51CTO下载-华为路由器配置文档.doc

华为路由器配置静态路由配置Quidwaylanguage /语言切换Quidway-RortTypeNumber undo shutdown /路由器端口设置Quidwaylocal-user user-name service-type type password simple | cipher passwordQuidwayip route-static ip-address mask | masklen interface-type interface-name | nexthop-address preference value reject | blackhole tag tag-value description string RIP配置 Quidway ripQuidway-rip network network-number | all Quidway-rip undo summaryQuidway-RortTypeNumber rip workQuidway-RortTypeNumber rip inputQuidway-RortTypeNumber rip outputQuidway-RortTypeNumber rip version 2 broadcast | multicast Quidway-RortTypeNumber rip authentication-mode simple password | md5 key-string string RIP协议配置检查指令Quidway display ripQuidway display rip interfaceQuidway display ip routing-tableQuidway display current-configurationQuidway debugging rip packet | receive | sendOSPF配置Quidwayrouter id A.B.C.D Quidwayospf enable Quidway-Serial0ospf enable area area_idQuidway-RortType-PortNumber ospf authentication-mode simple password | md5 key key-id Quidway-RortType-PortNumber ospf dr-priority valueQuidway-RortType-PortNumber ospf cost valueQuidway-RortType-PortNumber ospf timer hello secondsQuidway-RortType-PortNumber ospf timer dead seconds | minimal multi-hello packets OSPF协议配置检查Quidway display ospf interfaceQuidway display ospf peerQuidway display ospf routingQuidway display ospf nexthopQuidway display ospf briefQuidway display ip routing-tableQuidway display current-configurationQuidway debugging ospf event | lsa | packet | spfHDLC配置Quidway display interface serial 0 /查看广域网接口的默认配置Quidway PortTypeNumber link-protocol hdlcQuidway debugging hdlc all interface type number Quidway debugging hdlc event interface type number Quidway debugging hdlc packet interface type number PPP配置Quidway PortTypeNumber Link-protocol ppp Quidway local-user username service-type ppp password simple|cipher passwordQuidway PortTypeNumber ppp authentication-mode pap|chap Quidway PortTypeNumber ppp pap local-user username password simple | cipher password Quidway PortTypeNumber ppp chap user usernameRIP协议基本配置帧中继配置Quidway fr switching /仅使用在帧中继交换（帧中继DCE）端Quidway PortTypeNumber link-protocol fr ietf | nonstandard Quidway PortTypeNumber fr interface-type dte | dce | nni Quidway PortTypeNumber fr lmi type ansi | nonstandard | q933a /华为默认q933aQuidway PortTypeNumber fr map ip | ipx protocol-address dlci dlci broadcast /静态映射Quidway PortTypeNumber fr inarp ip | ipx dlci /动态映射Quidway PortTypeNumber fr dlci dlci-number /配置帧中继本地虚电路Quidway interface mfr number .subnumber multipoint | point-to-point Quidway PortTypeNumber fr dlci-switch in-dlci interface type number dlci out-dlci/配置帧中继PVC交换的路由Quidwaydisp fr map-info /显示协议地址与帧中继地址映射表Quidwayreset fr inarp-info /清除所有动态的Inverse ARP映射Quidwaydisp fr pvc-info serial interface-number dlci dlci-number/显示帧中继PVC统计信息Quidwaydisp fr dlci-switch /显示帧中继PVC路由表Quidwaydebugging fr all interface type-number /打开帧中继的所有报文调试开关Quidwaydebugging fr arp interface type-number /打开帧中继ARP报文信息调试开关Quidwaydebugging fr event interface type-number /打开帧中继事件信息调试开关Quidwaydebugging fr lmi interface type-number /打开帧中继LMI协议信息调试开关PPP验证配置单向验证双向验证CHAP验证MP配置帧中继配置实例RTAinterface Serial 1/0RTA-Serial1/0link-protocol frRTA-Serial1/0interface Serial1/0.1RTA-Serial1/0.1ip address 24RTA-Serial1/0.1fr dlci 300RTA-Serial1/0.1-300quitRTA-Serial1/0.1fr map ip 300RTA-Serial1/0interface Serial1/0.2RTA-Serial1/0.2ip address 24RTA-Serial1/0.2fr dlci 100RTA-Serial1/0.2-100quitRTA-Serial1/0.2fr map ip 100RTBinterface Serial 0/0RTB-Serial0/0link-protocol frRTB-Serial0/0ip address 24RTB-Serial0/0fr dlci 400RTB-Serial0/0-300quitRTB-Serial0/0fr map ip 400RTCinterface Serial 0/0RTC-Serial0/0link-protocol frRTC-Serial0/0ip address 24RTC-Serial0/0fr dlci 200RTC-Serial0/0-300quitRTC-Serial0/0fr map ip 200FR-Switchfr switchingFR-Switchinterface Serial 0/0FR-Switch-Serial0/0link-protocol frFR-Switch-Serial0/0fr interface-type dceFR-Switch-Serial0/0fr lmi type q933aFR-Switch-Serial0/0fr dlci-switch 300 interface S1/0 dlci 400FR-Switch-Serial0/0fr dlci-switch 100 interface S2/0 dlci 200FR-Switchinterface Serial 1/0FR-Switch-Serial1/0link-protocol frFR-Switch-Serial1/0fr interface-type dceFR-Switch-Serial1/0fr lmi type q933aFR-Switch-Serial1/0fr dlci-switch 400 interface S0/0 dlci 300FR-Switch-Serial1/0interface Serial 2/0FR-Switch-Serial2/0link-protocol frFR-Switch-Serial2/0fr interface-type dceFR-Switch-Serial2/0fr lmi type q933aFR-Switch-Serial2/0fr dlci-switch 200 interface S0/0 dlci 100ACL配置标准访问控制列表Quidwayacl 10Quidway-acl-10rule normal permit source 55Quidway-acl-10 rule normal deny source any扩展访问控制列表的配置TCP/UDP协议的扩展访问列表：rule normal | special permit | deny tcp | udp source source-addr source-wildcard | any source-port operator port1 port2 destination dest-addr dest- wildcard | any destination-port operator port1 port2 loggingICMP协议的扩展访问列表rule normal | special permit | deny icmp source source-addr source-wildcard | any destination dest-addr dest- wildcard | any icmp-type icmp-type icmp-code logging其它协议的扩展访问列表：rule normal | special permit | deny ip | ospf | igmp | gre source source-addr source-wildcard | any destination dest-addr dest- wildcard | any loggingACL配置实例n Quidwayacl 101l Rule permit icmp source any destination any icmp-type echol Rule permit icmp source any destination any icmp-type echo-replyl Rule deny icmp source any destination any n Quidwayacl 102l Rule permit tcp source any destination destination-port equal ftp loggingl Rule permit tcp source any destination destination-port equal telnet loggingl Rule deny ip source any destination any实例2n Quidwayfirewall enablen Quidwayfirewall default permit n Quidwayacl 101n Quidway-acl-101rule deny ip source any destination any n Quidway-acl-101rule permit ip source destination anyn Quidway-acl-101rule permit ip source destination anyn Quidway-acl-101rule permit ip source destination anyn Quidway-acl-101rule permit ip source destination anyn Quidwayacl 102n Quidway-acl-102rule permit tcp source destination 0n Quidway-acl-102rule permit tcp source any destination destination-port great-than 1024n Quidway-Ethernet0firewall packet-filter 101 inbound n Quidway-Serial0firewall packet-filter 102 inbound DHCP配置l Router dhcp enablel Router dhcp server ip-pool pool-name l Router-dhcppoolname network network-address mask-length | mask mask l Router-dhcppoolname gateway-list ip-addressl Router-dhcp-pool-0 dns-list ip-address l Router dhcp server forbidden-ip low-ip-address high-ip-address l Router-dhcp-pool-0 expired day day hour hour minute minute | unlimited Router-Ethernet1/1 ip relay-address dhcp_server_IP /DHCP中继配置DHCP故障检查指令l Router display dhcp server ip-in-usel Router display dhcp server statisticsl Router display dhcp server expiredl Router display ip relay protocol /DHCP中继配置检查l Router display ip relay-address /DHCP中继配置检查配置实例Router dhcp enableRouter dhcp server forbidden-ip 54Router dhcp server ip-pool 0Router-dhcp-pool-0 network mask Router-dhcp-pool-0 gateway-list 54Router-dhcp-pool-0 dns-list 0Router-dhcp-pool-0 expired day 5 NAT基本配置l Router nat address-group start-addr end-addr pool-name l Router-Interface nat outbound acl-number interface l Router-Interface nat outbound acl-number address-group pool-namel Router nat server global global-addr global-port | any | domain | ftp | pop2 | pop3 | smtp | telnet | www inside inside-addr inside-port | any | domain | ftp | pop2 | pop3 | smtp | telnet | www protocol-number | ip | icmp | tcp | udp EASY NAT配置实例Quidway acl number 2000Quidway-acl-basic-2000 rule permit source 55Quidway-acl-basic-2000 rule denyQuidway interface Ethernet0/1Quidway-Ethernet0/1 ip address Quidway interface Ethernet0/0Quidway-Ethernet0/1 ip address 48Quidway-Ethernet0/1 nat outbound 2000 interfaceQuidway ip route-static preference 60基于地址池NAT配置实例Quidway acl number 2000Quidway-acl-basic-2000 rule permit source 55Quidway-acl-basic-2000 rule denyQuidway nat address-group hw-testQuidway interface Ethernet0/1Quidway-Ethernet0/1 ip address Quidway interface Ethernet0/0Quidway-Ethernet0/1 ip address