eNSP实验操作

1、目录 尾页目录基本操作2路由器2动态路由3RIP3OSPF3VLAN3链路聚合4Vlan间路由4DHCP4STP5ACL5基本ACL5高级ACL5调用ACL5NAT5静态NAT5END5eNSP实验操作基本操作修改时间clock datetime 16:29:30 2016 01-20保存saveThe current configuration will be written to the device.Are you sure to continue?Y/Ny登陆为管理员账户sys或system viewEnter system view, return user view with Ct

2、rl+Z.Huawei重启reboot修改名称Huaweisysname R1R1配置console(管理)密码Huaweiuser-interface console 0Huawei-ui-console0authentication-mode passwordHuawei-ui-console0set authentication password cipher 123456PingHuaweiping a 192.168.1.1 12.1.1.1路由器修改网关Huaweiinterface GigabitEthernet 0/0/0ip address 192.168.1.1 255.2

3、55.255.0Huaweiinterface GigabitEthernet 0/0/1或Huawei-GigabitEthernet0/0/0int g 0/0/1查看路由器信息Huaweidisplay this若查看全部信息则Huaweidisplay current-configuration查看端口信息Huaweidisplay ip interface brief开关端口HuaweishutdownHuaweiundo shutdown反向操作undo路由器Telnet远程控制telnet 192.168.1.2设置Telnet(vty)接口密码Huaweiuser-interf

4、ace vty 0 4Huawei-ui-vty0-4set authentication passwprd ?Cipher 密文显示Simple 明文显示提升用户权限用户等级用户等级命令等级名称00访问级10 and 1监控级20 , 1 and 2配置级3-150 , 1 , 2 and 3管理级Huawei-ui-vty0-4user privilege level 3抓包右键设配-数据抓包查看路由表Huaweidisplay ip routing-table增加路由表Huaweiip route-static 目的网络 子网掩码 出接口/下一跳Huaweiip route-static

5、 192.168.2.0 24 12.1.1.2查看ARP表项Huaweiarp -a提高路由优先级Huaweiip route-static 192.168.2.0 24 12.1.1.2 preference 50动态路由RIP配置RIP（更新至v2）HuaweiripHuaweiversion 2Huaweinetwork 192.168.1.0Huaweinetwork 12.0.0.0RIP(v2)认证Huaweiinterface GigabitEthernet 0/0/0Huaweirip authentication-mode md5/simple 123456md5密文sim

6、ple明文更改RIP跳数Huaweiinterface GigabitEthernet 0/0/0Huaweirip metricout 5抑制RIPHuaweiripHuaweisilent interfaceOSPF配置OSPFHuaweiospfHuaweiarea 0 Huaweinetwork 192.168.1.0 0.0.0.255Huaweiarea 1Huaweinetwork 12.1.1.0 0.0.0.255重置OSPF进程reset ospf process查看OSPF邻居Huaweidisplay ospf peer brief修改routeIDHuaweiospf

7、 router-id 1.1.1.1OSPF认证接口Huaweiinterface GigabitEthernet 0/0/0Huaweiospf authentication-mode ?hmac-md5keychain密文认证md5null空认证simple明文认证Huaweiospf authentication-mode md5 123456修改DR优先级 Huaweiinterface GigabitEthernet 0/0/0Huaweiospf dr-priority 0VLAN查看vlanHuaweidisplay vlan查看关口vlanHuaweidisplay port

8、vlan创建vlanHuaweivlan 10Huaweivlan batch 30 40 50Huaweivlan batch 30 to 40配置设置PC-S链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port link-type access设置PC-S所属vlanHuaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port default vlan 10 配置设置S-S链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port link-type tru

9、nk设置S-S允许通过的vlanHuaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port trunk allow-pass vlan 9 10修改端口PVIDHuaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port trunk pvid vlan 10查看PVIDHuawei-Ethernet0/0/1interface Ethernet0/0/1配置设置hybrid链路类型Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port link-type hybrid手工定义hy

10、brid允许通过vlan、动作Huaweiinterface Eth0/0/1Huawei-Ethernet0/0/1port hybrid tagged vlan 10 20Huawei-Ethernet0/0/1port hybrid untagged vlan 9 10链路聚合创建虚拟接口Huaweiinterface Eth-Trunk 12Huawei- Eth-Trunk12interface G0/0/1Huawei-GE0/0/1Eth-trunk 12Huawei-GE0/0/1interface G0/0/2Huawei-GE0/0/1Eth-trunk 12查看链路聚合信

11、息Huaweidisplay interface eth-trunk 1Vlan间路由三级交换机配置对交换机Huaweivlan batch 10 20Huaweiinterface GE0/0/1Huawei-GE0/0/1port link-type trunkHuawei-GE0/0/1port trunk allow-pass vlan 10 20对路由器 Huaweivlan 30Huawei-vlan30 interface GigabitEthernet 0/0/1Huawei-GigabitEthernet0/0/1port link-type accessHuawei-Gig

12、abitEthernet0/0/1port default vlan 30Huaweiinterface Vlanif 30Huawei-Vlanif30ip address 192.168.3.1 24三级交换机网关Huaweiint g 0/0/1Huawei-GE0/0/1port link-type trunk Huawei-GE0/0/1port trunk allow-pass vlan 10 20Huawei vlan batch 10 20Huaweiinterface Vlanif 10Huawei-Vlanif10ip address 192.168.1.1 24Huawe

13、iinterface Vlanif 20Huawei-Vlanif20ip address 192.168.2.1 24路由器单臂路由 设置子接口Huaweiinterface g0/0/1. ?Huaweiinterface g0/0/1.1Huawei-G0/0/1.1dot1q termination vid 10Huawei-G0/0/1.1arp broadcast enableHuawei-G0/0/1.1ip address 192.168.1.1 24DHCP基于接口地址池开启DHCP功能Huaweidhcp enable关联接口和接口地址池Huaweiinterface Gi

14、gabitEthernet0/0/0Huawei-GEthernet0/0/0dhcp select interface设置DNSHuawei-GEthernet0/0/0dhcp server dns-list 8.8.8.8设置租期时间Huawei-GEthernet0/0/0dhcp server lease day ？Hourminute基于全局地址池Huawei开启功能同上Huaweiip pool Huawei设置掩码Huawei-ip-pool-Huaweinetwork 1.1.1.0 mask 24设置网关Huawei-ip-pool-Huaweigateway-list 1

15、.1.1.1设置DNSHuawei-GEthernet0/0/0dhcp server dns-list 8.8.8.8设置租期时间Huawei-ip-pool-Huaweilease day 10调用地址池Huaweiinterface GigabitEthernet0/0/1Huawei-GigabitEthernet0/0/1dhcp select global关联接口和接口地址池Huaweiinterface GigabitEthernet0/0/0Huawei-GEthernet0/0/0dhcp select interfaceSTP开启STPHuaweistp mode stp改

16、优先级Huaweistp priority 4096 step 4096查看stp端口Huaweidisplay stp brief阻塞ALTEDiscarding丢弃正常ROOTForwardingACL基本ACLHuaweiacl 2000Huawei-acl-basic-2000rule ？Step 5deny拒绝permit允许Huawei-acl-basic-2000rule deny source 192.168.2.0 0.0.0.255高级ACLHuaweiacl 3000Huawei-acl-basic-3000rule denyIp tcp udp 。Huawei-acl-

17、basic-3000rule deny icmp source 192.168.1.2 0 destination 192.168.3.2调用ACLHuaweiinterface g0/0/1Huawei-GEthernet0/0/1traffic-filter ？Inbound outboundHuawei-GE0/0/1traffic-filter outbound acl 2000NAT静态NATHuaweiinterface GigabitEthernet0/0/1Huawei-GEthernet0/0/1ip address 192.168.1.254 24Huawei-GEther

18、net0/0/1interface Serial1/0/0Huawei-Serial1/0/0ip address 200.10.10.2 24Huawei-Serial1/0/0nat static global 200.1.1.100 inside 192.168.1.1 netmask 255.255.255.255Huawei-Serial1/0/0nat static global 200.1.1.101 inside 192.168.1.2 netmask 255.255.255.255动态NATHuaweinat address-group 1 200.10.10.1 200.1

19、0.10.200Huaweiacl 2000Huawei-acl-basic-2000rule 5 permit source 192.168.1.0 0.0.0.255Huaweiinterface serial1/0/0Huawei-Serial1/0/0nat outbound 2000 address-group 1 no-pat简单NATHuaweiacl 2000Huawei-acl-basic-2000rule 5 permit source 192.168.1.0 0.0.0.255Huaweiinterface serial1/0/0Huawei-Serial1/0/0nat

20、 outbound 2000帧中继映射动态映射RTAinterface Serial 1/0/0 RTA-Serial1/0/0link-protocol fr Warning: The encapsulation protocol of the link will be changed. Continue? Y/N:y RTA-Serial1/0/0fr interface-type dteRTA-Serial1/0/0fr inarp静态映射RTAinterface Serial 1/0/0RTA-Serial1/0/0link-protocol frWarning: The encaps

21、ulation protocol of the link will be changed. Continue? Y/N:yRTA-Serial1/0/0fr interface-type dteRTA-Serial1/0/0undo fr inarpRTA-Serial1/0/0fr map ip 10.1.1.2 100HDLCHDLC基本配置RTAinterface Serial 1/0/0RTA-Serial1/0/0link-protocol hdlcWarning: The encapsulation protocol of the link will be changed. Con

22、tinue? Y/N:yRTA-Serial1/0/0ip address 10.0.1.1 30HDLC接口地址借用RTAinterface Serial 1/0/0RTA-Serial1/0/0link-protocol hdlc Warning: The encapsulation protocol of the link will be changed. Continue? Y/N:y RTA-Serial1/0/0ip address unnumbered interface loopBack 0RTAip route-static 10.1.1.0 24 Serial 1/0/0 PPPPAP认证认证方：RTAaaa RTA-aaalocal-