自己动手打造公司内网监管利器(1)(2)

******************************************************************************** 

*  Copyright (c) 2004-2007 Hangzhou H3C Tech. Co., Ltd. All rights reserved.   * 

*  Without the owner's prior written consent,                                  * 

*  no decompiling or reverse-engineering shall be allowed.                     * 

******************************************************************************** 

Login authentication 

Username:tt 输入用户）

Password: 输入密码，默显）

%Apr 12 08:38:16:685 2000 H3C SHELL/5/LOGIN:- 1 - jh(172.30.38.21) in unit1 logi 

ndis          

^ % Incomplete command found at '^' position. 

sy 进入system模式，华为和思科的设备都可以简写，只要不存在歧义，多短都可以，但是很明显，现在最短是2字节。）

System View: return to User View with Ctrl+Z.

[H3C]dis cu display current-configuration的缩写，作用是打印配置文件，作为一个耍酷装帅的IT工程师，简写是一定要学会的，要不就跟我一样得失业。。）

#

sysname H3C

#

super password level 3 simple *******配置没改，明文。。。一个敬业的IT工程师一定要明文保存密码，以保证离职之后能顺利找回。）

#

radius scheme system # domain system

#

local-user h3c

password simple h3c

service-type telnet

level 3

local-user tt

password simple ******(z这里其实是明文密码)

service-type telnet

level 3

#

vlan 1

#

interface Vlan-interface1

ip address 172.30.30.204 255.255.0.0

#

interface Aux1/0/0

#

interface Ethernet1/0/1

#

interface Ethernet1/0/2

#

interface Ethernet1/0/3

#

interface Ethernet1/0/4

#

interface Ethernet1/0/5

#

interface Ethernet1/0/6

#

interface Ethernet1/0/7

#

interface Ethernet1/0/8

#

interface Ethernet1/0/9

#

interface Ethernet1/0/10

#

interface Ethernet1/0/11

monitor-port     监视此端口）

#

interface Ethernet1/0/12

#

interface Ethernet1/0/13

#

interface Ethernet1/0/14

#

interface Ethernet1/0/15
#

interface Ethernet1/0/16

#

interface Ethernet1/0/17

#

interface Ethernet1/0/18

#

interface Ethernet1/0/19

#

interface Ethernet1/0/20

#

interface Ethernet1/0/21

line-rate inbound 32000

line-rate outbound 40000

mirroring-port both  限速还有镜像此端口）

#

interface Ethernet1/0/22

#

interface Ethernet1/0/23

line-rate inbound 32000

line-rate outbound 40000

#

interface Ethernet1/0/24

#

interface GigabitEthernet1/1/1

#

interface GigabitEthernet1/1/2

#

interface GigabitEthernet1/1/3

#

interface GigabitEthernet1/1/4

#

undo irf-fabric authentication-mode

#

interface NULL0

#

voice vlan mac-address 0001-e300-0000 mask ffff-ff00-0000

#

snmp-agent

snmp-agent local-engineid 800063A2000FE25E69A26877

snmp-agent sys-info version v3

#

user-interface aux 0 7

ser-interface vty 0 4

authentication-mode scheme

#

return

interface Ethernet1/0/21 

line-rate inbound 32000 

line-rate outbound 40000 

mirroring-port both  

[H3C]int输入3个字母之后点tab可以自动连写后面可能存在的单词）

[H3C]interface

[H3C]interface ?命令后面带？可以列出可能可以使用的参数）  Aux              

Aux interface  Ethernet         

Ethernet interface  GigabitEthernet  GigabitEthernet interface  LoopBack         

LoopBack interface  NULL             

NULL interface 

Vlan-interface   VLAN interface

[H3C]interface Ethernet ?  

<1-1>  Unit number提示你给哪个单元接口设置）

[H3C]interface Ethernet 1/0/21

[H3C-Ethernet1/0/21]

[H3C-Ethernet1/0/21]mirroring-port both

[H3C-Ethernet1/0/21]sa保存配置文件）