華為交換機(jī)常用命令大全

1、華為交換機(jī)常用配置大全2010-02-27目 錄一、基礎(chǔ)配置舉例31.1配置文件處理31.2配置交換機(jī)遠(yuǎn)程管理3二、以太網(wǎng)配置舉例42.1配置端口屬性42.2配置鏈路聚合62.3配置VLAN79.配置MSTP13三、可靠性193.1配置基于主備份VRRP193.2配置基于負(fù)載分擔(dān)VRRP20四、IP路由214.1配置靜態(tài)路由214.2配置動態(tài)路由22五、IP業(yè)務(wù)245.1配置虛接口IP地址245.2DHCP設(shè)置255.3 ACL 舉例27六、IGMP28七、QOS29八、安全性308.1接口安全30九、網(wǎng)絡(luò)管理319.1簡單網(wǎng)絡(luò)管理協(xié)議配置31十、設(shè)備管理3210.1測試命令32一、基礎(chǔ)配置舉

2、例1.1配置文件處理導(dǎo)入配置文件tftp x.x.x.x get vrpcfg.zip vrpcfg.zip導(dǎo)出配置文件tftp x.x.x.x put vrpcfg.zip vrpcfg.zip1.2配置交換機(jī)遠(yuǎn)程管理aaa 方式system-viewaaalocal-user huawei password simple huaweilocal-user huawei service-type telnetlocal-user huawei priority level 3quituser-interface vty 0 4authentication-mode aaaquit沒有密碼和使

3、用密碼認(rèn)證同上二、以太網(wǎng)配置舉例2.1配置端口屬性system-viewinterface gigabitethernet 0/0/24combo-port fiber/coppernetgotination autoloopback-detect enable /環(huán)路檢測port-isolate enable /端口隔離qos lr cir 625 cbs 625000 /端口限速quit端口隔離舉例2.2配置鏈路聚合system-viewinterface eth-trunk 1interface gigabitgibabitethernet0/0/1eth-trunk 1interfac

4、e gigabitgibabitethernet0/0/2eth-trunk 12.3配置VLAN1.創(chuàng)建單一vlansysvlan 2quit2.創(chuàng)建批量vlan system-view vlan batch vlan 10 to vlan 20quit3.基于干道鏈路VLAN 實(shí)例4配置基于子網(wǎng)vlan允許一個vlan通過某個接口Vlan 2port gigabitethernet 0/0/1quit允許多個vlan通過某個接口sysport gigabitethernet 0/0/1port link-type trunkport trunk allow-pass vlan all5.配

5、置VLAN聚合6.配置VLAN映射7.配置QINQ8.配置MAC學(xué)習(xí)限制功能2.4.配置MSTP三、可靠性3.1配置基于主備份VRRP3.2配置基于負(fù)載分擔(dān)VRRP四、IP路由4.1配置靜態(tài)路由配置默認(rèn)靜態(tài)路由system-viewip route-static next-hop配置靜態(tài)路由system-viewip route-static next-hop4.2配置動態(tài)路由五、IP業(yè)務(wù)5.1配置虛接口IP地址1.單一地址SysVlan 2QuitInterface vlanif 2Ip address 192.1

6、68.1.1 24Quit2.配置主從IP地址system-viewinterface vlanif 2ip address 24ip address 24 sub5.2DHCP設(shè)置1.基于全局的DHCP2.DHCP中繼5.3 ACL 舉例六、IGMP七、QOS基于端口限速的QOS八、安全性8.1接口安全九、網(wǎng)絡(luò)管理9.1簡單網(wǎng)絡(luò)管理協(xié)議配置system-viewsnmp-agent sys-info version v3snmp-agent community read publicsnmp-agent community write privatesnm

7、p-agent trap enablesnmp-agent target-host trap address udp-domain udp-port 5000 params securityname public 十、設(shè)備管理10.1測試命令十一、802.1X認(rèn)證1創(chuàng)建認(rèn)證模板設(shè)置認(rèn)證服務(wù)器的IP地址和協(xié)議端口號、密鑰Radius-server template radiusserverRadius-server authentication 54 1812Radius-server according 54 1813Radius-server shared-key huaweiUndo radius-server user-name domain-