華為交換機路由器配置命令

1、華為路由器交換機配置命令：計算機命令PCAlogin:root；使用root用戶password:linux；口令是linux#shutdown-hnow；關(guān)機#init0；關(guān)機#logout；用戶注銷#login；用戶登錄#ifconfig；顯示IP地址#ifconfigeth0netmask；設(shè)置IP地址#ifconfigeht0netmaskdown；禁用IP地址#routeaddgw；設(shè)置網(wǎng)關(guān)#routedelgw；刪除網(wǎng)關(guān)#routeadddefaultgw；設(shè)置網(wǎng)關(guān)#routedeldefaultgw；刪除網(wǎng)關(guān)#route；顯示網(wǎng)關(guān)#ping；發(fā)ECHO

2、包#telnet；遠程登錄華為路由器交換機配置命令：交換機命令Quidwaydiscur；顯示當前配置Quidwaydisplaycurrent-configuration；顯示當前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayvlanall；顯示路由信息Quidwaydisplayversion；顯示版本信息Quidwaysuperpassword；修改特權(quán)用戶密碼Quidwaysysname；交換機命名Quidwayinterfaceethernet0/1；進入接口視圖Quidwayinterfacevlanx；進入接口視圖Quidway-V

3、lan-interfacexipaddress；配置VLAN的IP地址Quidwayiproute-static；靜態(tài)路由網(wǎng)關(guān)Quidwayrip；三層交換支持Quidwaylocal-userftpQuidwayuser-interfacevty04；進入虛擬終端S3026-ui-vty0-4authentication-modepassword；設(shè)置口令模式S3026-ui-vty0-4setauthentication-modepasswordsimple222；設(shè)置口令S3026-ui-vty0-4u

4、serprivilegelevel3；用戶級別Quidwayinterfaceethernet0/1；進入端口模式Quidwayinte0/1；進入端口模式Quidway-Ethernet0/1duplexhalf|full|auto；配置端口工作狀態(tài)Quidway-Ethernet0/1speed10|100|auto；配置端口工作速率Quidway-Ethernet0/1flow-control；配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal；配置端口平接扭接Quidway-Ethernet0/1portlink-typetrunk|acces

5、s|hybrid；設(shè)置端口工作模式Quidway-Ethernet0/1portaccessvlan3；當前端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All；設(shè)trunk允許的VLANQuidway-Ethernet0/3porttrunkpvidvlan3；設(shè)置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown；激活端口Quidway-Ethernet0/1shutdown；關(guān)閉端口Quidway-Ethernet0/1quit；返回Quidwayvlan3；創(chuàng)建VLANQuidway-vlan3p

6、ortethernet0/1；在VLAN中增加端口Quidway-vlan3porte0/1；簡寫方式Quidway-vlan3portethernet0/1toethernet0/4；在VLAN中增加端口Quidway-vlan3porte0/1toe0/4；簡寫方式Quidwaymonitor-port；指定鏡像端口Quidwayportmirror；指定被鏡像端口Quidwayportmirrorint_listobserving-portint_typeint_num；指定鏡像和被鏡像Quidwaydescriptionstring；指定VLAN描述字符Quidwaydescripti

7、on；刪除VLAN描述字符Quidwaydisplayvlanvlan_id；查看VLAN設(shè)置Quidwaystpenable|disable；設(shè)置生成樹,默認關(guān)閉Quidwaystppriority4096；設(shè)置交換機的優(yōu)先級Quidwaystprootprimary|secondary；設(shè)置為根或根的備份Quidway-Ethernet0/1stpcost200；設(shè)置交換機端口的花費Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口為通道號SwitchA-vla

8、nxisolate-user-vlanenable；設(shè)置主vlanSwitchAisolate-user-vlansecondary；設(shè)置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan；設(shè)置vlan的pvidQuidway-Ethernet0/2porthybridpvid；刪除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged；設(shè)置無標識的vlan如果包的vlanid與PVId一致，則去掉vlan信息.默認PVID=1。所以設(shè)置PVID為所屬vlanid,設(shè)置可以互

9、通的vlan為untagged.華為路由器交換機配置命令：路由器命令Quidwaydisplayversion；顯示版本信息Quidwaydisplaycurrent-configuration；顯示當前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayiproute；顯示路由信息Quidwaysysnameaabbcc；更改主機名Quidwaysuperpasswrod123456；設(shè)置口令Quidwayinterfaceserial0；進入接口Quidway-serial0ipaddress；配置端口IP地址Quidway-serial0undo

10、shutdown；激活端口Quidwaylink-protocolhdlc；綁定hdlc協(xié)議Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0；顯示所有信息Quidwaydebugginghdlceventserial0；調(diào)

11、試事件信息Quidwaydebugginghdlcpacketserial0；顯示包的信息華為路由器交換機配置命令：靜態(tài)路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static10.0.0

12、.2華為路由器交換機配置命令：動態(tài)路由：Quidwayrip；設(shè)置動態(tài)路由Quidwayripwork；設(shè)置工作允許Quidwayripinput；設(shè)置入口允許Quidwayripoutput；設(shè)置出口允許Quidway-ripnetwork；設(shè)置交換路由網(wǎng)絡(luò)Quidway-ripnetworkall；設(shè)置與所有網(wǎng)絡(luò)交換Quidway-rippeerip-address；Quidway-ripsummary；路由聚合Quidwayripversion1；設(shè)置工作在版本1Quidwayripversion2multicast；設(shè)版本2，多播方式Quidway-Ethernet0ri

13、psplit-horizon；水平分隔QuidwayrouteridA.B.C.D；配置路由器的IDQuidwayospfenable；啟動OSPF協(xié)議Quidway-ospfimport-routedirect；引入直聯(lián)路由Quidway-Serial0ospfenablearea；配置OSPF區(qū)域華為路由器交換機配置命令：標準訪問列表命令格式如下：aclmatch-orderconfig|auto；默認前者順序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-a

14、cl-10rulenormalpermitsource55Quidway-acl-10rulenormaldenysourceany華為路由器交換機配置命令：擴展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging華為路由器交換機配置命令：擴展訪問

15、控制列表操作符的含義equalportnumber；等于greater-thanportnumber；大于less-thanportnumber；小于not-equalportnumber；不等rangeportnumber1portnumber2；區(qū)間華為路由器交換機配置命令：擴展訪問控制列表舉例Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermitic

16、mpsourceanydestinationanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsourcedestinationQuidway-acl-102ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulep

17、ermittcpsourceanydestinationdestination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound華為路由器交換機配置命令：地址轉(zhuǎn)換配置舉例QuidwayfirewallenableQuidwayfirewalldefaultpermitQuidwayacl101;內(nèi)部指定主機可以進入e0Quidway-acl-10

18、1ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101quitQuidwayinte0Qui

19、dway-Ethernet0firewallpacket-filter101inboundQuidwayacl102;外部特定主機和大于1024端口的數(shù)據(jù)包允許進入S0Quidway-acl-102ruledenyipsourceanydestinationanyQuidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-

20、acl-102quitQuidwayints0Quidway-Serial0firewallpacket-filter102inbound；設(shè)是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，將acl101允許的IP從本接口出時變換源地址。華為路由器交換機配置命令：內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令(靜態(tài)nat)：natserverglobalportinsideportprotocol;global_port不寫時使用inside_portQuidway-Serial0natserverglobal202.38.1

21、60.1insideftptcpQuidway-Serial0natserverglobalinsidetelnettcpQuidway-Serial0natserverglobalinsidewwwtcp設(shè)有公網(wǎng)IP：0103可以使用。;對外訪問(原例題)Quidwaynataddress-group0103pool1;建立地址池Quidwayacl1Quidway-acl-1ruleper

22、mitsource55;指定允許的內(nèi)部網(wǎng)絡(luò)Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1;在s0口從地址池取出IP對外訪問Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Seri

23、al0natserverglobal028080insidewwwtcpQuidway-Serial0natserverglobal03insidesmtpudp華為路由器交換機配置命令：PPP設(shè)置：Quidway-s0link-protocolppp;默認的協(xié)議華為路由器交換機配置命令：PPP驗證：主驗方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0ppp

24、authentication-modepap|chapQuidway-serial0pppchapuserq1;pap時，沒有此句華為路由交換機配置命令：pap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhello華為路由器交換機配置命令：chap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;對方路由器名幀中繼frame-relay(二分冊6-61)q1frsw