目录
本书VRP命令请查阅另一篇文章:HCNA-第2章 VRP 基础
链接:https://blog.csdn.net/yyrnmh/article/details/107122315
基础命令
<Huawei>system-view //进入系统视图
[Huawei]sysname name //配置设备名
[Huawei]user-interface vty vty-id1 vty-id2 //进入vty线路
STP协议
[Huawei]stp enable //开启stp。默认情况下stp开启
[Huawei]stp mode {mstp | rstp |stp} //配置STP模式
[Huawei]stp priority priority //设置设备的桥优先级,取值范围0~61440,间距4096,默认32768
[Huawei]stp root primary //指定根桥,桥优先级自动设置为0,且无法修改
[Huawei]stp root primary //指定备份根桥,桥优先级自动设置为4096,且无法修改
[Huawei]display stp brief //查看stp简要信息
VLAN
[Huawei]vlan vlan-name //创建命名vlan
[Huawei]vlan vlan-id //创建编号vlan
[Huawei]vlan batch vlan-id vlan-id //创建多个vlan
[Huawei-GigabitEthernet0/0/1]port link-type {access | trunk}
[Huawei-GigabitEthernet0/0/1]port default vlan vlan-id //分配vlan
[Huawei-GigabitEthernet0/0/1]port trunk allow-pass vlan vlan-id1 [to vlan-id2] //配置允许通过的vlan
<Huawei>display port vlan //查看交换机当前端口的类型及加入的VLSN
[Huawei]display vlan summary //查看vlan汇总信息
[Huawei]display vlan vlan-id verbose //查看vlan配置
GVRP协议
[Huawei]gvrp //开启gvrp功能
[Huawei]display gvrp status //查看gvrp是否开启
[Huawei]display gvrp statistics //查看端口的gvip统计信息
DHCP协议
[Huawei]dhcp enable //开启dhcp
[Huawei]ip pool ip-pool-name //创建地址池
[Huawei-ip-pool-pool-name]network ip-address [mask {mask | mask-length}] //配置地址池的ip范围
[Huawei-ip-pool-pool-name]gateway-list ip-address //配置网关地址
[Huawei-ip-pool-pool-name]lease { day day [hour hour[minute minute]]|unlimited} //配置ip地址租期
[Huawei-GigabitEthernet0/0/0]dhcp select global //在各个接口配置基于全局地址池的服务
<Huawei>display ip pool name pool-name userd //查看地址池配置情况以及分配的地址情况
[Huawei-GigabitEthernet0/0/0]dhcp relay server-ip ip-address //配置DHCP中继代理
[Huawei-GigabitEthernet0/0/0]display this //查看相关的DHCP中继配置
NAT网络地址转换
[Huawei-GigabitEthernet0/0/0]nat static global global-address inside host-address //静态nat转换
<Huawei>display nat static //查看nat映射关系
PPP
[Huawei-Serial0/0/0]link-protocol ppp //配置链路协议为ppp
[Huawei-Serial0/0/0]remote address ip-address //指定分配对端接口的ip地址
[Huawei-Serial0/0/0]ip address ppp-negotiate //希望对端给自己分配一个IP地址
访问控制列表
[Huawei]acl acl-id //创建ACL
标准ACLrule [rule-id] {deny| permit} [source {source -address source-wildcard| any} fragment | logging | time-range time-name]
rule:表示这是一条规则
rule-id:表示这条规则的编号
deny | permit:这是一个二选一选项, 表示与这条规则相关联的处理动作。deny 表示“拒绝”; permit 表示“允许”
source:表示源IP地址信息
source-address:表示具体的源IP地址
source-wildcard:表示与source-address 相对应的通配符。source-wildcard 和
source address的结合使用,可以确定出一个IP地址的集合。极端情况下,该集合中可
以只包含一个IP地址
通配符Source-wildcard
any:表示源IP地址可以是任何地址
fragment:表示该规则只对非首片分片报文有效
logging:表示需要将匹配上该规则的IP报文进行日志记录
time-range time- name:表示该规则的生效时间段为time-name
扩展ACL:rule [rule-id] {deny | permit} ip [destination {destination-address destination-wildeard | any}]
[source { source-address source-wildcardcard | any }]
[Huawei]user-interface vty vty-id1 vty-id2 //进入vty线路
[Huawei-ui-vty0-4]acl acl-id inbound //入站方向
[Huawei-ui-vty0-4]acl acl-id outbound //出站方向
<Huawei>display acl acl-id //查看ACL信息
链路技术
(1)链路聚合
[Huawei]interface Eth-Trunk Eth-Trunk-number //创建编号Eth-Trunk端口
[Huawei-Eth-Trunk1]mode manual load-balance //端口的工作模式配置为手工负载分担模式
[Huawei-Eth-Trunk1]trunkport interface-type interface-number1 to interface-type interface-number2 //将物理端口interface-type number1到number2添加到Eth-Trunk端口
[Huawei-Eth-Trunk1]port link-type trunk //配置Eth-Trunk端口为trunk毛
[Huawei-Eth-Trunk1]port trunk allow-pass vlan vlan-id1 [to vlan-id2] //配置允许通过的vlan
[Huawei]display eth-trunk [trunk-id [interface interface-type interface-number | verbose ]] //验证Eth-Trunk配置信息
(2)Smart Link
[Huawei]smart-link group group-id //配置编号smart link组
[Huawei-smlk-group1]port interface-type interface-number master //配置端口为smart link组主端口
[Huawei-smlk-group1]port interface-type interface-number slave //配置端口为smart link组从端口
[Huawei-smlk-group1]flush send control-vlan vlan-id password simple password //开启smart link组发送flush帧,携带vlan编号及密码
[Huawei-smlk-group1]smart-link flush receive control-vlan vlan-id password simple password 开启smart link组可以接收并处理携带vlan编号及密码的flush帧
[Huawei-smlk-group1]restore enable //配置回切功能
[Huawei-smlk-group1]timer wtr time //设定回切时间
[Huawei-smlk-group1]smart-link enable //开启smart-link功能
<Huawei>display smart-link group group-id //查看smart link组的相关信息
(3)Montitor Link
[Huawei]monitor-link group group-id //配置编号monitor-link组
[Huawei-mtlk-group1]smart-link group group-id1 uplink //配置smart-link 组group-id1作为上行端口加入monitor-link组group-id1
[Huawei-mtlk-group1]port interface-type interface-number downlink group-id1 //将端口作为下行端口加入monitor-link组group-id1
[Huawei-mtlk-group1]timer recover-time time //配置monitor-link组回切时间
<Huawei>display smart-link group group-id //查看smart link组的相关信息
<Huawei>display monitor-link group group-id //查看monitor-link组的相关信息
路由协议基础
[Huawei]display ip routing-table //查看路由表
[Huawei]ip route-static ip-address {mask | mask-length}{nexthop-address | interface-type interface-number [nexthop-address]} [preference preference]
ip-address {mask | mask-length} //ip地址子网掩码
nexthop-address //下一条ip地址
interface-type interface-number//出站接口
[preference preference] //路由的优先级
(1)RIP协议
[Huawei]rip [process-id]//启动RIP进程,不输入process-id,默认取值1
[Huawei-rip-1]network network-address //通告网络
[Huawei]display rip [process-id] //查看rip的运行状态及配置信息
[Huawei]display rip [process-id] route //查看从其他路由器学习到的RIP路由信息
(2)OSPF协议
[Huawei]ospf [process-id | router-id router-id ]//配置路由器ospf进程号或者路由器id
[Huawei-ospf-1]area area-id //配置区域编号
[Huawei-ospf-1-area-0.0.0.0]network address wildcard-mask //通告网络
<Huawei>display [process-id] ospf peer //查看路由器的邻居信息
<Huawei>display [process-id] ospf routing //查看OSPF路由表
(3)VLAN间的三层通信
[Huawei]interface Vlanif vlan-id //创建vlanif接口
[Huawei-Vlanif1]ip address ip-address {mask | mask-length} //配置ip地址
[Huawei]display ip interface brief Vlanif 10 //查看vlanif的接口配置
[Huawei]display ip interface brief //查看所有接口简要信息
[Huawei]display ip interface //查看所有接口的详细信息