华三防火墙实用操作
查看邻居
[JN-FW-01]lldp global enable
[JN-FW-01]dis lldp neighbor-information list
Chassis ID : * -- -- Nearest nontpmr bridge neighbor
# -- -- Nearest customer bridge neighbor
Default -- -- Nearest bridge neighbor
System Name Local Interface Chassis ID Port ID
JN-FW-01-NeiWang GE1/0/1 a4fa-763e-4ab4 GigabitEthernet1/0/2
解释一下，JN-FW-01是物理防火墙的名字，而JN-FW-01-NeiWang指的是与之相邻防火墙的名字，G1/0/1指的是本地与相邻防火墙相连的接口，最后的G1/0/2指的是邻居防火墙与之相连的接口，而最后一行的MAC地址是谁的呢？是对方的。
通过dis arp可查看arp地址表，从而确认自已和对方的MAC地址。
[JN-FW-01]dis lldp neighbor-information verbose
LLDP neighbor-information of port 2[GigabitEthernet1/0/1]:
LLDP agent nearest-bridge:
LLDP neighbor index : 1
Update time : 133 days, 4 hours, 35 minutes, 44 seconds
Chassis type : MAC address
Chassis ID : a4fa-763e-4ab4
Port ID type : Interface name
Port ID : GigabitEthernet1/0/2
Time to live : 121
Port description : to AC-FW
System name : JN-FW-01-NeiWang
System description : H3C Comware Software. Software Version 7.1.064, Release 9
333P22
H3C SecPath F1000 Context
Copyright (c) 2004-2019 New H3C Technologies Co., Ltd. Al
l rights reserved.
System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge
System capabilities enabled : Bridge, Router, Customer Bridge
Management address type : IPv4
Management address : 192.168.1.3
Management address interface type : IfIndex
Management address interface ID : 3
Management address OID : 0
Link aggregation supported : Yes
Link aggregation enabled : No
Aggregation port ID : 0
Auto-negotiation supported : Yes
Auto-negotiation enabled : No
OperMau : Speed(1000)/Duplex(Full)
Power port class : PD
PSE power supported : No
PSE power enabled : No
PSE pairs control ability : No
Power pairs : Signal
Port power classification : Class 0
Maximum frame size : 1600
虚拟化
[JN-FW-01]dis context
ID Name Status Description
1 Admin active DefaultContext
2 NeiWang active
Total contexts:2
[JN-FW-01]context NeiWang #切换到另一台防火墙
[JN-FW-01-context-2-NeiWang]dis th
#
context NeiWang id 2 vlan-unshared
context start
allocate interface GigabitEthernet1/0/2 to GigabitEthernet1/0/4 # 再次敲此命令是追加之意，并不是覆盖
#
return
//追加示例
context H3C-context-4-Company_C
[H3C-context-4-Company_C]allocate interface gigabitethernet 1/0/5 gigabitethernet 1/0/6
Configuration of the interfaces will be lost. Continue? [Y/N]:Y
[H3C-context-4-Company_C]quit
在做重大变更之后，应该下刷防火墙配置到硬盘，在内存里面修改，一旦修改失误，重启即可恢复。
保存
[JN-FW-01]write force
Validating file. Please wait...
Saved the current configuration to mainboard device successfully.