华为交换机常用配置命令.docx

system-view 简写：sy进入系统视图[huawei]sys name huawei交换机命名[huawei]quit 简写：q返回上一级[huawei]return 简写：ret直接返回用户视图vhuawei>save 简写：sa保存配置r eboot重启设备[huawei]dis cur查看配置[huawei]dis vla n查看Vlan[huawei]dis int g0/0/1查看端口[huawei]vla n 100新建Vlan[huawei]u ndo vla n 100删除Vlan[huawei-vla n10 0]p ort g0/0/1把端口放入Vlan 100中[huawei-vla n100]undo port g0/0/1表示删除当前Vlan端口 1[huawei-vla n10 0]desc ripti on wifi命名Vlan[huawei]i nt vla n 100进入Vlan[huawei-vla nif100]ip add ress配置Vlan管理地址[huawei]int gO/0/1进入端口[huawei-GigabitEthernet0/0/1]port link-type access设置端口为access模式[Huawei-GigabitEthernet0/0/1]port default vlan 100把端口放入Vlan 100中[huawei-GigabitEthernet0/0/1]port link-type trunk设置端口为trunk模式[huawei-G0/0/1]port trunk allow-pass vlan all设置允许所有Vlan的报文通过[huawei-GigabitEthernet0/0/1]undo port link-type删除端口配置reset saved-configuration檫除旧的配置文件[Huawei-Vlanif60]dhcp select globalDHCP获取范围从全局global获取端口划入Vlan前，必须设置为access模式端口批量加入Vlan[huawei]port-group yewu [huawei-port-group-yewu]group-member gO/O/4 to g0/0/6 [huawei-port-group-yewu]port lin k-type access [huawei-port-group-yewu]port default vla n 100密码配置[Quidway]user-interface con 0[Quidway-ui-console0]set authentication passwordTelnet配置[huawei]int vlan 1[Quidway-Vlanif1]ip address 192.168.1.100 255.255.255.0 设置管理地址 [huawei]aaa 进入 aaa 配置模式[huawei-aaa]local-user admin password 设置 admin 密码 [huawei-aaa]local-user admin privilege level 3 然后设置登陆权限 [huawei-aaa]local-user admin service-type telnet 设置登录类型 [huawei]user-interface vty 0 4 进入认证配置模式 [huawei-ui-vty0-4]authentication-mode aaa 设置 aaa 认证恢复交换机出厂配置reset saved-configuration 檫除旧的配置文件 reboot 交换机重启xt startup:, Continue?[Y/N]:n 此处选 N忘记 console 密码，恢复交换机出厂配置设备重启时按Ctrl+B进入BOOT MENU之后，默认密码是: 第一步、选择7；第二步、Y；第三步、选择1。

华为三层交换机做DHCP服务配置三层交换机S5700system-view 进入系统模式[Huawei]dhcp enable 开启 dhcp 服务[Huawei]dhcp snooping enable 开启 dhcp 过滤功能[Huawei]ip pool aa 创建地址池 aa[Huawei-ip-pool-aa]network 192.168.10.1 mask 255.255.255.0 子网 IP 和掩码 [Huawei-ip-pool-aa]gateway-list 192.168.10.1 网关地址[Huawei-ip-pool-aa]dns-list 203.208.24.28 配置 DNS 列表 [Huawei-ip-pool-aa]excluded-ip-address 192.168.10.2 192.168.10.50 排除地址 [Huawei]ip pool bb 创建地址池 bb[Huawei-ip-pool-aa]network 192.168.20.1 mask 255.255.255.0 子网 IP 和掩码 [Huawei-ip-pool-aa]gateway-list 192.168.20.1 网关地址[Huawei-ip-pool-aa]dns-list 203.208.24.28 配置 DNS 列表 [Huawei-ip-pool-aa]excluded-ip-address 192.168.20.2 192.168.20.50 排除地址 [Huawei-ip-pool-aa]returnsy[Huawei]vlan 10[Huawei-vlan10]quit[Huawei]int vlan 10 进入 vlan 10 端口[Huawei-Vlanif10]ip address 192.168.10.1 255.255.255.0 为 vlan 10 配置 IP 地址 [Huawei-Vlanif10]dhcp select global DHCP 获取范围从全局 global 获取 [Huawei-Vlanif10]quit[Huawei]vlan 20[Huawei-vlan10]quit[Huawei]int vlan 20 进入 vlan 20 端口[Huawei-Vlanif20]ip address 192.168.20.1 255.255.255.0 为 vlan 20 配置 IP 地址 [Huawei-Vlanif20]dhcp select global DHCP 获取范围从全局 global 获取 [Huawei-Vlanif20]quit[Huawei]int g0/0/1 进入端口[Huawei-GigabitEthernet0/0/1]port link-type trunk 设置端口为 trunk 模式[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan all 设置允许所有 Vlan 的报文通过 [Huawei-GigabitEthernet0/0/1]quit[Huawei]int g0/0/2 进入端口[Huawei-GigabitEthernet0/0/2]port link-type trunk 设置端口为 trunk 模式[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan all 设置允许所有 Vlan 的报文通过 [Huawei-GigabitEthernet0/0/2]returnsave 保存配置Are you sure to continue?[Y/N]y配置二层交换机（1） S3700sy[Huawei]int e0/0/1 [Huawei-Ethernet0/0/1]port link-type trunk [Huawei-Ethernet0/0/1]port trunk allow-pass vlan all[Huawei-Ethernet0/0/1]q[Huawei]int e0/0/2[Huawei-Ethernet0/0/2]port link-type access[Huawei-Ethernet0/0/2]q[Huawei]vlan 10[Huawei-vlan10]port e0/0/2[Huawei-vlan10]retsave配置二层交换机（2） S3700sy[Huawei]int e0/0/1 [Huawei-Ethernet0/0/1]port link-type trunk [Huawei-Ethernet0/0/1]port trunk allow-pass vlan all[Huawei-Ethernet0/0/1]q[Huawei]vlan 20[Huawei-vlan20]q[Huawei]int e0/0/2 [Huawei-Ethernet0/0/2]port link-type access [Huawei-Ethernet0/0/2]port default vlan 20[Huawei-Ethernet0/0/2]retsave华为三层交换机做DHCP中继服务。