Huawei router switch configuration command: computer command
PCAlogin:root; use root user
password:linux; password is linux
shutdown-hnow; shutdown
init0; shutdown
logout; user logs out
login; user login
ifconfig; show IP address
ifconfigeth0netmask; set IP address
ifconfigeht0netmaskdown; disable IP address
routeadd0.0.0.0gw; set gateway
routedel0.0.0.0gw; delete gateway
routeadddefaultgw; set gateway
routedeldefaultgw; delete gateway
route; display gateway
ping; send ECHO packet
telnet; remote login
Huawei router switch configuration commands: switch command
[Quidway]discur; display current configuration
[Quidway]displaycurrent-configuration; display current configuration
[Quidway]displayinterfaces; display interface information
[Quidway]displayvlanall; display routing information
[Quidway]displayversion; display version information
[Quidway]superpassword
; modify privileged user password
[Quidway]sysname; switch name
[Quidway]interfaceethernet0/1; enter interface view
[Quidway]interfacevlanx; enter interface view
[Quidway-Vlan-interfacex]ipaddress10.65.1.1255.255.0.0; Configure the IP address of the VLAN
[Quidway]iproute-static0.0.0.00.0.0.010.65.1.2; static route = gateway
[Quidway]rip; Layer 3 switching support
[Quidway]local-userftp
[Quidway]user-interfacevty04; enter virtual Terminal
[S3026-ui-vty0-4] authentication-modepassword; set password mode
[S3026-ui-vty0-4]setauthentication-modepasswordsimple222;set password
[S3026-ui-vty0-4]userprivilegelevel3;user level
[Quidway]interfaceethernet0/1;enter port mode
[Quidway]inte0/1;enter port mode
[Quidway ] -Ethernet0/1]duplex{half|full|auto}; configure the working state of the port
[Quidway-Ethernet0/1]speed{10|100|auto}; configure the working speed of the port
[Quidway-Ethernet0/1]flow-control; configure Port flow control
[Quidway-Ethernet0/1]mdi{across|auto|normal}; configure port flat-connect twist
[Quidway-Ethernet0/1]portlink-type{trunk|access|hybrid}; set port working mode
[Quidway- Ethernet0/1]portaccessvlan3; the current port is added to the VLAN
[Quidway-Ethernet0/2]porttrunkpermitvlan{ID|All}; set the VLAN allowed by the trunk
[Quidway-Ethernet0/3]porttrunkpvidvlan3; set the PVID of the trunk port
[Quidway-Ethernet0/1 ]undoshutdown; activate port
[Quidway-Ethernet0/1]shutdown; close the port
[Quidway-Ethernet0/1]quit; return
[Quidway]vlan3; create VLAN
[Quidway-vlan3]portethernet0/1; add port to VLAN
[Quidway-vlan3]porte0/1 ;Short form
[Quidway-vlan3]portethernet0/1toethernet0/4;Add port to VLAN
[Quidway-vlan3]porte0/1toe0/4;Short form
[Quidway]monitor-port;Specify mirror port
[Quidway]portmirror;Specify mirrored Port
[Quidway] portmirrorint_listobserving-portint_typeint_num; specify mirroring and mirrored
[Quidway] descriptionstring; specify VLAN description character
[Quidway]description; delete VLAN description character
[Quidway]displayvlan[vlan_id]; view VLAN settings
[Quidway]stp{enable|disable }; Set spanning tree, default off
[Quidway]stppriority4096; Set switch priority
[Quidway]stproot{primary|secondary}; Set as root or root backup
[Quidway-Ethernet0/1]stpcost200; set switch port cost
[Quidway]link-aggregatione0/1toe0/4ingress|both;port aggregation
[Quidway]undolink-aggregatione0/1|all;start port is the channel number
[SwitchA-vlanx ]isolate-user-vlanenable; set the primary vlan
[SwitchA]isolate-user-vlansecondary; set the sub-vlan included in the primary vlan
[Quidway-Ethernet0/2]porthybridpvidvlan; set the pvid of the vlan
[Quidway-Ethernet0/2]porthybridpvid; delete the vlan pvid
[Quidway-Ethernet0/2]porthybridvlanvlan_id_listuntagged; set the unidentified vlan
if the vlanid of the package is the same as the PVId, then remove the vlan information. The default PVID=1.
So set the PVID as the vlanid to which it belongs, and set the vlan that can communicate with each other as untagged.
Huawei router switch configuration commands: router command
[Quidway]displayversion; display version information
[Quidway]displaycurrent-configuration; display current configuration
[Quidway]displayinterfaces; display interface information
[Quidway]displayiproute; display routing information
[Quidway]sysnameaabbcc; change hostname
[Quidway]superpasswrod123456; set password
[Quidway]interfaceserial0; enter interface
[Quidway-serial0]ipaddress; configure port IP address
[Quidway-serial0]undoshutdown; activate port
[Quidway]link-protocolhdlc; bind hdlc protocol
[Quidway]user- interfacevty04
[Quidway-ui-vty0-4]authentication-modepassword
[Quidway-ui-vty0-4]setauthentication-modepasswordsimple222
[Quidway-ui-vty0-4]userprivilegelevel3
[Quidway-ui-vty0-4]quit
[Quidway]debugginghdlcallserial0; show all information
[Quidway]debugginghdlceventserial0; debug event information
[Quidway]debugginghdlcpacketserial0; display packet information
Huawei router switch configuration command: Static route:
[Quidway]iproute-static{interfacenumber|nexthop}[value][reject|blackhole]
For example: [Quidway]iproute-static129.1.0.01610.0.0.2
[Quidway]iproute-static129.1.0 .0255.255.0.010.0.0.2
[Quidway]iproute-static129.1.0.016Serial2
[Quidway]iproute-static0.0.0.00.0.0.010.0.0.2
Huawei router switch configuration commands: dynamic routing:
[Quidway]rip; set dynamic routing
[Quidway]ripwork; set work to allow
[Quidway]ripinput; set entry to allow
[Quidway]ripoutput; set exit to allow
[Quidway-rip]network1.0.0. 0; set exchange routing network
[Quidway-rip] networkall; set exchange with all networks
[Quidway-rip] peerip-address;
[Quidway-rip] summary; route aggregation
[Quidway] ripversion1; set work on version 1
[Quidway] ripversion2multicast ;Set version 2, multicast mode
[Quidway-Ethernet0]ripsplit-horizon;Horizontal separation
[Quidway]routeridA.BCD;Configure router ID
[Quidway]ospfenable;Start OSPF protocol
[Quidway-ospf]import-routedirect;Introduce direct connection route
[Quidway-Serial0]ospfenablearea; configure OSPF area
Huawei router switch configuration command: The standard access list command format is as follows:
acl[match-orderconfig|auto]; the default order of the former is matched.
rule[normal|special]{permit|deny}[sourcesource-addrsource-wildcard|any]
Example: [Quidway]acl10
[Quidway-acl-10]rulenormalpermitsource10.0.0.00.0.0.255
[Quidway-acl-10]rulenormaldenysourceany
Huawei router switch configuration command: extended access control list configuration command To
configure extended access list of TCP/UDP protocol:
rule{normal|special}{permit|deny}{tcp|udp}source{|any}destination|any}
[operate]
Configure the extended access list of the ICMP protocol:
rule{normal|special}{permit|deny}icmpsource{|any]destination{|any]
[icmp-code][logging]
Huawei router switch configuration command: Extended ACL operator meaning
equalportnumber; equal to
greater-thanportnumber; greater than
less-thanportnumber; less than
not-equalportnumber; unequal
rangeportnumber1portnumber2; interval
Huawei router switch configuration command: Example of
extended access control list Quidway-acl-102]rulepermitipsource10.0.0.10.0.0.0destination202.0.0.10.0.0.0 [Quidway-acl-102]ruledenyipsourceanydestinationany [Quidway]acl103 [Quidway-acl-103]rulepermittcpsourceanydestination10.0.0.10.0.0.0destination- portequalftp Quidway-acl-103]rulepermittcpsourceanydestination10.0.0.20.0.0.0destination-portequalwww [Quidway]firewallenable [Quidway]firewalldefaultpermit|deny [Quidway]inte0
[Quidway-Ethernet0]firewallpacket-filter101inbound|outbound
Huawei router switch configuration command: address translation configuration example
[Quidway]firewallenable
[Quidway]firewalldefaultpermit
[Quidway]acl101; the internal designated host can enter e0
[Quidway-acl-101]ruledenyipsourceanydestinationany
[Quidway-acl-101]rulepermitipsource129.38.1.10destinationany
[ Quidway- acl - 101 ]
rulepermitipsource129.38.1.20destinationany Ethernet0]firewallpacket-filter101inbound [Quidway]acl102; external specific hosts and packets greater than 1024 ports are allowed into S0 [Quidway-acl-102]ruledenyipsourceanydestinationany
[Quidway-acl-102]rulepermittcpsource202.39.2.30destination202.38.160.10
[Quidway-acl-102]rulepermittcpsourceanydestination202.38.160.10destination-portgreat-than
1024
[Quidway-acl-102]quit
[Quidway]ints0
[Quidway-Serial0] firewallpacket-filter102inbound; let 202.38.160.1 be the router's exit IP.
[Quidway-Serial0]natoutbound101interface; is Easyip, which converts the source address of the IP allowed by acl101 from this interface.
Huawei router switch configuration command: Internal server address translation configuration command (static nat):
natserverglobal[port]insideport[protocol]; use inside_port when global_port is not written
[Quidway-Serial0]natserverglobal202.38.160.1inside129.38.1.1ftptcp
[Quidway-Serial0 ]natserverglobal202.38.160.1inside129.38.1.2telnettcp
[Quidway-Serial0]natserverglobal202.38.160.1inside129.38.1.3wwwtcp
has public IP: 202.38.160.101~202.38.160.103 can be used. ;External access (original example)
[Quidway]nataddress-group202.38.160.101202.38.160.103pool1;Create address pool
[Quidway]acl1
[Quidway-acl-1]rulepermitsource10.110.10.00.0.0.255;Specify the allowed internal network
[Quidway ] -acl-1]ruledenysourceany
[Quidway-acl-1]intserial0
[Quidway-Serial0]natoutbound1address-grouppool1; take out the IP from the address pool on port s0 for external access
[Quidway-Serial0] natserverglobal202.38.160.101inside10.110.10.1ftptcp
[Quidway-Serial0] natserverglobal202.38.160.102inside10.110.10.2wwwtcp
[Quidway-Serial0] natserverglobal202.38.160.1028080inside10.110.10.3wwwtcp
[Quidway-Serial0] natserverglobal202.38.160 .103inside10.110.10.4smtpudp
Huawei router switch configuration command: PPP settings: [Quidway-s0] link-protocolppp; default protocol
Huawei router switch configuration command: PPP authentication:
main authenticator: pap|chap
[Quidway]local-userq2password{simple|cipher}hello;Router 1
[Quidway]interfaceserial0
[Quidway-serial0]pppauthentication-mode{pap|chap}
[Quidway- When serial0]pppchapuserq1;pap, there is no such sentence
Huawei routing switch configuration command: pap The tested party:
[Quidway]interfaceserial0;router 2
[Quidway-serial0]ppppaplocal-userq2password{simple|cipher}hello
Huawei router switch configuration command: chap Tested party:
[Quidway]interfaceserial0;router 2
[Quidway-serial0]pppchapuserq2;own router name
[Quidway-serial0]local-userq1password{simple|cipher}hello;other router name
Frame Relay frame- relay (Volume 2 6-61)
[q1]frswitching
[q1]ints1
[q1-Serial1]ipaddress192.168.34.51255.255.255.0
[q1-Serial1]link-protocolfr;Encapsulating Frame Relay Protocol
[q1-Serial1]frinterface-typedce
[q1-Serial1]frdlci100
[q1-Serial1]frinarp
[q1-Serial1]frmapip192.168.34.52dlci100
[q2]ints1
[q2-Serial1]ipaddress192.168.34.52255.255.255.0
[q2-Serial1]link-protocolfr
[q2-Serial1 ] ]frinterface-typedte
[q2-Serial1]frdlci100
[q2-Serial1]frinarp
[q2-Serial1]frmapip192.168.34.51dlci100
Huawei router switch configuration command: frame relay monitoring
[q1]displayfrlmi-info[]interfacetypenumber]
[q1]displayfrmap
[q1]displayfrpvc-info[serialinterface-number][dlcidlci-number]
[q1]displayfrdlci-switch
[q1]displayfrinterface
[q1]resetfrinarp-info
[q1]debuggingfrall[interfacetypenumber]
[q1]debuggingfrarp[interfacetypenumber]
[q1]debuggingfrevent[interfacetypenumber]
[q1]debuggingfrlmi[interfacetypenumber]
Huawei router switch configuration command: start ftp service:
[Quidway]local-userftppassword{simple|cipher}aaaservice-typeftp
[Quidway]ftpserverenable