h3cne实验手册入门篇

说E-pohui@ESS说E-pohui@ESSH3CS3610-MSR20-基本命创建超级终端基本命创建超级终端，通过口进入交换机、路由进去后按回车，之后将出现命令行提示符(如<H3C>)##[H3C]sysnamesuper(明文)super(密文)super(明文)super(密文)telnet[RouterA]user-interfacevty0[RouterA-ui-vty0-4]authentication-modepassword[RouterA-ui-vty0-4]userprivilegelevel3[RouterA-ui-vty0-[RouterA]telnetserver#配置端口IP[RouterA]inte##保存,#[RouterA]displaysaved-configuration[RouterA]resetsaved-configuration##TFTP<H3C>tftpIPput|get}<H3C>tftpputstartup.cfg<H3C>tftpgettest.txt//上//下交换机、路由器基本命#交换机、路由器基本命#[H3C]intvlan#[H3C]undovlan#VLAN[H3C-vlan10]porte1/0/5toe[H3C-vlan10]porte1/0/8toe1/0/9e1/0/11toe#VLAN[H3C]dis#设置以太网端口的链路类型为TRUNK#设置以太网端口的链路类型为ACCESS[H3C-Ethernet1/0/1]portaccessvlan10[H3C-Ethernet1/0/1]undoportaccessLoopback[H3C]intloopback#[H3C]iproutes1/0[H3C]undoiproutes1/0#[H3C]iproutes缺省路由和静态路缺省路由和静态路实验要由到和的子网实验步[R1]iproute[R2]iproute[R2]iproute[R3]iproute实验要使用RIPv1,实验要使用RIPv1,使各子网间能正常通实验步实验要使用实验要使用RIPv2,使各子网间能正常通实验步[R1-rip-1]version单区域实验要单区域实验要实验步[R2-ospf-1-area-]network[R3-ospf-1-area-]network多区域实验要多区域实验要R1area0,R3直接相连的两个网络实验步[R1]int[R1-LoopBack0]ipadd32[R1-LoopBack0]undoshut[R1-ospf-1-area-]network[R1-ospf-[R2]intl[R2-[R2-[R2-ospf-1-area-[R3]intl[R3-LoopBack0]ipadd32[R3-ospf-1-area-]network[R3-ospf-单臂路实验要单臂路实验要实验步交换[H3C-vlan10]porte1/0/2toe1/0/12[H3C-vlan20]porte1/0/13toe1/0/24[H3C]inte[H3C-Ethernet1/0/1]portlink-type[H3C-Ethernet1/0/1]porttrunkpermitvlanall[H3C-Ethernet1/0/1]porttrunkpvidvlan1[H3C-Ethernet0/0.1]ipadd24[H3C-Ethernet0/0.1]vlan-type[H3C-Ethernet0/0.1]ipadd24[H3C-Ethernet0/0.1]vlan-typedot1qvid10[H3C-Ethernet0/0.1]inte0/0.2R1(config)#inte0/0R1(config-if)#noshutR1(config-subif)#ipaddR1(config-subif)#noshutR1(config-R1(config)#inte0/0.2R1(config-subif)#ipaddR1(config-subif)#noshutR1(config-SW1(config-if)#switchporttrunkencapsulationdot1qSW1(config-if)#switchportmodetrunkSW1(vlan)#vlan10nameqqSW1(vlan)#vlan20nameeeSW1#conftSW1(config-if)#switchportaccessvlan10SW1(config-if)#noshutSW1(config-if)#switchportaccessvlanSW1(config-if)#no三层交换：三层交换：实现不同VLANPC1在VLAN10,PC2VLAN20开启全局GVRP将以太口E1/0/1TrunkVLAN[Sw1]inte[Sw1-Ethernet1/0/1]portlink-typetrunk[Sw1-Ethernet1/0/1]porttrunkpermitvlanall#在Trunk端口上启动GVRP#[Sw1]vlan20[Sw1]vlan20[Sw1]inte1/0/2[Sw1-Ethernet1/0/2]portaccvlan10VLAN[Sw1]intvlan[Sw1-Vlan-interface10]ipadd24[Sw1-Vlan-interface10]intvlan20[Sw2-Ethernet1/0/1]portlink-typetrunk[Sw2-Ethernet1/0/1]porttrunkpermitvlanallSw1Sw1#vlandataSw1(vlan)#vtpserverSw1(vlan)#vlan10Sw1(vlan)#vlanSw1#conftSw1(config-if)#switchmodetrunkSw1(config-if)#switchtrunkencapdot1qSw1(config-if)#intf0/2Sw1(config-if)#switchaccvlanSw1(config-if)#ipaddSw1(config-if)#noshutSw1(config-if)#ipaddSw1(config-if)#noshutSw1(config-if)#ipaddSw1(config-if)#noshutSw1#copyrunSw2Sw2#vlandataSw2(vlan)#vtpclientSw2#conftSw2(config-if)#switchmodetrunkSw2(config-if)#intf0/2Sw2(config-if)#switchaccvlan20Sw2#copyrun扩展访问列扩展访问列R2上使用扩展访问控制列表使R1telnet到R3,但无法ping可以ping通地址;其他通过R102的访问不受影响实验步[R2]aclnumber 0icmp-type[R2-acl-adv-3000]rulepermittcpsource0destination0destination-porteqtelnet[R2-acl-adv-3000]ruledenyipsource0destinationany[R2-acl-adv-3000]rulepermitipsouranydesany[R2-acl-adv-[R2]ints[R2-R2(config)#access-list100R2(config)#access-list100permiticmphosthostR2(config)#access-list100permittcphosthosteqR2(config)#access-list100denyiphostanyR2(config)#access-list100permitipanyanyR2(config)#ints2/0R2(config-if)#ipaccess-group100实验要h3c路由器的地址转换功能连接到广域网。要求该公司能h3c实验要h3c路由器的地址转换功能连接到广域网。要求该公司能h3cs1/0internetwww、ftpsmtp服务，05六个合法的ip地址。机至端实验步#[H3C]natadd101[H3C]aclnumber[H3C-acl-basic-2001]ruledenysource[H3C]aclnumber[H3C-acl-basic-2001]ruledenysource55[H3C]ints[H3C-Serial1/0]natoutbound2001address-group#设置内部ftp[H3C-Serial1/0]natserverprotocoltcpglobal00insideftp[H3C-Serial1/0]natserverprotocoltcpglobal00insidewww[H3C-Serial1/0]natserverprotocoltcpglobal008080insidewww#smtp[H3C-实验要路由R1实验要路由R1和路由器R3间通过其他网络相连，运IP协议的似有玩了过的两个网和,通过在两台路由器之间使简历隧道实实验步#Tunnel0[R1]inttrunnel#配置Tunnel封装模式Tunnel0接口的源地址(R1Serial1/0IP地址)[R1-Tunnel0]sourceTunnel0接口的目的地址(R3Serial1/0IP地址)[R1-Tunnel0]destination#[R1]iproute-statictunnel#Tunnel#Tunnel0[R3]inttrunnel#配置Tunnel封装模式Tunnel0接口的源地址(R3Serial1/0IP地址)[R3-Tunnel0]sourceTunnel0接口的目的地址(R1Serial1/0IP地址)[R3-Tunnel0]destinatio