華為交換機(jī)常用命令

1、交換機(jī)的24號端口為數(shù)據(jù)進(jìn)口，禁忌作關(guān)閉操作1.進(jìn)入交換機(jī)系模式：sys關(guān)閉端口：inter e 0/端口號shutdown開是undo shutdown2.查看單獨的端口dis inter e 0/端口號dis mac看MAC3.進(jìn)入要改變帶寬的端口inter e0/端口號line-rate in 37 （進(jìn)）line-rate out 37 （出）下載和上傳都是10M帶寬的換算方式是N-27 37-27=1010M=2720M=4730M=57以此類推4.通過IP查找端口ping所查IP dis arpdis mac該IP把對應(yīng)的mac交換機(jī)命令*#Quidwaydis cur配置Quid

2、waydisplay current-configuration配置Quidwaydisplay interfaces信息；顯示當(dāng)前；顯示當(dāng)前；顯示接口Quidwaydisplay vlan all信息Quidwaydisplay version信息Quidwaysuper password用戶密碼QuidwaysysnameQuidwayinterface ethernet 0/1視圖Quidwayinterface vlan xQuidway-Vlan-interfacexip address VLAN勺IP地址Quidwayip route-st

3、atic =網(wǎng)關(guān)Quidwayrip支持Quidwaylocal-user ftpQuidwayuser-interface vty 0 4終端S3026-ui-vty0-4authentication-mode password模式S3026-ui-vty0-4set authentication-mode password simple 222S3026-ui-vty0-4user privilege level 3Quidwayinterface ethernet 0/1模式Quidwayint e0/1模式Quidway-Etherne

4、t0/1duplex half|full|auto工作狀態(tài)Quidway-Ethernet0/1speed 10|100|auto速率Quidway-Ethernet0/1flow-control Quidway-Ethernet0/1mdiacross|auto|normal平接扭接Quidway-Ethernet0/1port link-type trunk|access|hybrid工作模式；顯示路由；顯示版本；修改特權(quán)；交換機(jī)命名；進(jìn)入接口；進(jìn)入接口視圖；配置；靜態(tài)路由；三層交換；進(jìn)入虛擬；設(shè)置口令；設(shè)置口令；用戶級別；進(jìn)入端口；進(jìn)入端口；配置端口；配置端口工作；配置端口流控；配置端口

5、；設(shè)置端口Quidway-Ethernet0/1port access vlan 3加入到VLANQuidway-Ethernet0/2port trunk permit vlan ID|All允許的VLANQuidway-Ethernet0/3port trunk pvid vlan 3口的PVIDQuidway-Ethernet0/1undo shutdownQuidway-Ethernet0/1shutdown Quidway-Ethernet0/1quitQuidwayvlan 3VLANQuidway-vlan3port ethernet 0/1中增加端口Quidway-vlan3p

6、ort e0/1Quidway-vlan3port ethernet 0/1 to ethernet 0/4中增加端口Quidway-vlan3port e0/1 to e0/4Quidwaymonitor-port 端口Quidwayport mirror 像端口Quidwayport mirror int_list observing-port int_type int_num和被鏡像Quidwaydescription stringVLAN苗述字符QuidwaydescriptionVLAN描述字符Quidwaydisplay vlan vlan_idVLAN設(shè)置Quidwaystp e

7、nable|disable樹,默認(rèn)關(guān)閉Quidwaystp priority 4096機(jī)的優(yōu)先級Quidwaystp root primary|secondary或根的備份Quidway-Ethernet0/1stp cost 200機(jī)端口的花費(fèi)；當(dāng)前端口；設(shè)trunk；設(shè)置trunk端；激活端口 ；關(guān)閉端口 ；返回；創(chuàng)建；在VLAN；簡寫方式；在VLAN；簡寫方式；指定鏡像；指定被鏡；指定鏡像；指定；刪除；查看；設(shè)置生成；設(shè)置交換；設(shè)置為根；設(shè)置交換Quidwaylink-aggregation e0/1 to e0/4 ingress|both;聚合Quidwayundo link-agg

8、regation e0/1|all ;通道號端口的始端口為SwitchA-vlanxisolate-user-vlan enablevlanSwitchAisolate-user-vlan secondary vlan包括的子vlanQuidway-Ethernet0/2port hybrid pvid vlan vlan的pvidQuidway-Ethernet0/2port hybrid pvidvlan的pvidQuidway-Ethernet0/2port hybrid vlan vlan_id_list untagged識的vlan如果包的vlan id與PVId一致，則去掉vlan

9、信息.默認(rèn)PVID=1。 所以設(shè)置PVID為所屬vlan id,設(shè)置可以互通的vlan為untagged.路由器命令*#Quidwaydisplay version信息Quidwaydisplay current-configuration配置Quidwaydisplay interfaces信息Quidwaydisplay ip route信息；設(shè)置主；設(shè)置主；設(shè)置；刪除；設(shè)置無標(biāo)；顯示版本；顯示當(dāng)前；顯示接口；顯示路由Quidwaysysname aabbcc名Quidwaysuper passwrod 123456Quidwayinterface serial0Quidway-seria

10、l0ip address IP地址Quidway-serial0undo shutdownQuidwaylink-protocol hdlc hdlc協(xié)議；更改主機(jī)；設(shè)置口令；進(jìn)入接口；配置端口；激活端口；綁定Quidwayuser-interface vty 0 4 Quidway-ui-vty0-4authentication-modepassword Quidway-ui-vty0-4set authentication-mode password simple 222Quidway-ui-vty0-4user privilege level 3 Quidway-ui-vty0-4qui

11、tQuidwaydebugging hdlc all serial0信息Quidwaydebugging hdlc event serial0信息Quidwaydebugging hdlc packet serial0信息靜態(tài)路由：Quidwayip route-static interfacenumber|nexthopvaluereject|blackhole例如：Quidwayip route-static 16 Quidwayip route-static Quidwayip route-s

12、tatic 16 Serial 2Quidwayip route-static 動態(tài)路由：Quidwayrip路由Quidwayrip work允許Quidwayrip input允許Quidwayrip output允許Quidway-ripnetwork 路由網(wǎng)絡(luò)Quidway-ripnetwork all有網(wǎng)絡(luò)交換Quidway-rippeer ip-addressQuidway-ripsummaryQuidwayrip version 1在版本1Quidwayrip version 2 multicast

13、 2，多播方式；顯示所有；調(diào)試事件；顯示包的；設(shè)置動態(tài)；設(shè)置工作；設(shè)置入口；設(shè)置出口；設(shè)置交換；設(shè)置與所?；路由聚合；設(shè)置工作；設(shè)版本Quidway-Ethernet0rip split-horizon Quidwayrouter id A.B.C.D器的IDQuidwayospf enableOSPF協(xié)、議Quidway-ospfimport-route direct路由Quidway-serial0ospf enable area OSPF區(qū) 域標(biāo)準(zhǔn)訪問列表命令格式如下：acl match-order config|auto順序匹配。rule normal|specialpermit|de

14、ny source source-addr source- wildcard|any例：Quidwayacl 10Quidway-acl-10rule normal permit source 55Quidway-acl-10rule normal deny source any擴(kuò)展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴(kuò)展訪問列表：rule normal|specialpermit|denytcp|udpsource |anydestination|anyoperate配置ICMP協(xié)議的擴(kuò)展訪問列表：rule normal|specialpermit|d

15、enyicmp source |anydestination|anyicmp-code logging擴(kuò)展訪問控制列表操作符的含義equal portnumber；等于greater-than portnumberless-than portnumber；not-equal portnumber；range portnumber1 portnumber2擴(kuò)展訪問控制列表舉例Quidwayacl 101Quidway-acl-101rule deny souce any destination anyQuidway-acl-101rule permit icmp source any desti

16、nation any icmp-typeechoQuidway-acl-101rule permit icmp source any destination any icmp-typeecho-replyQuidwayacl 102；水平分隔；配置路由；啟動；引入直聯(lián)；配置；默認(rèn)前者；大于小于不等；區(qū)間Quidway-acl-102rule permit ip source destination Quidway-acl-102rule deny ip source any destination anyQuidwayacl

17、103Quidway-acl-103rule permit tcp source any destination destination-port equal ftpQuidway-acl-103rule permit tcp source any destination destination-port equal wwwQuidwayfirewall enableQuidwayfirewall default permit|denyQuidwayint e0Quidway-Ethernet0firewall packet-fi

18、lter 101 inbound|outbound地址轉(zhuǎn)換配置舉例Quidwayfirewall enableQuidwayfirewall default permitQuidwayacl 101 ;內(nèi)部指定主機(jī)可以進(jìn)入e0 Quidway-acl-101rule deny ip source anydestination anyQuidway-acl-101rule permit ip source 0 destination anyQuidway-acl-101rule permit ip source 0 destination anyQui

19、dway-acl-101rule permit ip source 0 destination anyQuidway-acl-101rule permit ip source 0 destination anyQuidway-acl-101quitQuidwayint e0Quidway-Ethernet0firewall packet-filter 101 inboundQuidwayacl 102 ;外部特定主機(jī)和大于1024端 口的數(shù)據(jù)包允許進(jìn)入S0Quidway-acl-102rule deny ip source any destinati

20、on anyQuidway-acl-102rule permit tcp source 0 destination 0Quidway-acl-102rule permit tcp source any destination 0 destination-portgreat-than1024Quidway-acl-102quitQuidwayint s0 Quidway-Serial0firewall packet-filter 102 inbound；設(shè)是路由器出口IP。Quidway-Seria

21、l0nat outbound 101 interface ;是Easy ip，將acl許的IP從本接口出時變換源地址。內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令（靜態(tài)n at）：nat server global port inside portprotocol ;global_port不寫時使用inside_portQuidway-Serial0nat server global inside ftp tcpQuidway-Serial0nat server global inside telnet tcpQui

22、dway-Serial0nat server global inside www tcp設(shè)有公網(wǎng)IP：0103可以使用。;訪問（原例題）Quidwaynat address-group 01 03 pool1 ;址池Quidwayacl 1Quidway-acl-1rule permit source 55;許的內(nèi)部網(wǎng)絡(luò)Quidway-acl-1rule deny source any Quidway-acl-1i

23、nt serial 0Quidway-Serial0nat outbound 1 address-group pool1;口從地址池取出IP對外訪問Quidway-Serial0nat server global 01 inside ftp tcpQuidway-Serial0nat server global 02 inside wwwtcp101允對外建立地指定允在s0Quidway-Serial0nat server global 02 8080 inside 10.1

24、10.10.3 www tcpQuidway-Serial0nat server global 03 inside smtp udpPPP設(shè)置：Quidway-s0link-protocol ppp ;議ppp驗證：主驗方：pap|chap Quidwaylocal-user q2 password simple|cipher hello;Quidwayinterface serial 0Quidway-serial0ppp authentication-mode pap|chap Quidway-serial0pppchap user q1 ;

25、pap沒有此句pap被驗方：Quidwayinterface serial 0;Quidway-serial0ppp pap local-user q2 password simple|cipher hello chap被驗方：Quidwayinterface serial 0;Quidway-serial0ppp chap user q2 ;器名Quidway-serial0local-user q1 password simple|cipher hello ;器名幀中繼frame-relay （二分冊6-61）q1fr switchingq1int s1q1-Serial1ip address 192.168