H3C端口经验配置

《H3C端口经验配置》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、H3C网络设备常用配置脚本为了方便H3C网络设备的配置特建立此文档方便大家参考工具/原料·H3C交换机交换机初始化基本配置sysname交换机名字superpasswordlevel3cipher密码loopback-detectionenableuser-interfaceaux0idle-timeout300user-interfacevty04idle-timeout300END百度经验:jingyan.baidu.comNTP时间同步配置1.1clocktimezoneGMTadd8ntp-serviceunicast-ser

2、verNTP服务器IP地址ntpsource-interfaceLoopBack0 （三层交换机，存在Loopback口时） 2.2外网可用NTP服务器 202.120.2.101END百度经验:jingyan.baidu.comSSH服务配置1.1ComwareV3Platformaclnumber2000 rule1permitsource192.168.0.10 //允许192.168.0.1登录 rule50denyrsalocal-key-paircreateuser-interfacevty04 acl2000inboun

3、dprotocolinboundsshsshuseradminauthentication-typepassword//允许admin用户进行ssh登录2.2ComwareV5Platformaclnumber2000 rule1permitsource192.168.0.10 //允许192.168.0.1登录 rule50denypublic-keylocalcreatersasshserverenable user-interfacevty04 acl2000inboundprotocolinboundsshsshuseradm

4、inservice-typeallauthentication-typepassword //允许admin用户进行ssh登录END百度经验:jingyan.baidu.comAAA认证配置1.1ComwareV3Platformlocal-useradminpasswordcipher*****service-typesshtelnetterminallevel3hwtacacsschemeacs primaryauthentication***** primaryauthorization ***** primaryaccount

5、ing***** keyauthentication***** keyauthorization ***** keyaccounting***** user-name-formatwithout-domaindomainacs schemehwtacacs-schemeacslocaldomaindefaultenableacsuser-interfaceaux0 authentication-modeschemecommand-authorization accountingcommandsschemeuser-interfacev

6、ty04authentication-modeschemecommand-authorization accountingcommandsscheme2.2ComwareV5Platformlocal-userhuangly passwordcipher***** authorization-attributelevel3 service-typesshtelnetterminalhwtacacsschemeacs keyauthentication***** keyauthorization***** keyaccounting**

7、***domainacs authenticationdefaulthwtacacs-schemeacslocal authorizationdefaulthwtacacs-schemeacslocal accountingdefaulthwtacacs-schemeacslocaldomaindefaultenableacsuser-interfaceaux08 authentication-modescheme commandauthorization commandaccountinguser-interfacevty04 au

8、thentication-modescheme commandauthorization commandaccountingEND百度经验:jingyan.baidu.comSNMP服务配置1.1SNMPv2snmp-a