華為eNSP模擬器命令

1、華為模擬器命令計算機命令PCA login: root ；使用root用戶 password: linux ；口令是linux# shutdown -h now ；關機# init 0 ；關機# logout ；用戶注銷# login ；用戶登錄# ifconfig ；顯示IP地址# ifconfig eth0 netmask ；設置IP地址# ifconfig eht0 netmask down ；禁用IP地址# route add gw ；設置網關# route del gw ；刪除網關# route add default gw ；設置網關# route

2、del default gw ；刪除網關# route ；顯示網關# ping ；發(fā)ECHO包# telnet ；遠程登錄交換機命令Huaweidis cur ；顯示當前配置Huaweidisplay current-configuration ；顯示當前配置Huaweidisplay interfaces ；顯示接口信息Huaweidisplay vlan all ；顯示路由信息Huaweidisplay version ；顯示版本信息Huaweisuper password ；修改特權用戶密碼Huaweisysname ；交換機命名Huaweiinterface ethernet 0/1

3、；進入接口視圖Huaweiinterface vlan x ；進入接口視圖Huawei-Vlan-interfacexip address ；配置VLAN的IP地址Huaweiip route-static ；靜態(tài)路由網關Huaweirip ；三層交換支持Huaweilocal-user ftpHuaweiuser-interface vty 0 4 ；進入虛擬終端S3026-ui-vty0-4authentication-mode password ；設置口令模式S3026-ui-vty0-4se

4、t authentication-mode password simple 222 ；設置口令S3026-ui-vty0-4user privilege level 3 ；用戶級別Huaweiinterface ethernet 0/1 ；進入端口模式Huaweiint e0/1 ；進入端口模式Huawei-Ethernet0/1duplex half|full|auto ；配置端口工作狀態(tài)Huawei-Ethernet0/1speed 10|100|auto ；配置端口工作速率Huawei-Ethernet0/1flow-control ；配置端口流控Huawei-Ethernet0/1md

5、i across|auto|normal ；配置端口平接扭接Huawei-Ethernet0/1port link-type trunk|access|hybrid ；設置端口工作模式Huawei-Ethernet0/1port access vlan 3 ；當前端口加入到VLANHuawei-Ethernet0/2port trunk permit vlan ID|All ；設trunk允許的VLANHuawei-Ethernet0/3port trunk pvid vlan 3 ；設置trunk端口的PVIDHuawei-Ethernet0/1undo shutdown ；激活端口Huaw

6、ei-Ethernet0/1shutdown ；關閉端口Huawei-Ethernet0/1quit ；返回Huaweivlan 3 ；創(chuàng)建VLANHuawei-vlan3port ethernet 0/1 ；在VLAN中增加端口Huawei-vlan3port e0/1 ；簡寫方式Huawei-vlan3port ethernet 0/1 to ethernet 0/4 ；在VLAN中增加端口Huawei-vlan3port e0/1 to e0/4 ；簡寫方式Huaweimonitor-port ；指定鏡像端口Huaweiport mirror ；指定被鏡像端口Huaweiport mir

7、ror int_list observing-port int_type int_num ；指定鏡像和被鏡像Huaweidescription string ；指定VLAN描述字符Huaweidescription ；刪除VLAN描述字符Huaweidisplay vlan vlan_id ；查看VLAN設置Huaweistp enable|disable ；設置生成樹,默認關閉Huaweistp priority 4096 ；設置交換機的優(yōu)先級Huaweistp root primary|secondary ；設置為根或根的備份Huawei-Ethernet0/1stp cost 200 ；

8、設置交換機端口的花費Huaweilink-aggregation e0/1 to e0/4 ingress|both ；端口的聚合Huaweiundo link-aggregation e0/1|all ；始端口為通道號SwitchA-vlanxisolate-user-vlan enable ；設置主vlanSwitchAisolate-user-vlan secondary ；設置主vlan包括的子vlanHuawei-Ethernet0/2port hybrid pvid vlan ；設置vlan的pvidHuawei-Ethernet0/2port hybrid pvid ；刪除vla

9、n的pvidHuawei-Ethernet0/2port hybrid vlan vlan_id_list untagged ；設置無標識的vlan如果包的vlan id與PVId一致，則去掉vlan信息. 默認PVID=1。所以設置PVID為所屬vlan id, 設置可以互通的vlan為untagged.路由器命令Huaweidisplay version ；顯示版本信息Huaweidisplay current-configuration ；顯示當前配置Huaweidisplay interfaces ；顯示接口信息Huaweidisplay ip route ；顯示路由信息Huaweis

10、ysname aabbcc ；更改主機名Huaweisuper passwrod 123456 ；設置口令Huaweiinterface serial0 ；進入接口Huawei-serial0ip address ；配置端口IP地址Huawei-serial0undo shutdown ；激活端口Huaweilink-protocol hdlc ；綁定hdlc協(xié)議Huaweiuser-interface vty 0 4Huawei-ui-vty0-4authentication-mode passwordHuawei-ui-vty0-4set authentication-mode passw

11、ord simple 222Huawei-ui-vty0-4user privilege level 3Huawei-ui-vty0-4quitHuaweidebugging hdlc all serial0 ；顯示所有信息Huaweidebugging hdlc event serial0 ；調試事件信息Huaweidebugging hdlc packet serial0 ；顯示包的信息靜態(tài)路由：Huaweiip route-static interface number|nexthopvaluereject|blackhole例如：Huaweiip route-static 129.1.

12、0.0 16 Huaweiip route-static Huaweiip route-static 16 Serial 2Huaweiip route-static 動態(tài)路由：Huaweirip ；設置動態(tài)路由Huaweirip work ；設置工作允許Huaweirip input ；設置入口允許Huaweirip output ；設置出口允許Huawei-ripnetwork ；設置交換路由網絡Huawei-ripnetwork

13、all ；設置與所有網絡交換Huawei-rippeer ip-address ；Huawei-ripsummary ；路由聚合Huaweirip version 1 ；設置工作在版本1Huaweirip version 2 multicast ；設版本2，多播方式Huawei-Ethernet0rip split-horizon ；水平分隔Huaweirouter id A.B.C.D ；配置路由器的IDHuaweiospf enable ；啟動OSPF協(xié)議Huawei-ospfimport-route direct ；引入直聯路由Huawei-Serial0ospf enable area

14、 ；配置OSPF區(qū)域標準訪問列表命令格式如下：acl match-order config|auto ；默認前者順序匹配。rule normal|specialpermit|deny source source-addr source-wildcard|any例：Huaweiacl 10Huawei-acl-10rule normal permit source 55Huawei-acl-10rule normal deny source any擴展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴展訪問列表：rule normal|specialpermit|de

15、nytcp|udpsource |anydestination |anyoperate配置ICMP協(xié)議的擴展訪問列表：rule normal|specialpermit|denyicmp source |anydestination |anyicmp-code logging擴展訪問控制列表操作符的含義equal portnumber ；等于greater-than portnumber ；大于less-than portnumber ；小于not-equal portnumber ；不等range portnumber1 portnumber2 ；區(qū)間擴展訪問控制列表舉例Huaweiacl

16、101Huawei-acl-101rule deny souce any destination anyHuawei-acl-101rule permit icmp source any destination any icmp-type echoHuawei-acl-101rule permit icmp source any destination any icmp-type echo-replyHuaweiacl 102Huawei-acl-102rule permit ip source destination Hua

17、wei-acl-102rule deny ip source any destination anyHuaweiacl 103Huawei-acl-103rule permit tcp source any destination destination-port equal ftpHuawei-acl-103rule permit tcp source any destination destination-port equal wwwHuaweifirewall enableHuaweifirewall default p

18、ermit|denyHuaweiint e0Huawei-Ethernet0firewall packet-filter 101 inbound|outbound地址轉換配置舉例Huaweifirewall enableHuaweifirewall default permitHuaweiacl 101 ；內部指定主機可以進入e0Huawei-acl-101rule deny ip source any destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101rul

19、e permit ip source 0 destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101rule permit ip source 0 destination anyHuawei-acl-101quitHuaweiint e0Huawei-Ethernet0firewall packet-filter 101 inboundHuaweiacl 102 ；外部特定主機和大于1024端口的數據包允許進入S0Huawe

20、i-acl-102rule deny ip source any destination anyHuawei-acl-102rule permit tcp source 0 destination 0Huawei-acl-102rule permit tcp source any destination 0 destination-port great-than1024Huawei-acl-102quitHuaweiint s0Huawei-Serial0firewall packet-filter 102 inboun

21、d ；設是路由器出口IP。Huawei-Serial0nat outbound 101 interface ；是Easy ip，將acl 101允許的IP從本接口出時變換源地址。內部服務器地址轉換配置命令(靜態(tài)nat)：nat server global port inside port protocol ；global_port不寫時使用inside_portHuawei-Serial0nat server global inside ftp tcpHuawei-Serial0nat server global 202.

22、38.160.1 inside telnet tcpHuawei-Serial0nat server global inside www tcp設有公網IP：0103 可以使用。 ；對外訪問(原例題)Huaweinat address-group 01 03 pool1 ；建立地址池Huaweiacl 1Huawei-acl-1rule permit source 55 ；指定允許的內部網絡H

23、uawei-acl-1rule deny source anyHuawei-acl-1int serial 0Huawei-Serial0nat outbound 1 address-group pool1 ；在s0口從地址池取出IP對外訪問Huawei-Serial0nat server global 01 inside ftp tcpHuawei-Serial0nat server global 02 inside www tcpHuawei-Serial0nat server global 2

24、002 8080 inside www tcpHuawei-Serial0nat server global 03 inside smtp udpPPP設置：Huawei-s0link-protocol ppp ；默認的協(xié)議PPP驗證：主驗方：pap|chapHuaweilocal-user q2 password simple|cipher hello ；路由器1Huaweiinterface serial 0Huawei-serial0ppp authentication-mode pap|chap

25、Huawei-serial0ppp chap user q1 ；pap時，沒有此句pap被驗方：Huaweiinterface serial 0 ；路由器2Huawei-serial0ppp pap local-user q2 password simple|cipher hellochap被驗方：Huaweiinterface serial 0 ；路由器2Huawei-serial0ppp chap user q2 ；自己路由器名Huawei-serial0local-user q1 password simple|cipher hello ;對方路由器名幀中繼frame-relay (二分冊6-61)q1fr switchingq1in