华为交换机日常操作

因为trunk类型需双方交换机都得配置为一样的才可通信，固此更改link-type为access

[Quidway-GigabitEthernet5/0/10]dis this

#

interface GigabitEthernet5/0/10

port link-type trunk

port trunk allow-pass vlan 21 to 22

[Quidway-GigabitEthernet5/0/10]undo port trunk allow-pass vlan 21 to 22

[Quidway-GigabitEthernet5/0/10]dis this

#

interface GigabitEthernet5/0/10

port link-type trunk

undo port trunk allow-pass vlan 1

[Quidway-GigabitEthernet5/0/10]portswitch

[Quidway-GigabitEthernet5/0/10]port link-ty acc

[Quidway-GigabitEthernet5/0/10]dis this

#

interface GigabitEthernet5/0/10

port link-type access

[Quidway-GigabitEthernet5/0/10]port def

[Quidway-GigabitEthernet5/0/10]port default vlan 21

 

对不同vlan的客户端指定ip地址

1、到目标vlan绑定ip地址

int vlan 3

dhcp server static-bind ip-address x.x.x.x mac-address x.x.x.x

2、到客户端所在二层交换机上的端口上更改默认vlan

port default vlan 3

 

 

Mac地址与ip地址进行绑定以及解绑

>reset ip pool interface Vlanif3 all

>reset arp all

>sys

]int vlan 3

]dhcp server static-bind ip-address x.x.x.x mac-address x.x.x.x

Ip地址可以先查看有没有使用的ip，可以使用如下命令

dis arp netw 172.18.53.0 255.255.255.0 查看53网段的arp信息

]undo dhcp server static-bind ip-address 172.18.53.116解绑

 

dis arp network 172.18.21.151查看单个ip的mac地址信息

 

问题单号:234939

二层交换机开启dhcp snooping以防止私自接dhcp服务器

1、dhcp enable

2、dhcp snooping enable

3、进入上联口interface GigabitEthernet 0/0/48

4、执行dhcp snooping trusted

5、进入此交换机另外47个口执行dhcp snooping enable

 

查看某个mac地址的接口信息

dis mac-address 8825-933d-de57

--------------------------------------------------，-----------------------------

MAC Address VLAN/VSI              Learned-From     Type

-------------------------------------------------------------------------------

0050-56af-0017  13/-                    GE5/0/13         dynamic

此信息代表0050-56af-0017是从这个交换机的13口上学习到的。

 

 

查看某个ip

 

display arp | in 172.18.2.160

 

三层交换机执行

display arp network 172.18.53.48

查到mac地址后

IP ADDRESS      MAC ADDRESS     EXPIRE(M) TYPE        INTERFACE   VPN-INSTANCE

                                         VLAN/CEVLAN

------------------------------------------------------------------------------

172.18.53.48    28d2-4478-c303  17        D-0         GE5/0/2

                                            3/-

显示是从三层交换机上的第二个接口学习到这个mac地址，

则可以进入连接这个第二个接口的交换机上执行下面命令

dis mac-address 28d2-4478-c303

 

 

把一个接口加入到vlan1

int gig 0/0/45

port default vlan 1此命令是把0/0/45加入vlan1

 

把mac地址加入黑洞列表

 

https://docs.google.com/spreadsheets/d/1Moojm_xdExq1umYuEexF9pQ57DPMAPasNvSDzL3jOWI/edit#gid=0    vlan信息表

 

 

 

策略路由

http://wenku.baidu.com/link?url=YbjWs6dl94USlmK0iejqeMebU658-Va4x8B2EfObEufBOimTS1uJ4NiJO95oX54f_kUoJtc0sj4sFB02VO12SvgosDyg2_9p-OeGkJPJqSu

http://wenku.baidu.com/link?url=RWzTMz3trlotln02s_GyfPwMXHqQYV1vgj8ioo4yw5qZXnDewRuChoEM7fgMlgPrT1j-taeNbSiKjOR59k7Nb3oxZKWHr3KrJb3XjqWhxUu

http://support.huawei.com/enterprise/docinforeader.action?contentId=DOC1000057405&idPath=7919710|9856733|7923144|16531  华为配置手册

本文转自 Bruceweien 51CTO博客，原文链接:
http://blog.51cto.com/bruceweien/1932321