神州數(shù)碼交換機(jī)路由器命令匯總(最簡輸入版)

1、神州數(shù)碼交換機(jī)路由器命令匯總(部分2016年3月23日星期三修改_注:本文檔命令為最簡命令,如不懂請?jiān)跈C(jī)器上實(shí)驗(yàn)注:交換機(jī)版本信息:DCRS-5650-28(R4 Device, Compiled on Aug 12 10:58:26 2013sysLocation ChinaCPU Mac 00:03:0f:24:a2:a7Vlan MAC 00:03:0f:24:a2:a6CPLD Version N/ASerial No.:1Copyright (C 2001-2013 by Digital China Networks Limited.All rights reservedLast r

2、eboot is warm reset.Uptime is 0 weeks, 0 days, 1 hours, 42 minutes路由器版本信息:Digital China Networks Limited Internetwork Operating System SoftwareDCR-2659 Series Software, Version 1.3.3H (MIDDLE, RELEASE SOFTWARECopyright 2012 by Digital China Networks(BeiJing LimitedCompiled: 2012-06-07 11:58:07 by sy

3、stem, Image text-base: 0x6004Serial num:8IRTJ610CA15000001, ID num:201404System image file is "DCR-2659_1.3.3H.bin"Digital China-DCR-2659 (PowerPC Processor65536K bytes of memory,16384K bytes of flashRouter uptime is 0:00:44:44, The current time: 2002-01-01 00:44:44Slot 0: SCC SlotPort 0:

4、10/100Mbps full-duplex EthernetPort 1: 2M full-duplex SerialPort 2: 2M full-duplex SerialPort 3: 1000Mbps full-duplex EthernetPort 4: 1000Mbps full-duplex EthernetPort 5: 1000Mbps full-duplex EthernetPort 6: 1000Mbps full-duplex Ethernet一、交換機(jī)配置命令switch>en (enable 進(jìn)入特權(quán)用戶模式 switch # con (config 進(jìn)入全

5、局配置模式switch (config# ho switch (hostname 配置交換機(jī)名稱 switch (config# in e1/0/1 進(jìn)入接口配置模式 switch (config-if-ethernet1/0/1# ex switch (config# in vl 1進(jìn)入VLAN 配置模式switch (config-if-vlan1#ip ad 192.168.1.252 255.255.255.0 switch (config-if-vlan1# exswitch (config# ena p 1234配置交換機(jī)密碼(不加密 switch (config# ena p 7

6、 1234配置交換機(jī)密碼(加密 switch (config# vl 10創(chuàng)建vlan switch (config-vlan10#ex switch (config# in vl 10switch (config-if-vlan10# ip ad 172.16.10.1 255.255.255.0配置VLAN 地址switch(config# sp (spanning-tree啟用全局生成樹(默認(rèn)mstp 生成樹技術(shù) switch(config# sp mo stp/rstp/mstp (生成樹/快速生成樹/多生成樹技術(shù) switch(config# sp ms 0p 4096設(shè)置交換機(jī)的優(yōu)

7、先級默認(rèn)32768 switch (config# sh sp (show spanning-tree 查看生成樹3.交換機(jī)Web 管理switch (config# ip ht serswitch (config# usern admin pa 1234用戶名和密碼4.交換機(jī)Telnet 管理switch (config# telnet-s e (telnet enable開啟telnet 服務(wù) switch (config# usern admin pa 1234用戶名和密碼5.鏈路聚合(不需啟動生成樹switchA(config# port-g 1 (prot-group switchA

8、(config# in e1/0/1-2switchA(config-port-range# po 1 m on/active switchA(config-port-range# ex switchA(config# no port-g 1刪除組1switchB (config# port-g 2 switchB (config# in e1/0/3-4switchB (config-port-range# po 2 m on/active switchB (config-port-range# ex switchB (config# no port-g 2刪除組26.交換機(jī)MAC 與IP

9、綁定switch (config# am e (am enable啟用全局am 功能 switch (config# in e1/0/1switch (config_if_ethernet1/0/1# am p(am port打開端口am 功能switch (config_if_ethernet1/0/1# am m (mac-ip-pool00-A0-D1-D1-07-FF 192.168.1.101 switch (config_if_ethernet1/0/1# ex switch (config# in e1/0/2輸入這條命令會出現(xiàn):Invalid ENCRYPTED passwor

10、d! Please input the ENCRYPTED password with length 32密碼位數(shù)不夠32位switch (config_if_ethernet1/0/2# no am p 解鎖端口靜態(tài)綁定switch (config# in e1/0/1switch (config_if_ethernet1/0/1# sw p (port-security開啟綁定功能switch (config_if_ethernet1/0/1# sw p mac 00-a0-d1- d1-07-ff 添加靜態(tài)MAC地址switch (config_if_ethernet1/0/1# sw

11、p max 4 綁定MAC地址的個(gè)數(shù)(默認(rèn)為1動態(tài)綁定(實(shí)驗(yàn)中交換機(jī)沒有動態(tài)綁定命令switch (config# in e1/0/1switch (config_if_ethernet1/0/1# sw p (port-security開啟綁定功能switch (config_if_ethernet1/0/1# sw port-security lockswitch (config_if_ethernet1/0/1# sw port-security convert 將動態(tài)學(xué)習(xí)到綁定MAC的進(jìn)行綁定switch # sh port-s add 查看綁定的地址switch (config# s

12、ervice dhcp 啟用DHCPswitch (config# ip dh po poolA定義地址池poolAswitch (dhcp-poolA- config# netw (network-address192.168.1.0 24switch (dhcp-poolA- config# le 3租期3天switch (dhcp-poolA- config# ex9.保留地址(一個(gè)地址池中只能配一個(gè)IP-MAC的綁定switch (config# ip dh po poolCswitch (dhcp-poolC- config#ha (hardware-add 00-a0-d1- d1

13、-07-ff綁定的MAC地址switchA(config# ip ac s(standardtest命名標(biāo)準(zhǔn)IP訪問列表switchA(config-std-nacl-test# p (permit a (permit any 允許所有switchA(config-std-nacl-test# exswitchA (config# fir e(firewall enable開啟ACL功能switchA(config# in e1/0/1switchA(config#time-r worktimeswitchA(config-time-range#p (periodicweekd 9:0:0 t

14、o 18:0:0Master BackupswitchA(config#router v 1 switchB(config_router#router v 1switchA(config_router#i v 1 (interface vlan 1switchB (config_router#i v 1switchA(config_router#pri 110switchB(config_router#enaswitchA(config_router#c (circuit-failover v 10 20switchA(config_router#enaDHCP_relay(config#se

15、rvice dhcp全局開啟DHCP服務(wù)DHCP_relay(config#ip fo u b (ip forward-protocol udp bootps全局開啟轉(zhuǎn)發(fā)DHCP_relay(config#in vl 10DHCP_relay(config-if-vlan10#ip h 172.16.1.1 轉(zhuǎn)發(fā)到DHCP服務(wù)器地址DHCP(config#service dhcpDHCP(config#ip dh sn e 開啟DHCP偵聽功能DHCP(config#in e1/0/1DHCP(config-if-ethernet1/0/1#ip d s t (ip dhcp snooping

16、 trust設(shè)置上聯(lián)口為信任口Switch(config#is g test s i e1/0/1-2 (isolate-port group test switchport interface e1/0/1-2e1/0/1-2口不能互相通信,可以和其它端口通信。Switch(config#mo s1s i e1/0/1 both/rx/tx/access-l (monitor session 1 source interface e1/0/1 Switch(config#mo s1d i e1/0/2 (monitor session 1 destination interface e1/0

17、/2Source為被鏡像的地址Destination為鏡像到的地址both為全部流量rx為接收tx為發(fā)送Switch(config#in e1/0/1Switch(config-if-ethernet1/0/1#ba c 10000 both/receive/transmit(bandwidth controlSwitch(config#in e1/0/1Switch(config-if-ethernet1/0/1#ar i192.168.1.254 (arp-guard ip 綁定網(wǎng)關(guān)IPSwitch(config-if-ethernet1/0/1#exSwitch(config#an e

18、(anti-arpscan enable 開啟防ARP掃描Switch(config#an r e (anti-arpscan recovery enable 開啟自動恢復(fù)Switch(config#an r t 3600 (anti-arpscan recovery time 設(shè)置自動恢復(fù)時(shí)間(單位:秒Switch(config#in e1/0/1Switch(config#ip ac e routeSwitch(config-ip-ext-nacl-route#exSwitch(config#cla map (class-map mapSwitch(config-classmap-map#

19、m a route (match access-groupSwitch(config-classmap-map#exSwitch(config#pol map (policy-mapSwitch(config-policymap-map#c map (classSwitch(config-policymap-map-class-map#se ip n 192.168.1.2 設(shè)置下一跳地址Switch(config-policymap-map-class-map#exSwitch(config-policymap-map#exSwitch(config#in e1/0/1Switch(conf

20、ig-if-ethernet1/0/1#ser input/output map 應(yīng)用在接口下Switch# set d (default恢復(fù)出廠配置Switch# wr (write保存配置Switch# rel (reload重啟交換機(jī)_二、路由器配置命令Router>ena 進(jìn)入特權(quán)用戶模式Router#conf進(jìn)入全局配置模式Router_config# in f0/0=默認(rèn)HDLC封裝RA_config#in s0/2 (DCE/V35FCRA_config_s0/2#ph sp 64000 (physical-layer speed配置端口速率(只在DCE端RB_config

21、#in s0/1 (DTE/V35FC= PPP封裝RA_config#in s0/2 (DCE/V35FCRA_config_s0/2#enc p PPP封裝RA_config_s0/2#ph sp 64000 配置端口速率(只在DCE端RB_config#in s0/1 (DTE/V35FCRB_config_s0/1#enc p PPP封裝= PPP封裝CHAP認(rèn)證RA_config#u userb pa 123456 (username password對方用戶名和密碼青島開發(fā)區(qū)職業(yè)中專 RA_config#aa authe pp d local RA_config#in s0/2 R

22、A_config_s0/2#enc p RA_config_s0/2# pp authe c RA_config_s0/2# pp ch h usera 本地認(rèn)證 (DCE/V35FC PPP 封裝 CHAP 認(rèn)證 發(fā)送自己的用戶名 RA_config_s0/2#ip ad 192.168.1.1 255.255.255.0 RA_config_s0/2#pp ch p123456 發(fā)送自己的密碼 RA_config_s0/2#ph sp 64000 配置端口速率（只在 DCE 端） RA 發(fā)送的用戶名和密碼需與 RB 建立的用戶名密碼一致。 RB_config#u usera pa 1234

23、56 RB_config#aa authe pp dlocal RB_config#in s0/1 RB_config_s0/1#enc p RB_config_s0/1# pp authe c RB_config_s0/1# pp ch h userb 對方用戶名和密碼 本地認(rèn)證 (DTE/V35MT PPP 封裝 CHAP 認(rèn)證 發(fā)送自己的用戶名 RB_config_s0/1#ip ad 192.168.1.2 255.255.255.0 RB_config_s0/1# pp ch p 123456 發(fā)送自己的密碼 = PPP 封裝 PAP 認(rèn)證 配置方法同 CHAP 認(rèn)證 RA_conf

24、ig_s0/2#enc p RA_config_s0/2# pp authe p PPP 封裝 PAP 認(rèn)證 RA_config_s0/2# pp pap s usera123456 發(fā)送自己的用戶名和密碼 RB_config_s0/1# enc p RB_config_s0/1# pp authe p RB_config_s0/1# pp pap s userb 123456 = 3.NAT 地址轉(zhuǎn)換 RouterA_config#ip ac snat(ip access-list standard定義訪問控制列表 RouterA_config_std_nacl#p 192.168.0.0

25、255.255.255.0 RouterA_config_std_nacl#ex RouterA_config#ip np poolA 192.168.1.10 192.168.1.20 255.255.255.0 定義轉(zhuǎn)換地址池 poolA RouterA_config#ip n i s l nat p poolA o(ip nat inside source list nat pool poolA overload地址轉(zhuǎn)換 RouterA_config#in f0/0 RouterA_config_f0/0#ip n i RouterA_config_f0/0#in s0/1 Router

26、A_config_s0/1#ip n o 定義 s0/1 為外部接口 定義 f0/0 為內(nèi)部接口 定義允許轉(zhuǎn)換的地址范圍 4.靜態(tài)路由 Router_config# ip route 10.1.2.0 (目標(biāo)網(wǎng)段 255.255.255.0（子網(wǎng)掩碼） 10.1.1.2（轉(zhuǎn)發(fā)地址） 第 6 頁共 8 頁 青島開發(fā)區(qū)職業(yè)中專 Router_config# ip route 0.0.0.0 (目標(biāo)網(wǎng)段 0.0.0.0（子網(wǎng)掩碼）10.1.1.2（轉(zhuǎn)發(fā)地址）默認(rèn)靜態(tài)路由 5.RIP 動態(tài)路由 Router_config# router Router_config_rip# ve 2 r 啟用 RIP

27、 路由 RIP 路由版本號 2 Router_config_rip#no a (auto-summary關(guān)閉路由自動匯總功能 Router_config_rip# net10.1.1.0 255.255.255.0 Router_config_rip# net 10.1.2.0 255.255.255.0 與路由器相連的網(wǎng)段 6.OSPF 動態(tài)路由 Router_config# router o 1 啟動 ospf 進(jìn)程，進(jìn)程號為 1 Router_config_ospf_1# router- 1.1.1.1 (router-id 設(shè)置路由器 router-id Router_config_o

28、spf1# net 10.1.1.0 255.255.255.0 a 0 網(wǎng)段、子網(wǎng)掩碼和區(qū)域號 Router_config_ospf1# net 10.1.2.0 255.255.255.0 a 0 第一個(gè)區(qū)域（即主干區(qū)域）區(qū)域號為 0 Router_config_ospf1# Ctrl+z退到特權(quán)模式快捷鍵 Ctrl+Z Router# sh ip ro 標(biāo)準(zhǔn)訪問控制列表 Router_config#ip ac s access Router_config_std_nacl#den 192.168.1.0 255.255.255.0 (路由器為子網(wǎng)掩碼 Router_config_std_nacl#p a Router_config_std_nacl#ex Router_config#in f0/0 Router_config_f0/0#ip ac access in/out 應(yīng)用在接口下 擴(kuò)展訪問控制列表 Router_config#ip ac e access Router_config_std_nacl#den ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0 Rou