WEB管理文件的扩展名为”tar”或者”zip”,可以从网站上下载相应的交换机软件版本时得到。
需要在交换机上添加WEB管理使用的用户名及密码,该用户的类型为telnet类型,而且权限为最高级别3。
注意,在将WEB管理文件载入交换机flash时,不要将文件进行解压缩,只需将完整的文件载入交换机即可(向交换机flash载入WEB管理文件的方法,请参考本配置实例中交换机的系统管理配置章节)。
【SwitchB相关配置】
1.查看交换机flash里面的文件(保证WEB管理文件已经在交换机flash中)
dir /all
Directory of flash:/
2.添加WEB管理的用户,用户类型为”telnet”,用户名为”huawei”,密码为”wnm”
[SwitchB]local-user huawei
[SwitchB-luser-huawei]service-type telnet level 3
[SwitchB-luser-huawei]password simple wnm
3.配置交换机管理地址
[SwitchB]interface vlan 100
[SwitchB-Vlan-interface100]ip addr 192.168.0.2 255.255.255.0
4.对HTTP访问用户的控制(Option)
[SwitchB]ip http acl acl_num/acl_name
相关学习帖:
http://bbs.51cto.com/viewthread.php?tid=401882&fpage=1&highlight=web
2,TELNET方式
【TELNET密码验证配置】
只需输入password即可登陆交换机。
进入用户界面视图
[SwitchA]user-interface vty 0 4
2. 设置认证方式为密码验证方式
[SwitchA-ui-vty0-4]authentication-mode password
3. 设置登陆验证的password为明文密码”huawei”
[SwitchA-ui-vty0-4]set authentication password simple huawei
4. 配置登陆用户的级别为最高级别3(缺省为级别1)
[SwitchA-ui-vty0-4]user privilege level 3
5. 或者在交换机上增加super password(缺省情况下,从VTY用户界面登录后的级别为1级,无法对设备进行配置操作。必须要将用户的权限设置为最高级别3,才可以进入系统视图并进行配置操作。低级别用户登陆交换机后,需输入super password改变自己的级别)例如,配置级别3用户的super password为明文密码”super3”
[SwitchA]super password level 3 simple super3
【TELNET本地用户名和密码验证配置】
需要输入username和password才可以登陆交换机。
进入用户界面视图
[SwitchA]user-interface vty 0 4
2. 配置本地或远端用户名和口令认证
[SwitchA-ui-vty0-4]authentication-mode scheme
3. 配置本地TELNET用户,用户名为”huawei”,密码为”huawei”,权限为最高级别3(缺省为级别1)
[SwitchA]local-user huawei
[SwitchA-user-huawei]password simple huawei
[SwitchA-user-huawei]service-type telnet level 3
4. 在交换机上增加super password
[SwitchA]super password level 3 simple super3
【TELNET RADIUS验证配置】
以使用华为3Com公司开发的CAMS 作为RADIUS服务器为例
进入用户界面视图
[SwitchA]user-interface vty 0 4
2. 配置远端用户名和口令认证
[SwitchA-ui-vty0-4]authentication-mode scheme
3. 配置RADIUS认证方案,名为”cams”
[SwitchA]radius scheme cams
4. 配置RADIUS认证服务器地址10.110.51.31
[SwitchA-radius-cams]primary authentication 10.110.51.31 1812
5. 配置交换机与认证服务器的验证口令为”huawei”
[SwitchA-radius-cams]key authentication huawei
6. 送往RADIUS的报文不带域名
[SwitchA-radius-cams]user-name-format without-domain
7. 创建(进入)一个域,名为”huawei”
[SwitchA]domain huawei
8. 在域”huawei”中引用名为”cams”的认证方案
[SwitchA-isp-huawei]radius-scheme cams
9. 将域”huawei”配置为缺省域
[SwitchA]domain default enable huawei
【TELNET访问控制配置】
[SwitchA]acl number 2000
[SwitchA-acl-basic-2000]rule deny source any
[SwitchA-acl-basic-2000]rule permit source 10.1.1.0 0.0.0.255
2. 配置只允许符合ACL2000的IP地址登录交换机
[SwitchA-ui-vty0-4]acl 2000 inbound
3,SSH方式
组网需求
配置终端(SSH Client)与以太网交换机建立本地连接。终端采用SSH协议进行登录到交换机上,以保证数据信息交换的安全。
组网图(略)
配置步骤(SSH认证方式为口令认证)
[Quidway] rsa local-key-pair create
& 说明:如果此前已完成生成本地密钥对的配置,可以略过此项操作。
[Quidway] user-interface vty 0 4
[Quidway-ui-vty0-4] authentication-mode scheme
[Quidway-ui-vty0-4] protocol inbound ssh
[Quidway] local-user client001
[Quidway-luser-client001] password simple huawei
[Quidway-luser-client001] service-type ssh
[Quidway] ssh user client001 authentication-type password
SSH的认证超时时间、重试次数以及服务器密钥更新时间可以采取系统默认值,这些配置完成以后,您就可以在其它与以太网交换机连接的终端上,运行支持SSH1.5的客户端软件,以用户名client001,密码huawei,访问以太网交换机了。
我这里的网络结构是gr3200是路由器 下面连接了十台交换机 有一台e528 九台5024 我想通过设置管理vlan来远程登录这些交换机 现在设置了两个vlan 36 和37 一个用作监控网段 一个作为日常上网办公 要怎么配置管理vlan...
下面我们就拿H3C的交换机配置,做一个介绍吧!主要讲解交换机的连接,登陆,配置vlan,划分网口access或者trunk,查看配置状态等!准备工作:一、将交换机通过console线连接到笔记本电脑二、通过crt远程管理软件,...
不管是运维实施部署也好,还是网路工程师也好,交换机的配置可能是家常便饭,在工作中你是搞运维的,会配置交换机也是一个炫耀的加分项哦!下面我们就拿H3C的交换机配置,做一个介绍吧!主要讲解交换机的连接,登陆,配置vlan,划分网口access或者trunk,查看配置状态等!
准备工作:
一、将交换机通过console线连接到笔记本电脑
二、通过crt远程管理软件,远程连接
1、新建一个链接,协议选择为serial
2、端口和波特率分别为COM3和9600
3、点击完成,并且连接
4、按2下enter键即可连接到交换机了
一、进入系统配置视图
system-view
System View: return to User View with Ctrl+Z.
二、显示vlan配置
[itcloud-test-H3C]display vlan
Total 23 VLAN exist(s). The following VLANs exist: 1(default), 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-122, 124-125, 135, 222, 500-501,
三、创建vlan
[itcloud-test-H3C]vlan 123
[itcloud-test-H3C-vlan123]quit
四、再次查看vlan是否创建成功
[itcloud-test-H3C]display vlan
Total 24 VLAN exist(s). The following VLANs exist: 1(default), 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,
五、为网口划分vlan
[itcloud-test-H3C]interface GigabitEthernet1/0/3
[itcloud-test-H3C-GigabitEthernet1/0/3]port link-type access
[itcloud-test-H3C-GigabitEthernet1/0/3]port access vlan 123
[itcloud-test-H3C-GigabitEthernet1/0/3]quit
六、查看vlan及网口配置
[itcloud-test-H3C]display interface brief
The brief information of interface(s) under route mode:Link: ADM - administratively down; Stby - standbyProtocol: (s) - spoofingInterface Link Protocol Main IP DescriptionM-GE0/0/0 DOWN DOWN --NULL0 UP UP(s) --Vlan1 UP UP --Vlan10 UP UP --Vlan13 UP UP 10.10.13.201Vlan21 UP UP --Vlan25 UP UP 192.168.25.1Vlan30 UP UP 192.168.30.1Vlan110 UP UP 192.168.10.1Vlan120 UP UP 192.168.20.254Vlan121 UP UP 192.168.21.254Vlan122 UP UP 192.168.22.254Vlan124 UP UP 192.168.24.254Vlan125 UP UP --Vlan135 UP UP 192.168.35.254Vlan222 UP UP 192.168.0.1Vlan500 UP UP 1.1.1.1Vlan501 UP UP 2.2.2.1 The brief information of interface(s) under bridge mode:Link: ADM - administratively down; Stby - standbySpeed or Duplex: (a)/A - auto; H - half; F - fullType: A - access; T - trunk; H - hybridInterface Link Speed Duplex Type PVID DescriptionGE1/0/1 UP 1G(a) F(a) A 120GE1/0/2 DOWN auto A A 120GE1/0/3 UP 100M(a) F(a) A 123GE1/0/4 UP 1G(a) F(a) A 120GE1/0/5 DOWN auto A A 120GE1/0/6 DOWN auto A A 120GE1/0/7 UP 1G(a) F(a) A 120GE1/0/8 UP 1G(a) F(a) A 120GE1/0/9 UP 1G(a) F(a) A 123GE1/0/10 UP 1G(a) F(a) A 120GE1/0/11 UP 1G(a) F(a) A 123GE1/0/12 UP 1G(a) F(a) A 120GE1/0/13 DOWN auto A A 120GE1/0/14 DOWN auto A A 120GE1/0/15 UP 1G(a) F(a) A 123GE1/0/16 DOWN auto A A 120GE1/0/17 DOWN auto A A 120GE1/0/18 DOWN auto A A 120GE1/0/19 DOWN auto A A 120GE1/0/20 DOWN auto A A 120GE1/0/21 DOWN auto A A 120GE1/0/22 DOWN auto A A 120GE1/0/23 UP 1G(a) F(a) A 120GE1/0/24 UP 1G(a) F(a) A 120GE1/0/25 DOWN auto A A 120GE1/0/26 DOWN auto A T 1GE1/0/27 DOWN auto A T 1GE1/0/28 DOWN auto A T 1GE1/0/29 DOWN auto A T 1GE1/0/30 DOWN auto A T 1GE1/0/31 DOWN auto A T 1GE1/0/32 DOWN auto A T 1GE1/0/33 UP 1G(a) F(a) T 1GE1/0/34 DOWN auto A T 1GE1/0/35 UP 1G(a) F(a) T 1GE1/0/36 DOWN auto A T 1GE1/0/37 DOWN auto A T 1GE1/0/38 DOWN auto A T 1GE1/0/39 UP 1G(a) F(a) T 1GE1/0/40 DOWN auto A T 1GE1/0/41 DOWN auto A T 1GE1/0/42 DOWN auto A T 1GE1/0/43 DOWN auto A T 1GE1/0/44 DOWN auto A A 1GE1/0/45 DOWN auto A A 1GE1/0/46 DOWN auto A A 1GE1/0/47 UP 1G(a) F(a) T 1GE1/0/48 DOWN auto A A 1GE1/0/49 DOWN auto A A 1GE1/0/50 DOWN auto A A 1GE1/0/51 DOWN auto A A 1GE1/0/52 DOWN auto A A 1XGE1/0/53 DOWN auto A A 1XGE1/0/54 DOWN auto A A 1 [itcloud-test-H3C]
七、为vlan配置ip
[itcloud-test-H3C]interface Vlan-interface 123
[itcloud-test-H3C-Vlan-interface123]%May 9 09:35:22:786 2000 itcloud-test-H3C IFNET/3/LINK_UPDOWN: Vlan-interface123 link status is UP.%May 9 09:35:23:028 2000 itcloud-test-H3C IFNET/5/LINEPROTO_UPDOWN: Line protocol on the interface Vlan-interface123 is UP.
[itcloud-test-H3C-Vlan-interface123]ip address 192.168.23.254 255.255.255.0
[itcloud-test-H3C-Vlan-interface123]quit
八、验证是否配置成功
[itcloud-test-H3C]display interface brief
The brief information of interface(s) under route mode:Link: ADM - administratively down; Stby - standbyProtocol: (s) - spoofingInterface Link Protocol Main IP DescriptionM-GE0/0/0 DOWN DOWN --NULL0 UP UP(s) --Vlan1 UP UP --Vlan10 UP UP --Vlan13 UP UP 10.10.13.201Vlan21 UP UP --Vlan25 UP UP 192.168.25.1Vlan30 UP UP 192.168.30.1Vlan110 UP UP 192.168.10.1Vlan120 UP UP 192.168.20.254Vlan121 UP UP 192.168.21.254Vlan122 UP UP 192.168.22.254Vlan123 UP UP 192.168.23.254Vlan124 UP UP 192.168.24.254Vlan125 UP UP --Vlan135 UP UP 192.168.35.254Vlan222 UP UP 192.168.0.1Vlan500 UP UP 1.1.1.1Vlan501 UP UP 2.2.2.1
九、查看某一个vlan的配置
[itcloud-test-H3C]display vlan 123
VLAN ID: 123 VLAN Type: static Route Interface: configured IPv4 address: 192.168.23.254 IPv4 subnet mask: 255.255.255.0 Description: VLAN 0123 Name: vlan123 Tagged Ports: GigabitEthernet1/0/26 GigabitEthernet1/0/27 GigabitEthernet1/0/28 GigabitEthernet1/0/29 GigabitEthernet1/0/30 GigabitEthernet1/0/31 GigabitEthernet1/0/32 GigabitEthernet1/0/33 GigabitEthernet1/0/34 GigabitEthernet1/0/35 GigabitEthernet1/0/36 GigabitEthernet1/0/37 GigabitEthernet1/0/38 GigabitEthernet1/0/39 GigabitEthernet1/0/40 GigabitEthernet1/0/41 GigabitEthernet1/0/42 GigabitEthernet1/0/43 GigabitEthernet1/0/47 Untagged Ports: GigabitEthernet1/0/3 GigabitEthernet1/0/9 GigabitEthernet1/0/11GigabitEthernet1/0/15 GigabitEthernet1/0/48[itcloud-test-H3C]
十、删除网口的vlan
[itcloud-test-H3C]interface GigabitEthernet1/0/48
[itcloud-test-H3C-GigabitEthernet1/0/48]undo port access vlan
[itcloud-test-H3C-GigabitEthernet1/0/46]quit
十一、验证网口的vlan是否删除成功
[itcloud-test-H3C]display interface brief
The brief information of interface(s) under route mode:Link: ADM - administratively down; Stby - standbyProtocol: (s) - spoofingInterface Link Protocol Main IP DescriptionM-GE0/0/0 DOWN DOWN --NULL0 UP UP(s) --Vlan1 UP UP --Vlan10 UP UP --Vlan13 UP UP 10.10.13.201Vlan21 UP UP --Vlan25 UP UP 192.168.25.1Vlan30 UP UP 192.168.30.1Vlan110 UP UP 192.168.10.1Vlan120 UP UP 192.168.20.254Vlan121 UP UP 192.168.21.254Vlan122 UP UP 192.168.22.254Vlan123 UP UP 192.168.23.254Vlan124 UP UP 192.168.24.254Vlan125 UP UP --Vlan135 UP UP 192.168.35.254Vlan222 UP UP 192.168.0.1Vlan500 UP UP 1.1.1.1Vlan501 UP UP 2.2.2.1 The brief information of interface(s) under bridge mode:Link: ADM - administratively down; Stby - standbySpeed or Duplex: (a)/A - auto; H - half; F - fullType: A - access; T - trunk; H - hybridInterface Link Speed Duplex Type PVID DescriptionGE1/0/1 UP 1G(a) F(a) A 120GE1/0/2 DOWN auto A A 120GE1/0/3 UP 1G(a) F(a) A 123GE1/0/4 UP 1G(a) F(a) A 120GE1/0/5 DOWN auto A A 120GE1/0/6 DOWN auto A A 120GE1/0/7 UP 1G(a) F(a) A 120GE1/0/8 UP 1G(a) F(a) A 120GE1/0/9 UP 1G(a) F(a) A 123GE1/0/10 UP 1G(a) F(a) A 120GE1/0/11 UP 1G(a) F(a) A 123GE1/0/12 UP 1G(a) F(a) A 120GE1/0/13 DOWN auto A A 120GE1/0/14 DOWN auto A A 120GE1/0/15 UP 1G(a) F(a) A 123GE1/0/16 DOWN auto A A 120GE1/0/17 DOWN auto A A 120GE1/0/18 DOWN auto A A 120GE1/0/19 DOWN auto A A 120GE1/0/20 DOWN auto A A 120GE1/0/21 DOWN auto A A 120GE1/0/22 DOWN auto A A 120GE1/0/23 UP 1G(a) F(a) A 120GE1/0/24 UP 1G(a) F(a) A 120GE1/0/25 DOWN auto A A 120GE1/0/26 DOWN auto A T 1GE1/0/27 DOWN auto A T 1GE1/0/28 DOWN auto A T 1GE1/0/29 DOWN auto A T 1GE1/0/30 DOWN auto A T 1GE1/0/31 DOWN auto A T 1GE1/0/32 DOWN auto A T 1GE1/0/33 UP 1G(a) F(a) T 1GE1/0/34 DOWN auto A T 1GE1/0/35 UP 1G(a) F(a) T 1GE1/0/36 DOWN auto A T 1GE1/0/37 DOWN auto A T 1GE1/0/38 DOWN auto A T 1GE1/0/39 UP 1G(a) F(a) T 1GE1/0/40 DOWN auto A T 1GE1/0/41 DOWN auto A T 1GE1/0/42 DOWN auto A T 1GE1/0/43 DOWN auto A T 1GE1/0/44 DOWN auto A A 1GE1/0/45 DOWN auto A A 1GE1/0/46 DOWN auto A A 1GE1/0/47 UP 1G(a) F(a) T 1GE1/0/48 UP 1G(a) F(a) A 1GE1/0/49 DOWN auto A A 1GE1/0/50 DOWN auto A A 1GE1/0/51 DOWN auto A A 1GE1/0/52 DOWN auto A A 1XGE1/0/53 DOWN auto A A 1XGE1/0/54 DOWN auto A A 1 [itcloud-test-H3C]
十二、删除vlan
[itcloud-test-H3C]undo vlan 140
十三、查看vlan是否删除
[itcloud-test-H3C]display vlan
Total 24 VLAN exist(s). The following VLANs exist: 1(default), 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,[itcloud-test-H3C]
十四、将网口设置为trunk
[itcloud-test-H3C]interface GigabitEthernet1/0/48
[itcloud-test-H3C-GigabitEthernet1/0/48]
[itcloud-test-H3C-GigabitEthernet1/0/48]port link-type trunk
[itcloud-test-H3C-GigabitEthernet1/0/48]
[itcloud-test-H3C-GigabitEthernet1/0/48]port trunk permit vlan 123
[itcloud-test-H3C-GigabitEthernet1/0/48]
[itcloud-test-H3C-GigabitEthernet1/0/48]port trunk permit vlan 124
[itcloud-test-H3C-GigabitEthernet1/0/48]quit
十五、查看网口配置
[itcloud-test-H3C]display interface GigabitEthernet1/0/48
GigabitEthernet1/0/48 current state: UP IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 70f9-6ddb-e626 Description: GigabitEthernet1/0/48 Interface Loopback is not set Media type is twisted pair Port hardware type is 1000_BASE_T 1000Mbps-speed mode, full-duplex mode Link speed type is autonegotiation, link duplex type is autonegotiation Flow-control is not enabled The Maximum Frame Length is 12288 Broadcast MAX-ratio: 100% Unicast MAX-ratio: 100% Multicast MAX-ratio: 100% Allow jumbo frame to pass PVID: 1 Mdi type: auto Port link-type: trunk VLAN passing : 1(default vlan), 123-124 VLAN permitted: 1(default vlan), 123-124 Trunk port encapsulation: IEEE 802.1q Port priority: 0 Last clearing of counters: Never Peak value of input: 112 bytes/sec, at 2000-05-09 09:23:25 Peak value of output: 944 bytes/sec, at 2000-05-09 09:25:35 Last 300 seconds input: 0 packets/sec 2 bytes/sec 0% Last 300 seconds output: 0 packets/sec 91 bytes/sec 0% Input (total): 1493 packets, 123621 bytes 157 unicasts, 1130 broadcasts, 206 multicasts, 0 pauses Input (normal): 1493 packets, - bytes 157 unicasts, 1130 broadcasts, 206 multicasts, 0 pauses Input: 0 input errors, 0 runts, 0 giants, 0 throttles 0 CRC, 0 frame, - overruns, 0 aborts - ignored, - parity errors Output (total): 11604 packets, 1028034 bytes 1780 unicasts, 4157 broadcasts, 5667 multicasts, 0 pauses Output (normal): 11604 packets, - bytes 1780 unicasts, 4157 broadcasts, 5667 multicasts, 0 pauses Output: 0 output errors, - underruns, - buffer failures 0 aborts, 0 deferred, 0 collisions, 0 late collisions 0 lost carrier, - no carrier [itcloud-test-H3C]
十六、显示设备上当前存在的Hybrid或Trunk端口:display port { hybrid | trunk }
[itcloud-test-H3C]display port trunk
Interface PVID VLAN passingGE1/0/26 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/27 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/28 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/29 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/30 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/31 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/32 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/33 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/34 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/35 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/36 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/37 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/38 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/39 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/40 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/41 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/42 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/43 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/47 1 1, 10, 13-15, 21, 25, 30, 66, 68, 106, 108-110, 120-125, 135, 222, 500-501,GE1/0/48 1 1, 123-124,