1. 程式人生 > >H3C常用配置和命令

H3C常用配置和命令

info arp rim cond link bpp ogg ica 動態arp

鄰居發現命令
display lldp neighbor-information list

DHCP中繼配置
dhcp enable
dhcp relay server-group 1 ip x.x.x.x #x為DHCP服務器的ip地址
int vlan 30
dhcp select relay
dhcp relay server-select 1

在H3C交換機配置dhcp服務器時查看地址的分配情況
dis dhcp server ip-in-use pool vlan1006
dis dhcp server free-ip pool vlan1006

查看接口描述
display interface brief description

default接口
[h3c]interface GigabitEthernet 1/0/41
[h3c-GigabitEthernet1/0/41]default

全局開啟802.1X
dot1x
dot1x authentication-method eap
dot1x timer quiet-period 10
dot1x timer tx-period 10
mac-authentication
mac-authentication domain 1x
radius scheme 1x
primary authentication 172.28.101.3
primary accounting 172.28.101.3
secondary authentication 172.28.101.2
secondary accounting 172.28.101.2
key authentication cipher $c$3$NAIz9CqJDECj7p7qCeuCDXbmfRIcyOtxxCDlaA==
key accounting cipher $c$3$TaTYg1NBpPoTzE97hwyZJSEnRnFiBvIpaVoOgg==
user-name-format without-domain
radius scheme system
user-name-format without-domain
domain 1x
authentication lan-access radius-scheme 1x
authorization lan-access radius-scheme 1x
accounting lan-access radius-scheme 1x

接口下開啟802.1X
interface GigabitEthernet2/0/1
description 802.1x_authenration
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 1030 3000 untagged
port hybrid pvid vlan 3000
mac-vlan enable
stp edged-port
dot1x
undo dot1x handshake
dot1x mandatory-domain 1x
undo dot1x multicast-trigger
dot1x re-authenticate
dot1x unicast-trigger
dot1x guest-vlan 1030
dot1x auth-fail vlan 1030
mac-authentication
mac-authentication domain 1x
mac-authentication guest-vlan 1030
mac-authentication parallel-with-dot1x

日誌管理
display logbuffer #查看日誌
reset logbuffer #清除日誌

查看arp
[CORE]arp max-learning-number 1024 #設置arp最大學習條目(h3c最大條目數為1024)
[CORE]dis arp all count #查看arp已使用條目
<CORE>reset arp dynamic #清除動態arp表
[CORE]dis ip routing-table summary #查看最大支持路由條目

H3C常用配置和命令