邻居发现命令
[H3C]display lldp neighbor-information list
[H3C]public-key local create #生成本地密钥对
H3C链路聚合配置
[H3C]interface Ten-GigabitEthernet 1/0/1
[H3C-Ten-GigabitEthernet1/0/1]port link-mode bridge
[H3C-Ten-GigabitEthernet1/0/1]description "Server"
[H3C-Ten-GigabitEthernet1/0/1]port link-type trunk
[H3C-Ten-GigabitEthernet1/0/1]port trunk pvid vlan 10
[H3C-Ten-GigabitEthernet1/0/1]bpdu-drop any
[H3C-Ten-GigabitEthernet1/0/1]stp edged-port
[H3C-Ten-GigabitEthernet1/0/1]port link-aggregation group 1
[H3C]interface Bridge-Aggregation 1
[H3C-Bridge-Aggregation1]port link-type trunk
[H3C-Bridge-Aggregation1]port trunk pvid vlan 10 #设置本帧vlan为vlan 10
[H3C-Bridge-Aggregation1]link-aggregation mode dynamic #使用LACP(ComwareV5配置方法：lacp mode active)如使用静态不配置该命令
[H3C-Bridge-Aggregation1]lacp edge-port #配置聚合接口为聚合边缘接口，边缘接口一般用来接host
[H3C-Bridge-Aggregation1]stp edged-port
[H3C]display link-aggregation summary #H3C查看使用的链路聚合协议
DHCP中继配置
dhcp enable
dhcp relay server-group 1 ip x.x.x.x #x为DHCP服务器的ip地址
int vlan 30
dhcp select relay
dhcp relay server-select 1
在H3C交换机配置dhcp服务器时查看地址的分配情况
dis dhcp server ip-in-use pool vlan1006
dis dhcp server free-ip pool vlan1006
在H3C交换机上释放dhcp分配的地址
<H3C>reset dhcp server ip-in-use all
查看接口描述
[H3C]display interface brief description
[H3C]display ip interface brief description
default接口
[h3c]interface GigabitEthernet 1/0/41
[h3c-GigabitEthernet1/0/41]default
802.1X配置
1、全局开启802.1X dot1x dot1x authentication-method eap dot1x timer quiet-period 10 dot1x timer tx-period 10 mac-authentication mac-authentication domain 1x radius scheme 1x primary authentication 172.28.101.3 primary accounting 172.28.101.3 secondary authentication 172.28.101.2 secondary accounting 172.28.101.2 key authentication cipher $c$3$NAIz9CqJDECj7p7qCeuCDXbmfRIcyOtxxCDlaA== key accounting cipher $c$3$TaTYg1NBpPoTzE97hwyZJSEnRnFiBvIpaVoOgg== user-name-format without-domain radius scheme system user-name-format without-domain domain 1x authentication lan-access radius-scheme 1x authorization lan-access radius-scheme 1x accounting lan-access radius-scheme 1x 2、接口下开启802.1X interface GigabitEthernet2/0/1 description 802.1x_authenration port link-type hybrid undo port hybrid vlan 1 port hybrid vlan 1030 3000 untagged port hybrid pvid vlan 3000 mac-vlan enable stp edged-port dot1x undo dot1x handshake dot1x mandatory-domain 1x undo dot1x multicast-trigger dot1x re-authenticate dot1x unicast-trigger dot1x guest-vlan 1030 dot1x auth-fail vlan 1030 mac-authentication mac-authentication domain 1x mac-authentication guest-vlan 1030 mac-authentication parallel-with-dot1x