问

思科3750配置翻译

DHCP/DHCP Relay

6小时前提问

0关注
0收藏，42浏览

凌轩

凌轩四段

粉丝：0人关注：0人

问题描述：

求一下配置翻译成华三交换机配置

sw3750-2#show run

Building configuration...

Current configuration : 46872 bytes

version 12.2

no service pad

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

hostname sw3750-2

enable secret 5 $1$wkGE$ARMm4xoj70flZTW5AWA91.

enable password cisco

no aaa new-model

switch 1 provision ws-c3750g-12s

vtp domain cbrcqh

vtp mode transparent

ip subnet-zero

ip routing

ip dhcp excluded-address 192.168.1.250 192.168.1.254

ip dhcp excluded-address 192.168.103.1

ip dhcp excluded-address 192.168.102.1

ip dhcp excluded-address 192.168.104.1

ip dhcp excluded-address 192.168.101.1

ip dhcp excluded-address 192.168.108.1

ip dhcp excluded-address 192.168.109.1

ip dhcp excluded-address 192.168.110.1

ip dhcp excluded-address 192.168.106.1

ip dhcp excluded-address 192.168.107.1

ip dhcp excluded-address 192.168.105.1

ip dhcp excluded-address 192.168.111.1

ip dhcp pool g1_cmcc_spd

host 192.168.1.5 255.255.255.0

client-identifier 01e8.fcaf.a01c.c3

default-router 192.168.1.1

dns-server 192.168.1.1

ip dhcp pool g1_qing_wifi

host 192.168.1.6 255.255.255.0

client-identifier 01c0.6118.00ad.d3

default-router 192.168.1.1

dns-server 192.168.1.1

很多个ip dhcp pool XXXXX

ip dhcp pool f3_3loucaiwu2

host 192.168.103.89 255.255.255.0

client-identifier 0100.d861.944b.c1

default-router 192.168.103.1

dns-server 192.168.1.1

ip dhcp snooping vlan 3

ip dhcp snooping

ip arp inspection vlan 3

ip arp inspection validate src-mac ip

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause security-violation

errdisable recovery cause channel-misconfig

errdisable recovery cause pagp-flap

errdisable recovery cause dtp-flap

errdisable recovery cause link-flap

errdisable recovery cause gbic-invalid

errdisable recovery cause l2ptguard

errdisable recovery cause psecure-violation

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause unicast-flood

errdisable recovery cause vmps

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery cause loopback

errdisable recovery interval 30

no file verify auto

spanning-tree mode pvst

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

name internet-pub

vlan 3

private-vlan primary

private-vlan association 301-302

vlan 101

name 1F

vlan 102

name 2F

vlan 103

name 3F

vlan 104

name 4F

vlan 105

name 5F

vlan 106

name 6F

vlan 107

name 7F

vlan 108

name 8F

vlan 109

name 9F

vlan 110

name 10F

vlan 111

name 11F

vlan 301

private-vlan isolated

vlan 302

private-vlan community

vlan 999

name GuanLi

interface GigabitEthernet1/0/1

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/2

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/3

switchport trunk encapsulation dot1q

switchport mode trunk

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/4

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/5

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/6

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/7

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/8

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/9

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/10

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

ip dhcp snooping trust

interface GigabitEthernet1/0/11

switchport trunk encapsulation dot1q

switchport mode trunk

ip arp inspection limit rate 300

ip access-group limit in

ip dhcp snooping limit rate 300

interface GigabitEthernet1/0/12

switchport mode dynamic desirable

ip arp inspection trust

ip access-group limit in

ip dhcp snooping trust

interface Vlan1

ip address 192.168.0.22 255.255.255.0

interface Vlan3

ip address 192.168.1.251 255.255.255.0

private-vlan mapping 301-302

interface Vlan101

description 1F

ip address 192.168.101.1 255.255.255.0

interface Vlan102

description 2F

ip address 192.168.102.1 255.255.255.0

interface Vlan103

description 3L

ip address 192.168.103.1 255.255.255.0

interface Vlan104

description 4F

ip address 192.168.104.1 255.255.255.0

interface Vlan105

description 5F

ip address 192.168.105.1 255.255.255.0

interface Vlan106

description 6F

ip address 192.168.106.1 255.255.255.0

interface Vlan107

description 7F

ip address 192.168.107.1 255.255.255.0

interface Vlan108

description 8F

ip address 192.168.108.1 255.255.255.0

interface Vlan109

description 9F

ip address 192.168.109.1 255.255.255.0

interface Vlan110

description 10F

ip address 192.168.110.1 255.255.255.0

interface Vlan111

description 11F

ip address 192.168.111.1 255.255.255.0

interface Vlan999

description GuanLi

ip address 172.16.1.254 255.255.255.0

ip classless

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip http server

ip http secure-server

arp access-list exit

control-plane

line con 0

line vty 0 4

password tjxxc

line vty 5 15

no login

end

3 个回答

按时间按赞数

zhiliao_Gixe

zhiliao_Gixe 九段

粉丝：19人关注：9人

思科3750配置翻译为H3C交换机配置，需注意两者命令差异。以下是关键配置对应关系：
基础配置
hostname sw3750-2 → sysname sw3750-2
enable secret → super password role network-admin simple/hash
enable password → 同上，H3C用local-user或super password
接口配置
interface GigabitEthernet1/0/1 → interface GigabitEthernet1/0/1
switchport mode access → port link-type access
switchport access vlan 10 → port access vlan 10
switchport mode trunk → port link-type trunk
switchport trunk allowed vlan 10,20 → port trunk permit vlan 10 20
no shutdown → undo shutdown
VLAN配置
vlan 10 → vlan 10
name VLAN10 → name VLAN10
生成树
spanning-tree mode rapid-pvst → stp mode rstp
spanning-tree vlan 10 priority 4096 → stp vlan 10 priority 4096
端口聚合
interface Port-channel1 → interface Bridge-Aggregation1
channel-group 1 mode active → port link-aggregation group 1
管理配置
interface Vlan1 → interface Vlan-interface1
ip address 192.168.1.1 255.255.255.0 → 相同
ip default-gateway → ip route-static 0.0.0.0 0.0.0.0 <网关>
其他
line vty 0 4 → user-interface vty 0 4
password → set authentication password simple/hash
login → authentication-mode password
建议逐段对照翻译，注意H3C的undo代替no，display current-configuration代替show run。完整配置需根据实际业务调整。

接口下配置怎么翻译，还有那个dhcp

凌轩发表时间：6小时前 更多>>

接口下配置怎么翻译，还有那个dhcp

凌轩发表时间：6小时前

zhiliao_fniH7

zhiliao_fniH7 五段

粉丝：0人关注：0人

ip dhcp pool g1_qing_wifi

host 192.168.1.6 255.255.255.0

client-identifier 01c0.6118.00ad.d3

default-router 192.168.1.1

dns-server 192.168.1.1

很多个ip dhcp pool XXXXX

这个配置是思科和锐捷交换机在DHCP中绑定MAC地址的固定IP 常常用于网络打印机小路由器等设备，核心在断电重启后还会把这些IP地址分发给原来的设备。

IT小工

IT小工九段

粉丝：48人关注：2人

Cisco ip arp inspection(DAI) ≈ H3C arp detection；Cisco dhcp snooping 和 H3C dhcp snooping 逻辑一致
Cisco PVLAN（私有 VLAN）H3C 同样支持 private-vlan，命令体系基本对齐
Cisco errdisable recovery：H3C 没有一条统一命令，部分故障类型自动恢复需要单独配置，不是所有 errdisable 原因都支持自动恢复
Cisco VTP transparent：H3C 没有 VTP，默认就是透明模式，不需要配置
Cisco PVST：H3C 默认 MSTP；如果要等价 PVST 效果，需要 MSTP 每个 VLAN 单独实例（现场一般直接 MSTP）
Cisco client-identifier 格式：01e8.fcaf.a01c.c3，H3C 识别格式 e8-fcaf-a01c-c3，前面 01 是以太网类型标记，H3C 写的时候去掉 01
思科 dynamic desirable trunk，H3C 没有 DTP，trunk 必须手动指定 port link-type trunk

下面是完整 H3C V7 版本配置（S5560/S6850/S7003X 等主流 V7 平台）

system-view
sysname sw3750-2
# 关闭不需要的，H3C默认没有service pad这类
# 密码配置
super password simple cisco
# 开启IP路由
ip routing
# DHCP全局开启
dhcp enable
# DHCP排除地址
dhcp server forbidden-ip 192.168.1.250 192.168.1.254
dhcp server forbidden-ip 192.168.103.1
dhcp server forbidden-ip 192.168.102.1
dhcp server forbidden-ip 192.168.104.1
dhcp server forbidden-ip 192.168.101.1
dhcp server forbidden-ip 192.168.108.1
dhcp server forbidden-ip 192.168.109.1
dhcp server forbidden-ip 192.168.110.1
dhcp server forbidden-ip 192.168.106.1
dhcp server forbidden-ip 192.168.107.1
dhcp server forbidden-ip 192.168.105.1
dhcp server forbidden-ip 192.168.111.1

# DHCP静态绑定示例（多个pool以此类推）
dhcp server ip-pool g1_cmcc_spd
 static-bind ip-address 192.168.1.5 mask 255.255.255.0
 static-bind client-identifier e8-fcaf-a01c-c3
 gateway-list 192.168.1.1
 dns-list 192.168.1.1
quit

dhcp server ip-pool g1_qing_wifi
 static-bind ip-address 192.168.1.6 mask 255.255.255.0
 static-bind client-identifier c0-6118-00ad-d3
 gateway-list 192.168.1.1
 dns-list 192.168.1.1
quit

dhcp server ip-pool f3_3loucaiwu2
 static-bind ip-address 192.168.103.89 mask 255.255.255.0
 static-bind client-identifier 00-d861-944b-c1
 gateway-list 192.168.103.1
 dns-list 192.168.1.1
quit

# DHCP Snooping + ARP Detection（对应Cisco ip dhcp snooping + ip arp inspection）
dhcp snooping enable
vlan 3
 dhcp snooping enable
 arp detection enable
 arp detection validate src-mac ip
quit

# STP 等价替换：Cisco spanning-tree mode pvst，H3C用MSTP（推荐）
stp mode mstp
stp enable

# VLAN配置 + PVLAN
vlan 2
 name internet-pub
quit
vlan 3
 name pvlan-primary
 private-vlan primary
 private-vlan secondary 301 to 302
quit
vlan 101
 name 1F
quit
vlan 102
 name 2F
quit
vlan 103
 name 3F
quit
vlan 104
 name 4F
quit
vlan 105
 name 5F
quit
vlan 106
 name 6F
quit
vlan 107
 name 7F
quit
vlan 108
 name 8F
quit
vlan 109
 name 9F
quit
vlan 110
 name 10F
quit
vlan 111
 name 11F
quit
vlan 301
 private-vlan isolated
quit
vlan 302
 private-vlan community
quit
vlan 999
 name GuanLi
quit

# 接口G1/0/1 ~ G1/0/11 Trunk、dhcp snooping trust
interface GigabitEthernet1/0/1
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/2
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/3
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/4
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/5
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/6
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/7
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/8
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/9
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/10
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 dhcp snooping rate-limit 300
 arp detection rate-limit 300
 packet-filter apply limit inbound
quit
interface GigabitEthernet1/0/11
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping rate-limit 300
 packet-filter apply limit inbound
quit

# G1/0/12 原Cisco dynamic desirable，H3C无DTP，手动trunk + arp detection trust
interface GigabitEthernet1/0/12
 port link-mode bridge
 port link-type trunk
 port trunk permit vlan all
 dhcp snooping trust
 arp detection trust
 packet-filter apply limit inbound
quit

# VLANIF三层接口
interface Vlan-interface1
 ip address 192.168.0.22 255.255.255.0
quit
interface Vlan-interface3
 ip address 192.168.1.251 255.255.255.0
 private-vlan 3
quit
interface Vlan-interface101
 description 1F
 ip address 192.168.101.1 255.255.255.0
quit
interface Vlan-interface102
 description 2F
 ip address 192.168.102.1 255.255.255.0
quit
interface Vlan-interface103
 description 3L
 ip address 192.168.103.1 255.255.255.0
quit
interface Vlan-interface104
 description 4F
 ip address 192.168.104.1 255.255.255.0
quit
interface Vlan-interface105
 description 5F
 ip address 192.168.105.1 255.255.255.0
quit
interface Vlan-interface106
 description 6F
 ip address 192.168.106.1 255.255.255.0
quit
interface Vlan-interface107
 description 7F
 ip address 192.168.107.1 255.255.255.0
quit
interface Vlan-interface108
 description 8F
 ip address 192.168.108.1 255.255.255.0
quit
interface Vlan-interface109
 description 9F
 ip address 192.168.109.1 255.255.255.0
quit
interface Vlan-interface110
 description 10F
 ip address 192.168.110.1 255.255.255.0
quit
interface Vlan-interface111
 description 11F
 ip address 192.168.111.1 255.255.255.0
quit
interface Vlan-interface999
 description GuanLi
 ip address 172.16.1.254 255.255.255.0
quit

# 默认路由
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1

# Web管理（等价ip http server / ip http secure-server）
ip http enable
ip https enable

# ACL：Cisco ip access-group limit in，H3C是packet-filter，需要你单独定义acl name limit
acl advanced name limit
# 这里按你原有思科limit ACL规则补齐
quit

# 线路vty登录
line vty 0 15
 password simple tjxxc
 authentication-mode password
quit
# 原思科vty5-15 no login，H3C vty统一，不需要单独关闭，上面这条就是全部vty用密码登录

# 补充：errdisable自动恢复【重点】
# H3C不能像思科一条命令全部开启，下面是常用错误down自动恢复，30秒
shutdown-interval storm-control 30
shutdown-interval bpdu-protection 30
shutdown-interval link-flap 30

补充注意事项

client-identifier 转换：思科01e8.fcaf.a01c.c3，01是以太网类型标记，H3C 写的时候去掉01，写成e8-fcaf-a01c-c3，否则绑定失败
PVLAN 的上行 Trunk 口，如果是跨设备 Trunk，接口需要配置 port private-vlan trunk promiscuous
原思科arp access-list exit没有实际匹配，H3C 可以直接删掉
如果你的 H3C 是 V5 版本（老平台），dhcp、snooping 命令有少量差异，我可以再给 V5 版本
原 Cisco ip classless 在 H3C 不需要，默认开启
原 Cisco vtp mode transparent H3C 不存在 VTP，直接忽略

编辑答案

分享扩散:

➤

网站相关: 关于我们; 服务条款; 隐私政策; 帮助中心; 经验与权限; 积分规则

联系我们: 联系我们; 建议反馈

常用链接: 标杆的神器下载

关注我们: H3C官网; 新华三服务公众号; 安仔远程运维服务; 新华三商城

内容许可: 除特别说明外，用户内容均可采用知识共享署名-相同方式共享3.0中国大陆许可协议进行许可

本图标版权归新华三集团所有，仅限本社区使用，切勿用做商业目的，违者必究

浙ICP备09064986号-1 浙公网安备 33010802004416号

✖

亲~登录后才可以操作哦!

确定

✖

亲~检测到您登陆的账号未在http://hclhub.h3c.com进行注册

注册后可访问此模块

跳转hclhub

✖

你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作

✖

侵犯我的权益 >

对根叔社区有害的内容 >

辱骂、歧视、挑衅等（不友善）

侵犯我的权益

泄露了我的隐私 >

侵犯了我企业的权益 >

抄袭了我的内容 >

诽谤我 >

辱骂、歧视、挑衅等（不友善）

骚扰我

泄露了我的隐私

您好，当您发现根叔知了上有泄漏您隐私的内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱，我们会尽快处理。

1. 您认为哪些内容泄露了您的隐私？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）

侵犯了我企业的权益

您好，当您发现根叔知了上有关于您企业的造谣与诽谤、商业侵权等内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到 pub.zhiliao@h3c.com 邮箱，我们会在审核后尽快给您答复。

1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
3. 是哪家企业？（营业执照，单位登记证明等证件）
4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）

我们认为知名企业应该坦然接受公众讨论，对于答案中不准确的部分，我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

抄袭了我的内容

原文链接或出处

诽谤我

您好，当您发现根叔知了上有诽谤您的内容时，您可以向根叔知了进行举报。请您把以下内容通过邮件发送到pub.zhiliao@h3c.com 邮箱，我们会尽快处理。

1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
2. 您是谁？（身份证明材料，可以是身份证或护照等证件）

我们认为知名企业应该坦然接受公众讨论，对于答案中不准确的部分，我们欢迎您以正式或非正式身份在根叔知了上进行澄清。

对根叔社区有害的内容

垃圾广告信息

色情、暴力、血腥等违反法律法规的内容

政治敏感

不规范转载 >

辱骂、歧视、挑衅等（不友善）

骚扰我

诱导投票

不规范转载

举报说明

产品线		搜索取消
案例类型
发布者
是否解决
是否官方
时间
搜索引擎
匹配模式	默认策略匹配全词匹配整句

思科3750配置翻译

问题描述：

补充注意事项

编辑答案

提出建议