學(xué)習(xí)華為交換機的配置(完整版)

1、精選優(yōu)質(zhì)文檔-傾情為你奉上最近一直想學(xué)習(xí)華為交換機的配置，收集了一下命令，先進行一下整理，共大家學(xué)習(xí)參考！希望給給位博友有所幫助！交換機命令Quidwaydiscur；顯示當(dāng)前配置Quidwaydisplaycurrent-configuration；顯示當(dāng)前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayvlanall；顯示路由信息Quidwaydisplayversion；顯示版本信息Quidwaysuperpassword；修改特權(quán)用戶密碼Quidwaysysname；交換機命名Quidwayinterfaceethernet0/1；進入接口

2、視圖Quidwayinterfacevlanx；進入接口視圖Quidway-Vlan-interfacexipaddress；配置VLAN的IP地址Quidwayiproute-static；靜態(tài)路由網(wǎng)關(guān)Quidwayrip；三層交換支持Quidwaylocal-userftpQuidwayuser-interfacevty04；進入虛擬終端S3026-ui-vty0-4authentication-modepassword；設(shè)置口令模式S3026-ui-vty0-4setauthentication-mod

3、epasswordsimple222；設(shè)置口令S3026-ui-vty0-4userprivilegelevel3；用戶級別Quidwayinterfaceethernet0/1；進入端口模式Quidwayinte0/1；進入端口模式Quidway-Ethernet0/1duplexhalf|full|auto；配置端口工作狀態(tài)Quidway-Ethernet0/1speed10|100|auto；配置端口工作速率Quidway-Ethernet0/1flow-control；配置端口流控Quidway-Ethernet0/1mdiacross|auto|normal；配置端口平接扭接Quid

4、way-Ethernet0/1portlink-typetrunk|access|hybrid；設(shè)置端口工作模式Quidway-Ethernet0/1portaccessvlan3；當(dāng)前端口加入到VLANQuidway-Ethernet0/2porttrunkpermitvlanID|All；設(shè)trunk允許的VLANQuidway-Ethernet0/3porttrunkpvidvlan3；設(shè)置trunk端口的PVIDQuidway-Ethernet0/1undoshutdown；激活端口Quidway-Ethernet0/1shutdown；關(guān)閉端口Quidway-Ethernet0/1q

5、uit；返回Quidwayvlan3；創(chuàng)建VLANQuidway-vlan3portethernet0/1；在VLAN中增加端口Quidway-vlan3porte0/1；簡寫方式Quidway-vlan3portethernet0/1toethernet0/4；在VLAN中增加端口Quidway-vlan3porte0/1toe0/4；簡寫方式Quidwaymonitor-port；指定鏡像端口Quidwayportmirror；指定被鏡像端口Quidwayportmirrorint_listobserving-portint_typeint_num；指定鏡像和被鏡像Quidwaydescr

6、iptionstring；指定VLAN描述字符Quidwaydescription；刪除VLAN描述字符Quidwaydisplayvlanvlan_id；查看VLAN設(shè)置Quidwaystpenable|disable；設(shè)置生成樹,默認關(guān)閉Quidwaystppriority4096；設(shè)置交換機的優(yōu)先級Quidwaystprootprimary|secondary；設(shè)置為根或根的備份Quidway-Ethernet0/1stpcost200；設(shè)置交換機端口的花費Quidwaylink-aggregatione0/1toe0/4ingress|both;端口的聚合Quidwayundolink

7、-aggregatione0/1|all;始端口為通道號SwitchA-vlanxisolate-user-vlanenable；設(shè)置主vlanSwitchAisolate-user-vlansecondary；設(shè)置主vlan包括的子vlanQuidway-Ethernet0/2porthybridpvidvlan；設(shè)置vlan的pvidQuidway-Ethernet0/2porthybridpvid；刪除vlan的pvidQuidway-Ethernet0/2porthybridvlanvlan_id_listuntagged；設(shè)置無標(biāo)識的vlan如果包的vlanid與PVId一致，則去掉

8、vlan信息.默認PVID=1。所以設(shè)置PVID為所屬vlanid,設(shè)置可以互通的vlan為untagged.路由器命令Quidwaydisplayversion；顯示版本信息Quidwaydisplaycurrent-configuration；顯示當(dāng)前配置Quidwaydisplayinterfaces；顯示接口信息Quidwaydisplayiproute；顯示路由信息Quidwaysysnameaabbcc；更改主機名Quidwaysuperpasswrod；設(shè)置口令Quidwayinterfaceserial0；進入接口Quidway-serial0ipaddress；配置端口IP地

9、址Quidway-serial0undoshutdown；激活端口Quidwaylink-protocolhdlc；綁定hdlc協(xié)議Quidwayuser-interfacevty04Quidway-ui-vty0-4authentication-modepasswordQuidway-ui-vty0-4setauthentication-modepasswordsimple222Quidway-ui-vty0-4userprivilegelevel3Quidway-ui-vty0-4quitQuidwaydebugginghdlcallserial0；顯示所有信息Quidwaydebuggi

10、nghdlceventserial0；調(diào)試事件信息Quidwaydebugginghdlcpacketserial0；顯示包的信息靜態(tài)路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayiproute-static16Quidwayiproute-staticQuidwayiproute-static16Serial2Quidwayiproute-static0.0.0.

11、0動態(tài)路由：Quidwayrip；設(shè)置動態(tài)路由Quidwayripwork；設(shè)置工作允許Quidwayripinput；設(shè)置入口允許Quidwayripoutput；設(shè)置出口允許Quidway-ripnetwork；設(shè)置交換路由網(wǎng)絡(luò)Quidway-ripnetworkall；設(shè)置與所有網(wǎng)絡(luò)交換Quidway-rippeerip-address；Quidway-ripsummary；路由聚合Quidwayripversion1；設(shè)置工作在版本1Quidwayripversion2multicast；設(shè)版本2，多播方式Quidway-Ethernet0ripsplit

12、-horizon；水平分隔QuidwayrouteridA.B.C.D；配置路由器的IDQuidwayospfenable；啟動OSPF協(xié)議Quidway-ospfimport-routedirect；引入直聯(lián)路由Quidway-Serial0ospfenablearea；配置OSPF區(qū)域標(biāo)準訪問列表命令格式如下：aclmatch-orderconfig|auto；默認前者順序匹配。rulenormal|specialpermit|denysourcesource-addrsource-wildcard|any例：Quidwayacl10Quidway-acl-10rulenormalperm

13、itsource55Quidway-acl-10rulenormaldenysourceany擴展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denytcp|udpsource|anydestination|anyoperate配置ICMP協(xié)議的擴展訪問列表：rulenormal|specialpermit|denyicmpsource|anydestination|anyicmp-codelogging擴展訪問控制列表操作符的含義equalportnumber；等于greater-thanportn

14、umber；大于less-thanportnumber；小于not-equalportnumber；不等rangeportnumber1portnumber2；區(qū)間擴展訪問控制列表舉例Quidwayacl101Quidway-acl-101ruledenysouceanydestinationanyQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeechoQuidway-acl-101rulepermiticmpsourceanydestinationanyicmp-typeecho-replyQuidwayacl102Q

15、uidway-acl-102rulepermitipsourcedestinationQuidway-acl-102ruledenyipsourceanydestinationanyQuidwayacl103Quidway-acl-103rulepermittcpsourceanydestinationdestination-portequalftpQuidway-acl-103rulepermittcpsourceanydestinationdestination-por

16、tequalwwwQuidwayfirewallenableQuidwayfirewalldefaultpermit|denyQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inbound|outbound地址轉(zhuǎn)換配置舉例QuidwayfirewallenableQuidwayfirewalldefaultpermitQuidwayacl101;內(nèi)部指定主機可以進入e0Quidway-acl-101ruledenyipsourceanydestinationanyQuidway-acl-101rulepermitipsource129.

17、38.1.10destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101rulepermitipsource0destinationanyQuidway-acl-101quitQuidwayinte0Quidway-Ethernet0firewallpacket-filter101inboundQuidwayacl102;外部特定主機和大于102

18、4端口的數(shù)據(jù)包允許進入S0Quidway-acl-102ruledenyipsourceanydestinationanyQuidway-acl-102rulepermittcpsource0destination0Quidway-acl-102rulepermittcpsourceanydestination0destination-portgreat-than1024Quidway-acl-102quitQuidwayints0Quidway-Serial0firewallpacket-filter102inbound；設(shè)

19、是路由器出口IP。Quidway-Serial0natoutbound101interface;是Easyip，將acl101允許的IP從本接口出時變換源地址。內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令(靜態(tài)nat)：natserverglobalportinsideportprotocol;global_port不寫時使用inside_portQuidway-Serial0natserverglobalinsideftptcpQuidway-Serial0natserverglobalinside

20、telnettcpQuidway-Serial0natserverglobalinsidewwwtcp設(shè)有公網(wǎng)IP：0103可以使用。;對外訪問(原例題)Quidwaynataddress-group8.160.103pool1;建立地址池Quidwayacl1Quidway-acl-1rulepermitsource55;指定允許的內(nèi)部網(wǎng)絡(luò)Quidway-acl-1ruledenysourceanyQuidway-acl-1intserial

21、0Quidway-Serial0natoutbound1address-grouppool1;在s0口從地址池取出IP對外訪問Quidway-Serial0natserverglobal01insideftptcpQuidway-Serial0natserverglobal02insidewwwtcpQuidway-Serial0natserverglobal202.38.160.insidewwwtcpQuidway-Serial0natserverglobal202.38.16

22、0.103insidesmtpudpPPP設(shè)置：Quidway-s0link-protocolppp;默認的協(xié)議PPP驗證：主驗方：pap|chapQuidwaylocal-userq2passwordsimple|cipherhello;路由器1Quidwayinterfaceserial0Quidway-serial0pppauthentication-modepap|chapQuidway-serial0pppchapuserq1;pap時，沒有此句pap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0ppppaplocal-userq2passwordsimple|cipherhellochap被驗方：Quidwayinterfaceserial0;路由器2Quidway-serial0pppchapuserq2;自己路由器名Quidway-serial0local-userq1passwordsimple|cipherhello;對方路由器名幀中繼frame-relayq1frswitchingq1ints1q1-Serial1ipaddress192.168.3