Monday, March 19, 2012

Dhcp on Hp h3c switch

On hp h3c devices .

#
Dhcp enable
#
-----------------------------------------
#
dhcp relay server-group 1 ip 10.96.59.4
#
=============================================
#
interface Vlan-interface861
ip address 10.96.92.254 255.255.255.0
dhcp select relay
dhcp relay server-select 1
#

=============================================
 DHCP services  for msr 20-11

#
Create vlan for dhcp services

interface Vlan-interface2
 ip address 192.168.1.1 255.255.255.0
#
#
Create dhcp pool for Vlan 2 and link to 192.168.1.1 ip address

dhcp server ip-pool 1
 network 192.168.1.0 mask 255.255.255.0
 gateway-list 192.168.1.1
 dns-list 208.67.222.222
#

interface Vlan-interface2
 ip address 192.168.1.1 255.255.255.0
#
return

#
Assing vlan to interface.

[Air]interface Vlan-interface 2
[Air-Vlan-interface2]qu
[Air]vlan 2
[Air-vlan2] port ?
  Ethernet  Ethernet interface
[Air-vlan2] port Ethernet 0/1 to Ethernet 0/4
[Airl-vlan2]
#
[Air]dis arp
                Type: S-Static    D-Dynamic    A-Authorized
IP Address       MAC Address     VLAN ID  Interface              Aging Type
192.168.1.2      60eb-699a-e74f  2        Eth0/1                 16    D
#

Wednesday, March 14, 2012

Qos with acl in hp


Create the ACL with the Desired rules that needs to be implemented for specific port /vlan and restrict  permit the access.

acl number 3002
 rule 1 deny icmp source 10.96.78.33 0 destination 10.96.55.1 0
 rule 2 deny tcp source 10.96.78.33 0 destination 10.96.55.1 0 destination-port eq www


once the ACL is created to apply we need to use the QOS command to apply the settings onto the ports /vlans.

Need to create the classifier and apply the rule into it.


traffic classifier dropvlan operator and
 if-match acl 3002



create the behavior and apply the rule into it.

traffic behavior dropvlan
 filter deny


Create the QOS policy and apply the rule into it.


qos policy dropvlan
 classifier dropvlan behavior dropvlan

Enforce the QOS on the port./for vlan

interface GigabitEthernet3/0/27
 port access vlan 833
 qos apply policy dropvlan inbound

For Vlan :- qos vlan-policy dropvlan vlan 22 inbound

Monday, March 12, 2012

Interface Range command in HP


HP commands

<slave1>sys
[slave1]#vlan 122
[slave1]#port GigabitEthernet3/0/10 to GigabitEthernet3/0/25
[slave1]#save
All the ports will be assign Vlan 122 .it is not equal to port range command in Cisco devices  

 Cisco commands
Switch(config)#interface range fastethernet0/1 – 20
Switch(config-if-range)#speed 100
Switch(config-if-range)#duplex full
Router(config)# interface range fastethernet5/1.1 - fastethernet5/1.4
Router(config-if)# encapsulation dot1Q 301
Router(config-if)# no shutdown
Router(config-if)#

Friday, March 2, 2012

H3C Shortcut Keys


Like many things in the H3C world. Shortcut keys are not well documented


Ctrl-K
display ip routing-table
Ctrl-O
undo debugging all
Ctrl-G
display current-configuration
Ctrl-A
Beginning of Command Line
Ctrl-E
End of Command Line
Ctrl-N
Next Command in the history buffer
Ctrl-P
Previous Command in the history buffer

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...