华为接入层路由器配置培训

接入层路由器配置HuaWeiAR2831/FiberHomeR2600提纲1.接入层路由器介绍2.CMNET专线接入网络结构3.搭建Console配置环境4.

HuaweiAR2831配置及实例5.FiberHomeR2600配置及实例6.网络测试路由器电脑1.1路由器构成CPUinterface内存FlashCPU网卡内存硬盘VRP/IOSWindowsLinux<R1-CZ-HONGQIAO-AR2831>disverHuaweiVersatileRoutingPlatformSoftwareVRPsoftware,Version3.40,Release0311Copyright(c)1998-2010HuaweiTechnologiesCo.,Ltd.Allrightsreserved.Withouttheowner'spriorwrittenconsent,nodecompilingnorreverse-engineeringshallbeallowed.QuidwayAR28-31uptimeis0week,0day,0hour,47minutesLastreboot2010/01/1415:25:08SystemreturnedtoROMBy<Reboot>Command.

CPUtype:PowerPC8245300MHz

128MbytesSDRAMMemory

32MbytesFlashMemory128KbytesNvRAMMemoryPCBVersion:1.0LogicVersion:1.0BootROMVersion:9.40[SLOT0]2FE(Hardware)3.1,(Driver)2.0,(CPLD)0.01.2路由器版本信息1.3HuaweiAR2831路由器及工作状态1.3HuaweiAR2831路由器及工作状态1.4FiberHomeR2600路由器2.1IP相关概念私网地址（PrivateIP）私有地址是指内部网络或主机地址，不必向ISP或注册中心申请而在公司或企业内部自由使用。RFC1918为私有网络预留出了三个IP地址块，如下：A类：～55B类：～B类：～上述三个范围内的地址不会在因特网上被分配。公网地址（PublicIP）公有地址是指在因特网上全球唯一的IP地址。需要向ISP或注册中心申请。将IP数据报报头中的IP地址转换为另一个IP地址的过程。在实际应用中，NAT主要用于实现私有网络访问外部网络的功能。这种通过使用少量的公有IP地址代表多数的私有IP地址的方式将有助于减缓可用IP地址空间枯竭的速度。NAT（NetworkAddressTranslation，地址转换）2.2专线接入Internet典型拓扑E0/0InternetE0/01缺省路由()基于源的地址转换(NAT)序号100源IP:6目的IP：6数据序号100源IP:5目的IP：6数据NATWANLAN3.1查找正确的com接口“我的电脑”右键属性—“硬件”—“设备管理器”USB-to-Serial转换线连接到USB接口（建议每次使用同一USB接口）3.2通过超级终端连接ConsoleConsole接口Console线缆RJ45RS232串口“开始”-“程序”-“附件”-“通讯”-“超级终端”配置烽火路由器一定要使用原配的console线缆才能连接成功3.3通过SecureCRT连接ConsoleConsole接口Console线缆RJ45RS232串口新建会话：“连接管理”-“新建会话”

设置串行口参数配置烽火路由器时console线缆一定要使用烽火原配的,才能连接成功3.4路由器配置顺序全局基本配置接口配置路由配置NAT配置配置保存4.1HuaweiAR2831配置视图命令视图功能提示符进入命令退出命令用户视图查看路由器的简单运行状态和统计信息<Quidway>与路由器建立连接即进入quit断开与路由器连接系统视图配置系统参数[Quidway]在用户视图下键入system-viewquit返回用户视图用户界面视图管理路由器异步和逻辑接口[Quidway-ui0]在系统视图下键入user-interface0quit返回系统视图以太网口视图配置以太网口参数[Quidway-Ethernet1/0/0]在系统视图下键入interfaceethernet1/0/0quit返回系统视图表2-1命令视图功能特性列表4.2路由器全局基本配置（HuaweiAR2831）配置主机名<Quidway>su//切换到用户等级3<Quidway>system-view//进入系统视图[Quidway]sysnameCZ-HONGQIAO-AR2831//配置主机名[CZ-HONGQIAO-AR2831]配置登录用户名、密码[CZ-HONGQIAO-AR2831]local-useradmin//创建admin用户[CZ-HONGQIAO-AR2831-luser-admin]passwordciphercmcc//设置密码[CZ-HONGQIAO-AR2831-luser-admin]

level1//设置用户级别[CZ-HONGQIAO-AR2831]superpasswordlevel3ciphercmnet//配置等级3用户切换密码[CZ-HONGQIAO-AR2831]user-interfacevty04[CZ-HONGQIAO-AR2831-ui-console0]authentication-modescheme//使用本地用户数据库进行认证设置路由器时钟<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>clockdatetime16:28:202011/03/08//配置时间配置SNMPCommunity<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]snmp-agentcommunityreadCZFWZCS@CMCC//配置只读snmp共同体字符串huawei设备缺省用户名：admin密码：huawei4.3路由器接口配置（HuaweiAR2831）配置接口(HuaweiAR2831)<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]interfaceEthernet0/0CZ-HONGQIAO-AR2831-Ethernet0/0]descriptionhongqiao_wan//接口口描述[CZ-HONGQIAO-AR2831-Ethernet0/0]ipaddress652//配置接口ip[CZ-HONGQIAO-AR2831-Ethernet0/0]qoscarinboundanycir10000000cbs10000000ebs0greenpassreddiscard//inbound方向限速10M，cir单位bps，cbs单位bit，cir不能超过cbs*20

[CZ-HONGQIAO-AR2831-Ethernet0/0]qoscaroutboundanycir10000000cbs10000000ebs0greenpassreddiscard//outbound方向限速10M，cir单位bps，cbs单位bit，cir不能超过cbs*20[CZ-HONGQIAO-AR2831-Ethernet0/0]interfaceEthernet0/1[CZ-HONGQIAO-AR2831-Ethernet0/1]descriptionhongqiao_lan[CZ-HONGQIAO-AR2831-Ethernet0/1]4.4路由器路由配置（HuaweiAR2831）配置缺省路由(HuaweiAR2831)<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]iproute-static5//配置缺省路由

4.5路由器NAT配置(HuaweiAR2831)<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]dhcpserverip-poollan-pool[CZ-HONGQIAO-AR2831-dhcp-pool-lan-pool][CZ-HONGQIAO-AR2831-dhcp-pool-lan-pool][CZ-HONGQIAO-AR2831-dhcp-pool-lan-pool][CZ-HONGQIAO-AR2831-dhcp-pool-lan-pool]expiredday3[CZ-HONGQIAO-AR2831][CZ-HONGQIAO-AR2831]aclnumber2001//配置内网访问控制列表[CZ-HONGQIAO-AR2831-acl-basic-2001][CZ-HONGQIAO-AR2831]nataddress-group366//配置外网地址池[CZ-HONGQIAO-AR2831]interfaceethernet0/0[CZ-HONGQIAO-AR2831-Ethernet0/0]natoutbound2001address-group3//在WAN接口上应用NAT配置DHCP4.6路由器配置保存（HuaweiAR2831）配置保存(HuaweiAR2831)<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]save//保存配置

4.7其他辅助配置（HuaweiAR2831）Tab键补全功能<CZ-HONGQIAO-AR2831>sys[tab]=>system-view?帮助功能[CZ-HONGQIAO-AR2831]int?interface[CZ-HONGQIAO-AR2831]interface?AuxAuxinterfaceBridge-templateBridgetemplateInterfaceDialerDialerinterfaceEthernetEthernetinterfaceLogic-ChannelLogictunnelinterfaceLoopBackLoopBackinterface中文/英文模式转换<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>language-modechinese%改变到中文模式。

4.8配置检查（HuaweiAR2831）<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]displaycurrent-configuration//查看当前正在运行的配置<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]displayipinterfacebrief//显示接口信息摘要*down:administrativelydown(l):loopback(s):spoofingInterfaceIPAddressPhysicalProtocolDescriptionAux0unassigneddowndownAux0Inte...

Ethernet0/06upuphongqiao_wanEthernet0/1upuphongqiao_lan<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]displayiprouting-table//显示路由表RoutingTable:publicnetDestination/MaskProtocolPreCostNexthopInterface4.8配置检查（HuaweiAR2831）<CZ-HONGQIAO-AR2831>su<CZ-HONGQIAO-AR2831>system-view[CZ-HONGQIAO-AR2831]displayinterfaceEthernet0/0//查看接口状态Ethernet0/0currentstate:UPLineprotocolcurrentstate:UPDescription:hongqiao_wanTheMaximumTransmitUnitis1500,Holdtimeris10(sec)IPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis3ce5-a654-9a42Mediatypeistwistedpair,loopbacknotset,promiscuousmodenotset100Mb/s,Full-duplex,linktypeisautonegotiationOutputflow-controlisdisabled,inputflow-controlisdisabledOutputqueue:(Urgentqueuing:Size/Length/Discards)0/50/0Outputqueue:(Protocolqueuing:Size/Length/Discards)0/500/0Outputqueue:(FIFOqueuing:Size/Length/Discards)0/75/0Lastclearingofcounters:NeverLast300secondsinputrate197.35bytes/sec,1578bits/sec,2.42packets/secLast300secondsoutputrate0.00bytes/sec,0bits/sec,0.00packets/secInput:1754packets,154392bytes,1754buffers1319broadcasts,435multicasts,0pauses

0errors,0runts,0giants0crc,0alignerrors,0overruns0dribbles,0drops,0nobuffers0frameerrorsOutput:1packets,120bytes,2buffers2broadcasts,0multicasts,0pauses

0errors,0underruns,0collisions0deferred,0lostcarriers4.9配置实例(HuaweiAR2831)#sysnameCZ-HONGQIAO-AR2831#superpasswordlevel3ciphercmnet#nataddress-group3#radiusschemesystem#domainsystem#undoftpserver#iphttpshutdown##local-useradminpasswordciphercmccundoservice-typeftplevel1#dhcpserverip-pool0expiredday3#aclnumber2001#interfaceEthernet0/0descriptionhongqiao_wanipaddressnatoutbound2001address-group3qoscarinboundanycir10000000cbs10000000ebs0greenpassreddiscardqoscaroutboundanycir10000000cbs10000000ebs0greenpassreddiscard#interfaceEthernet0/1descriptionhongqiao_lan##iproute-staticpreference60#snmp-agentcommunityreadCZFWZCS@CMCCsnmp-agentsys-infoversionall#user-interfacecon0user-interfaceaux0user-interfacevty04authentication-modescheme5.1FiberHomeR2600配置视图5.2路由器全局基本配置（FiberHomeR2600）配置主机名R1>enableR1#configR1_config#hostnameCZ-LIJIN-R2600//配置主机名CZ-LIJIN-R2600_config#配置登录用户名、密码CZ-LIJIN-R2600>enableCZ-LIJIN-R2600#configCZ-LIJIN-R2600_config#usernameadminpassword0cmcc//创建用户名和密码CZ-LIJIN-R2600_config#enablepassword0cmnetlevel15//配置enable密码CZ-LIJIN-R2600_config#aaaauthenticationlogindefaultlocal//启用从本地用户数据库认证CZ-LIJIN-R2600_config#aaaauthenticationenabledefaultenableCZ-LIJIN-R2600_config#linevty04//将认证方式应用到vtyCZ-LIJIN-R2600_config_line#loginaaa设置路由器时钟CZ-LIJIN-R2600>enableCZ-LIJIN-R2600#clocksetclockset14:57:20932011//配置时间配置SNMPCommunityCZ-LIJIN-R2600>enableCZ-LIJIN-R2600#configCZ-LIJIN-R2600_config#snmp-servercommunityCZFWZCS@CMCCRO//配置只读的SNMP共同体字符串FibleHome默认用户名/密码：admin/12345enable密码：123455.3路由器接口配置（FiberHomeR2600）配置接口IPCZ-LIJIN-R2600>enableCZ-LIJIN-R2600#configCZ-LIJIN-R2600_config#interfaceFastEthernet1/0CZ-LIJIN-R2600_config_if#descriptionhongqiao_wan//接口描述CZ-LIJIN-R2600_config_if#ipaddress652//配置接口ipCZ-LIJIN-R2600_config_if#interfaceFastEthernet1/1CZ-LIJIN-R2600_config_if#descriptionhongqiao_lanCZ-LIJIN-R2600_config_if#5.4路由器路由配置（FiberHomeR2600）配置缺省路由(FiberHomeR2600)CZ-LIJIN-R2600>enableCZ-LIJIN-R2600#configCZ-LIJIN-R2600_config#iproutedefault5//配置缺省路由5.5路由器NAT配置(FiberHomeR2600)CZ-LIJIN-R2600>enCZ-LIJIN-R2600#configCZ-LIJIN-R2600_config#ipdhcpdenable//启用DHCP服务CZ-LIJIN-R2600_config#ipdhcppoollan-poolCZ-LIJIN-R2600_config_dhcp#CZ-LIJIN-R2600_config_dhcp#CZ-LIJIN-R2600_config_dhcp#CZ-LIJIN-R2600_config_dhcp#CZ-LIJIN-R2600_config#ipaccess-liststandard10//配置内网访问控制列表

CZ-LIJIN-R2600_config#CZ-LIJIN-R2600_config#ipnatpoolnat-pool6652//配置外网地址池CZ-LIJIN-R2600_config#ipnatinsidesourcelist10poolnat-pooloverload//配置NAT方式CZ-LIJIN-R2600_config_f1/0#interfaceFastEthernet1/0CZ-LIJIN-R2600_config_f1/0#ipnatoutside//在WAN口应用NATCZ-LIJIN-R2600_config_f1/0#interfaceFastEthernet1/1CZ-LIJIN-R2600_config_f1/0#ipnatinside//在LAN口应用NAT配置DHCP5.6路由器配置保存配置保存(FiberHomeR2600)CZ-LIJIN-R2600>enableCZ-LIJIN-R2600#write//保存配置5.7配置检查（FiberHomeR2600）CZ-LIJIN-R2600#shrun//查看正在运行的配置CZ-LIJIN-R2600#showipinterfacebrief//查看接口信息摘要CZ-LIJIN-R2600#showinterfacef1/0//查看接口状态及流量CZ-LIJIN-R2600#showiproute//查看路由表5.8配置实例(FiberHomeR2600)servicetimestampslogdateservicetimestampsdebugdateservicepassword-encryption!hostnameCZ-LIJIN-R2600!aaaauthenticationlogindefaultlocalaaaauthenticationenabledefaultenable!usernameadminpassword0cmcc!enablepassword0cmnetlevel15!interfaceFastEthernet1/0descriptionhongqiao_wanipaddress652ipnatoutside!interfaceFastEthernet1/1descriptionhongqiao_lanipnatinside!linevty04loginaaa!iproutedefault5!snmp-servercommunityCZFWZCS@CMCCRO!!ipaccess-liststandard10!ipdhcpdpoollan-pooldefault-routerdns-server!ipdhcpdenable!ipnatinsidesourcelist10poolnat-pooloverload!6网络测试将测试PC连接到内网，通过DHCP获取内网地址进行测试：

ping测试Pingingwith32bytesofdata:Replyfrom:bytes=32time=3msTTL=255Replyfrom:bytes=32time=13msTTL=255Replyfrom:bytes=32time=5msTTL=255Replyfrom:bytes=32time=1msTTL=255Pingstatisticsfor:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Min