1.telnet配置
H3C交换机2100配置总结_第1张图片
system-view//进入视图模式
user-interface vty 0 4 //进入虚拟终端 0 4
authentication-mode password  //设置认证方式为密码验证方式为password
set authentication password simple 123456   设置登陆验证的password为明文密码”123456”也可以用cipher加密模式
user privilege level 3   配置登陆用户的级别为最高级别3(缺省为级别1)
 
2.配置vlan1的ip地址
[H3C]system-view//进入视图模式
[H3C]interface Vlan-interface 1//进入vlan 1接口模式
为该接口设置IP:
[H3C-Vlan-interface1]ip address 192.168.40.40 255.255.255.0//设置ip地址和子网掩码

3.配置web用户
H3C交换机2100配置总结_第2张图片
[H3C] local-user zh888
[H3C-luser-admin] service-type telnet
[H3C-luser-admin] password simple admin
[H3C-luser-admin] authorization-attribute level 3

4.配置ssh连接
H3C交换机2100配置总结_第3张图片
[H3C]public-key local create rsa//RSA公钥加密算法
% The local-key-pair already exist.
Confirm to replace them? [Y/N]:
Before pressing ENTER you must choose 'YES' or 'NO'[Y/N]:y
The range of public key size is (512 ~ 2048).     
NOTES: If the key modulus is greater than 512,     
       It will take a few minutes.
Input the bits in the modulus[default = 1024]:
Generating keys...
.....++++++
.................++++++
......
[H3C]public-key local create dsa
The range of public key size is (512 ~ 2048).     
NOTES: If the key modulus is greater than 512,     
       It will take a few minutes.
Input the bits in the modulus[default = 1024]:
Generating keys...
.++++++++++++++++++++++++++++++++++++++++++++++++++*
........+......+.....+......................................+..+.......................+..........+..............+.............+...+.....+...............+..+......+.................+..........+...+....+.......+.....+............+.
[H3C]user-interface vty 0 4//进入虚拟终端接口vty 0 4
[H3C-ui-vty0-4]authentication-mode scheme/创建本地用户启动scheme验证
[H3C-ui-vty0-4]protocol inbound ssh //设置协议为ssh
[H3C-ui-vty0-4]quit //退出
[H3C]local-user root//添加本地用户root
New local user added.
[H3C-luser-root]password cipher 123456//设置加密密码
[H3C-luser-root]service-type ssh level 3 //设置访问类型为ssh级别为3
[H3C-luser-root]quit //退出          
[H3C]ssh user root authentication-type password//设置认证模式为password
 
5.查看全部配置
[H3C]dis cu//查看所有的配置信息
dis current-configuration
#
 sysname H3C
#
 loopback-detection enable
#
 gvrp
#
radius scheme system
#
domain system
#
local-user root
 password cipher OUM!K%F<+$[Q=^Q`MAF4<1!!
 service-type ssh telnet
 level 3
local-user zh888
 password simple 123456
 service-type telnet
 level 3
 
interface Ethernet1/0/17
 port access vlan 60
 loopback-detection enable
#
interface Ethernet1/0/18
 port access vlan 60
 loopback-detection enable
#
interface Ethernet1/0/19
 loopback-detection enable
#
interface Ethernet1/0/20                 
 loopback-detection enable
#
interface Ethernet1/0/21
 loopback-detection enable
#
interface Ethernet1/0/22
 loopback-detection enable
#
interface Ethernet1/0/23
 loopback-detection enable
#
interface Ethernet1/0/24
 port link-type trunk
 port trunk permit vlan all
 loopback-detection enable
 gvrp
#
interface Ethernet1/1/1
#
interface Ethernet1/1/2
 shutdown
#
interface Ethernet1/2/1
#                                        
interface Ethernet1/2/2
 shutdown
#
interface NULL0
#
 ip route-static 0.0.0.0 0.0.0.0 192.168.40.254 preference 60
#
 
snmp-agent
 snmp-agent local-engineid 800063A23CE5A6B774176877
 snmp-agent community read monitor
 snmp-agent sys-info version v2c v3
 snmp-agent target-host trap address udp-domain 192.168.40.39 params securityname public v2c
#
 ssh authentication-type default password
 ssh user root authentication-type password
 ssh user root service-type stelnet
#
user-interface aux 0
user-interface vty 0 4
 authentication-mode scheme
 set authentication password cipher 6aJ+S);RF&YUIM;GUL")0Q!!
 protocol inbound ssh
 
6.配置snmp-agent让cacti监控
H3C交换机2100配置总结_第4张图片
 [H3C]system-view//进入视图模式
[H3C]snmp-agent sys-info version v2c //启动snmp agent服务,并设置v2c,v3版本的团体名
[H3C]snmp-agent community read monitor
[H3C]snmp-agent trap enable//开启trap报文
[H3C]snmp-agent target-host trap address udp-domain 192.168.40.39 udp-port 162 params securityname monitor v2c //40.39为cacti机器的ip地址
 
7.配置gvrp
H3C交换机2100配置总结_第5张图片
[H3C]system view//进入视图模式
[H3C]gvrp//开启全局模式GVRP
interface Ethernet1/0/24//进入24接口配置trunk端口,并允许所有vlan通过
[H3C]port link-type trunk//设置为trunk模式
[H3C]port trunk permit vlan all//允许所有vlan通过
[H3C]gvrp//在trunk的端口上开启gvrp
[H3C]quit//退出
在b的交换机器上也是同样的操作,最后display vlan dynamic