2014-07-18 华为基础实验.doc

华为基础实验实验要求：一、对R1、R2进行基础配置二、使R2能用telnet远程管理R1三、配置用户huawei和qwer，权限分别为15和1，都允许用户用telnet远程管理R1实验配置：一、基础配置：以R1的配置为例：system-view /进入全局模式 Huaweisysname R1 /重命名路由器 R1user-interface console 0 /进入console口的配置模式R1-ui-console0idle-timeout 0 0 /设置会话永不超时R1-ui-console0quitR2的基础配置与R1配置相似，在此省略。二、实现R2以telnet方式远程管理R11 先配置R1和R2的IP地址，并测试连通性。R1配置：R1int g0/0/0R1-GigabitEthernet0/0/0ip add 24 R1-GigabitEthernet0/0/0undo shutdownR2的配置：R2int g0/0/0R2-GigabitEthernet0/0/0ip add 24R2-GigabitEthernet0/0/0undo shutdown在R1上pingR2测试连通性：R1ping PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=1 ttl=255 time=10 ms Reply from : bytes=56 Sequence=2 ttl=255 time=1 ms Reply from : bytes=56 Sequence=3 ttl=255 time=1 ms Reply from : bytes=56 Sequence=4 ttl=255 time=1 ms Reply from : bytes=56 Sequence=5 ttl=255 time=1 ms - ping statistics - 5 packet(s) transmitted 5 packet(s) received 0.00% packet lossround-trip min/avg/max = 1/2/10 ms测试成功，配置telnet密码，实现R2以telnet的远程管理R1。R1上的配置：R1user-interface vty 0 4 /设置vty模式R1-ui-vty0-4authentication-mode password /设置登录密码为huaweiPlease configure the login password (maximum length 16):huaweiR1-ui-vty0-4user privilege level 3 /用户权限为3R1-ui-vty0-4quit在R2进行telnet测试：telnet Press CTRL_ to quit telnet mode Trying . Connected to .Login authenticationPassword:system-view Enter system view, return user view with Ctrl+Z.R1 /登陆成功三、在R1分别配置用户huawei和qwer，并赋予权限先分别为15和3，并在R2上进行测试。R1上的配置：R1user-interface vty 0 4 R1-ui-vty0-4authentication-mode aaa /设置认证模式为AAAR1-ui-vty0-4quitR1aaa /进入AAA配置模式R1-aaalocal-user huawei password cipher huawei privilege level 15 /设置用户名、密码和用户权限R1-aaalocal-user huawei service-type telnet /允许用户以telnet方式管理R1-aaaquit在R2上以用户华为登陆，并测试。telnet Press CTRL_ to quit telnet mode Trying . Connected to .Login authenticationUsername:huaweiPassword:syssystem-view Enter system view, return user view with Ctrl+Z.R1R2登陆成功，并且能进入全局模式。在R1建立用户qwer，并设置权限为1，在R2上进行测试。R1aaaR1-aaalocal-user qwer password cipher qwer privilege level 1R1-aaalocal-user qwer service-type telnet R1-aaaquit在R2上测试：telnet Press CTRL_ to quit telnet mode Trying . Connected to .Login authenticationUsername:qwerPassword:syssys Error: Unrecognized command found at position.由于qwer的权限较低，所以只能以telnet方式登陆R1进行查看，但不能进行管理。配置登录提示信息：R1上的配置：R1header login information Welcome to TECH-LABR1header shell information Welcome to Huawei-labR2上用huawei用户以telnet登录进行测试，查看提示信息。telnet Press CTRL_ to quit telnet mode Trying . Connected to .Welcome to TECH-LAB /login关键字是配置登录以前的提示信息Login authenticationUsername:huaweiPassword:Welcome to Huawei-lab /shell关键字是配置登录以后的提示信息 - User last login information: - Access Type: Telnet IP-Address : Time : 2014-07-18 16:17:48-05:13 -sysystem-view Enter system view, return user view with Ctrl+Z.R1实验配置的导出：R1的实验配置：R1display current-configuration V200R003C00# sysname R1 header shell information Welcome to Huawei-lab header login information Welcome to TECH-LAB# snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone Indian Standard Time minus 05:13:20 clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23 00:00 2005 2005 #portal local-server load portalpage.zip# drop illegal-mac alarm# set cpu-usage threshold 80 restore 75#aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user qwer password cipher %$%$q$ZN1.v$OEMOINjS7ko/%$%$ local-user qwer privilege level 1 local-user qwer service-type telnet local-user admin password cipher %$%$K8m.Nt84DZe#!Cn&KSOUUHLJFkdN|%$%$ local-user huawei privilege level 15 local-user huawei service-type telnet#firewall zone Local priority 15#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Ethernet0/0/2#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/0/6#interface Ethernet0/0/7#interface GigabitEthernet0/0/0 ip address #interface GigabitEthernet0/0/1#interface NULL0#user-interface con 0 authentication-mode password idle-timeout 0 0user-interface vty 0 4 authentication-mode aaa user privilege level 3user-interface vty 16 20#wlan ac#returnR1R2的实验配置：display current-configuration V200R003C00# sysname R2# snmp-agent local-engineid 800007DB03000000000000 snmp-agent # clock timezone Indian Standard Time minus 05:13:20 clock daylight-saving-time Day Light Saving Time repeating 12:32 9-1 12:32 11-23 00:00 2005 2005 #portal local-server load portalpage.zip# drop illegal-mac alarm# set cpu-usage threshold 80 restore 75#aaa authentication-scheme default authorization-scheme default accounting-scheme default domain default domain default_admin local-user admin password cipher %$%$K8m.Nt84DZe#08bmE3Uw%$%$ local-user admin service-type http#firewall zone Local priority 15#interface Ethernet0/0/0#interface Ethernet0/0/1#interface Ethernet0/0/2#interface Ethernet0/0/3#interface Ethernet0/0/4#interface Ethernet0/0/5#interface Ethernet0/