#配置交换机名称、管理vlan、IP地址
[Huawei]sysname Switch1 //修改设备名称为SW1
[Switch1]vlan X //设置交换机管理vlan x
[Switch1-vlan x]management-vlan
[Switch1-vlan x]quit //退出
[Switch1] interface vlanif X //创建交换机管理vlanif
[Switch1-vlanifX]in address x.x.x.x //配置配置vlanif接口IP地址
[Switch1-vlanifX]quit //退出
#配置交换机远程登录管理Telnet
[Switch1]telnet server enable //telnet默认是关闭的，需打开
[Switch1]user-interface vty 0 4 //开启VTY线路模式
[Switch1-ui-vty0-4]protocol inbound telnet //配置telnet协议
[Switch1-ui-vty0-4]authentication-mode xxx //配置认证方式
[Switch1-ui-vty0-4]quit //退出
[Switch1]xxx
[Switch1-xxx]local-user admin password cipher xxxx //配置用户名和密码，用户名不区分大小写，密码区分大小写
[Switch1-xxx]local-user admin privilege level 15 //将管理员账号权限设置为15
[Switch1-xxx]quit //退出
[Switch1]quit //退出
< Switch1>save //在用户视图下保存配置
#配置交换机端口隔离、速率、双工等
#配置接口GE1/0/1和GE1/0/2的端口隔离功能，实现两个接口之间的二层数据隔离，三层数据互通
< Switch1>system-view //进入系统视图配置
[Switch1]port-isolate mode 12
[Switch1]interface gigabitethernet 1/0/1
[Switch1- gigabitethernet 1/0/1]port-isolate enable group 1
[Switch1- gigabitethernet 1/0/1]quit
[Switch1]interface gigabitethernet 1/0/2
[Switch1- gigabitethernet 1/0/2]port-isolate enable group 1
[Switch1- gigabitethernet 1/0/2]quit
#配置以太网接口GE0/0/1在自协商模式下协商速率为100Mb/s
< Switch1>system-view
[Switch1]interface gigabitethernet 0/0/1
[Switch1- gigabitethernet 0/0/1]negotiation auto
[Switch1- gigabitethernet 0/0/1]auto speed 100
#配置以太网接口GE0/0/1在自协商模式下双工模式为全双工模式
< Switch1>sys-view
[Switch1] interface gigabitethernet 0/0/1
[Switch1- gigabitethernet 0/0/1]negotiation auto
#查看交换机MAC、vlan下MAC绑定
#执行命令 display mac-addresss，可查看所有MAC地址表项
#在MAC地址表中增加静态MAC地址表项，目的MAC地址为xxxx-xxxx-xxxx，vlan Xd的报文从接口gigabitethernet X/X/X转发出去
[Switch1]mac-address static xxxx-xxxx-xxxx gigabitethernet X/X/X vlan X
#执行命令 display interface vlanif X，显示vlanif接口的MAC地址
#交换机接口划分vlan：静态vlan
[Huawei]sysname Switch1 //修改设备名称为SW1
[Switch1]vlan batch X //批量方式建立vlan X
[Switch1]interface gigabitethernet X/X/1 //进入交换机接口视图
[Switch1- gigabitethernet x/x/1]port link-type access //配置接口类型
[Switch1- gigabitethernet x/x/1]port default vlan X //将接口加入vlan X
[Switch1- gigabitethernet x/x/1]quit
[Switch1]interface gigabitethernet X/X/2
[Switch1- gigabitethernet x/x/2]port link-type trunk
[Switch1- gigabitethernet x/x/2]port trunk allow-pass vlan X
[Switch1- gigabitethernet x/x/2]quit
#交换机基于mac划分vlan：动态vlan
[Switch1]vlan batch X //批量方式建立vlan X
[Switch1]interface gigabitethernet X/X/1 //在接口视图配置上联接口
[Switch1- gigabitethernet x/x/1]port link-type hybrid //配置上联接口类型
[Switch1- gigabitethernet x/x/1]port hybrid tagged vlan X //通过vlanX
[Switch1- gigabitethernet x/x/1]quit
[Switch1]interface gigabitethernet X/X/2 //进入交换机接口视图
[Switch1- gigabitethernet x/x/2]port link-type hybrd //配置接口类型
[Switch1- gigabitethernet x/x/2]port hybrid untagged vlan X //将接口加入vlanX
[Switch1- gigabitethernet x/x/2]quit
[Switch1]vlan X
[Switch1-vlanX]mac-vlan mac-address xx-xx-xx //pc的mac地址与vlanX关联
[Switch1-vlanX]quit
[Switch1]interface gigabitethernet X/X/2
[Switch1- gigabitethernet x/x/2]mac-vlan enable //基于MAC地址启用接口
[Switch1- gigabitethernet x/x/2]quit
#基于GVER的vlan实验：可在交换机1创建vlanX，交换机2可以学到，ping通
[Huawei]un in en //关闭控制台提示信息
[Huawei]sysname Switch1
[Switch1]gvrp
[Switch1]quit
[Switch1]vlan X
[Switch1]interface vlan X
[Switch1-vlanifX]ip address xxx.xxx.xxx.xxx xx
[Switch1-vlanifX]quit
[Switch1]interface gigabitethernet X/X/1
[Switch1- gigabitethernet x/x/1]port link-type access
[Switch1-gigabitethernetx/x/1]port default vlanX //配置交换机端口
[Switch1]interface gigabitethernet X/X/2
[Switch1- gigabitethernet x/x/2]port link-type trunk
[Switch1- gigabitethernet x/x/2]port trunk allow-pass vlan all
[Switch1- gigabitethernet x/x/2]quit
[Switch1] interface gigabitethernet X/X/2
[Switch1-gigabitethernetx/x/2]gvrp //配置交换机gvrp
[Switch1-gigabitethernetx/x/2]quit
Ps:配置完Pc的IP后，可以进行ping验证，或者用命令在交换机上查看：dis gvrp statistics，dis vlan
#交换机生成树协议stp配置：优先级
配置stp基本功能，配置环网中的设备生成树协议工作在STP模式
#配置交换机1的STP工作模式，交换机2、3、4、的配置相同
[Huawei]sysname Switch1
[Switch1]stp mode stp //stp模式为stp
[Switch1]stp root primary //配置交换机1为根桥
[Switch2]stp root secondary //配置交换机2为备份根桥（交换机二与交换机1配置一样）
#交换机生成树协议STP配置：路径值
#配置交换机1的端口路径开销计算方法为计算方法，2、4配置相同
[Huawei]sysname Switch1
[Switch1]stp pathcost-standard legacy
#配置交换机3端口gigabitethernet x/x/x的端口路径开销值为20000
[Huawei]sysname Switch3
[Switch3]stp pathcost-standard legacy
[Switch3]interface gigabitethernet x/x/x
[Switch3- gigabitethernet x/x/x]stp cost 20000
[Switch3- gigabitethernet x/x/x]quit
#配置交换机4端口gigabitethernet x/x/x为边缘端口并启用端口的BPDU报文过滤功能
[Huawei]sysname Switch4
[Switch4]interface gigabitethernet x/x/x
[Switch4- gigabitethernet x/x/x]stp edged-port enable
[Switch4- gigabitethernet x/x/x]stp bpdu-filter enable
[Switch4- gigabitethernet x/x/x]quit
#配置交换机3端口gigabitethernet x/x/x为边缘端口并启用端口的BPDU报文过滤功能
[Huawei]sysname Switch3
[Switch3]interface gigabitethernet x/x/x
[Switch3- gigabitethernet x/x/x]stp edged-port enable
[Switch3- gigabitethernet x/x/x]stp bpdu-filter enable
[Switch3- gigabitethernet x/x/x]quit
Ps:设备全局启用STP，所有设备配置相同
#交换机1全局启用STP