h3c

2014-04-10 14:54:09

startup saved-configuration filename

/backup/restore stratup-configuration to/from filename
save
display this

display startup
dir
terminal debugging
FTP
1ftp serverenable

// ftp

2local-userusername //
Service-typeftp

//

Passwordsimple | cipher password //

3ftp 192.168.1.1 //
4tftpserver-add {get | put | sget} source-filename [destination-filename] [source{interface interface-type
interface-number | ip source-ip-address}]
Console
1 none
1system-view

//

2user-interface aux 0 // aux

3authentication-mode none // console none
4speedidle-timeout
2 password
1system-view

//

2user-interface aux 0
2authentication-mode password

3set authentication password [simple|cipher] text

4 none
3 scheme
1system-view

//

2domaindomain-name // isp
3local-useruser-name

//

4password{simple | cipher } password

5service-typeterminal [level level]

//

//

5user-interface aux 0
6authentication-mode scheme [command-authorization]
7 none

1
2 ctrl+b
3 7
4
vlan
1vlan 2
2port gi1/0/24

// vlan2

vlan
1int gi1/0/24
2port link-type access
3port access vlan 2
telnet
vlan ip telnet
1 none
1system-view //
2user-interface vty 0 4
authentication-mode none
protocol inbound telnet|ssh
3telnetserver enable

//
// telnet

2 password
1system-view //
2usr-interfacevty 0 4
Authentication-modepassword
Setauthentication password 123456
3protocolhistory-commandmax-size 20
4 telnet
3 scheme
1system-view
2user-interface vty 0 4
authentication-mode scheme
3local-userguest
Passwordsimple|cipher 123456
Service-type telnet
4 telnet
SSH
1ssh serverenable

// ssh

3user-interface vty 0 4
4 authen-mode scheme

5protocolinbound ssh
6loca-user man

// ssh

// ssh

7 password simple |cipher cisco

8 service-typessh
9rsa local-key-pair create

// rsa

10rsalocal-key-pair export ssh2 // rsa

11rsalocal-key-pair destroy

//

1undoshutdown shutdown
2
3[undo]flow-control [enable] //
4broadcast-suppression{ratio | bandwidth | pps}
5 Unicast-suppression{ratio | bandwidth | pps}

//

6multicast-suppression{ratio | bandwidth | pps}

7loopback[internal | external]

//

8loopback-detection enable
loopback-detectionenable
Trunk loopback-detection control enable
9port-group {manual port-group-name | aggregation agg-id}
Group-memberinterface-list //
displaylink-aggregation summary
10flow-intervalinterval

//

11jumboframeenable
12virtual-cable-test

//

13copyconfiguration source --- destination --14port-isolateenable

//

Port-group manual aa
Port-isolateenable //
Port-isolate uplink-port //
15port-isolategroup group-id
Port inter-list

//

Int gi 1/0/24
Port isolate group group-id

//

16 lacp
Link-aggregation group agg-id mode [manual |static]
Interface bridge-aggregation interface-number //
Int g1/0/24
Port link-aggregation group agg-id //
17 lacp
Lacpsystem-priority system-priority
Interfacebridge-aggregation interface-number //
Link-aggregationgroup agg-id mode static
Portlink-aggregation group agg-id

//

18 lacp
Lacpsystem-priority number

Intg1/0/24
Lacpenable

lacp

Lacpport-priority number

19
user-bindmac-add ---- | ip-add --- interface-list//

Intg1/0/24

Mac
Mac-address{static | dynamic } mac-add interface interface-type interface-number vlanvlan-id
201 2
1system-view
mirroring-groupgroup-id local //
mirroring-groupgroup-id mirroring-port mirroring-port-list {both | inbound | outbound }

//

mirroring-groupgroup-id monitor-port monitor-port-id interface intface-list

2
System-view
Vlan 2
Remote-probe vlan enable
Quit
Int g2/0/1
Port link-type trunk
Port trunk permit vlan 2
Quit
Mirroring-group 1 remote-source
Mirroring-group 1 mirroring-portg2/0/2
Mirroring-group 1 reflector-portg2/0/3
Mirroring-group 1 remote-probe vlan 2

System-view
Vlan 2
Remote-probe vlan enable
Quit
Interface g2/0/2
Port link-type trunk
Port trunk permit vlan 2
..

System-view
Vlan 2
Remote-probe vlan enable
Quit
Int g2/0/1
Port link-type trunk
Port trunk permit vlan 2
Quit
Mirroring-group 1 remote-destination
Mirroring-group 1 monitor-port g2/0/2
Mirroring-group 1 remote-probe vlan 2
21 mac
Mac-addresstimer aging 50
mac
Mac-addressmax-mac-count 20

//

mac
Mac-addressmac-learning disable

//

mac
Mac-addressaging destination-hit enable

//

 mac
// mac H-H-H

Port-macH-H-H

mac
Displaymac-address .
22ip
Intg1/0/1
Ipadd 192.168.1.1. 255.255.255.0 [sub] //sub
23IRF fabric/unit/FTM

56003600

fabric
Fabric-portinterface-type interface-number enable //
unitID
unit ID
Changeunit-id to unit-id | auto-numbering
unitID
Changeunit-id unit-id1 to { unit-id2 | auto-numbering }
fabric
Displayirf-fabrics

[undo]fabric save-unit-id
unit name

Setunit unit-id name unit-name

irf fabric fabric name

//

Sysnamename
24 fabricmember-auto-update software enable
25IRF E\h3c\IRF.pdf
26h3c HGMPV2NDP/NTDP/Cluster

NDP
Ndpenable
Ndpenable interface port-list // NDP
Ndptimer hello 10

// hello

Ndptimer aging 10 // aging

NTDP
Ntdpenable

// ntdp

Ntdp[hop | timer | explore ] //

cluster
Clusterenable

// cluster
//

Cluster

Ip-pool
Buildname

// ip

//

holdtime/timer /
Quit

//

Auto-build[recover]

//

H3c
System-view
Cluster
ftp-serverip-address // ftp

tftp-serverip-address // tftp
logging-host ip-address //
snmp-host ip-address //

// ftp

ftpcluster

tftpcluster get source-file [ destination-file] // tftp

tftpcluster put source-file [ destination-file] // tftp
H3C
Add-member[ member-number | mac-address] //
Delete-member..
Rebootmember..
Clusterswitch
Tracemac{ by-mac.. | by-ip}
27STP
1stpenable

// stp

stp disable/ undo stp enable

// stp

stp mode [stp | rstp | mstp]

//stp

stp priority / stp edge-port enable..

2812 MAC
802.1X
1dot1x

// 802.1x

2dot1xinterface f0/0

// 802.1x

3local-userman
Passwordsimple | cipher password
Service-typelan-access

1DNS
1ip host hostname ip-address
2dns resolve

//

//

3dns server ip-address

//

4dns domain domain-name

5dns proxy enable

//

// DNS

6 display ip hostdisplay dns server

2DHCP
1dhcp enable

// DHCP

2dhcp server ip-pool poolname // dhcp

Network 10.1.1.0 {mask-length| mask }
Gateway-list ip-address
.
3display dhcpserver {free-ip | statistics}..
DHCP RELAY
1dhcp enable

// dhcp

2dhcp relay server-group gro-id ipip-add// dhcp dhcp ip

3in e1/1

// dhcp

Dhcp select relay // dhcp

Dhcp relay server-selectgroup-id // dhcp
3IPV6
1ipv6

// ipv6

2ipv6 address fe801 link-local

3ipv6 address 20011/64

//

//

4
0

10

Ospf

60

Rip

100
150

Ospf

256

BGP

display iprouting-table {ip-address | statistics}

5vlan

1inter g0/0/1.1
Ipadd 1.1.1.1 255.255.255.0
Vlan-type dot1q vid2
2int g0/0/1
Link-typetrunk
Linktrunk permit vlan all
int vlan 2
Ip add 1.1.1.1255.255.255.0
vlan ip
6
Ip route-static dest-add {mask |mask-length }{gateway-address | interface-type interface-name}
[preferencepreference-value]
7RIP
1RIP
1update 30s
2timeout 180s
3garbage-collect 120s
2RIP
1rip [process-id]

// rip

network network-address

// rip

silent-interface{all | interface-type interface-number} //

version { 1| 2}

// rip

undo summary //v2

// rip

preference

timers {timeout |garbage-collection | period update} //

import-route {bgp |direct | isis | rip | ospf | static}

//

2int f0/0
Ripspilt-horizon //
Rip poison-reverse//
Rip triggered

//

Ripauthentication-mode {md5 {rfc2082 key-string key-id | rfc2453 ey-string} |simple password } // ripv2

Rip input
Rip output

// rip
// rip

Rip metricin // rip

Rip metricout // rip
Rip version {1 |2}{broadcast | multicast} //
Rip summary-address10.1.1.0 8

//

8ospf
1router id ip-address // router-id

2ospf [process-id]
Area area-id

// ospf

// ospf

Networknetwork-add wildcard-mask //
3reset ospf[process-id] // ospf
4int e0/0
Ospf dr-prioritypriority // ospf
Ospf cost value

// cost

5display iprouting-table

//

Display ospf peer

//

Display ospf lsdb

//

Display ospf brief | interface | error ..

Debugging terminal

//

Debugging ospf event | lsa | packet | spf

9ACL
1ACL

2000-2999

3000-3999

4000-4999

5000-5999

2firewall enable

//

Firewall default {permit | deny}

//

3 acl
Acl number 2000-2999
Rule[rule-id] {deny | permit} [fragment | logging |source {source-addrsour-wildcast | any} | time-range time-name
]
4 acl
Acl number 3000-3999
Rule[rule-id] {deny | permit } protocol [destination {dest-addr dest-wildcard | any} |destination-port operator
port1 [port2] established | fragment | source{sour-addr sour-wildcard | any } |source-port operator port1 [port2] |
time-rangetime-name]
5 acl
Acl number 4000-4999
Rule[rule-id] {deny |permit } [cos vlan-pri | dest-mac dest-addr dest-mask | lsaplsap-code lsap-wildcard |sourcemac sour-addr source-mask | time-rangetime-name]
6 acl
Int e0/0
Firewallpacket-filter { acl-number | name acl-name} {inbound |outbound}
7acl
Acl numberacl-number [match-order {auto |config} ]
Auto
Config
8acl
Displayfirewall-statics {all |interface interface-type interface-number}
Display firewall acl{acl-number |all}
Resetfirewall-statistics {all |interface interface-type interface-number}
Rest acl counter{acl-number |all}
10NAT
1 acl
2 nataddress-group group-number start-addr end-addr
3 natoutbound acl-number address-group group-number [no-pat]

11NATPT
1 acl
2 nataddress-group group-number start-addr end-addr
3 natoutbound acl-number address-group group-number
NO-APT
12EasyIP
1 ACL
2. natoutbound acl-number
13NATSERVER ->
1natserver protocol pro-type global global-addr [global-port] inside host-addr[host-port]
14HDLC
1ints0/1/0
Link-protocolhdlc

// HDLC

Timerhold seconds

// keepalive

15PPP
PAP
1
Local-userr1
Passwordsimple cisco
Service-typeppp
Ints0/1/0
Pppauthentication-mode pap
2
Ints0/1/0
Pppauthentication-mode pap
Ppppap local-user r1 password simple cisco
CHAP
1
Local-userr1
Passwordsimple cisco
Service-typeppp
Ints0/1/0
Pppauthentication-mode chap
Pppchap user r2
2
Int s0/1/0
Pppauthentication-mode chap
Pppchap user r1
Pppchap password simple cisco
PPPMP
1virtual-template
Intvirtual-template 1
Ipadd 1.1.1.1 255.255.255.0
Ints0/1/0
Pppmp virtual-template 1
2
Pppmp user username bind virtual-template number
Intvirtual-template 1
Pppmp binding authentication
Ints0/1/0

Pppmp
3MP-Group
Intmp-group 1
Ipadd 1.1.1.1 255.255.255.0
Ints0/1/0
Pppmp mp-group 1
16
DTE
ints0/0
Link-protocolfr
Frmap ip Dip-addr Ldlci-number [broadcast | nonbroadcast]
Frinterface-type dte
Frlmi-type {ansi | nonstandard | q933a}
Ints0/0.1 [p2p | p2mp]
DCE
Frswitching

//

Ints0/0/
Frdlci dlci-number

// dlci

Frinterface-type dce
Frdlci-switch in-dlci interface interfa-type interfa-number dlci out-dlci
Displayfr interface | map-info |lmi-info. //
Ripv1 fr
Rip
Peer1.1.1.1