華為eNSP模擬器命令

1、華為模擬器命令計(jì)算機(jī)命令PCA login: root ；使用root用戶 password: linux ；口令是linux# shutdown -h now ；關(guān)機(jī)# init 0 ；關(guān)機(jī)# logout ；用戶注銷# login ；用戶登錄# ifconfig ；顯示IP地址# ifconfig eth0 netmask ；設(shè)置IP地址# ifconfig eht0 netmask down ；禁用IP地址# route add gw ；設(shè)置網(wǎng)關(guān)# route del gw ；刪除網(wǎng)關(guān)# route add default gw ；設(shè)置網(wǎng)關(guān)# route

2、del default gw ；刪除網(wǎng)關(guān)# route ；顯示網(wǎng)關(guān)# ping ；發(fā)ECHO包# telnet ；遠(yuǎn)程登錄交換機(jī)命令Huaweidis cur ；顯示當(dāng)前配置Huaweidisplay current-configuration ；顯示當(dāng)前配置Huaweidisplay interfaces ；顯示接口信息Huaweidisplay vlan all ；顯示路由信息Huaweidisplay version ；顯示版本信息Huaweisuper password ；修改特權(quán)用戶密碼Huaweisysname ；交換機(jī)命名Huaweiinterface ethernet 0/1

3、；進(jìn)入接口視圖Huaweiinterface vlan x ；進(jìn)入接口視圖Huawei-Vlan-interfacexip address ；配置VLAN的IP地址Huaweiip route-static ；靜態(tài)路由網(wǎng)關(guān)Huaweirip ；三層交換支持Huaweilocal-user ftpHuaweiuser-interface vty 0 4 ；進(jìn)入虛擬終端S3026-ui-vty0-4authentication-mode password ；設(shè)置口令模式S3026-ui-vty0-4se

4、t authentication-mode password simple 222 ；設(shè)置口令S3026-ui-vty0-4user privilege level 3 ；用戶級別Huaweiinterface ethernet 0/1 ；進(jìn)入端口模式Huaweiint e0/1 ；進(jìn)入端口模式Huawei-Ethernet0/1duplex half|full|auto ；配置端口工作狀態(tài)Huawei-Ethernet0/1speed 10|100|auto ；配置端口工作速率Huawei-Ethernet0/1flow-control ；配置端口流控Huawei-Ethernet0/1md

5、i across|auto|normal ；配置端口平接扭接Huawei-Ethernet0/1port link-type trunk|access|hybrid ；設(shè)置端口工作模式Huawei-Ethernet0/1port access vlan 3 ；當(dāng)前端口加入到VLANHuawei-Ethernet0/2port trunk permit vlan ID|All ；設(shè)trunk允許的VLANHuawei-Ethernet0/3port trunk pvid vlan 3 ；設(shè)置trunk端口的PVIDHuawei-Ethernet0/1undo shutdown ；激活端口Huaw

6、ei-Ethernet0/1shutdown ；關(guān)閉端口Huawei-Ethernet0/1quit ；返回Huaweivlan 3 ；創(chuàng)建VLANHuawei-vlan3port ethernet 0/1 ；在VLAN中增加端口Huawei-vlan3port e0/1 ；簡寫方式Huawei-vlan3port ethernet 0/1 to ethernet 0/4 ；在VLAN中增加端口Huawei-vlan3port e0/1 to e0/4 ；簡寫方式Huaweimonitor-port ；指定鏡像端口Huaweiport mirror ；指定被鏡像端口Huaweiport mir

7、ror int_list observing-port int_type int_num ；指定鏡像和被鏡像Huaweidescription string ；指定VLAN描述字符Huaweidescription ；刪除VLAN描述字符Huaweidisplay vlan vlan_id ；查看VLAN設(shè)置Huaweistp enable|disable ；設(shè)置生成樹,默認(rèn)關(guān)閉Huaweistp priority 4096 ；設(shè)置交換機(jī)的優(yōu)先級Huaweistp root primary|secondary ；設(shè)置為根或根的備份Huawei-Ethernet0/1stp cost 200 ；

8、設(shè)置交換機(jī)端口的花費(fèi)Huaweilink-aggregation e0/1 to e0/4 ingress|both ；端口的聚合Huaweiundo link-aggregation e0/1|all ；始端口為通道號SwitchA-vlanxisolate-user-vlan enable ；設(shè)置主vlanSwitchAisolate-user-vlan secondary ；設(shè)置主vlan包括的子vlanHuawei-Ethernet0/2port hybrid pvid vlan ；設(shè)置vlan的pvidHuawei-Ethernet0/2port hybrid pvid ；刪除vla

9、n的pvidHuawei-Ethernet0/2port hybrid vlan vlan_id_list untagged ；設(shè)置無標(biāo)識的vlan如果包的vlan id與PVId一致，則去掉vlan信息. 默認(rèn)PVID=1。所以設(shè)置PVID為所屬vlan id, 設(shè)置可以互通的vlan為untagged.路由器命令Huaweidisplay version ；顯示版本信息Huaweidisplay current-configuration ；顯示當(dāng)前配置Huaweidisplay interfaces ；顯示接口信息Huaweidisplay ip route ；顯示路由信息Huaweis

10、ysname aabbcc ；更改主機(jī)名Huaweisuper passwrod 123456 ；設(shè)置口令Huaweiinterface serial0 ；進(jìn)入接口Huawei-serial0ip address ；配置端口IP地址Huawei-serial0undo shutdown ；激活端口Huaweilink-protocol hdlc ；綁定hdlc協(xié)議Huaweiuser-interface vty 0 4Huawei-ui-vty0-4authentication-mode passwordHuawei-ui-vty0-4set authentication-mode passw

11、ord simple 222Huawei-ui-vty0-4user privilege level 3Huawei-ui-vty0-4quitHuaweidebugging hdlc all serial0 ；顯示所有信息Huaweidebugging hdlc event serial0 ；調(diào)試事件信息Huaweidebugging hdlc packet serial0 ；顯示包的信息靜態(tài)路由：Huaweiip route-static interface number|nexthopvaluereject|blackhole例如：Huaweiip route-static 129.1.

12、0.0 16 Huaweiip route-static Huaweiip route-static 16 Serial 2Huaweiip route-static 動態(tài)路由：Huaweirip ；設(shè)置動態(tài)路由Huaweirip work ；設(shè)置工作允許Huaweirip input ；設(shè)置入口允許Huaweirip output ；設(shè)置出口允許Huawei-ripnetwork ；設(shè)置交換路由網(wǎng)絡(luò)Huawei-ripnetwork

13、all ；設(shè)置與所有網(wǎng)絡(luò)交換Huawei-rippeer ip-address ；Huawei-ripsummary ；路由聚合Huaweirip version 1 ；設(shè)置工作在版本1Huaweirip version 2 multicast ；設(shè)版本2，多播方式Huawei-Ethernet0rip split-horizon ；水平分隔Huaweirouter id A.B.C.D ；配置路由器的IDHuaweiospf enable ；啟動OSPF協(xié)議Huawei-ospfimport-route direct ；引入直聯(lián)路由Huawei-Serial0ospf enable area

14、 ；配置OSPF區(qū)域標(biāo)準(zhǔn)訪問列表命令格式如下：acl match-order config|auto ；默認(rèn)前者順序匹配。rule normal|specialpermit|deny source source-addr source-wildcard|any例：Huaweiacl 10Huawei-acl-10rule normal permit source 55Huawei-acl-10rule normal deny source any擴(kuò)展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴(kuò)展訪問列表：rule normal|specialpermit|de

15、nytcp|udpsource |anydestination |anyoperate配置ICMP協(xié)議的擴(kuò)展訪問列表：rule normal|specialpermit|denyicmp source |anydestination |anyicmp-code logging擴(kuò)展訪問控制列表操作符的含義equal portnumber ；等于greater-than portnumber ；大于less-than portnumber ；小于not-equal portnumber ；不等range portnumber1 portnumber2 ；區(qū)間擴(kuò)展訪問控制列表舉例Huaweiacl

16、101Huawei-acl-101rule deny souce any destination anyHuawei-acl-101rule permit icmp source any destination any icmp-type echoHuawei-acl-101rule permit icmp source any destination any icmp-type echo-replyHuaweiacl 102Huawei-acl-102rule permit ip source destination Hua

17、wei-acl-102rule deny ip source any destination anyHuaweiacl 103Huawei-acl-103rule permit tcp source any destination destination-port equal ftpHuawei-acl-103rule permit tcp source any destination destination-port equal wwwHuaweifirewall enableHuaweifirewall default p

18、ermit|denyHuaweiint e0Huawei-Ethernet0firewall packet-filter 101 inbound|outbound地址轉(zhuǎn)換配置舉例Huaweifirewall enableHuaweifirewall default permitHuaweiacl 101 ；內(nèi)部指定主機(jī)可以進(jìn)入e0Huawei-acl-101rule deny ip source any destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101rul

19、e permit ip source 0 destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101quitHuaweiint e0Huawei-Ethernet0firewall packet-filter 101 inboundHuaweiacl 102 ；外部特定主機(jī)和大于1024端口的數(shù)據(jù)包允許進(jìn)入S0Huawe

20、i-acl-102rule deny ip source any destination anyHuawei-acl-102rule permit tcp source 0 destination 0Huawei-acl-102rule permit tcp source any destination 0 destination-port great-than1024Huawei-acl-102quitHuaweiint s0Huawei-Serial0firewall packet-filter 102 inboun

21、d ；設(shè)是路由器出口IP。Huawei-Serial0nat outbound 101 interface ；是Easy ip，將acl 101允許的IP從本接口出時變換源地址。內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令(靜態(tài)nat)：nat server global port inside port protocol ；global_port不寫時使用inside_portHuawei-Serial0nat server global inside ftp tcpHuawei-Serial0nat server global 202.

22、38.160.1 inside telnet tcpHuawei-Serial0nat server global inside www tcp設(shè)有公網(wǎng)IP：0103 可以使用。 ；對外訪問(原例題)Huaweinat address-group 01 03 pool1 ；建立地址池Huaweiacl 1Huawei-acl-1rule permit source 55 ；指定允許的內(nèi)部網(wǎng)絡(luò)H

23、uawei-acl-1rule deny source anyHuawei-acl-1int serial 0Huawei-Serial0nat outbound 1 address-group pool1 ；在s0口從地址池取出IP對外訪問Huawei-Serial0nat server global 01 inside ftp tcpHuawei-Serial0nat server global 02 inside www tcpHuawei-Serial0nat server global 2

24、002 8080 inside www tcpHuawei-Serial0nat server global 03 inside smtp udpPPP設(shè)置：Huawei-s0link-protocol ppp ；默認(rèn)的協(xié)議PPP驗(yàn)證：主驗(yàn)方：pap|chapHuaweilocal-user q2 password simple|cipher hello ；路由器1Huaweiinterface serial 0Huawei-serial0ppp authentication-mode pap|chap

25、Huawei-serial0ppp chap user q1 ；pap時，沒有此句pap被驗(yàn)方：Huaweiinterface serial 0 ；路由器2Huawei-serial0ppp pap local-user q2 password simple|cipher hellochap被驗(yàn)方：Huaweiinterface serial 0 ；路由器2Huawei-serial0ppp chap user q2 ；自己路由器名Huawei-serial0local-user q1 password simple|cipher hello ;對方路由器名幀中繼frame-relay (二分冊6-61)q1fr switchingq1in