设备维护手册ac autewareos2.0命令行

1、.s1目前1configurenoidle-目前1configurenoidle-2showsystem. showsystemshowslotshowboardshowslotshowproductset32configeth-configadmins configauto-configauto-negotiationconfigconfigauto-negotiation configduplexconfigeth-configadmins configauto-configauto-negotiationconfigconfigauto-negotiation configduplex

2、configback-configconfigmediaconfigshoweth-port 4模VLAN 配置命createdeleteconfigadddelete配置VLAN的Trunk成 showvlantrunk-3showvlantrunk-memberVLAN显示命showvlanport-showvlanport-member分布式VLAN 与VE口绑定命bond unbondQinQ功showvlantrunk-memberVLAN显示命showvlanport-showvlanport-member分布式VLAN 与VE口绑定命bond unbondQinQ功configp

3、ortconfigvlansetvlanto-cpu-port5FDB模configfdb静态FDB配置命createicfdbwithdeleteicfdbbymacanddeleteicfdbbydeleteicfdbbyshowshowfdbshowfdb6erfaceerfaceerfaceerfaceerface4ipaddress7 configaclswtich-configaclipaddress7 configaclswtich-configacl showacl aclacltcpacltcp/udpaclaclicmpaclaclaclaclethernetextende

4、daclextendedacltcp/udpaclaclethertypeaclipv6 delete 5createacl-configacl-bindbindacl-showacl- aclbindacl-show8trunk模createacl-configacl-bindbindacl-showacl- aclbindacl-show8trunk模TRUNK 配置命createdeleteconfigconfigtrunkload-adddeletesetTRUNK显示命showshow9模配置命 .IGMP功能配 .6配ARP模静态ipARP配置命configarpsmac-ARP显

5、示命show配ARP模静态ipARP配置命configarpsmac-ARP显示命showarpshowarpshowarpbyshowarpbyshowarpby confighansiconfighansiconfighansivirtualnoconfighansipreemptconfighansimasterdown-setconfighansiconfighansimulti-link-configdhcp- show7showhansishowhansirunning-showhansirunning-模全局配HH配置命configprimaryno.showhansishowh

6、ansirunning-showhansirunning-模全局配HH配置命configprimaryno.H显示命show.MLD模VLANMLD功能配configmld-.VLANMLD配 Snmp配置命configsnmpopen|closeconfigsnmp配置Snmp.配置Snmp视配置Snmp安全8配置Snmp 实例状配置Trap配置Trap告警开配置Trap告警参SNMP显示命配置Snmp 实例状配置Trap配置Trap告警开配置Trap告警参SNMP显示命showsnmprunningshowsnmpbaseshowcommunityshowshowshowshowsnmpd

7、busconnectionsnmpstring_to_asciiTRAP显示命showtrapshowtrapshowtrapswitch add|deletesyslogallsyslogexecsyslogsyslog DHCP模9DHCPipv4服务器配DHCP 服务器全局配IP地址池配接口下DHCP 服务器功能配DHCP 服务器配置查DHCPipv4Relay配DHCPRelay全局配置命DHCPRelayDHCPipv4服务器配DHCP 服务器全局配IP地址池配接口下DHCP 服务器功能配DHCP 服务器配置查DHCPipv4Relay配DHCPRelay全局配置命DHCPRelay

8、配置查看命DHCPipv6服务器配DHCP 服务器全局配接口下DHCP 服务器功能配DHCP 服务器配置查createcreatecreatecreatewtpcreatewtpcreateconfigconfigsecurityencryptionsecurityasciisecurityhexsecurityradiusradiussecondaryradiussecondaryradiusseteapsetsecurityquitewapiwapiwapisetasdwapiradiuswapisecondaryradiusseteapsetsecurityquitewapiwapiwa

9、pisetasdwapiradiuswapiradiusauthset.hybridconfigconfigapplywlanwlan.wlansetwlanmaxsetwlanwlanerfacesetwlansetwlansetacshowacwlanroamingset undoshowsetsetshowsetshowsetbridgeset undoshowsetsetshowsetshowsetbridgewdsset1xServerconfigconfigwtpwtpapplywtpdeletewtpenablewtpdisablewtpwtpsetwtpmaxsetwtpset

10、wtpsetapsetapupdateapimg-clearapsetapshowapseterfacesetapterminalsetapterminalstasetapterminalconfigconfigsetsupportseterfacesetapterminalsetapterminalstasetapterminalconfigconfigsetsupportsetmaxradiosetbsssetbssbssradioapplyeteradioapplyeteradioenableradiodisableradioapplywlansetwlanwlanwlanwds.set

11、radiosetradiosetradiowlantrafficwlantrafficlimitwlantrafficlimitsetwlanwlanwlanwds.setradiosetradiosetradiowlantrafficwlantrafficlimitwlantrafficlimitwlantrafficlimitionwlantrafficlimitwlantrafficwlantrafficlimitionwlantrafficlimitionwlantrafficlimitcanceldu|amsdudu|amsdu11namsduamsduamsduwlanchanne

12、l setwireless-controlmaxsetwireless-controlmax setwireless-controllogsetwireless-controllog licenselicense setwtpsendsetwtpsendresponsetowlansetac.setwireless-controllog licenselicense setwtpsendsetwtpsendresponsetowlansetac.configsetap.deleteap.downloadsetapmax1etaps showap.showshow.sett.setwlanset

13、aperfaceerfaceerfaceerfaceerfacehowconfig showshow showstaextendshowsta.extendshowshowinfoshowwtpconfigradioresourceshow showstaextendshowsta.extendshowshowinfoshowwtpconfigradioresourcesetradioresourcesetradioresourcemanagementsetmacdeletemac setmacMACdeletemacMAC showrogueapshowrogueapsetrogueaptr

14、apshowrogueaplistshowneighboraplist.setradioresourcesetradioresourcecountermeasures DynamicChanneldynamicchannelerersetersetersetcoverageshowneighborrssi.及wlanaddwlandelwlanuseersetersetersetcoverageshowneighborrssi.及wlanaddwlandelwlanusewtpaddlistwtpistwtpuseradiowlanaddlistradiowlandellistradioses

15、howwlanmacshowwtpmacshowradiowlanshowanshowallwtpshowallbss设置动态AP接入策showsetsetauto_ap_logindelauto_ap_loginsetauto_ap_loginsetauto_ap_loginclear设置QOS策createwirelessqosdeletewirelessshowwirelessqosconfigwirelesssetradiocwminsetntcwminsetwmmwmmcreatewirelessqosdeletewirelessshowwirelessqosconfigwirele

16、sssetradiocwminsetntcwminsetwmmwmmmapdot1pshowqosinfobyAP管addlegaldellegalshowlegaladdlegal.dellegal.showlegal.addattackdelattackshowattackEtherealBridge配createdeleteshowshowebrconfigebrsetsetsetbridgesetshowtrafficlimitbyshowtrafficlimitby配置AP批量重rebootap rebootap byrebootsetshowtrafficlimitbyshowtr

17、afficlimitby配置AP批量重rebootap rebootap byrebootap rebootap by.rebootap by升级管setapupdatepathm.showupdateclearupdateshowupdatewtpshowupdateclearupdatesetapupdateshowapupdate跨AC漫游配 sethostadddel 11n11n11nsetwlanserviceWsmvtysh命show11n11n11nsetwlanserviceWsmvtysh命showsetwsmsetsetwmmconfwirelessqoscreatewi

18、relessqosprofileIDshowshowshowshow showwsmwatchdogs configcapwap- setlogwsmsetsetsetsetwsmIPV6 配置命ipv6showipv6IPV6地址配置命ipv6IPV6nd配置命setwsmIPV6 配置命ipv6showipv6IPV6地址配置命ipv6IPV6nd配置命ipv6ndsuppress-ipv6ndipv6ndipv6ndra-ipv6ndreachable-ipv6nd ipv6ndhome-agent-ipv6ndhome-agent-ipv6ndmanaged-config- IPV6t

19、unnle配置命ipv6OSPF 命令手OSPF配置命area areaexport- areaareaareaarea compatible distanceist ipfipfauthentication-ipfareaarea compatible distanceist ipfipfauthentication-ipfipfii ipfmtu-ipfipfipfipftransmit- ospfospf ospfospfospfospf refreshrouter ospfospfospfospf refreshroutertimersthrottleshowshowpfborder-

20、showpfshowshowpfborder-showpfshowpftimersconfigrpf showrouteshowroutepolicyipshowiprouteipnoipno ipnoipipnoipno ipnoipshowipipipmulticast-ippimsparse-ippimbsr-ippimrp-ippimrp-showippimshowipshowipfirewall 模configfirewall命configaddaddaddadddnatnat-adddnatnat-ipdelchangeadddelchange modifydelchangeadd

21、delchange modifydnatin-modifysnatout- modifyfirewalls modifyfirewallmodifyfirewallactmodifysnatnat-modify(snat|dnat)nat-ipmodify(snat|dnat)nat-modify(snat|dnat)nat-ip modify(snat|dnat)nat-portmodify(snat|dnat)nat-portmodifyinputmodifyinputmodifyinputin- modifyinput(src-ip|dst-ip) modifyinput(src-ip|

22、dst-ip)modifymodifyinputmodifyinputmodifyinputin- modifyinput(src-ip|dst-ip) modifyinput(src-ip|dst-ip)modifyinput modifyinput(src-port|dst-port) modifyinputs modifyinputshowshow service show firewall-s useruserusershow showdeletewhoamdeleteshowsystemshowshowdeletewhoamdeleteshowsystemshowsetsetcli-

23、ipset.terminalconfigureconsolemd5reloadstartupshowshowserviceshowserviceshowservicemd5reloadstartupshowshowserviceshowserviceshowserviceapplytcpdumptcpdumpcketshowshowconnectWebservice （apache）的配置命webservice配置命serviceadd命showwebs configfast-configaging- SEM模SEM功能命copy1 命令 能回退到系统模式，在系统模式下输入 exit 或者 q

24、uit SYSTEM为系统名称，有些设备名称更改过会显示不同。1.2.1 1 命令 能回退到系统模式，在系统模式下输入 exit 或者 quit SYSTEM为系统名称，有些设备名称更改过会显示不同。1.2.1 管理员通过串口在视图模式下输入命令 enable在系统模式下输入命令 configure terminal显示命令查看配置信节点配置模在配置模式下输入进入相应节点 令，configvlan1.2.2 1.2.2 1.2.3 无1.2.4 无1.2.5 configureconfigure无configure 1.2.6 idle- 1.2.5 configureconfigure无co

25、nfigure 1.2.6 idle- 10dle-timeout noidle-noidle-无no idle-1.2.8 showidle-showidle-无无 命令行格式标志复杂ABBSSIDCD无 命令行格式标志复杂ABBSSIDCD* #EEFGHIJKLMMNOPEEFGHIJKLMMNOPnumber 如 1-2 或 22 QRRADIOIDLocalradioS即TU2 QRRADIOIDLocalradioS即TUVVlanW白APXYZ2.1.1 showsystemshowsystem无无址（MACSYSTEM(config)# show system SOFTWARE

26、 2.0.18 (Build 13508sp1) running on 2.1.1 showsystemshowsystem无无址（MACSYSTEM(config)# show system SOFTWARE 2.0.18 (Build 13508sp1) running on 2.1.2 showsystemhardware-showsystemhardware-无无SYSTEM# show system hardware-1234567ProudctBase89IC:2.1.3 showsystemshowsystem无无无SYSTEM(config)# show system +| |

27、 | | |ERE |-+-+-| NONE NONE NONE +|SE|FANE|+|+|+| CORE |89IC:2.1.3 showsystemshowsystem无无无SYSTEM(config)# show system +| | | | |ERE |-+-+-| NONE NONE NONE +|SE|FANE|+|+|+| CORE |SURFACE| |+| | NONE| NONE +ER4个电源模块的状态。NONE为不存在，ON FAN 2.1.4 showslotshowslot无无SYSTEM#showslot62.1.5 showboardshowboard2.1

28、.4 showslotshowslot无无SYSTEM#showslot62.1.5 showboardshowboard无无无SYSTEM(config)# show board 0CSCD PORT FUNCTION IIVEISOBC PORT PORT NUM ON SLOT 5CPU CORESURFACECPU 为 MASTERCPUSLAVECPUSLAVE2.1.6 showslotshowslotSLOT_ID无无SYSTEM(config)# show slot slot1isslotslot2.1.6 showslotshowslotSLOT_ID无无SYSTEM(con

29、fig)# show slot slot1isslotslotslot4isslotBOARDCSCDPORT IVEISOBCPORTPORTNUMONSLOTslot6isslot7isslot8isslot9isslot10is2.1.7 showproductshow product info 无无SYSTEM# show product slot6isslot7isslot8isslot9isslot10is2.1.7 showproductshow product info 无无SYSTEM# show product BOARD IS 2.2.1 setsetsystem_img

30、，无无SYSTEM#setAX1.2342.2.2 reboot2.2.1 setsetsystem_img，无无SYSTEM#setAX1.2342.2.2 reboot(all|1无无SYSTEM# reboot SYSTEM# reboot 2.2.3 reset (fast | normal) (all | slot_id) 无无2.2.3 reset (fast | normal) (all | slot_id) 无无SYSTEM#resetfastSYSTEM# reset normal 3 3.1.1 configeth-portslot 端口所在设备槽号，有效范围从 13 3.

31、1.1 configeth-portslot 端口所在设备槽号，有效范围从 1 到产品的最大槽位号。port 。无SYSTEM(config)# config eth-port SYSTEM(config-eth-port)# config auto-negotiation SYSTEM(config-eth-port)# 3.1.2 configadminconfigadmineSYSTEM(config-eth-port)#configadmins e3.1.3 configauto- SYSTEM(config-eth-port)# config auto-negotiation 3.1

32、.4 configSYSTEM(config-eth-port)#configadmins e3.1.3 configauto- SYSTEM(config-eth-port)# config auto-negotiation 3.1.4 configauto-negotiation 无SYSTEM(config-eth-port)# config auto-negotiation speed 3.1.5 configconfigspeed3.1.6 configauto-negotiation 3.1.6 configauto-negotiation SYSTEM(config-eth-po

33、rt)# config auto-negotiation duplex 3.1.7 configauto-negotiationflow- 无 3.1.8 configduplexconfigduplexmode1000M 时，只存在全双工模SYSTEM(config-eth-port)# config duplex mode 3.1.9 configflow-configflow-control 口为全双工模式才可配置。参见 2.1.71000M 时，只存在全双工模SYSTEM(config-eth-port)# config duplex mode 3.1.9 configflow-con

34、figflow-control 口为全双工模式才可配置。参见 2.1.7 configback- reSYSTEM(config-eth-port)# config back-pre re configconfigmtu64-SYSTEM(config-eth-port)# config mtu configmediaconfigmediaconfigconfigmtu64-SYSTEM(config-eth-port)# config mtu configmediaconfigmediapreferredcopper|fiber)SYSTEM(config-eth-port)# config

35、 media mode configconfig无SYSTEM(config-eth-port)# config 3.2.1 showeth-showeth-port无 Detail Information3.2.1 showeth-showeth-port无 Detail Information of Ethernet Port 4-Port :AdminS :LinkS :AN-:AN-:AN-:Duplex :Flow:BackPre :Port端口类型，ETH_GTXETH_GEFPAdminLinkUP和3.2.2 showeth-portshoweth-port无无 SYSTEM(

36、config)# show eth-port AUTO DUPLEX FLOWCTRL SPEED 4-4-4-4-4-4-4-4-4-4-4-4-6-3.2.2 showeth-portshoweth-port无无 SYSTEM(config)# show eth-port AUTO DUPLEX FLOWCTRL SPEED 4-4-4-4-4-4-4-4-4-4-4-4-6-6-UP和DuplexFlowBackPreferred3.3.1 cleareth-cleareth-port3.3.1 cleareth-cleareth-port 4 vlan VLAN 4.1.1 creat

37、edelete vlan 4 vlan VLAN 4.1.1 createdelete vlan 母，长度为 331 字符。无SYSTEM(config)# create vlan 2 4.1.2 deletedeletevlan.vlan 配置模式,vlan的一些配置，配置完成后输入”exit”vlanSYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# del port 1/3 SYSTEM(config)# 4.2.1 addaddport slot/portslot-port

38、slot 表示以太网1 ，有效范围从 taguntag无可以 tag 方式加入多个vlan 中SYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# add port 1/3 4.2.2 deletedeleteportSYSTEM(config)# config vlan SYSTEM(config-vlan)# add port 1/2 SYSTEM(config-vlan)# add port 1/3 4.2.2 deletedeleteportslot/portslot-por

39、tslot 表示以太1到产品的最 ，有效范围从 taguntag无VLAN删除时，tag 属性必须与添加时一致，否则删除失败。当端 SYSTEM(config)# config vlan SYSTEM(config-vlan)# delete port 1/2 SYSTEM(config-vlan)# delete port 1/3 VLANTrunk4.3.1 add|delete 全部加入 vlan 中taguntag无vlan中仅允许添加一个trunk SYSTEM(config)# create trunk 1 SYSTEM(config)# config trunk (参见SYSTE

40、M(config-trunk)# add port 1-SYSTEM(config-trunk)# 无vlan中仅允许添加一个trunk SYSTEM(config)# create trunk 1 SYSTEM(config)# config trunk (参见SYSTEM(config-trunk)# add port 1-SYSTEM(config-trunk)# SYSTEM(config)# config vlan SYSTEM(config-vlan)# add trunk 1 4.3.2 showvlantrunk-showvlantrunk-VLAN 配置模式下，可showvl

41、antrunk-membervlan的汇聚端无SYSTEM(config-vlan)# show vlan trunk-VLAN VLAN TRUNKID200200SYSTEM(config-4.3.3 showvlantrunk-membershowvlantrunk-member以列表方式显示当前所有已创建的 vlan untagged 及 tagged 汇聚端口列表无无VLANVID，(D)为DOWN，(U)VLANID SYSTEM(config)# show vlan trunk-member VLAN VLAN TRUNKID200200VLAN4.4.1 showvlanpor

42、t-showvlanport-SYSTEM(config)# show vlan trunk-member VLAN VLAN TRUNKID200200VLAN4.4.1 showvlanport-showvlanport- 无SYSTEM(config-vlan)# show vlan port-member Codes: U-vlanlinks usisD-vlanlinks usisu-untaggedportt-taggedport VLAN VLAN PORT MEMBER Bondedtoslot:SYSTEM(config-VLANVID，(D)为DOWN，(U)VLANID

43、4.4.2 showvlanport-membershowvlanport-membervlan vid、名字、 untagged 及 tagged 端口列表无无无SYSTEM(config)# show vlan port-member Codes: U-vlanlinks usis4.4.2 showvlanport-membershowvlanport-membervlan vid、名字、 untagged 及 tagged 端口列表无无无SYSTEM(config)# show vlan port-member Codes: U-vlanlinks usisD-vlanlinks us

44、isu-untaggedportt-taggedport VLAN VLAN PORT MEMBER 1 Bondedtoslot:Bondedtoslot:BondedtoUDut*VLAN VE4.5.1 bondbond vlan slot unbondvlanslot这里指定对应 vlan 业务要交由那个槽位的VLAN VE4.5.1 bondbond vlan slot unbondvlanslot这里指定对应 vlan 业务要交由那个槽位的无SYSTEM(config)# create vlan SYSTEM(config)# config vlan SYSTEM(config-v

45、lan)# add port 1/2 SYSTEM(config)# SYSTEM(config)#bondvlan2slot4.5.2 unbondunbondvlanslot这里指定对应 vlan 业务要交由那个槽位的BondedtoUDut*无SYSTEM(config)# bond vlan 2 slot SYSTEM(config)# unbond vlan 2 slot QinQ4.6.1 configportconfigportPORTNOqinq无SYSTEM(config)# bond vlan 2 slot SYSTEM(config)# unbond vlan 2 slo

46、t QinQ4.6.1 configportconfigportPORTNOqinqslot-port，slot 表示以 ，有效范围从 其它转发（参见 3.6.2。SYSTEM(config-vlan)# config port 1-1 qinq 4.6.2 configvlanconfigvlanqinqSYSTEM(config-vlan)# config vlan qinq 4.6.3 setvlanto-cpu-portSYSTEM(config-vlan)# config vlan qinq 4.6.3 setvlanto-cpu-portsetvlanto-cpu-portqinq

47、使能CPUQinQ关闭CPUQinQQinQ的vlanbond到指定的槽位上，也就默认指定了本条命令所要开启 QinQ 的 CPU 槽位 SYSTEM(config)# set vlan 2 to-cpu-port qinq 5 FDBMAC MAC 实现二层数据转发，这张二层就是FDB（Forwarding FDB(Forwarding Database)FDBVLAN，因此每个FDB 5 FDBMAC MAC 实现二层数据转发，这张二层就是FDB（Forwarding FDB(Forwarding Database)FDBVLAN，因此每个FDB VLAN FDB 表是交换机中所有FDB

48、FDBtagVLAN每个交换机的端口 老化配置命configfdbconfigfdbagingtime(10-。1 5 秒。，1000FDB FDB 300SYSTEM(config)# config fdb agingtime FDB 配置命createicfdbwithcreatefdbdeletefdbicmacMACvlanporticmacMACvlan1-FDB 表项，匹配时向指定的端口（配置端口）据。静态FDB 配置命createicfdbwithcreatefdbdeletefdbicmacMACvlanporticmacMACvlan1-FDB 表项，匹配时向指定的端口（配置

49、端口）据。静态:，其中 slot/port slot-port，slot 表示以太 最大槽位号（主控槽位除外。port 无无 port5.2.2 deleteicfdbbymacanddeletefdbicmacMACvlan1-vlan中除一条静态FDB 表项必 选 参 数 ， 地 址 格 式 为 ：: 无无SYSTEM(config)#deletefdbs icmac0000:11:11aa:aavlan5.2.3 deleteicfdbbydeletefdbicvlan1-SYSTEM(config)#deletefdbs icmac0000:11:11aa:aavlan5.2.3 de

50、leteicfdbbydeletefdbicvlan1-vlan的静态FDB表项 无无SYSTEM(config)# delete fdb icvlan5.2.4 deleteicfdbbydeletefdbicportslot/port slot-port，slot 表示以太 最大槽位号（主控槽位除外。port 无无SYSTEM(config)# delete fdb 5.3.1 showshowfdbslot/port slot-port，slot 。 :X16进制数，当数字为af无无 Codes: CPUportwhichconnecttocpuviaHSC-highspeedchann

51、eldirecttocpu= SLOT/PORT slot/port slot-port，slot 。 :X16进制数，当数字为af无无 Codes: CPUportwhichconnecttocpuviaHSC-highspeedchanneldirecttocpu= SLOT/PORT -%FDBTABLEIS %FDBTABLEISCannotconnecttoslot %FDBTABLEISCannotconnecttoslot 5.3.2 showfdbshowfdb无无无SYSTEM(config)# show fdb Cannotconnect5.3.2 showfdbshowf

52、db无无无SYSTEM(config)# show fdb CannotconnecttoslotCannotconnecttoslotThe FDB AGINGTIME is CannotconnecttoslotThe FDB AGINGTIME is CannotconnecttoslotCannotconnecttoslotCannotconnectto5.3.3 showfdbshowfdbFDB表中所有有效FDB表项条数无无无SYSTEM(config)# show fdb FDB 表中配置的老化时间，例如：30 为 30 个是5秒，即默认老化时间为 150 秒 Cannotcon

53、necttoslotCannotconnectto CannotconnecttoslotCannotconnecttoslotCannotconnecttoslot%FDBTABLEIS CannotconnecttoslotCannotconnecttoslot 显示该槽位的FDB 表示本槽位己插单板并运行，但无FDB 6 erfaceerface来处理对应 vlan 的业务。6 erfaceerface来处理对应 vlan 的业务。 槽槽ve1，ve2在系统下不可见， erfaceSYSTEM(config)# create vlan SYSTEM(config)# erfaceve1S

54、YSTEM(config-erfaceerface vlan 删除 vlan 普通三层接口要创建三层接口的无vlan1 不允许创建三层接口。SYSTEM(config)# erfaceSYSTEM(config-erfaceerfaceethslot-vlan1 不允许创建三层接口。SYSTEM(config)# erfaceSYSTEM(config-erfaceerfaceethslot- 无erface eth1-SYSTEM(config-erface 无必须先有父接口，然后才能创建子接口，例如：先创erface1-2.3。(erface eth4-SYSTEM(config-必须先有

55、父接口，然后才能创建子接口，例如：先创erface1-2.3。(erface eth4-SYSTEM(config-erface 子子接口无erface1-2，再创建 erface1-2.3，再创建见6.1.3)erface1-2.3.4(erface eth4-SYSTEM(config-6.2.1 ipaddressipaddressIp 无 6.2.1 ipaddressipaddressIp 无 。SYSTEM (config-if)# ip address 10.0 6.3.1 erface 参数格式：slot-port。slot 控 无无SYSTEM(config)#show er

56、face eth4- index12metric1mtuflags: UP,BROADCAST,RUNN inet6fe80:21f:64 0inputpackets(0multicast),0bytes,00inputerrors,00inputpackets(0multicast),0bytes,00inputerrors,0length,0overrun,0CRC,00fifo,0 0outputerrors,0aborted,0carrier,0fifo,00window, 0s 7 ACLACL 7.1.1 configaclswtich-configaclswtich-board进

57、入ACL配置模式7 ACLACL 7.1.1 configaclswtich-configaclswtich-board进入ACL配置模式无ACL配置模式后，可进行交换板单板的ACLexitSYSTEM(config)# config acl swtich-board SYSTEM(config-acl-sw-7.1.2 configaclconfigaclservice开启或者关闭本板ACL 开启ACL关闭ACL使用该命令能够使能所配置单板的ACL ACL 7.2.1 showaclshowacl显示全局ACL显示全局ACL GlobalaclserviceisACL 7.2.1 showa

58、clshowacl显示全局ACL显示全局ACL GlobalaclserviceisSYSTEM(config-acl-sw-规则配置命7.3.1 acl dip (A.B.C.D/M|any) sip (A.B.C.D/M|any) 配置基于ipacl规则，动作为允许，及转发报文到CPU 1-1000extended 时，acl ID Globalacl全局ACLr的无n aclstandard5denyipdip/32sipr的无n aclstandard5denyipdip/32sipSYSTEM(config-acl-sw-board)# acl standard 6 trap ip

59、dip any 10.1 7.3.2 acltcp(standard|extended)acl-idx(permit|deny|(tcp| sip(A.B.C.D/M|any)src-port(|any)1-1000extended 时，acl ID匹配TCP r的无SYSTEM(config-acl-sw-board)# acl standard 5 deny tcp dip dst-port 21 sip any src-port 7.3.3 acltcp/udpacl(standard|extended)(tcp | udp) dip (A.B.C.D/M|any)sip(A.B.C.D

60、/M|any) src-port (|any )dst-port 21 sip any src-port 7.3.3 acltcp/udpacl(standard|extended)(tcp | udp) dip (A.B.C.D/M|any)sip(A.B.C.D/M|any) src-port (|any )1-1000extended 时，acl ID匹配TCPslot/portslot-port，slot 表示以1 产品的最大槽位号。port 1 无ACL rrID-1SYSTEM(config-acl-sw-board)# acl standard 5 redirect 2/3 tc