华为路由器交换机配置命令管理Layer2Layer3IGP

本文格式为Word版，下载可任意编辑——华为路由器交换机配置命令管理Layer2Layer3IGP基础/管理配置：

system-viewquitreturnundo

displaycurrent-configurationdisplaythis

displaythisinclude-defaultsave

//用户视图下reboot

headerlogininformation\displayhotkey

language-mode{chinese|english}

history-commandmax-sizeVALUEdisplayhistory-command[all-users]

clockdatetimeHH:MM:SSYYYY-MM-DD

clocktimezonetime-zone-name{add|minus}offset

配置Console:

使用AAA验证：

user-interfaceconsole0authentication-modeaaaquitaaa

local-userADMIN123passwordirreversible-cipherADMIN123local-userADMIN123service-typeterminalquit

使用密码验证：

user-interfaceconsole0

authentication-modepassword

setauthenticationpasswordcipherADMIN123

配置VTY(Telent):

telnetserverenableaaa

local-userADMIN123passwordirreversible-cipherADMIN123local-userADMIN123privilegelevel15local-userADMIN123service-typetelnetquit

user-interfacemaximum-vty15

user-interfacevty04userprivilegelevel15authentication-modeaaaidle-timeout100quit

验证命令：displayusers

displayuser-interfacemaximum-vtydisplayuser-interfacevtysummarydisplaylocal-userdisplayvtymode

配置SSH:

使用本地用户密码方式（可使用rsa密钥方式）system-view

rsalocal-key-paircreate

//或dsalocal-key-paircreate//displayrsalocal-key-pairpublic//displaydsalocal-key-pairpublicstelnetserverenablesshservertimeout60

user-interfacevty04

authentication-modeaaaprotocolinbound{all|ssh}//默认为telnet方式aaa

local-userCLIENT001passwordirreversible-cipherCLIENT001

local-userCLIENT001privilegelevel3local-userCLIENT001service-typesshquit

sshuserCLIENT001authentication-typepasswordsshuserCLIENT001service-typestelnet

displaysshuser-informationdisplaysshserverstatusdisplaysshserversession

sshclientfirst-timeenable

Web网管（https）:

system-view

httpserverloaddefaulthttpsecure-serverenablehttptimeoutxxxaaa

local-userNAMEpasswordirreversible-cipherPASSWORDlocal-userNAMEprivilegelevelLEVEL//级别在3级以上具有管理权限local-userNAMEservice-typehttp

displayhttpuserdisplayhttpserver

配置管理VLAN(L2Switch):

vlan4000nameMGMT

management-vlan

//Vlan1不能配置为管理VLANquit

undointerfacevlanif1

//只支持1个VLANIF接口，所以需要删除vlanif1

interfacevlanif4000ipaddressx.x.x.xy.y.y.y

displayvlan

//带有*的VLAN为管理VLAN

Display查看设备状态：

displaydevicedisplayesndisplayversiondisplaypower

displaypowersystem

displayvoltage{all|slotSLOT-ID}

displaytemperature{all|slotSLOT-ID}displayfan

displayfan-para{all|slotSLOT-ID}displaycpu-usage[slave|slotSLOT-ID]

displaycpu-usageconfiguratoin[slave|slotSLOT-ID]displaymemory-usage[slave|slotSLOT-ID]displaymemory-usagethreshold[slotSLOT-ID]displayenvironmentversion

displaythis

displaythisinterfacedisplaysystem-mac

displayelabel[chassis-id[/slot-id][/subcard-id]][brief]displayelabelbackplanechassischassis-iddisplaydiagnostic-information

displayhealth

displaytransceiver[interfaceinterface-typeinterface-number|slotslot-id][verbose]displayspu-information

硬件管理：

resetslotslot-id[all|master]//复位单板slaverestart

//复位备用主控板

displayswitchoverstateslaveswitchoverenable//使能主备倒换功能slaveswitchover

displayospstatusstartupospSLOT-ID

shutdownospSLOT-ID[force]resetospSLOT-ID

poweronslotSLOT-IDpoweroffslotSLOT-ID

transceiverphony-alarm-disable

//关闭非华为定制光模块的告警功能

displayfabric-modeconfiguration

//查看设备线速模式的配置

setfabric-modeturbo[all|chassisCHASSIS-ID]

//配置设备的线速模式为扩展模式,默认线速模式为普通模式

信息中心(LOG):

info-centerenable

//使能信息中心功能

info-centertimestamplog{{date|format-date|short-date}[precision-time{second|tenth-second|millisecond}]|boot|none}

//配置Log信息的时间戳info-centerlogbuffer

info-centerlogbuffersizeLOGBUFFER-SIZEterminallogging

info-centertimestampdebugging{{date|format-date|short-date}[precision-time{second|tenth-second|millisecond}]|boot|none}//配置Debug信息的时间戳

resetinfo-c