华三H3C交换机常用配置

堆叠
interface range Ten-GigabitEthernet 1/0/49 to Ten-GigabitEthernet 1/0/50
shutdown
quit
irf member 1 priority 32   最高等级32,默认为1
irf-port 1/1
port group interface Ten-GigabitEthernet 1/0/49
port group interface Ten-GigabitEthernet 1/0/50
quit
interface range Ten-GigabitEthernet 1/0/49 to Ten-GigabitEthernet 1/0/50
undo shutdown
quit
save
irf member member-id
irf-port 2/1
port group interface Ten-GigabitEthernet 2/0/49
port group interface Ten-GigabitEthernet 2/0/50
quit
irf-port-configuration active
MAD
interface range GigabitEthernet 1/0/48 GigabitEthernet 2/0/48
port access vlan 44
des MAD port
quit
int vlan 44
mad bfd enable
mad ip add 192.168.0.1 24 member 1
mad ip add 192.168.0.2 24 member 2
quit

display mad verbose
开启WEB
ip http enable
local-user admin
password hash Admin@023
service-type http
authorization-attribute user-role network-operator
quit
开启Telnet
telnet server enable
user-interface vty 0 63
authentication-mode scheme
quit
local-user admin
password hash Admin@023
service-type telnet
authorization-attribute user-role network-operator
quit

telnet server acl 3000
开启ssh
public-key local create rsa
ssh server enable
user-interface vty 0 4
authentication-mode scheme
quit
ssh user admin service-type stelnet authentication-type password
local-user admin
password hash Admin@023
service-type ssh
authorization-attribute user-role network-operator
authorization-attribute level 3
quit
ssh user admin service-type stelnet authentication-type password
ssh server acl 3000
STP
默认未开启STP
stp region-configuration
region-name rg1
instance 1 vlan 100
instance 2 vlan 101 to 104
instance 3 vlan 105 to 108
instance 4 vlan 109
active region-configuration
quit
stp instance 0 priority 4096
stp instance 1 to 4 root primary
stp global enable
开启光口/电口
interface GigabitEthernet1/0/1
combo enable fiber
combo enable copper
以太网链路聚合
interface bridge-aggregation 1
quit
interface ten-gigabitethernet 1/0/1
port link-aggregation group 1
quit
interface bridge-aggregation 1
port link-type trunk
port trunk permit vlan 10 20
quit
端口隔离
port-isolate group 1
quit
interface gigabitethernet 1/0/2
port-isolate enable group 1
quit

display port-isolate group