路由命令華為交換

1、PCAlogin:root；使用root用戶password:linux；口令是linux#shutdown-hnow；關(guān)機(jī)#init0；關(guān)機(jī)#logout；用戶注銷(xiāo)#login；用戶登錄#ifconfig；顯示IP地址#ifconfigeth0netmask；設(shè)置IP地址#ifconfigeht0netmaskdown；禁用IP地址#routeaddgw；設(shè)置網(wǎng)關(guān)#routedelgw；刪除網(wǎng)關(guān)#routeadddefaultgw；設(shè)置網(wǎng)關(guān)#routedeldefaultgw；刪除網(wǎng)關(guān)#route；顯示網(wǎng)關(guān)#ping；發(fā)ECHO包#telnet；遠(yuǎn)程登錄華為路由器

2、交換機(jī)配置命令：交換機(jī)命令Quidwaydiscur；顯示當(dāng)前配置Quidwaydisplaycurrent-configuration；顯示當(dāng)前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayvlanall；顯示路由信息Quidwaydisplayversion；顯示版本信息Quidwaysuperpassword；修改特權(quán)用戶密碼Quidwaysysname；交換機(jī)命名Quidwayinterfaceethernet0/1；進(jìn)入接口視圖Quidwayinterfacevlanx；進(jìn)入接口視圖Quidway-Vlan-interfacexipad

3、dress；配置VLAN的IP地址Quidwayiproute-static；靜態(tài)路由網(wǎng)關(guān)Quidwayrip；三層交換支持Quidwaylocal-userftpQuidwayuser-interfacevty04；進(jìn)入虛擬終端S3026-ui-vty0-4authentication-modepassword；設(shè)置口令模式S3026-ui-vty0-4setauthentication-modepasswordsimple222；設(shè)置口令S3026-ui-vty0-4userprivilegelevel3

4、；用戶級(jí)別Quidwayinterfaceethernet0/1；進(jìn)入端口模式Quidwayinte0/1；進(jìn)入端口模式Quidway-Ethernet0/1duplexhalf|full|auto；配置端口工作狀態(tài)Quidway-Ethernet0/1speed10|100|auto；配置端口工作速率Quidway-Ethernet0/1flow-control；配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal；配置端口平接扭接Quidway-Ethernet0/1portlink-typetrunk|access|hybrid；設(shè)置端口工作模式Q

5、uidway-Ethernet0/1portaccessvlan3；當(dāng)前端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All；設(shè)trunk允許的VLANQuidway-Ethernet0/3porttrunkpvidvlan3；設(shè)置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown；激活端口Quidway-Ethernet0/1shutdown；關(guān)閉端口Quidway-Ethernet0/1quit；返回Quidwayvlan3；創(chuàng)建VLANQuidway-vlan3portethernet0/1；在VL

6、AN中增加端口Quidway-vlan3porte0/1；簡(jiǎn)寫(xiě)方式Quidway-vlan3portethernet0/1toethernet0/4；在VLAN中增加端口Quidway-vlan3porte0/1toe0/4；簡(jiǎn)寫(xiě)方式Quidwaymonitor-port；指定鏡像端口Quidwayportmirror；指定被鏡像端口Quidwayportmirrorint_listobserving-portint_typeint_num；指定鏡像和被鏡像Quidwaydescriptionstring；指定VLAN描述字符Quidwaydescription；刪除VLAN描述字符Quidw

7、aydisplayvlanvlan_id；查看VLAN設(shè)置Quidwaystpenable|disable；設(shè)置生成樹(shù),默認(rèn)關(guān)閉Quidwaystppriority4096；設(shè)置交換機(jī)的優(yōu)先級(jí)Quidwaystprootprimary|secondary；設(shè)置為根或根的備份Quidway-Ethernet0/1stpcost200；設(shè)置交換機(jī)端口的花費(fèi)Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口為通道號(hào)SwitchA-vlanxisolate-user-vla

8、nenable；設(shè)置主vlanSwitchAisolate-user-vlansecondary；設(shè)置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan；設(shè)置vlan的pvidQuidway-Ethernet0/2porthybridpvid；刪除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged；設(shè)置無(wú)標(biāo)識(shí)的vlan如果包的vlanid與PVId一致，則去掉vlan信息.默認(rèn)PVID=1。所以設(shè)置PVID為所屬vlanid,設(shè)置可以互通的vlan為untagged.華為

9、路由器交換機(jī)配置命令：路由器命令Quidwaydisplayversion；顯示版本信息Quidwaydisplaycurrent-configuration；顯示當(dāng)前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayiproute；顯示路由信息Quidwaysysnameaabbcc；更改主機(jī)名Quidwaysuperpasswrod123456；設(shè)置口令Quidwayinterfaceserial0；進(jìn)入接口Quidway-serial0ipaddress；配置端口IP地址Quidway-serial0undoshutdown；激活端口Quidw

10、aylink-protocolhdlc；綁定hdlc協(xié)議Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0；顯示所有信息Quidwaydebugginghdlceventserial0；調(diào)試事件信息Quidwaydebugg

11、inghdlcpacketserial0；顯示包的信息華為路由器交換機(jī)配置命令：靜態(tài)路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static華為路由器交換機(jī)配置命令：動(dòng)態(tài)路

12、由：Quidwayrip；設(shè)置動(dòng)態(tài)路由Quidwayripwork；設(shè)置工作允許Quidwayripinput；設(shè)置入口允許Quidwayripoutput；設(shè)置出口允許Quidway-ripnetwork；設(shè)置交換路由網(wǎng)絡(luò)Quidway-ripnetworkall；設(shè)置與所有網(wǎng)絡(luò)交換Quidway-rippeerip-address；Quidway-ripsummary；路由聚合Quidwayripversion1；設(shè)置工作在版本1Quidwayripversion2multicast；設(shè)版本2，多播方式Quidway-Ethernet0ripsplit-horizon；水平分

13、隔QuidwayrouteridA.B.C.D；配置路由器的IDQuidwayospfenable；啟動(dòng)OSPF協(xié)議Quidway-ospfimport-routedirect；引入直聯(lián)路由Quidway-Serial0ospfenablearea；配置OSPF區(qū)域華為路由器交換機(jī)配置命令：標(biāo)準(zhǔn)訪問(wèn)列表命令格式如下：aclmatch-orderconfig|auto；默認(rèn)前者順序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalper

14、mitsource55Quidway-acl-10rulenormaldenysourceany華為路由器交換機(jī)配置命令：擴(kuò)展訪問(wèn)控制列表配置命令配置TCP/UDP協(xié)議的擴(kuò)展訪問(wèn)列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP協(xié)議的擴(kuò)展訪問(wèn)列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging華為路由器交換機(jī)配置命令：擴(kuò)展訪問(wèn)控制列表操作符的含義equalpor

15、tnumber；等于greater-thanportnumber；大于less-thanportnumber；小于not-equalportnumber；不等rangeportnumber1portnumber2；區(qū)間華為路由器交換機(jī)配置命令：擴(kuò)展訪問(wèn)控制列表舉例Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermiticmpsourceanydestina

16、tionanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsourcedestinationQuidway-acl-102ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulepermittcpsourceanyd

17、estinationdestination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound華為路由器交換機(jī)配置命令：地址轉(zhuǎn)換配置舉例QuidwayfirewallenableQuidwayfirewalldefaultpermitQuidwayacl101;內(nèi)部指定主機(jī)可以進(jìn)入e0Quidway-acl-101ruledenyipsourcea

18、nydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101quitQuidwayinte0Quidway-Ethernet0fire

19、wallpacket-filter101inboundQuidwayacl102;外部特定主機(jī)和大于1024端口的數(shù)據(jù)包允許進(jìn)入S0Quidway-acl-102ruledenyipsourceanydestinationanyQuidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-acl-102quitQuidway

20、ints0Quidway-Serial0firewallpacket-filter102inbound；設(shè)是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，將acl101允許的IP從本接口出時(shí)變換源地址。華為路由器交換機(jī)配置命令：內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令(靜態(tài)nat)：natserverglobalportinsideportprotocol;global_port不寫(xiě)時(shí)使用inside_portQuidway-Serial0natserverglobalinside129.38.1

21、.1ftptcpQuidway-Serial0natserverglobalinsidetelnettcpQuidway-Serial0natserverglobalinsidewwwtcp設(shè)有公網(wǎng)IP：0103可以使用。;對(duì)外訪問(wèn)(原例題)Quidwaynataddress-group0103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource10.110.10

22、.055;指定允許的內(nèi)部網(wǎng)絡(luò)Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1;在s0口從地址池取出IP對(duì)外訪問(wèn)Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Serial0natserverglobal

23、028080insidewwwtcpQuidway-Serial0natserverglobal03insidesmtpudp華為路由器交換機(jī)配置命令：PPP設(shè)置：Quidway-s0link-protocolppp;默認(rèn)的協(xié)議華為路由器交換機(jī)配置命令：PPP驗(yàn)證：主驗(yàn)方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-mod

24、epap|chapQuidway-serial0pppchapuserq1;pap時(shí)，沒(méi)有此句華為路由交換機(jī)配置命令：pap被驗(yàn)方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhello華為路由器交換機(jī)配置命令：chap被驗(yàn)方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;對(duì)方路由器名幀中繼frame-relay(二分冊(cè)6-61)q1frswi