H3C Switch Core Switch Configuration

Configuring an H3C core switch involves setting up management access, VLANs, routing, DHCP services, and security features to ensure reliable and secure network operation.

Step 1: Access the Switch

Connect to the H3C core switch using a PC with a terminal emulation program via console, SSH, or Telnet. Log in with administrator credentials to enter the command-line interface (CLI) or web-based management interface if supported .

Step 2: Configure Management IP

• Avoid using VLAN 1 as the management VLAN; create a dedicated management VLAN (e.g., VLAN 5).
• Assign an IP address to the management interface:

  CodeCopy interface Vlan-interface 5[Switch-Vlan5] ip address 192.168.1.1 255.255.255.0

• Enable Telnet or SSH for remote management:

  CodeCopy stelnet server enable rsa local-key-pair create ssh server enable

Step 3: Configure VLANs and Inter-VLAN Routing

• Create VLANs for different departments or services:

  CodeCopy vlan 10[Switch-vlan10] quit vlan 20[Switch-vlan20] quit

• Assign IP addresses to VLAN interfaces for Layer 3 connectivity:

  CodeCopy interface Vlan-interface 10[Switch-Vlan10] ip address 10.0.10.1 255.255.255.0 interface Vlan-interface 20[Switch-Vlan20] ip address 10.0.20.1 255.255.255.0

Step 4: Configure Spanning Tree Protocol (STP)

Enable STP to prevent loops and ensure network stability:

CodeCopy stp enable stp mode mstp

Optionally, configure parameters for RSTP or CSTP depending on network requirements .

Step 5: Configure Link Aggregation

Aggregate multiple physical links to increase bandwidth and provide redundancy:

CodeCopy interface Bridge-Aggregation 1[Switch-Bridge-Aggregation1] link-aggregation mode dynamic[Switch-Bridge-Aggregation1] quit

Step 6: Configure DHCP Server

• Enable DHCP on the core switch to assign IP addresses dynamically:

  CodeCopy dhcp enable ip pool DeptA[Switch-dhcp-pool-DeptA] network 10.0.10.0 mask 255.255.255.0[Switch-dhcp-pool-DeptA] gateway-list 10.0.10.1[Switch-dhcp-pool-DeptA] quit

• Repeat for other departments as needed .

Step 7: Configure Routing

• Set up a default route to the egress router for Internet access:

  CodeCopy ip route-static 0.0.0.0 0.0.0.0 192.168.1.254

• Ensure VLAN interfaces can communicate with each other for inter-department traffic.

Step 8: Enable Security Features

• DHCP Snooping on access switches to prevent rogue DHCP servers:

  CodeCopy dhcp snooping enable dhcp snooping trusted interface GigabitEthernet 0/0/1

• IP Source Guard (IPSG) to verify source IP and MAC addresses:

  CodeCopy ip source-guard enable interface GigabitEthernet 0/0/2[Switch-GigabitEthernet0/0/2] ip verify source

Step 9: Save Configuration

After completing all configurations, save the settings to prevent loss after a reboot:

CodeCopy save

Additional Tips

• Use separate VLANs for management and user traffic to enhance security.
• Regularly update firmware and backup configurations.
• Monitor the network using built-in commands like display vlan, display ip routing-table, and display dhcp server to verify proper operation . Following these steps ensures that your H3C core switch is properly configured for a campus or enterprise network, providing high availability, secure DHCP services, inter-VLAN routing, and protection against network threats .