設備維護手冊ac autewareos2.0命令行

1、.s1目前1configurenoidle-目前1configurenoidle-2showsystem. showsystemshowslotshowboardshowslotshowproductset32configeth-configadmins configauto-configauto-negotiationconfigconfigauto-negotiation configduplexconfigeth-configadmins configauto-configauto-negotiationconfigconfigauto-negotiation configduplex

2、configback-configconfigmediaconfigshoweth-port 4模VLAN 配置命createdeleteconfigadddelete配置VLAN的Trunk成 showvlantrunk-3showvlantrunk-memberVLAN顯示命showvlanport-showvlanport-member分布式VLAN 與VE口綁定命bond unbondQinQ功showvlantrunk-memberVLAN顯示命showvlanport-showvlanport-member分布式VLAN 與VE口綁定命bond unbondQinQ功configp

3、ortconfigvlansetvlanto-cpu-port5FDB模configfdb靜態(tài)FDB配置命createicfdbwithdeleteicfdbbymacanddeleteicfdbbydeleteicfdbbyshowshowfdbshowfdb6erfaceerfaceerfaceerfaceerface4ipaddress7 configaclswtich-configaclipaddress7 configaclswtich-configacl showacl aclacltcpacltcp/udpaclaclicmpaclaclaclaclethernetextende

4、daclextendedacltcp/udpaclaclethertypeaclipv6 delete 5createacl-configacl-bindbindacl-showacl- aclbindacl-show8trunk模createacl-configacl-bindbindacl-showacl- aclbindacl-show8trunk模TRUNK 配置命createdeleteconfigconfigtrunkload-adddeletesetTRUNK顯示命showshow9模配置命 .IGMP功能配 .6配ARP模靜態(tài)ipARP配置命configarpsmac-ARP顯

5、示命show配ARP模靜態(tài)ipARP配置命configarpsmac-ARP顯示命showarpshowarpshowarpbyshowarpbyshowarpby confighansiconfighansiconfighansivirtualnoconfighansipreemptconfighansimasterdown-setconfighansiconfighansimulti-link-configdhcp- show7showhansishowhansirunning-showhansirunning-模全局配HH配置命configprimaryno.showhansishowh

6、ansirunning-showhansirunning-模全局配HH配置命configprimaryno.H顯示命show.MLD模VLANMLD功能配configmld-.VLANMLD配 Snmp配置命configsnmpopen|closeconfigsnmp配置Snmp.配置Snmp視配置Snmp安全8配置Snmp 實例狀配置Trap配置Trap告警開配置Trap告警參SNMP顯示命配置Snmp 實例狀配置Trap配置Trap告警開配置Trap告警參SNMP顯示命showsnmprunningshowsnmpbaseshowcommunityshowshowshowshowsnmpd

7、busconnectionsnmpstring_to_asciiTRAP顯示命showtrapshowtrapshowtrapswitch add|deletesyslogallsyslogexecsyslogsyslog DHCP模9DHCPipv4服務器配DHCP 服務器全局配IP地址池配接口下DHCP 服務器功能配DHCP 服務器配置查DHCPipv4Relay配DHCPRelay全局配置命DHCPRelayDHCPipv4服務器配DHCP 服務器全局配IP地址池配接口下DHCP 服務器功能配DHCP 服務器配置查DHCPipv4Relay配DHCPRelay全局配置命DHCPRelay

8、配置查看命DHCPipv6服務器配DHCP 服務器全局配接口下DHCP 服務器功能配DHCP 服務器配置查createcreatecreatecreatewtpcreatewtpcreateconfigconfigsecurityencryptionsecurityasciisecurityhexsecurityradiusradiussecondaryradiussecondaryradiusseteapsetsecurityquitewapiwapiwapisetasdwapiradiuswapisecondaryradiusseteapsetsecurityquitewapiwapiwa

9、pisetasdwapiradiuswapiradiusauthset.hybridconfigconfigapplywlanwlan.wlansetwlanmaxsetwlanwlanerfacesetwlansetwlansetacshowacwlanroamingset undoshowsetsetshowsetshowsetbridgeset undoshowsetsetshowsetshowsetbridgewdsset1xServerconfigconfigwtpwtpapplywtpdeletewtpenablewtpdisablewtpwtpsetwtpmaxsetwtpset

10、wtpsetapsetapupdateapimg-clearapsetapshowapseterfacesetapterminalsetapterminalstasetapterminalconfigconfigsetsupportseterfacesetapterminalsetapterminalstasetapterminalconfigconfigsetsupportsetmaxradiosetbsssetbssbssradioapplyeteradioapplyeteradioenableradiodisableradioapplywlansetwlanwlanwlanwds.set

11、radiosetradiosetradiowlantrafficwlantrafficlimitwlantrafficlimitsetwlanwlanwlanwds.setradiosetradiosetradiowlantrafficwlantrafficlimitwlantrafficlimitwlantrafficlimitionwlantrafficlimitwlantrafficwlantrafficlimitionwlantrafficlimitionwlantrafficlimitcanceldu|amsdudu|amsdu11namsduamsduamsduwlanchanne

12、l setwireless-controlmaxsetwireless-controlmax setwireless-controllogsetwireless-controllog licenselicense setwtpsendsetwtpsendresponsetowlansetac.setwireless-controllog licenselicense setwtpsendsetwtpsendresponsetowlansetac.configsetap.deleteap.downloadsetapmax1etaps showap.showshow.sett.setwlanset

13、aperfaceerfaceerfaceerfaceerfacehowconfig showshow showstaextendshowsta.extendshowshowinfoshowwtpconfigradioresourceshow showstaextendshowsta.extendshowshowinfoshowwtpconfigradioresourcesetradioresourcesetradioresourcemanagementsetmacdeletemac setmacMACdeletemacMAC showrogueapshowrogueapsetrogueaptr

14、apshowrogueaplistshowneighboraplist.setradioresourcesetradioresourcecountermeasures DynamicChanneldynamicchannelerersetersetersetcoverageshowneighborrssi.及wlanaddwlandelwlanuseersetersetersetcoverageshowneighborrssi.及wlanaddwlandelwlanusewtpaddlistwtpistwtpuseradiowlanaddlistradiowlandellistradioses

15、howwlanmacshowwtpmacshowradiowlanshowanshowallwtpshowallbss設置動態(tài)AP接入策showsetsetauto_ap_logindelauto_ap_loginsetauto_ap_loginsetauto_ap_loginclear設置QOS策createwirelessqosdeletewirelessshowwirelessqosconfigwirelesssetradiocwminsetntcwminsetwmmwmmcreatewirelessqosdeletewirelessshowwirelessqosconfigwirele

16、sssetradiocwminsetntcwminsetwmmwmmmapdot1pshowqosinfobyAP管addlegaldellegalshowlegaladdlegal.dellegal.showlegal.addattackdelattackshowattackEtherealBridge配createdeleteshowshowebrconfigebrsetsetsetbridgesetshowtrafficlimitbyshowtrafficlimitby配置AP批量重rebootap rebootap byrebootsetshowtrafficlimitbyshowtr

17、afficlimitby配置AP批量重rebootap rebootap byrebootap rebootap by.rebootap by升級管setapupdatepathm.showupdateclearupdateshowupdatewtpshowupdateclearupdatesetapupdateshowapupdate跨AC漫游配 sethostadddel 11n11n11nsetwlanserviceWsmvtysh命show11n11n11nsetwlanserviceWsmvtysh命showsetwsmsetsetwmmconfwirelessqoscreatewi

18、relessqosprofileIDshowshowshowshow showwsmwatchdogs configcapwap- setlogwsmsetsetsetsetwsmIPV6 配置命ipv6showipv6IPV6地址配置命ipv6IPV6nd配置命setwsmIPV6 配置命ipv6showipv6IPV6地址配置命ipv6IPV6nd配置命ipv6ndsuppress-ipv6ndipv6ndipv6ndra-ipv6ndreachable-ipv6nd ipv6ndhome-agent-ipv6ndhome-agent-ipv6ndmanaged-config- IPV6t

19、unnle配置命ipv6OSPF 命令手OSPF配置命area areaexport- areaareaareaarea compatible distanceist ipfipfauthentication-ipfareaarea compatible distanceist ipfipfauthentication-ipfipfii ipfmtu-ipfipfipfipftransmit- ospfospf ospfospfospfospf refreshrouter ospfospfospfospf refreshroutertimersthrottleshowshowpfborder-

20、showpfshowshowpfborder-showpfshowpftimersconfigrpf showrouteshowroutepolicyipshowiprouteipnoipno ipnoipipnoipno ipnoipshowipipipmulticast-ippimsparse-ippimbsr-ippimrp-ippimrp-showippimshowipshowipfirewall 模configfirewall命configaddaddaddadddnatnat-adddnatnat-ipdelchangeadddelchange modifydelchangeadd

21、delchange modifydnatin-modifysnatout- modifyfirewalls modifyfirewallmodifyfirewallactmodifysnatnat-modify(snat|dnat)nat-ipmodify(snat|dnat)nat-modify(snat|dnat)nat-ip modify(snat|dnat)nat-portmodify(snat|dnat)nat-portmodifyinputmodifyinputmodifyinputin- modifyinput(src-ip|dst-ip) modifyinput(src-ip|

22、dst-ip)modifymodifyinputmodifyinputmodifyinputin- modifyinput(src-ip|dst-ip) modifyinput(src-ip|dst-ip)modifyinput modifyinput(src-port|dst-port) modifyinputs modifyinputshowshow service show firewall-s useruserusershow showdeletewhoamdeleteshowsystemshowshowdeletewhoamdeleteshowsystemshowsetsetcli-

23、ipset.terminalconfigureconsolemd5reloadstartupshowshowserviceshowserviceshowservicemd5reloadstartupshowshowserviceshowserviceshowserviceapplytcpdumptcpdumpcketshowshowconnectWebservice （apache）的配置命webservice配置命serviceadd命showwebs configfast-configaging- SEM模SEM功能命copy1 命令 能回退到系統(tǒng)模式，在系統(tǒng)模式下輸入 exit 或者 q

24、uit SYSTEM為系統(tǒng)名稱，有些設備名稱更改過會顯示不同。1.2.1 1 命令 能回退到系統(tǒng)模式，在系統(tǒng)模式下輸入 exit 或者 quit SYSTEM為系統(tǒng)名稱，有些設備名稱更改過會顯示不同。1.2.1 管理員通過串口在視圖模式下輸入命令 enable在系統(tǒng)模式下輸入命令 configure terminal顯示命令查看配置信節(jié)點配置模在配置模式下輸入進入相應節(jié)點 令，configvlan1.2.2 1.2.2 1.2.3 無1.2.4 無1.2.5 configureconfigure無configure 1.2.6 idle- 1.2.5 configureconfigure無co

25、nfigure 1.2.6 idle- 10dle-timeout noidle-noidle-無no idle-1.2.8 showidle-showidle-無無 命令行格式標志復雜ABBSSIDCD無 命令行格式標志復雜ABBSSIDCD* #EEFGHIJKLMMNOPEEFGHIJKLMMNOPnumber 如 1-2 或 22 QRRADIOIDLocalradioS即TU2 QRRADIOIDLocalradioS即TUVVlanW白APXYZ2.1.1 showsystemshowsystem無無址（MACSYSTEM(config)# show system SOFTWARE

26、 2.0.18 (Build 13508sp1) running on 2.1.1 showsystemshowsystem無無址（MACSYSTEM(config)# show system SOFTWARE 2.0.18 (Build 13508sp1) running on 2.1.2 showsystemhardware-showsystemhardware-無無SYSTEM# show system hardware-1234567ProudctBase89IC:2.1.3 showsystemshowsystem無無無SYSTEM(config)# show system +| |

27、 | | |ERE |-+-+-| NONE NONE NONE +|SE|FANE|+|+|+| CORE |89IC:2.1.3 showsystemshowsystem無無無SYSTEM(config)# show system +| | | | |ERE |-+-+-| NONE NONE NONE +|SE|FANE|+|+|+| CORE |SURFACE| |+| | NONE| NONE +ER4個電源模塊的狀態(tài)。NONE為不存在，ON FAN 2.1.4 showslotshowslot無無SYSTEM#showslot62.1.5 showboardshowboard2.1

28、.4 showslotshowslot無無SYSTEM#showslot62.1.5 showboardshowboard無無無SYSTEM(config)# show board 0CSCD PORT FUNCTION IIVEISOBC PORT PORT NUM ON SLOT 5CPU CORESURFACECPU 為 MASTERCPUSLAVECPUSLAVE2.1.6 showslotshowslotSLOT_ID無無SYSTEM(config)# show slot slot1isslotslot2.1.6 showslotshowslotSLOT_ID無無SYSTEM(con

29、fig)# show slot slot1isslotslotslot4isslotBOARDCSCDPORT IVEISOBCPORTPORTNUMONSLOTslot6isslot7isslot8isslot9isslot10is2.1.7 showproductshow product info 無無SYSTEM# show product slot6isslot7isslot8isslot9isslot10is2.1.7 showproductshow product info 無無SYSTEM# show product BOARD IS 2.2.1 setsetsystem_img

30、，無無SYSTEM#setAX1.2342.2.2 reboot2.2.1 setsetsystem_img，無無SYSTEM#setAX1.2342.2.2 reboot(all|1無無SYSTEM# reboot SYSTEM# reboot 2.2.3 reset (fast | normal) (all | slot_id) 無無2.2.3 reset (fast | normal) (all | slot_id) 無無SYSTEM#resetfastSYSTEM# reset normal 3 3.1.1 configeth-portslot 端口所在設備槽號，有效范圍從 13 3.

31、1.1 configeth-portslot 端口所在設備槽號，有效范圍從 1 到產(chǎn)品的最大槽位號。port 。無SYSTEM(config)# config eth-port SYSTEM(config-eth-port)# config auto-negotiation SYSTEM(config-eth-port)# 3.1.2 configadminconfigadmineSYSTEM(config-eth-port)#configadmins e3.1.3 configauto- SYSTEM(config-eth-port)# config auto-negotiation 3.1

32、.4 configSYSTEM(config-eth-port)#configadmins e3.1.3 configauto- SYSTEM(config-eth-port)# config auto-negotiation 3.1.4 configauto-negotiation 無SYSTEM(config-eth-port)# config auto-negotiation speed 3.1.5 configconfigspeed3.1.6 configauto-negotiation 3.1.6 configauto-negotiation SYSTEM(config-eth-po

33、rt)# config auto-negotiation duplex 3.1.7 configauto-negotiationflow- 無 3.1.8 configduplexconfigduplexmode1000M 時，只存在全雙工模SYSTEM(config-eth-port)# config duplex mode 3.1.9 configflow-configflow-control 口為全雙工模式才可配置。參見 2.1.71000M 時，只存在全雙工模SYSTEM(config-eth-port)# config duplex mode 3.1.9 configflow-con

34、figflow-control 口為全雙工模式才可配置。參見 2.1.7 configback- reSYSTEM(config-eth-port)# config back-pre re configconfigmtu64-SYSTEM(config-eth-port)# config mtu configmediaconfigmediaconfigconfigmtu64-SYSTEM(config-eth-port)# config mtu configmediaconfigmediapreferredcopper|fiber)SYSTEM(config-eth-port)# config

35、 media mode configconfig無SYSTEM(config-eth-port)# config 3.2.1 showeth-showeth-port無 Detail Information3.2.1 showeth-showeth-port無 Detail Information of Ethernet Port 4-Port :AdminS :LinkS :AN-:AN-:AN-:Duplex :Flow:BackPre :Port端口類型，ETH_GTXETH_GEFPAdminLinkUP和3.2.2 showeth-portshoweth-port無無 SYSTEM(

36、config)# show eth-port AUTO DUPLEX FLOWCTRL SPEED 4-4-4-4-4-4-4-4-4-4-4-4-6-3.2.2 showeth-portshoweth-port無無 SYSTEM(config)# show eth-port AUTO DUPLEX FLOWCTRL SPEED 4-4-4-4-4-4-4-4-4-4-4-4-6-6-UP和DuplexFlowBackPreferred3.3.1 cleareth-cleareth-port3.3.1 cleareth-cleareth-port 4 vlan VLAN 4.1.1 creat

37、edelete vlan 4 vlan VLAN 4.1.1 createdelete vlan 母，長度為 331 字符。無SYSTEM(config)# create vlan 2 4.1.2 deletedeletevlan.vlan 配置模式,vlan的一些配置，配置完成后輸入”exit”vlanSYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# del port 1/3 SYSTEM(config)# 4.2.1 addaddport slot/portslot-port

38、slot 表示以太網(wǎng)1 ，有效范圍從 taguntag無可以 tag 方式加入多個vlan 中SYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# add port 1/3 4.2.2 deletedeleteportSYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# add port 1/3 4.2.2 deletedeleteportslot/portslot-por

39、tslot 表示以太1到產(chǎn)品的最 ，有效范圍從 taguntag無VLAN刪除時，tag 屬性必須與添加時一致，否則刪除失敗。當端 SYSTEM(config)# config vlan SYSTEM(config-vlan)# delete port 1/2 SYSTEM(config-vlan)# delete port 1/3 VLANTrunk4.3.1 add|delete 全部加入 vlan 中taguntag無vlan中僅允許添加一個trunk SYSTEM(config)# create trunk 1 SYSTEM(config)# config trunk (參見SYSTE

40、M(config-trunk)# add port 1-SYSTEM(config-trunk)# 無vlan中僅允許添加一個trunk SYSTEM(config)# create trunk 1 SYSTEM(config)# config trunk (參見SYSTEM(config-trunk)# add port 1-SYSTEM(config-trunk)# SYSTEM(config)# config vlan SYSTEM(config-vlan)# add trunk 1 4.3.2 showvlantrunk-showvlantrunk-VLAN 配置模式下，可showvl

41、antrunk-membervlan的匯聚端無SYSTEM(config-vlan)# show vlan trunk-VLAN VLAN TRUNKID200200SYSTEM(config-4.3.3 showvlantrunk-membershowvlantrunk-member以列表方式顯示當前所有已創(chuàng)建的 vlan untagged 及 tagged 匯聚端口列表無無VLANVID，(D)為DOWN，(U)VLANID SYSTEM(config)# show vlan trunk-member VLAN VLAN TRUNKID200200VLAN4.4.1 showvlanpor

42、t-showvlanport-SYSTEM(config)# show vlan trunk-member VLAN VLAN TRUNKID200200VLAN4.4.1 showvlanport-showvlanport- 無SYSTEM(config-vlan)# show vlan port-member Codes: U-vlanlinks usisD-vlanlinks usisu-untaggedportt-taggedport VLAN VLAN PORT MEMBER Bondedtoslot:SYSTEM(config-VLANVID，(D)為DOWN，(U)VLANID

43、4.4.2 showvlanport-membershowvlanport-membervlan vid、名字、 untagged 及 tagged 端口列表無無無SYSTEM(config)# show vlan port-member Codes: U-vlanlinks usis4.4.2 showvlanport-membershowvlanport-membervlan vid、名字、 untagged 及 tagged 端口列表無無無SYSTEM(config)# show vlan port-member Codes: U-vlanlinks usisD-vlanlinks us

44、isu-untaggedportt-taggedport VLAN VLAN PORT MEMBER 1 Bondedtoslot:Bondedtoslot:BondedtoUDut*VLAN VE4.5.1 bondbond vlan slot unbondvlanslot這里指定對應 vlan 業(yè)務要交由那個槽位的VLAN VE4.5.1 bondbond vlan slot unbondvlanslot這里指定對應 vlan 業(yè)務要交由那個槽位的無SYSTEM(config)# create vlan SYSTEM(config)# config vlan SYSTEM(config-v

45、lan)# add port 1/2 SYSTEM(config)# SYSTEM(config)#bondvlan2slot4.5.2 unbondunbondvlanslot這里指定對應 vlan 業(yè)務要交由那個槽位的BondedtoUDut*無SYSTEM(config)# bond vlan 2 slot SYSTEM(config)# unbond vlan 2 slot QinQ4.6.1 configportconfigportPORTNOqinq無SYSTEM(config)# bond vlan 2 slot SYSTEM(config)# unbond vlan 2 slo

46、t QinQ4.6.1 configportconfigportPORTNOqinqslot-port，slot 表示以 ，有效范圍從 其它轉發(fā)（參見 3.6.2。SYSTEM(config-vlan)# config port 1-1 qinq 4.6.2 configvlanconfigvlanqinqSYSTEM(config-vlan)# config vlan qinq 4.6.3 setvlanto-cpu-portSYSTEM(config-vlan)# config vlan qinq 4.6.3 setvlanto-cpu-portsetvlanto-cpu-portqinq

47、使能CPUQinQ關閉CPUQinQQinQ的vlanbond到指定的槽位上，也就默認指定了本條命令所要開啟 QinQ 的 CPU 槽位 SYSTEM(config)# set vlan 2 to-cpu-port qinq 5 FDBMAC MAC 實現(xiàn)二層數(shù)據(jù)轉發(fā)，這張二層就是FDB（Forwarding FDB(Forwarding Database)FDBVLAN，因此每個FDB 5 FDBMAC MAC 實現(xiàn)二層數(shù)據(jù)轉發(fā)，這張二層就是FDB（Forwarding FDB(Forwarding Database)FDBVLAN，因此每個FDB VLAN FDB 表是交換機中所有FDB

48、FDBtagVLAN每個交換機的端口 老化配置命configfdbconfigfdbagingtime(10-。1 5 秒。，1000FDB FDB 300SYSTEM(config)# config fdb agingtime FDB 配置命createicfdbwithcreatefdbdeletefdbicmacMACvlanporticmacMACvlan1-FDB 表項，匹配時向指定的端口（配置端口）據(jù)。靜態(tài)FDB 配置命createicfdbwithcreatefdbdeletefdbicmacMACvlanporticmacMACvlan1-FDB 表項，匹配時向指定的端口（配置

49、端口）據(jù)。靜態(tài):，其中 slot/port slot-port，slot 表示以太 最大槽位號（主控槽位除外。port 無無 port5.2.2 deleteicfdbbymacanddeletefdbicmacMACvlan1-vlan中除一條靜態(tài)FDB 表項必 選 參 數(shù) ， 地 址 格 式 為 ：: 無無SYSTEM(config)#deletefdbs icmac0000:11:11aa:aavlan5.2.3 deleteicfdbbydeletefdbicvlan1-SYSTEM(config)#deletefdbs icmac0000:11:11aa:aavlan5.2.3 de

50、leteicfdbbydeletefdbicvlan1-vlan的靜態(tài)FDB表項 無無SYSTEM(config)# delete fdb icvlan5.2.4 deleteicfdbbydeletefdbicportslot/port slot-port，slot 表示以太 最大槽位號（主控槽位除外。port 無無SYSTEM(config)# delete fdb 5.3.1 showshowfdbslot/port slot-port，slot 。 :X16進制數(shù)，當數(shù)字為af無無 Codes: CPUportwhichconnecttocpuviaHSC-highspeedchann

51、eldirecttocpu= SLOT/PORT slot/port slot-port，slot 。 :X16進制數(shù)，當數(shù)字為af無無 Codes: CPUportwhichconnecttocpuviaHSC-highspeedchanneldirecttocpu= SLOT/PORT -%FDBTABLEIS %FDBTABLEISCannotconnecttoslot %FDBTABLEISCannotconnecttoslot 5.3.2 showfdbshowfdb無無無SYSTEM(config)# show fdb Cannotconnect5.3.2 showfdbshowf

52、db無無無SYSTEM(config)# show fdb CannotconnecttoslotCannotconnecttoslotThe FDB AGINGTIME is CannotconnecttoslotThe FDB AGINGTIME is CannotconnecttoslotCannotconnecttoslotCannotconnectto5.3.3 showfdbshowfdbFDB表中所有有效FDB表項條數(shù)無無無SYSTEM(config)# show fdb FDB 表中配置的老化時間，例如：30 為 30 個是5秒，即默認老化時間為 150 秒 Cannotcon

53、necttoslotCannotconnectto CannotconnecttoslotCannotconnecttoslotCannotconnecttoslot%FDBTABLEIS CannotconnecttoslotCannotconnecttoslot 顯示該槽位的FDB 表示本槽位己插單板并運行，但無FDB 6 erfaceerface來處理對應 vlan 的業(yè)務。6 erfaceerface來處理對應 vlan 的業(yè)務。 槽槽ve1，ve2在系統(tǒng)下不可見， erfaceSYSTEM(config)# create vlan SYSTEM(config)# erfaceve1S

54、YSTEM(config-erfaceerface vlan 刪除 vlan 普通三層接口要創(chuàng)建三層接口的無vlan1 不允許創(chuàng)建三層接口。SYSTEM(config)# erfaceSYSTEM(config-erfaceerfaceethslot-vlan1 不允許創(chuàng)建三層接口。SYSTEM(config)# erfaceSYSTEM(config-erfaceerfaceethslot- 無erface eth1-SYSTEM(config-erface 無必須先有父接口，然后才能創(chuàng)建子接口，例如：先創(chuàng)erface1-2.3。(erface eth4-SYSTEM(config-必須先有

55、父接口，然后才能創(chuàng)建子接口，例如：先創(chuàng)erface1-2.3。(erface eth4-SYSTEM(config-erface 子子接口無erface1-2，再創(chuàng)建 erface1-2.3，再創(chuàng)建見6.1.3)erface1-2.3.4(erface eth4-SYSTEM(config-6.2.1 ipaddressipaddressIp 無 6.2.1 ipaddressipaddressIp 無 。SYSTEM (config-if)# ip address 10.0 6.3.1 erface 參數(shù)格式：slot-port。slot 控 無無SYSTEM(config)#show er

56、face eth4- index12metric1mtuflags: UP,BROADCAST,RUNN inet6fe80:21f:64 0inputpackets(0multicast),0bytes,00inputerrors,00inputpackets(0multicast),0bytes,00inputerrors,0length,0overrun,0CRC,00fifo,0 0outputerrors,0aborted,0carrier,0fifo,00window, 0s 7 ACLACL 7.1.1 configaclswtich-configaclswtich-board進

57、入ACL配置模式7 ACLACL 7.1.1 configaclswtich-configaclswtich-board進入ACL配置模式無ACL配置模式后，可進行交換板單板的ACLexitSYSTEM(config)# config acl swtich-board SYSTEM(config-acl-sw-7.1.2 configaclconfigaclservice開啟或者關閉本板ACL 開啟ACL關閉ACL使用該命令能夠使能所配置單板的ACL ACL 7.2.1 showaclshowacl顯示全局ACL顯示全局ACL GlobalaclserviceisACL 7.2.1 showa

58、clshowacl顯示全局ACL顯示全局ACL GlobalaclserviceisSYSTEM(config-acl-sw-規(guī)則配置命7.3.1 acl dip (A.B.C.D/M|any) sip (A.B.C.D/M|any) 配置基于ipacl規(guī)則，動作為允許，及轉發(fā)報文到CPU 1-1000extended 時，acl ID Globalacl全局ACLr的無n aclstandard5denyipdip/32sipr的無n aclstandard5denyipdip/32sipSYSTEM(config-acl-sw-board)# acl standard 6 trap ip

59、dip any 10.1 7.3.2 acltcp(standard|extended)acl-idx(permit|deny|(tcp| sip(A.B.C.D/M|any)src-port(|any)1-1000extended 時，acl ID匹配TCP r的無SYSTEM(config-acl-sw-board)# acl standard 5 deny tcp dip dst-port 21 sip any src-port 7.3.3 acltcp/udpacl(standard|extended)(tcp | udp) dip (A.B.C.D/M|any)sip(A.B.C.D

60、/M|any) src-port (|any )dst-port 21 sip any src-port 7.3.3 acltcp/udpacl(standard|extended)(tcp | udp) dip (A.B.C.D/M|any)sip(A.B.C.D/M|any) src-port (|any )1-1000extended 時，acl ID匹配TCPslot/portslot-port，slot 表示以1 產(chǎn)品的最大槽位號。port 1 無ACL rrID-1SYSTEM(config-acl-sw-board)# acl standard 5 redirect 2/3 tc