神州數(shù)碼交換機(jī)路由器命令匯總(最簡(jiǎn)輸入版)

1、青島開發(fā)區(qū)職業(yè)中專神州數(shù)碼交換機(jī)路由器命令匯總(部分)2016年3月23日星期三修改_注：本文檔命令為最簡(jiǎn)命令，如不懂請(qǐng)?jiān)跈C(jī)器上實(shí)驗(yàn)注：交換機(jī)版本信息：DCRS-5650-28(R4) Device, Compiled on Aug 12 10:58:26 2013sysLocation ChinaCPU Mac 00:03:0f:24:a2:a7Vlan MAC 00:03:0f:24:a2:a6SoftWare Version 7.0.3.1(B0043.0003)BootRom Version 7.1.103HardWare Version 2.0.1CPLD Version N/ASe

2、rial No.:1Copyright (C) 2001-2013 by Digital China Networks Limited.All rights reservedLast reboot is warm reset.Uptime is 0 weeks, 0 days, 1 hours, 42 minutes路由器版本信息：Digital China Networks Limited Internetwork Operating System SoftwareDCR-2659 Series Software, Version 1.3.3H (MIDDLE), RELEASE SOFTW

3、ARECopyright 2012 by Digital China Networks(BeiJing) LimitedCompiled: 2012-06-07 11:58:07 by system, Image text-base: 0x6004ROM: System Bootstrap, Version 0.4.2Serial num:8IRTJ610CA15000001, ID num:201404System image file is "DCR-2659_1.3.3H.bin"Digital China-DCR-2659 (PowerPC) Processor65

4、536K bytes of memory,16384K bytes of flashRouter uptime is 0:00:44:44, The current time: 2002-01-01 00:44:44Slot 0: SCC Slot Port 0: 10/100Mbps full-duplex Ethernet Port 1: 2M full-duplex Serial Port 2: 2M full-duplex Serial Port 3: 1000Mbps full-duplex Ethernet Port 4: 1000Mbps full-duplex Ethernet

5、 Port 5: 1000Mbps full-duplex Ethernet Port 6: 1000Mbps full-duplex Ethernet一、交換機(jī)配置命令1.基本配置switch > en （enable）進(jìn)入特權(quán)用戶模式switch # con (config) 進(jìn)入全局配置模式switch (config)# ho switch (hostname) 配置交換機(jī)名稱switch (config)# in e1/0/1 進(jìn)入接口配置模式switch (config-if-ethernet1/0/1)# exswitch (config)# in vl 1 進(jìn)入VLAN配

6、置模式switch (config-if-vlan1)# ipad 192.168.1.252255.255.255.0輸入這條命令會(huì)出現(xiàn): Invalid ENCRYPTED password! Please input the ENCRYPTED password with length 32 密碼位數(shù)不夠32位switch (config-if-vlan1)# exswitch (config)# ena p 1234 配置交換機(jī)密碼(不加密)switch (config)# ena p 7 1234 配置交換機(jī)密碼（加密）switch (config)# vl 10 創(chuàng)建vlanswi

7、tch (config-vlan10)#exswitch (config)# in vl 10switch (config-if-vlan10)# ip ad 172.16.10.1 255.255.255.0 配置VLAN地址2.生成樹技術(shù)switch (config)# sp (spanning-tree) 啟用全局生成樹（默認(rèn)mstp生成樹技術(shù)）switch (config)# sp mo stp/rstp /mstp (生成樹/快速生成樹/多生成樹技術(shù))switch (config)# sp ms 0 p 4096 設(shè)置交換機(jī)的優(yōu)先級(jí) 默認(rèn)32768switch (config)# s

8、h sp (show spanning-tree) 查看生成樹3.交換機(jī)Web管理switch (config)# ip ht serswitch (config)# usern admin pa 1234 用戶名和密碼4.交換機(jī)Telnet管理switch (config)# telnet-s e (telnet enable) 開啟telnet服務(wù)switch (config)# usern admin pa 1234 用戶名和密碼5.鏈路聚合(不需啟動(dòng)生成樹)第 8 頁 共 8 頁switchA (config)# port-g 1 (prot-group)switchA (config

9、)# in e1/0/1-2switchA (config-port-range)# po 1 m on/activeswitchA (config-port-range)# exswitchA (config)# no port-g 1 刪除組1switchB (config)# port-g 2switchB (config)# in e1/0/3-4switchB (config-port-range)# po 2 m on/activeswitchB (config-port-range)# exswitchB (config)# no port-g 2 刪除組26.交換機(jī)MAC與IP

10、綁定switch (config)# am e (am enable) 啟用全局am功能 switch (config)# in e1/0/1switch (config_if_ethernet1/0/1)# am p (am port) 打開端口am功能switch (config_if_ethernet1/0/1)# am m (mac-ip-pool) 00-A0-D1-D1-07-FF 192.168.1.101switch (config_if_ethernet1/0/1)# exswitch (config)# in e1/0/2switch (config_if_ethernet

11、1/0/2)# no am p 解鎖端口7.交換機(jī)MAC與IP綁定靜態(tài)綁定switch (config)# in e1/0/1switch (config_if_ethernet1/0/1)# sw p (port-security) 開啟綁定功能switch (config_if_ethernet1/0/1)# sw p mac 00-a0-d1- d1-07-ff 添加靜態(tài)MAC地址switch (config_if_ethernet1/0/1)# sw p max 4 綁定MAC地址的個(gè)數(shù)（默認(rèn)為1）動(dòng)態(tài)綁定 (實(shí)驗(yàn)中交換機(jī)沒有動(dòng)態(tài)綁定命令)switch (config)# in e1/

12、0/1switch (config_if_ethernet1/0/1)# sw p (port-security) 開啟綁定功能switch (config_if_ethernet1/0/1)# sw port-security lock switch (config_if_ethernet1/0/1)# sw port-security convert 將動(dòng)態(tài)學(xué)習(xí)到綁定MAC的進(jìn)行綁定 switch # sh port-s add 查看綁定的地址8.交換機(jī)DHCP服務(wù)器配置switch (config)# service dhcp 啟用DHCPswitch (config)# ip dh p

13、o poolA 定義地址池poolAswitch (dhcp-poolA- config)# netw (network-address) 192.168.1.0 24switch (dhcp-poolA- config)# de (default-router) 192.168.1.254 網(wǎng)關(guān)switch (dhcp-poolA- config)# dn 60.191.244.5 DNS服務(wù)器switch (dhcp-poolA- config)# le 3 租期3天switch (dhcp-poolA- config)# exswitch (config)# ip dh ex (excl

14、uded-add) 192.168.1.252 192.168.1.254 排除地址范圍9.保留地址（一個(gè)地址池中只能配一個(gè)IP-MAC的綁定）switch (config)# ip dh po poolCswitch (dhcp-poolC- config)# ho 192.168.1.100 綁定的IP地址switch (dhcp-poolC- config)# ha (hardware-add) 00-a0-d1- d1-07-ff 綁定的MAC地址switch (dhcp-poolC- config)# de 192.168.1.254 網(wǎng)關(guān)10.ACL訪問控制列表switchA (c

15、onfig)# ip ac s (standard) test 命名標(biāo)準(zhǔn)IP訪問列表switchA (config-std-nacl-test)# d (deny) 192.168.100.0 0.0.0.255 反子網(wǎng)掩碼 （路由器上為子網(wǎng)掩碼）switchA (config-std-nacl-test)# d 192.168.200.0 0.0.0.255switchA (config-std-nacl-test)# p (permit) a (permit any) 允許所有switchA (config-std-nacl-test)# exswitchA (config)# fir e

16、 (firewall enable) 開啟ACL功能switchA (config)# in e1/0/1 switchA (config-if-interface1/0/1)# ip ac (access-group) test in/out 進(jìn)in出out （二層交換機(jī)上不支持out）11.配置時(shí)間范圍switchA (config)# time-r worktime switchA (config-time-range)# p (periodic) weekd 9:0:0 to 18:0:012.VRRP虛擬路由器冗余協(xié)議 Master BackupswitchA (config)# r

17、outerv 1 switchB (config_router)# router v 1switchA (config_router)# v (virtual-ip) 192.168.1.254 switchB (config_router)# v 192.168.1.254switchA (config_router)# i v 1 (interface vlan 1) switchB (config_router)# i v 1switchA (config_router)# pri 110 switchB (config_router)# enaswitchA (config_route

18、r)# c (circuit-failover) v 10 20switchA (config_router)# ena13.DHCP中繼DHCP_relay (config)# service dhcp 全局開啟DHCP服務(wù)DHCP_relay (config)# ip fo u b (ip forward-protocol udp bootps) 全局開啟轉(zhuǎn)發(fā)DHCP_relay (config)# in vl 10DHCP_relay (config-if-vlan10)# ip h 172.16.1.1 轉(zhuǎn)發(fā)到DHCP服務(wù)器地址14.DHCP偵聽DHCP (config)# servi

19、ce dhcpDHCP (config)# ip dh sn e 開啟DHCP偵聽功能DHCP (config)# in e1/0/1DHCP (config-if-ethernet1/0/1)# ip d s t (ip dhcp snooping trust)設(shè)置上聯(lián)口為信任口15.端口隔離Switch (config)# isgtestsie1/0/1-2 (isolate-port group test switchport interface e1/0/1-2)e1/0/1-2口不能互相通信，可以和其它端口通信。16.端口鏡像Switch (config)# mos1sie1/0/1

20、 both/rx/tx/access-l (monitor session 1 source interface e1/0/1)Switch (config)# mos1die1/0/2 (monitor session 1 destination interface e1/0/2)Source為被鏡像的地址 Destination為鏡像到的地址 both為全部流量 rx為接收 tx為發(fā)送17.端口限速Switch (config)# in e1/0/1Switch (config-if-ethernet1/0/1)# ba c 10000 both/receive/transmit (ban

21、dwidth control)18.ARP攻擊防護(hù)Switch (config)# in e1/0/1Switch (config-if-ethernet1/0/1)# ari192.168.1.254 (arp-guard ip) 綁定網(wǎng)關(guān)IPSwitch (config-if-ethernet1/0/1)# exSwitch (config)# an e (anti-arpscan enable) 開啟防ARP掃描Switch (config)# an r e (anti-arpscan recovery enable) 開啟自動(dòng)恢復(fù)Switch (config)# an r t 3600

22、 (anti-arpscan recovery time) 設(shè)置自動(dòng)恢復(fù)時(shí)間(單位:秒)Switch (config)# in e1/0/1Switch (config-if-ethernet1/0/1)# an t s (anti-arpscan trust supertrust-port) 設(shè)置上聯(lián)口為超級(jí)信任端口19.QOS的PBRSwitch (config)# ip ac e routeSwitch (config-ip-ext-nacl-route)# p ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255Switch (config-ip

23、-ext-nacl-route)# exSwitch (config)# cla map (class-map map)Switch (config-classmap-map)# m a route (match access-group)Switch (config-classmap-map)# exSwitch (config)# pol map (policy-map)Switch (config-policymap-map)# c map (class)Switch (config-policymap-map-class-map)# se ip n 192.168.1.2 設(shè)置下一跳地

24、址Switch (config-policymap-map-class-map)# exSwitch (config-policymap-map)# exSwitch (config)# in e1/0/1Switch (config-if-ethernet1/0/1)# ser input/output map 應(yīng)用在接口下20.清空交換機(jī)配置Switch # set d (default)恢復(fù)出廠配置Switch # wr (write)保存配置Switch # rel (reload)重啟交換機(jī)_二、路由器配置命令1.基本配置Router> ena 進(jìn)入特權(quán)用戶模式 Router#

25、 conf 進(jìn)入全局配置模式Router_config# in f0/0 Router_config_f0/0# ip ad 10.1.1.1 255.255.255.0 配置路由器端口地址2.路由器之間的連接=默認(rèn)HDLC封裝RA_config# in s0/2 (DCE/V35FC)RA_config_s0/2# ip ad 192.168.1.1 255.255.255.0RA_config_s0/2# ph sp 64000 (physical-layer speed) 配置端口速率（只在DCE端）RB_config# in s0/1 (DTE/V35FC)RB_config_s0/1

26、# ip ad 192.168.1.2 255.255.255.0=PPP封裝RA_config# in s0/2 (DCE/V35FC)RA_config_s0/2# ip ad 192.168.1.1 255.255.255.0RA_config_s0/2# enc p PPP封裝RA_config_s0/2# ph sp 64000 配置端口速率（只在DCE端）RB_config# in s0/1 (DTE/V35FC)RB_config_s0/1# ip ad 192.168.1.2 255.255.255.0RB_config_s0/1# enc p PPP封裝=PPP封裝CHAP認(rèn)

27、證RA_config# u userb pa 123456 (username password)對(duì)方用戶名和密碼RA_config# aa authe pp d local 本地認(rèn)證 RA_config# in s0/2 (DCE/V35FC)RA_config_s0/2# ip ad 192.168.1.1 255.255.255.0RA_config_s0/2# enc p PPP封裝RA_config_s0/2# pp authe c CHAP認(rèn)證RA_config_s0/2# pp ch h usera 發(fā)送自己的用戶名RA_config_s0/2# pp ch p 123456 發(fā)

28、送自己的密碼RA_config_s0/2# ph sp 64000 配置端口速率（只在DCE端）RA發(fā)送的用戶名和密碼需與RB建立的用戶名密碼一致。RB_config# u usera pa 123456 對(duì)方用戶名和密碼RB_config# aa authe pp d local 本地認(rèn)證 RB_config# in s0/1 (DTE/V35MT)RB_config_s0/1# ip ad 192.168.1.2 255.255.255.0RB_config_s0/1# enc p PPP封裝RB_config_s0/1# pp authe c CHAP認(rèn)證RB_config_s0/1#

29、pp ch h userb 發(fā)送自己的用戶名RB_config_s0/1# pp ch p 123456 發(fā)送自己的密碼=PPP封裝PAP認(rèn)證配置方法同CHAP認(rèn)證RA_config_s0/2# enc p PPP封裝RA_config_s0/2# pp authe p PAP認(rèn)證RA_config_s0/2# pp pap s usera 123456 發(fā)送自己的用戶名和密碼RB_config_s0/1# enc pRB_config_s0/1# pp authe pRB_config_s0/1# pp pap s userb 123456=3.NAT地址轉(zhuǎn)換RouterA_config#

30、ip ac s nat (ip access-list standard) 定義訪問控制列表RouterA_config_std_nacl# p 192.168.0.0 255.255.255.0 定義允許轉(zhuǎn)換的地址范圍RouterA_config_std_nacl# exRouterA_config# ip n p poolA 192.168.1.10 192.168.1.20 255.255.255.0 定義轉(zhuǎn)換地址池poolARouterA_config# ip n i s l nat p poolA o (ip nat inside source list nat pool poolA

31、 overload)地址轉(zhuǎn)換RouterA_config# in f0/0RouterA_config_f0/0# ip n i 定義f0/0為內(nèi)部接口RouterA_config_f0/0# in s0/1RouterA_config_s0/1# ip n o 定義s0/1為外部接口4.靜態(tài)路由Router_config# ip route 10.1.2.0 (目標(biāo)網(wǎng)段) 255.255.255.0（子網(wǎng)掩碼） 10.1.1.2 （轉(zhuǎn)發(fā)地址）Router_config# ip route 0.0.0.0 (目標(biāo)網(wǎng)段) 0.0.0.0（子網(wǎng)掩碼） 10.1.1.2（轉(zhuǎn)發(fā)地址）默認(rèn)靜態(tài)路由5.R

32、IP動(dòng)態(tài)路由Router_config# routerr 啟用RIP路由Router_config_rip# ve 2RIP路由版本號(hào) 2Router_config_rip# no a (auto-summary) 關(guān)閉路由自動(dòng)匯總功能Router_config_rip# net 10.1.1.0 255.255.255.0 Router_config_rip# net 10.1.2.0 255.255.255.0 與路由器相連的網(wǎng)段6.OSPF動(dòng)態(tài)路由Router_config# routero1 啟動(dòng)ospf進(jìn)程，進(jìn)程號(hào)為1Router_config_ospf_1# router-1.1.

33、1.1 (router-id) 設(shè)置路由器router-idRouter_config_ospf1# net 10.1.1.0 255.255.255.0 a 0 網(wǎng)段、子網(wǎng)掩碼和區(qū)域號(hào)Router_config_ospf1# net 10.1.2.0 255.255.255.0 a 0 第一個(gè)區(qū)域（即主干區(qū)域）區(qū)域號(hào)為 0Router_config_ospf1# Ctrl+z 退到特權(quán)模式快捷鍵 Ctrl+Z Router# sh ip ro 查看路由7.ACL訪問控制列表標(biāo)準(zhǔn)訪問控制列表Router_config# ip ac s accessRouter_config_std_nacl# den 192.168.1.0 255.255.255.0 (路由器為子網(wǎng)掩碼)Router_config_std_n