2009-2017歷年下午題思科轉華為命令

2009上半年下午題試題一【問題2】[router-GigabitEthernet0/0/0.10]dot1qterminationvid10封裝dot1q協(xié)議，該子接口對應vlan10[router-GigabitEthernet0/0/0.10]arpbroadcastenable開啟子接口的ARP廣播[switch-GigabitEthernet0/0/1]portlink-typetrunk設置接口鏈路模式為trunk[switch-GigabitEthernet0/0/1]porttrunkallow-passvlanalltrunk模式下所有vlan允許通過試題一【問題3】[switch-Ethernet0/0/2]portlink-typeaccess設置接口鏈路模式access[switch-Ethernet0/0/2]portdefaultvlan100把E0/2分配給VLAN100試題一【問題4】[R0]iproute-static5355配置特定路由、子網掩碼、下一跳地址試題四【問題2】配置IKE安全提議[R1]ikeproposal5IKE安全提議[R1-ike-proposal-5]encryption-algorithmaes-cbc-128加密算法使用的是（AES）[R1-ike-proposal-5]authentication-algorithmsha1認證算法使用的是（SHA1）[R1-ike-proposal-5]dhgroup14認證組[R1-ike-proposal-5]saduration86400生存期為1天[R1-ike-proposal-5]quit配置IKE對等體，配置預共享秘鑰和遠端地址[R1]ikepeerspubv1[R1-ike-peer-spub]ike-proposal5接口應用IKE安全提議[R1-ike-peer-spub]pre-shared-keysimplehuawei預共享秘鑰[R1-ike-peer-spub]remote-address試題五【問題1】iproute-static設置默認路由試題五【問題2】創(chuàng)建高級ACL[Router-acl-adv-3001]rulepermitipsource0destinationany[Router-acl-adv-3001]rulepermitipsource0destinationany[Router-acl-adv-3002]rulepermitipsourceanydestination55[Router-acl-adv-3002]rulepermitipsourceanydestination55[Router-acl-adv-3002]ruledenyipsourceanydestinationany創(chuàng)建流分類，匹配ACL命中的流量[R1]trafficclassifierc1[R1-classifier-c1]if-matchacl2015創(chuàng)建流行為，配置重定向。[R1]trafficbehaviorb1[R1-behavior-b1]redirectip-nexthop2009年下半年下午題試題四【問題1】華為防護墻配置[USG]policyinterzoneinterzoneuntrusttrust

區(qū)域間策略[USG-interzone-trust-untrust]detectftp檢測[USG-interzone-trust-untrust]detecthttp[USG]iproute-static5[USG]natserverprotocoltcpglobal3wwwinside00www[USG]policyinterzoneuntrustdmzinboundDMZ和Untrust域間：從公網訪問內部服務器[USG-policy-interzone-dmz-untrust-inbound]policy2[USG-policy-interzone-dmz-untrust-inbound-2]policydestination000[USG-policy-interzone-dmz-untrust-inbound-2]policyserviceservice-sethttp[USG-policy-interzone-dmz-untrust-inbound-2]actionpermit動作試題五【問題2】[R2]iproute-static[R2]iproute-static[R2]iproute-static試題五【問題3】配置IPSec加密算法認證模式[R1]ipsecproposaltean1[R1-ipsec-proposal-tran1]espauthentication-algorithmsha2-256認證算法（SHA2）[R1-ipsec-proposal-tran1]espencryption-algorithmaes-128加密算法（AES）[R1]esppeerspubv1[R1-esp-peer-spub-v1]pre-shared-keysimple378使用預共享密鑰[R1-esp-peer-spub-v1]remote-address遠端地址2010年上半年下午題試題五【問題2】配置OSPF[R1]OSPF1[R1-ospf-1]area0[R1-ospf-1-area-0]network55[R1-ospf-1-area-0]network55試題五【問題3】配置ISATAP隧道地址[ISATAP]interfacetunnel0/0/0創(chuàng)建隧道接口[ISATAP-tunnel0/0/0]tunnel-protocolipv6-ipv4isatap隧道協(xié)議為ISATAP[ISATAP-tunnel0/0/0]ipv6enable開啟IPV6功能[ISATAP-tunnel0/0/0]ipv6address2001:DA8:8000:3::/64eui-64為tunnel口配置IPV6地址[ISATAP-tunnel0/0/0]sourceG0/0/0隧道源接口為G0/0/0[ISATAP-tunnel0/0/0]undoipv6ndrahalt取消ND路由器通告的抑制2010年下半年下午題試題五【問題3】配置GRE隧道[R1]interfacetunnel0/0/0[R1-tunnel0/0/0]tunnel-prtocolgre隧道協(xié)議為GRE[R1-tunnel0/0/0]IPV6enable開啟IPV6功能[R1-tunnel0/0/0]Ipv6address2000:2fcc::2/64為tunnel口配置IPV6地址[R1-tunnel0/0/0]sourceS1/0隧道源接口為S1/0[R1-tunnel0/0/0]destination隧道目的地址為2011年上半年下午題試題四【問題1】[Router-a]IProute-static54[Router-a]IProute-static54試題四【問題3】在R1上配置IKE對等體配置預共享密鑰和對端IP[R1]ikepeerspubv1[R1-ike-peer-spub]ike-proposal5[R1-ike-peer-spub]pre-shared-keysimplehuawei使用預共享密鑰[R1-ike-peer-spub]remote-address對等體(遠端地址)[R1-ike-peer-spub]quit試題四【問題4】在網段/24和網段./24之間建立IPSec隧道策略3101[R1]aclnumber3101[Router-acl-adv-3101]rulepermitipsource55destination55[Router-acl-adv-3101]ruledenyip試題四【問題5】在R1上配置IPSec安全提議[R1]ipsecproposalsecp1[R1-ipsec-proposal-secp-1]espauthentication-algorithmsha證算法使用的是（SHA1）[R1-ipsec-proposal-secp-1]espencryption-algorithm3des-abc加密算法使用的是（3DES）試題五【問題1】配置RIP協(xié)議[R1]serial0[R1-serial0]ipaddress24[R1]RIP1[R1-rip-1]network宣告直聯(lián)網絡試題五【問題2】配置基本ACL[HUAWEI]acl2001[HUAWEI-acl-basic-2001]ruledenysource55[HUAWEI-acl-basic-2001]rulepermitany[HUAWEI]interfacee0/0[HUAWEI-e0/0]traffic-filteroutboundacl2001訪問控制列表應用到接口，方向(inbound或outbound)試題五【問題3】配置高級ACL[HUAWEI]acl3000[HUAWEI-acl-dav-3000]ruledenytcpsource55destination55destination-proteq80[HUAWEI-acl-dav-3000]rulepermitipsourceanydestinationany2011年下半年下午題試題四【問題3】基本ACL禁止內網用戶54訪問公司web服務器和外網[HUAWEI]acl2001[HUAWEI-acl-basic-2001]ruledenysource540[HUAWEI-acl-basic-2001]rulepermitsourceany[HUAWEI]interfacee0/1[HUAWEI-e0/0]traffic-filterinboundacl2001訪問控制列表應用到接口，方向(inbound或outbound)試題四【問題5】高級ACL使內網主機可以使用telnet對web服務器進行維護[HUAWEI-acl-dav-3000]ruledenytcpsource0destination00destination-proteq23或telnet試題五【問題1】配置路由器<HUAWEI>system-view[HUAWEI]IPV6[HUAWEI]interfaceG0/0/0[HUAWEI-G0/0/0]ipaddress配置端口ip地址[HUAWEI-G0/0/0]natptenable接口啟用NAT-PT功能[HUAWEI-G0/0/0]quit[HUAWEI]interfaceG0/0/1[HUAWEI-G0/0/1]ipv6address2001:AAAA::1/64[HUAWEI-G0/0/1]natptenable接口啟用NAT-PT功能[HUAWEI-G0/0/0]quit配置IPV6ACL[HUAWEI]aclipv62000[HUAWEI-acl6-basic-2000]rulepermitsource2001:AAAA::64配置NAT-PT前綴[HUAWEI]natptprefix2001:AAAA:0:0:0:1::配置NAT-PT地址池[HUAWEI]natptaddress-group100配置IPV6側報文的動態(tài)映射[RouterB]natptv6bounddynamicacl62000address-group1no-pat2012年上半年下午題試題一【問題3】交換機配置[HUAWEI]interfacevlanif99[HUAWEI-vlanif99]ipaddress54[HUAWEI-vlanif99]quit[HUAWEI]interfacevlanif100[HUAWEI-vlanif100]ipaddress54[HUAWEI-vlanif100]quit[HUAWEI]interfaceE1/2[HUAWEI-E1/2]portlink-typeaccess接口鏈路模式access[HUAWEI-E1/2]portdefaultvlan99[HUAWEI-E1/2]quit[HUAWEI]interfaceG2/1[HUAWEI-G2/1]portlink-typetrunk接口鏈路模式為trunk[HUAWEI-G2/1]porttrunkallow-passvlanalltrunk模式下所有vlan允許通過[HUAWEI-G2/1]quit[HUAWEI]interfacevlanif1[HUAWEI-vlanif1]ipaddress54[HUAWEI-vlanif1]quit[HUAWEI]iproute-static54配置默認路由試題五【問題1】配置RIP路由[R2]rip1[R2-rip-1]network宣告直聯(lián)網絡[R2-rip-1]network[R2-rip-1]network試題五【問題2】[R1]interfaceS0/0[R1-S0/0]ipaddress24[R1-S0/0]undoshutdown[R1]iproute-static配置靜態(tài)路由[R1]ipsecproposaltran1Ipsec提議[R1-ipsec-proposal-tran1]espauthentication-algorithmsha2-256驗證算法(SHA2)[R1-ipsec-proposal-tran1]espencryption-algorithm3des-abc加密算法(3DES)[R1]ikeproposal5IKE提議[R1-ike-proposal-5]encryption-algorithmaes-abc-128加密算法是（AES）[R1-ike-proposal-5]authentication-algorithmsha1認證算法是（SHA1）[R1-ike-proposal-5]dhgroup14認證組[R1]ikepeerspubv1[R1-ike-peer-spub]ike-proposal5[R1-ike-peer-spub]pre-shared-keysimplehuawei預共享密鑰[R1-ike-peer-spub]remote-address對等體(遠端地址)[R1]ipsecpolicyuse110isakmpIpsec策略[R1-ipsec-policy-isakmp-use1-10]ike-peerspub[R1-ipsec-policy-isakmp-use1-10]proposaltran1[R1-ipsec-policy-isakmp-use1-10]securityacl3101[R1]interfaceS0/0/0[R1-S0/0]ipsecpolicyuse1Ipsec策略應用到接口2012年下半年下午題試題四【問題2】[SW2]interfaceE0/0[SW2-E0/0]portlink-typetrunk接口鏈路模式trunk[SW2-E0/0]porttrunkallow-passvlanall[SW2]interfaceE0/1[SW2-E0/1]portlink-typeaccess接口鏈路模式access[SW2-E0/1]portdefaultvlan3試題四【問題3】SNMP網絡管理相關配置[Huawei]snmp-agentcommunityreadro只讀團體名[Huawei]snmp-agentcommunitywriterw讀寫團體名試題四【問題4】防火墻配置[USG]nataddress-group160地址組1[USG]nat-policyinterzonetrustuntrustoutbound區(qū)域間策略[USG-policy-interzone-trust-untrust-outbound]policy1策略1[USG-policy-interzone-trust-untrust-outbound-1]policysouceany策略地址[USG-policy-interzone-trust-untrust-outbound-1]actionsource-nat動作[USG-policy-interzone-trust-untrust-outbound-1]address-group1[USG]iproute-static對外默認靜態(tài)路由2013年上半年下午題試題四【問題2】配置高級ACL[Huawei]acl3000[Huawei-acl-dav-3000]rulepermitipsource00destinationany[Huawei-acl-dav-3000]rulepermittcpdestination00destination-porteqftp[Huawei-acl-dav-3000]rulepermittcpdestination00destination-porteqwww[Huawei-acl-dav-3000]rulepermittcpsource55destination00[Huawei-acl-dav-3000]rulepermitip[Huawei]interfacevlanif10[Huawei-vlanif10]traffic-filterinboundacl3000訪問控制列表應用到接口(進)[Huawei]acl3002[Huawei-acl-dav-3002]ruledenyip[Huawei]interfacevlanif1[Huawei-vlanif1]traffic-filterinboundacl3002訪問控制列表應用到接口(進)試題四【問題3】基于時間訪問控制列表高級ACL配置[Huawei]time-rangtelnettime8:00to18:00working-day[Huawei]time-rangtelnettime8:00to12:00off-day周末[Huawei]acl3004[Huawei-acl-dav-3004]ruledenyipsource55destinationany[Huawei-acl-dav-3004]rulepermitiptime-rangtelnettime[Huawei]interfaceG0/0/6[Huawei-G0/0/6]traffic-filteroutboundacl3004訪問控制列表應用到接口(出)2013年下半年下午題試題二【問題4】配置高級ACL[Huawei]acl3001[Huawei-acl-dav-3001]rulepermittcpsourceanydestination00destinationeq80(www)允許internet用戶訪問WebServer[Huawei-acl-dav-3001]rulepermittcpsource000destination0destination-porteq23允許主機00Telenet到WebServer[Huawei-acl-dav-3001]ruledenyip禁止所有ip包試題四【問題1】配置DHCP[Huawei]dhcpenable開啟DHCP功能[Huawei]ippoolvlan3[Huawei-ip-pool-vlan3]networkmask[Huawei-ip-pool-vlan3]geteway-list54網關列表[Huawei-ip-pool-vlan3]dns-listDNS列表[Huawei-ip-pool-vlan3]lease0hour8租約0天8小時[Huawei-ip-pool-vlan3]excluded-ip-address54排除地址[Huawei]interfaceG0/0/0[Huawei-G0/0/0]dhcpselectglobal[Huawei]iproute-static配置靜態(tài)路由試題四【問題2】配置DHCP[Huawei]dhcpenable開啟DHCP功能[Huawei]interfacevlanif2[Huawei-vanif2]dhcpselectrelayDHCP中繼模式[Huawei-vanif2]dhcprelayserver-ipDHCP中繼服務器地址[Huawei]interfaceE0/0/1[Huawei-E0/0/1]portlink-typetrunk接口鏈路模式trunk[Huawei-E0/0/1]porttrunkallow-passvlanall[Huawei]interfaceE0/0/2[Huawei-E0/0/1]portlink-typeaccess接口鏈路模式access[Huawei-E0/0/1]portdefaultvlan22014年上半年下午題試題四【問題1】<Huawei>system-view進入系統(tǒng)視圖模式[Huawei]interfaceG0/0/0進入端口視圖模式[Huawei-G0/0/0]ipaddress24[Huawei-G0/0/0]undoshutdown開啟端口為down狀態(tài)[Huawei]interfaceLoopBack0進入loopback0端口配置子模式[Huawei-LoopBack0]ipaddress0[Huawei]user-interfacevty04進入虛擬接口0-4配置子模式[Huawei-ui-vty0-4]authentication-modepassword[Huawei-ui-vty0-4]setauthenticationpasswordcipherhuawei密文試題四【問題2】<Huawei>system-view[Huawei]interfaceG0/0/0[Huawei]acl3001[Huawei-acl-dav-3000]ruledenyipsource55destination55[Huawei-acl-dav-3000]rulepermitipsource55destinationany[Huawei]interfaceG0/0/1進入連接inter網的外部接口[Huawei-G0/0/1]natoutbound3001定義NET的內部或外部接口試題四【問題3】[Huawei]acl3102感興趣流量ACL[Huawei-acl-dav-3102]rulepermitipsource55destination55[Huawei-acl-dav-3102]ruledenyip[Huawei]ikeproposal5IKE提議[Huawei-ike-proposal-5]encryption-algorithmaes-abc-128加密算法是（AES）[Huawei-ike-proposal-5]authentication-algorithmsha1認證算法是（SHA1）[Huawei-ike-proposal-5]dhgroup14認證組對等體(遠端地址)[Huawei]ikepeerspubv1[Huawei-ike-peer-spub]ike-proposal5[Huawei-ike-peer-spub]pre-shared-keysimplehuawei預共享密鑰[Huawei-ike-peer-spub]remote-address遠端地址Ipsec提議[Huawei]ipsecproposaltran1[Huawei-ipsec-proposal-tran1]espauthentication-algorithmsha2-256驗證算法(SHA2)[Huawei-ipsec-proposal-tran1]espencryption-algorithmaes-abc加密算法(AES)Ipsec策略[Huawei]ipsecpolicyuse110isakmp[Huawei-ipsec-policy-isakmp-use1-10]ike-peerspub[Huawei-ipsec-policy-isakmp-use1-10]proposaltran1[Huawei-ipsec-policy-isakmp-use1-10]securityacl3102[Huawei]interS0/0/0進入連接inter網的外部接口[Huawei-S0/0/0]ipsecpolicyuse1Ipsec策略應用到接口2014年下半年下午題試題三【問題2】[Huawei]aclnumber3000[Huawei-acl-dav-3000]rulepermitipsourceanydestination55[Huawei-acl-dav-3000]ruledenyip[Huawei]aclnumber3001[Huawei-acl-dav-3001]ruledenyipsourceanydestination55[Huawei-acl-dav-3000]rulepermitip[Huawei]nataddress-group10002[Huawei]nataddress-group20002[Huawei]interfaceSerial0/0/1[Huawei-Serial0/0/0]natoutbound3000address-group1[Huawei]interfaceSerial0/0/1[Huawei-Serial0/0/1]natoutbound3001address-group2[Huawei-Serial0/0/0]natserverprotocoltcpglobal0080inside0080[Huawei-Serial0/0/0]natserverprotocoltcpglobal0080inside0080試題三【問題3】[Huawei]iproute-statics0[Huawei]iproute-static.s1[Huawei]iproute-static.s0prefence120優(yōu)先級試題四【問題1】[Huawei]gvrp啟用gvrp功能[Huawei]interfaceG0/0/1[Huawei-G0/0/1]gvrp接口里二次啟用gvrp功能[Huawei-G0/0/1]gvrpregistrationnormal或fixed或forbidden[Huawei]port-group1[Huawei-port-group-1]group-memberg0/0/22tog0/0/23批量配置端口[Huawei-port-group-1]portlink-typetrunk[Huawei-port-group-1]porttrunkallow-passvlanall試題四【問題2】[Huawei]acl2000[HUAWEI-acl-basic-2000]rulepeimitipsource55[HUAWEI-acl-basic-2000]ruledenysourceany[Huawei]interfaceSerial0/0/0[Huawei-Serial0/0/0]natoutbound2000[Huawei]interfaceSerial0/0/0進入連接inter網的外部接口[Huawei-Serial0/0/0]natstaticglobalinside2015年上半年下午題試題一【問題5】虛擬路由冗余[Huawei]interfacevlanif20[Huawei-vlanif20]ipaddress53[Huawei-vlanif20]VRRPvrid2ip50路由器虛擬冗余組[Huawei-vlanif20]VRRP2preempt開啟搶占功能[Huawei-vlanif20]quit試題四【問題2】[Huawei]interfaceg0/0/1[Huawei-g0/0/1]descriptionwgsw-g/0/1添加備注信息[Huawei-g0/0/1]undoportswitch[Huawei-g0/0/1]ipsddress[Huawei]port-group1[Huawei-port-group-1]group-memberg0/0/2tog0/0/20批量配置端口[Huawei-port-group-1]portlink-typeaccess接口鏈路模式access[Huawei-port-group-1]portdefaultvlan10端口所屬vlan試題四【問題3】[Huawei]interfaceEth-Trunk1創(chuàng)建端口聚合組1[Huawei-Eth-Trunk1]modemanualload-balance模式為手工負載分擔[Huawei-Eth-Trunk1]modelacpstatic模式為靜態(tài)LACP模式[Huawei-Eth-Trunk1]trunkportG0/0/1to0/0/3添加物理端口[S2]interfaceEth-Trunk1創(chuàng)建端口聚合組1[S2-Eth-Trunk1]undoportswitch[S2-Eth-Trunk1]ipaddress試題四【問題4】[Huawei]dhcpenable開啟DHCP功能[Huawei]dhcpsnoopingenable開啟用戶DHCP偵聽功能開啟用戶接口的DHCP偵聽功能，接口默認模式為“Untrusted(不信任)”[Huawei]interfaceG0/0/1[Huawei-G0/0/1]dhcpsnoopingenable配置接口信任狀態(tài)，將連接DHCPServer的接口狀態(tài)設置為“Trusted(信任)”[Huawei]interfaceG0/0/3[Huawei-G0/0/3]dhcpsnoopingtrusted2015年下半年下午題試題二【問題2】[Huawei]dhcpenable[Huawei]aclnumber2000[HUAWEI-acl-basic-2000]rulepeimitipsource655[HUAWEI-acl-basic-2000]ruledenysourceany[Huawei]user-interfacevty04[Huawei-ui-vty0-4]acl2000inbound命名訪問控制列表[Huawei]aclname2000試題二【問題3】[Huawei]time-rangeTR1from00:002015/06/01to00:002015/06/03定義時間段[Huawei]time-rangeTR109:00to18:00working-day定義時間段[Huawei]aclnameinternet_limitadvance[Huawei-acl-adv-internet_limit]ruledenytcpsource55destination-porteq80time-rangeTR1試題二【問題4】配置高級ACL，允許UDP報文通過[Switch]acl3000[Switch-acl-adv-3000]rulepermitudpsource0destination0[Switch-acl-adv-3000]quit配置接口GE2/0/1出方向上自反ACL功能和老化時間，對UDP報文進行自反[Switch]interfaceGE1/0/1[Switch-GE1/0/1]traffic-reflectoutboundacl3000timeout600(毫秒)應用自反[Switch-GE1/0/1]quit試題四【問題2】<Huawei>system-view進入系統(tǒng)視圖[Huawei]sysnameSW1修改設備名稱為SW1[SW1]interfaceEthernet0/0/1進入Ethernet0/0/1接口配置視圖[SW1-Ethernet0/0/1]portlink-typetrunk配置上聯(lián)接口類型（trunk）[SW1-Ethernet0/0/1]porttrunkallow-passvlanall允許所有VLAN通過[SW1]vlan10創(chuàng)建VLAN10[SW1]interfaceVlanif10[SW1-Vlanif10]ipaddress0640[SW1-Vlanif10]dhcpselectrelayDHCP中繼模式[SW1-Vlanif10]dhcprelayserver-ip49DHCP中繼服務器地址[SW1]rip1[SW1-rip-1]version2版本[SW1-rip-1]network宣告直聯(lián)網絡[SW1-rip-1]return第三級視圖跳回用戶視圖<SW1>2016年上半年下午題試題二【問題2】1、配置基本ACL[Huawei]acl2001[HUAWEI-acl-basic-2001]rulepermit55[HUAWEI-acl-basic-2001]ruledeny55[HUAWEI-acl-basic-2001]ruledeny55[HUAWEI-acl-basic-2001]ruledeny55[Huawei]interfaceF0/1[Huawei-F0/1]traffic-filteroutboundacl20012、基于時間訪問控制列表高級ACL配置[Huawei]time-rangejxq8:00to18:00daily每天[Huawei]time-rangexsssq8:00to24:00daily[Huawei]acl3001[Huawei-acl-dav-3001]rulepermitipsource55destinationany[Huawei-acl-dav-3001]rulepermitipsource55destinationany[Huawei-acl-dav-3001]ruledenyipsource55destinationtime-rangejxq[Huawei-acl-dav-3001]ruledenyipsource172.16.00.055destinationtime-rangexsssq[Huawei-acl-dav-3001]quit[Huawei]interfacef0/5[Huawei-f0/5]traffic-filteroutboundacl3001訪問控制列表應用到接口(出)試題二【問題3】自反高級ACL[Switch]acl3000[Switch-acl-adv-3000]rulepermitipdestination55[Switch-acl-adv-3000]quit[Switch]interfaceG0/0/2[Switch-GE1/0/1]traffic-reflectoutboundacl3000應用自反2016年下半年下午題試題四【問題1】[Huawei]dhcpenable[Huawei]ippooldepart1定義地址池[Huawei-ip-pool-depart1]networkmask定義分配子網[Huawei-ip-pool-depart1]gateway-list54網關列表[Huawei-ip-pool-depart1]dns-list53DNS列表[Huawei-ip-pool-depart1]leaseday0hour8租約必須帶時間單位[Huawei-ip-pool-depart1]excluded-ip-address0排除地址試題四【問題2】[Huawei]dhcpenable[Huawei]intvlanif10[Huawei-Vlanif10]dhcpse