网工技术华为命令专题:
1.华为交换机基本配置
2.华为路由器基本配置
3.交换机VLAN配置
4.路由器RIP协议配置
5.路由器OSPF配置
6.路由器DHCP配置
7.路由器ACL命令配置
8.路由器NAT命令配置
9.三层交换VLAN路由
10.单臂路由VLAN通信
下面的命令纯手写,如有错误请大佬指教。
1.配置交换机名称和密文密码:
<Huawei>sys//进入系统视图
[Huawei]quit或return//退出系统视图,其中return可直接回到用户视图,此外ctrl+z也可直接返回到用户视图
[Huawei]sysname TWQ//将主机名设置为TWQ
[TWQ]user-int console 0//进入控制台
[TWQ-ui-console0]authentication-mode password//采用密码验证模式
[TWQ-ui-console0]set authentication password cipher 123//设置密码为123且密码类型为cipher(密文)
2.配置交换机的远程IP地址
[Huawei]int vlanif 1//进入vlan 1
[Huawei-Vlanif1]ip add 192.168.1.254 24//为valn 1 配置ip地址
[Huawei-Vlanif1]undo shutdown//开启接口
[Huawei-Vlanif1]dns domain TWQ//设置域名为TWQ
[Huawei]dns server 192.168.254.254 //设置域名IP
[Huawei]dis vlan//显示vlan
[Huawei]dis cu//显示当前配置
<Huawei>save//保存
<Huawei>reboot//重启设备
<Huawei>undo terminal monitor//关闭提示信息
3.配置交换机的端口速率、双工、arp
[Huawei]int g0/0/1//进入端口
[Huawei-GigabitEthernet0/0/1]description TWQ//端口描述
[Huawei-GigabitEthernet0/0/1]undo negotiation auto//取消协商
[Huawei-GigabitEthernet0/0/1]duplex full//全双工
[Huawei-GigabitEthernet0/0/1]auto duplex full//自动
[Huawei-GigabitEthernet0/0/1]speed 10//速率为10M
[Huawei-GigabitEthernet0/0/1]auto speed 100//自动
[Huawei]arp static 192.168.1.8 5489-98cf-2603//让IP地址和MAC地址进行绑定
[Huawei]dis arp//显示arp
4.配置路由器接口IP和静态路由
[Huawei]int g0/0/1//进入端口
[Huawei-GigabitEthernet0/0/1]undo shutdown//开启端口
[Huawei]dis cu//显示路由配置
[Huawei]ip route-static 192.168.20.0 24 10.0.12.2//配置静态路由
[Huawei]ip route-static 192.168.10.0 24 s0/0/1
ip route-static 0.0.0.0 0 192.168.1.5
dis ip routing-table//显示路由表
5.配置交换机VLAN相关命令
[Huawei]vlan 10//创建Vlan
Huawei-vlan10]description TWQ//描述Vlan
[Huawei-vlan10]vlan batch 20 40//创建了两个vlan
[Huawei]int g0/0/1//进入端口
[Huawei-GigabitEthernet0/0/1]port link-type access//创建访问口access
[Huawei-GigabitEthernet0/0/1]port default vlan 10//设置默认Vlan
[Huawei-GigabitEthernet0/0/1]int g0/0/2//进入另一个端口
[Huawei-GigabitEthernet0/0/2]port link-type trunk//将2号口设置为trunk端口
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20//trunk口设置为允许vlan10和20访问
[Huawei-GigabitEthernet0/0/2]port trunk allow-pass vlan all//trunk口允许所有vlan通过
[Huawei]int e0/0/2//进入e接口
[Huawei-E0/0/2]port link-type hybird//混合口模式
[Huawei-E0/0/2]undo port default vlan //删除默认vlan
[Huawei-E0/0/2]port hybrid untagged vlan 20 //去标签
[Huawei-E0/0/2]port hybrid pvid vlan 2//设置默认vlan
[Huawei-E0/0/2]port trunk allow-pass vlan 10 to 100//允许vlan10到vlan100访问
[Huawei]dis port vlan//查看vlan
6.配置交换机Vlan一致性GVRP:通用Vlan注册协议,国际标准,双向注册。
Normal模式:(类似Cisco交换机服务器模式)
[Huawei]gvrp//开启gvrp也是默认模式
Fixed模式:(类似ciso交换机客户机模式)
[Huawei-g0/0/2]gvrp registration fixed
Forbidden模式:(雷士cisco交换机透明模式)
[Huawei-g0/0/3]gvrp registration forbidden
dis vlan summary//查看vlan汇总
dis gvrp satus//查看gvrp状态
7.配置路由器RIP协议:RIPv1 RIPv2
rip
[Huawei-rip-1]network 192.168.1.0//发布直连网段
[Huawei-rip-1]version 2//配置v2版本
[Huawei]dis rip//查看rip
[Huawei]dis rip database //查看rip数据库
[Huawei]dis ip routing-table //查看路由表
优先级:直连0、静态60、rip 100、ospf 10/150
8.配置路由器ospf协议:
[Huawei]ospf 1//启用ospf默认时进程1
[Huawei-ospf-1]area 0//进入区域0
[Huawei-ospf-1-area-0.0.0.0]network 192.168.3.0 0.0.0.255//发布直连网段
[Huawei-ospf-1]slient-interface g0/0/2 //被动接口
[Huawei]dis ospf int//查看ospf通告
[Huawei]dis ospf peer //查看ospf邻居
[Huawei]dis ip routing-table //查看路由表
[Huawei]dis ospf routing //查看ospf路由表
9.配置基于全局的DHCP协议:
[Huawei]dhcp en//开启dhcp
[Huawei]ip pool TWQ//地址池名
[Huawei-ip-pool-TWQ]network 192.168.1.0//发布网段
[Huawei-ip-pool-TWQ]ease day 2//租约默认1
[Huawei-ip-pool-TWQ]gataway-list 192.168.1.254 //网关
[Huawei-ip-pool-TWQ]excluded-ip-address 192.168.1.250 192.168.1.253//排除ip范围
[Huawei-ip-pool-TWQ]dns-list 8.8.8.8//DNS服务器
[Huawei-ip-G0/0/0]dhcp select global//基于全局
10.配置基于接口的DHCP协议:
[Huawei]dhcp en
[Huawei]int g0/0/1
[Huawei-g0/0/1]dhcp select int//基于接口
[Huawei-g0/0/1]dhcp server lease day 2//租约默认1
[Huawei-g0/0/1]dhcp server excluded-ip-address 192.168.1.1 192.168.1.10//排除IP范围
[Huawei-g0/0/1]dhcp server dns-list 8.8.8.8 //DNS
[Huawei]dis ip pool//查看dhcp
11.配置路由器基本ACL:2000-2999
[Huawei]acl 2000
[Huawei-acl-basic-2000]rule 5 permit source 1.1.1.1 0//允许原ip(注意反掩码0,默认步长5)
[Huawei-acl-basic-2000]rule 10 deny any//拒绝任意
[Huawei-acl-basic-2000]user-int vty 0 4//进入虚拟接口
[Huawei-ui-vty0-4]acl 2000 inbound//应用acl
[Huawei]dis acl all//查看所有vlan
[Huawei]dis acl 2000
12.配置路由器高级ACL:3000-3999
[Huawei]acl 3000
[Huawei-acl-adv-3000]rule permit ip source 1.1.1.1 0 destination 4.4.4.4 0
[Huawei]user-int vty 0 4
[Huawei-ui-vty0-4]acl 3000 outbound//应用acl
[Huawei]int g0/0/1//进入接口
[Huawei-g0/0/1]traffic-fliter inbound acl 3000//应用
[Huawei]dis acl all//查看所有的acl
13.配置路由器动态NAT(多对少)
[Huawei]nat-address-group 1 202.169.10.50 202.169.10.60//外部IP
[Huawei]acl 2001//配置ACL
[Huawei-acl-basic-2001]rule 5 permit source 192.17.1.0 0.0.0.255//内部IP
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/0]nat outbound 2001 address-group 1 no-pat//应用NAT
[Huawei]dis nat outbound//查看NAT
- 配置路由器静态NAT:(一对一)
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]nat static global 202.100.10.5 inside 172.16.1.1//一对一转换
配置路由器动态NAPT:(多对一)
[Huawei]int g0/0/0
[Huawei-Go0/0/0]nat outbound 2001//多对一转换
[Huawei]dis nat static//查看静态NAT
15.配置三层交换机VLAN间路由:
首先配置IP,vlan等
[Huawei]int vlanif 10//进入接口
[Huawei-vlanif10]ip add 192.168.1.254 24//配IP
[Huawei]int vlanif 20//进入接口
[Huawei-vlanif20]ip add 192.168.2.254//配IP
[Huawei]dis ip interface brief//接口简略信息
[Huawei]dis ip int brief //接口简略信息
[Huawei]dis port vlan //接口vlan信息
[Huawei]dis vlan //查看vlan 信息
16.配置单臂路由VLAN间通信:
首先基本配置IP、Vlan
[Huawei]int g0/0/1
[Huawei-g0/0/1]ip add 192.168.1.254 24 //配IP
[Huawei-g0/0/1]dot 1q termination vid 10//封装
[Huawei-g0/0/1]arp broadcast en//开启arp
[Huawei-g0/0/1]dis ip int brief //查看接口