前言:
基础拓扑结构
设备型号:H3C-LS-6520X-30QC-EI
需求:STP,DHCP,SSH,聚合,堆叠
IRF堆叠配置
#
sysname CORE-A
interface ten-gigabitethernet 1/0/25
shutdown
quit
interface ten-gigabitethernet 1/0/26
shutdown
quit
irf-port 1/2
port group interface ten-gigabitethernet 1/0/25
port group interface ten-gigabitethernet 1/0/26
quit
interface ten-gigabitethernet 1/0/25
undo shutdown
quit
interface ten-gigabitethernet 1/0/26
undo shutdown
quit
irf member 1 priority 32
save force
irf-port-configuration active
#
#
sysname CORE-B
irf member 1 renumber 2
quit
reboot \\在成员编号修改为2后,必须重启才能生效
interface ten-gigabitethernet 2/0/25
shutdown
quit
interface ten-gigabitethernet 2/0/26
shutdown
quit
irf-port 2/1
port group interface ten-gigabitethernet 2/0/25
port group interface ten-gigabitethernet 2/0/26
quit
interface ten-gigabitethernet 2/0/25
undo shutdown
quit
interface ten-gigabitethernet 2/0/26
undo shutdown
quit
save force
irf-port-configuration active
dis irf
#
vlan配置
vlan 10
description test-1
quit
int vlan 10
ip add 10.1.10.1 24
quit
DHCP配置
dhcp enable
dhcp server ip-pool test-1
gateway-list 10.1.10.1
network 10.1.10.0 mask 255.255.255.0
dns-list 8.8.8.8 114.114.114.114
dhcp server forbidden-ip xxx xxx \\ 不参与自动分配的IP地址
SSH配置
ssh server enable
line vty 0 63
authentication-mode scheme
quit
local-user xxx
password simple xxx
service-type ssh
authorization-attribute user-role network-admin
quit
聚合配置
interface Bridge-Aggregation 1
quit
interface range GigabitEthernet 1/0/23 to GigabitEthernet 2/0/23
port link-aggregation group 1
qu
interface Bridge-Aggregation 2
quit
interface range GigabitEthernet 1/0/24 to GigabitEthernet 2/0/24
port link-aggregation group 2
qu
其它配置
ip route-static 0.0.0.0 10.1.10.1 \\静态路由
stp instance 0 root primary //设置该交换机为主根桥
stp global enable //开启stp全局
acl number 3000
rule 1 deny ip destination 10.1.10.0 0.0.255.255
#基础ACL
acl advanced 3010
rule 0 permit ip source 10.1.10.11 0 destination 10.1.20.1 0
rule 5 permit ip source 10.1.20.1 0 destination 10.1.10.11 0
#高级ACL
password-control login-attempt 5 exceed lock-time 60
#配置用户登录尝试次数以及登录尝试失败后的行为
loopbackinternal \\内环测试
loopbackexternal \\外环测试
interface Ten-GigabitEthernet1/0/1
description TO-Switch
port link-type trunk
port trunk permit vlan all
interface Ten-GigabitEthernet1/0/2
description PC
port access vlan 10