華為交換機(jī)的基本配置課件

華為交換機(jī)的基本配置一、交換機(jī)的軟件版本

由于華為交換機(jī)的軟件版本不盡相同，我們以比較新的版本V3.1R0005為例。[New_S3552]displayversionHuaweiVersatileRoutingPlatformSoftwareVRP(R)Software,Version3.10,RELEASE0007Copyright(c)2000-2004HUAWEITECHCO.,LTD.QuidwayS3552Guptimeis41weeks,0day,9hours,32minutes二、端口操作1、打開\關(guān)閉以太網(wǎng)端口shutdownundoshutdown例如：[YD_S3552]interfaceeth0/38[YD_S3552-Ethernet0/38]shutdown[YD_S3552-Ethernet0/38]undoshutdown二、端口操作3、端口雙工狀態(tài)、端口速率

duplex{auto|full|half}undoduplex

speed{10|100|auto}undospeed二、端口操作4、端口鏈路類型設(shè)置端口為Access端口portlink-type

access設(shè)置端口為Hybrid端口portlink-type

hybrid設(shè)置端口為Trunk端口portlink-type

trunk恢復(fù)端口的鏈路類型為缺省的Access端口undoportlink-type二、端口操作5、把當(dāng)前以太網(wǎng)端口加入到指定Vlan把當(dāng)前Access端口加入到指定VLANportaccessvlanvlan_id將當(dāng)前Hybrid端口加入到指定VLANporthybrid

vlan

vlan_id_list{tagged|untagged}把當(dāng)前Trunk端口加入到指定VLANporttrunkpermitvlan{vlan_id_list|all}把當(dāng)前Access端口從指定VLAN刪除undo

port

accessvlan把當(dāng)前Hybrid端口從指定VLAN中刪除undoporthybrid

vlan

vlan_id_list把當(dāng)前Trunk端口從指定VLAN中刪除undoporttrunkpermitvlan

{vlan_id_list|all}

二、端口操作7、查看端口狀態(tài)displayinterface

例如：displayinterfaceEthernet0/11Ethernet0/11currentstate:UPIPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis00e0-fc37-a4f0Description:to_qixiangjuTheMaximumTransmitUnitis1500Mediatypeistwistedpair,loopbacknotsetPorthardwaretypeis100_BASE_TX10Mbps-speedmode,half-duplexmodeLinkspeedtypeisforcelink,linkduplextypeisautonegotiationFlow-controlisnotsupportedTheMaximumFrameLengthis1552BroadcastMAX-ratio:100%PVID:110Mditype:auto

Portlink-type:accessTaggedVLANID:noneUntaggedVLANID:110Last5minutesinput:4packets/sec502bytes/secLast5minutesoutput:6packets/sec1827bytes/secInput(total):-packets,-bytes -broadcasts,-multicastsInput(normal):919143packets,187520582bytes 9502broadcasts,2221multicastsInput:0inputerrors,0runts,0giants,-throttles,0CRC 0frame,0overruns,0aborts,-ignored,-parityerrorsOutput(total):-packets,-bytes -broadcasts,-multicasts,-pausesOutput(normal):1139625packets,639282176bytes 6450broadcasts,4878multicasts,0pausesOutput:20415outputerrors,-underruns,-bufferfailures 0aborts,0deferred,20415collisions,0latecollisions -lostcarrier,-nocarrier三、Vlan操作1、創(chuàng)建或刪除Vlan

vlanvlan_idundovlanvlan_id三、Vlan操作3、給VLAN接口指定/刪除IP地址和掩碼ipaddress

ip_addressip_netmaskundoipaddress[ip_addressip_netmask]例如：

ipaddress7華為二層交換機(jī)允許配置一個(gè)三層IP地址。三、Vlan操作4、VLAN顯示和調(diào)試顯示VLAN接口相關(guān)信息display

interfaceVLAN-interface[vlan_id]顯示VLAN相關(guān)信息display

vlan[vlan_id|all|static|dynamic

例如：[YD_S3552]displayinterfacevlan103Vlan-interface103currentstate:UPLineprotocolcurrentstate:UPIPSendingFrames'FormatisPKTFMT_ETHNT_2,Hardwareaddressis00e0-fc37-a4f3InternetAddressis41/29PrimaryDescription:qiaoqinzhongxueTheMaximumTransmitUnitis1500四、訪問管理配置1、認(rèn)證模式authentication-modelocal/none/password/schemeLocal本地帳號(hào)認(rèn)證None不要認(rèn)證Password密碼認(rèn)證SchemeRadius認(rèn)證四、訪問管理配置3、創(chuàng)建本地用戶、設(shè)置本地用戶口令Local-userusernamelevel0~3passwordcipher/simpletext例如：[LY_LC_8016]local-userCMNetlevel3passwordcipherCMNetisgood![創(chuàng)建一個(gè)userprivilege為3、用戶名為CMNet，加密顯示密碼CMNetisgood!]Userprivilege0為最低級(jí)別3為最高級(jí)別四、訪問管理配置4、設(shè)置遠(yuǎn)程訪問接入限制例如：只允許28/28的網(wǎng)段進(jìn)行遠(yuǎn)程登陸

aclnumber1

#創(chuàng)建訪問控制策略1

rule0permitsource285

#創(chuàng)建策略0只允許28/28的網(wǎng)段訪問

user-interfacevty04

acl1inbound

#在VTY上適用策略1五、QOS命令1、配置端口鏡像Mirroring-port指定鏡像端口Monitor-port監(jiān)控端口例如：使用Eth0/48端口監(jiān)控Eth0/1端口的流入流出Mirroring-portEthernet0/1bothMirror-portEthernet0/48both五、QOS命令2、端口訪問策略rule-map定義端口策略eacl定義策略動(dòng)作acces-group策略使用到端口例如：在Eth5/0/8以太口上過濾沖擊波震蕩波病毒常用的445端口rule-mapintervlanfbd1tcpanyanyeq445Eaclfbdfbd1denyAccess-groupeaclfbdportEthernet5/0/8六、路由配置1、缺省路由iproute-static例如：Iproute-static在華為二層交換機(jī)上可配置路由，主要是為交換機(jī)遠(yuǎn)程控制服務(wù)。六、路由配置2、靜態(tài)路由iproute-staticUndoiproute-static例如：Iproute-static七、系統(tǒng)管理操作1、顯示目錄或文件信息dir<YD_S3552>dirDirectoryofflash:/-rwxrwxrwx1noonenogroup3418167Dec14200310:00:44S3552-VRP310-0005.bin-rwxrwxrwx1noonenogroup4Aug05200507:44:57snmpboots-rwxrwxrwx1noonenogroup5992Jul21200517:22:33vrpcfg.txt16125952bytestotal(12692480bytesfree)Vrpcfg.txt為交換機(jī)配置文件。七、系統(tǒng)管理操作2、刪除文件delete恢復(fù)刪除文件undelete拷貝文件copy移動(dòng)文件move可以通過刪除flash中的vrpcfg.txt，直接刪除交換機(jī)的配置，恢復(fù)到出廠缺省配置。例如：detelevrpcfg.txt

七、系統(tǒng)管理操作5、擦除FlashMemory中配置文件

resetsaved-configuration配置文件被擦除后，以太網(wǎng)交換機(jī)下次上電時(shí)，系統(tǒng)將采用缺省的配置參數(shù)進(jìn)行初始化。在以下幾種情況下，用戶可能需要擦除FlashMemory中配置文件：在以太網(wǎng)交換機(jī)的軟件升級(jí)之