路由命令華為交換

1、PCAlogin:root；使用root用戶password:linux；口令是linux#shutdown-hnow；關機#init0；關機#logout；用戶注銷#login；用戶登錄#ifconfig；顯示IP地址#ifconfigeth0netmask；設置IP地址#ifconfigeht0netmaskdown；禁用IP地址#routeaddgw；設置網(wǎng)關#routedelgw；刪除網(wǎng)關#routeadddefaultgw；設置網(wǎng)關#routedeldefaultgw；刪除網(wǎng)關#route；顯示網(wǎng)關#ping；發(fā)ECHO包#telnet；遠程登錄華為路由器

2、交換機配置命令：交換機命令Quidwaydiscur；顯示當前配置Quidwaydisplaycurrent-configuration；顯示當前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayvlanall；顯示路由信息Quidwaydisplayversion；顯示版本信息Quidwaysuperpassword；修改特權用戶密碼Quidwaysysname；交換機命名Quidwayinterfaceethernet0/1；進入接口視圖Quidwayinterfacevlanx；進入接口視圖Quidway-Vlan-interfacexipad

3、dress；配置VLAN的IP地址Quidwayiproute-static；靜態(tài)路由網(wǎng)關Quidwayrip；三層交換支持Quidwaylocal-userftpQuidwayuser-interfacevty04；進入虛擬終端S3026-ui-vty0-4authentication-modepassword；設置口令模式S3026-ui-vty0-4setauthentication-modepasswordsimple222；設置口令S3026-ui-vty0-4userprivilegelevel3

4、；用戶級別Quidwayinterfaceethernet0/1；進入端口模式Quidwayinte0/1；進入端口模式Quidway-Ethernet0/1duplexhalf|full|auto；配置端口工作狀態(tài)Quidway-Ethernet0/1speed10|100|auto；配置端口工作速率Quidway-Ethernet0/1flow-control；配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal；配置端口平接扭接Quidway-Ethernet0/1portlink-typetrunk|access|hybrid；設置端口工作模式Q

5、uidway-Ethernet0/1portaccessvlan3；當前端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All；設trunk允許的VLANQuidway-Ethernet0/3porttrunkpvidvlan3；設置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown；激活端口Quidway-Ethernet0/1shutdown；關閉端口Quidway-Ethernet0/1quit；返回Quidwayvlan3；創(chuàng)建VLANQuidway-vlan3portethernet0/1；在VL

6、AN中增加端口Quidway-vlan3porte0/1；簡寫方式Quidway-vlan3portethernet0/1toethernet0/4；在VLAN中增加端口Quidway-vlan3porte0/1toe0/4；簡寫方式Quidwaymonitor-port；指定鏡像端口Quidwayportmirror；指定被鏡像端口Quidwayportmirrorint_listobserving-portint_typeint_num；指定鏡像和被鏡像Quidwaydescriptionstring；指定VLAN描述字符Quidwaydescription；刪除VLAN描述字符Quidw

7、aydisplayvlanvlan_id；查看VLAN設置Quidwaystpenable|disable；設置生成樹,默認關閉Quidwaystppriority4096；設置交換機的優(yōu)先級Quidwaystprootprimary|secondary；設置為根或根的備份Quidway-Ethernet0/1stpcost200；設置交換機端口的花費Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口為通道號SwitchA-vlanxisolate-user-vla

8、nenable；設置主vlanSwitchAisolate-user-vlansecondary；設置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan；設置vlan的pvidQuidway-Ethernet0/2porthybridpvid；刪除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged；設置無標識的vlan如果包的vlanid與PVId一致，則去掉vlan信息.默認PVID=1。所以設置PVID為所屬vlanid,設置可以互通的vlan為untagged.華為

9、路由器交換機配置命令：路由器命令Quidwaydisplayversion；顯示版本信息Quidwaydisplaycurrent-configuration；顯示當前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayiproute；顯示路由信息Quidwaysysnameaabbcc；更改主機名Quidwaysuperpasswrod123456；設置口令Quidwayinterfaceserial0；進入接口Quidway-serial0ipaddress；配置端口IP地址Quidway-serial0undoshutdown；激活端口Quidw

10、aylink-protocolhdlc；綁定hdlc協(xié)議Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0；顯示所有信息Quidwaydebugginghdlceventserial0；調(diào)試事件信息Quidwaydebugg

11、inghdlcpacketserial0；顯示包的信息華為路由器交換機配置命令：靜態(tài)路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static華為路由器交換機配置命令：動態(tài)路

12、由：Quidwayrip；設置動態(tài)路由Quidwayripwork；設置工作允許Quidwayripinput；設置入口允許Quidwayripoutput；設置出口允許Quidway-ripnetwork；設置交換路由網(wǎng)絡Quidway-ripnetworkall；設置與所有網(wǎng)絡交換Quidway-rippeerip-address；Quidway-ripsummary；路由聚合Quidwayripversion1；設置工作在版本1Quidwayripversion2multicast；設版本2，多播方式Quidway-Ethernet0ripsplit-horizon；水平分

13、隔QuidwayrouteridA.B.C.D；配置路由器的IDQuidwayospfenable；啟動OSPF協(xié)議Quidway-ospfimport-routedirect；引入直聯(lián)路由Quidway-Serial0ospfenablearea；配置OSPF區(qū)域華為路由器交換機配置命令：標準訪問列表命令格式如下：aclmatch-orderconfig|auto；默認前者順序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalper

14、mitsource55Quidway-acl-10rulenormaldenysourceany華為路由器交換機配置命令：擴展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging華為路由器交換機配置命令：擴展訪問控制列表操作符的含義equalpor

15、tnumber；等于greater-thanportnumber；大于less-thanportnumber；小于not-equalportnumber；不等rangeportnumber1portnumber2；區(qū)間華為路由器交換機配置命令：擴展訪問控制列表舉例Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermiticmpsourceanydestina

16、tionanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsourcedestinationQuidway-acl-102ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulepermittcpsourceanyd

17、estinationdestination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound華為路由器交換機配置命令：地址轉換配置舉例QuidwayfirewallenableQuidwayfirewalldefaultpermitQuidwayacl101;內(nèi)部指定主機可以進入e0Quidway-acl-101ruledenyipsourcea

18、nydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101quitQuidwayinte0Quidway-Ethernet0fire

19、wallpacket-filter101inboundQuidwayacl102;外部特定主機和大于1024端口的數(shù)據(jù)包允許進入S0Quidway-acl-102ruledenyipsourceanydestinationanyQuidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-acl-102quitQuidway

20、ints0Quidway-Serial0firewallpacket-filter102inbound；設是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，將acl101允許的IP從本接口出時變換源地址。華為路由器交換機配置命令：內(nèi)部服務器地址轉換配置命令(靜態(tài)nat)：natserverglobalportinsideportprotocol;global_port不寫時使用inside_portQuidway-Serial0natserverglobalinside129.38.1

21、.1ftptcpQuidway-Serial0natserverglobalinsidetelnettcpQuidway-Serial0natserverglobalinsidewwwtcp設有公網(wǎng)IP：0103可以使用。;對外訪問(原例題)Quidwaynataddress-group0103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource10.110.10

22、.055;指定允許的內(nèi)部網(wǎng)絡Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1;在s0口從地址池取出IP對外訪問Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Serial0natserverglobal

23、028080insidewwwtcpQuidway-Serial0natserverglobal03insidesmtpudp華為路由器交換機配置命令：PPP設置：Quidway-s0link-protocolppp;默認的協(xié)議華為路由器交換機配置命令：PPP驗證：主驗方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-mod

24、epap|chapQuidway-serial0pppchapuserq1;pap時，沒有此句華為路由交換機配置命令：pap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhello華為路由器交換機配置命令：chap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;對方路由器名幀中繼frame-relay(二分冊6-61)q1frswi