(1)配置交换机的设备名称，管理vlan和telnet
//⽤户视图提⽰符
syster-view //进⼊系统视图
[HIUAWEI] sysname Switehl∥修改设备名称为SW1
[Switchl] vlan 5 //创建交换机管理 VLAN 5
[Switch1-VLAN5] management-vlan
[Switch1-VLAN5] quit
[Switchl] interface vlanif 5 //创建交换机管理VLAN的 VLANIF接⼝
[Switchl-vlanif5] ip address 10.10.1.1 24∥配置 VLANIF接⼝IP地址
[Switchl-vlanif5] quit
[Switchl] telnet server enable //Telnet默认是关闭的，需要打开
[Switchl] user-interface vty 0 4 ∥开启VTY线路模式
[Switchl-ui-vty0-4] protocol inbound telnet∥配 telnet置协议
[Switchl-ui-vty0-4] authentication-mode aaa //配置认证⽅式
[Switchl-ui-vty0-4]quit
[Switchl]aaa
[SwitchI-aaa] local-user admin password irreversible-cipher Hello@123 //配置⽤户名和密码,⽤户名不区分⼤⼩写，密码区分⼤⼩写[Switchl-aaa] local-user admin privilege level 15∥将管理员的账号权限设置为15(最⾼)
[SwitchI-aaa]quit
[SwitchI ]quit
< Switchl>save
∥在⽤户视图下保存配置
(2)登录Telnet到交换机，出现⽤户视图提⽰符
C:\Documents and Settings\Administrator> telnet 10.10.1.1 //输⼊交换机管理IP
Login authentication
Usemame:admin //输⼊⽤户名和密码
Password:
Info: The max number of VTY users is 5, and the number
of current VTY users on line is 1.
The current login time is 2016-07-03 13: 33: 18+00:00.
∥⽤户视图命令⾏提⽰符
(3)配置交换机的接⼝，配置对象主要有接⼝隔离，速率，双⼯。
配置接⼝ GE1/0/1和GE1/0/2的端⼝隔离，实现⼆层数据隔离，三层数据互通。
< Switch1> system–view
[Switch1] port-isolate mode 12
[Switchl] interface gigabitethernet 1/0/1
[Switch1-GigabitEthernet1/0/1] port-isolate enable group 1
[Switch1-GigabitEthernet1/0/1] quit
[Switchl] interface gigabitethemet1/0/2
[Switch1-GigabitEthernet1/0/2] port-isolate enable group 1
[Switch1-GigabitEthernet1/0/2] quit
#配置以太⽹接⼝GE/0/1在⾃协商模式下协商速率为100Mb/
< Switch1> system-view
[Switchl] interface gigabitethernet 0/0/1
[Switch1-GigabitEthernet0/0/1] negotiation auto
[Switch1-GigabitEthernet0/0/1] auto speed 100
#配置以太⽹电接⼝GE0/0/1在⾃协商模式下双⼯模式为全双⼯模式
< SwitchI> system-view
[SwitchI] interface gigabitethernet 0/0/1
[Switch1-GigabitEthernet0/0/1] negotiation auto
(4)查看和配置MAC地址表，
display mac-address
#执⾏命令display interface vlanif5，显⽰ VLANIF接⼝的MAC地址
display interface vlanif 5
Vlanifs current state: DOWN
Line protocol current state: DOWN
Description:
Route Port, The Maximum Transmit Unit is 1500
Internet Address is 192.168.1.1/24
IP Sending Frames’ Format is PKTFMT ETHNT 2, Hardware address is 00e0-0987-
Current system time: 2016-07-03 13:33:09+08:00
Input bandwidth utilization:–
Output bandwidth utilization:–
#在MAC地址表中增加静态MAC地址表项,⽬的MAC地址为0001-0002-0003,vlan 5的报⽂，从接⼝ gigabitethernet0/0/5转发出去[Switchl] mac-address static 0001-0002-0003 gigabitethernet 0/0/5 vlan 5
(5)#基于接⼝划分VLAN
system-view //进⼊交换机系统视图
[HUAWEI] sysname SwitchA //交换机命名
[SwitchA] vlan batch 2 //批量⽅式建⽴VLAN2
[SwitchA] interface gigabitethernet 0/0/1 //进⼊交换机接⼝视图
[SwitchA-GigabitEthernet0/0/1] port link-type access //配置接⼝类型
[SwitchA-GigabitEthernet0/0/1] port default vlan 2 //将接⼝加⼊VLAN2 [SwitchA-GigabitEthernet0/0/1] quit
[SwitchA] interface gigabitethernet 0/0/2 ∥在接⼝视图配置上联接⼝
[SwitchA-GigabitEthernet0/0/2] port link-type trunk //配置上联接⼝类型[SwitchA-GigabitEthernet0/0/2] port trunk allow-pass vlan 2 //通过VLAN2 [SwitchA-GigabitEthernet0/0/2] quit
(6)#基于MAC地址划分VLAN
system-view
[HUAWEI] sysname SwitchA
[SwitchA] vlan batch 2
[SwitchA] interface gigabitethernet 0/0/1 //在接⼝视图配置上联接⼝
[SwitchA-GigabitEthernet0/0/1] port link-type hybrid //配置上联接⼝类型[SwitchA-GigabitEthernet0/0/1] port hybrid untagged vlan 2 //通过VLAN2 [SwitchA-GigabitEthernet0/0/1] quit
[SwitchA] interface gigabitethernet 0/0/2 //进⼊交换机接⼝视图
[SwitchA-GigabitEthernet0/0/2] port link-type hybrid //配置接⼝类型
SwitchA-GigabitEthernet0/0/2] port hybrid untagged vlan2 //将接⼝加⼊vlan2 [SwitchA-GigabitEthernet0/0/2] quit
[SwitchA]vlan 2
[SwitchA-vlan2] mac-vlan mac-address 22-22-22 //PC的MAC地址与VLAN2关联[SwitchA-vlan2] quit
[SwitchA] interface gigabitethemnet 0/0/2
[SwitchA-GigabitEthernet0/0/2] mac-vlan enable //基于MAC地址启⽤接⼝[SwitchA-GigabitEthernet0/0/2] quit
(7)配置stp
system-view
[HUAWEI] sysname SwitchA
[SwitchA] stp mode stp
配置根桥和备份根桥设备
#配置 Switcha为根桥
[Switcha] stp root primary
#配置 Switchb为备份根桥
[Switchb] stp root secondary
配置 Switcha的端⼝路径开销计算⽅法为华为计算⽅法, Switche、 Switch配置⽅法[Switcha] stp pathcost-standard legacy
#配置 Switchc端⼝ Gigabitethernet0/0/1端⼝路径开销值为2000
[Switchc] stp pathcost-standard legacy
[switchc] interface gigabitethernet 0/0/1
[switchc-gigabitetherneto/0/1] stp cost 20000
[Switchc-gigabitethernet0/0/1] quit
启⽤STP，实现破除环路，将与PC机相连的端⼝设置为边缘端⼝并启⽤端⼝的⽂过滤功能#配置 Switch端⼝ Gigabitetherner2为边缘端⼝并启⽤端⼝的BPDU报⽂过滤功能[Switchb] interface gigarabitethemet0/02
[switchb-gigabitethereto/0/2] stp edged-port enable
[switchb-gigabitethemet0/0/2] stp bpdu-filter enable
[switchb-gigabite thereto/0/2] quit
#配置 Switchc端⼝ Gigabitethemet002为边缘端⼝并启⽤端⼝的BPDU报⽂过波功能[SwitchC] interface glgabitethemet 0/0/2
[switchc-gigabitethemeto/0/2] stp edged- port enable
[switchc-gigabitethernet0/0/2] stp bpdu-filter enable
[switchc-gigabitethermeto/0/2] quit
设备全局启⽤STP，所有设备配置相同。
#设备 Switcha全局启⽤STP
[SwitchA]stp enable
检查配置结果
[SwitchA]display stp brief
查g0/0/1
[SwitchA]display stp interface gigabitethernet 0/0/1 brief
(8)配置SFTP
#配置SFTP服务器功能及参数
system-view
[Huawei] sysname SFTP Server
[FTP Server] rsa local-key-pair createThe key name will be: Host
RSA keys defined for Host already exist.
Confirm to replace them? (y/n)n]:y
The range of public key size is (512~2048).
NOTES: If the key modulus is less than 2048,
It will introduce potential security risks.
Input the bits in the modulus[default =2048]: 2048
Generating keys…
[SFTP Server] sftp server enable
#配置SSH⽤户登录的⽤户界⾯
[SFTP Server] user-interface vty 04
[SFTP Server-ui-vty0-4] authentication-mode aaa
[SFTP Server-ui-vty0-4] protocol inbound all
[SFTP Server-ui-vty0-4] user privilege level 15
[SFTP Server-ui-vty0-4] quit
#配置SSH⽤户
[SFTP Server] aaa
[SFTP Server-aaa] local-user user password
Please configure the login password(8-128)
It is recommended that the password consist of at least 2 types of characters, i ncluding lowercase letters, uppercase letters, numerals and special characters Please enter password:
Please confirm password:
[SFTP Server-aaa] local-user user privilege level 15
[SFTP Server-aaa] local-user user service-type ssh
[SFTP Server-aaa] local-user user ftp-directory flash:\autoconfig
[SFTP Server-aaa]quit
[SFTP Server]ssh user user authentication-type password
#配置SFTP服务器的IP地址
[SFTP Server] interface gigabitethernet
0/0/1
[SFTP Server-GigabitEthernet0/0/1] ip address 172.16.100.100 255.255.255.0 [SFTP Server-GigabitEthernet0/0/1] quit
#在SFTP服务器上配置缺省路由
[SFTP Server] ip route-static 0.0.0.0 0.0.0.0 172.16.100.1
步骤2：将配置⽂件、系统软件和补丁⽂件上传⾄SFTP服务器的⼯作⽬录hah
上(上传步骤略)
步骤3：配置DHCP服务器(以AR2220为例)
system-view
[Huawei] sysname DHCP Server
[DHCP Server] dhep enable
[DHCP Server] vlan 10
[DHCP Server-vlan10] quit
[DHCP Server] interface ethernet 1/0/1
DHCP Server-Ethernet1/0/1] port link-type hybrid
[DHCP Server-Ethernet1/0/1] port hybrid untagged vlan 10
[DHCP Server-Ethernet1/0/1] port hybrid pvid vlan 10
[DHCP Server-Ethernet1/0/1] quit
[DHCP Server] interface ethernet 1/0/2
[DHCP’Server-Ethernet1/0/2] port link-type hybrid
[DHCP Server-Ethernet1/0/2] port hybrid untagged vlan 10
[DHCP Server-Ethernet1/0/2] port hybrid pvid vlan 10
[DHCP Server-Ethernet1/0/2] quit
[DHCP Server] interface ethernet 1/0/3
[DHCPServer-Ethernet1/0/3] port link-type hybrid
[DHCP Server-Ethernet1/0/3] port hybrid untagged vlan 10
[DHCP Server-Ethernet1/0/3] port hybrid pvid vlan 10
[DHCP Server-Ethernet1/0/3] quit
[DHCP Server] interface gigabitEthernet 0/0/1
[DHCP Server-GigabitEthernet0/0/1] ip address 172.16.100.1 255.255.255.0 [DHCP Server-GigabitEthernet0/0/1] quit
[DHCP Server] interface vlanif 10
[DHCP Server-Vlanif10] ip address 172.16.200.100 255.255.255.0
[DHCP Server-Vlanif10] dhcp select global
[DHCP Server-Vlanif10] quit
[DHCP Server] ip pool auto-con fig
[DHCP Server-ip-pool-auto-config] network 172.16.200.0 255.255.255.0
[DHCP Server-ip-pool-auto-config] gateway-list 172.16.200.100
[DHCP Server-ip-pool-auto-config] option 67 ascii_ar V200R008 (C20&C30) cfg [DHCP Server-ip-pool-auto-config] option 141 ascii user
[DHCP Server-ip-pool-auto-config] option 142 cipher huawei@123
[DHCP Server-ip-pool-auto-config] option 143 ip-address 172.16.100.100 [DHCPServer-ip-pool-auto-config]option145ascii vrpfile=auto V200R008
(c20&C30).cc;vrpver=-V200R008 (C20&C30;patchfile=ar V200R008 (C20&C30)
(9)静态路由
interface GigabitEthernet0/0/1 //接⼝视图配置R1的接⼝地址
ip address 10.1.1.1 255.255.255.0
interface GigabitEthernet0/0/2
address10.1.4.1 255.255.255.252
ip route-static 10.1.2.0 255.255.255.0 10.1.4.2 //系统视图配置R1到不同⽹段的静态ip route-static 10.1.3.0 255.255.255.0 10.1.4.2
return
路由器R2配置⽂件如下。
interface GigabitEthernet0/0/1
接⼝视图配置R2的接⼝地址
ip addres10.1.2.1 255.255.255.0
interface GigabitEthernet0/0/2 address10.1.4.2 255.255.255.252 interface GigabitEthernet0/0/0 display routing-table protocol static (10)ipv6
ipv6 //启⽤路由器IPv6报⽂转发能⼒interface GigabitEthernet1/0/0
/在接⼝上启⽤IPv6功能
ipv6 enable
ipv6 address 1::164
interface GigabitEthernet2/0/0
ipv6 enable
ipv6 address 3:: 1 64
ipv6 route-static 2:: 64 3::1
/配置R1到2:64⽹段的静态路由
return
R2的相关配置如下。
ipv6
interface GigabitEthernet1/0/0
ipv6 enable
ipv6 address 2:: 1 64
interface GigabitEthernet2/0/0
ipv6 enable
ipv6 address 3:: 2 64
ipv6 route-static 1:: 64 3::2
配置R1到1:64⽹段的静态路由
retum
display ipv6 routing-table
(11)rip
配置路由器R1的RIP功能
[RI] rip
[R1-rip-1] network192.168.1.0 [RI-rip-l] quit
#配置路由器R2的RIP功能
[R2] rip
[R2-rip-1] network 192.168.1.0 [R2-rip-1] network 10.0.0.0
[R2-rip-1] quit
配置路由器R3的RIP功能
[R3]rip
[R3-rip-1]network172.16.0.0
[R3-ip-1]quit
display rip 1 route
[R1]rip
[R1-rip-1]version 2
[R1-rip-1]quit
(12)ISIS
isis[ process-i-id] 创建IS-IS进程并进⼊IS-IS视图
isis circuit-level[level-1 level-1-2|level-2] 设置接⼝的 Level级别，默认情况下，接⼝level为 level–1-2 network-entity net 设置⽹络实体名称
net格式为x….xx.xxxx.xxx.00，前⾯的“x-r
是区域地址，中间的12个“X”是路由器的System ID 最后的“00”是SEL
isis enable[process-id] 指定IS-IS的进程号，默认为1,IS-IS将通过该接⼝建⽴邻居、扩散LSP报⽂
display isis peer 查看IS-IS的邻居信息
display isis route 查看IS-IS的路由信息
(13)配置OSPF
#配置R路由器接⼝的IP地址
system-view
[Huawei] sysname RI
[R1] interface gigabitethernet 0/0/1
[RI-GigabitEthernet0/0/1] ip address 192.168.1.1 24
[R1-GigabitEthernet0/0/1] quit
[RI] interface gigabitethernet 0/0/2
[RI-GigabitEthernet0/0/2] ip address 192.168.2.124
[R1-GigabitEthernet0/0/2] quit
在路由器R1上配置OSPF基本功能
[R1] router id 1.1.1.1
[R1] ospf
[RI-ospf-1] area 0
[ospf-l-ara-0.0.0.0] network192.168.1.00.0.0.255
[R1-opf-1-area-0.0.0.0] quit
[RI-ospf-1] area 1
[ospf-l-ara-0.0.0.1] network192.168.1.00.0.0.255
[R1-opf-1-area-0.0.0.0] quit
ospf [process-id | router-id | router-id | vpn-instance vpn-instance-name] 启动OSPF进程，进⼊OS视图area area-id 创建并进⼊OSPF区域视图
network ip-address wildcard-mask 配置区域所包含的⽹段
display ospf peer 查看OSPF邻居信息
display ospf routing 查看OSPF路由信息
(14)BGP
#配置各接⼝的P地址，配置R1，其他路由器各接⼝的IP地址与此配置⼀致
system-view
[RI] interface gigabitethernet 1/0/0
[R1-GigabitEthernet1/0/0] ip address 172.16.60.1
[R1-GigabitEthernet1/0/0] quit
配置IBGP连接，配置R2、R3、R4
[R2]bgp 65009
[R2-bgp] router-id 2.2.2.2
[R2-bgp] peer 9.1.1.2 as-number 65009
[R2-bgp] peer 9.1.3.2 as-number 65009
[R3]bgp65009
[R3-bgp] router-id 3.3.3.3
[R3-bgp] peer 9.1.3.1 as-number 65009
[R3-bgp] peer 9.1.2.2 as-number 65009
[R3-bgp] quit
BGP的相关命令
bgp{as-number-plain | as-number-dot} 启动BGP，指定本地AS编号，并进⼊BGP视图
router-id ipv4-address 配置BGP的 Router ID
peer{ipv4-address|ipv6-address} as-number{as-number-plain|as-number-dot} 创建BGP对等体ipv4-family{unicast|multicast} 进⼊IPv4地址族视图
import-route direct 管理IP所在的⽹段路由，并引⼊RIP路由表
display bgp peer