交换机配置命令

· 阅读约需20分钟

交换机配置命令

一、基础配置

# 进入系统视图
<Huawei> system-view

# 修改设备名称
[Huawei] sysname SW1

# 创建设备管理IP
[Huawei] interface Vlanif 1
[Huawei-Vlanif1] ip address 192.168.1.100 24
[Huawei-Vlanif1] undo shutdown
[Huawei-Vlanif1] quit

# 配置默认网关
[Huawei] ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

# 保存配置
[Huawei] save

二、VLAN配置

# 创建单个VLAN
[Huawei] vlan 10
[Huawei-vlan10] description Finance-Department
[Huawei-vlan10] quit

# 批量创建VLAN
[Huawei] vlan batch 10 20 30 40 50

# 查看VLAN信息
[Huawei] display vlan

三、端口配置

3.1 Access端口（连接终端设备）

# 进入端口
[Huawei] interface GigabitEthernet0/0/1

# 配置Access模式
[Huawei-GigabitEthernet0/0/1] port link-type access

# 加入VLAN
[Huawei-GigabitEthernet0/0/1] port default vlan 10

# 开启端口（默认开启）
[Huawei-GigabitEthernet0/0/1] undo shutdown

# 查看端口状态
[Huawei] display interface GigabitEthernet0/0/1

3.2 批量配置Access端口

# 方法一：使用端口组
[Huawei] port-group 1
[Huawei-port-group-1] group-member GigabitEthernet0/0/1 to GigabitEthernet0/0/10
[Huawei-port-group-1] port link-type access
[Huawei-port-group-1] port default vlan 10
[Huawei-port-group-1] quit

# 方法二：逐个配置
[Huawei] interface range GigabitEthernet0/0/1 to GigabitEthernet0/0/10
[Huawei-range] port link-type access
[Huawei-range] port default vlan 10
[Huawei-range] quit

3.3 Trunk端口（交换机互联）

# 进入端口
[Huawei] interface GigabitEthernet0/0/24

# 配置Trunk模式
[Huawei-GigabitEthernet0/0/24] port link-type trunk

# 允许指定VLAN通过
[Huawei-GigabitEthernet0/0/24] port trunk allow-pass vlan 10 20 30

# 允许所有VLAN通过
[Huawei-GigabitEthernet0/0/24] port trunk allow-pass vlan all

# 允许部分VLAN通过
[Huawei-GigabitEthernet0/0/24] port trunk allow-pass vlan 10 to 20

# 查看端口配置
[Huawei] display port vlan

3.4 Hybrid端口（部分场景使用）

# 配置Hybrid模式
[Huawei] interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] port link-type hybrid

# 允许VLAN通过但不打标签
[Huawei-GigabitEthernet0/0/1] port hybrid untagged vlan 10

# 允许VLAN通过并打标签
[Huawei-GigabitEthernet0/0/1] port hybrid tagged vlan 20 30

四、三层接口配置

# 创建VLANIF接口
[Huawei] interface Vlanif 10

# 配置IP地址
[Huawei-Vlanif10] ip address 192.168.10.1 255.255.255.0

# 启用接口
[Huawei-Vlanif10] undo shutdown
[Huawei-Vlanif10] quit

# 配置VLANIF为DHCP服务器
[Huawei] dhcp enable
[Huawei] interface Vlanif 10
[Huawei-Vlanif10] dhcp select interface
[Huawei-Vlanif10] dhcp server dns-list 114.114.114.114

五、静态路由

# 添加静态路由：去往192.168.2.0/24走192.168.1.2
[Huawei] ip route-static 192.168.2.0 255.255.255.0 192.168.1.2

# 添加默认路由
[Huawei] ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

# 查看路由表
[Huawei] display ip routing-table

六、端口安全

# 启用端口安全
[Huawei] interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] port-security enable

# 限制MAC地址数量
[Huawei-GigabitEthernet0/0/1] port-security max-mac-count 1

# 设置违规动作
[Huawei-GigabitEthernet0/0/1] port-security protect-action error-down

# 绑定固定MAC地址
[Huawei-GigabitEthernet0/0/1] port-security mac-address sticky

# 查看端口安全状态
[Huawei] display port-security interface GigabitEthernet0/0/1

七、链路聚合

# 创建Eth-Trunk
[Huawei] interface Eth-Trunk 1
[Huawei-Eth-Trunk1] port link-type trunk
[Huawei-Eth-Trunk1] port trunk allow-pass vlan all

# 加入成员端口
[Huawei] interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] eth-trunk 1
[Huawei] interface GigabitEthernet0/0/2
[Huawei-GigabitEthernet0/0/2] eth-trunk 1

# 查看链路聚合状态
[Huawei] display eth-trunk 1

八、STP配置（防环路）

# 启用STP（默认开启）
[Huawei] stp enable

# 设置STP模式（mstp / stp / rstp）
[Huawei] stp mode rstp

# 设置优先级（值越小优先级越高）
[Huawei] stp priority 4096

# 配置边缘端口（连接终端，快速收敛）
[Huawei] interface GigabitEthernet0/0/1
[Huawei-GigabitEthernet0/0/1] stp edged-port enable

# 查看STP状态
[Huawei] display stp brief

九、常用查看命令

命令作用
display version查看系统版本
display device查看设备状态
display interface brief查看端口状态概览
display interface g0/0/1查看端口详细信息
display vlan查看VLAN及成员端口
display mac-address查看MAC地址表
display current-configuration查看当前运行配置
display saved-configuration查看保存的配置
display logbuffer查看系统日志
display ip interface brief查看IP配置
display ip routing-table查看路由表
display stp brief查看STP状态
display port vlan查看端口VLAN配置

十、维护与恢复

# 重启交换机
[Huawei] reboot

# 恢复出厂设置（清除配置）
[Huawei] reset saved-configuration
[Huawei] reboot

# 设置系统时间
[Huawei] clock timezone Beijing add 08:00:00
[Huawei] clock datetime 2026-08-28 14:30:00

# 查看交换机的MAC地址
[Huawei] display bridge mac-address
[Huawei] display interface | include Hardware

# 远程管理配置（Telnet）
[Huawei] user-interface vty 0 4
[Huawei-ui-vty0-4] authentication-mode password
[Huawei-ui-vty0-4] set authentication password simple Huawei123
[Huawei-ui-vty0-4] user privilege level 3
[Huawei-ui-vty0-4] quit

十一、配置案例：完整小型办公网络

<Huawei> system-view
[Huawei] sysname Office-SW

# 创建VLAN
[Huawei] vlan batch 10 20 30

# 财务部端口 1-8
[Huawei] port-group 1
[Huawei-port-group-1] group-member GigabitEthernet0/0/1 to GigabitEthernet0/0/8
[Huawei-port-group-1] port link-type access
[Huawei-port-group-1] port default vlan 10
[Huawei-port-group-1] quit

# 技术部端口 9-16
[Huawei] port-group 2
[Huawei-port-group-2] group-member GigabitEthernet0/0/9 to GigabitEthernet0/0/16
[Huawei-port-group-2] port link-type access
[Huawei-port-group-2] port default vlan 20
[Huawei-port-group-2] quit

# 行政部端口 17-22
[Huawei] port-group 3
[Huawei-port-group-3] group-member GigabitEthernet0/0/17 to GigabitEthernet0/0/22
[Huawei-port-group-3] port link-type access
[Huawei-port-group-3] port default vlan 30
[Huawei-port-group-3] quit

# 上联口 24口接路由器
[Huawei] interface GigabitEthernet0/0/24
[Huawei-GigabitEthernet0/0/24] port link-type trunk
[Huawei-GigabitEthernet0/0/24] port trunk allow-pass vlan 10 20 30
[Huawei-GigabitEthernet0/0/24] undo shutdown
[Huawei-GigabitEthernet0/0/24] quit

# 配置管理IP
[Huawei] interface Vlanif 1
[Huawei-Vlanif1] ip address 192.168.1.100 24
[Huawei-Vlanif1] undo shutdown
[Huawei-Vlanif1] quit

# 默认路由到路由器
[Huawei] ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

# 保存配置
[Huawei] save

2026年8月28日