细介绍了如何配置网络设备，包括设置SSH访问、VLAN划分、路由策略、SNMP监控及安全策略等，为网络管理员提供了一套全面的设备管理方案。

sysname SWITCH

aaa
undo local-aaa-user password policy administrator
local-user admin password irreversible-cipher admin
local-user admin privilege level 1
local-user admin service-type terminal ssh

super password level 15 cipher admin

stelnet server enable 
rsa local-key-pair create
ssh user admin
ssh user admin authentication-type password
ssh user admin service-type all

vlan batch 10 100

interface Vlanif100
 ip address 192.168.1.2 255.255.255.252

ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

interface Eth-Trunk1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 stp root-protection
 
interface XGigabitEthernet0/0/1
 eth-trunk 1
interface XGigabitEthernet1/0/1
 eth-trunk 1	 

interface XGigabitEthernet0/0/18
 port link-type access
 port default vlan 10
 stp bpdu-filter enable
 stp edged-port enable
 
clock timezone beijing add 08:00:00
ntp-service unicast-server xxx.xxx.xxx

acl number 3000
 rule 5 permit tcp source 10.10.10.0 0.0.0.255 destination-port eq 22

snmp-agent
snmp-agent sys-info version v3
snmp-agent group v3 group-admin privacy read-view group-admin
snmp-agent usm-user v3 user-admin
snmp-agent usm-user v3 user-admin group group-admin
snmp-agent usm-user v3 user-admin authentication-mode sha cipher Authe@123
snmp-agent usm-user v3 user-admin privacy-mode aes128 cipher Priva@123
snmp-agent target-host trap address udp-domain 10.10.10.1 params securityname user-admin v3 privacy
 
user-interface vty 0 4
authentication-mode aaa
protocol inbound all
acl 3000 inbound