H3C 交换机基本设置(telnet、SSH、链路聚合)

http://www.h3c.com/cn/d_201710/1038172_30005_0.htm#_Toc493869056

H3C S5560S-SI&S5130S-SI[LI]&S5120V2-SI[LI]&S5110V2-SI&S5000V3-EI&S3100V3-SI

 

配置用户通过Telnet登录设备时采用AAA认证

```

system-view

telnet server enable

line vty 0 4

line class vty

authentication-mode scheme

quit

 

创建本地用户

local-user user-name 

password simple password

authorization-attribute user-role level-15

service-type telnet ssh https

 

```

 

 

配置SSH

```

system-view

public-key local create rsa

ssh user username service-type stelnet authentication-type any

```

 

配置https

```

web captcha verification-code

system-view

ip https enable

ip https port port-number  #(默认端口443)

 

```

 

链路聚合：

```

配置二层静态聚合组

system-view

interface bridge-aggregation interface-number

quit

interface interface-type interface-number

port link-aggregation group group-id

link-aggregation port-priority priority   #（可选，缺省情况下，端口优先级为32768）

 

配置二层动态聚合组

system-view

lacp system-priority priority

interface bridge-aggregation interface-number

link-aggregation mode dynamic

quit

interface interface-type interface-number

port link-aggregation group group-id

lacp mode passive    #（undo lacp mode， 缺省情况下，端口的LACP工作模式为ACTIVE，二者选，在动态聚合中，必须是一端是active，一端是passive或者两端都是active,不能出现两端都是passive,两端都是被动（passive）是无法聚合的。）

link-aggregation port-priority priority   （#可选，缺省情况下，端口优先级为32768 ）

lacp period short  #（缺省情况下，端口的LACP超时时间为长超时（90秒））

 

```