Loading... ## 一、基本配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-546bdd52fc135ade1eb8a073d4691751900' role="tab" href='#tabs-546bdd52fc135ade1eb8a073d4691751900'>Telnet配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-662b72e2020657a26bddbab3f36e3eec451' role="tab" href='#tabs-662b72e2020657a26bddbab3f36e3eec451'>FTP配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-07fa392a679a4206396d641638e7c465932' role="tab" href='#tabs-07fa392a679a4206396d641638e7c465932'>其它配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-546bdd52fc135ade1eb8a073d4691751900' class="tab-pane fade active in"> <div class="tip inlineBlock info"> 1、密码登录: </div> ```js [Huawei]user-interface console 0 //进入管理控制口 [Huawei-ui-console0]authentication-mode password Please configure the login password (maximum length 16):输入密码 [Huawei-ui-console0]user privilege level ? //设置特权等级 [Huawei-ui-console0]idle-timeout 20 0 //设置空闲超时时间为20分钟,默认为10分钟 ``` <div class="tip inlineBlock success"> 2、用户和密码登录: </div> ```js [Huawei]user-interface console 0 //进入管理控制口 [Huawei-ui-console0]authentication-mode aaa [Huawei-ui-console0]quit [Huawei]aaa [Huawei-aaa]local-user huawei password cipher hw(密码) [Huawei-aaa]local-user huawei service-type terminal //从终端登录 ``` <div class="tip inlineBlock error"> 3、PC通过以太网口远程登录配置 </div> ```js #AAA模式远程登录 [R1]user-interface vty 0 4 [R1-ui-vty0-4]authentication-mode aaa [R1]aaa //进入认证、授权、计费模式(简称AAA模式) [R1-aaa]local-user admin password cipher 123456 //配置本地用户和密码 [R1-aaa]local-user admin service-type telnet //选择授权用户的服务类型 [R1-aaa]local-user admin privilege level 3 //设置管理员用户级别 ``` ```js #仅密码远程登录 [R2]user-interface vty 0 4 //虚拟用户终端接口 [R2-ui-vty0-4]authentication-mode password //配置用户终端的认证模式 [R2-ui-vty0-4]set authentication password simple 123456 //设置登录用户密码 [R2-ui-vty0-4]user privilege level 3 //设置用户等级 [R2-ui-vty0-4]user network-admin //设置登录用户的参数 ``` <div class="tip inlineBlock success"> 设置超级密码 </div> ```js [Huawei]super password level 3 cipher 123456(作用?) ``` </div><div role="tabpanel" id='tabs-662b72e2020657a26bddbab3f36e3eec451' class="tab-pane fade "> <div class="tip inlineBlock info"> 将路由器作为FTP服务器 </div> ```js [R1]ftp server enable [R1]aaa [R1-aaa]local-user winda password cipher aqx123456(字母与数字的组合) [R1-aaa]local-user winda privilege level 15 [R1-aaa]local-user winda service-type ftp [R1-aaa]local-user winda ftp-directory flash: //指定目录 ``` <div class="tip inlineBlock share"> 登录FTP服务器,并传送文件 </div> ```js <R1>ftp 10.0.12.2 User(10.0.12.2:(none)):huawei 331 Password required for huawei. Enter password: 230 User logged in. [R1-ftp]put portalpage.zip //上传文件 [R1-ftp]get portalpage.zip portal.zip //下载文件并改名字 <R1>delete /unreserved portal.zip //彻底删除该文件 ``` </div><div role="tabpanel" id='tabs-07fa392a679a4206396d641638e7c465932' class="tab-pane fade "> <div class="tip inlineBlock error"> 配置登录标语 </div> ```js [R1]header shell information "Welcome to HuaWei" ``` <div class="tip inlineBlock info"> 指定下次启动装载的配置文件 </div> ```js <R1>startup saved-configuration iascfg.zip ``` <div class="tip inlineBlock success"> 指定下次启动装载的配置文件 </div> ```js <R1>factory-configuration reset ``` <div class="tip inlineBlock warning"> 设置下次启动用的文件 </div> ```js <R1>startup saved-configuration 文件名 ``` <div class="tip inlineBlock share"> 删除保存的配置文件 </div> ```js <R1>reset saved-configuration <R1>reboot Warning: All the configuration will be saved to the next startup configuration. Continue ? [y/n]:n ``` <div class="tip inlineBlock info"> 关闭消息提示功能 </div> ```js [R1]undo info-center enable //关闭提示信息,提高配置时的视觉 或 <R1>undo terminal monitor //关闭日志提示消息(很烦人的一个东西) ``` </div> </div> </div> --- ## 二、路由IP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-f4f1f225d3c6c3391f0f95b2aa2e00fe820' role="tab" href='#tabs-f4f1f225d3c6c3391f0f95b2aa2e00fe820'>路由IP配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-f4f1f225d3c6c3391f0f95b2aa2e00fe820' class="tab-pane fade active in"> <div class="tip inlineBlock share"> 浮动静态路由 </div> ```js [Huawei]ip route-static 192.168.1.0 24(目标网络) 192.168.2.1(下一跳IP) preference 80 ``` <div class="tip inlineBlock warning"> 描述接口 </div> ```js [R1-Serial1/0/0]description this port connect to R2-S1/0/0 ``` <div class="tip inlineBlock error"> 默认(缺省)路由 </div> ```js [R1]ip route-static 0.0.0.0 0.0.0.0 10.0.13.3 ``` <div class="tip inlineBlock info"> 使用带源参数的ping命令 </div> ```js [R2]ping -a 10.0.2.2 10.0.3.3 ``` <div class="tip inlineBlock success"> 配置从IP地址(解决RIPv1不连续子网) </div> ```js [R1-Serial1/0/0]ip add 10.0.23.2 sub ``` <div class="tip inlineBlock share"> 静态路由与BFD联动 </div> ```js #激活BFD功能 [R1]bfd [R1-bfd]quit #创建BFD会话,名称为ab(自定义),对端的IP地址为10.1.12.2 [R1]bfd ab bind peer-ip 10.1.12.2 ``` </div> </div> </div> --- ## 三、VLAN配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-47e7fd4f1d872228f7e1a6997260c57e540' role="tab" href='#tabs-47e7fd4f1d872228f7e1a6997260c57e540'>端口类型配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-d98752909c7ca1b0d99f4904f3136ca7791' role="tab" href='#tabs-d98752909c7ca1b0d99f4904f3136ca7791'>Eth-trunk配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-47e7fd4f1d872228f7e1a6997260c57e540' class="tab-pane fade active in"> <div class="tip inlineBlock warning"> 配置端口为access </div> ```js [Huawei]vlan 10 //创建vlan 10 [Huawei]interface GigabitEthernet 0/0/2 //进入g0/0/2端口 [Huawei-GigabitEthernet0/0/2]port link-type access //选择端口类型 [Huawei-GigabitEthernet0/0/2]port default vlan 10 //划分VLAN 技巧:[S2]vlan batch 3 to 5 //创建VLAN3、4、5 ``` <div class="tip inlineBlock warning"> 配置端口的Hybrid类型 </div> ```js [SW1]vlan 10 [SW1-GigabitEthernet0/0/1]port hybrid pvid vlan 10 [SW1-GigabitEthernet0/0/1]port hybrid untagged vlan 10 30 //对VLAN10和30去标签 ``` <div class="tip inlineBlock info"> 配置端口的Trunk类型 </div> ```js [SW1]interface g0/0/24 [SW1-GigabitEthernet0/0/24]port link-type trunk [SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan all //允许所有VLAN通过 ``` <div class="tip inlineBlock success"> 更改Trunk端口的PVID </div> ```js [SW1-GigabitEthernet0/0/24]port trunk pvid vlan 10 ``` </div><div role="tabpanel" id='tabs-d98752909c7ca1b0d99f4904f3136ca7791' class="tab-pane fade "> <div class="tip inlineBlock success"> 创建Eth-trunk 1,并将接口加入Eth-trunk 1 </div> ```js [S1]interface Eth-Trunk 1 [S1]int g0/0/9 [S1-GigabitEthernet0/0/9]eth-trunk 1 或 [S1]interface Eth-Trunk 1 [S1-Eth-Trunk1]trunkport g0/0/9 ``` <div class="tip inlineBlock error"> 配置Eth-trunk 1链路配置为access </div> ```js [S1]interface Eth-Trunk 1 [S1-Eth-Trunk1]port link-type access [S1-Eth-Trunk1]port default vlan 5 ``` </div> </div> </div> --- ## 四、STP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-ca255cb80d12dc3eaac4fa37bf8f9edf970' role="tab" href='#tabs-ca255cb80d12dc3eaac4fa37bf8f9edf970'>STP配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-f4626bc6a747558c6f963b8bc56057e6431' role="tab" href='#tabs-f4626bc6a747558c6f963b8bc56057e6431'>配置MSTP</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-ae939c5bb91a7b5da4114aaa690f965d322' role="tab" href='#tabs-ae939c5bb91a7b5da4114aaa690f965d322'>查看STP</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-ca255cb80d12dc3eaac4fa37bf8f9edf970' class="tab-pane fade active in"> ```js #修改桥优先级 [S1]stp priority 4096 //数值越小优先级越高 #修改端口优先级 [S1-GigabitEthernet0/0/9]stp port priority 32 //默认为128,数值越小优先级越高 #配置边缘端口(使端口快速进入转发状态) [S3]interface Ethernet0/0/3 [S3-Ethernet0/0/3]stp edged-port enable [S3-Ethernet0/0/3]stp cost //设置路径开销值 [根交换机]stp timer forward-delay //设置延迟时间 [根交换机]stp edged-port enable //设置网络直径 ``` </div><div role="tabpanel" id='tabs-f4626bc6a747558c6f963b8bc56057e6431' class="tab-pane fade "> <div class="tip inlineBlock info"> 配置多生成树 </div> ```js [SW1]stp region-configuration //进入MST域 [SW1-mst-region]region-name huawei //配置域名 [SW1-mst-region]revision-level 1 //配置修订级别为1 [SW1-mst-region]instance 1 vlan 10 //制定MSTI 1与VLAN10的映射 ``` </div><div role="tabpanel" id='tabs-ae939c5bb91a7b5da4114aaa690f965d322' class="tab-pane fade "> ```js #各接口简要STP状态 [S1]dis stp brief #具体接口详细STP信息 [S1]dis stp interface g0/0/10 #查看当前根桥信息 [S1]dis stp #查看实例1的信息 [SW1]dis stp instance 1 brief ``` </div> </div> </div> --- ## 五、DHCP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-d52c231719edcbddcc23224e1684f4f3100' role="tab" href='#tabs-d52c231719edcbddcc23224e1684f4f3100'>配置DHCP</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-d7f46f45b9065363465daffd4eda9a09941' role="tab" href='#tabs-d7f46f45b9065363465daffd4eda9a09941'>DHCP中继</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-d52c231719edcbddcc23224e1684f4f3100' class="tab-pane fade active in"> <div class="tip inlineBlock error"> 基于接口配置DHCP功能 </div> ```js [R1]dhcp enable //开启DHCP功能 [R1-GigabitEthernet0/0/0]dhcp select interface //开启接口DHCP功能 [R1-GigabitEthernet0/0/0]dhcp server lease day 2【可选】 //设置租用有效期限为2天 [R1-GigabitEthernet0/0/0]dhcp server dns-list 8.8.8.8 //为PC自动分配DNS服务器地址 [R1-GigabitEthernet0/0/1]dhcp server excluded-ip-address 192.168.2.250 192.168.2.253 //配置不参与自动分配的IP地址范围 ``` <div class="tip inlineBlock info"> 基于全局配置DHCP </div> ```js [R1]dhcp enable //开启DHCP功能 [R1]ip pool huawei1 //配置全局地址池 [R1-ip-pool-huawei1]network 192.168.1.0 //指定地址池范围 [R1-ip-pool-huawei1]lease day 2【可选】 //租期为2天,默认1天 [R1-ip-pool-huawei1]gateway-list 192.168.1.254 //出口网关地址 [R1-ip-pool-huawei1]excluded-ip-address 192.168.1.250 192.168.1.253 //不参与自动分配 [R1-ip-pool-huawei1]dns-list 8.8.8.8 //配置DNS服务器地址 [R1-GigabitEthernet0/0/0]dhcp select global //开启接口的DHCP功能 ``` <div class="tip inlineBlock warning"> 查看 </div> ```js dis ip pool //查看地址池地址分配情况 ``` </div><div role="tabpanel" id='tabs-d7f46f45b9065363465daffd4eda9a09941' class="tab-pane fade "> ```js [R1]dhcp enable //开启DHCP功能 #面向PC的接口: [R1-Ethernet0/0/0]dhcp select relay [R1-Ethernet0/0/0]dhcp relay server-ip 100.1.1.1 //指定DHCP服务器IP地址 #面向PC的接口下调用全局定义的DHCP服务器组: [R1]dhcp server group dhcp-group [R1-dhcp-server-group-dhcp-group]dhcp-server 100.1.1.1 [R1-Ethernet0/0/0]dhcp select relay [R1-Ethernet0/0/0]dhcp relay server-select dhcp-group ``` </div> </div> </div> --- ## 六、帧中继配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-a59a282e58a719778cf717a7fc3a9491270' role="tab" href='#tabs-a59a282e58a719778cf717a7fc3a9491270'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-a59a282e58a719778cf717a7fc3a9491270' class="tab-pane fade active in"> <div class="tip inlineBlock success"> DCE配置 </div> ```js [R1]interface s1/0/0 [R1-Serial1/0/0]link-protocol fr [R1-Serial1/0/0]fr interface-type dce //接口类型 [R1-Serial1/0/0]fr dlci 100 [R1-Serial1/0/0]ip add 192.168.1.1 24 ``` <div class="tip inlineBlock share"> DTE配置 </div> ```js [R2]interface s1/0/0 [R2-Serial1/0/0]link-protocol fr [R2-Serial1/0/0]fr interface-type dte ``` <div class="tip inlineBlock warning"> 其它配置 </div> ```js 查看PVC [R1]dis fr pvc-info #查看映射 [R1]dis fr map-info #静态映射 [R2-Serial1/0/0]undo fr inarp [R1-Serial1/0/0]fr map ip 192.168.1.2 100 broadcast //OSPF中使用组播的网络类型时,应在映射后面加Broadcast ``` </div> </div> </div> --- ## 七、单笔路由配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-3d36e16dc4e46daa9f8b724d6300eb43310' role="tab" href='#tabs-3d36e16dc4e46daa9f8b724d6300eb43310'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-3d36e16dc4e46daa9f8b724d6300eb43310' class="tab-pane fade active in"> <div class="tip inlineBlock error"> 配置路由器 </div> ```js [R1]int g0/0/0.1 //创建并进入g0/0/0的0.1子接口 [R1-GigabitEthernet0/0/0.1]dot1q termination vid 10 //封装dot1q协议 [R1-GigabitEthernet0/0/0.1]ip address 192.168.10.254 24 //配置IP地址 [R1-GigabitEthernet0/0/0.1]arp broadcast enable //开启arp广播 [R1-GigabitEthernet0/0/0.1]dhcp select global //开启DHCP全局模式 [R1-GigabitEthernet0/0/0.1]int g0/0/0.2 [R1-GigabitEthernet0/0/0.2]dot1q termination vid 20 [R1-GigabitEthernet0/0/0.2]ip address 192.168.20.254 24 [R1-GigabitEthernet0/0/0.2]arp broadcast enable [R1-GigabitEthernet0/0/0.2]dhcp select global ``` <div class="tip inlineBlock info"> 配置交换机 </div> ```js [SW1]vlan batch 10 20 //创建vlan 10和vlan 20 [SW1-GigabitEthernet0/0/1]int g0/0/1 //进入g0/0/1接口 [SW1-GigabitEthernet0/0/1]port link-type access //修改端口为access模式 [SW1-GigabitEthernet0/0/1]port default vlan 10 //将端口划分到vlan 10中 [SW1-GigabitEthernet0/0/1]int g0/0/2 [SW1-GigabitEthernet0/0/2]port link-type access [SW1-GigabitEthernet0/0/2]port default vlan 20 [SW1-GigabitEthernet0/0/2]int g0/0/24 //交换机与路由器相连的接口需要修改为trunk模式 [SW1-GigabitEthernet0/0/24]port link-type trunk //修改端口为trunk模式 [SW1-GigabitEthernet0/0/24]port trunk allow-pass vlan 10 20 //允许vlan 10和vlan 20的数据通过 ``` </div> </div> </div> --- ## 八、RIP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-7a7f198a254b718f0a4fcb9390a1454c830' role="tab" href='#tabs-7a7f198a254b718f0a4fcb9390a1454c830'>基本配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-0bedf0559ad5f333e45e5d5eb9ff1567921' role="tab" href='#tabs-0bedf0559ad5f333e45e5d5eb9ff1567921'>其它配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-7a7f198a254b718f0a4fcb9390a1454c830' class="tab-pane fade active in"> ```js [Huawei]rip 1 //启动RIP进程 [Huawei-rip-1]version 2 //选择版本(可选) [Huawei-rip-1]net 10.0.0.0(通告自然网段) ``` </div><div role="tabpanel" id='tabs-0bedf0559ad5f333e45e5d5eb9ff1567921' class="tab-pane fade "> ```js [Huawei-rip-1]summary always //使能自动汇总[V2默认开启,但不生效] [接口]undo rip split-horizon //关闭接口水平分割 [Huawei-GigabitEthernet0/0/0]rip summary-address 聚合后网络 子网掩码 //手动汇总 #接口附加度量值 [接口]rip metricin x //cost=原来的值+x [接口]rip metricout x //cost=0+x #认证 [R2-Serial1/0/0]rip authentication-mode simple huawei //明文 [R2-Serial2/0/0]rip authentication-mode md5 usual huawei //MD5 ``` ```js #开启RIP调试 <R1>debug rip 1 <R1>terminal debugging Info: Current terminal debugging is on. <R1>terminal monitor #抑制接口(只收不发) [R1-GigabitEthernet0/0/0]undo rip output //不能使用单播通信 或 [R2-rip-1]silent-interface E0/0/0 //优先级高于前者 ``` ```js [R2-rip-1]peer IP地址 //单播通信 [R2-rip-1]preference x //修改优先级(只在本地有效) [R2-rip-1]timers rip 20 120 60 //修改定时器 [R3]ip route-static 0.0.0.0 0 LoopBack 2 //发布默认路由 [R3-rip-1]default-route originate //不需创建默认路由,也能发布 <Huawei>reset rip 1 statistics //刷新RIP统计信息 <R1>reset ip routing-table statistics protocol rip //清除RIP学到的路由信息 [R2]undo rip 1 //删除RIP [R1]rip version2 multicase //配置版本1的也能发送RIPv2报文 ``` </div> </div> </div> --- ## 九、OSPF配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-525bde4fe709147e143f2ae736ed2072870' role="tab" href='#tabs-525bde4fe709147e143f2ae736ed2072870'>配置</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-678d8bcdad8e9691506441877aacf383361' role="tab" href='#tabs-678d8bcdad8e9691506441877aacf383361'>查看</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-ea3aa44ce3ea51d4cb9bde936dd16bff242' role="tab" href='#tabs-ea3aa44ce3ea51d4cb9bde936dd16bff242'>其它</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-525bde4fe709147e143f2ae736ed2072870' class="tab-pane fade active in"> <div class="tip inlineBlock error"> 配置OSPF </div> ```js [R1]ospf Router-id 1.1.1.1 //配置环回口IP地址 [R1-ospf-1]area 0 [R1-ospf-1-area-0.0.0.0]network 1.1.1.0 0.0.0.255 ``` <div class="tip inlineBlock info"> 引入路由 </div> ```js [R3-ospf-1]import-route direct //引入直连路由 [R1-ospf-1]import-route rip 1 cost 100 //引入RIP路由 ``` <div class="tip inlineBlock success"> 发布默认路由 </div> ```js [R3]ip route-static 0.0.0.0 0 LoopBack 2 [R3]ospf 100 [R3-ospf-100]default-route-advertise [R3-ospf-100]default-route-advertise always //自动发布默认路由 ``` <div class="tip inlineBlock warning"> OSPF验证 </div> ```js #接口认证明文: [R1-Serial1/0/0]ospf authentication-mode simple plain huawei #区域认证密文: [R1-ospf-1]area 1 [R1-ospf-1-area-0.0.0.1]authentication-mode md5 1 cipher huawei ``` <div class="tip inlineBlock share"> 抑制接口(不收不发) </div> ```js R2-ospf-1]silent-interface E0/0/0 [R2-ospf-1]peer IP地址 //单播通信 ``` </div><div role="tabpanel" id='tabs-678d8bcdad8e9691506441877aacf383361' class="tab-pane fade "> ```js [R1]dis ospf peer brief //查看邻居 [R1]dis ospf interface //查看DR、BDR [R1]reset ospf process //重置OSPF进程 [R1]dis ip routing-table protocol ospf //查看OSPF学到的路由 [R1]display ospf lsdb ase 172.16.0.0 //显示链路状态数据库的外接路由信息 [R1]dis ospf int G0/0/0 //查看接口的OSPF信息 ``` <div class="tip inlineBlock warning"> 查看LSA信息 </div> ```js [R1]dis ospf lsdb router //查看一类LSA [R1]dis ospf lsdb netword //查看二类LSA [R1]dis ospf lsdb summary //查看三类LSA [R1]dis ospf lsdb asbr //查看四类LSA [R1]dis ospf lsdb ase //查看五类LSA [R1]dis ospf lsdb nssa //查看七类LSA ``` </div><div role="tabpanel" id='tabs-ea3aa44ce3ea51d4cb9bde936dd16bff242' class="tab-pane fade "> <div class="tip inlineBlock info"> 修改Hello和Dead时间 </div> ```js [R1-GigabitEthernet0/0/0]ospf timer hello 15 [R1-GigabitEthernet0/0/0]ospf timer dead 60 ``` <div class="tip inlineBlock error"> 修改DR优先级 </div> ```js [R1-GigabitEthernet0/0/0]ospf dr-priority 200(越大优先级越高) ``` `注:由于DR/BDR选举默认为不抢占模式,因此在修改了路由器优先级后不会自动重新选举DR,需要重置OSPF进程。` <div class="tip inlineBlock share"> 修改网络类型为广播 </div> ```js [R2-Serial2/0/0]ospf network-type broadcast ``` <div class="tip inlineBlock warning"> 修改开销值、带宽参考值 </div> ```js [接口]ospf cost x [R3-ospf-1]bandwidth-reference x ``` </div> </div> </div> --- ## 十、VRRP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-c7d869455fb4e19341e29485cbe07b49440' role="tab" href='#tabs-c7d869455fb4e19341e29485cbe07b49440'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-c7d869455fb4e19341e29485cbe07b49440' class="tab-pane fade active in"> ```js [SW1-Vlanif10]vrrp vrid 1 virtual-ip 10.1.1.254 //配置虚拟网关 [SW1-Vlanif10]vrrp vrid 1 priority 150 //更改优先级 [SW1-Vlanif10]vrrp vrid 1 preempt-mode disable //关闭抢占模式 [SW1-Vlanif10]vrrp vrid 1 track interface g0/0/24 reduced 60 //跟踪上层端口 [R1-Serial2/0/0]ospf network-type p2mp //配置接口的网络类型为Point-to-multipoint [S1] display vrrp //查看VRRP信息 ``` </div> </div> </div> --- ## 十一、HDLC配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-051ccd3a3345869952e50808156de716840' role="tab" href='#tabs-051ccd3a3345869952e50808156de716840'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-051ccd3a3345869952e50808156de716840' class="tab-pane fade active in"> ```js [R1-Serial1/0/0]ip address unnumbered interface LoopBack0 //IP地址借用 [R1]ip route-static 10.1.1.0 24 Serial1/0/0 [R1-Serial1/0/0]link-protocol hdlc //将接口改为HDLC类型 ``` </div> </div> </div> --- ## 十二、PPP配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-470e8b519142d41cf2394a4eb3aab0e9230' role="tab" href='#tabs-470e8b519142d41cf2394a4eb3aab0e9230'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-470e8b519142d41cf2394a4eb3aab0e9230' class="tab-pane fade active in"> <div class="tip inlineBlock info"> 认证方 </div> ```js [R1]aaa [R1-aaa]local-user huawei password cipher 123456 [R1-aaa]local-user huawei service-type ppp [R1-Serial0]ppp authentication-mode pap(CHAP) ``` <div class="tip inlineBlock error"> 被认证方 </div> ```js #PAP: [R2-Serial0]ppp pap local-user huawei password cipher 123456 #CHAP: [R2-Serial0]ppp chap user huawei [R2-Serial0]ppp chap password cipher 123456 ``` <div class="tip inlineBlock warning"> 使用 CHAP 建立 PPP连接的协商过程 </div> ```js <R2>debugging ppp chap all <R2>terminal debugging ``` </div> </div> </div> --- ## 十三、以太网接口配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-bf3d989095789a9d81c91e34c7ecb5ea320' role="tab" href='#tabs-bf3d989095789a9d81c91e34c7ecb5ea320'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-bf3d989095789a9d81c91e34c7ecb5ea320' class="tab-pane fade active in"> ```js [S1-G0/0/9]undo negotiation auto //更改接口的速率和双工模式前应先关闭接口的自动协商功能 [S1-G0/0/9]speed 100 //设置为100M速率 [S1-G0/0/9]duplex full //全双工模式 [S1]dis eth-trunk 1 //查看Eth-trunk 1配置结果 ``` </div> </div> </div> --- ## 十四、防火墙配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-c26400b03ece0b75fcf03811527cd688170' role="tab" href='#tabs-c26400b03ece0b75fcf03811527cd688170'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-c26400b03ece0b75fcf03811527cd688170' class="tab-pane fade active in"> ```js #登录不需要用户名和密码 [FW]user-interface console 0 [FW-ui-console0]authentication-mode none #定义时区: <FW1>clock timezone 1 add 08:00:00 ``` </div> </div> </div> --- ## 十五、链路技术 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-db22d4d6db90c93e06338d24bf4aee90750' role="tab" href='#tabs-db22d4d6db90c93e06338d24bf4aee90750'>配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-db22d4d6db90c93e06338d24bf4aee90750' class="tab-pane fade active in"> <div class="tip inlineBlock error"> 链路聚合 </div> ```js [S1]interface Eth-Trunk 1 //聚合交换机之间的Eth-Trunk端口编号相等 [S1-Eth-Trunk1]mode lacp-static //lacp模式 [S1-Eth-Trunk1]trunkport GigabitEthernet 0/0/1 to 0/0/2 //将成员端口加入到聚合端口中 [S1-Eth-Trunk1]max active-linknumber 2 //设置活动上限阀值 [S1-Eth-Trunk1]port link-type trunk [S1-Eth-Trunk1]port trunk allow-pass vlan all [S1-Eth-Trunk1]dis eth-trunk 1 verbose //查看聚合端口的信息 [S1] lacp priority 100 //配置系统优先级使其成为主控端 [S1-G0/0/1] lacp priority 100 //配置活动链路优先级 [S1-G0/0/2] lacp priority 100 //配置活动链路优先级 ``` <div class="tip inlineBlock info"> Smart Link </div> ```js [S1-G0/0/1]stp disable //关掉相关接口的STP [S1]smart-link group 1 [S1-smlk-group1]port GigabitEthernet 0/0/1 master //设置主端口 [S1-smlk-group1]port g0/0/2 slave //设置从端口 [S1-smlk-group1]flush send control-vlan 10 password simple 123 //使能smart link组1发送Flush帧的功能,携带的控制VLAN编号为10,密码是:123 [S1-smlk-group1]restore enable //开启回切功能 [S1-smlk-group1]timer wtr 30 //回切时间为30秒 [S1-smlk-group1]smart-link enable //使能Smart Link组1的功能 [S1-smlk-group1]dis smart-link group 1 //查看Smart Link组1的信息 [S2-GigabitEthernet0/0/1]smart-link flush receive control-vlan 10 password simple 123 //设置其他交换机可以接收和处理携带控制VLAN编号是10的Flush帧 ``` </div> </div> </div> --- ## 十六、其他配置 <div class="tab-container post_tab box-shadow-wrap-lg"> <ul class="nav no-padder b-b" role="tablist"> <li class='nav-item active' role="presentation"><a class='nav-link active' style="" data-toggle="tab" aria-controls='tabs-29f38e5ce489bb1acd86be3676442c8e520' role="tab" href='#tabs-29f38e5ce489bb1acd86be3676442c8e520'>自动保存</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-5365607eba9644c25b5bf4bf39491382521' role="tab" href='#tabs-5365607eba9644c25b5bf4bf39491382521'>端口镜像</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-b23d8c4d095a3e00336b562289cd6688322' role="tab" href='#tabs-b23d8c4d095a3e00336b562289cd6688322'>端口绑定</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-bd904aa2babb17ce6052f446b00bc676913' role="tab" href='#tabs-bd904aa2babb17ce6052f446b00bc676913'>端口安全</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-0b4cb29e136e5187eb09703060176542534' role="tab" href='#tabs-0b4cb29e136e5187eb09703060176542534'>前缀列表</a></li><li class='nav-item ' role="presentation"><a class='nav-link ' style="" data-toggle="tab" aria-controls='tabs-a71133d6b35fbec0d4a3df4102faa749475' role="tab" href='#tabs-a71133d6b35fbec0d4a3df4102faa749475'>IPv6配置</a></li> </ul> <div class="tab-content no-border"> <div role="tabpanel" id='tabs-29f38e5ce489bb1acd86be3676442c8e520' class="tab-pane fade active in"> ```js #自动保存 <R1>autosave interval on <R1>autosave interval 120 //每隔120分钟自动保存 #定点保存 <R1>autosave time on <R1>autosave time 23:00:00 //到23点自动保存 ``` `注意:两种方式不能共存` </div><div role="tabpanel" id='tabs-5365607eba9644c25b5bf4bf39491382521' class="tab-pane fade "> ```js [R1]observe-port 1 interface Ethernet4/0/1 //设置观察端口 [接口] mirror to observe-port 1 both //将镜像端口映射到观察端口 ```js </div><div role="tabpanel" id='tabs-b23d8c4d095a3e00336b562289cd6688322' class="tab-pane fade "> ```js [Huawei]user-bind static mac-address 5489-988B-5157 int e0/0/1 //绑定MAC地址 [Huawei]user-bind static ip-address 192.168.1.3 //绑定IP地址 ```js </div><div role="tabpanel" id='tabs-bd904aa2babb17ce6052f446b00bc676913' class="tab-pane fade "> ```js [接口]port-security enable //启用端口安全 [接口]port-security max-mac-num 2 //自动学习MAC地址的最大数量 [接口]port-security protect-action shutdown //保护行为为关闭端口 ```js </div><div role="tabpanel" id='tabs-0b4cb29e136e5187eb09703060176542534' class="tab-pane fade "> ```js [R1]ip ip-prefix 1 deny 11.1.1.0 25 greater-equal 25 less-equal 25 //在RIP里面过滤掉11.1.1.0/25 [R1]ip ip-prefix 1 permit 0.0.0.0 0 less-equal 32 [R1-rip-1]filter-policy ip-prefix 1 import ```js </div><div role="tabpanel" id='tabs-a71133d6b35fbec0d4a3df4102faa749475' class="tab-pane fade "> ```js [R1]ipv6 //开启全局IPv6功能 [R1-E0/0/0]ipv6 enable //在接口(连接PC)下开启IPv6功能 [R1-E0/0/0]ipv6 address auto link-local //自动生成链路本地地址 [R1-G0/0/0]ipv6 enable //在接口(连接路由器)下开启IPv6功能 [R1-G0/0/0]ipv6 add 2031:0:130F::1 64 //配置全球单播地址 [R1-E0/0/0]ipv6 add 2001:3:FD:: 64 eui-64 //用EUI-64配置地址 ```js </div> </div> </div> ``` Last modification:August 6th, 2020 at 02:05 am © 允许规范转载