H3C S5130

1.1 设置VLAN

​ [MIS-1A2F-S5130S-01] vlan 38
​ [MIS-1A2F-S5130S-01-vlan38] description menjin

1.2 端口划入VLAN

​ [MIS-1A2F-S5130S-01] interface GigabitEthernet 1/0/1
​ [MIS-1A2F-S5130S-01-GigabitEthernet1/0/1]port access vlan 38

1.3 设置时间同步

​ [MIS-D3F-ES1-S5130S-01]clock timezone beijing add 8
​ [MIS-D3F-ES1-S5130S-01]ntp-service enable
​ [MIS-D3F-ES1-S5130S-01]ntp-service unicast-server 10.20.2.2

1.4 全局执行mCheck操作

​ [MIS-D3F-ES1-S5130S-01]stp global mcheck

1.5 开启源IP地址冲突提示功能

​ [MIS-D3F-ES1-S5130S-01]arp ip-conflict log prompt

1.6 关闭ICMP分片报文转发功能

​ [MIS-D3F-ES1-S5130S-01]ip icmp fragment discarding

1.7 开启MSTP的PVST报文保护功能

​ [MIS-D3F-ES1-S5130S-01]stp pvst-bpdu-protection

1.8 开启全局环路检测

​ [MIS-D3F-ES1-S5130S-01]loopback-detection global enable vlan all
​ [MIS-D3F-ES1-S5130S-01]loopback-detection global action shutdown

1.9 开启端口环路检测

​ [MIS-D3F-ES1-S5130S-01]inter range giga 1/0/1 to GigabitEthernet 1/0/48
​ [MIS-D3F-ES1-S5130S-01-if-range]loopback-detection enable vlan all
​ [MIS-D3F-ES1-S5130S-01-if-range]loopback-detection action shutdown
​ [MIS-D3F-ES1-S5130S-01-if-range]quit

1.10 开启生成树的new-root告警功能

​ [MIS-D3F-ES1-S5130S-01]snmp-agent trap enable stp new-root

1.11 开启ARP黑洞路由功能

​ [MIS-D3F-ES1-S5130S-01]arp resolving-route enable

1.12 开启ARP源抑制功能

​ [MIS-D3F-ES1-S5130S-01]arp source-suppression enable

1.13 开启IGMP Snooping

​ [MIS-D3F-ES1-S5130S-01]igmp-snooping
​ [MIS-D3F-ES1-S5130S-01-igmp-snooping]global-enable
​ [MIS-D3F-ES1-S5130S-01-igmp-snooping]quit

1.14 设置默认路由

​ [MIS-D3F-ES1-S5130S-01]ip route-static 0.0.0.0 0.0.0.0 10.20.1.254

1.15 设置登录账号

​ [MIS-D3F-ES1-S5130S-01]local-user admin class manage
​ New local user added.
​ [MIS-D3F-ES1-S5130S-01-user-manage-admin]password sim issh3c5130
​ [MIS-D3F-ES1-S5130S-01-user-manage-admin]service-type ssh telnet http terminal
​ [MIS-D3F-ES1-S5130S-01-luser-manage-admin]authorization-attribute user-role network-admin
​ [MIS-D3F-ES1-S5130S-01-luser-manage-admin]no authorization-attribute user-role network-operator
​ [MIS-D3F-ES1-S5130S-01-luser-manage-admin]
​ [MIS-D3F-ES1-S5130S-01-luser-manage-admin]quit

1.16 设置Console登录认证

​ [MIS-D3F-ES1-S5130S-01]line aux 0
​ [MIS-D3F-ES1-S5130S-01-line-aux0]authentication-mode scheme
​ [MIS-D3F-ES1-S5130S-01-line-aux0]user-role network-admin
​ [MIS-D3F-ES1-S5130S-01-line-aux0]quit

1.17 设置远程Telnet登陆认证

​ [MIS-D3F-ES1-S5130S-01]line vty 0 63
​ [MIS-D3F-ES1-S5130S-01-line-vty0-63]authentication-mode scheme
​ [MIS-D3F-ES1-S5130S-01-line-vty0-63]user-role network-admin
​ [MIS-D3F-ES1-S5130S-01-line-vty0-63]no user-role network-operator
​ [MIS-D3F-ES1-S5130S-01-line-vty0-63]quit

1.18 设置交换机管理IP

​ [MIS-D3F-ES1-S5130S-01]vlan 4000
​ [MIS-D3F-ES1-S5130S-01-vlan4000]quit
​ [MIS-D3F-ES1-S5130S-01]interface Vlan-interface4000
​ [MIS-D3F-ES1-S5130S-01-Vlan-interface4000]ip add 10.20.1.28 255.255.255.0
​ [MIS-D3F-ES1-S5130S-01-Vlan-interface4000]quit
​ [MIS-D3F-ES1-S5130S-01]save

1.19 设置端口加入VLAN

​ [MIS-D3F-ES1-S5130S-01]vlan 52
​ [MIS-D3F-ES1-S5130S-01-vlan52]quit
​ [MIS-D3F-ES1-S5130S-01]inter range GigabitEthernet 1/0/1 to GigabitEthernet 1/0/48
​ [MIS-D3F-ES1-S5130S-01-if-range]port access vlan 52
​ [MIS-D3F-ES1-S5130S-01-if-range]quit
​ [MIS-D3F-ES1-S5130S-01]save

1.20 配置上下联端口类型和VLAN

​ [MIS-D3F-ES1-S5130S-01]inter range Ten-GigabitEthernet 1/0/49 to Ten-GigabitEthernet 1/0/52
​ [MIS-D3F-ES1-S5130S-01-if-range]port link-type trunk
​ [MIS-D3F-ES1-S5130S-01-if-range]port trunk permit vlan all
​ [MIS-D3F-ES1-S5130S-01-if-range]quit
​ [MIS-D3F-ES1-S5130S-01]save

1.21 设置默认路由

​ [MIS-D3F-ES1-S5130S-01]ip route-static 0.0.0.0 0.0.0.0 10.20.1.254
​ [MIS-D3F-ES1-S5130S-01]save