2-1 VRP系統(tǒng)路由器信息

2024/3/26之VRP系統(tǒng)泰克路由交換精英培訓(xùn)前言

通用路由平臺(tái)VRP（VersatileRoutingPlatform）是華為公司數(shù)據(jù)通信產(chǎn)品的通用操作系統(tǒng)平臺(tái)，它以IP業(yè)務(wù)為核心，采用組件化的體系結(jié)構(gòu)，在實(shí)現(xiàn)豐富功能特性的同時(shí)，還提供了基于應(yīng)用的可裁剪和可擴(kuò)展的功能，使得路由器和交換機(jī)的運(yùn)行效率大大增加。能對(duì)VRP熟練地進(jìn)行配置和操作是對(duì)網(wǎng)絡(luò)工程師的一種基本要求。學(xué)習(xí)目標(biāo)

學(xué)完本課程后，您應(yīng)該能：掌握交換機(jī)和路由器的應(yīng)用場(chǎng)景掌握沖突域和廣播域的區(qū)別了解VRP的基礎(chǔ)知識(shí)VRP介紹無(wú)線交換網(wǎng)管安全路由VRP的發(fā)展集中式設(shè)計(jì)適用中低端設(shè)備性能比較低分布式設(shè)計(jì)分布式平臺(tái)支持眾多特性支持核心路由器組件化設(shè)計(jì)應(yīng)用于華為多個(gè)產(chǎn)品高性能多進(jìn)程組件化設(shè)計(jì)支持多CPU、多框1998-20011999-20002000-20042004-Now2009-Now集中式分布式高可靠性多進(jìn)程、多框、多核VRP1VRP2VRP3VRP5VRP8設(shè)備管理接口ConsoleMiniUSBAR2200ES5720ConsoleConsole口登錄主機(jī)ARTAConsole線Console口COM口參數(shù)配置PressanykeytogetstartedLoginauthenticationUsername:adminPassword:Warning:Thereisariskinthecurrentconfigurationfile.Pleasesaveconfigurationassoonaspossible.<Huawei>Warning:Auto-Configisworking.Beforeconfiguringthedevice,stopAuto-Config.IfyouperformconfigurationswhenAuto-Configisrunning,theDHCP,routing,DNS,andVTYconfigurationswillbelost.DoyouwanttostopAuto-Config?[y/n]:yInfo:Auto-Confighasbeenstopped.<Huawei>MiniUSB口登錄主機(jī)ARTAUSB線MiniUSB口USBMiniUSB驅(qū)動(dòng)安裝參數(shù)配置PressanykeytogetstartedLoginauthenticationUsername:adminPassword:Warning:Thereisariskinthecurrentconfigurationfile.Pleasesaveconfigurationassoonaspossible.<Huawei>Warning:Auto-Configisworking.Beforeconfiguringthedevice,stopAuto-Config.IfyouperformconfigurationswhenAuto-Configisrunning,theDHCP,routing,DNS,andVTYconfigurationswillbelost.DoyouwanttostopAuto-Config?[y/n]:yInfo:Auto-Confighasbeenstopped.<Huawei>設(shè)備初始化啟動(dòng)Page12BIOSCreationDate:Jan52013,18:00:24DDRDRAMinit:OKStartMemoryTest?('t'or'T'istest):skipCopyingData:DoneUncompressing:Done……PressCtrl+Btobreakautostartup...1Nowbootfromflash:/AR2220E-V200R007C00SPC600.cc,……<Huawei>Warning:Auto-Configisworking.Beforeconfiguringthedevice,stopAuto-Config.IfyouperformconfigurationswhenAuto-Configisrunning,theDHCP,routing,DNS,andVTYconfigurationswillbelost.DoyouwanttostopAuto-Config?[y/n]:Y命令行視圖接口視圖用戶視圖系統(tǒng)視圖協(xié)議視圖查看運(yùn)行狀態(tài)或其他參數(shù)配置設(shè)備的系統(tǒng)參數(shù)等配置接口參數(shù)配置路由協(xié)議<Huawei>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Huawei]interfaceGigabitEthernet0/0/0[Huawei-GigabitEthernet0/0/0]命令行功能命令功能CTRL+A把光標(biāo)移動(dòng)到當(dāng)前命令行的最前端CTRL+C停止當(dāng)前命令的運(yùn)行CTRL+Z回到用戶視圖CTRL+]終止當(dāng)前連接或切換連接<Huawei>system-view

Entersystemview,returnuserviewwithCtrl+Z.[Huawei]^z//Ctrl+Z<Huawei>命令行功能命令功能Backspace刪除光標(biāo)左邊的第一個(gè)字符←orCtrl+B光標(biāo)左移一位→orCtrl+F光標(biāo)右移一位TAB輸入一個(gè)不完整的命令并按TAB鍵，就可以補(bǔ)全該命令[Huawei]inter//TAB[Huawei]interface命令行在線幫助命令行在線幫助部分幫助<Huawei>d?<Huawei>displayh?完全幫助<Huawei>?<Huawei>display?[Huawei]d?

ddns

dhcp

dhcpv6diagnose

display

dns

domaindot1x基本配置步驟命令功能sysname配置設(shè)備名稱<Huawei>system-viewEntersystemview,returnuserviewwithCtrl+Z.[Huawei]sysnameRTA[RTA]配置系統(tǒng)時(shí)鐘命令功能clocktimezone設(shè)置所在時(shí)區(qū)clockdatetime設(shè)置當(dāng)前時(shí)間和日期clockdaylight-saving-time設(shè)置采用夏時(shí)制<Huawei>clocktimezoneBJadd08:00:00<Huawei>clockdatetime10:20:292016-04-11<Huawei>displayclock2016-04-1110:20:48ThursdayTimeZone(BJ):UTC+08:00命令功能headerlogin配置在用戶登陸前顯示的標(biāo)題消息headershell配置在用戶登陸后顯示的標(biāo)題消息配置標(biāo)題消息[Huawei]headerlogininformation"welcometohuaweicertification!"[Huawei]headershellinformation"Pleasedon'trebootthedevice!"……welcometohuaweicertification!LoginauthenticationPassword:Pleasedon'trebootthedevice!<Huawei>命令等級(jí)用戶等級(jí)命令等級(jí)名稱00訪問(wèn)級(jí)10and1監(jiān)控級(jí)20,1and2配置級(jí)3-150,1,2and3管理級(jí)<Huawei>system-view[Huawei]command-privilegelevel3viewusersave用戶界面類型編號(hào)Console0VTY0-4用戶界面VTY接口最大可配范圍為0-14。<Huawei>system-view[Huawei]user-interfacevty04[Huawei-ui-vty0-4]配置用戶界面命令命令功能idle-timeout設(shè)置超時(shí)時(shí)間10screen-length設(shè)置指定終端屏幕的臨時(shí)顯示行數(shù)24history-commandmax-size設(shè)置歷史命令緩沖區(qū)的大小10#Setthesizeofthehistorycommandbufferto20.<Huawei>system-view[Huawei]user-interfaceconsole0[Huawei-ui-console0]history-commandmax-size20#Setthetimeoutdurationto1minuteand30seconds.[Huawei-ui-console0]idle-timeout130配置登陸權(quán)限命令功能userprivilege配置指定用戶界面下的用戶級(jí)別setauthenticationpassword配置本地認(rèn)證密碼#SettheuserlevelontheVTY0userinterfaceto2.<Huawei>system-view[Huawei]user-interfacevty0[Huawei-ui-vty0]userprivilegelevel2[Huawei-ui-vty0]setauthenticationpasswordcipherEnterPassword(<8-128>):huawei123配置接口IP地址RTARTBG0/0/0G0/0/0#ConfigureanIPaddress/24andanIPaddress/32forLoopBack0.<Huawei>system-view[Huawei]interfacegigabitethernet0/0/0[Huawei-GigabitEthernet0/0/0]ipaddress[Huawei-GigabitEthernet0/0/0]interfaceloopback0[Huawei-LoopBack0]ipaddress32/24/32基本查詢命令功能命令查看當(dāng)前目錄pwd顯示當(dāng)前目錄下的文件信息dir查看文本文件的具體內(nèi)容more<Huawei>dirDirectoryofflash:/

IdxAttrSize(Byte)DateTimeFileName

0drw--Apr10201609:30:35src

1-rw-28Apr10201609:31:38private-data.txt

2-rw-120Apr10201609:32:38wzbk1.cfg……32,004KBtotal(31,995KBfree)目錄操作功能命令修改用戶當(dāng)前界面的工作目錄cd創(chuàng)建新的目錄mkdir刪除目錄rmdir<Huawei>mkdirtestInfo:Createdirectoryflash:/testDone.<Huawei>dirDirectoryofflash:/

IdxAttrSize(Byte)DateTimeFileName

0drw--Apr10201609:30:35src

1-rw-28Apr10201609:31:38private-data.txt

2-rw-120Apr10201609:32:38wzbk1.cfg3drw--Apr10201609:53:11test……32,004KBtotal(31,995KBfree)文件操作功能命令復(fù)制文件copy移動(dòng)文件move重命名文件rename<Huawei>renametest.txthuawei.txtRenameflash:/test.txttoflash:/huawei.txt?[Y/N]:yInfo:Renamefileflash:/test.txttoflash:/huawei.txtDone.<Huawei>dirDirectoryofflash:/

IdxAttrSize(Byte)DateTimeFileName

0drw--Apr10201609:30:35src

1-rw-28Apr10201609:31:38private-data.txt

2-rw-120Apr10201609:32:38wzbk1.cfg

3-rw-12Apr10201609:53:11huawei.txt……32,004KBtotal(31,995KBfree)文件操作功能命令刪除/永久刪除文件delete

/unreserved恢復(fù)刪除的文件undelete徹底刪除回收站中的文件resetrecycle-bin<Huawei>delete/unreservedflash:/huawei.txt

<Huawei>dirDirectoryofflash:/

IdxAttrSize(Byte)DateTimeFileName

0drw--Apr10201609:30:35src

1-rw-28Apr10201609:31:38private-data.txt

2-rw-120Apr10201609:32:38wzbk1.cfg……32,004KBtotal(30,995KBfree)配置文件管理RAMCurrent-ConfigurationFileFlash/SD卡Saved-ConfigurationFile保存加載設(shè)備啟動(dòng)時(shí)，會(huì)加載保存的配置文件到RAM，并作為當(dāng)前配置文件。配置文件查詢<Huawei>displaycurrent-configuration#sysnameHuawei……#Return<Huawei>displaysaved-configuration#sysnameHuawei……#Return功能命令顯示當(dāng)前配置文件displaycurrent-configuration顯示保存的配置文件displaysaved-configuration配置文件保存<Huawei>saveThecurrentconfigurationwillbewrittentothedevice.Areyousuretocontinue?(y/n)[n]:yItwilltakeseveralminutestosaveconfigurationfile,pleasewaitConfigurationfilehadbeensavedsuccessfullyNote:Theconfigurationfilewilltakeeffectafterbeingactivated功能命令保存當(dāng)前配置信息save系統(tǒng)啟動(dòng)文件查詢<Huawei>displaystartupMainBoard:Startupsystemsoftware:flash:/AR2220E-V200R007C00SPC600.ccNextstartupsystemsoftware:flash:/AR2220E-V200R007C00SPC600.ccBackupsystemsoftwarefornextstartup:nullStartupsaved-configurationfile:flash:/vrpcfg.zipNextstartupsaved-configurationfile:flash:/vrpcfg.zipStartuplicensefile:

nullNextstartuplicensefile:nullStartuppatchpackage:

nullNextstartuppatchpackage:nullStartupvoice-files:nullNextstartupvoice-files:

null功能命令查看系統(tǒng)啟動(dòng)配置參數(shù)displaystartup系統(tǒng)啟動(dòng)配置文件修改<Huawei>startupsaved-configurationflash:/huawei.zipThisoperationwilltakeseveralminutes,pleasewaitInfo:Succeededinsettingtheconfigurationforbootingsystem.<Huawei>displaystartupMainBoard:Startupsystemsoftware:flash:/ar2220E-V200R007C00SPC600.ccNextstartupsystemsoftware:flash:/ar2220E-V200R007C00SPC600.ccStartupsaved-configurationfile:flash:/vrpcfg.zipNextstartupsaved-configurationfile:flash:/huawei.zipStartuppaffile:

NULLNextstartuppaffile:NULLStartuplicensefile:

NULLNextstartuplicensefile:NULLStartuppatchpackage:NULLNextstartuppatchpackage:NULL功能命令配置系統(tǒng)下次啟動(dòng)時(shí)使用的配置文件startupsaved-configuration比較當(dāng)前配置和保存的配置<Huawei>compareconfiguration======Currentconfigurationline36======

ipaddress#interfaceGigabitEthernet0/0/2#interfaceGigabitEthernet0/0/3#interfaceNULL0

======Configurationfileline37======interfaceGigabitEthernet0/0/2#interfaceGigabitEthernet0/0/3#……功能命令比較當(dāng)前配置與下次啟動(dòng)的配置compareconfiguration配置文件重置<Huawei>resetsaved-configurationWarning:Thiswilldeletetheconfigurationintheflashmemory.Thedeviceconfigurationswillbeerasedtoreconfigure.Areyousoure?[Y/N]:yInfo:Cleartheconfigurationinthedevicesuccessfully.功能命令清除下次啟動(dòng)時(shí)加載的配置文件resetsaved-configuration存儲(chǔ)設(shè)備SDRAMFlashNVRAMSDCardUSB<Huawei>displayversion……SDRAMMemorySize:1024MbytesFlashMemorySize:512MbytesNVRAMMemorySize:512Kbytes……存儲(chǔ)設(shè)備修復(fù)<Huawei>fixdiskflash:Fixdiskflash:willtakelongtimeifneeded%Fixdiskflash:completed.<Huawei>fixdisksd1:sd1:/-diskcheckinprogress……%Fixdisksd1:completed.當(dāng)存儲(chǔ)設(shè)備的文件系統(tǒng)出現(xiàn)異常時(shí)，可以通過(guò)fixdisk命令進(jìn)行修復(fù)。存儲(chǔ)設(shè)備格式化<Huawei>formatflash:Alldata(includeconfigurationandsystemstartupfile)onflash:willbelost,proceedwithformat?(y/n)[n]:<Huawei>formatsd1:Alldata(includeconfigurationandsystemstartupfile)onsd1:willbelost,proceedwithformat?(y/n)[n]:格式化會(huì)導(dǎo)致數(shù)據(jù)丟失！升級(jí)VRPVRPVersion5.160VRPVersion5.90隨著VRP版本的更新，VRP支持的特性也越來(lái)越多，可根據(jù)需求更新VRP版本。文件傳輸RTAFTP服務(wù)器VRP文件日志文件配置文件網(wǎng)絡(luò)設(shè)備可以從服務(wù)器獲取VRP系統(tǒng)文件，也可以將日志文件、配置文件保存到服務(wù)器作為備份。文件傳輸協(xié)議RTAFTP服務(wù)器TCP連接FTPRTBTFTP服務(wù)器TFTP(UDP)常用的文件傳輸協(xié)議有FTP和TFTP兩種。VRP系統(tǒng)文件更新配置-與FTP服務(wù)器連通FTPFTP服務(wù)器RTAG0/0/1/24/24<huawei>system-view[huawei]sysnameRTA[RTA]interfaceGigabitEthernet0/0/1[RTA-GigabitEthernet0/0/1]ipaddress24……VRP系統(tǒng)文件更新配置-查看剩余存儲(chǔ)空間當(dāng)剩余存儲(chǔ)空間不足時(shí)，可以刪除無(wú)關(guān)的VRP文件或其他文件以釋放空間。<RTA>dir……508,248KBtotal(2,334KBfree)<RTA>delete/unreservedflash:/ar2220E_v100r006c00.cc……FTPFTP服務(wù)器RTAG0/0/1/24/24VRP系統(tǒng)文件更新配置-從FTP服務(wù)器獲取VRP<RTA>ftpTrying...PressCTRL+KtoabortConnectedto.220FTPserviceready.User(:(none)):huawei331Passwordrequiredforhuawei.Enterpassword:230Userloggedin.[ftp]getAR2220E-V200R007C00SPC600.ccFTPFTP服務(wù)器RTAG0/0/1/24/24VRP系統(tǒng)文件更新配置-從TFTP服務(wù)器獲取VRP<RTA>tftpgetAR2220E-V200R003C00SPC600.ccTFTPTFTP服務(wù)器RTBG0/0/1/24/24ARG3路由器只需使用上述命令即可從TFTP服務(wù)器獲取VRP文件。VRP系統(tǒng)文件更新配置-指定下次啟動(dòng)時(shí)加載的VRP<RTA>startupsystem-softwareAR2220E-V200R007C00SPC600.ccInfo:Succeededinsettingthesoftwareforbootingsystem<RTA>displaystartupMainBoard:Startupsystemsoftware:flash:/ar2220E_V200R007C00SPC600.cc

Nextstartupsystemsoftware:flash:/ar2220E_V200R007C00SPC600.ccStartupsaved-configurationfile:

NULL

Nextstartupsaved-configurationfile:NULL……

FTPFTP服務(wù)器RTAG0/0/1/24/24VRP系統(tǒng)文件更新配置-重啟設(shè)備設(shè)備在重啟后，將會(huì)加載新的VRP系統(tǒng)。FTPFTP服務(wù)器RTAG0/0/1/24/24<RTA>reboot

Info:Thesystemisnowcomparingtheconfiguration,pleasewait.Warning:Alltheconfigurationwillbesavedtotheconfigurationfileforthenextstartup,Continue?[Y/N]:nSystemwillreboot!Continue?[Y/N]:yFTP的應(yīng)用FTP客戶端FTP服務(wù)器VRPFTP客戶端FTP服務(wù)器日志文件配置文件FTP提供了一種在服務(wù)器和客戶機(jī)之間上傳和下載文件的有效方式。FTP傳輸文件的過(guò)程用戶用戶接口控制進(jìn)程數(shù)據(jù)傳輸進(jìn)程文件系統(tǒng)控制進(jìn)程數(shù)據(jù)傳輸進(jìn)程文件系統(tǒng)客戶端服務(wù)器控制連接數(shù)據(jù)連接使用FTP傳輸數(shù)據(jù)時(shí)，需要在服務(wù)器和客戶機(jī)之間建立控制連接和數(shù)據(jù)連接。FTP傳輸模式傳輸模式ASCII模式二進(jìn)制模式傳輸模式定義了數(shù)據(jù)在客戶端和服務(wù)器之間傳輸時(shí)的格式。FTP配置[Huawei]ftpserverenable[Huawei]setdefaultftp-directoryflash:/FTP客戶端FTP服務(wù)器/24FTP配置FTP服務(wù)器[Huawei]aaa[Huawei-aaa]local-userhuaweipasswordcipherhuawei12[Huawei-aaa]local-userhuaweiservice-typeftp[Huawei-aaa]local-userhuaweiftp-directoryflash:/[Huawei-aaa]local-userhuaweiaccess-limit200[Huawei-aaa]local-userhuaweiidle-timeout00[Huawei-aaa]local-userhuaweiprivilegelevel3FTP客戶端/24FTP配置<Huawei>ftpTrying...PressCTRL+KtoabortConnectedto.220FTPserviceready.User(:(none)):huawei331Passwordrequiredforhuawei.Enterpassword:230Userloggedin.

[ftp]binary200TypesettoI.[ftp]getvrp.cc/24FTP服務(wù)器FTP客戶端/24Telnet應(yīng)用場(chǎng)景Telnet客戶端本地配置環(huán)境Telnet服務(wù)器Telnet服務(wù)器Telnet客戶端遠(yuǎn)程配置環(huán)境Telnet可以通過(guò)終端對(duì)本地和遠(yuǎn)程的網(wǎng)絡(luò)設(shè)備進(jìn)行集中管理。Telnet服務(wù)器Telnet連接Telnet客戶端偽終端驅(qū)動(dòng)TCP/IP終端驅(qū)動(dòng)TCP/IPTCPTelnet客戶端和服務(wù)器基于TCP連接來(lái)傳輸命令。認(rèn)證模式認(rèn)證模式描述AAAAAA認(rèn)證Password登錄時(shí)只通過(guò)密碼實(shí)現(xiàn)認(rèn)證Telnet配置Telnet客戶端/24Telnet服務(wù)器/24Ethernet2/0/0[Huawei]interfaceEthernet2/0/0

[Huawei-Ethernet2/0/0]ipaddress24[Huawei]user-interfacevty04[Huawei-ui-vty0-4]authentication-modepassword

[Huawei-ui-vty0-4]setauthenticationpasswordcipherEnterPassword(<8-128>):huawei12Telnet配置Telnet客戶端/24Telnet服務(wù)器/24Ethernet2/0/0<Host>telnetTrying...PressCTRL+KtoabortConnectedto...LoginauthenticationPassword:Info:ThemaxnumberofVTYusersis10,andthenumber

ofcurrentVTYusersonlineis1.

Thecurrentlogintimeis2013-04-1916:32:00.<Huawei>前言

AAA是Authentication（認(rèn)證）、Authorization（授權(quán)）和Accounting（計(jì)費(fèi)）的簡(jiǎn)稱，它提供了認(rèn)證、授權(quán)、計(jì)費(fèi)三種安全功能。AAA可以通過(guò)多種協(xié)議來(lái)實(shí)現(xiàn)，目前華為設(shè)備支持基于RADIUS（RemoteAuthenticationDial-InUserService）協(xié)議或HWTACACS（HuaweiTerminalAccessControllerAccessControlSystem）協(xié)議來(lái)實(shí)現(xiàn)AAA。AAA應(yīng)用場(chǎng)景企業(yè)總部AAA服務(wù)器NASAAA提供對(duì)用戶進(jìn)行認(rèn)證、授權(quán)和計(jì)費(fèi)三種安全功能。企業(yè)分支服務(wù)器A服務(wù)器B認(rèn)證主機(jī)A服務(wù)器A服務(wù)器B用戶名和密碼

用戶名密碼主機(jī)AHuawei123主機(jī)XPass123……RTANAS認(rèn)證：驗(yàn)證用戶是否可以獲得網(wǎng)絡(luò)訪問(wèn)的權(quán)限。AAA支持的認(rèn)證方式有：不認(rèn)證，本地認(rèn)證，遠(yuǎn)端認(rèn)證。AAA服務(wù)器認(rèn)證成功/失敗授權(quán)設(shè)備組用戶組時(shí)間權(quán)限級(jí)別Privateadmin09:00-12:00