华为交换机与路由器配置

1、交换机与路由器配置-单臂路由一减小字体增大字体关于交换机和路由器的配置在教大家的时候要是用硬件是不可能的没哪个条件今天带给大家的是我做个一个小的实验大家可以下一个华为MA5200G模拟器进行实验具体的命令和解释我全写出来了希望和我一样菜的朋友和我一起做！给大家一些计算机的命令大家自己练习下都是在LINUX下的实现的计算机命令PCAlogin:root；使用root用户password:linux；口令是linuxshutdown-hnow；关机init0；关机logoutloginifconfig；显示IP地址ifconfigeth0netmask；设置IP地址ifconfigeht0netm

2、askdown;删除IP地址routeaddgwroutedelgwrouteadddefaultgw；设置网关routedeldefaultgw；删除网关route；显示网关pingtelnet；建议telnet之前先ping一下交换机命令修改特权用户密码交换机进入修改特权用户密码交换机进入进入接口视Quidwaysysname命名Quidwayinterfaceethernet0/1接口视图Quidwayinterfacevlanx图Quidway-Vlan-interfacexipaddressQuidwayiproute-static静态路由=网关Quidwayuser-interfa

3、cevty04S3026-ui-vty0-4authentication-modepasswordS3026-ui-vty0-4setauthentication-modepasswordsimple222S3026-ui-vty0-4userprivilegelevel3配置端口双工工作状态配置端口工作速率配置端口流控配置端口配置端口双工工作状态配置端口工作速率配置端口流控配置端口MDI/MDIX状态平接Quidway-Ethernet0/1mdiacross|auto|normal或扭接Quidway-Ethernet0/1portlink-typetrunk|access|hybrid设

4、置接口工作模式Quidway-Ethernet0/1shutdown关闭/重起接口Quidway-Ethernet0/2quit退出系统视图Quidwayvlan3创建/删除一个VLAN/进入VLAN模式Quidway-vlan3portethernet0/1toethernet0/4在当前VLAN增加/删除以太网接口Quidway-Ethernet0/2portaccessvlan3将当前接口加入到指定VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All设trunk允许的VLANQuidway-Ethernet0/2porttrunkpvidvla

5、n3设置trunk端口的PVIDQuidwaymonitor-port指定和清除镜像端口Quidwayportmirror指定和清除被镜像端口指定VLAN描述删除指定VLAN描述删除VLAN描述字符查看VLAN设置开启/关闭生成设置交换机的设置交换机为根或根的字符QuidwaydescriptionQuidwaydisplayvlanvlan_idQuidwaystpenable|disable树,默认关闭Quidwaystppriority4096优先级Quidwaystprootprimary|secondary备份设置交换机端口的花设置主vlan设置主vlan设置交换机端口的花设置主vl

6、an设置主vlan包括的子vlan设置vlan的pvid删除vlan的pvidSwitchAIsolate-user-vlansecondaryQuidway-Ethernet0/2porthybridpvidvlanQuidway-Ethernet0/2porthybridpvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged设置无标识的vlan如果包的vlanid与PVId一致，则去掉vlan信息.默认PVID=1。所以设置PVID为所属vlanid,设置可以互通的vlan为untagged.路由器命令显示版本信息显示当前配置显示

7、版本信息显示当前配置显示接口信息显示路由信息Quidwaydisplaycurrent-configurationQuidwaydisplayinterfacesQuidwaydisplayiproute更改主机名设置口令更改主机名设置口令进入接口激活端口绑定hdlc协议Quidwaysuperpasswrod123456Quidwayinterfaceserial0Quidway-serial0ipaddressQuidway-serial0undoshutdownQuidwaylink-protocolhdlcQuidwayuser-interfacevty04Quidway-ui-vty

8、0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quit显示所有信息调试事件信息显示所有信息调试事件信息显示包的信息Quidwaydebugginghdlceventserial0Quidwaydebugginghdlcpacketserial0静态路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|b

9、lackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static动态路由：QuidwayripQuidwayripworkQuidwayripinputQuidwayripoutputQuidway-ripnetwork;可以allQuidway-ripnetworkQuidway-rippeerip-addressQuidway-ripsummaryQuidwayripversion1Quidwayripversion2multicast配置路由

10、器的ID启动OSPF配置路由器的ID启动OSPF协议引入直联路由配置OSPF区域QuidwayospfenableQuidway-ospfimport-routedirectQuidway-Serial0ospfenablearea标准访问列表命令格式如下：aclmatch-orderconfig|auto默认前者顺序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalpermitsource55Quidway-acl-10ruleno

11、rmaldenysourceany扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP协议的扩展访问列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging扩展访问控制列表操作符的含义equalportnumber等于大于greater-thanportnumber大于less-thanportnumbernot-equalportnumbe

12、r小于不等rangeportnumber1portnumber2小于不等Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsourcedestinationQuidway-acl-1

13、02ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulepermittcpsourceanydestinationdestination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101i

14、nbound|outbound地址转换配置举例QuidwayfirewallenableQuidwayfirewalldefaultpermitQuidwayacl101Quidway-acl-101ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101ruleperm

15、itipsource0destinationanyQuidwayacl102Quidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-Ethernet0firewallpacket-filter101inboundQuidway-Serial0firewallpacket-filter102inboundQuidwaynataddress-group0103pool1Quidwayacl

16、1Quidway-acl-1rulepermitsource55Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Serial0natserverglobal028080insidewwwtcpQuidway-Serial0natserverglobal03in

17、sidesmtpudpPPP验证：主验方：pap|chapQuidwaylocal-useru2passwordsimple|cipheraaaQuidwayinterfaceserial0Quidway-serial0pppauthentication-modepap|chapQuidway-serial0pppchapuseru1/pap时，不用此句pap被验方：Quidwayinterfaceserial0Quidway-serial0ppppaplocal-useru2passwordsimple|cipheraaachap被验方：Quidwayinterfaceserial0Quid

18、way-serial0pppchapuseru1Quidway-serial0local-useru2passwordsimple|cipheraaa以上是收集的一些命令大家可以练习下下面是实验的内容内容是一个交换机和路又器和两台电脑通过两个接口实现两个IP然后在交换机上划两个vlan实现的具体命令和实验的步骤如下如下设置PCAip:gateway:设置PCBip:gateway:.一个接口两个IP的情况systempassword:Quidwayinterfaceethernet0Quidway-Ethernet0ipaddrQuidway-Ethernet1ipaddrsecondaryQuidway-Ethernet1undoshutdownrootPCAroot#ping通.划分两个子接口，对两个vlan的路由SwitchAvlan2SwitchA-vlan2porte0/3SwitchAvlan3SwitchA-vlan3porte0/6SwitchAinee0/1SwitchA-Ethernet0/1portlink-typetrunkSwitchA-Ethernet0/1porttrunkpermitvlanallSwitchA-Ethe