H路由器配置命令范文3

1、H3C路由器配置命令 一、路由器基本配置命令 1、system-view? ?進(jìn)入系統(tǒng)視圖模式 2、sysname R1? ?為設(shè)備命名為R 3、display ip routing-table 顯示當(dāng)前路由表 4、language-mode Chinese|English 中英文切換 5、interface Ethernet 0/0 進(jìn)入以太網(wǎng)端口視圖 7、undo shutdown? ?打開以太網(wǎng)端口 8、shutdown? ?關(guān)閉以太網(wǎng)端口 9、quit? ?退出當(dāng)前視圖模式 description 配置靜態(tài)路由 11、ip route-static 0.0.0description 配

2、置默認(rèn)的路由 基本配置案例 Quidwaydisplay version? ? ? ? ? ? ? ? ?顯示版本信息 Quidwaydisplay current-configuration? ? ? ? ?顯示當(dāng)前配置 Quidwaydisplay interfaces? ? ? ? ? ? ? ?顯示接口信息 顯示路由信息Quidwaydisplay ip route? ? ? ? ? ? ? ? ? Quidwaysysname aabbcc? ? ? ? ? ? ? ? ? ?更改主機(jī)名 Quidwaysuper passwrod 123456? ? ? ? ? ? ?設(shè)置口令? 進(jìn)

3、入接口Quidwayinterface serial0? ? ? ? ? ? ? ? ?Quidway-serial0ip address <ip><mask> Quidway-serial0undo shutdown? ? ? ? ? ? ?激活端口 Quidwaylink-protocol hdlc? ? ? ? ? ? ? ?綁定hdlc協(xié)議 Quidwayuser-interface vty 0 4 Quidway-ui-vty0-4authentication-mode password Quidway-ui-vty0-4set authentication-

4、mode password simple 2 Quidway-ui-vty0-4user privilege level 3 Quidway-ui-vty0-4quit Quidwaydebugging hdlc all serial0? ? ? ? ? ?顯示所有信息 調(diào)試事件信息 Quidwaydebugging hdlc event serial0? ? ? ? ?Quidwaydebugging hdlc packet serial0? ? ? ? ?顯示包的信息 靜態(tài)路由配置案例： Quidwayip route-static <ip><mask>interf

5、ace number|nexthopvaluereject|blackhole 例如： 10.0.0. 動(dòng)態(tài)路由配置案例（RIP）： Quidwayrip Quidwayrip work Quidwayrip input Quidwayrip output Quidway-ripn可以all Quidway-rippeer ip-address Quidway-ripsummary Quidwayrip version Quidwayrip version 2 multicast Quidway-Ethernet0rip split-horizon? ? ? ? ? ;水平分隔 動(dòng)態(tài)路由配置案

6、例（OSPF）： Quidwa配置路由器的ID Quidwayospf enable? ? ? ? ? ? ? ? ? ?啟動(dòng)OSPF協(xié)議 引入直聯(lián)路由Quidway-ospfimport-route direct? ? ? ? ? ? 區(qū)域OSPFQuidway-Serial0ospf enable area <area_id>? ? ?配置標(biāo)準(zhǔn)訪問列表命令格式如下： 默認(rèn)前者順序匹配。acl <acl-number> match-order config|auto? ? ? rule normal|specialpermit|deny source source-a

7、ddr source-wildcard|any 例： Quidwayacl 10 Quidway-acl-10rule normal permit source 10.0.0 Quidway-acl-10rule normal deny source any 配置ACL二、 擴(kuò)展訪問控制列表配置命令1.配置TCP/UDP協(xié)議的擴(kuò)展訪問列表： rule normal|specialpermit|denytcp|udpsource <ip wild>|anydestination <ip wild>|any operate 2.配置ICMP協(xié)議的擴(kuò)展訪問列表： rule n

8、ormal|specialpermit|denyicmp source <ip wild>|anydestination <ip wild>|any icmp-code logging 擴(kuò)展訪問控制列表操作符的含義 等于equal portnumber? ? ? ? ? 大于greater-than portnumber? ? ? 小于 less-than portnumber? ? ? ? ? 不等 not-equal portnumber? ? ? ? ? 區(qū)間range portnumber1 portnumber 3.擴(kuò)展訪問控制列表案例 Quidwayacl

9、10 Quidway-acl-101rule deny souce any destination any Quidway-acl-101rule permit icmp source any destination any icmp-type echo Quidway-acl-101rule permit icmp source any destination any icmp-type echo-reply Quidwayacl 10 Quidway-acl-102rule permit ip source 10.0.0 destination-port equal www Quidway

10、firewall enable Quidwayfirewall default permit|deny Quidwayint e0 Quidway-Ethernet0firewall packet-filter 101 inbound|outbound 4. NAT的配置 地址轉(zhuǎn)換配置案例 Quidwayfirewall enable Quidwayfirewall default permit Quidwayacl 10 Quidway-acl-101rule deny ip source any destination any Quidwayacl 10 1024 Quidway-Ethe

11、rnet0firewall packet-filter 101 inbound Quidway-Serial0firewall packet-filter 102 inbound Quidwayacl Quidway-acl-1rule deny source any Quidway-acl-1int serial 0 Quidway-Serial0nat outbound 1 address-group pool 驗(yàn)證配置：5. PPP主驗(yàn)方：pap|chap Quidwaylocal-user u2 password simple|cipher aaa Quidwayinterface s

12、erial 0 Quidway-serial0ppp authentication-mode pap|chap Quidway-serial0ppp chap user u1? ? ?/pap時(shí)，不用此句 pap被驗(yàn)方： Quidwayinterface serial 0 Quidway-serial0ppp pap local-user u2 password simple|cipher aaa 被驗(yàn)方：chapQuidwayinterface serial 0 Quidway-serial0ppp chap user u1? ? ? Quidway-serial0local-user u2

13、 password simple|cipher aaa ospf R2-ospf-1area 1 R3-ospf-1area 1 ppp pap R2local-user r3 R2-luser-r3password simple 123 R2-luser-r3service-type ppp R2-luser-r3int s 0/2/0 R2-Serial0/2/0ppp authentication-mode pap R3int s 0/2/0 R3-Serial0/2/0ppp pap local-user r3 password simple 123 dhcp R2dhcp enabl

14、e R2dhcp server ip-pool 1 R2-dhcp-pool-1expired day 3 R3dhcp enable R3dhcp server ip-pool 0 R3-dhcp-pool-0expired day 3 telnet R3telnet server enable R3user-interface vty 0 4 R3-ui-vty0-4authentication-mode scheme R3-ui-vty0-4set authentication password simple 123 R3-ui-vty0-4user privilege level 3

15、R3-ui-vty0-4quit R3local-user r3 R3-luser-r3password simple 123 R3-luser-r3service-type telnet R2telnet server enable R2user-interface vty 0 4 R2-ui-vty0-4authentication-mode scheme R2-ui-vty0-4set authentication password simple 123 R2-ui-vty0-4user privilege level 3 R2-ui-vty0-4quit R2local-user r2

16、 R2-luser-r2password simple 123 R2-luser-r2service-type telnet acl 阻止R2 telnet R3 R3firewall enable R3acl number 3000 R3-acl-adv-3000int s 0/2/0 R3-Serial0/2/0firewall packet-filter 3000 inbound R3-Serial0/2/0quit 阻止 SW3 telnet R2 R2acl number 3000 R2-acl-adv-3000quit R2int vlan 3 R2-Vlan-interface3

17、fir R2-Vlan-interface3firewall p R2-Vlan-interface3firewall packet-filter 3000 in R2-Vlan-interface3firewall packet-filter 3000 inbound R2-Vlan-interface3quit R2quit 交換機(jī) SW1super password simple 123 SW1user-interface vty 0 4 SW1-ui-vty0-4authentication-mode password SW1-ui-vty0-4set authentication p

18、assword simple 123 SW1-ui-vty0-4user privilege level 3 端口安全 SW1interface e 0/4/1 SW1-Ethernet0/4/1port-security max-mac-count 10 SW1-Ethernet0/4/1port-security port-mode autolearn SW1-Ethernet0/4/1port-security intrusion-mode disableport-temporarily 端口綁定 SW3int e 0/4/4 vlan配置（交換機(jī)與路由器通過vlan通信） R2vlan 2 R2-vlan2int R2-vlan2int vlan 2 R2-Vlan-interface