華為交換機(jī)常用命令大全

1、.華為交換機(jī)常用配置大全2010-02-27目 錄一、基礎(chǔ)配置舉例31.1配置文件處理31.2配置交換機(jī)遠(yuǎn)程管理3二、以太網(wǎng)配置舉例42.1配置端口屬性42.2配置鏈路聚合62.3配置VLAN79.配置MSTP13三、可靠性193.1配置基于主備份VRRP193.2配置基于負(fù)載分擔(dān)VRRP20四、IP路由214.1配置靜態(tài)路由214.2配置動(dòng)態(tài)路由22五、IP業(yè)務(wù)245.1配置虛接口IP地址245.2DHCP設(shè)置255.3 ACL 舉例27六、IGMP28七、QOS29八、安全性308.1接口安全30九、網(wǎng)絡(luò)管理319.1簡(jiǎn)單網(wǎng)絡(luò)管理協(xié)議配置31十、設(shè)備管理3210.1測(cè)試命令32一、基礎(chǔ)配置

2、舉例1.1配置文件處理導(dǎo)入配置文件tftp x.x.x.x get vrpcfg.zip vrpcfg.zip導(dǎo)出配置文件tftp x.x.x.x put vrpcfg.zip vrpcfg.zip1.2配置交換機(jī)遠(yuǎn)程管理aaa 方式system-viewaaalocal-user huawei password simple huaweilocal-user huawei service-type telnetlocal-user huawei priority level 3quituser-interface vty 0 4authentication-mode aaaquit沒有密碼和

3、使用密碼認(rèn)證同上.二、以太網(wǎng)配置舉例2.1配置端口屬性system-viewinterface gigabitethernet 0/0/24combo-port fiber/coppernetgotination autoloopback-detect enable /環(huán)路檢測(cè)port-isolate enable /端口隔離qos lr cir 625 cbs 625000 /端口限速quit端口隔離舉例2.2配置鏈路聚合system-viewinterface eth-trunk 1interface gigabitgibabitethernet0/0/1eth-trunk 1interf

4、ace gigabitgibabitethernet0/0/2eth-trunk 12.3配置VLAN1.創(chuàng)建單一vlansysvlan 2quit2.創(chuàng)建批量vlan system-view vlan batch vlan 10 to vlan 20quit3.基于干道鏈路VLAN 實(shí)例4配置基于子網(wǎng)vlan允許一個(gè)vlan通過某個(gè)接口Vlan 2port gigabitethernet 0/0/1quit允許多個(gè)vlan通過某個(gè)接口sysport gigabitethernet 0/0/1port link-type trunkport trunk allow-pass vlan all5

5、.配置VLAN聚合6.配置VLAN映射7.配置QINQ8.配置MAC學(xué)習(xí)限制功能2.4.配置MSTP三、可靠性3.1配置基于主備份VRRP3.2配置基于負(fù)載分擔(dān)VRRP四、IP路由4.1配置靜態(tài)路由配置默認(rèn)靜態(tài)路由system-viewip route-static next-hop配置靜態(tài)路由system-viewip route-static next-hop4.2配置動(dòng)態(tài)路由五、IP業(yè)務(wù)5.1配置虛接口IP地址1.單一地址SysVlan 2QuitInterface vlanif 2Ip address 192

6、.168.1.1 24Quit2.配置主從IP地址system-viewinterface vlanif 2ip address 24ip address 24 sub5.2DHCP設(shè)置1.基于全局的DHCP2.DHCP中繼5.3 ACL 舉例六、IGMP七、QOS基于端口限速的QOS八、安全性8.1接口安全九、網(wǎng)絡(luò)管理9.1簡(jiǎn)單網(wǎng)絡(luò)管理協(xié)議配置system-viewsnmp-agent sys-info version v3snmp-agent community read publicsnmp-agent community write privates

7、nmp-agent trap enablesnmp-agent target-host trap address udp-domain udp-port 5000 params securityname public 十、設(shè)備管理10.1測(cè)試命令十一、802.1X認(rèn)證1創(chuàng)建認(rèn)證模板設(shè)置認(rèn)證服務(wù)器的IP地址和協(xié)議端口號(hào)、密鑰Radius-server template radiusserverRadius-server authentication 54 1812Radius-server according 54 1813Radius-server shared-key huaweiUndo radius-server user-name domain-