H3C can provide the most comprehensive switch products in the industry. From campus to data center, from box to box, from FE and GE to 10g and 10G, from L2 to L4/7, from IPv4 to IPv6, from access to core, users have the richest choices and flexible combinations. Let's take a look at the port configuration command of H3C switch, hoping to help everyone!
1, MAC port
A)AM command
Use the special AM User-bind command to complete the binding of MAC address and port. For example:
[SwitchA]am user binds mac address 00e0-fc22-f8d3 interface Ethernet 0/ 1
Configuration description: As the port parameter is used, the port will be taken as the reference, that is, at this time, port E0/ 1 only allows PC 1 to access the Internet, while PCs with other unbound MAC addresses cannot access the Internet. but
It's PC 1. You can use this MAC address to surf the Internet on other ports.
B)mac address command
Use mac-address static command to complete the binding between mac address and port. For example:
[SwitchA]mac address static 00e0-fc22-f8d3 interface Ethernet 0/ 1 vlan 1
[SwitchA]mac address Maximum mac Count 0
Configuration description: Because the port learning function is used, it is necessary to set the mac learning number of this port to 0 after the mac is statically bound, so that other PCs cannot learn the mac address of this port after accessing this port.
2、IP MAC
A)AM command
Use the special AM User-bind command to complete the binding of IP address and MAC address. For example:
[SwitchA]am user binds ip address10.1.1.2 MAC address 00e0-fc22-f8d3.
Configuration description: The above configuration completes the global binding of IP address and MAC address of PC, that is, PCs with different IP addresses or MAC addresses cannot access the Internet at any port.
Supported models: S3026E/EF/C/G/T, S3026C-PWR, E026/E026T, S3050C, E050, S3526E/C/EF, S50 12T/G, S5024G.
B)arp command
Use special arp static command to complete the binding of IP address and MAC address. For example:
[SwitchA]arp static10.1.1.200e0-fc22-f8d3
Configuration description: The above configuration completes the global binding of IP address and MAC address of PC.
3. Port IP MAC
Use the special AM User-bind command to complete the binding between IP, MAC address and port. For example:
[SwitchA]am user binds ip address10.1.1.2 MAC address 00e0-fc22-f8d3 interface Ethernet 0/ 1
Configuration Description: It can complete the binding function between the IP address and MAC address of PC 1 and port E0/ 1. Because the port parameter is used, the port will be used as a reference, that is, at this time, port E0/ 1 only allows PC 1 to access the Internet, while PCs using other unbound IP addresses and MAC addresses cannot access the Internet. But PC 1 can use this IP address and MAC address to surf the Internet on other ports.
#####################################
[s 20 16-e 1-Ethernet 0/ 1]MAC-address max-MAC-count 0；
Enter the port and use the command mac max-mac-count 0 (the port mac learning number is set to 0).
[S20 16-E 1]mac static 0000-9999-8888 inte0/1VLAN/kloc-0;
Bind 0000-9999-8888 to e0/ 1 port. At this time, only the pc bound to the mac can access the Internet through this port. E0/ 1 belongs to vlan 10.
That's it, ok, but the order of the above two commands cannot be reversed unless there is no pc under the port.
##################################
Display virtual local area network
Name text specifies the name of the current vlan.
Revocation name has been cancelled.
[h3c] Virtual LAN 2
[h3c-vlan 2] Name the test VLAN
Dis user display user
Dis startup displays information about the startup configuration file.
Dis user interface displays information about the user interface.
Dis web users displays information about web users.
The login configuration login verification in the header is to display information.
Title shell
Undo title
Lock Locks the current user interface.
Acl Access Control List acl Number Inbound/Outbound
[h3c] user interface vty 0 4
[h3c-vty0-4] acl 2000 inbound
Shut down: Shut down the vlan interface.
Undo shutdown will open the vlan interface.
Shut down the vlan 1 interface.
[h3c] Interface VLAN- Interface 1
[h3c-VLAN- interface] is closed.
Vlan vlan-id defines VLAN.
Revoke virtual LAN identification
Show ip routing table
Show ip routing table protocol static
Display ip routing table statistics
Show ip routing table details View all the details of the routing table.
Interface VLAN- Interface vlan-id enters the valn.
Management vlan vlan-id defines the management vlan number.
Reset IP routing table statistical protocols Clear all routing information of all routing protocols.
Display garp statistics interface Gigabit Ethernet11Display garp statistics on Ethernet ports.
Display voice vlan status to view voice vlan status.
[H3C- Gigabit Ethernet 1/0/ 1] The maximum broadcast traffic allowed by broadcast suppression 20 is 20% of the port transmission capacity. The surplus is discarded.
[H3C- Gigabit Ethernet11] Broadcast suppression PPS 1000 allows to accept 20% of the transmission capacity of 1000 per second. The surplus is discarded.
Display interface Gigabit Ethernet1/01to view port information.
Displays the brief configuration information of the interface Gigabit Ethernet1/01view port.
The loopback test is displayed to test whether the loop test is turned on.
Display transceiver-information interface Gigabit Ethernet 1/0/50 displays information about optical ports.
Double-sided automatic/full/half
[h3c] Interface Gigabit Ethernet 1/0/ 1
[h3c- Gigabit Ethernet1/01] Duplex automatically sets the port duplex property to self-negotiation.
Port link access/hybrid/relay defaults to access.
Port trunking allows vlan all to add trunking to all vlans.
Reset the counter interface Gigabit Ethernet 1/0/ 1 to clear the statistics of the port.
Speed automatic10/100/1000
Displays port security view port security configuration information.
A muser-bindmac-addr00e0-fc00-510/ip-addr10/53.1.2 Interface Gigabit Ethernet1/kloc.
Show arp show arp
Display am user-bind displays the configuration information of the port binding.
Display mac-address displays the mac address obtained by the switch.
Display stp displays the status and statistics of spanning tree.
[h3c- Gigabit Ethernet11] STP instance 0 cost 200 sets the path cost on spanning tree instance 0 to 200.
The Stp cost setting specifies the path cost of the current port on the spanning tree instance. The value range of cist in the table with the instance-id of 0- 16 0 is 1-200000.
Display system-guard IP- record shows the information of anti-attack record.
System-guard enable enables the system anti-attack function.
Display icmp statistics icmp traffic statistics
Show ip sockets
Show ip statistics
Show acl all
Acl number acl number matching order automatic/configuration
Acl-number (2000-2999 is the basic Acl, and 3000-3999 is the number reserved for administrators by advanced acl)
Rule deny/allow protocol
access control
[h3c] acl number 3000
[h3c-ACL-adv-3000] rules allow tcp source 129. 9. 0. 0 0. 255. 255 destination 202.38.160.0.0.255.255 destination port eq 80 (
Define an advanced acl 3000, which allows hosts in 129.0.0/ 16 network segment to access port 80 from hosts in 202.38. 160/24 network segment.
Rules allow sources 211.100.255.0 0.255.255.
The rule rejects cos 3 source 00DE-BBEF-ADSEFFFF-FFF target 0011-4301-9912fffff-ffff.
(It is forbidden to send messages to mac addresses 0011-4301-9912 and 802. 1p with priority of 3. )
Show QoS- Interface Gigabit Ethernet11Traffic-Limit the traffic on the viewing port.
Port rate limitation
Line Rate Inbound/Outbound Target Rate
Inbound: Limits the rate at which the port receives messages.
Outbound: Messages sent by rate-limiting ports.
Target-rate limits the message rate in kbps. The inbound range of Gigabit port is 1- 100000 and the outbound range is 20- 100000.
Cancel the line rate Cancel the speed limit.
[h3c] Interface Gigabit Ethernet 1/0/ 1
[h3c- Gigabit Ethernet11] Line speed outbound 128 limits the outbound rate to 128kbps.
Display arp | contains 77
Display arp count and calculate the number of records in arp table.
Display ndp Displays the detailed configuration information of the switch port.
Display ntdp device list and collect device details in detail.
Display lock
Show users
Display cpu
Display memory
Display fan
Display device
Display ability
[Quidditch] dis cur displays the current configuration.
[Quidditch] Displays the current-configuration; Display the current configuration
[Quidditch] Display interface; Display interface information
[Quidditch] Displays all vlan; Show routing information
[Quidditch] display version; Display version information
[Quidditch] Super password; Modify privileged user password
[Quidditch] The name of the sysname switch
[Quidway] Interface Ethernet 0/1; Enter the interface view
[Quidditch] Interface VLAN x；; Enter the interface view
【 Quidway-Vlan-interfacex】IP address10.65.1.1255.255.0.0; Configure the IP address of the VLAN.
[Quidditch] ip routing-static 0.0.0.010.65.1.2; Static route = gateway
[Quidditch] rip three-layer exchange support
[Quidway] local user ftp
[Quidditch] User interface vty04; Enter the virtual terminal
[s 3026-ui-vt y0-4] authentication mode password; Set password mode
[s 3026-ui-vt y0-4] Setting the authentication mode password is simple 222; Set password
[s 3026-ui-vt y0-4] User authority level 3; User level
[Quidway] Interface Ethernet 0/1; Enter port mode
[Quidditch] Inte0/1; Enter port mode
[Quidway-Ethernet 0/ 1] duplex {half duplex | full duplex | automatic}; Configure port working status
[Quidway-Ethernet 0/ 1] speed {10 |100 | auto}; Configure port working rate
[Quidway-Ethernet 0/ 1] flow control; Configure port flow control
[Quidway-Ethernet 0/ 1]MDI { cross | auto | normal }； Configure port butt joints and torsion joints.
[Quidway-Ethernet 0/ 1] port link type {trunk | access | hybrid }；; Set the port working mode
[Quidway-Ethernet 0/ 1] port is connected to VLAN 3；; The current port is added to the VLAN.
[Quidway-Ethernet 0/2] Port trunking allows VLAN {ID | All }；; Set VLAN allowed for trunking.
[Quidway-Ethernet0/3] Port trunk pvid VLAN 3；; Set the PVID of the trunk port.
[Quidway-Ethernet 0/ 1] cancels the shutdown; Activation port
[Quidway-Ethernet 0/ 1] shutdown; Close the port
[Quit-ethernet0/1]; return
[Quidditch] VLAN 3；; Create VLAN
[Quidway-vlan3] Port Ethernet 0/1; Add port in VLAN
[Quidway-vlan3] Port E0/1; short form
[Quidway-vlan3] Port Ethernet 0/ 1 to Ethernet 0/4; Add port in VLAN
【 Quidway-vlan3 】 Ports e0/ 1 to E0/4; short form
[Quidditch] Monitor-port; Specify the mirror port
[Quidditch] Hong Kong Mirror; Specify the mirror port.
[Quidway] port mirroring int_list observation-port int _ type int _ num specifies mirroring and being mirrored.
[Quidditch] Description string; Specify VLAN description characters
[Quidditch] Description; Delete VLAN description characters
[Quidway] displays VLAN [VLAN _ id]; View VLAN settings
[Quidway]STP { enable | disable }； Sets the spanning tree that is turned off by default.
[Quidditch] stp takes priority 4096; Set the priority of the switch
[Quidway]STP root { primary | secondary }； Set as root or backup of root
[quidway-ethernet0/1] STP costs 200; Set the cost of the switch port.
[Quidditch] Link aggregation e0/ 1 to e0/4 entrance | both; ethernet channel
[Quidditch] Cancel link aggregation E0/1| all; The starting port is the channel number.
[switch a-VLAN x]isolate-user-VLAN enable； Set the primary vlan
[switch a]isolate-user-VLAN secondary； Set the sub-vlan contained in the main vlan.
[Quidway-Ethernet 0/2] port mixed pvid vlan sets the pvid of vlan.
[Quidway-Ethernet 0/2] Port mixed pvid Delete the pvid of vlan.
;