华为命令手册

1、华为交换机命令手册PCA login: root；使用 root 用户password: linux ；口令是 linux# shutdown -h now ；关机# init 0 ；关机# logout# login# ifconfig ；显示 IP 地址# ifconfig eth0 netmask ；设置 IP 地址# ifconfig eht0 netmask down ;删除 IP 地址# route add gw # route del gw # route add default gw ；设置网关# route del default gw ；删除

2、网关# route ；显示网关# ping # telnet ；建议 telnet、.、F、八-I之前先 ping 一下交换机命令Quidwaysuper password 修改特权用户密码Quidwaysysname 交换机命名Quidwayinterface ethernet 0/1 进入接口视图Quidwayinterface vlan x 进入接口视图Quidway-Vlan-interfacexip address Quidwayip route-static 静态路由=网关Quidwayuser-interface vty 0 4S

3、3026-ui-vty0-4authentication-mode passwordS3026-ui-vty0-4set authentication-mode password simple 222S3026-ui-vty0-4user privilege level 3Quidway-Ethernet0/1duplex half|full|auto配置端口双工工作状态Quidway-Ethernet0/1speed 10|100|auto配置端口工作速率Quidway-Ethernet0/1flow-control配置端口流控Quidway-Ethernet0/1mdi across|au

4、to|normal配置端口 MDI/MDIX 状态平接或扭接Quidway-Ethernet0/1port link-type trunk|access|hybrid设置接口工作模式Quidway-Ethernet0/1shutdown 关闭/ 重起接口Quidway-Ethernet0/2quit 退出系统视图Quidwayvlan 3创立/删除一个VLAN进入VLAN模式在当前VLAN增加/删除以Quidway-vlan3port ethernet 0/1 to ethernet 0/4太网接口Quidway-Ethernet0/2port access vlan 3 将当前接口参加到指定

5、 VLANQuidway-Ethernet0/2port trunk permit vlan ID|All设 trunk 允许的 VLANQuidway-Ethernet0/2port trunk pvid vlan 3设置 trunk 端口的 PVID指定和去除镜像端口指定和去除被镜像端口指定镜像和Quidwaymonitor-port Quidwayport mirror Quidwayport mirror int_list observing-port int_type int_num被镜像Quidwaydescription string指定 VLAN苗述字符Quidwaydescr

6、iption 删除 VLAN苗述字符Quidwaydisplay vlan vland查看 VLAN设置Quidwaystp enable|disable 开启 / 关闭生成树 , 默认关闭Quidwaystp priority 4096设置交换机的优先级Quidwaystp root primary|secondary设置交换机为根或根的备份Quidway-Ethernet0/1stp cost 200设置交换机端口的花费SwitchA-vlanxisolate-user-vlan enable设置主 vlanSwitchAIsolate-user-vlan secondary 设置主 vl

7、an 包括的子 vlanQuidway-Ethernet0/2port hybrid pvid vlan 设置 vlan 的 pvid删除 vlan 的 pvid设置无标识的Quidway-Ethernet0/2port hybrid pvid Quidway-Ethernet0/2port hybrid vlan vlan_id_list untaggedvlan如果包的 vlan id 与 PVId 一致，那么去掉 vlan 信息. 默认 PVID=1。所以设置 PVID 为所属 vlan id, 设置可以互通的 vlan 为 untagged.路由器命令Quidwaydisplay ve

8、rsion显示版本信息Quidwaydisplay current-configuration显示当前配置Quidwaydisplay interfaces显示接口信息Quidwaydisplay ip route显示路由信息Quidwaysysname aabbcc 更改主机名Quidwaysuper passwrod 123456 设置口令 Quidwayinterface serial0进入接口Quidway-serial0ip address Quidway-serial0undo shutdown 激活端口 Quidwaylink-protocol hdlc 绑定 hdlc 协议 Q

9、uidwayuser-interface vty 0 4 Quidway-ui-vty0-4authentication-mode password Quidway-ui-vty0-4set authentication-mode password simple 222Quidway-ui-vty0-4user privilege level 3Quidway-ui-vty0-4quitQuidwaydebugging hdlc all serial0显示所有信息Quidwaydebugging hdlc event serial0调试事件信息Quidwaydebugging hdlc pac

10、ket serial0显示包的信息静态路由：Quidwayiproute-staticinterfacenumber|nexthopvaluereject|blackhole例如：Quidwayip route-static Quidwayip route-static Quidwayip route-static 16 Serial 2Quidwayip route-static 动态路由：QuidwayripQuidwayrip workQuidwayrip inputQuidwayrip outputQuidway-r

11、ipnetwork ;可以 allQuidway-ripnetwork Quidway-rippeer ip-addressQuidway-ripsummaryQuidwayrip version 1 Quidwayrip version 2 multicast Quidway-Ethernet0rip split-horizon ;水平分隔Quidwayrouter id A.B.C.D 配置路由器的 IDQuidwayospf enable启动 OSPF协议Quidway-ospfimport-route direct引入直联路由Quidway-Serial0ospf en

12、able area 配置 OSPF区域标准访问列表命令格式如下：acl match-order config|auto rulenormal|specialpermit|deny默认前者顺序匹配sourcesource-addrsource-wildcard|any例：Quidwayacl 10Quidway-acl-10rule normal permit source Quidway-acl-10rule normal deny source any扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表：|anydestination |anyoperate配置ICMP协议的扩展访问

13、列表：rule normal|specialpermit|denyicmp source |anydestination|anyicmp-code logging扩展访问控制列表操作符的含义equal portnumber 等于greater-than portnumber 大于less-than portnumber小于not-equal portnumber不等range portnumber1 portnumber2区间扩展访问控制列表举例Quidwayacl 101Quidway-acl-101rule deny souce any destination any Quidway-ac

14、l-101rule permit icmp source any destination any icmp-type echoQuidway-acl-101rule permit icmp source any destination any icmp-type echo-replyQuidwayacl 102destinationQuidway-acl-102rule permit ip source Quidway-acl-102rule deny ip source any destination anyQuidwayacl 103Quidway-acl-103rule permit t

15、cp source any destination destination-port equal ftpQuidway-acl-103rule permit tcp source any destination destination-port equal wwwQuidwayfirewall enableQuidwayfirewall default permit|denyQuidwayint e0Quidway-Ethernet0firewall packet-filter 101 inbound|outbound 地址转

16、换配置举例Quidwayfirewall enableQuidwayfirewall default permitQuidwayacl 101Quidway-acl-101rule deny ip source any destination anyQuidway-acl-101rule permit ip source 0 destination any Quidway-acl-101rule permit ip source 0 destination any Quidway-acl-101rule permit ip source 129.38

17、.1.2 0 destination any Quidway-acl-101rule permit ip source 0 destination any Quidwayacl 1020 destination 0Quidway-acl-102rule permit tcp source 0Quidway-acl-102rule permit tcp source any destination destination-port great-than1024Quidway-Ethernet0firew

18、all packet-filter 101 inbound Quidway-Serial0firewall packet-filter 102 inboundQuidwaynat address-group 01 03 pool1 Quidwayacl 1Quidway-acl-1rule permit source Quidway-acl-1rule deny source anyQuidway-acl-1int serial 0Quidway-Serial0nat outbound 1 address-group pool1Quidway-Serial0nat server global 01 inside ftp tcpQuidway-Serial0nat s