華為交換機(jī)下名詞解析..

1、華為交換機(jī)命令PCA logi n: root p assword: linux# shutdow n -h now# in it 0# logout# logi n# ifconfig# ifconfig eth0 n etmask # ifconfig eht0 n etmask dow n# route add gw # route del gw # route add default gw # route del default gw # route# ping # telnet ;使用root用戶;口令是 linux;關(guān)機(jī);關(guān)機(jī);用戶注銷;用戶登錄;顯

2、示IP地址;設(shè)置IP地址;禁用IP地址;設(shè)置網(wǎng)關(guān);刪除網(wǎng)關(guān);設(shè)置網(wǎng)關(guān);刪除網(wǎng)關(guān);顯示網(wǎng)關(guān);發(fā)ECHO包;遠(yuǎn)程登錄交換機(jī)命令Quidwaydis curQuidwaydis play curre nt-c on figurati onQuidwaydis play in terfacesQuidwaydis play vla n allQuidwaydis play version;顯示當(dāng)前配置;顯示當(dāng)前配置;顯示接口信息;顯示路由信息;顯示版本信息Quidways uper p asswordQuidwaysys nameQuidwayi nterface ether net 0/1Quidw

3、ayi nterface vlan xQuidway-Vla n-in terfacexi p address ;修改特權(quán)用戶密碼;交換機(jī)命名;進(jìn)入接口視圖;進(jìn)入接口視圖;配置VLAN的IP地址Quidwayip route-static O.O.O.O O.O.O.O Quidwayjri pQuidwaylocal-user ftp;靜態(tài)路由=網(wǎng)關(guān);三層交換支持Quidwayuser- in terface vty 0 4S3026-ui-vty0-4authe nticati on-m ode p assword S3026-

4、ui-vty0-4set authe nticati on-m ode p assword simple 222 S3026-ui-vty0-4user privilege level 3;進(jìn)入虛擬終端;設(shè)置口令模式;設(shè)置口令;用戶級(jí)別;進(jìn)入端口模式;進(jìn)入端口模式;配置端口工作狀態(tài);配置端口工作速率;配置端口流控;配置端口平接扭接;設(shè)置端口工作模式;當(dāng)前端口加入到 VLAN;設(shè)trunk允許的 VLAN;設(shè)置trunk端口的PVID;激活端口;關(guān)閉端口;返回;創(chuàng)建VLAN;在VLAN中增加端口；簡(jiǎn)寫方式;在VLAN中增加端口；簡(jiǎn)寫方式;指定鏡像端口;指定被鏡像端口;指定鏡像和被鏡像Quidwa

5、yi nteface ether net 0/1Quidwayi nt e0/1Quidway-Ethernet0/1du plex half|full|auto Quidway-Ethernet0/1s peed 10|100|auto Quidway-Ethernet0/1flow-co ntrolQuidway-Ether net0/1mdi across|auto |no rmal Quidway-Ether net0/1 port lin k-t ype trun k|access|hybrid Quidway-Ether net0/1 port access vlan 3 Quid

6、way-Ethernet0/ 2port trunk permit vlan ID|AII Quidway-Ethernet0/ 3port trunk pvid vlan 3 Quidway-Ethernet0/1u ndo shutdow n Quidway-Ethernet0/1shutdow n Quidway-Ethernet0/1quit Quidwayvlan 3Quidway-vla n3 port ethernet 0/1Quidway-vla n3 port eO/1Quidway-vla n3 port ethernet 0/1 to ethernet 0/4Quidwa

7、y-vlan3port e0/1 to e0/ 4 Quidway mon itor- port Quidway port mirror Quidway port mirror in t_list observ ing-port int_type int_numQuidwaydescri ptio n stri ngQuidwaydescri ptio nQuidwaydis play vla n vla n_id;指定VLAN描述字符;刪除VLAN描述字符;查看VLAN設(shè)置Quidwayst p en able|disableQuidwayst p priority 4096Quidways

8、t p root p rimary|sec on daryQuidway-Ethernet0/1st p cost 200;設(shè)置生成樹，默認(rèn)關(guān)閉 ;設(shè)置交換機(jī)的優(yōu)先級(jí);設(shè)置為根或根的備份;設(shè)置交換機(jī)端口的花費(fèi)Quidwaylink-aggregation e0/1 to e0/ 4 ingress|bothQuidway undo lin k-aggregati on e0/1|all;端口的聚合;始端口為通道號(hào)SwitchA-vla nxisolate-user-vla n en able SwitchAisolate-user-vla n sec on dary Quidway-Ether

9、net0/ 2port hybrid pvid vlan Quidway-Ethernet0/ 2port hybrid pvid Quidway-Ethernet0/ 2port hybrid vlan vlan_id_list untagged;設(shè)置主 vlan ;設(shè)置主vlan包括的子vlan;設(shè)置vlan的pvid;刪除vlan的pvid;設(shè)置無標(biāo)識(shí)的vlan如果包的vlan id與PVId一致，則去掉 vlan信息.默認(rèn)PVID=1。所以設(shè)置PVID為所屬vlan id,設(shè)置可以互通的vlan為untagged.local-user adm in service-t ype teln

10、et level 3 p assword simple adm inuser- in terface vty 0 4authe nticatio n-m ode schemesuper p assword level 3 simple adm inuser- in terface vty 0 4set authe nticati on p assword simplelocal-user adm inp assword simple hwhzw nw service-t ype telnet term inal level 3authe nticatio n-m ode scheme以上是配用

11、戶名路由器命令Quidwaydis play versionQuidwaydis play curre nt-c on figurati onQuidwaydis play in terfacesQuidwaydis play ip route;顯示版本信息;顯示當(dāng)前配置;顯示接口信息;顯示路由信息Quidwaysys name aabbccQuidwaysu per passwrod 123456Quidwayi nterface serial0Quidway-serial0i p address Quidway-serial0 undo shutdow nQuidwayl ink-p ro

12、tocol hdlcQuidwayuser- in terface vty 0 4Quidway-ui-vty0-4authe nticati on-m ode p assword Quidway-ui-vty0-4set authe nticatio n-m ode p assword simple 222 Quidway-ui-vty0-4user p rivilege level 3Quidway-ui-vty0-4quit;更改主機(jī)名;設(shè)置口令;進(jìn)入接口;配置端口 IP地址;激活端口;綁定hdlc協(xié)議Quidwaydebugg ing hdic all serialOQuidwayde

13、bugg ing hdIc event serialO;顯示所有信息;調(diào)試事件信息Quidwaydebugg ing hdic p acket serialO;顯示包的信息靜態(tài)路由:Quidwayi p route-static i nteface nu mber| nexth op valuereject|blackhole例如：Quidwayip route-static 16 Quidwayip route-static Quidwayip route-static 16

14、Serial 2Quidwayip route-static 動(dòng)態(tài)路由:Quidwayri pQuidwayri p workQuidwayri p inputQuidwayri p out putQuidway-ri pn etwork Quidway-ri pn etwork all Quidway-ri pp eer ip-address Quidway-ri psummaryQuidwayri p version 1Quidwayri p version 2 multicast Quidway-Ether net0ri p

15、 sp lit-horiz on;設(shè)置動(dòng)態(tài)路由;設(shè)置工作允許;設(shè)置入口允許;設(shè)置出口允許;設(shè)置交換路由網(wǎng)絡(luò);設(shè)置與所有網(wǎng)絡(luò)交換;路由聚合;設(shè)置工作在版本1 ;設(shè)版本2，多播方式 ;水平分隔Quidwayrouter id A.B.C.DQuidwayos pf en ableQuidway-os pfjimport- route directQuidway-Serial0os pf en able area ;配置路由器的ID;啟動(dòng)OSPF協(xié)議;引入直聯(lián)路由;配置OS PF區(qū)域標(biāo)準(zhǔn)訪問列表命令格式如下:acl match-order con fig|autorule no rmal|s pec

16、ial permit|de ny source source-addr source-wildcard|a ny例：;默認(rèn)前者順序匹配。Quidwayacl 10Quidway-acl-10rule normal permit source 55Quidway-acl-10rule no rmal deny source any擴(kuò)展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴(kuò)展訪問列表：rule no rmal|s pecial permit|de ny tc p|udp source |a ny desti nati on |a ny op erate配置I

17、CMP協(xié)議的擴(kuò)展訪問列表:rule no rmal|s pecial permit|de ny icm p source |a ny dest in ati on |a ny ic mp-code loggi ng;等于；大于;小于;不等;區(qū)間擴(kuò)展訪問控制列表操作符的含義equal portnu mber greater-tha n portnu mber less-tha n portnu mber no t-equal portnu mber range portnu mberl portnu mber2擴(kuò)展訪問控制列表舉例Quidwayacl 101Quidway-acl-101rule

18、 deny souce any desti nati on anyQuidway-acl-101rule p ermit icm p source any dest in ati on any icm p-type echoQuidway-acl-101rule p ermit icm p source any desti nati on any icm p-type echo-re ply Quidwayacl 102Quidway-acl-102rule permit ip source dest in ation Qu

19、idway-acl-102rule deny ip source any dest in ati on any Quidwayacl 103Quidway-acl-103rule p ermit tcp source any dest in ati on dest in ati on-port equal ftpQuidway-acl-103rule p ermit tcp source any dest in ati on dest in ati on-port equalWWWQuidwayfirewall en able

20、Quidwayfirewall default p ermit|de nyQuidwayi nt e0Quidway-EthernetOfirewall p acket-filter 101 in bou nd|outbou nd地址轉(zhuǎn)換配置舉例Quidwayfirewall en ableQuidwayfirewall default p ermitQuidwayacl 101;內(nèi)部指定主機(jī)可以進(jìn)入e0Quidway-acl-101rule deny ip source any dest in ati on anyQuidway-acl-101rule permit ip source 12

21、 0 desti nation anyQuidway-acl-101rule permit ip source 0 desti nation anyQuidway-acl-101rule permit ip source 0 desti nation anyQuidway-acl-101rule permit ip source 0 desti nation any Quidway-acl-101quitQuidwayi nt e0Quidway-Ethernet0firewall p acket-filter

22、101 in bou ndQuidwayacl 102允許進(jìn)入S0；外部特定主機(jī)和大于 1024端口的數(shù)據(jù)包Quidway-acl-102rule deny ip source any dest in ati on anyQuidway-acl-102rule permit tcp source 0 dest in ation 0Quidway-acl-102rule permit tcp source any destination 0 destination-port great-tha n1024 Quidway-

23、acl-102quit;設(shè)是路由器出口 IP。Quidwayi nt s0Quidway-Serial0firewall p acket-filter 102 in bou ndQuidway-Serial0 nat outbou nd 101 in terface;是 Easy ip,將 acl 101 允許的 IP 從本接口出時(shí)變換源地址。;global_ port不寫時(shí)使用內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令（靜態(tài)nat）:nat server global p ort in side port p rotocolin side_ portQuidway-Serial0 n

24、at server global in side ftp tcpQuidway-Serial0 nat server global in side telnet tcpQuidway-Serial0 nat server global in side www tcp設(shè)有公網(wǎng) IP: 0103 可以使用。Quidway nat address-group 01 202.38.160.

25、103 pool1 Quidwayacl 1Quidway-acl-1rule permit source 55Quidway-acl-1rule deny source anyQuidway-acl-1i nt serial 0Quidway-Serial0 nat outbo und 1 address-gro up po ol1對(duì)外訪問;對(duì)外訪問（原例題）;建立地址池；指定允許的內(nèi)部網(wǎng)絡(luò);在 s0 口從地址池取出IP;默認(rèn)的協(xié)議潞由器1Quidway-Serial0 nat server global 01 in side 1

26、 ftp tcpQuidway-Serial0 nat server global 02 in side www tcpQuidway-Serial0 nat server global 02 8080 in side www tcpQuidway-Serial0 nat server global 03 in side smtp udpPPP設(shè)置：Quidway-s0li nk-p rotocol pppPPP驗(yàn)證：主驗(yàn)方：pap

27、i cha pQuidwaylocal-user q2 p assword si mpl e|c ipher hello Quidwayi nterface serial 0Quidway-serial0 ppp authe nticati on-m ode pap| cha pQuidway-serialO ppp cha p user q1;pap時(shí)，沒有此句pap被驗(yàn)方：Quidwayinterface serial 0;路由器 2Quidway-serial0 ppp pap local-user q2 p assword si mpl e|ci pher hellochap被驗(yàn)方：Q

28、uidwayi nterface serial 0Quidway-serial0 ppp cha p user q2Quidway-serial0local-user q1 p assword si mp le|c ipher hello ;路由器2；自己路由器名對(duì)方路由器名幀中繼 frame-relay（二分冊(cè) 6-61）q1fr switch ingq1i nt s1q1-Serial1ip address 1 q1-Serial1li nk-p rotocol frq1-Serial1fr in terface-t ype dceq1-S

29、erial1fr dlci 100q1-Serial1fr in arpq1-Serial1fr map ip 2 dlci 100;封裝幀中繼協(xié)議q2i nt s1q2-Serial1ip address 2 q2-Serial1li nk-p rotocol frq2-Serial1fr in terface-ty pe dteq2-Serial1fr dlci 100q2-Serial1fr inarpq2-Serial1fr map ip 1 dlci 100幀中繼監(jiān)測(cè)q1dis play

30、 fr lmi-i nfoi nterface type nu mberq1dis play fr mapq1dis play fr pvc-in foserial in terface-nu mberdlci dlci-nu mberq1dis play fr dlci-switchq1dis play fr in terfaceq1reset fr inarp-i nfoq1debuggi ng fr alli nterface type nu mberq1debuggi ng fr arp i nterface type nu mberq1debuggi ng fr even t in

31、terface type nu mberq1debuggi ng fr lmii nterface type nu mber基本命令?監(jiān)控視圖命令：boot cd clockclustercopy debuggi ng deletedir dis play formatfreeftpIan guage-mode lockmkdirmoremoven td p ping pwd quit rebootren ameresetrmdirsavesendstack ing super system-view tel net termi naltracert un deleteun do設(shè)置啟動(dòng)選項(xiàng)改

32、變當(dāng)前路徑設(shè)置系統(tǒng)時(shí)鐘執(zhí)行集群命令拷貝文件調(diào)試功能刪除文件顯示系統(tǒng)中的文件列表顯示系統(tǒng)運(yùn)行信息格式化設(shè)備釋放用戶接口建立一個(gè)FTP連接設(shè)置語言環(huán)境鎖住用戶終端創(chuàng)建新目錄顯示文件的內(nèi)容移動(dòng)文件運(yùn)行NTDP命令檢查網(wǎng)絡(luò)連接或主機(jī)是否可達(dá)顯示當(dāng)前路徑退出當(dāng)前的命令視圖重啟交換機(jī)重命名文件或目錄執(zhí)行清除操作刪除已經(jīng)存在的目錄保存當(dāng)前有效配置向其他的用戶終端接口傳送信息在堆疊設(shè)備上運(yùn)行命令指定用戶優(yōu)先級(jí)進(jìn)入系統(tǒng)視圖建立一個(gè)TELNET連接設(shè)置終端特性跟蹤到達(dá)目的地的路由恢復(fù)刪除的文件執(zhí)行命令否操作或者恢復(fù)為命令的缺省值system-view進(jìn)入系統(tǒng)視圖，鍵入Ctrl+Z退回到用戶視圖.S3026?系統(tǒng)視

33、圖命令：aclamarp clustercomma nd-p rivilege cutdhc p-snoopingdis playdomai ndotlxexecutefileftpgarpgmrp gvrp hab p headerhgm pserver igmp-snooping info-cen terin terfaceipisolate-user-vla nlin k-aggregati on local-server local-user mac-address mirrored-tondpn td pntp-servicep acket-filterping queue-sche

34、duler quitradiusren amereturnrmonservicesnmp-age nt指定ACL配置信息訪問管理指定全局ARP配置信息指定集群配置信息設(shè)置命令權(quán)限切斷連接DHC P監(jiān)聽顯示系統(tǒng)運(yùn)行信息增加域或修改域?qū)傩灾付?02.1X配置信息下發(fā)配置文件設(shè)置文件系統(tǒng)參數(shù)設(shè)置FTP服務(wù)器參數(shù) 通用屬性注冊(cè)協(xié)議GAR P多播組注冊(cè)協(xié)議GAR P VLAN注冊(cè)協(xié)議指定HABP配置信息 定義登錄標(biāo)題指定HGMP server配置信息IGMP偵聽指定信息中心配置信息指定接口配置視圖指定IP配置信息設(shè)置 isolate-user-vlan 屬性設(shè)置接口匯聚指定本地RADIUS認(rèn)證服務(wù)器配置

35、信息指定本地用戶配置信息配置MAC地址鏡像報(bào)文鄰居發(fā)現(xiàn)協(xié)議指定NTDP配置信息指定NTP(網(wǎng)絡(luò)時(shí)間協(xié)議)配置信息使用訪問列表過濾報(bào)文檢查網(wǎng)絡(luò)連接或主機(jī)是否可達(dá)設(shè)置隊(duì)列調(diào)度模式和參數(shù)退出當(dāng)前的命令視圖指定RADIUS配置信息重新命名信息通道退到用戶視圖配置 RMON設(shè)置功能開關(guān)，缺省時(shí)關(guān)閉指定 SNMP( Sim pie Network Ma nageme nt P rotocol)配置信息stack ing stp supersys name tcp tftp time-ra nge tracert traffic- priority traffic-redirect traffic-stat

36、isticun douser- in terfacevlan指定堆疊配置信息生成樹協(xié)議修改超級(jí)用戶密碼參數(shù) 設(shè)置主機(jī)名稱指定全局TC P配置信息tftp命令指定時(shí)間段配置信息跟蹤到達(dá)目的地的路由設(shè)置報(bào)文優(yōu)先級(jí)重定向報(bào)文統(tǒng)計(jì)報(bào)文流量取消當(dāng)前設(shè)置配置用戶終端接口配置VLANs3026test saved-c on figurati on%未知的命令，錯(cuò)誤發(fā)生在所指的位置.reset saved-c on figurati onflash memory中的配置將被擦除. ?Y/Nyflash memory 中的配置.交換機(jī)的你確信嗎開始擦除請(qǐng)稍侯.擦除配置成功.Y/Nyla nguage-mode

37、chin ese改變當(dāng)前語言環(huán)境，確認(rèn)切換？%改變到中文模式。reboot確實(shí)要重啟交換機(jī)嗎？ Y/N y%20072/2 11:58:50 s3026 DEV/7DEV_LOG:Slot=1; Switch is rebooted.Start ing卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*幵*Quidway S3026E BOOTROM, Version 120卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*幵*Cop yright(C) 2000-2003 by HUAWEI TECHNOLOGIES CO.,LTD.Creation date : Jul 18 2003, 09:

38、43:56CPU type: MIPSCPU Clock Sp eed : 150MHzMemory Size : 64MBIn itialize LS65LTSUSDRAM selftest.OK!OK!FLASH selftestCPLD selftest.OK!OK!Switch chip selftestOK!Switch SDRAM selftestOK!Port g1/1 has 100BASE-FX MM module Port g2/1 has 100BASE-FX MM module PHY selftestOK!fini shed!Please check port led

39、sThe switch Mac is: 00E0-FC1E-2DD7P ress Ctrl-B to en ter Boot Men u.0Auto-booti ng.Start ing .幵*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄*卄* All rights reserved (1997-2003)* Without the own ers p rior writte n consent,* no deco mp ili ng or reverse-e ngin eeri ng shall be allowed.*User in terface Aux0/0 is a

40、vailablePI ease P ress ENTER.systemEn ter system view , return user view with Ctrl+Z.Quidwaysys name s3026S3026s3026su per ?p assword 設(shè)置密碼s3026su per password ? cip her 密文顯示密碼 level設(shè)置指定優(yōu)先級(jí)的進(jìn)入密碼sim pie明文顯示密碼s3026su per password simp le 123s3026s3026save將把當(dāng)前的配置保存到交換機(jī)的flash memory中.你確信嗎？Y/Ny將運(yùn)行時(shí)的配置寫入 F

41、lash Memory中.請(qǐng)稍侯.將運(yùn)行時(shí)的配置寫入Flash Memory中成功.system進(jìn)入系統(tǒng)視圖，鍵入Ctrl+Z退回到用戶視圖.s3026i p?ips3026ip ?hosthtt pman aged-multicastroute-statics3026stp ?bpdu-p rotect iondisableen ablemodepriorityroottimers3026stp en ables3026在IP主機(jī)名列表中添加新的主機(jī)名和IP地址超文本傳輸協(xié)議受控組播命令配置靜態(tài)路由設(shè)置全局BPDU保護(hù)功能關(guān)閉生成樹協(xié)議開啟生成樹協(xié)議設(shè)置狀態(tài)機(jī)的工作模式參數(shù) 設(shè)置網(wǎng)橋的優(yōu)先級(jí)

42、設(shè)置根交換機(jī)設(shè)置生成樹協(xié)議的定時(shí)器常用命令刪除設(shè)備配置reset saved-c on figurati on重啟reboot看當(dāng)前配置文件dis play curre nt-c on figurati on改設(shè)備名sys name保存配置save進(jìn)入特權(quán)模式sysview華為只有2層模式 不像cisco enale之后還要conf t定義aclacl nubmere XXXX（ 3000 以上）進(jìn)入以后rule permit/deny IP/TCP/UDP 等 source XXX.XXX.XXX.XXX XXX.XXX.XXX.X反向） destination XXX.XXX.XXX.XX

43、X XXX.XXX.XXX.XXX向 ） eq注意 華為默認(rèn)沒有deny any any防火墻上端口加載 ACL Quidway-EthernetO/ 0firewall packet-filter 3000 inbound防火墻上新增加用戶local-user XXX （用戶名）password simpie XXX （密碼）local-user XXX service-t ype ppp刪除某條命令undo （類似與 cisco 的 no）靜態(tài)路由ip route-static XXX.XXX.XXX.XXX對(duì)vpdn用戶設(shè)置acl的接口in te*ce V

44、irtual-Te mp latel查看路由表dis play ip routi ng-table設(shè)定telnet密碼user-i nte*ce vty 0 4user p rivilege level 3set authe nticati on p assword simple XXX啟動(dòng)/關(guān)閉啟動(dòng) un shut關(guān)閉shut動(dòng)態(tài)nat設(shè)置acl number 3000rule 0 permit ip source XXX.XXX.XXX.XXXrule 1 permit ip source XXX.XXX.XXX.XXXrule 2 permit ip source XXX.XXX.XXX.XXXin te*ce Ethernet1 /0descri ptio n =To-l ntern et(WAN)=ip address XXX.XXX.XXX.XXX XXX.XXX.XXX.XXXnat outb