园区基础网络配置系列——华三核心堆叠

前言：

基础拓扑结构

设备型号：H3C-LS-6520X-30QC-EI
需求：STP，DHCP，SSH，聚合，堆叠

IRF堆叠配置

#

sysname CORE-A

interface ten-gigabitethernet 1/0/25
shutdown
quit

interface ten-gigabitethernet 1/0/26
shutdown
quit

irf-port 1/2
port group interface ten-gigabitethernet 1/0/25
port group interface ten-gigabitethernet 1/0/26
quit

interface ten-gigabitethernet 1/0/25
undo shutdown
quit

interface ten-gigabitethernet 1/0/26
undo shutdown
quit

irf member 1 priority 32
save force
irf-port-configuration active

#

#

sysname CORE-B

irf member 1 renumber 2
quit
reboot   \\在成员编号修改为2后，必须重启才能生效

interface ten-gigabitethernet 2/0/25
shutdown
quit

interface ten-gigabitethernet 2/0/26
shutdown
quit

irf-port 2/1
port group interface ten-gigabitethernet 2/0/25
port group interface ten-gigabitethernet 2/0/26
quit

interface ten-gigabitethernet 2/0/25
undo shutdown
quit

interface ten-gigabitethernet 2/0/26
undo shutdown
quit

save force
irf-port-configuration active

dis irf

#

vlan配置

vlan 10 
  description test-1
  quit

 int vlan 10
  ip add 10.1.10.1 24
  quit

DHCP配置

dhcp enable

dhcp server ip-pool test-1
   gateway-list 10.1.10.1
   network 10.1.10.0 mask 255.255.255.0
   dns-list 8.8.8.8 114.114.114.114

dhcp server forbidden-ip xxx  xxx  \\ 不参与自动分配的IP地址

SSH配置

ssh server enable

line vty 0 63
authentication-mode scheme
quit

local-user xxx
password simple xxx
service-type ssh
authorization-attribute user-role network-admin
quit

聚合配置

interface Bridge-Aggregation 1
quit

interface range GigabitEthernet 1/0/23 to GigabitEthernet 2/0/23
 port link-aggregation group 1
qu

interface Bridge-Aggregation 2
quit

interface range GigabitEthernet 1/0/24 to GigabitEthernet 2/0/24
 port link-aggregation group 2
qu

其它配置

ip route-static 0.0.0.0 10.1.10.1  \\静态路由

stp instance 0 root primary    //设置该交换机为主根桥
stp global enable    //开启stp全局

acl number 3000
 rule 1 deny ip destination 10.1.10.0 0.0.255.255
#基础ACL

acl advanced 3010
 rule 0 permit ip source 10.1.10.11 0 destination 10.1.20.1 0
 rule 5 permit ip source 10.1.20.1 0 destination 10.1.10.11 0
#高级ACL

password-control login-attempt 5 exceed lock-time 60 
#配置用户登录尝试次数以及登录尝试失败后的行为

loopbackinternal \\内环测试
loopbackexternal \\外环测试

interface Ten-GigabitEthernet1/0/1
 description TO-Switch
 port link-type trunk
 port trunk permit vlan all

interface Ten-GigabitEthernet1/0/2
 description PC
 port access vlan 10