交换机资料

1.烽火默认用户名密码:admin 12345

2.烽火回复出厂:接入consol口,启动时按提示用crl+b 进入bios设置,erase startup config

3.h3c交换机查看邻居交换机命令:dis lldp neighbour

4.将端口加入vlan:[SWITCH]port Ethernet 1/0/4 to Ethernet 1/0/6

5.查看dhcp server的ip使用情况:< SWITCH>dis dhcp server ip-in-use pool vlan123

6.查看arp表,ip表,mac地址表:dis arp ,dis mac-address,或者后面加 | include [5a2e] 某些关键字查询

7.开启ssh登录

ssh server enable全局下开启设备可以被SSH登录

public-key local create rsa生成本地ssh登录用密钥,敲回车时会提示默认生成的是512位的,可以手动更改

local-user XXX 配置用户名 

password cipher XXX 配置用户名对应的密码 

service-type ssh配置此用户用于ssh登录服务

8.dhcp租约时间

[5500]dhcp server ip-pool vlan607

[5500-dhcp-pool-vlan607]expired day 0 hour 1

user-interfacevty 0 4 
authentication-mode scheme配置验证模式 
protocol inbound ssh只允许登录方式ssh(可选)

9.qos流控

先做acl 3000段:

acl number 3010
rule 0 permit ip source 172.27.0.0 0.0.255.255
rule 1 permit ip destination 172.27.0.0 0.0.255.255

在接口下配置qos:400M

[6602]qos car inbound acl 3010 cir 400000 cbs 4000000 ebs 0 green pass red discard
[6602]qos car outbound acl 3010 cir 400000 cbs 4000000 ebs 0 green pass red discard

10.控制登录次数和锁定时间

[6602]password-control login-attempt 3 exceed lock-time 10

11.在dhcp服务器上开启dhcp server detect,在接入上开启dhcp-snooping,在上行端口开启dhcp-snooping trust

12.检测dhcp 分配IP地址冲突:dis dhcp server confict all

13.查看端口上的mac地址记录:dis mac-address interface g1/0/31

 

原文地址:https://www.cnblogs.com/yc-shen/p/11294306.html