AR 18系列路由器网络协议命令手册.doc

05-网络协议命令目 录第1章 IP地址配置命令. 1-11.1 IP地址配置命令. 1-11.1.1 ip address. 1-11.1.2 ip address ppp-negotiate. 1-21.1.3 ip address unnumbered. 1-31.1.4 remote address. 1-4第2章 ARP配置命令. 2-12.1 ARP配置命令. 2-12.1.1 arp static. 2-12.1.2 arp check enable. 2-22.1.3 arp timer aging. 2-22.1.4 debugging arp packet 2-32.1.5 display arp. 2-32.1.6 display arp timer aging（仅AR46系列路由器支持）. 2-42.1.7 exterior-arp enable. 2-52.1.8 naturemask-arp. 2-62.1.9 reset arp. 2-62.2 代理ARP配置命令. 2-72.2.1 arp-proxy enable. 2-72.3 免费ARP配置命令. 2-82.3.1 arp send-gratuitous-arp. 2-82.3.2 gratuitous-arp-learning enable. 2-82.3.3 gratuitous-arp-sending enable. 2-92.4 授权ARP配置命令. 2-102.4.1 arp security. 2-102.4.2 arp security time-out 2-112.4.3 dhcp server synchronize arp（接口视图）. 2-112.4.4 dhcp server synchronize arp interface（系统视图）. 2-122.4.5 synchronize arp. 2-13第3章 域名系统（DNS）配置. 3-13.1 静态域名解析配置命令. 3-13.1.1 display ip host 3-13.1.2 ip host 3-13.2 DNS client配置命令. 3-23.2.1 debugging dns. 3-23.2.2 dns resolve. 3-33.2.3 dns server 3-33.2.4 dns domain. 3-43.2.5 display dns domain. 3-53.2.6 display dns server 3-53.2.7 display dns dynamic-host 3-63.2.8 nslookup type. 3-73.2.9 reset dns dynamic-host 3-83.3 DNS Proxy配置命令. 3-83.3.1 dns-proxy enable. 3-8第4章 DDNS配置命令. 4-14.1 DDNS配置命令. 4-14.1.1 ddns-server 4-14.1.2 ddns username. 4-14.1.3 ddns password. 4-24.1.4 ddns domainname. 4-24.1.5 ddns source-interface. 4-34.1.6 ddns refresh. 4-4第5章 URPF配置. 5-15.1 URPF配置命令. 5-15.1.1 ip urpf 5-15.1.2 debugging ip urpf 5-1第6章 IP accounting配置命令. 6-16.1 IP accounting配置命令. 6-16.1.1 debugging ip count 6-16.1.2 display ip count 6-36.1.3 display ip count rule. 6-46.1.4 ip count enable. 6-56.1.5 ip count exterior-threshold. 6-56.1.6 ip count firewall-denied. 6-66.1.7 ip count inbound-packets. 6-76.1.8 ip count interior-threshold. 6-76.1.9 ip count outbound-packets. 6-86.1.10 ip count rule. 6-96.1.11 ip count timeout 6-106.1.12 reset ip count 6-10第7章 UDP HELPER配置命令. 7-17.1 UDP HELPER配置命令. 7-17.1.1 debugging udp-helper 7-17.1.2 display udp-helper server 7-17.1.3 udp-helper enable. 7-27.1.4 udp-helper port 7-27.1.5 udp-helper server 7-3第8章 BOOTP客户端配置命令. 8-18.1 BOOTP客户端配置命令. 8-18.1.1 display bootp client 8-18.1.2 ip address bootp-alloc. 8-2第9章 DHCP配置命令. 9-19.1 DHCP公共配置命令. 9-19.1.1 dhcp enable. 9-19.1.2 dhcp select （接口视图）. 9-19.1.3 dhcp select interface（系统视图）. 9-29.1.4 dhcp server detect 9-39.2 DHCP服务器配置命令. 9-49.2.1 accounting domain. 9-49.2.2 bims-server 9-59.2.3 debugging dhcp server 9-69.2.4 dhcp server accounting domain interface（系统视图）. 9-79.2.5 dhcp server accounting domain（接口视图）. 9-89.2.6 dhcp server bims-server（接口视图）. 9-99.2.7 dhcp server bims-server interface（系统视图）. 9-109.2.8 dhcp server dns-list 9-119.2.9 dhcp server dns-list interface （系统视图）. 9-119.2.10 dhcp server domain-name（接口视图）. 9-129.2.11 dhcp server domain-name interface（系统视图）. 9-139.2.12 dhcp server expired （接口视图）. 9-149.2.13 dhcp server expired interface（系统视图）. 9-149.2.14 dhcp server forbidden-ip. 9-159.2.15 dhcp server ip-pool 9-169.2.16 dhcp server nbns-list（接口视图）. 9-179.2.17 dhcp server nbns-list interface（系统视图）. 9-179.2.18 dhcp server netbios-type interface（系统视图）. 9-189.2.19 dhcp server netbios-type （接口视图）. 9-199.2.20 dhcp server option interface （系统视图）. 9-209.2.21 dhcp server option（接口视图）. 9-219.2.22 dhcp server ping. 9-229.2.23 dhcp server relay information enable. 9-239.2.24 dhcp server static-bind. 9-239.2.25 dhcp server voice-config（接口视图）. 9-249.2.26 dhcp server voice-config interface（系统视图）. 9-259.2.27 display dhcp server conflict 9-279.2.28 display dhcp server expired. 9-279.2.29 display dhcp server free-ip. 9-289.2.30 display dhcp server ip-in-use. 9-299.2.31 display dhcp server statistics. 9-309.2.32 display dhcp server tree. 9-329.2.33 dns-list 9-349.2.34 domain-name. 9-359.2.35 expired. 9-369.2.36 gateway-list 9-369.2.37 nbns-list 9-379.2.38 netbios-type. 9-389.2.39 network. 9-389.2.40 option. 9-399.2.41 reset dhcp server conflict 9-409.2.42 reset dhcp server ip-in-use. 9-409.2.43 reset dhcp server statistics. 9-419.2.44 static-bind ip-address. 9-419.2.45 static-bind mac-address | client-identifier 9-429.2.46 voice-config. 9-439.3 DHCP中继配置命令. 9-449.3.1 debugging dhcp relay. 9-449.3.2 dhcp relay information. 9-459.3.3 dhcp relay information strategy. 9-459.3.4 dhcp relay release. 9-469.3.5 display dhcp relay address. 9-479.3.6 display dhcp relay statistics. 9-489.3.7 display dhcprelay-security. 9-489.3.8 ip relay address（接口视图）. 9-499.3.9 ip relay address cycle. 9-509.3.10 ip relay address interface（系统视图）. 9-519.3.11 reset dhcp relay statistics. 9-519.4 DHCP 客户端配置命令. 9-529.4.1 debugging dhcp client 9-529.4.2 display dhcp client 9-529.4.3 ip address dhcp-alloc. 9-55第10章 IP性能配置命令. 10-110.1 IP性能配置命令. 10-110.1.1 debugging ip. 10-110.1.2 debugging tcp event 10-210.1.3 debugging tcp md5. 10-310.1.4 debugging tcp packet 10-410.1.5 debugging udp packet 10-510.1.6 display fib. 10-510.1.7 display fib acl 10-610.1.8 display fib begin. 10-710.1.9 display fib ip-prefix. 10-810.1.10 display fib longer 10-910.1.11 display fib statistics. 10-1010.1.12 display icmp statistics. 10-1110.1.13 display ip fast-forwarding cache. 10-1210.1.14 display ip interface. 10-1310.1.15 display ip interface brief 10-1410.1.16 display ip socket 10-1510.1.17 display ip statistics. 10-1610.1.18 display tcp statistics. 10-1810.1.19 display tcp status. 10-2010.1.20 display udp statistics. 10-2010.1.21 icmp redirect send. 10-2210.1.22 ip fast-forwarding. 10-2210.1.23 reset ip fast-forwarding cache. 10-2310.1.24 reset ip statistics. 10-2310.1.25 reset tcp statistics. 10-2410.1.26 reset udp statistics. 10-2410.1.27 tcp mss. 10-2510.1.28 tcp timer fin-timeout 10-2510.1.29 tcp timer syn-timeout 10-2610.1.30 tcp window. 10-2710.2 接口转发广播报文配置命令. 10-2710.2.1 ip forward-broadcast 10-2710.3 组播快转配置命令. 10-2810.3.1 ip multicast-fast-forwarding. 10-2810.3.2 reset ip multicast-fast-forwarding cache. 10-2910.3.3 display ip multicast-fast-forwarding cache. 10-29第11章 地址转换NAT配置命令. 11-111.1 地址转换NAT配置命令. 11-111.1.1 debugging nat 11-111.1.2 debugging connection-limit 11-111.1.3 display nat 11-211.1.4 display connection-limit statistics. 11-411.1.5 display connection-limit policy. 11-511.1.6 display nat connection-limit 11-511.1.7 nat address-group. 11-611.1.8 nat aging-time. 11-711.1.9 nat alg. 11-811.1.10 nat dns-map. 11-911.1.11 nat match factor-all 11-911.1.12 nat outbound. 11-1011.1.13 nat outbound interface. 11-1211.1.14 nat outbound static. 11-1211.1.15 nat overlapaddress. 11-1311.1.16 nat server 11-1411.1.17 nat static. 11-1611.1.18 nat static inside. 11-1711.1.19 connection-limit enable. 11-1811.1.20 connection-limit policy. 11-1811.1.21 limit 11-1911.1.22 connection-limit default 11-2011.1.23 connection-limit default amount 11-2111.1.24 nat connection-limit-policy. 11-2111.1.25 reset nat 11-22第12章 IP单播策略路由配置命令. 12-112.1 IP单播策略路由配置命令. 12-112.1.1 apply default output-interface. 12-112.1.2 apply ip-address default next-hop. 12-112.1.3 apply ip-address next-hop（单播策略路由）. 12-212.1.4 apply ip-precedence. 12-312.1.5 apply ip-dscp. 12-412.1.6 apply output-interface（单播策略路由）. 12-412.1.7 display ip policy. 12-512.1.8 display ip policy setup. 12-612.1.9 display ip policy statistic. 12-612.1.10 if-match acl 12-712.1.11 if-match packet-length. 12-812.1.12 ip local policy route-policy. 12-812.1.13 ip policy route-policy. 12-912.1.14 route-policy. 12-9第13章 IP组播策略路由配置命令. 13-113.1 IP组播策略路由配置命令. 13-113.1.1 apply ip-address next-hop（组播策略路由）. 13-113.1.2 apply output-interface（组播策略路由）. 13-113.1.3 debugging ip multicast-policy. 13-213.1.4 display ip multicast-policy. 13-313.1.5 if-match acl 13-313.1.6 ip multicast-policy route-policy. 13-413.1.7 route-policy. 13-5第14章 QLLC配置命令. 14-114.1.1 debugging qllc. 14-114.1.2 X25 qllc-switch. 14-1第15章 SOT配置命令. 15-115.1 SOT配置命令. 15-115.1.1 display sot 15-115.1.2 link-protocol sot 15-215.1.3 sot counter keepalive. 15-315.1.4 sot gather 15-315.1.5 sot group-set 15-415.1.6 sot peer 15-515.1.7 sot sdlc controller 15-615.1.8 sot sdlc broadcast 15-615.1.9 sot sdlc-status primary. 15-715.1.10 sot sdlc-status secondary. 15-715.1.11 sot send address. 15-815.1.12 sot send all tcp. 15-915.1.13 sot timer keepalive. 15-10第16章 NetStream配置命令. 16-116.1 NetStream配置命令. 16-116.1.1 debugging ip netstream. 16-116.1.2 display ip netstream cache. 16-316.1.3 display ip netstream export 16-516.1.4 enable. 16-616.1.5 ip netstream format no-direction. 16-616.1.6 ip netstream. 16-716.1.7 ip netstream aggregation. 16-816.1.8 ip netstream export host 16-916.1.9 ip netstream export source. 16-916.1.10 ip netstream export version. 16-1016.1.11 ip netstream format utc-time. 16-1116.1.12 ip netstream process. 16-1116.1.13 ip netstream max-entry. 16-1216.1.14 ip netstream timeout active. 16-1216.1.15 ip netstream timeout inactive. 16-1316.1.16 reset ip netstream statistics. 16-14第17章 RCR配置命令. 17-117.1 RCR配置命令. 17-117.1.1 debugging rcrlocal event 17-117.1.2 display rcrlocal interface-load. 17-417.1.3 display rcrlocal statistics. 17-517.1.4 rcrlocal 17-617.1.5 adjust-interval 17-617.1.6 adjust-route. 17-717.1.7 adjust-ratio. 17-817.1.8 check-term. 17-8第18章 MIP配置命令. 18-118.1 MIP配置命令. 18-118.1.1 debugging mobile-ip advertise. 18-118.1.2 debugging mobile-ip node. 18-118.1.3 display mobile-ip interface. 18-218.1.4 display mobile-ip globals. 18-418.1.5 display mobile-ip statistics. 18-518.1.6 mobile-ip. 18-818.1.7 mobile-ip tunnel path-mtu-discovery. 18-918.1.8 reset mobile-ip statistics. 18-1018.1.9 snmp-agent trap enable mobile-ip. 18-1018.2 HA配置命令. 18-1118.2.1 display mobile-ip binding. 18-1118.2.2 mobile-ip home-agent 18-1218.2.3 mobile-ip virtual-network. 18-1418.2.4 reset mobile-ip binding. 18-1518.3 FA配置命令. 18-1618.3.1 display mobile-ip visitor 18-1618.3.2 mobile-ip foreign-agent 18-1818.3.3 mobile-ip foreign-agent service. 18-1918.3.4 mobile-ip prefix-length. 18-2018.3.5 mobile-ip registration-lifetime. 18-2118.3.6 reset mobile-ip visitor 18-2218.4 MN配置命令. 18-2318.4.1 display mobile-ip node. 18-2318.4.2 mobile-ip node. 18-2418.4.3 reset mobile-ip node-statistics. 18-2518.4.4 mobile-ip home-agent mobile-router 18-2618.4.5 ip address. 18-2618.4.6 mobile-network. 18-2718.5 MR配置命令. 18-2818.5.1 debugging mobile-ip mobile-router 18-2818.5.2 display mobile-ip mobile-router 18-2818.5.3 encapsulation. 18-3318.5.4 home-agent ip-address. 18-3418.5.5 ip address. 18-3418.5.6 mobile-ip mobile-router 18-3518.5.7 mobile-ip mobile-router ccoa. 18-3618.5.8 mobile-ip mobile-router roam. 18-3718.5.9 mobile-ip mobile-router solicit 18-3718.5.10 mobile-network. 18-3818.5.11 register lifetime. 18-3918.5.12 register retransmit 18-4018.5.13 reset mobile-ip mobile-router 18-4118.5.14 reverse-tunnel 18-4118.5.15 simultaneous-bindings. 18-4218.6 配置MIP的安全策略命令. 18-4318.6.1 display mobile-ip secure. 18-4318.6.2 display mobile-ip violation. 18-4418.6.3 mobile-ip secure. 18-4518.7 配置IRDP. 18-4718.7.1 display mobile-ip irdp. 18-4718.7.2 mobile-ip irdp. 18-48第1章 IP地址配置命令1.1 IP地址配置命令1.1.1 ip address【命令】ip address ip-address net-mask sub undo ip address ip-address net-mask sub 【视图】接口视图【参数】ip-address：接口IP地址，为点分十进制格式。net-mask：相应的子网掩码，为点分十进制格式或指定掩码长度。sub：为了使不同的子网之间进行通讯，需要使用配置的从IP地址。【描述】ip address命令用来配置接口IP地址，undo ip address命令用来取消接口的IP地址。缺省情况下，接口无IP地址。用户可以根据实际情况选择合适的IP子网，另外主机地址部分全为0表示网络地址，全为1表示广播地址，不能作为一般的IP地址使用。通过子网掩码来标识IP地址包含的网络号，例如：路由器以太网口的IP地址是129.9.30.42，掩码是255.255.0.0，将IP地址与掩码相与，可知路由器以太网接口所在的网络号为129.9.0.0。在一般情况下，一个接口配置一个IP地址即可，为了使路由器的一个接口可以与多个子网相连，在一个接口可以配置多个IP地址，其中一个为主IP地址，其余为从IP地址。主从地址的配置关系为：l 当配置主IP地址时，如果接口上已经有主IP地址，则原主IP地址被删除，新配置的地址成为主IP地址。l undo ip address命令不带任何参数表示删除该接口的所有IP地址。undo ip address ip-address net-mask表示删除主IP地址，undo ip address ip-address net-mask sub表示删除从IP地址。在删除主IP地址前必须先删除完所有的从IP地址。另外，路由器各个接口上配置的IP地址都不能位于相同的子网。相关配置可参考命令ip route-static，display ip interface，display interface。【举例】# 为接口Serial 0/0/0配置主IP地址为129.102.0.1，从IP地址为202.38.160.1，子网掩码都为255.255.255.0。Router-Serial0/0/0 ip address 129.102.0.1 255.255.255.0Router-Serial0/0/0 ip address 202.38.160.1 255.255.255.0 sub1.1.2 ip address ppp-negotiate【命令】ip address ppp-negotiateundo ip address ppp-negotiate【视图】接口视图【参数】无【描述】ip address ppp-negotiate命令用来允许接口IP地址由对端协商分配，undo ip address ppp-negotiate命令用来禁止接口IP地址的协商。缺省情况下，系统不允许接口IP地址的协商。因为PPP支持IP地址的协商，只有当接口封装链路层协议PPP时，才能设置接口IP地址的协商。在一般情况下，不需要配置IP地址的协商，只有在一些特殊情况下，如接入ISP访问Internet，此时与ISP相连接口的IP地址由ISP协商分配。配置接口IP地址的协商后，不需给该接口配置IP地址。【举例】# 设置接口Serial 0/0/0的IP地址由对端协商分配。Router-Serial0/0/0 ip address ppp-negotiate1.1.3 ip address unnumbered【命令】ip address unnumbered interface interface-type interface-numberundo ip address unnumbered【视图】接口视图【参数】interface-type：被借用接口的接口类型。interface-number：被借用接口的接口序号。【描述】ip address unnumbered命令用来配置接口可借用其它接口的IP地址，undo ip address unnumbered命令用来取消借用其它接口的IP地址。缺省情况下，不借用其它接口的IP地址。封装了PPP、HDLC、帧中继、SLIP的串口以及Tunnel接口可以使用该命令借用以太网口或其它接口的IP地址。以太网口不能借用其它接口的IP地址。由于借用接口本身没有IP地址，无法加上路由，所以必须手工配置两条路由才能实现路由器的连通。详情请参见VRP3.4 操作手册路由协议部分。 注意：在Tunnel接口配置地址借用后，必须手工配置到Tunnel对端接口的静态路由，且掩码必须为32位。【举例】# 配置Tunnel1接口借用ethernet0/0/0的地址，Tunnel对端接口的IP地址为1.1.1.2。Router-tunnel1 ip address unnumbered interface ethernet 0/0/0Router-tunnel1 quitRouter ip route-static 1.1.1.2 32 tunnel 1# 封装PPP的串口0/0/0借用以太网口Ethernet 0/0/0的IP地址。Router-Serial0/0/0 ip address unnumbered interface ethernet 0/0/01.1.4 remote address【命令】remote address ip-address | pool pool-number undo remote address【视图】接口视图【参数】ip-address：IP地址。pool-number：为全局地址池号，即将分配全局地址持pool-number中的一个地址给对端接口。地址池号的范围是099，缺省值是0。【描述】remote address命令用来配置为对端接口分配IP地址，undo remote address命令用来取消为对端接口分配IP地址。缺省情况下，接口不分配地址给对端。当接口封装了PPP（且没有配置认证的情况下），并且该接口还未配置IP地址而对端已经有IP地址时，可为该接口配置IP地址可协商属性（在本端路由器上配置ip address ppp-negotiate命令），并在对端路由器上配置remote address命令，使本接口接受由PPP协商产生的对端分配的IP地址。该配置主要用于通过ISP访问Internet时，得到由ISP分配的IP地址。 注意：该命令不具有地址分配的强制性，即在配置该命令后，也允许对端自行配置IP地址；如不希望（或不允许）对端自行配置IP地址，必须再配置ppp ipcp remote-address forced。该命令仅在没有配置PPP认证的情况下使用，且指定的pool为全局地址池。相关配置可参考命令ip address ppp-negotiate、ppp ipcp address forced。【举例】# 封装PPP的串口为对端分配的IP地址为10.0.0.1。Router-Serial0/0/0 remote address 10.0.0.1第2章 ARP配置命令2.1 ARP配置命令2.1.1 arp static【命令】arp static ip-address mac-address vpn-instance-name undo arp ip-address vpn-instance-name 【视图】系统视图【参数】ip-address：为ARP映射项的IP地址，为点分十进制格式。mac-address：ARP映射项的以太网MAC地址，格式为H-H-H。vpn-instance-name：VPN实例的名称。【描述】arp static命令用来配置ARP映射表，undo arp命令用来取消ARP映射表中对应地址的映射项。缺省情况下，系统ARP映射表为空，由动态ARP协议获取地址映射。一般情况下，ARP映射表由动态ARP协议维护，在特殊情况下，才需要手工配置。另外ARP映射表只用于局域网内，对于广域网的地址解析，有其它的配置或获取方法（如帧中继的逆向地址解析）。相关配置可参考命令reset arp，display arp。【举例】# 配置IP地址129.102.0.1对应的以太网MAC地址为00e0-fc01-0ec5。Router arp static 129.102.0.1 00e0-fc01-0ec5# 配置IP地址11.0.0.1对应的以太网MAC地址为aa-fcc-12Router arp static 11.0.0.1 aa-fcc-122.1.2 arp check enable【命令】arp check enableundo arp check enable【视图】系统视图【参数】无【描述】arp check enable命令用来使能ARP表项的检查功能，即不学习MAC地址为组播MAC的ARP表项。undo arp check enable命令用来关闭ARP表项的检查功能，即学习MAC地址为组播MAC的ARP表项。缺省情况下，使能ARP表项的检查功能，即不学习MAC地址为组播MAC的ARP表项。【举例】# 使能ARP表项的检查功能。Router arp check enable2.1.3 arp timer aging【命令】arp timer aging minutesundo arp timer aging【视图】系统视图【参数】minutes：动态ARP表项超时时间，取值范围为11440分钟，缺省为20分钟。【描述】arp timer aging命令用来配置动态ARP表项的超时时间，undo arp timer aging命令用来恢复动态ARP表项的超时时间为缺省值。相关配置可参考命令display arp timer aging。【举例】# 配置动态ARP表项的超时时间为30分钟。Router arp timer aging 302.1.4 debugging arp packet【命令】debugging arp packetundo debugging arp packet【视图】用户视图【参数】无【描述】debugging arp packet命令用来打开ARP报文调试功能，undo debugging arp packet命令用来关闭ARP报文调试功能。【举例】# 打开ARP报文调试功能。 debugging arp packet2.1.5 display arp【命令】display arp static | dynamic | all | begin text | exclude text | include text 【视图】任意视图【参数】static：表示显示静态ARP项。dynamic：表示显示动态ARP项。all：表示显示所有的ARP项。|：匹配输出begin：匹配正则表达式起始的串。exclude：匹配排除正则表达式的串。include：匹配包含正则表达式的串。text：正则表达式。【描述】display arp命令用来显示ARP映射表。相关配置可参考命令arp static，reset arp。【举例】# 显示所有ARP表项。 display arpType: S-Static D-Dynamic IP Address MAC Address Type Vpn-instance Name Interface1.1.1.1 0012-0012-0012 S10.153.72.2 00e0-fc00-0007 D Eth0/0/1# 显示静态ARP表项。 display arp staticType: S-Static D-Dynamic IP Address MAC Address Type Vpn-instance Name Interface1.1.1.1 0012-0012-0012 S# 显示动态ARP表项。 display arp dynamicType: S-Static D-Dynamic IP Address MAC Address Type Vpn-instance Name Interface10.153.72.2 00e0-fc00-0007 D Eth0/0/1表2-1 display arp显示解释表域名解释Ip AddressIP地址Mac AddressMAC地址Type ARP表项类型Vpn-instance NameVpn-instance名称interface接口名称2.1.6 display arp timer aging（仅AR46系列路由器支持）【命令】display arp timer aging【视图】任意视图【参数】无【描述】display arp timer aging命令用来显示动态ARP表项超时时间。相关配置可参考命令arp timer aging。【举例】# 显示动态ARP表项超时时间。Router arp timer aging 30Router display arp timer agingCurrent ARP aging time is 30 minute(s)Router undo arp timer agingRouter display arp timer agingCurrent ARP aging time