不同设备型号配置命令不同*
1.Console口登陆方式的配置：
system-view
un in en 不要弹出烦人的消息
user-interface aux 0 //进入aux接口
authentication-mode scheme //配置认证方式
quit
local-user xw //创建名叫xw的用户
password hash 123 //配置密码，生产中建议使用hash，以防止命令历史查看密码
service-type terminal telnet ssh //开启此用户登录方式
authorization-attribute user-role level-15
authorization-attribute level 3
user privilege level 3 //设置权限，v7版本命令不同，3 .15均为最高
2.配置telnent 服务
telnet server enable //开启telnet服务
interface Vlan-interface 1 //进入默认vlan 1（管理vlan）
ip address 192.168.1.2 24 //配置管理IP地址
user-interface vty 0 4 //进入虚拟接口
authentication-mode scheme //设置认证方式
local-user admin //添加本地用户telnet
password simple 123 //设置密码
passervice-type telnet //设置用户用途
authorization-attribute user-role level-15 //设置用户权限
2.配置网络（dhcp 默认路由 vlan acl）
sw1：
version 7.1.075, Alpha 7571
dhcp enable
vlan 1
vlan 21
description wuye
vlan 22
description xiaoshou
vlan 23
description servers
stp global enable
dhcp server ip-pool vlan21
gateway-list 192.168.15.254
network 192.168.15.0 mask 255.255.255.0
dns-list 202.101.172.35 202.101.172.47
expired day 8
dhcp server ip-pool vlan22
gateway-list 192.168.16.254
network 192.168.16.0 mask 255.255.255.0
dns-list 202.101.172.35 202.101.172.47
expired day 8
dhcp server ip-pool vlan23
gateway-list 192.168.17.254
network 192.168.17.0 mask 255.255.255.0
dns-list 202.101.172.35 202.101.172.47
expired day 8
interface NULL0
interface Vlan-interface1
ip address 192.168.30.1 255.255.255.0
interface Vlan-interface21
ip address 192.168.15.254 255.255.255.0
dhcp server apply ip-pool vlan21
interface Vlan-interface22
ip address 192.168.16.254 255.255.255.0
dhcp server apply ip-pool vlan22
interface Vlan-interface23
ip address 192.168.17.254 255.255.255.0
dhcp server apply ip-pool vlan23
interface FortyGigE1/0/53
port link-mode bridge
interface FortyGigE1/0/54
port link-mode bridge
interface GigabitEthernet1/0/2
port link-mode route
combo enable fiber
ip address 192.168.50.2 255.255.255.0
### 模拟上行路由，使其数据包出外网或安全设备
acl number 3000
rule 5 deny ip source 192.168.15.0 0.0.0.255 destination 192.168.16.0
wuye 和xiaoshou 不能直接互通
rule 10 deny ip source 192.168.17.0 0.0.0.255 destination 192.168.50.2
server 不能上外网
rule 15 permit ip
vlan 22 下调用 ：packet-filter inbound ip-group 3000
vlan 23 调用 ：packet-filter inbound ip-group 3000
sw2 sw3 sw5
interface Vlan-interface1
ip address 192.168.15.250 255.255.255.0
16
17
sw4
interface GigabitEthernet1/0/1
port link-mode route
combo enable fiber
ip address 192.168.50.5 255.255.255.0
ip route-static 0.0.0.0 0.0.0.0 192.168.50.2
3.常用命令：
重置接口 default
查看历史命令 display history-command
显示系统时间 ： clock datetime?
时间协议 ： clock protocol ntp
保存配置 ： save
清空配置： reset saved-configuration
*个人h3c账号：zaq123456 查阅官方文档