華為交換機基礎(chǔ)配置培訓(xùn)

1、華為交換機的基本配置by蔡成勇1華為、思科幾種常見的模式（視圖）登入到交換機遠程登入telnet超級終端console用戶視圖系統(tǒng)視圖VLAN視圖用戶界面視圖接口視圖登入到交換機遠程登入telnet超級終端console普通用戶模式特權(quán)用戶模式VLAN模式進程配置模式接口配置模式全局配置模式圖1、思科幾種常見模式圖2、華為幾種常見視圖2華為交換機的幾種常見視圖視圖功能提示符進入命令退出命令用戶視圖查看交換機的簡單運行狀態(tài)和統(tǒng)計信息與交換機建立連接即進入quit斷開與交換機連接系統(tǒng)視圖配置系統(tǒng)參數(shù)Quidway在用戶視圖下鍵入system-viewquit或return返回用戶視圖以太網(wǎng)端口視圖

2、配置以太網(wǎng)端口參數(shù)Quidway-Ethernet0/1在系統(tǒng)視圖下鍵入：interface ethernet 0/1quit返回系統(tǒng)視圖VLAN視圖配置VLAN參數(shù)Quidway-Vlan1在系統(tǒng)視圖下鍵入vlan 1quit返回系統(tǒng)視圖VLAN接口視圖配置VLAN和VLAN匯聚對應(yīng)的IP接口參數(shù)Quidway-Vlanif1在系統(tǒng)視圖下鍵入：interface Vlanif 1quit返回系統(tǒng)視圖用戶界面視圖配置登錄用戶參數(shù)Quidway-ui-vty0-4在系統(tǒng)視圖下鍵入：user-interface vty 0 4quit返回系統(tǒng)視圖3進入視圖配置命令1、從普通視圖到系統(tǒng)視圖:sysQ

3、uidwayquit2 、系統(tǒng)視圖到接口視圖： Quidwayinterface GigabitEthernet 0/0/1Quidway-GigabitEthernet0/0/1quitQuidway3、系統(tǒng)視圖到VLAN視圖： Quidwayvlan 2Quidway-Vlan2quit4 、系統(tǒng)視圖到VLAN接口視圖： Quidwayinterface Vlanif 2Quidway-Vlanif2quit、系統(tǒng)視圖到用戶界面視圖： Quidway user-interface vty 0 4Quidway-ui-vty0-4quit4交換機配置的基本步驟用console口登入交換機配置

4、VTY，以便用互聯(lián)網(wǎng)遠程登入管理交換機建立VLAN配置端口模式把端口添加到VLAN配置VLAN的IP地址配置靜態(tài)路由保存并備份配置5TELNET連接認證設(shè)置配置過程注釋Quidway user-interface vty 0 4Quidway-ui-vty0 authentication-mode password/aaa/noneQuidway-ui-vty0 set authentication password simple/cipher huaweiQuidway super password level 3 simple/cipher huawei # 設(shè)置認證方式#設(shè)置認證的密碼口

5、令為huawei #設(shè)置切換低級別用戶到高級別用戶的密碼 6配置的保存Quidway sysname huawei #指定設(shè)備名稱Quidway quit #退出當前模式 save #保存配置This will save the configuration in the flash memory.The switch configurations will be written to flash.Are you sure?Y/Ny Now saving current configuration to flash memory.Please wait for a while.Current c

6、onfiguration saved to flash memory successfully.7用TFTP服務(wù)器配置交換機t put vrpcfg.zip vrpcfg.zip #配置下載到TFTP服務(wù)器t get vrpcfg.zip vrpcfg.zip #配置上傳到S5303startup saved-configuration vrpcfg.zip #下次啟動時加載的配置文件 8登陸界面及等級切換Please press ENTER.%Apr 2 05:38:46 2000 Quidway SHELL/5/LOGIN: Console login from Aux0/0 super

7、#級別切換Now user privilege is 3 level, and just commands which level is equal to or less than this level can be used.Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGEsystem view #進入系統(tǒng)視圖Enter system view, return to user view with Ctrl+Z.Quidway display current-configuration #顯示當前配置9端口物理屬性配置1、設(shè)置以太網(wǎng)端

8、口的全雙工/半雙工屬性 例：將以太網(wǎng)端口GigabitEtherne0/0/1端口設(shè)置為自協(xié)商狀態(tài)/半雙工/全雙工Quidway-GigabitEtherne0/0/1 duplex auto /half/full2、設(shè)置端口的速率 例：將以太網(wǎng)端口GigabitEthernet0/0/1的端口速率設(shè)置為100Mbit/sQuidway-GigabitEthernet0/0/1 speed 10/100/10003、設(shè)置端口的描述字符串 例：設(shè)置以太網(wǎng)端口GigabitEthernet0/0/1的描述字符串為lanswitch-interfaceQuidway-GigabitEthernet0

9、/0/1 description lanswitch-interface10VLAN的劃分及配置配置過程注釋Quidwayvlan 2Quidway-vlan2quitQuidwayinterface GigabitEthernet0/0/1Quidway-GigabitEthernet0/0/1port link-type access Quidway-GigabitEthernet0/0/1undo shutdownQuidway-GigabitEthernet0/0/1port default vlan 2Quidway-vlan2port GigabitEthernet0/0/1Qui

10、dway interface Vlanif 2Quidway-Vlanif2 ip address 54 #創(chuàng)建VLAN 2#進入端口1#設(shè)置端口類型為access#將端口0/0/1加入到vlan2配置vlan的IP地址注：缺省情況下所有端口都屬于VLAN 1，并且端口是access端口，一個access端口只能屬于一個vlan；如果端口是access端口，則把端口加入到另外一個vlan的同時，系統(tǒng)自動把該端口從原來的vlan中刪除掉。11VLAN的劃分及配置配置過程注釋Quidwayinterface GigabitEthernet 0/0/48Quidway-Giga

11、bitEthernet0/0/48description to_zotyeQuidway-GigabitEthernet0/0/48port link-type trunkQuidway-GigabitEthernet0/0/48port trunk allow-pass vlan 10 20 to 25Quidway-GigabitEthernet0/0/48undo port trunk allow-pass vlan 1Quidway-GigabitEthernet0/0/48 speed 100 Quidway-GigabitEthernet0/0/48 duplex full #備注

12、說明#設(shè)置接為類型為TRUNK#允許VLAN10,20至25數(shù)據(jù)通過#將VLAN1過濾#設(shè)置接口速度及雙工12靜態(tài)路由的配置Network是目的網(wǎng)絡(luò)或子網(wǎng)Mask是子網(wǎng)掩瑪Address是下一跳路由器的ip地址Interface是用來訪問目的網(wǎng)絡(luò)的本地路由器的輸出接口Preference 是一個可選參數(shù)，用來定義優(yōu)先選擇級別Permanent 是一個可選參數(shù)，用于確保某個路由不會被刪除，即使是他的相關(guān)接口已經(jīng)被關(guān)閉。Quidway ip route-static network mask address | interfacepreference permanentQuidway ip rou

13、te-static 54 13例子：劃出4個 vlan 200 210 220 230分別配上IP:54/24;54/24;54/24;54/24把GigabitEthernet 0/0/40，GigabitEthernet 0/0/41，GigabitEthernet 0/0/42，GigabitEthernet 0/0/43分別加入到vlan中配置命令如下Quidwayvlan 200 #建vlanQuidwayvlan 210 Quidwayvlan 220 Quidwayvlan 230 Quidwayinterface GigabitEthernet 0/0/40 #進端口Quidw

14、ay-GigabitEthernet0/0/40port link-type access #設(shè)置端口類型Quidway-GigabitEthernet0/0/40port default vlan 200 #把端口加入到vlanQuidway-GigabitEthernet0/0/40undo shutdown #開啟端口Quidwayinterface vlanif 200 # 進入vlan接口視圖Quidway-Vlanif200ip address 54 #給vlan配置ip地址Quidwayinterface GigabitEthernet 0/0/41Quidway-Gigabit

15、Ethernet0/0/41port link-type access Quidway-GigabitEthernet0/0/41port default vlan 210Quidway-GigabitEthernet0/0/41undo shutdownQuidwayinterface vlanif 210Quidway-Vlanif210ip address 54 Quidwayinterface GigabitEthernet 0/0/42Quidway-GigabitEthernet0/0/42port link-type access Quidway-GigabitEthernet0

16、/0/42port default vlan 220Quidway-GigabitEthernet0/0/42undo shutdownQuidwayinterface vlanif 220Quidway-Vlanif220ip address 54 Quidwayinterface GigabitEthernet 0/0/43Quidway-GigabitEthernet0/0/43port link-type access Quidway-GigabitEthernet0/0/43port default vlan 230Quidway-GigabitEthernet0/0/43undo

17、shutdownQuidwayinterface vlanif 230Quidway-Vlanif230ip address 54 Quidwayip route-static 54 #配置靜態(tài)（缺?。┞酚?4簡單的SNMP配置華為交換機的配置命令如下 snmp-agent #開啟SNMP管理 snmp-agent community read public #public進行只讀訪問 snmp-agent community write private # private進行讀寫訪問 snmp-agent sys-info version v2c #設(shè)置系統(tǒng)啟用的SNMP版本號 snmp-a

18、gent target-host trap address udp-domain 53 params securityname huawei #設(shè)置接收Trap消息的目的地 snmp-agent trap enable basetrap #使能設(shè)備發(fā)送Trap報文以冰峰為例，為了使冰峰可以讀取到三層交換機上的mac地址，所以我們需要簡單的進行SNMP配置，冰峰IP地址為53，采用透明模式！15冰峰上的配置如下圖所示16交換機使用注意事項序號注意項目1登錄交換機時請注意在超級終端中流控選擇“無”2啟動時按”ctrl+B”可以進入到boot menu模式3當交換機提示”Please Press E

19、NTER”，敲完回車后請等待一下，設(shè)備需要一定的時間才能進入到命令行界面（具體的時間試產(chǎn)品而定）4進入系統(tǒng)視圖請輸入”system-view”（輸入”sys”即可）5對使用的端口、vlan、interface vlan進行詳細的描述6如果配置了telnet用戶，一定要設(shè)置權(quán)限或配置super密碼7在使用VRRP主備時,務(wù)必要打開STP生成樹協(xié)議8使用別的產(chǎn)品模塊前請確認該模塊是否可以混用9配置acl時請注意掩碼配置是否準確10二層交換機配置管理IP后，請確保管理vlan包含了管理報文到達的端口11配置完畢后請在用戶視圖下（即尖括號視圖下）采用save命令保存配置12請確保在設(shè)備保存配置的時候不

20、掉電，否則可能會導(dǎo)致配置丟失13如果要清除所有配置，請在用戶視圖下（即尖括號視圖下）采用reset saved-configuration，并重啟交換機17華為與思科命令比較思科命令華為命令showdisplaynoundoexitquitwritesaveaccess-listaclReloadrebootLine vty 0 4user-interface vty 0 4router ospfospfrouter bgpbgprouter ripriphostnamesysnameuserlocal-usermodelink-typeshow rundisp current-configu

21、rationshow startdisp saved-configurationmultihybrid18Friendship the difference in China and the WestChinese except friendships to be more lasting.Different foundations for friendships.Westerns expect friends to be independent. Chinese usually expect more from their friends.19Chinese except friendshi

22、ps to be more lasting. For Chinese a true friendship endures throughout life changes. Chinese are friends even if they havent spoken for 20 years. If you shared something at one time, then all your life you are friends. This is the best of guanxi(關(guān)系), the Wide Web that connects Chinese through time

23、and space. So, we can say Chinese invented the Internet long before Bill Gates was born. In North America, even the relationship in which people feel close and tell each other personal problems may not survive life changes such as moving to another city, graduation from a university or marriage. If

24、the people do not see each other regularly, the relationship is likely to die.20Different foundations for friendships. Chinese friends share “ things in common”: a task, a class, the hometown. Friendships are formed by people who work or go to school together. You may or may not like the person, but

25、 if he or she can do something for you because of his position or job, you can be friends. But in North America, business and friendship are kept separate. The friendships are usually tied to specific activities. A person may have work friends and leisure (休閑時) activity friends. Also friends tend to

26、 have similar financial circumstances, because friendship in the West is based on equality.21Westerns expect friends to be independent. Why? Its because their friendship is mostly a matter of providing emotional support and spending time together, so they do not feel comfortable in a relationship in

27、 which one person is giving more and the other is dependent on what is giving. A westerner will respond to a friends trouble by asking “What do you want to do?” The idea is to help the friend to think out the problem and discover the solution he or she really wants and then to support the solution. Chinese friends give each other mo