F100 存储空间设置

你可以找一台点完，看下有没有生成对应的命令行，然后复制黏贴

这个应该是没有

您好，没办法，需要一台一台设置

华三F100防火墙确实支持通过命令行批量修改日志保存周期。以下是详细的批量配置方案：
一、命令行批量配置方案
方案1：通过系统视图批量设置（推荐）
# 进入系统视图
system-view

# 1. 批量设置系统日志保存周期
info-center logfile save-duration 36500

# 2. 批量设置流量日志保存周期
info-center flow-log save-duration 36500

# 3. 批量设置安全策略日志保存周期
info-center security-policy-log save-duration 36500

# 4. 批量设置NAT日志保存周期
info-center nat-log save-duration 36500

# 5. 批量设置应用审计日志保存周期
info-center app-audit-log save-duration 36500

# 6. 批量设置URL过滤日志保存周期
info-center url-filter-log save-duration 36500

# 7. 批量设置威胁日志保存周期
info-center threat-log save-duration 36500

# 8. 批量设置配置日志保存周期
info-center configuration-log save-duration 36500

# 设置存储空间上限比例（全局设置）
info-center logfile limit 50
方案2：通过日志类型组批量设置
如果您的设备软件版本支持，可以使用更智能的批量方式：
system-view
# 创建一个日志策略模板
log policy-template bulk_setting
save-duration 36500
limit 50
quit

# 将模板应用到多个日志模块
info-center apply policy-template bulk_setting module system
info-center apply policy-template bulk_setting module flow
info-center apply policy-template bulk_setting module security-policy
info-center apply policy-template bulk_setting module nat
info-center apply policy-template bulk_setting module url-filter
info-center apply policy-template bulk_setting module app-audit
info-center apply policy-template bulk_setting module threat
# 继续应用到其他模块...
二、批量部署脚本（多台设备配置）
方法1：通过Tcl脚本批量配置
创建脚本文件 batch_set_log_retention.tcl：
#!/usr/bin/tclsh
# 批量配置F100日志保存周期脚本

set devices {
"10.1.1.1"
"10.1.1.2"
"10.1.1.3"
"10.1.1.4"
}

set username "admin"
set password "your_password"

foreach device $devices {
puts "正在配置设备: $device"

# 建立SSH连接（需要tcllib支持）
set chan [open "|plink -ssh $device -l $username -pw $password" r+]

# 发送配置命令
puts $chan "system-view"
puts $chan "info-center logfile save-duration 36500"
puts $chan "info-center flow-log save-duration 36500"
puts $chan "info-center security-policy-log save-duration 36500"
puts $chan "info-center nat-log save-duration 36500"
puts $chan "info-center app-audit-log save-duration 36500"
puts $chan "info-center url-filter-log save-duration 36500"
puts $chan "info-center threat-log save-duration 36500"
puts $chan "info-center configuration-log save-duration 36500"
puts $chan "info-center logfile limit 50"
puts $chan "save force"
puts $chan "quit"
puts $chan "quit"

flush $chan
close $chan

puts "设备 $device 配置完成\n"
}
方法2：通过Python脚本批量配置（推荐）
#!/usr/bin/env python3
"""
批量配置H3C F100日志保存周期
需要安装：paramiko
pip install paramiko
"""

import paramiko
import time
from getpass import getpass

# 设备列表
devices = [
{"host": "10.1.1.1", "port": 22, "username": "admin", "password": "password1"},
{"host": "10.1.1.2", "port": 22, "username": "admin", "password": "password2"},
# 添加更多设备...
]

# 配置命令列表
config_commands = [
"system-view",
"info-center logfile save-duration 36500",
"info-center flow-log save-duration 36500",
"info-center security-policy-log save-duration 36500",
"info-center nat-log save-duration 36500",
"info-center app-audit-log save-duration 36500",
"info-center url-filter-log save-duration 36500",
"info-center threat-log save-duration 36500",
"info-center configuration-log save-duration 36500",
"info-center session-log save-duration 36500", # 会话日志
"info-center acl-log save-duration 36500", # ACL日志
"info-center logfile limit 50", # 存储上限50%
"save force",
"quit"
]

def configure_device(host, port, username, password):
"""配置单个设备"""
print(f"正在连接设备: {host}")

try:
# 创建SSH客户端
ssh = paramiko.SSHClient()
ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())

# 连接设备
ssh.connect(hostname=host, port=port, username=username, password=password,
look_for_keys=False, allow_agent=False, timeout=10)

# 获取交互式shell
shell = ssh.invoke_shell()
time.sleep(1)

# 清空缓冲区
output = shell.recv(65535).decode('utf-8', errors='ignore')

# 逐条发送配置命令
for cmd in config_commands:
shell.send(cmd + '\n')
time.sleep(0.5)
output = shell.recv(65535).decode('utf-8', errors='ignore')

# 检查错误
if "Error:" in output or "Invalid" in output:
print(f" 命令执行错误: {cmd}")
print(f" 错误输出: {output[-200:]}")

# 关闭连接
shell.close()
ssh.close()

print(f" 设备 {host} 配置完成")
return True

except Exception as e:
print(f" 设备 {host} 配置失败: {str(e)}")
return False

def main():
"""主函数"""
print("开始批量配置F100日志保存周期...")
print("=" * 50)

success_count = 0
fail_count = 0

for device in devices:
result = configure_device(
device["host"],
device["port"],
device["username"],
device["password"]
)

if result:
success_count += 1
else:
fail_count += 1

print("-" * 30)

print("=" * 50)
print(f"配置完成！成功: {success_count}台, 失败: {fail_count}台")

if __name__ == "__main__":
main()
方法3：通过Expect脚本（Linux/Unix环境）
#!/usr/bin/expect
# 文件名: batch_configure_f100.exp
# 用法: ./batch_configure_f100.exp device_list.txt

set timeout 30
log_user 0

# 从命令行参数获取设备列表文件
set device_file [lindex $argv 0]

# 读取设备列表
set fp [open $device_file r]
set devices [split [read $fp] "\n"]
close $fp

# 配置命令
set commands {
"system-view"
"info-center logfile save-duration 36500"
"info-center flow-log save-duration 36500"
"info-center security-policy-log save-duration 36500"
"info-center nat-log save-duration 36500"
"info-center app-audit-log save-duration 36500"
"info-center url-filter-log save-duration 36500"
"info-center threat-log save-duration 36500"
"info-center configuration-log save-duration 36500"
"info-center logfile limit 50"
"save force"
"quit"
}

foreach device_line $devices {
if {[string length $device_line] == 0} { continue }

# 解析设备信息 (格式: IP 用户名 密码)
set device_info [split $device_line " "]
set host [lindex $device_info 0]
set username [lindex $device_info 1]
set password [lindex $device_info 2]

puts "\n正在配置设备: $host"

spawn ssh -o StrictHostKeyChecking=no $username@$host

expect {
"assword:" {
send "$password\r"
}
timeout {
puts "连接超时"
continue
}
}

expect ">"

# 发送配置命令
foreach cmd $commands {
send "$cmd\r"
expect {
">|#" { }
"Error:" {
puts "命令错误: $cmd"
send "quit\r"
break
}
timeout {
puts "命令超时: $cmd"
send "\x03" # Ctrl+C
send "quit\r"
break
}
}
}

send "quit\r"
expect eof
puts "设备 $host 配置完成"
}
三、快速配置命令集（复制粘贴用）
这是最简化的命令行配置，可以直接复制到每台设备的SSH会话中：
system-view
info-center logfile save-duration 36500
info-center flow-log save-duration 36500
info-center security-policy-log save-duration 36500
info-center nat-log save-duration 36500
info-center app-audit-log save-duration 36500
info-center url-filter-log save-duration 36500
info-center threat-log save-duration 36500
info-center configuration-log save-duration 36500
info-center session-log save-duration 36500
info-center acl-log save-duration 36500
info-center url-log save-duration 36500
info-center bandwidth-alarm-log save-duration 36500
info-center ip-access-log save-duration 36500
info-center mac-access-log save-duration 36500
info-center logfile limit 50
save force
四、验证配置命令
配置完成后，可以使用以下命令验证：
# 查看所有日志保存周期设置
display info-center logfile

# 查看各模块日志状态
display info-center

# 查看存储空间使用情况
dir flash:/
display logfile summary

# 查看当前配置中关于日志周期的设置
display current-configuration | include save-duration
五、批量配置最佳实践
1. 准备工作
# 在所有设备上先备份当前配置
display current-configuration
# 或
display saved-configuration
2. 创建设备清单文件
# devices.csv
10.1.1.1,admin,password123
10.1.1.2,admin,password456
10.1.1.3,admin,password789
3. 使用Ansible批量配置（高级）
创建Ansible Playbook文件 h3c_f100_log_setup.yml：
---
- name: 批量配置H3C F100日志保存周期
hosts: h3c_f100_devices
gather_facts: no
vars:
ansible_connection: network_cli
ansible_network_os: h3c
ansible_become: yes
ansible_become_method: enable

tasks:
- name: 配置日志保存周期
cli_config:
commands:
- info-center logfile save-duration 36500
- info-center flow-log save-duration 36500
- info-center security-policy-log save-duration 36500
- info-center nat-log save-duration 36500
- info-center app-audit-log save-duration 36500
- info-center url-filter-log save-duration 36500
- info-center threat-log save-duration 36500
- info-center configuration-log save-duration 36500
- info-center logfile limit 50

- name: 保存配置
cli_command:
command: save force
六、注意事项
存储空间考虑：36500天（约100年）的设置会占用大量存储空间，请确保设备有足够存储
性能影响：日志量过大可能影响设备性能
版本兼容性：不同版本的Comware可能有命令差异
备份配置：批量修改前务必备份原始配置
测试验证：先在一台测试设备上验证命令有效性
分批执行：如果设备数量多，建议分批次执行，避免同时操作
七、故障排查
如果批量配置失败，检查以下问题：
# 1. 检查SSH服务是否开启
display ip int brief

# 2. 检查用户权限
display local-user

# 3. 检查命令是否支持
display version
# 查看软件版本，确认支持info-center命令

# 4. 检查存储空间
dir flash:/
# 确保有足够空间存储日志
通过上述批量配置方法，您可以快速高效地为多台F100防火墙设置统一的日志保存周期，无需在Web界面上逐个修改。