常用H3C配置命令整理（持续更新）

#
dhcp server ip-pool vlan43
 network 172.16.43.0 mask 255.255.255.0
 gateway-list 172.16.43.1
 dns-list 61.177.7.1
#
dhcp server ip-pool vlan43static2-name
 static-bind ip-address 172.16.43.220 mask 255.255.255.0
 static-bind mac-address 20ab-3791-bed0
 gateway-list 172.16.43.1
 dns-list 61.177.7.1
#
dhcp server ip-pool wangzhiwei-mobile
 static-bind ip-address 172.16.43.154 mask 255.255.255.0
 static-bind mac-address 90b0-ed08-52c2
 gateway-list 172.16.43.1
 dns-list 192.168.11.16

policy-based-route test permit node 0
 if-match acl 3055
 apply ip-address next-hop 172.16.23.155
#
user-group system
 group-attribute allow-guest

##
interface Vlan-interface1
 ip address dhcp-alloc client-identifier mac Vlan-interface1

#
interface GigabitEthernet1/0/24
 port link-mode bridge
 description to_3F_AC1220_01#eth01
 port access vlan 250
 sflow sampling-rate 4000
 sflow flow collector 1
 sflow counter interval 120
 sflow counter collector 1
 mirroring-group 1 mirroring-port both
#
#
 info-center loghost 10.7.254.16
 info-center security-logfile enable
#

#
 ip netstream export source interface Vlan-interface31
#               
 dhcp server forbidden-ip 172.16.31.1
 dhcp server forbidden-ip 172.16.31.2
 dhcp server forbidden-ip 172.16.31.3
 dhcp server forbidden-ip 172.16.31.4
 dhcp server forbidden-ip 172.16.31.5
 dhcp server forbidden-ip 172.16.31.6
 dhcp server forbidden-ip 172.16.31.7
 dhcp server forbidden-ip 172.16.31.8
 dhcp server forbidden-ip 172.16.31.9
 dhcp server forbidden-ip 172.16.31.10
 dhcp server forbidden-ip 172.16.41.1

#
 dhcp enable
#
 ntp-service source-interface Vlan-interface23
 ntp-service unicast-server 10.7.254.254
#
 ssh server enable
 undo ssh server compatible-ssh1x
#
 arp static 172.16.23.251 b083-fe72-f63f
#
 sflow agent ip 192.168.12.1
 sflow source ip 192.168.12.1
 sflow collector 1 ip 192.168.12.38 port 9999 description netflow-analyzer
#
 load xml-configuration
#
 load tr069-configuration
#

#
irf-port 1/2
 port group interface Ten-GigabitEthernet1/0/29
 port group interface Ten-GigabitEthernet1/0/30
#

interface GigabitEthernet1/0/13
 port link-mode bridge
 description to-GPU19
 sflow flow collector 3
 sflow sampling-rate 19999
 sflow counter collector 3
 sflow counter interval 1999
#

#
 ssh server enable
#
 time-range lsl 14:00 to 14:30 Mon 
#
 ntp-service unicast-server 10.3.250.250
 ntp-service unicast-peer 10.3.250.250
#
acl number 3001
 rule 0 deny tcp destination-port eq 443 time-range lsl
 rule 5 deny tcp destination-port eq www time-range lsl
#

#
public-key peer 10.3.19.11
 public-key-code begin
   308201B73082012C06072A8648CE3804013082011F02818100D757262C4584C44C211F18BD
   96E5F061C4F0A423F7FE6B6B85B34CEF72CE14A0D3A5222FE08CECE65BE6C265854889DC1E
   DBD13EC8B274DA9F75BA26CCB987723602787E922BA84421F22C3C89CB9B06FD60FE01941D
   DD77FE6B12893DA76EEBC1D128D97F0678D7722B5341C8506F358214B16A2FAC4B36895038
   7811C7DA33021500C773218C737EC8EE993B4F2DED30F48EDACE915F0281810082269009E1
   4EC474BAF2932E69D3B1F18517AD9594184CCDFCEAE96EC4D5EF93133E84B47093C52B20CD
   35D02492B3959EC6499625BC4FA5082E22C5B374E16DD00132CE71B020217091AC717B6123
   91C76C1FB2E88317C1BD8171D41ECB83E210C03CC9B32E810561C21621C73D6DAAC028F4B1
   585DA7F42519718CC9B09EEF038184000281805820F811BA5C1FE91A206E6C838B8B644FAD
   227218B9107449E9DFEEC36B35566476CB03B53311624D7FB7D72E31E4A9751DBD57414817
   6F2DC541C37C3285F62B308B1F2407BB440801040622E6D27078B050FC8B0D6AC6BFE68EA2
   8BBEDEBB952D62C53119EC08D2CED9D2BAA6BE46B6B8E6147FFD037F7787D189B312BB8F
 public-key-code end
 peer-public-key end
#