• 华为交换机vlan划分、telnet 管理地址配置

    ------1---
    1台核心交换时s5700
    2台汇聚交换机S3700
    6台PC
    -----2------
    创建vlan 10 20 30
    s3700下PC1,PC2,PC3
    S3700下PC4,PC5,PC6
    VLAN10 PC1,PC2
    VLAN20 PC3,PC4
    VLAN30 PC5,PC6
    -------3-----
    要求实现：
    PC1,PC2互通；
     PC3,PC4互通；
      PC5，PC6互通；
    ------------4-----s5700配置----
    undo terminal monitor   //关闭终端模拟
    dis cur  //查看配置
    #
    sysname s5700-Core  //重命名
    #
    vlan batch 10 to 30   //批量创建vlan
    #

    #
    dhcp enable     //启用dhcp
    #

    #
    ip pool 10                  //配置地址池
     gateway-list 192.168.10.1
     network 192.168.10.0 mask 255.255.255.0
     lease day 5 hour 0 minute 0
    #
    aaa
     authentication-scheme default
     authorization-scheme default
     accounting-scheme default
     domain default
     domain default_admin
     local-user admin password simple admin
     local-user admin service-type http
    #
    interface Vlanif1
    #
    interface Vlanif10   //进入vlan 10
     ip address 192.168.10.1 255.255.255.0  //设置网关 掩码
     dhcp select global
    #
    interface Vlanif20
     ip address 192.168.20.1 255.255.255.0
    #
    interface Vlanif30
     ip address 192.168.30.1 255.255.255.0
    #
    interface MEth0/0/1
    #
    interface GigabitEthernet0/0/1    //进入接口
     port link-type trunk                   //设置端口访问模式
     port trunk allow-pass vlan 10 20   //允许vlan 10 20 通过
    #
    interface GigabitEthernet0/0/2
     port link-type trunk
     port trunk allow-pass vlan 20 30
    #

    #
    user-interface con 0
    user-interface vty 0 4
    #
    return

    ----------s3700-h2------配置telnet------
    1.使能服务器功能。
    system-view              //进入用户视图模式
    [s3700-h2]telnet server enable     //使能telnet
    Info: The Telnet server has been enabled.
    [s3700-h2]

    2•配置VTY用户界面的认证方式为AAA：

    选择AAA认证，需要配置AAA用户的认证信息、接入类型和用户级别。
    [s3700-h2]aaa         //进入3a模式

    [s3700-h2-aaa]local-user huawei password simple huawei123  //设置明文用户名、密码
    Info: Add a new user.
    [s3700-h2-aaa]local-user  huawei privilege level 15       //设置用户权限    
    [s3700-h2-aaa]local-user huawei service-type telnet       //设置用户访问类型
    [s3700-h2-aaa]q
    [s3700-h2]
    3.配置VTY用户界面的认证方式和用户级别。配置VTY用户界面的支持协议类型。
    [s3700-h2]user-interface vty 0 4

    [s3700-h2-ui-vty0-4]authentication-mode aaa    //配置认证方式为AAA
    [s3700-h2-ui-vty0-4]protocol inbound telnet  //指定VTY用户界面所支持的协议为Telnet
    [s3700-h2-ui-vty0-4]q
    [s3700-h2]
    4.管理地址配置
    [s3700-h2]vlan 100           //创建vlan100
    [s3700-h2]interface Vlanif 100            //进入vlan100逻辑接口
    [s3700-h2-Vlanif100]ip address 10.10.100.3 24   //配置该虚接口下的ip\掩码
    [s3700-h2-Vlanif100]q

    [s3700-h2]interface GigabitEthernet 0/0/1
    [s3700-h2-GigabitEthernet0/0/1]dis this
    #
    interface GigabitEthernet0/0/1
     port link-type trunk
     port trunk allow-pass vlan 20 30
    [s3700-h2-GigabitEthernet0/0/1]port trunk allow-pass vlan 20 30 100
    [s3700-h2-GigabitEthernet0/0/1]

    -----------s5700----配置trunk--
    system-view 
    [s5700-Core]interface GigabitEthernet 0/0/2  //进入2接口
    [s5700-Core-GigabitEthernet0/0/2]dis this    //查看接口配置
    #
    interface GigabitEthernet0/0/2
     port link-type trunk
     port trunk allow-pass vlan 20 30
    #
    [s5700-Core-GigabitEthernet0/0/2]port trunk allow-pass vlan 20 30 100  //允许vlan通过
    [s5700-Core-GigabitEthernet0/0/2]q
    [s5700-Core]ping 10.10.100.3                 //ping 通测试；
      PING 10.10.100.3: 56  data bytes, press CTRL_C to break
        Reply from 10.10.100.3: bytes=56 Sequence=1 ttl=255 time=100 ms
        Reply from 10.10.100.3: bytes=56 Sequence=2 ttl=255 time=10 ms
        Reply from 10.10.100.3: bytes=56 Sequence=3 ttl=255 time=50 ms
        Reply from 10.10.100.3: bytes=56 Sequence=4 ttl=255 time=50 ms
        Reply from 10.10.100.3: bytes=56 Sequence=5 ttl=255 time=30 ms

      --- 10.10.100.3 ping statistics ---
        5 packet(s) transmitted
        5 packet(s) received
        0.00% packet loss
        round-trip min/avg/max = 10/48/100 ms

    telnet 10.10.100.3      //telnet 测试
    Trying 10.10.100.3 ...
    Press CTRL+K to abort
    Connected to 10.10.100.3 ...
    Login authentication


    Username:

    附件：三台交换机具体配置如下：

    1.  
    2. #
    3. sysname s5700-Core
    4. #
    5. vlan batch 10 to 30 100
    6. #
    7. cluster enable
    8. ntdp enable
    9. ndp enable
    10. #
    11. drop illegal-mac alarm
    12. #
    13. dhcp enable
    14. #
    15. diffserv domain default
    16. #
    17. drop-profile default
    18. #
    19. ip pool 10
    20.  gateway-list 192.168.10.1 
    21.  network 192.168.10.0 mask 255.255.255.0 
    22.  lease day 5 hour 0 minute 0 
    23. #
    24. aaa 
    25.  authentication-scheme default
    26.  authorization-scheme default
    27.  accounting-scheme default
    28.  domain default 
    29.  domain default_admin 
    30.  local-user admin password simple admin
    31.  local-user admin service-type http
    32.  local-user huawei password cipher -J&7(SW'E2AI>,Z,88J\:Q!!
    33.  local-user huawei privilege level 15
    34.  local-user huawei service-type telnet
    35. #
    36. interface Vlanif1
    37. #
    38. interface Vlanif10
    39.  ip address 192.168.10.1 255.255.255.0 
    40.  dhcp select global
    41. #
    42. interface Vlanif20
    43.  ip address 192.168.20.1 255.255.255.0 
    44. #
    45. interface Vlanif30
    46.  ip address 192.168.30.1 255.255.255.0 
    47. #
    48. interface Vlanif100
    49.  ip address 10.10.100.1 255.255.255.0 
    50. #
    51. interface MEth0/0/1
    52. #
    53. interface GigabitEthernet0/0/1
    54.  port link-type trunk
    55.  port trunk allow-pass vlan 10 20 100
    56. #
    57. interface GigabitEthernet0/0/2
    58.  port link-type trunk
    59.  port trunk allow-pass vlan 20 30 100
    60. #
    61. interface GigabitEthernet0/0/3
    62. #
    63. interface GigabitEthernet0/0/4
    64. #
    65. interface GigabitEthernet0/0/5
    66. #
    67. interface GigabitEthernet0/0/6
    68. #
    69. interface GigabitEthernet0/0/7
    70. #
    71. interface GigabitEthernet0/0/8
    72. #
    73. interface GigabitEthernet0/0/9
    74. #
    75. interface GigabitEthernet0/0/10
    76. #
    77. interface GigabitEthernet0/0/11
    78. #
    79. interface GigabitEthernet0/0/12
    80. #
    81. interface GigabitEthernet0/0/13
    82. #
    83. interface GigabitEthernet0/0/14
    84. #
    85. interface GigabitEthernet0/0/15
    86. #
    87. interface GigabitEthernet0/0/16
    88. #
    89. interface GigabitEthernet0/0/17
    90. #
    91. interface GigabitEthernet0/0/18
    92. #
    93. interface GigabitEthernet0/0/19
    94. #
    95. interface GigabitEthernet0/0/20
    96. #
    97. interface GigabitEthernet0/0/21
    98. #
    99. interface GigabitEthernet0/0/22
    100. #
    101. interface GigabitEthernet0/0/23
    102. #
    103. interface GigabitEthernet0/0/24
    104. #
    105. interface NULL0
    106. #
    107. user-interface con 0
    108. user-interface vty 0 4
    109.  authentication-mode aaa
    110. #
    111. return 
    1.  
    2. #
    3. sysname s3700-h1
    4. #
    5. vlan batch 10 20 100
    6. #
    7. cluster enable
    8. ntdp enable
    9. ndp enable
    10. #
    11. drop illegal-mac alarm
    12. #
    13. diffserv domain default
    14. #
    15. drop-profile default
    16. #
    17. aaa 
    18.  authentication-scheme default
    19.  authorization-scheme default
    20.  accounting-scheme default
    21.  domain default 
    22.  domain default_admin 
    23.  local-user admin password simple admin
    24.  local-user admin service-type http
    25.  local-user huawei password simple huawei123
    26.  local-user huawei privilege level 15
    27.  local-user huawei service-type telnet
    28. #
    29. interface Vlanif1
    30. #
    31. interface Vlanif100
    32.  ip address 10.10.100.2 255.255.255.0 
    33. #
    34. interface MEth0/0/1
    35. #
    36. interface Ethernet0/0/1
    37. #
    38. interface Ethernet0/0/2
    39.  port link-type access
    40.  port default vlan 10
    41. #
    42. interface Ethernet0/0/3
    43.  port link-type access
    44.  port default vlan 10
    45. #
    46. interface Ethernet0/0/4
    47.  port link-type access
    48.  port default vlan 20
    49. #
    50. interface Ethernet0/0/5
    51. #
    52. interface Ethernet0/0/6
    53. #
    54. interface Ethernet0/0/7
    55. #
    56. interface Ethernet0/0/8
    57. #
    58. interface Ethernet0/0/9
    59. #
    60. interface Ethernet0/0/10
    61. #
    62. interface Ethernet0/0/11
    63. #
    64. interface Ethernet0/0/12
    65. #
    66. interface Ethernet0/0/13
    67. #
    68. interface Ethernet0/0/14
    69. #
    70. interface Ethernet0/0/15
    71. #
    72. interface Ethernet0/0/16
    73. #
    74. interface Ethernet0/0/17
    75. #
    76. interface Ethernet0/0/18
    77. #
    78. interface Ethernet0/0/19
    79. #
    80. interface Ethernet0/0/20
    81. #
    82. interface Ethernet0/0/21
    83. #
    84. interface Ethernet0/0/22
    85. #
    86. interface GigabitEthernet0/0/1
    87.  port link-type trunk
    88.  port trunk allow-pass vlan 10 20 100
    89. #
    90. interface GigabitEthernet0/0/2
    91. #
    92. interface NULL0
    93. #
    94. ip route-static 0.0.0.0 0.0.0.0 10.10.100.1
    95. #
    96. user-interface con 0
    97. user-interface vty 0 4
    98.  authentication-mode aaa
    99. #
    100. return 
    1.  
    2. #
    3. sysname s3700-h2
    4. #
    5. vlan batch 20 to 30 100
    6. #
    7. cluster enable
    8. ntdp enable
    9. ndp enable
    10. #
    11. drop illegal-mac alarm
    12. #
    13. diffserv domain default
    14. #
    15. drop-profile default
    16. #
    17. aaa 
    18.  authentication-scheme default
    19.  authorization-scheme default
    20.  accounting-scheme default
    21.  domain default 
    22.  domain default_admin 
    23.  local-user admin password simple admin
    24.  local-user admin service-type http
    25.  local-user huawei password simple huawei123
    26.  local-user huawei privilege level 15
    27.  local-user huawei service-type telnet
    28. #
    29. interface Vlanif1
    30. #
    31. interface Vlanif100
    32.  ip address 10.10.100.3 255.255.255.0 
    33. #
    34. interface MEth0/0/1
    35. #
    36. interface Ethernet0/0/1
    37. #
    38. interface Ethernet0/0/2
    39.  port link-type access
    40.  port default vlan 20
    41. #
    42. interface Ethernet0/0/3
    43.  port link-type access
    44.  port default vlan 30
    45. #
    46. interface Ethernet0/0/4
    47.  port link-type access
    48.  port default vlan 30
    49. #
    50. interface Ethernet0/0/5
    51. #
    52. interface Ethernet0/0/6
    53. #
    54. interface Ethernet0/0/7
    55. #
    56. interface Ethernet0/0/8
    57. #
    58. interface Ethernet0/0/9
    59. #
    60. interface Ethernet0/0/10
    61. #
    62. interface Ethernet0/0/11
    63. #
    64. interface Ethernet0/0/12
    65. #
    66. interface Ethernet0/0/13
    67. #
    68. interface Ethernet0/0/14
    69. #
    70. interface Ethernet0/0/15
    71. #
    72. interface Ethernet0/0/16
    73. #
    74. interface Ethernet0/0/17
    75. #
    76. interface Ethernet0/0/18
    77. #
    78. interface Ethernet0/0/19
    79. #
    80. interface Ethernet0/0/20
    81. #
    82. interface Ethernet0/0/21
    83. #
    84. interface Ethernet0/0/22
    85. #
    86. interface GigabitEthernet0/0/1
    87.  port link-type trunk
    88.  port trunk allow-pass vlan 20 30 100
    89. #
    90. interface GigabitEthernet0/0/2
    91. #
    92. interface NULL0
    93. #
    94. user-interface con 0
    95. user-interface vty 0 4
    96.  authentication-mode aaa
    97. #
    98. return

  • 相关阅读:
    JMeter参数化方式：三招让你的性能测试更灵活！
    交通物流模型 | 基于双向时空自适应Transformer的城市交通流预测
    30分钟带你熟练性能优化的那点儿事儿（案例说明）
    sql表关联查询，表查询出数据插入到另一张，使用正则查询，查询结果集转换为JSON数据
    本节作业之求1~100平均数、奇数和、偶数和、能被3整除数的和、班级总成绩、平均成绩、打印星星、倒三角、正三角、九九乘法表、人的一生
    02-2、PyCharm中文乱码的三处解决方法
    电脑启动引导的两种方式
    资源：加快进入区块链的5种最佳编程语言
    CentOS6.6下安装git 2.6.2
    硕鼠——视频下载利器
  • 原文地址：https://blog.csdn.net/weixin_44662991/article/details/133765264