1、进入虚拟终端S3026-ui-vty0-4authentication-modepassword;设置口令模式Quidway-vlan3porte0/1toe0/4;简写方式Quidwaymonitor-port;指定镜像端口Quidwayportmirror;指定被镜像端口Quidwayportmirrorint_listobserving-portint_typeint_num;指定镜像和被镜像Quidwaydescriptionstring;指定VLAN描述字符Quidwaydescription;删除VLAN描述字符Quidwaydisplayvlanvlan_id;查看VLAN设置Q
2、uidwaystpenable|disable;设置生成树,默认关闭Quidwaystppriority4096;设置交换机的优先级Quidwaystprootprimary|secondary;设置为根或根的备份Quidway-Ethernet0/1stpcost200;设置交换机端口的花费Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口为通道号SwitchA-vlanxisolate-user-vlanenable;设置主vlanSwitchAisolate-
3、user-vlansecondary;设置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan;设置vlan的pvidQuidway-Ethernet0/2porthybridpvid;删除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged;设置无标识的vlan如果包的vlanid与PVId一致,则去掉vlan信息.默认PVID=1。所以设置PVID为所属vlanid,设置可以互通的vlan为untagged.华为路由器交换机配置命令:路由器命令Quidwaydisplay
4、iproute;Quidwaysysnameaabbcc;更改主机名Quidwaysuperpasswrod123456;设置口令Quidwayinterfaceserial0;进入接口Quidway-serial0ipaddress;配置端口IP地址Quidway-serial0undoshutdown;激活端口Quidwaylink-protocolhdlc;绑定hdlc协议Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-mode
5、passwordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0;显示所有信息Quidwaydebugginghdlceventserial0;调试事件信息Quidwaydebugginghdlcpacketserial0;显示包的信息华为路由器交换机配置命令:静态路由:Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如:Quidwayiproute-static129
6、.1.0.01610.0.0.2Quidwayiproute-static129.1.0.0255.255.0.010.0.0.2Quidwayiproute-static129.1.0.016Serial2Quidwayiproute-static0.0.0.00.0.0.010.0.0.2华为路由器交换机配置命令:动态路由:设置动态路由Quidwayripwork;设置工作允许Quidwayripinput;设置入口允许Quidwayripoutput;设置出口允许Quidway-ripnetwork1.0.0.0;设置交换路由网络Quidway-ripnetworkall;设置与所有网络
7、交换Quidway-rippeerip-address;Quidway-ripsummary;路由聚合Quidwayripversion1;设置工作在版本1Quidwayripversion2multicast;设版本2,多播方式Quidway-Ethernet0ripsplit-horizon;水平分隔QuidwayrouteridA.B.C.D;配置路由器的IDQuidwayospfenable;启动OSPF协议Quidway-ospfimport-routedirect;引入直联路由Quidway-Serial0ospfenablearea;配置OSPF区域华为路由器交换机配置命令:标准
8、访问列表命令格式如下:aclmatch-orderconfig|auto;默认前者顺序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例:Quidwayacl10Quidway-acl-10rulenormalpermitsource10.0.0.00.0.0.255Quidway-acl-10rulenormaldenysourceany华为路由器交换机配置命令:扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表:rulenormal|specialpermit|denytcp|udpsourc
9、e|anydestination|anyoperate配置ICMP协议的扩展访问列表:rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging华为路由器交换机配置命令:扩展访问控制列表操作符的含义equalportnumber;等于greater-thanportnumber;大于less-thanportnumber;小于not-equalportnumber;不等rangeportnumber1portnumber2;区间华为路由器交换机配置命令:扩展访问控制列表举例Quidwayacl101Qui
10、dway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsource10.0.0.10.0.0.0destination202.0.0.10.0.0.0Quidway-acl-102ruledenyipsourceany
11、destinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestination10.0.0.10.0.0.0destination-portequalftpQuidway-acl-103rulepermittcpsourceanydestination10.0.0.20.0.0.0destination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-f
12、ilter101inbound|outbound华为路由器交换机配置命令:地址转换配置举例QuidwayfirewalldefaultpermitQuidwayacl101;内部指定主机可以进入e0Quidway-acl-101ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource129.38.1.10destinationanyQuidway-acl-101rulepermitipsource129.38.1.20destinationanyQuidway-acl-101rulepermitipsource129.
13、38.1.30destinationanyQuidway-acl-101rulepermitipsource129.38.1.40destinationanyQuidway-acl-101quitQuidway-Ethernet0firewallpacket-filter101inboundQuidwayacl102;外部特定主机和大于1024端口的数据包允许进入S0Quidway-acl-102rulepermittcpsource202.39.2.30destination202.38.160.10Quidway-acl-102rulepermittcpsourceanydestinati
14、on202.38.160.10destination-portgreat-than1024Quidway-acl-102quitQuidwayints0Quidway-Serial0firewallpacket-filter102inbound;设202.38.160.1是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip,将acl101允许的IP从本接口出时变换源地址。华为路由器交换机配置命令:内部服务器地址转换配置命令(静态nat):natserverglobalportinsideportprotocol;global_port不
15、写时使用inside_portQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.1ftptcpQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.2telnettcpQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.3wwwtcp设有公网IP:202.38.160.101202.38.160.103可以使用。;对外访问(原例题)Quidwaynataddress-group202.38.160.101202
16、.38.160.103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource10.110.10.00.0.0.255;指定允许的内部网络Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0Quidway-Serial0natoutbound1address-grouppool1;在s0口从地址池取出IP对外访问Quidway-Serial0natserverglobal202.38.160.101inside10.110.10.1ftptcpQuidway-Serial0natservergl
17、obal202.38.160.102inside10.110.10.2wwwtcpQuidway-Serial0natserverglobal202.38.160.1028080inside10.110.10.3wwwtcpQuidway-Serial0natserverglobal202.38.160.103inside10.110.10.4smtpudpPPP设置:Quidway-s0link-protocolppp;默认的协议华为路由器交换机配置命令:PPP验证:主验方:pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Q
18、uidwayinterfaceserial0Quidway-serial0pppauthentication-modepap|chapQuidway-serial0pppchapuserq1;pap时,没有此句华为路由交换机配置命令:pap被验方:Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhello华为路由器交换机配置命令:chap被验方:Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwo
19、rdsimple|cipherhello;对方路由器名帧中继frame-relay(二分册6-61)q1frswitchingq1ints1q1-Serial1ipaddress192.168.34.51255.255.255.0q1-Serial1link-protocolfr;封装帧中继协议q1-Serial1frinterface-typedceq1-Serial1frdlci100q1-Serial1frinarpq1-Serial1frmapip192.168.34.52dlci100q2ints1q2-Serial1ipaddress192.168.34.52255.255.255
20、.0q2-Serial1link-protocolfrq2-Serial1frinterface-typedteq2-Serial1frdlci100q2-Serial1frinarpq2-Serial1frmapip192.168.34.51dlci100华为路由器交换机配置命令:帧中继监测q1displayfrlmi-infointerfacetypenumberq1displayfrmapq1displayfrpvc-infoserialinterface-numberdlcidlci-numberq1displayfrdlci-switchq1displayfrinterfaceq1r
21、esetfrinarp-infoq1debuggingfrallinterfacetypenumberq1debuggingfrarpinterfacetypenumberq1debuggingfreventinterfacetypenumberq1debuggingfrlmiinterfacetypenumber华为路由器交换机配置命令:启动ftp服务:Quidwaylocal-userftppasswordsimple|cipheraaaservice-typeftpQuidwayftpserverenablePCAlogin:root;使用root用户password:linux;口令是linux#shutdown-hnow;关机#init0;#logout;用户注销#login;用户登录#ifconfig;显示IP地址#ifconfigeth0netmask;设置IP地址#ifconfigeht0netmaskdown;禁用IP地址#routeadd0.0.0.0gw;设置网关#routedel0.0.0.0gw;删除网关#routeadddefaultgw;#routedeldefaultgw;#route;显示网关#ping;发ECHO包
copyright@ 2008-2022 冰豆网网站版权所有
经营许可证编号:鄂ICP备2022015515号-1