H路由器配置命令

H3c路由器配置命令

一、路由器基本配置命令

1、system-view??进入系统视图模式

2、sysnamcR1??为设备命名为R

3、displayiprouting-table显示当前路由表

・1、language-modeChineseEnglish中英文切换

5、interfaceEthernet0/0进入以太网端口视图

7、undoshutdown??打开以太网端口

8、shutdown??关闭以太网端口

9、quit????退出当前视图模式

description配置静态路由

11、iproute-static0.0.Odescription配置默认的路由

基本配置案例

[Quidway]displayversion??????????????????显示版本信息

[Quidway]displaycurrent-configuration????????显示当前配置

[Quidway]displayinterfaces????????????????显示接口信息

[Quidway]displayiproute????????????????显示路由信息

[Quidway]sysnameaabbcc??????????????????更改主机名

[Quidway]superpasswrod123456??????????????设置口令？？

[Quidway]interfaceserialO????????????????进入接口

[Quidway-serialOlipaddress<ip><mask>

[Quidway-serialOjundoshutdown??????????????激活端口

[Quidway]link-protocolhdlc????????????????绑定hdlc协议

[Quidway]user-interfacevty04

[Quidway-ui-vtyO-/l]authentication-modepassword

[Quidway-ui-vty0_4]setauthentication-modepasswordsimple2

fQuidway-ui-vty0_4]userprivilegelevel3

[Quidway-ui-vty0-4]quit

[Quidway]debugginghdlcallserialO??????????显示所有信息

[Quidway]debugginghdlceventserialO????????调试事件信息

[Quidway]debugginghdlcpacketserialO????????显示包的信息

翰态路由配置案例：

[Quidway]iproute-static<ip><mask>{interfacenumberInexthop)[value][rejectblackhole]

例如：

10.0.0.

动态路由配置案例(RIP)：

[Quidway]rip

[Quidway]ripwork

[Quidway]ripinput

[Quidway]ripoutput

[Quidway-ripin可以all

[Quidway-iip]peexip-addiust>

[Quidway-rip]summary

[Quidway]ripversion

[Quidway]ripversion2multicast

[Quidway-EthernetOlripsplit-horizon????????;水平分隔

动态路由配置案例(OSPF)：

[Quidwa配置路由器的ID

[Quidway]ospfenable????????????????????启动OSPF协叹

LQuidway-ospf]import-routedirect??????????引入直联路由

[Quidway-Seria10]ospfenablearea<area_id>????配置OSPF区域

标准访问列表命令格式如下：

acl<acl-number>[match-orderconfigauto]????默认前者顺序兀配。

rule[normal|special]{permit|deny}[sourcesource-addrsource-wiIdcard|any]

例：

[Quidway]acl10

[Quidway-ac1-10]ru1enormalpermitsource10.0.0

[Quidway-ac1-10]ru1enormaldenysourceany

二、ACL配置

扩展访问控制列表配置命令

1.配置TCP/UDP协议的扩展访问列表：

rule{normal1special){permitdeny){tcpudp}source{<ipwild>|any)destination<ipwild>)any}

[operate]

2.配置ICMP协议的扩展访问列表：

rule{normal(special}(permi11deny}icmpsource{<ipwild>|any]destination(<ipwild>|any]

[icmp-code][logging]

扩展访问捽制列表操作符的含义

equalportnumber????????等于

greater-thanportnumber????大于

less-thanportnumber????????小于

not-equalportnumber????????不等

rangeportnumberlporlnumber区间

3.扩展访问控制列表案例

LQuidway]acl10

[Quidway-ac1-101]ru1edenysouceanydestinationany

[Quidway-acl-101]rulepermiticmpsourceanydestinationanyicmp-typeecho

LQuidway-acl-101]rulepermiticmpsourceanydestinationanyicmp-typeecho-reply

[Quidway]acl10

LQuidway-acl_102]rulepermitipsource10.0.0destination-portequalwww

[Quidway]firewal1enable

[Quidway]fiiewal1defaultpelmi11deny

[Quidway]inteO

[Quidway-Etherne10]firewa11packet-fiIter101inbound|outbound

4.NAT的配置

地址转换配置案例

[Quidway]firewallenable

[Quidwaylfirewal1defaultpermit

[Quidwayjacl10

LQuidway-ac1-101Jru1edenyipsourceanydestinationany

[Quidway]acl10

1024

fOuidway-Etherne101firewa11packet-filter101inbound

[Quidway-Seria10]firewa11packet-filter102inbound

[Quidway]acl

[Quidway-ac1-1]ru1edenysourceany

[Quidway-acl-11intserial0

[Quidway-Serial0]natoutboundIaddrcss-grouppool

5.PPP验证配置:

主验方：pap)chap

[Quidway]1oca1-useru2password{simpleIcipher}aaa

[Quidway]interfaceserial0

[Quidway-serialO]pppauthentication-mode{pap|chap；

[Quidway-serialO]pppchapuserul??????//pap时，不用此句

pap被验方：

[Quidway]interfaceserial0

[Quidway-serialO]ppppaplocal-useru2password{simple|cipher}aaa

chap被验方:

[Quidway]interfaceserial0

[Quidway-seria10]pppchapuserul??????

[Quidway-scrialOjlocal-useru2password{simpleIcipher)aaa

ospf

[R2-ospf-l]area1

[R3-ospf-l]area1

PPPPap

[R2]local-userr3

LR2-1user-r3Jpasswordsimple123

[R2-luser-r3]service-typeppp

[R2-luser-r3]ints0/2/0

[R2-Seria10/2/0]pppauthcnlica.ion-modepap

[R3]ints0/2/0

[R3-Serial0/2/0]ppppaplocal-userr3passwordsimple123

dhep

[R2]dhcpenable

[R2]dhcpserverip-pool1

[R2-dhcp-pool-l]expiredday3

[R3]dhcpenable

[R3]dhcpserverip-pool0

[R3-dhcp-pool-0]expiredday3

telnet

[R3]telnetserverenable

[R3]user-interfacevty04

[R3-ui-vty0-4]authentication-modescheme

[R3-ui-vty0-4]setauthenticationpasswordsimple123

[R3-ui-vty0-4]userprivilegelevel3

[R3uivtyO4]quit

[R3]local-userr3

[R3-luser-r3]passwordsimple123

[R3-1user-r31service-typetelnet

[R2]telnetserverenable

[R2]user-interfacevty04

[R2-ui-vty0-4]authentication-modescheme

[R2-ui-vtyO_4]setauthenticationpasswordsimple123

[R2-ui-vty0-4]userprivilegelevel3

[R2-ui-vty0-4]quit

[R2]local-userr2

[R2-luscr-r2]passwordsimple123

[R2-luser-r2]service-typetelnet

acl

阻止R2telnetR3

[R3]firewallenable

[R3]aclnumber3000

[R3-ticl_adv_3000]inis0/2/0

[R3-Serial0/2/0]firewallpacke：-fiIter3000inbound

[R3-Serial0/2/0]quit

阻止SW3telnetR2

[K2]aclnumber3000

[R2-ac1-adv-3000]quit

[R2]intvlan3

[R2-V1an-interface3]fir

[R2-Vlan-interface3]firewal1p

LR2-Vlan-inlcrfacc3]firewallpacket-filter3000in

[R2-Vlan-interface3]firewallpacket-filter3000inbound

[R2-Vlan-interface3]quit

[R2]quit

交换机

[SW1]superpasswordsimple123

[SW1]user-interfacevty04

[SW1-ui-vty0-4Jauthentication-modepassword

[SWi-ui-vty0-4]setauthenticationpasswordsimple123

[SWl-ui-vtyO_4]userpriv