1 / 4
文档名称:

华为9300接入交换机初始配置.doc

格式:doc   大小:38KB   页数:4页
下载后只包含 1 个 DOC 格式的文档,没有任何的图纸或源代码,查看文件列表

如果您已付费下载过本站文档,您可以点这里二次下载

分享

预览

华为9300接入交换机初始配置.doc

上传人:朱老师 2022/12/8 文件大小:38 KB

下载得到文件列表

华为9300接入交换机初始配置.doc

相关文档

文档介绍

文档介绍:该【华为9300接入交换机初始配置 】是由【朱老师】上传分享,文档一共【4】页,该文档可以免费在线阅读,需要了解更多关于【华为9300接入交换机初始配置 】的内容,可以使用淘豆网的站内搜索功能,选择自己适合的文档,以下文字是截取该文章内的部分文字,如需要获得完整电子版,请下载此文档到您的设备,方便您编辑和打印。Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
[Quidway]SysnameNB-SW1-S9300//设置名称
#
[NB-SW1-S9300]clocktimezonebeijingadd08:00:00//时间设置
#
vlan250//配置网管vlan
descriptionTOS9300-NetManagement
#
vlan1483//新建vlan
descriptionyw-BinWang-14-ALCXD-DSLAM-2//vlan描述
#
interfaceVlanif250//配置网管接口地址
descriptionTOS9303-NetManagement
//配置网管ip
#
配置端囗镜像:对接口GE1/0/0上入方向的报文进行镜像,设备的观察端口最多可以设置为八个,但是每单板上行只能镜像到至多两个观察端口
首先在全局模式下将一个端囗配置成观测端囗(整机支持两个观察端囗):
[S9300]observe-port 1 interface GigabitEthernet x/x/x 
然后再进入需要镜像的端囗配置镜像端囗:
[S9300-GigabitEthernet3/0/37]port-mirroring observe-port 1 both(支持出或入方向及双向流)
配置流镜像:
首先也是在全局模式下将一个端囗配置成观测端囗(整机支持两个观察端囗):
[S9300]observe-port 1 interface GigabitEthernet x/x/x 
然后再配置ACL将需要镜像的流匹配出来:
acl number 3000//创立ACL
 rule 5 permit ip//增加一条规那么
#
traffic classifier 1 operator and precedence 5//创立流分类1
 if-match 5 acl 3000//匹配acl
#
traffic behavior 1//创立流行为1
 mirroring observing-port 1
#
traffic policy 1//创立流策略1
 classifier 1 behavior 1//把创立流分类与创立流行为关联
最后进入此流进入或出去的端囗下发镜像规那么:
[S9303-GigabitEthernet3/0/37]traffic-policy 1 inbound (支持出流量和入流量)
端口速率限制:
#配置GE1/0/10接口允许通过播送报文的承诺信息速率为100kbit/s,承诺突发尺寸为18800byte。
[S9300]interfaceGigabitEthernet1/0/10
[S9300-GigabitEthernet1/0/10]broadcast-suppressioncir100cbs18800
#
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
[S9300]qoscarqoscar1cir10000cbs10240创立名为qoscar1的QoSCAR,承诺信息速率为10M,承诺突发尺寸为10240字节
#
[S9300]interfaceGigabitEthernet2/0/0
[S9300-GigabitEthernet2/0/0]qoscarinboundqoscar1对接口GE2/0/0的入方向报文实施名为qoscar1的QoSCAR流量监管
#
interfaceeth-trunk2S9300支持跨板Eth-Trunk,即不同单板中的接口可以捆绑为一个Eth-Trunk接口。
最多可以创立128个Eth-Trunk接口,每个Eth-Trunk接口下最多可以包含8个成员接口。组成Eth-Trunk的接口称为Eth-Trunk的成员接口。
descriptionToJH-YW-BW-BAS-SE800-4-
portswitch//三层接口切换到二层工作模式
portlink-typetrunk
porttrunkallow-passvlan1483to149415111513to1515152815361587
#
interfaceGigabitEthernet1/0/1
eth-trunk2
#
interfaceGigabitEthernet1/0/2
eth-trunk2
#
interfaceGigabitEthernet1/0/19
descriptionToJH-YW-BW-BAS-SE800-4-
portlink-typetrunk
porttrunkallow-passvlan1483to149415111513to1515152815361587
#
interface GigabitEthernet1/0/1基于端口灵活QINQ配置举例
   description To yw-FuTian-MA5600-DSLAM
   undo negotiation auto     // 端口强制模式(强制模式只适用GE光口、千兆电口只能采用自协商)
    port hybrid tagged vlan 32   // 透传Dslam管理vlan
    port hybrid untaggedvlan 1400   //剥离回程报文外层vlan
    port vlan-stacking vlan 101 to 960 stack-vlan 1400   //对vlan 101-960打上外层vlan 1400
port vlan-stacking vlan 3600 stack-vlan 1400        //对vlan 3600打上外层vlan 1400 
#OSPF标准配置
//指定routerid
#
interfaceVlanif43
descriptionTo_QT-JR-S5352-07

ospfcost10//设置链路开销值,也可以默认不设
ospfnetwork-typep2p//选定链路网络类型为p2p模式
#
interfaceLoopBack0//创立LoopBack0接口与接口地址

#
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
ospf10//创立ospf进程
silent-interfaceLoopBack0//不向LoopBack0接口发送协议报文
import-routestatic//引如静态路由〔直连direct〕
//选定area区域
//发布LoopBack0接口地址,并使能ospf
//发布接口地址,并使能ospf
#IS-IS标准配置
[S9300]isis//在全局模式下启用IS-IS
[S9300-isis]network-//配置网络实体名称
[S9300-isis]is-levellevel-1//设置当前S9300工作在Level-1
[S9300-isis-1]import-routestaticcost15//引入静态路由,并设置cost值为15
#
interfaceVlanif43
descriptionTo_QT-JR-S5352-07

isisenable//在端口模式下使能IS-IS
isiscircuit-levellevel-1//在端口模式下更改IS端口的层次,端口默认模式是Level-1-2层
isiscost5level-1//链路开销为5
#
interfaceLoopBack0//创立LoopBack0接口与接口地址

isisenable
#
iproute-//配置默认路由
#
info-centersourcedefaultchannel2loglevelwarning//配置syslog信息
info-centerloghostsourceVlanif26
info-
#
snmp-agent//配置综合网管
snmp-agentlocal-engineid800007DB000FE23F4C
snmp-agentcommunityreadnbroot
snmp-agentsys-infocontactHuaWei800-8302118
snmp-agentsys-infolocationNB-A-YJXQ-3552-1//设置设备名称
snmp-agentsys-infoversionall
snmp-agenttarget-hosttrapaddressudp--port161paramssecuritynamepublic//设置网管效劳器地址
snmp-agenttrapenable
#
superpasswordlevel3cipherXXXXX//配置登录信息
#
aaa
local-userXXXpasswordcipherXXXXX
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
Countycontinuationrecordshasexaminedandapprovedthedraft,spirit,believe,comprehensiveYearbookofzhuanglangalreadyprepareddraft,
local-userXXXservice-typeterminaltelnet
local-userXXXlevel1
authentication-schemedefault
#
user-interfacevty04
authentication-modeaaa
idle-time300
protocolinboundtelnet
#
ntp-serviceunicast-//配置网络时钟