2023年12月23日发(作者:)

.

一、清空配置: reset saved-configuration(清楚下次启动时使

用的配置文件信息)然后重启设备,重启设备室提示保存信息,选择“NO”。

reset saved-configuration

Warning: The action will delete the

saved configuration in the configuration will be erased to

reconfigure. Continue? [Y/N]:yWarning: Now clearing the configuration in

the device.

Info: Succeeded in clearing the configuration in the device.

reboot

Info: The system is now comparing the configuration, please

wait.

Warning: The configuration has been modified, and it will be saved to

the next startup saved-configuration . Continue?

[Y/N]:n //此处请选择“N”

Info: If want to reboot with saving diagnostic

information, input 'N' and then execute 'reboot save diagnostic-

information'.

System will reboot! Continue?[Y/N]:y

二、通过STelnet/Telnet登录交换机设置新的Console口登录密码

# 以登录用户界面的认证方式为密码认证,密码为Huawei@123为例,配置如下。

system-view

[HUAWEI] user-interface console 0

[HUAWEI-ui-console0] authentication-mode password

[HUAWEI-ui-console0] set authentication password cipher Huawei@123

[HUAWEI-ui-console0] return

save

# 以登录用户界面的认证方式为AAA认证,用户名为admin123,密码为Huawei@123为

例,配置如下。

system-view

1 / 11'.

.

[HUAWEI] user-interface console 0

[HUAWEI-ui-console0] authentication-mode aaa

[HUAWEI-ui-console0] quit

[HUAWEI] aaa

[HUAWEI-aaa] local-user admin123 password irreversible-cipher Huawei@123

[HUAWEI-aaa] local-user admin123 service-type terminal(本地防务终端用户)

[HUAWEI-aaa] return(返回)

save(保存)

三、查看某个接口学习到的MAC地址

display mac-address dynamic gigabitethernet1/0/1

MAC Address VLAN/VSI Learned-From Type

-------------------------------------------------------------------------

0000-0000-0003 300/- GE1/0/1 dynamic

0026-6e5c-feac 3000/- GE1/0/1 dynamic

四、查看某个VLAN学习到的MAC地址

display mac-address dynamic vlan 10

MAC Address VLAN/VSI Learned-From Type

--------------------------------------------------------------------------

0000-0000-0003 10/- GE1/0/1 dynamic

0026-6e5c-feac 10/- GE1/0/2 dynamic

五、查看系统的MAC地址

display interface gigabitethernet1/0/1

GigabitEthernet1/0/1 current state : UP

Line protocol current state : UP

Description:

Switch Port, Link-type : access(configured),

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is00e0f74b-

2 / 11'.

.

6d00

六、根据IP获取对应设备的MAC地址

display arp | include 192.168.150.20

配置端口安全

# 配置GE1/0/1接口的端口安全功能。

system-view

[HUAWEI] interface gigabitethernet 1/0/1

[HUAWEI-GigabitEthernet1/0/1] port-security enable

# 配置GE1/0/1接口的MAC地址学习限制数为5,即最多可以学习到5个MAC地址表项。

system-view

[HUAWEI] interface gigabitethernet 1/0/1

[HUAWEI-GigabitEthernet1/0/1] port-security enable

[HUAWEI-GigabitEthernet1/0/1] port-security max-mac-num 5

配置永久端口组

# 配置接口GE1/0/1至GE1/0/8加入到永久端口组portgroup1(使用port-group命令)

system-view

[HUAWEI] port-group portgroup1

[HUAWEI-port-group-portgroup1] group-member gigabitethernet 1/0/1 to

gigabitethernet 1/0/8

配置接口速率 自协商模式下,手动配置接口速率

# 配置以太网接口GE1/0/1在自协商模式下协商速率为100Mbit/s。

system-view

[HUAWEI] interface gigabitethernet 1/0/1

[HUAWEI-GigabitEthernet1/0/1] negotiation auto

[HUAWEI-GigabitEthernet1/0/1] auto speed 100

配置双工模式 自协商模式下,手动配置双工模式

# 配置以太网电接口GE1/0/1在自协商模式下双工模式为全双工模式。

system-view

3 / 11'.

.

[HUAWEI] interface gigabitethernet 1/0/1

[HUAWEI-GigabitEthernet1/0/1] negotiation auto

[HUAWEI-GigabitEthernet1/0/1] auto duplex full

配置接口切换到三层模式

接口视图下执行命令undo portswitch,配置接口切换到三层模式。

# 将接口GE1/0/1切换为三层模式。

system-view

[HUAWEI] interface gigabitethernet 1/0/1

[HUAWEI-GigabitEthernet1/0/1] undo portswitch

[HUAWEI-GigabitEthernet1/0/1] ip address 10.10.10.10 255.255.255.0

支持二层模式与三层模式切换的款型及版本如下:lS5700EI:V200R005C00&C01

lS5700HI:V100R005C01、V100R006C01、V200R001C00、V200R002C00、V200R003C00

、V200R005C00&C01

lS5710EI:V200R002C00、V200R003C00、V200R005C00

lS5720EI:

V200R007C00、V200R008C00、V200R009C00、V200R010C00lS5710HI:V200R003C00、

V200R005C00

lS5720HI:V200R006C00、V200R007C00、V200R008C00、V200R009C00、

V200R010C00

lS6700EI:V200R005C00&C01

lS6720EI:V200R008C00、V200R009C00、

V200R010C00lS6720S-EI:V200R008C00、V200R009C00、V200R010C00

l

S7700&S9700:

V200R001C00&C01、V200R002C00、V200R003C00、

V200R005C00、V200R006C00、

V200R007C00、V200R008C00、V200R009C00、V200R010C00

对于V200R005C00及后续版

本,在接口使用命令undo portswitch,将以太网接口从二层模式切换到三层模式后

,支持配置IP地址。

4 / 11'.

.

一键清除接口下的配置 执行命令一键式清除接口下配置后,接口的状态将被置为

shutdown状态。

# 在系统视图下执行命令clear configuration interface清除GE1/0/1接口下的配置

system-view

[HUAWEI] clear configuration interface gigabitethernet 1/0/1

Warning: All

configurations of the interface will be cleared, and its state will be

shutdown. Continue? [Y/N] :y

Info: Total 5 command(s) executed, 5 successful, 0 failed.

查看设备支持的链路聚合组数目和成员接口数目

# 查看设备支持的链路聚合组数目和成员接口数目。

display trunk configuration

接口加入VLAN

l

Access接口加入VLAN

system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type access //设置接口的链路类型

为Access

[HUAWEI-GigabitEthernet0/0/1] port default vlan 10 //把接口

GigabitEthernet0/0/1加入VLAN 10

Trunk接口加入VLAN

system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk //设置接口的链路类型为

Trunk

[HUAWEI-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 //把接口

5 / 11'.

.

GigabitEthernet0/0/1加入VLAN 10

Hybrid接口加入VLAN

system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type hybrid //设置接口的链路类型

为Hybrid

[HUAWEI-GigabitEthernet0/0/1] port hybrid tagged vlan 10 //接口

GigabitEthernet0/0/1以Tagged方式加入VLAN 10

HUAWEI-GigabitEthernet0/0/1] port hybrid untagged vlan 20 //接口

GigabitEthernet0/0/1以Untagged方式加入VLAN 20

批量创建VLAN

批量创建10个连续的VLAN:VLAN11到VLAN20。

system-view

[HUAWEI] vlan batch 11 to 20

批量创建10不连续的VLAN:VLAN10、VLAN15到VLAN19、VLAN25、VLAN28到VLAN30。

system-view

[HUAWEI] vlan batch 10 15 to 19 25 28 to 30

接口批量加入VLAN

access接口类型。

system-view

[HUAWEI] port-group pg1 //创建端口组pg1

[HUAWEI-port-group-pg1] group-member gigabitethernet1/0/1 to

gigabitethernet1/0/5 //把接口gigabitethernet1/0/1到gigabitethernet1/0/5加

入端口组

[HUAWEI-port-group-pg1] port link-type access //批量修改端口

6 / 11'.

.

gigabitethernet1/0/1 to gigabitethernet1/0/5的链路类型为access

[HUAWEI-port-group-pg1] port default vlan 10 //批量把端口

gigabitethernet1/0/1 to gigabitethernet1/0/5加入VLAN10

trunk接口类型。

system-view

[HUAWEI] port-group pg1 //创建端口组pg1

[HUAWEI-port-group-pg1] group-member gigabitethernet1/0/1 to

gigabitethernet1/0/5 //把接口gigabitethernet1/0/1到gigabitethernet1/0/5加

入端口组

[HUAWEI-port-group-pg1] port link-type trunk //批量修改端口

gigabitethernet1/0/1 to gigabitethernet1/0/5的链路类型为trunk

[HUAWEI-port-group-pg1] port trunk allow-pass vlan 10 20 //批量把端口

gigabitethernet1/0/1 to gigabitethernet1/0/5加入VLAN10和VLAN20

删除单个VLAN10。

system-view

[HUAWEI] undo vlan 10

删除批量VLAN10到VLAN20。

system-view

[HUAWEI] undo vlan batch 10 to 20

将接口类型修改为Access

system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type access

[HUAWEI-GigabitEthernet0/0/1] port default vlan 10 //设置接口的PVID为

VLAN 10,并同时将VLAN 10加入接口

7 / 11'.

.

将接口类型修改为Trunk

system-view

[HUAWEI] interface gigabitethernet0/0/1

[HUAWEI-GigabitEthernet0/0/1] port link-type trunk

[HUAWEI-GigabitEthernet0/0/1] port trunk pvid vlan 10 //设置接口的PVID为

VLAN 10

[HUAWEI-GigabitEthernet0/0/1] port trunk allow-pass vlan 2 10 20 //将

VLAN 2、VLAN 10和VLAN 20加入接口

8 / 11'.

.

9 / 11'.

.

10 / 11'.

.

11 / 11'.