华为交换机路由器常用命令

1、华为交换机路由器常用命令12:25网络技术/wangzhijun1743发表于2007-03-24,交换机命令QuidwaydiscurQuidwaydisplaycurrent-configurationQuidwaydisplayinterfacesQuidwaydisplayvlanallQuidwaydisplayversion;显示当前配置;显示当前配置;显示接口信息;显示路由信息;显示版本信息QuidwaysuperpasswordQuidwaysysnameQuidwayinterfaceethernet0/1;修改特权用户密码;交换机命名;进入接口视图Quidwayinterf

2、acevlanQuidway-Vlan-interfacexipaddress;进入接口视图;配置VLAN的IP地址;静态路由=网关;三层交换支持Quidwayiproute-staticQuidwayripQuidwaylocal-userftpQuidwayuser-interfacevty04S3026-ui-vty0-4authentication-modepasswordS3026-ui-vty0-4setauthentication-modepasswordS3026-ui-vty0-4userp

3、rivilegelevel3;进入虚拟终端;设置口令模式simple222;设置口令;用户级别Quidwayinte0/1;进入端口模式;进入端口模式Quidwayinterfaceethernet0/1ethernete0/1ethernete0/1to<interface_type<interface_typeint_listobserving-port;配置端口工作状态;配置端口工作速率配置端口流控;配置端口平接扭接;设置端口工作模式;当前端口加入到VLAN;设trunk允许的VLAN;设置trunk端口的PVID;激活端口;关闭端口;创建VLAN;在VLAN中增加端口；简写

4、方式;在VLAN中增加端口；简写方式;指定镜像端口;指定被镜像端口int_num；指定镜像和被镜像Quidway-Ethernet0/1duplexQuidway-Ethernet0/1speedQuidway-Ethernet0/1flow-controlQuidway-Ethernet0/1mdiQuidway-Ethernet0/1portQuidway-Ethernet0/1portQuidway-Ethernet0/2portQuidway-Ethernet0/3portQuidway-Ethernet0/1undoQuidway-Ethernet0/1shutdownQuidway

5、-Ethernet0/1quitQuidwayvlan3Quidway-vlan3portQuidway-vlan3portQuidway-vlan3portQuidway-vlan3portQuidwaymonitor-portQuidwayportmirrorQuidwayportmirrorhalf|full|auto10|100|auto；across|auto|normallink-typetrunk|access|hybridaccessvlan3trunkpermitvlanID|Alltrunkpvidvlan3shutdown;返回0/10/1toethernet0/4e0/

6、4interface_num>interface_num>int_type;指定VLAN描述字符;删除VLAN描述字符;查看VLAN设置QuidwaydescriptionstringQuidwaydescriptionQuidwaydisplayvlanvlan_idQuidwaystp(enable|disableQuidwaystppriority4096Quidwaystproot(primary|secondaryQuidway-Ethernet0/1stpcost200Quidwaylink-aggregatione0/1toe0/4Quidwayundolink-ag

7、gregatione0/1|allSwitchA-vlanxisolate-user-vlanenableSwitchAisolate-user-vlan<x>secondaryanQuidway-Ethernet0/2porthybridpvidQuidway-Ethernet0/2porthybridpvidQuidway-Ethernet0/2porthybridvlan如果包的vlanid与PVId一致，则去掉vlan所以设置PVID为所属vlanid,设置可以互通的;设置生成树，默认关闭;设置交换机的优先级;设置为根或根的备份;设置交换机端口的花费ingress|both

8、<list>i；:;端口的聚合始端口为通道号;设置主vlan;设置主vlan包括的子vlvlan<id>设置vlan的pvid;删除vlan的pvidvlan_id_list信息.默认vlan为untaggedPVID=1ountagged.;设置无标识的vlan路由器命令QuidwaydisplayversionQuidwaydisplaycurrent-configurationQuidwaydisplayinterfaces;显示版本信息;显示当前配置;显示接口信息Quidwaydisplayiproute;显示路由信息QuidwaysysnameaabbccQu

9、idwaysuperpasswrod123456Quidwayinterfaceserial0Quidway-serial0ipaddress<ip><mask|mask_len>Quidway-serial0undoshutdownQuidwaylink-protocolhdlcQuidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepassword;更改主机名;设置口令;进入接口;配置端口IP地址;激活端口;绑定hdlc协议Quidway-ui-vty0-4setauthentication-mod

10、epasswordQuidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitsimple222Quidwaydebugginghdlcallserial0;显示所有信息Quidwaydebugginghdlceventserial0Quidwaydebugginghdlcpacketserial0;调试事件信息;显示包的信息静态路由：Quidwayiproute-static<ip><mask>(interfacenumber|nexthopvaluereject|blackhole例如：Quidwayiprout

11、e-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static动态路由：Quidwayrip;设置动态路由Quidwayripwork;设置工作允许Quidwayripinput;设置入口允许Quidwayripoutput;设置出口允许Quidway-ripnetwork；设置交换路由网络Quidway-ripnetworkal

12、l；设置与所有网络交换Quidway-rippeerip-address；Quidway-ripsummary;路由聚合Quidwayripversion1;设置工作在版本1Quidwayripversion2multicast;设版本2,多播方式Quidway-Ethernet0ripsplit-horizon;水平分隔QuidwayrouteridA.B.C.D;配置路由器的IDQuidwayospfenable;启动OSPF协议Quidway-ospfimport-routedirect;引入直联路由Quidway-Serial0ospfenablearea<area_id>

13、配置OSPF区域标准访问列表命令格式如下：acl<acl-number>match-orderconfig|auto;默认前者顺序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalpermitsource55Quidway-acl-10rulenormaldenysourceany扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表:rule(normal|special)(permi

14、t|deny)(tcp|udpsourcewild>|anyoperate配置ICMP协议的扩展访问列表：rule(normal|special(permit|denyicmpld>|anyicmp-codelogging扩展访问控制列表操作符的含义equalportnumbergreater-thanportnumberless-thanportnumbernot-equalportnumber(<ipwild>|anydestinationsource(<ipwild>|anydestination(<ip;等于；大于;小于;不等rangeport

15、number1portnumber2<ipwi扩展访问控制列表举例Quidwayacl101Quidway-acl-101ruleQuidway-acl-101ruleQuidway-acl-101ruledenysouceanydestinationanypermiticmpsourceanydestinationanyicmp-typeechopermiticmpsourceanydestinationanyicmp-typeecho-replQuidwayacl102Quidway-acl-102rulepermitipsourcedestinatio

16、nQuidway-acl-102ruledenyipsourceanydestinationany103QuidwayaclQuidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulepermittcpsourceanydestinationdestination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermi

17、t|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound地址转换配置举例QuidwayfirewallenableQuidwayfirewallQuidwayacldefaultpermitQuidway-acl-101ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinat

18、ionanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationany101Quidway-acl-101quit;内部指定主机可以进入e0Quidwayinte0Quidway-Ethernet0firewallpacket-filter101inboundQuidwayacl102;外部特定主机和大于1024端口的数据包允许进入S0Quidway-acl-102ruledenyipsourceanydestinatio

19、nanyQuidway-acl-102ruleQuidway-acl-102rulepermitpermitn-portgreat-than1024Quidway-acl-102quitQuidwayints0Quidway-Serial0firewallIPotcpsource0tcpsourceanydestinationpacket-filter102inbounddestination0destinatio;设是路由器出口Quidway-Serial0nat口出时变换源地址。outbound10

20、1interface;是Easyip，将acl101允许的IP从本接内部服务器地址转换配置命令（静态nat）:natserverglobal<ip>portinside<ip>portprotocol;global_port不写时使用inside_portQuidway-Serial0natQuidway-Serial0natserverserverglobalglobalinsideinsidetelnettcpQuidway-Serial0natserverglobal202.3

21、8.160.1inside设有公网IP:0103可以使用。;对外访问（原例题）Quidwaynataddress-group0103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource55;指定允许的内部网络Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppo

22、ol1;在s0口从地址池取出P对外访问Quidway-Serial0natserverglobal01insideQuidway-Serial0natserverglobal02insideQuidway-Serial0natserverglobal028080insideQuidway-Serial0natserverglobal03insidesmtpudpPPP设置：Quidway-s0link-proto

23、colppp;默认的协议PPP验证：主验方:pap|chapQuidwaylocal-userq2password(simple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-mode(pap|chapQuidway-serial0pppchapuserq1;pap时，没有此句pap被验方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2password(simple|cipherhellochap被验方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1password(simple|cipherhello;对方路由器名帧中继fram