史上最全华为路由器交换机配置命令大合集Word文档格式.docx

1、发ECHO包#telnet；远程登录交换机命令Quidwaydiscur；显示当前配置Quidwaydisplaycurrent-configuration；Quidwaydisplayinterfaces；显示接口信息Quidwaydisplayvlanall；显示路由信息Quidwaydisplayversion；显示版本信息Quidwaysuperpassword；修改特权用户密码Quidwaysysname；交换机命名Quidwayinterfaceethernet0/1；进入接口视图Quidwayinterfacevlanx；Quidway-Vlan-interfacexipaddr

2、ess10.65.1.1255.255.0.0；配置VLAN的IP地址Quidwayiproute-static0.0.0.00.0.0.010.65.1.2；静态路由网关Quidwayrip；三层交换支持Quidwaylocal-userftpQuidwayuser-interfacevty04；进入虚拟终端S3026-ui-vty0-4authentication-modepassword；设置口令模式S3026-ui-vty0-4setauthentication-modepasswordsimple222；设置口令S3026-ui-vty0-4userprivilegelevel3；用

3、户级别进入端口模式Quidwayinte0/1；Quidway-Ethernet0/1duplexhalf|full|auto；配置端口工作状态Quidway-Ethernet0/1speed10|100|auto；配置端口工作速率Quidway-Ethernet0/1flow-control；配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal；配置端口平接扭接Quidway-Ethernet0/1portlink-typetrunk|access|hybrid；设置端口工作模式Quidway-Ethernet0/1portaccessvlan3；当前

4、端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All；设trunk允许的VLANQuidway-Ethernet0/3porttrunkpvidvlan3；设置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown；激活端口Quidway-Ethernet0/1shutdown；关闭端口Quidway-Ethernet0/1quit；返回Quidwayvlan3；创建VLANQuidway-vlan3portethernet0/1；在VLAN中增加端口Quidway-vlan3porte0/1；简写方式Qui

5、dway-vlan3portethernet0/1toethernet0/4；Quidway-vlan3porte0/1toe0/4；Quidwaymonitor-port；指定镜像端口Quidwayportmirror；指定被镜像端口Quidwayportmirrorint_listobserving-portint_typeint_num；指定镜像和被镜像Quidwaydescriptionstring；指定VLAN描述字符Quidwaydescription；删除VLAN描述字符Quidwaydisplayvlanvlan_id；查看VLAN设置Quidwaystpenable|disa

6、ble；设置生成树,默认关闭Quidwaystppriority4096；设置交换机的优先级Quidwaystprootprimary|secondary；设置为根或根的备份Quidway-Ethernet0/1stpcost200；设置交换机端口的花费Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink-aggregatione0/1|all;始端口为通道号SwitchA-vlanxisolate-user-vlanenable；设置主vlanSwitchAisolate-user-vlansecondary；设

7、置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan；设置vlan的pvidQuidway-Ethernet0/2porthybridpvid；删除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged；设置无标识的vlan如果包的vlanid与PVId一致，则去掉vlan信息.默认PVID=1。所以设置PVID为所属vlanid,设置可以互通的vlan为untagged.路由器命令Quidwaydisplayiproute；Quidwaysysnameaabbcc；更改主机

8、名Quidwaysuperpasswrod123456；Quidwayinterfaceserial0；进入接口Quidway-serial0ipaddress；配置端口IP地址Quidway-serial0undoshutdown；Quidwaylink-protocolhdlc；绑定hdlc协议Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userpri

9、vilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0；显示所有信息Quidwaydebugginghdlceventserial0；调试事件信息Quidwaydebugginghdlcpacketserial0；显示包的信息静态路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static129.1.0.01610.0.0.2Quidwayiproute-static129.1.0.0255.255.

10、0.010.0.0.2Quidwayiproute-static129.1.0.016Serial2Quidwayiproute-static0.0.0.00.0.0.010.0.0.2动态路由：设置动态路由Quidwayripwork；设置工作允许Quidwayripinput；设置入口允许Quidwayripoutput；设置出口允许Quidway-ripnetwork1.0.0.0；设置交换路由网络Quidway-ripnetworkall；设置与所有网络交换Quidway-rippeerip-address；Quidway-ripsummary；路由聚合Quidwayripversio

11、n1；设置工作在版本1Quidwayripversion2multicast；设版本2，多播方式Quidway-Ethernet0ripsplit-horizon；水平分隔QuidwayrouteridA.B.C.D；配置路由器的IDQuidwayospfenable；启动OSPF协议Quidway-ospfimport-routedirect；引入直联路由Quidway-Serial0ospfenablearea；配置OSPF区域标准访问列表命令格式如下：aclmatch-orderconfig|auto；默认前者顺序匹配。rulenormal|specialpermit|denysourc

12、esource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalpermitsource10.0.0.00.0.0.255Quidway-acl-10rulenormaldenysourceany扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP协议的扩展访问列表：rulenormal|specialpermit|denyicmpsource|anydestina

13、tion|anyicmp-codelogging扩展访问控制列表操作符的含义equalportnumber；等于greater-thanportnumber；大于less-thanportnumber；小于not-equalportnumber；不等rangeportnumber1portnumber2；区间扩展访问控制列表举例Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-

14、101rulepermiticmpsourceanydestinationanyicmp-typeecho-replyQuidwayacl102Quidway-acl-102rulepermitipsource10.0.0.10.0.0.0destination202.0.0.10.0.0.0Quidway-acl-102ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestination10.0.0.10.0.0.0destination-portequalftpQuidw

15、ay-acl-103rulepermittcpsourceanydestination10.0.0.20.0.0.0destination-portequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound地址转换配置举例QuidwayfirewalldefaultpermitQuidwayacl101;内部指定主机可以进入e0Quidway-acl-101ruledenyipsourcean

16、ydestinationanyQuidway-acl-101rulepermitipsource129.38.1.10destinationanyQuidway-acl-101rulepermitipsource129.38.1.20destinationanyQuidway-acl-101rulepermitipsource129.38.1.30destinationanyQuidway-acl-101rulepermitipsource129.38.1.40destinationanyQuidway-acl-101quitQuidway-Ethernet0firewallpacket-fi

17、lter101inboundQuidwayacl102;外部特定主机和大于1024端口的数据包允许进入S0Quidway-acl-102rulepermittcpsource202.39.2.30destination202.38.160.10Quidway-acl-102rulepermittcpsourceanydestination202.38.160.10destination-portgreat-than1024Quidway-acl-102quitQuidwayints0Quidway-Serial0firewallpacket-filter102inbound；设202.38.1

18、60.1是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，将acl101允许的IP从本接口出时变换源地址。内部服务器地址转换配置命令（静态nat）：natserverglobalportinsideportprotocol;global_port不写时使用inside_portQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.1ftptcpQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.2telnettc

19、pQuidway-Serial0natserverglobal202.38.160.1inside129.38.1.3wwwtcp设有公网IP：202.38.160.101202.38.160.103可以使用。;对外访问（原例题）Quidwaynataddress-group202.38.160.101202.38.160.103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource10.110.10.00.0.0.255;指定允许的内部网络Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial0

20、Quidway-Serial0natoutbound1address-grouppool1;在s0口从地址池取出IP对外访问Quidway-Serial0natserverglobal202.38.160.101inside10.110.10.1ftptcpQuidway-Serial0natserverglobal202.38.160.102inside10.110.10.2wwwtcpQuidway-Serial0natserverglobal202.38.160.1028080inside10.110.10.3wwwtcpQuidway-Serial0natserverglobal202

21、.38.160.103inside10.110.10.4smtpudpPPP设置：Quidway-s0link-protocolppp;默认的协议PPP验证：主验方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-modepap|chapQuidway-serial0pppchapuserq1;pap时，没有此句华为路由交换机配置命令：pap被验方：Quidwayinterfaceserial0;路由器2Quidwa

22、y-serial0ppppaplocal-userq2passwordsimple|cipherhellochap被验方：Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;对方路由器名帧中继frame-relay（二分册6-61）q1frswitchingq1ints1q1-Serial1ipaddress192.168.34.51255.255.255.0q1-Serial1link-protocolfr;封装帧中继协议q1-Serial1frinterface-t

23、ypedceq1-Serial1frdlci100q1-Serial1frinarpq1-Serial1frmapip192.168.34.52dlci100q2ints1q2-Serial1ipaddress192.168.34.52255.255.255.0q2-Serial1link-protocolfrq2-Serial1frinterface-typedteq2-Serial1frdlci100q2-Serial1frinarpq2-Serial1frmapip192.168.34.51dlci100帧中继监测q1displayfrlmi-infointerfacetypenumbe

24、rq1displayfrmapq1displayfrpvc-infoserialinterface-numberdlcidlci-numberq1displayfrdlci-switchq1displayfrinterfaceq1resetfrinarp-infoq1debuggingfrallinterfacetypenumberq1debuggingfrarpinterfacetypenumberq1debuggingfreventinterfacetypenumberq1debuggingfrlmiinterfacetypenumber启动ftp服务：Quidwaylocal-userftppasswordsimple|cipheraaaservice-typeftpQuidwayftpserverenable