D-Link交换机通用配置手册

UPD-LINK SWITCH通用配置手册

0、设置管理员帐户

#create account admin/user admin/user是用户类型 Enter a case-sensitive new password:*** Enter the new password again for confirmation:*** Success.

#delete account #show account

1、配置交换机默认IP地址和所属VLAN

config ipif System ipaddress 192.168.0.2/24 vlan V30

2、配置SNMP

create snmp community test view CommunityView read_only

create snmp community testw view CommunityView read_write show snmp community

3、配置 VLAN

#create vlan v30 tag 30 其中，v30是VLAN Name ，30是VLAN ID (VID)

#config vlan v30 add untagged 1:23-1:24 PORT 23、24添加到vlan v30中，并打上untagged标记 #config vlan v30 advertisement enable

4、端口配置

语法：config ports [ [speed [auto | 10_half | 10_full | 100_half | 100_full | 1000_full {[master | slave]} ] | flow_control [enable | disable] | learning [enable | disable] state [enable | disable] description | clear]

例：#config ports 23-24 speed 100_half learning enable state enable flow_control enable

5、配置链路聚合组

语法：#create link_aggregation group_id {type [lacp | static]}

#config link_aggregation group_id {master_port | ports | state [enable | disable]

例：#config link_aggregation group_id 1 master_port 1:5 ports 1:5-1:7, 1:9

6、端口镜像 enable mirror

config mirror port [add/delete] source ports [rx/tx/both] 监控端口；source ports 被监控端口

7、软件升级

download firmware 10.90.90.92 升级firmware

upload configuration 172.18.192.90 上传配置到TFTP服务器 download configuration 172.18.192.90 从TFTP服务器下载配置

8、Ip Interface的配置

语法：creat ipif state enable

例：creat ipif test 192.168.1.1/24 vlan100 state enable config ipif System ipaddress 10.48.74.122/8 vlan v30

9、MAC绑定到交换机端口（手动添加MAC，这些MAC的终端可以使用此端口）

Used to create a static entry to the unicast MAC address forwarding table (database) 1、语法：create fdb [port ] 建立静态fdb条目 例： create fdb default 00-00-00-00-01-02 port 2:5

2、语法：config ports learning disable 关掉端口学习功能

10、MAC锁定到交换机端口（设定使用端口的终端-MAC的数量，并锁定当前连接的终端-MAC为许可用户） 语法：config port_security ports [| all ] {admin_state [enable | disable] | max_learning_addr | lock_address_mode [Permanent | DeleteOnTimeout | DeleteOnReset]}

例：config port_security ports 1:16 admin_state enable max_learning_addr 10 lock_address_mode DeleteOnReset

11、traffic_segmentation（同一VLAN内端口隔离功能）

语法：config traffic_segmentation [| all] forward_list [null | all | ]

例：config traffic_segmentation 1:1 forward_list 1:1-1:10 （Port1可以和Port1-10通讯，和Port 11-24隔离）

12、带宽控制

语法：config bandwidth_control [ | all] {rx_rate [no_limit | ] | tx_rate [no_limit | ]} 单位为Mbps

13、创建IP interface

语法：create ipif ipaddress vlan state [enable | disable]

例：create ipif p1 ipaddress 10.1.1.1 Trinity state enable

14、设置静态路由

语法：create iproute {} {[primary | backup]}

. IP address and netmask of the IP interface that is the destination of the route.

. The gateway IP address for the next hop router.

语法：create iproute default {}

15、ACL访问控制列表 1、创建access_profile

DXS-3350SR:4#create access_profile ip destination_ip_mask 255.255.255.255 profile_id 1

2、建立access条目

DXS-3350SR:4#config access_profile profile_id 1 add access_id 1 ip destination_ip 172.18.192.246 port 1:16 deny

16、IP-MAC Binding

The IP-MAC Binding commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command

create address_binding ip_mac ipaddress mac_address config address_binding ip_mac ipaddress mac_address config address_binding ip_mac ports [ | all] state [enable | disable] show eg: enable address_binding acl_mode ? Enable IP-MAC Port Binding ACL Mode

create address_binding ip_mac ipaddress 192.168.0.10 mac_address 00-15-F2-A9-0B-C2 ports 1 mode acl ? To set up a IP-MAC Port Binding Rule

config address_binding ip_mac ports 1-10 state enable ? Enable active port

show address_binding ip_mac

show address_binding ports

17、策略路由

create access_profile profile_id 1 ip source_ip_mask 255.255.255.0

config access_profile profile_id 1 add access_id 1 ip source_ip 4.4.4.4 port 1 create policy_route name 1

config policy_route name 1 acl profile_id 1 access_id 1 nexthop 2.2.2.2 state enable

18、DHCP Server

create dhcp pool test

config dhcp pool network_addr test 192.168.0.0/24

config dhcp pool dns_server_address test 61.139.2.69 0.0.0.0 0.0.0.0 config dhcp pool netbios_node_type test broadcast

config dhcp pool default_router test 192.168.0.1 0.0.0.0 0.0.0.0 config dhcp pool lease test 1 1 1 config dhcp ping_packets 5 config dhcp ping_timeout 500 enable dhcp_server