华为路由交换机配置命令大全.doc

SysVlan10QuitPort-group songxuGroup-membergigabitethernet0/0/1togigabitethernet0/0/10Portlink-typeaccessPortdefaultvlan10Quit这样就一次把10个端口加入vlan10里了。熟练掌握下面的华为路由器交换机配置知识点，你只需花几分钟的时间就能明白华为路由器交换机配置。交换机的配置命令等等。华为路由器交换机配置命令：计算机命令PCAlogin:root;使用root用户password:linux;口令是linux#shutdown-hnow;关机#init0;关机#logout;用户注销#login;用户登录#ifconfig;显示IP地址#ifconfigeth0netmask;设置IP地址#ifconfigeht0netmaskdown;禁用IP地址#routeaddgw;设置网关#routedelgw;删除网关#routeadddefaultgw;设置网关#routedeldefaultgw;删除网关#route;显示网关#ping;发ECHO包#telnet;远程登录华为路由器交换机配置命令：交换机命令Quidwaydiscur;显示当前配置Quidwaydisplaycurrent-configuration;显示当前配置Quidwaydisplayinterfaces;显示接口信息Quidwaydisplayvlanall;显示路由信息Quidwaydisplayversion;显示版本信息Quidwaysuperpassword;修改特权用户密码Quidwaysysname;交换机命名Quidwayinterfaceethernet0/1;进入接口视图Quidwayinterfacevlanx;进入接口视图Quidway-Vlan-interfacexipaddress;配置VLAN的IP地址Quidwayiproute-static;静态路由=网关Quidwayrip;三层交换支持Quidwaylocal-userftpQuidwayuser-interfacevty04;进入虚拟终端S3026-ui-vty0-4authentication-modepassword;设置口令模式S3026-ui-vty0-4setauthentication-modepasswordsimple222;设置口令S3026-ui-vty0-4userprivilegelevel3;用户级别Quidwayinterfaceethernet0/1;进入端口模式Quidwayinte0/1;进入端口模式Quidway-Ethernet0/1duplexhalf|full|auto;配置端口工作状态Quidway-Ethernet0/1speed10|100|auto;配置端口工作速率Quidway-Ethernet0/1flow-control;配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal;配置端口平接扭接Quidway-Ethernet0/1portlink-typetrunk|access|hybrid;设置端口工作模式Quidway-Ethernet0/1portaccessvlan3;当前端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All;设trunk允许的VLANQuidway-Ethernet0/3porttrunkpvidvlan3;设置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown;激活端口Quidway-Ethernet0/1shutdown;关闭端口Quidway-Ethernet0/1quit;返回Quidwayvlan3;创建VLANQuidway-vlan3portethernet0/1;在VLAN中增加端口Quidway-vlan3porte0/1;简写方式Quidway-vlan3portethernet0/1toethernet0/4;在VLAN中增加端口Quidway-vlan3porte0/1toe0/4;简写方式Quidwaymonitor-port;指定镜像端口Quidwayportmirror;指定被镜像端口Quidwayportmirrorint_listobserving-portint_typeint_num;指定镜像和被镜像Quidwaydescriptionstring;指定VLAN描述字符Quidwaydescription;删除VLAN描述字符Quidwaydisplayvlanvlan_id;查看VLAN设置Quidwaystpenable|disable;设置生成树,默认关闭Quidwaystppriority4096;设置交换机的优先级Quidwaystprootprimary|secondary;设置为根或根的备份Quidway-Ethernet0/1stpcost200;设置交换机端口的花费Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口为通道号SwitchA-vlanxisolate-user-vlanenable;设置主vlanSwitchAisolate-user-vlansecondary;设置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan;设置vlan的pvidQuidway-Ethernet0/2porthybridpvid;删除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged;设置无标识的vlan如果包的vlanid与PVId一致，则去掉vlan信息.默认PVID=1。所以设置PVID为所属vlanid,设置可以互通的vlan为untagged.华为路由器交换机配置命令：路由器命令Quidwaydisplayversion;显示版本信息Quidwaydisplaycurrent-configuration;显示当前配置Quidwaydisplayinterfaces;显示接口信息Quidwaydisplayiproute;显示路由信息Quidwaysysnameaabbcc;更改主机名Quidwaysuperpasswrod123456;设置口令Quidwayinterfaceserial0;进入接口Quidway-serial0ipaddress;配置端口IP地址Quidway-serial0undoshutdown;激活端口Quidwaylink-protocolhdlc;绑定hdlc协议Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0;显示所有信息Quidwaydebugginghdlceventserial0;调试事件信息Quidwaydebugginghdlcpacketserial0;显示包的信息华为路由器交换机配置命令：静态路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static华为路由器交换机配置命令：动态路由：Quidwayrip;设置动态路由Quidwayripwork;设置工作允许Quidwayripinput;设置入口允许Quidwayripoutput;设置出口允许Quidway-ripnetwork;设置交换路由网络Quidway-ripnetworkall;设置与所有网络交换Quidway-rippeerip-address;Quidway-ripsummary;路由聚合Quidwayripversion1;设置工作在版本1Quidwayripversion2multicast;设版本2，多播方式Quidway-Ethernet0ripsplit-horizon;水平分隔QuidwayrouteridA.B.C.D;配置路由器的IDQuidwayospfenable;启动OSPF协议Quidway-ospfimport-routedirect;引入直联路由Quidway-Serial0ospfenablearea;配置OSPF区域华为路由器交换机配置命令：标准访问列表命令格式如下：aclmatch-orderconfig|auto;默认前者顺序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalpermitsource55Quidway-acl-10rulenormaldenysourceany华为路由器交换机配置命令：扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP协议的扩展访问列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging华为路由器交换机配置命令：扩展访问控制列表操作符的含义equalportnumber;等于greater-thanportnumber;大于less-thanportnumber;小于not-equalportnumber;不等rangeportnumber1portnumber2;区间华为路由器交换机配置命令：扩展访问控制列表举例Quidwayacl101Quidway-acl-101rule deny souce any destination any 规则否认souce任何目的地Quidway-acl-101rule permiticmpsourceanydestinationanyicmp-typeecho 规则允许icmp souce任何ICMP-typeecho目的地Quidway-acl-101rule permit icmp source any destination any icmp-typeecho-reply 规则允许icmp souce任何ICMP-typeecho-reply目的地Quidwayacl102Quidway-acl-102rule permit ip source destination Quidway-acl-102rule deny ip source any destination any Quidwayacl103 Quidway-acl-103rule permit tcp sour ceany destination destination-portequal ftpQuidway-acl-103rule permit tcp source any destination destination-portequal wwwQuidwayfire wall enableQuidwayfire wall defaultpermit|denyQuidwayinte0Quidway-Ethernet0fire wall packet-filter101inbound|outbound华为路由器交换机配置命令：地址转换配置举例Quidwayfire wall enableQuidwayfire wall defaultpermitQuidwayacl101;内部指定主机可以进入e0Quidway-acl-101ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101quitQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inboundQuidwayacl102;外部特定主机和大于1024端口的数据包允许进入S0Quidway-acl-102ruledenyipsourceanydestinationanyQuidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-acl-102quitQuidwayints0Quidway-Serial0firewallpacket-filter102inbound;设是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，将acl101允许的IP从本接口出时变换源地址。华为路由器交换机配置命令：内部服务器地址转换配置命令(静态nat)：natserverglobalportinsideportprotocol;global_port不写时使用inside_portQuidway-Serial0natserverglobalinsideftptcpQuidway-Serial0natserverglobalinsidetelnettcpQuidway-Serial0natserverglobalinsidewwwtcp设有公网IP：0103可以使用。;对外访问(原例题)Quidwaynataddress-group0103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource55;指定允许的内部网络Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1;在s0口从地址池取出IP对外访问Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Serial0natserverglobal028080insidewwwtcpQuidway-Serial0natserverglobal03insidesmtpudp华为路由器交换机配置命令：PPP设置：Quidway-s0link-protocolppp;默认的协议华为路由器交换机配置命令：PPP验证：主验方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-modepap|chapQuidway-serial0pppchapuserq1;pap时，没有此句华为路由交换机配置命令：pap被验方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhello华为路由器交换机配置命令：chap被验方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;