eNSP试验操作

1、文档目录基本操作 2路由器 2动态路由 2RIP 2OSPF 3VLAN 3链路聚合 3Vlan 间路由 3DHCP 4STP 4ACL 4基本 ACL 4高级 ACL 4调用 ACL 4NAT 4静态 NAT 4END 5文档eNSP实验操作基本操作修改时间 clock datetime 16:29:30 2016 01-20保存 saveThe current configuration will be written to the device.Are you sure to continue?Y/N y登陆为管理员账户 sys 或 system viewEnter system vie

2、w, return user view with Ctrl+Z.Huawei重启 reboot修改名称Huawei sysname R1R1配置 console（管理 ）密码Huawei user-interface console 0Huawei-ui-console0 authentication-mode passwordHuawei-ui-console0 set authentication password cipher 123456PingHuaweiping a 192.168.1.1 12.1.1.1路由器修改网关Huawei interface GigabitEtherne

3、t 0/0/0ip address 192.168.1.1 255.255.255.0Huaweiinterface GigabitEthernet 0/0/1或Huawei-GigabitEthernet0/0/0 int g 0/0/1查看路由器信息Huawei display this 若查看全部信息则Huawei display current-configuration查看端口信息Huawei display ip interface brief开关端口Huawei shutdownHuawei undo shutdown反向操作undo路由器 Telnet远程控制设置 Telnet

4、(vty)接口密码Huawei user-interface vty 0 4 Huawei-ui-vty0-4 set authentication passwprd ?Cipher 密文显示 Simple 明文显示 提升用户权限 用户等级用户等级命令等级名称00访问级10 and 1监控级20 , 1 and 2配置级3-150 , 1 , 2 and 3管理级Huawei-ui-vty0-4 user privilege level 3抓包 右键设配 -数据抓包 查看路由表 Huawei display ip routing-table 增加路由表Huawei ip route-stati

5、c 目的网络 子网掩码 出接口 /下一 跳Huawei ip route-static 192.168.2.0 24 12.1.1.2查看 ARP 表项Huawei arp -a提高路由优先级Huawei ip route-static 192.168.2.0 24 12.1.1.2 preference 50动态路由RIP配置 RIP（更新至 v2） Huawei rip Huawei version 2 Huawei network 192.168.1.0 Huawei network 12.0.0.0RIP（v2）认证Huawei interface GigabitEthernet 0/

6、0/0 Huawei rip authentication-mode md5/simple 123456 md5 密文 simple 明文 更改 RIP 跳数Huawei interface GigabitEthernet 0/0/0 Huawei rip metricout 5 抑制 RIPHuawei rip Huawei silent interface telnet 192.168.1.2文档OSPF配置 OSPFHuawei ospfHuawei area 0Huawei network 192.168.1.0 0.0.0.255Huawei area 1Huawei network

7、 12.1.1.0 0.0.0.255重置 OSPF进程 reset ospf process查看 OSPF邻居Huawei display ospf peer brief修改 routeIDHuawei ospf router-id 1.1.1.1OSPF认证接口Huawei interface GigabitEthernet 0/0/0 Huawei ospf authentication-mode ? hmac-md5 keychain密文认证md5 null空认证simple明文认证Huawei ospf authentication-mode md5 123456修改 DR 优先级H

8、uawei interface GigabitEthernet 0/0/0 Huaweiospf dr-priority 0VLAN查看 vlanHuawei display vlan查看关口 vlanHuawei display port vlan创建 vlanHuawei vlan 10Huawei vlan batch 30 40 50Huawei vlan batch 30 to 40配置设置 PC-S链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port link-type access设置 PC-S 所属 vlanHuaweiin

9、terface Eth0/0/1Huawei-Ethernet0/0/1 port default vlan 10配置设置 S-S链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port link-type trunk设置 S-S 允许通过的 vlanHuaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port trunk allow-pass vlan 9 10修改端口 PVIDHuaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port trunk pvid vla

10、n 10查看 PVIDHuawei-Ethernet0/0/1 interface Ethernet0/0/1配置设置 hybrid 链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port link-type hybrid 手工定义 hybrid 允许通过 vlan、动作 Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1 port hybrid tagged vlan 10 20Huawei-Ethernet0/0/1 port hybrid untagged vlan 9 10链路聚合创建虚拟接口Hu

11、awei interface Eth-Trunk 12Huawei- Eth-Trunk12 interface G0/0/1Huawei-GE0/0/1 Eth-trunk 12Huawei-GE0/0/1 interface G0/0/2Huawei-GE0/0/1 Eth-trunk 12查看链路聚合信息Huawei display interface eth-trunk 1Vlan 间路由三级交换机配置对交换机Huawei vlan batch 10 20Huawei interface GE0/0/1Huawei-GE0/0/1 port link-type trunk Huawei

12、-GE0/0/1 port trunk allow-pass vlan 10 20 对路由器Huaweivlan 30Huawei-vlan30 interface GigabitEthernet 0/0/1Huawei-GigabitEthernet0/0/1 port link-type access Huawei-GigabitEthernet0/0/1 port default vlan 30 Huawei interface Vlanif 30Huawei-Vlanif30 ip address 192.168.3.1 24三级交换机网关Huawei int g 0/0/1文档Hua

13、wei-GE0/0/1 port link-type trunkHuawei-GE0/0/1 port trunk allow-pass vlan 10 20 Huawei vlan batch 10 20Huawei interface Vlanif 10Huawei-Vlanif10 ip address 192.168.1.1 24Huawei interface Vlanif 20Huawei-Vlanif20 ip address 192.168.2.1 24路由器单臂路由 设置子接口Huawei interface g0/0/1. ?Huawei interface g0/0/1.

14、1Huawei-G0/0/1.1 dot1q termination vid 10Huawei-G0/0/1.1 arp broadcast enable Huawei-G0/0/1.1 ip address 192.168.1.1 24DHCP 基于接口地址池 开启 DHCP 功能Huawei dhcp enable关联接口和接口地址池Huawei interface GigabitEthernet0/0/0Huawei-GEthernet0/0/0 dhcp select interface设置 DNSHuawei-GEthernet0/0/0 dhcp server dns-list 8

15、.8.8.8设置租期时间Huawei-GEthernet0/0/0 dhcp server lease day ？ Hour minute 基于全局地址池Huawei 开启功能同上Huawei ip pool Huawei设置掩码Huawei-ip-pool-Huawei network 1.1.1.0 mask 24设置网关Huawei-ip-pool-Huawei gateway-list 1.1.1.1设置 DNSHuawei-GEthernet0/0/0 dhcp server dns-list 8.8.8.8设置租期时间Huawei-ip-pool-Huawei lease day

16、10调用地址池Huawei interface GigabitEthernet0/0/1Huawei-GigabitEthernet0/0/1 dhcp select global关联接口和接口地址池Huawei interface GigabitEthernet0/0/0Huawei-GEthernet0/0/0 dhcp select interfaceSTP开启 STPHuawei stp mode stp改优先级Huawei stp priority 4096 step 4096查看 stp 端口Huawei display stp brief阻塞ALTEDiscarding 丢弃正常

17、ROOT ForwardingACL基本 ACLHuaweiacl 2000 Huawei-acl-basic-2000 rule ？ Step 5 deny 拒绝 permit 允许Huawei-acl-basic-2000 rule deny source 192.168.2.0 0.0.0.255高级 ACLHuaweiacl 3000 Huawei-acl-basic-3000 rule deny Ip tcp udp 。Huawei-acl-basic-3000 rule deny icmp source 192.168.1.2 0 destination 192.168.3.2调用

18、 ACLHuaweiinterface g0/0/1Huawei-GEthernet0/0/1 traffic-filter ？ Inbound outboundHuawei-GE0/0/1 traffic-filter outbound acl 2000NAT静态 NATHuawei interface GigabitEthernet0/0/1 Huawei-GEthernet0/0/1 ip address 192.168.1.254 24 Huawei-GEthernet0/0/1 interface Serial1/0/0 Huawei-Serial1/0/0 ip address 2

19、00.10.10.2 24 Huawei-Serial1/0/0 nat static global 200.1.1.100 inside 192.168.1.1 netmask 255.255.255.255Huawei-Serial1/0/0 nat static global 200.1.1.101 inside 192.168.1.2 netmask 255.255.255.255动态 NATHuawei nat address-group 1 200.10.10.1 200.10.10.200 Huawei acl 2000Huawei-acl-basic-2000 rule 5 p

20、ermit source 192.168.1.0 0.0.0.255Huawei interface serial1/0/0RTA-Serial1/0/0ppp authentication-mode papRTA-Serial1/0/0ip address 10.1.1.1 30 被认证方：文档Huawei-Serial1/0/0 nat outbound 2000 address-group 1 no-pat简单 NATHuawei acl 2000RTBinterface Serial 1/0/0Huawei-acl-basic-2000 rule 5 permitsource 192.

21、168.1.0RTB-Serial1/0/0link-protocol pppRTB-Serial1/0/0ppp pap local-user huawei password cipher huaweiRTB-Serial1/0/0ip address 10.1.1.2 30CHAP 认证 认证方： RTAaaa RTA-aaalocal-user huawei password cipher huawei RTA-aaalocal-user huawei-type ppp will be RTAinterface Serial 1/0/0RTA-Serial1/0/0link-protoc

22、ol pppRTA-Serial1/0/0ppp authentication-mode chap被认证方：RTBinterface Serial 1/0/0 RTB-Serial1/0/0link-protocol ppp will beRTB-Serial1/0/0ppp chap user huaweiRTB-Serial1/0/0ppp chap password cipher huawei0.0.0.255Huawei interface serial1/0/0Huawei-Serial1/0/0 nat outbound 2000 帧中继映射 动态映射RTA interface Serial 1/0/0RTA-Serial1/0/0 link-protocol frWarning: The encapsulation protocol of the link changed. Continue? Y/N: y RTA-Serial1/0/0 fr interface-type dte RTA-Serial1/0/0 fr inarp静态映射RTA interface Serial 1/0/0RTA-Serial1/0/0 link-protocol frWarning: The encapsu