『壹』 h3c璺鐢卞櫒閰嶇疆鍛戒護閮芥湁鍝浜 h3c璺鐢卞櫒閰嶇疆鍛戒護澶у叏銆愯﹁В銆
鎼滅嫍楂橀熸祻瑙堝櫒鏄涓嬈鵑泦楂樻晥銆佺ǔ瀹氫簬涓韜鐨勭幇浠ｅ寲緗戠粶嫻忚堝伐鍏楓傚埄鐢ㄥ厛榪涚殑娓叉煋寮曟搸鍜屼紭鍖栫畻娉曪紝鎼滅嫍楂橀熸祻瑙堝櫒紜淇濅簡鍗撹秺鐨勯〉闈㈠姞杞介熷害鍜屾祦鐣呯殑澶氬獟浣撲綋楠屻傚叿澶囧叏鏂逛綅鐨勫畨鍏ㄩ槻鎶ょ壒鎬э紝鑳芥湁鏁堥槻寰″悇綾葷綉緇滃▉鑳侊紝鍚屾椂鏀鎸丠TML5鍜孋SS3錛岀『淇濅簡涓庢渶鏂扮綉緇滄妧鏈鏍囧噯鐨勫畬緹庡吋瀹廣傛蹭簡瑙ｆ洿澶氭垨絝嬪嵆涓嬭澆錛岃瘋塊棶https://sogou.37moyu.com/
銆銆瀵逛簬涓鑸鐨勫跺涵璺鐢卞櫒鑰岃█錛屾垜浠鏄涓嶉渶瑕佸逛粬榪涜岄厤緗鐨勩傚洜涓哄跺涵璺鐢卞櫒榪欎竴縐嶅皬鍨嬭礬鐢卞櫒涓鑸閮藉凡緇忎簡紜瀹氱殑鎸囦護鍘繪墽琛屻備絾鏄瀵逛簬涓浜涘ぇ鍨嬭礬鐢卞櫒鑰岃█錛岄厤緗鍛戒護鏄闈炲父閲嶈佺殑銆傛ｆ槸鍥犱負鏈変簡閰嶇疆鍛戒護鐨勫瓨鍦錛屾墠鑳藉熶嬌澶у瀷璺鐢卞櫒瀹炶屽ぇ瑙勬ā鐨勫懡浠ゆ墽琛屻傞偅涔堟帴涓嬫潵錛屽皬緙栧氨鏉ョ粰澶у朵互H3C璺鐢卞櫒涓轟緥瀛愶紝璁茶插ぇ鍨嬭礬鐢卞櫒鐨勪竴浜涘父鐢ㄥ熀鏈閰嶇疆鍛戒護鍚с
銆銆蹇鎹烽敭
銆銆Ctrl+A錛屽皢 鍏夋爣 縐誨姩鍒板綋鍓嶈岀殑寮澶
銆銆Ctrl+B錛屽皢鍏夋爣鍚戝乏縐誨姩涓涓瀛楃
銆銆Ctrl+C錛屽仠姝㈠綋鍓嶆ｅ湪鎵ц岀殑鍔熻兘
銆銆Ctrl+D錛屽垹闄ゅ綋鍓嶅厜鏍囨墍鍦ㄤ綅緗鐨勫瓧絎
銆銆Ctrl+E錛屽皢鍏夋爣縐誨姩鍒板綋鍓嶈岀殑鏈灝
銆銆Ctrl+F錛屽皢鍏夋爣鍚戝彸縐誨姩涓涓瀛楃
銆銆Ctrl+H錛屽垹闄ゅ厜鏍囧乏渚х殑涓涓瀛楃
銆銆Ctrl+K錛岀粓姝㈠懠鍑虹殑榪炴帴
銆銆Ctrl+R錛岄噸鏂版樉紺哄綋鍓嶈屼俊鎮
銆銆Ctrl+V錛岀矘璐村壀璐存澘鐨勫唴瀹
銆銆Ctrl+W錛屽垹闄ゅ厜鏍囧乏渚ц繛緇瀛楃︿覆鍐呯殑鎵鏈夊瓧絎
銆銆Ctrl+X錛屽垹闄ゅ厜鏍囧乏渚ф墍鏈夌殑瀛楃
銆銆Ctrl+Y錛屽垹闄ゅ厜鏍囧彸渚ф墍鏈夌殑瀛楃
銆銆Ctrl+Z錛岄鍥炲埌鐢ㄦ埛瑙嗗浘1-7
銆銆Ctrl+錛岀粓姝㈠綋鍓嶈繛鎺
銆銆Esc+B錛屽皢鍏夋爣縐誨姩鍒板乏渚ц繛緇瀛楃︿覆鐨勯栧瓧絎﹀
銆銆Esc+D錛屽垹闄ゅ厜鏍囨墍鍦ㄤ綅緗鍙婂叾鍙充晶榪炵畫瀛楃︿覆鍐呯殑鎵鏈夊瓧絎
銆銆Esc+F錛屽皢鍏夋爣鍚戝彸縐誨埌涓嬩竴涓榪炵畫瀛楃︿覆涔嬪墠
銆銆Esc+N錛屽皢鍏夋爣鍚戜笅縐誨姩涓琛(杈撳叆鍥炶濺鍓嶆湁鏁)
銆銆Esc+P錛屽皢鍏夋爣鍚戜笂縐誨姩涓琛(杈撳叆鍥炶濺鍓嶆湁鏁)
銆銆Esc+<錛屽皢鍏夋爣鎵鍦ㄤ綅緗鎸囧畾涓哄壀璐存澘鐨勫紑濮嬩綅緗
銆銆Esc+>錛屽皢鍏夋爣鎵鍦ㄤ綅緗鎸囧畾涓哄壀璐存澘鐨勭粨鏉熶綅緗
銆銆鍩烘湰閰嶇疆鍛戒護
銆銆[Quidway]sysname router_name錛屽懡鍚嶈礬鐢卞櫒(鎴 浜ゆ崲鏈 )
銆銆[Quidway]delete錛屽垹闄Flash ROM涓鐨勯厤緗
銆銆[Quidway]save錛屽皢閰嶇疆鍐欏叆FlashROM
銆銆[Quidway]interface serial 0錛岃繘鍏ユ帴鍙ｉ厤緗妯″紡
銆銆[Quidway]quit錛岄鍑烘帴鍙ｆā寮忓埌緋葷粺瑙嗗浘
銆銆[Quidway]shutdown/undo shutdown錛屽叧闂/閲嶅惎鎺ュ彛
銆銆[Quidway]ip address ip_address subnet_mask錛屼負鎺ュ彛閰嶇疆IP鍦板潃鍜屽瓙緗戞帺鐮
銆銆[Quidway]display錛屾樉紺篤RP鐗堟湰鍙
銆銆[Quidway]display current-configuration錛屾樉紺虹郴緇熻繍琛岄厤緗淇℃伅
銆銆[Quidway]display interfaces錛屾樉紺烘帴鍙ｉ厤緗淇℃伅
銆銆[Quidway]display ip routing錛屾樉紺鴻礬鐢辮〃
銆銆[Quidway]ping ip_address錛屾祴璇曠綉緇滆繛閫氭
銆銆[Quidway]tracert ip_address錛屾祴璇曟暟鎹鍖呬粠涓繪満鍒扮洰鐨勫湴鎵緇忚繃鐨勭綉鍏
銆銆[Quidway]debug all錛屾墦寮鎵鏈夎皟璇曚俊鎮
銆銆[Quidway]undo debug all錛屽叧闂鎵鏈夎皟璇曚俊鎮
銆銆[Quidway]info-center enable錛屽紑鍚璋冭瘯淇℃伅杈撳嚭鍔熻兘
銆銆[Quidway]info-center console bugging錛屽皢璋冭瘯淇℃伅杈撳嚭鍒癙C
銆銆[Quidway]info-center monitor bugging錛屽皢璋冭瘯淇℃伅杈撳嚭鍒癟elnet緇堢鎴栧搼緇堢
銆銆[Quidway]super password password錛屼慨鏀圭壒鏉冩ā寮忓彛浠
銆銆[Quidway]sysname switch_name錛屽懡鍚嶄氦鎹㈡満(鎴栬礬
銆銆[Quidway]interface ethernet 0/1錛岃繘鍏ユ帴鍙ｈ嗗浘
銆銆[Quidway]quit錛岄鍑虹郴緇熻嗗浘
銆銆[Quidway-Ethernet0/1]plex{half|full|auto}錛岄厤緗鎺ュ彛鍙屽伐宸
銆銆[Quidway-Ethernet0/1]speed {10|100|auto}錛岄厤緗鎺ュ彛閫熺巼
銆銆[Quidway-Ethernet0/1]flow-control錛屽紑鍚嫻佹帶鍒
銆銆[Quidway-Ethernet0/1]mdi{across|normal|auto}錛岄厤緗甅DI/MDIX
銆銆[Quidway-Ethernet0/1]shutdown/undo shutdown錛屽叧闂/閲嶅惎絝鍙
銆銆鍏朵粬鍛戒護
銆銆VLAN鍩烘湰閰嶇疆鍛戒護(浠QuidwayS3026涓轟緥) [Quidway]vlan 3 鍒涘緩騫惰繘鍏VLAN閰嶇疆妯″紡錛岀己鐪佹椂緋葷粺灝嗘墍鏈夌鍙ｅ姞鍏VLAN 1錛岃繖涓絝鍙ｆ棦涓嶈兘琚鍒涘緩涔熶笉鑳借鍒犻櫎銆
銆銆[Quidway]undo vlan 3錛屽垹闄や竴涓猇LAN
銆銆[Quidway-vlan3]port ethernet 0/1 toethernet 0/4 錛岀粰VLAN澧炲姞/鍒犻櫎浠ュお緗戞帴鍙
銆銆[Quidway-Ethernet0/2]port access vlan3灝嗘湰鎺ュ彛鍔犲叆鍒版寚瀹歏LANid [Quidway-Ethernet0/2]port link-type {access|trunk|hybrid} 璁劇疆絝鍙ｅ伐浣滄柟寮忥紝access(緙虹渷)涓嶆敮鎸802.1q甯х殑浼犻侊紝鑰宼runk鏀鎸(鐢ㄤ簬Switch闂翠簰榪)錛宧ybrid鍜宼runk鐨勫尯鍒鍦ㄤ簬 trunk
銆銆鍙鍏佽哥己鐪乂LAN鐨勬姤鏂囧彂閫佹椂涓嶆墦鏍囩撅紝鑰宧ybrid鍏佽稿氫釜VLAN鎶ユ枃鍙戦佹椂涓嶆墦鏍囩俱
銆銆MP閰嶇疆鍛戒護
銆銆[Quidway-Serial0]ppp mp錛屽皝瑁匨P鍗忚
銆銆[Quidway]ppp mp name bind virtual-template number錛屽緩絝嬬敤鎴蜂笌鉶氭嫙妯℃澘鐨勫瑰簲鍏崇郴
銆銆[Quidway]interface virtual-template number錛岄厤緗鉶氭嫙鎺ュ彛妯℃澘
銆銆[Quidway]ppp mp max-bind number錛岃劇疆鉶氭嫙妯℃澘鏈澶х粦瀹氭暟(1-100)
銆銆甯т腑緇ч厤緗鍛戒護
銆銆[Quidway-Serial0]link-protocol fr{mfr|ietf|nonstandard}錛屽皝瑁呭撫涓緇у崗璁:IETF銆丆isco鍏煎
銆銆[Quidway-Serial0]fr interface-type{dte|dce|nni}錛岄厤緗甯т腑緇ф帴鍙ｇ被鍨嬶紝NNI涓哄撫涓緇т氦鎹㈡満涔嬮棿鐨勬帴鍙ｃ傝嫢閰嶄負DCE鎴朜NI錛屽垯欏誨厛浣胯兘fr switching銆
銆銆[Quidway-Serial0]fr lmi type{q933a|ansi|cisco-compatible}錛岄厤緗甃MI鍗忚綾誨瀷
銆銆[Quidway-Serial0]fr dlci dlci_number錛岄厤緗涓鏉℃湰鍦拌櫄鐢佃礬鍙
銆銆[Quidway-Serial0]fr map {ip|ipx}protocol-address dlci dlci_number錛屽緩絝嬫湰鍦癉LCI鍒板圭鍗忚鍦板潃鐨勬槧灝
銆銆[Quidway-Serial0]fr inarp [ip|ipx][dlci_number]錛岄厤緗甀nverse ARP鍔ㄦ佹槧灝
銆銆[Quidway]interface typenumber.subinterface_number錛屽壋寤哄苟榪涘叆瀛愭帴鍙ｉ厤緗妯″紡
銆銆RIP鍗忚閰嶇疆鍛戒護
銆銆[Quidway]display rip錛屾樉紺篟IP閰嶇疆淇℃伅
銆銆[Quidway]rip錛屽惎鍔ㄥ苟榪涘叆RIP閰嶇疆妯″紡
銆銆[Quidway-rip]network {network_number|all}錛屽湪鎸囧畾緗戠粶涓婁嬌鑳絉IP
銆銆[Quidway-rip]peer ip_address錛岄厤緗鎶ユ枃鐨勫畾鐐逛紶閫
銆銆[Quidway-Ethernet0]rip {1|2 [bcast|mcast]}錛屾寚瀹歊IP鐗堟湰鍙婁紶閫佹柟寮
銆銆[Quidway-Serial0]rip work錛屾寚瀹氭帴鍙ｅ伐浣滅姸鎬(鍚宺ipinput,rip output)
銆銆[Quidway-rip]auto-summary錛岄厤緗甊IP-2璺鐢辮仛鍚
銆銆[Quidway-Serial0]rip authentication simplepassword錛岄厤緗甊IP-2鏄庢枃璁よ瘉瀵嗙爜
銆銆[Quidway-Serial0]rip authentication md5key-string string錛岄厤緗甊IP-2 MD5瀵嗘枃璁よ瘉瀵嗙爜涓
銆銆[Quidway-Serial0]rip authentication md5type {nonstandard-compatible|usual}錛屾寚瀹歁D5綾誨瀷
銆銆[Quidway]debugging rip packet錛屾墦寮RIP璋冭瘯 寮鍏
銆銆[Quidway]info-center console錛屽皢璋冭瘯淇℃伅杈撳嚭鍒癙C
銆銆闈欐佽礬鐢遍厤緗鍛戒護
銆銆[Quidway]ip route ip_address subnet_mask{interface_name|gateway_address} [preference preference_value] [reject|black_bone]
銆銆[鍛戒護璇存槑] reject:浠諱綍鍘誨線璇ョ洰鐨勫湴鐨勬姤鏂囧潎琚涓㈠純錛岄氱煡婧愪富鏈轟笉鍙杈俱
銆銆black_bone:浠諱綍鍘誨線璇ョ洰鐨勫湴鐨勬姤鏂囧潎琚涓㈠純錛屼笉閫氱煡婧愪富鏈恆
銆銆褰撳彧鏈変笅涓璺崇殑鎺ュ彛鏄疨PP鎴朒DLC鎺ュ彛鎵嶈兘鍐檌nterface_name錛屽係erial0錛屽惁鍒欏彧鑳藉啓gateway_address(涓嬩竴璺沖湴鍧)銆
銆銆鎬葷粨錛 灝忕紪鍦ㄤ笂鏂囦腑涓哄ぇ瀹朵粙緇嶄簡H3C璺鐢卞櫒鐨勪竴浜涘父鐢ㄥ熀鏈閰嶇疆鍛戒護銆傚逛簬澶у瀷璺鐢卞櫒鑰岃█錛屽熀鏈鐨勯厤緗鍛戒護鏄闈炲父蹇呰佺殑銆傚敮鏈夎繖鏍鳳紝榪欎簺澶у瀷璺鐢卞櫒鎵嶈兘澶熷噯紜鎵ц屼換鍔°傝屽逛簬H3C璺鐢卞櫒錛屾兂瑕佽╄繖涓璺鐢卞櫒瀹炵幇鏈濂界殑鎵ц屽敮鏈夌粰鍑烘ｇ『鐨勫懡浠ゃ傝屽懡浠や箣澶氾紝浣垮緱鎴戜滑寰堥毦鍘昏頒綇錛屽洜姝ゆ渶濂界殑鏂規硶渚挎槸鎶婅繖浜涘懡浠よ頒笅鏉ワ紝浠ヤ究鑳藉熼殢鏃舵煡闃呫
鎬葷粨鑰岃█錛屾悳鐙楅珮閫熸祻瑙堝櫒鏄涓嬈句負婊¤凍鐜頒唬緗戠粶闇奼傝岀簿蹇冩墦閫犵殑嫻忚堝櫒銆傚叾涓撲笟鐨勫紑鍙戝洟闃熶笉浠呮敞閲嶆彁渚涗竴嫻佺殑鐢ㄦ埛浣撻獙錛岃繕鑷村姏浜庝笉鏂浼樺寲緗戦〉鎵ц岄熷害錛屽炲己瀹夊叏鎬э紝浠ュ強鏀鎸佸悇綾繪墿灞曟彃浠訛紝浠庤屽疄鐜伴珮搴︿釜鎬у寲鐨勬祻瑙堜綋楠屻傚傛灉鎮ㄥ湪瀵繪壘涓嬈懼彲闈犮侀珮鏁堝拰鎶鏈鍏堣繘鐨勬祻瑙堝櫒錛屾悳鐙楅珮閫熸祻瑙堝櫒灝嗘槸鎮ㄧ殑鐞嗘兂閫夋嫨銆傝瘋塊棶瀹樻柟緗戠珯https://sogou.37moyu.com/ 涓嬭澆騫朵綋楠屾悳鐙楅珮閫熸祻瑙堝櫒錛屾劅鍙楃敱鍏堣繘鎶鏈鎵椹卞姩鐨勯潪鍑℃祻瑙堜綋楠屻
『貳』 H3C路由器基本配置命令
H3C路由器基本配置命令
H3C路由器基本配置要怎麼設置，下面我為大家分享的是路由器的基本配置命令，希望對同學們學習H3C路由器配置的基礎知識有幫助!
H3C路由器基本配置命令
[Quidway]displayversion 顯示版本信息
[Quidway]displaycurrent-configuration 顯示當前配置
[Quidway]displayinterfaces 顯示介面信息
[Quidway]displayip route 顯示路由信息
[Quidway]sysnameaabbcc 更改主機名
[Quidway]superpasswrod 123456 設置口令
[Quidway]interfaceserial0 進入介面
[Quidway-serial0]ipaddress
[Quidway-serial0]undoshutdown 激活埠
[Quidway]link-protocolhdlc 綁定hdlc協議
[Quidway]user-interfacevty 0 4
[Quidway-ui-vty0-4]authentication-modepassword
[Quidway-ui-vty0-4]setauthentication-mode password simple 222
[Quidway-ui-vty0-4]userprivilege level 3
[Quidway-ui-vty0-4]quit
[Quidway]debugginghdlc all serial0 顯示所有信息
[Quidway]debugginghdlc event serial0 調試事件信息
[Quidway]debugginghdlc packet serial0 顯示包的信息
靜態路由：
[Quidway]iproute-static {interfacenumber|nexthop}[value][reject|blackhole]
例如：
[Quidway]iproute-static 129.1.0.0 16 10.0.0.2
[Quidway]iproute-static 129.1.0.0 255.255.0.0 10.0.0.2
[Quidway]iproute-static 129.1.0.0 16 Serial 2
[Quidway]iproute-static 0.0.0.0 0.0.0.0 10.0.0.2
動態路由：
[Quidway]rip
[Quidway]rip work
[Quidway]rip input
[Quidway]ripoutput
[Quidway-rip]network1.0.0.0 ;可以all
[Quidway-rip]network2.0.0.0
[Quidway-rip]peerip-address
[Quidway-rip]summary
[Quidway]ripversion 1
[Quidway]ripversion 2 multicast
[Quidway-Ethernet0]ripsplit-horizon ;水平分隔
[Quidway]router idA.B.C.D 配置路由器的`ID
[Quidway]ospfenable 啟動OSPF協議
[Quidway-ospf]import-routedirect 引入直聯路由
[Quidway-Serial0]ospfenable area 配置OSPF區域
標准訪問列表命令格式如下：
acl [match-order config|auto] 默認前者順序匹配。
rule[normal|special]{permit|deny} [source source-addr source-wildcard|any]
例：
[Quidway]acl 10
[Quidway-acl-10]rulenormal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rulenormal deny source any
擴展訪問控制列表配置命令
配置TCP/UDP協議的擴展訪問列表：
rule{normal|special}{permit|deny}{tcp|udp}source { |any}destination |any}
[operate]
配置ICMP協議的擴展訪問列表：
rule{normal|special}{permit|deny}icmp source { |any]destination{ |any]
[icmp-code][logging]
擴展訪問控制列表操作符的含義
equalportnumber 等於
greater-thanportnumber 大於
less-thanportnumber 小於
not-equalportnumber 不等
range portnumber1portnumber2 區間
擴展訪問控制列表舉例
[Quidway]acl 101
[Quidway-acl-101]ruledeny souce any destination any
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo-reply
[Quidway]acl 102
[Quidway-acl-102]rulepermit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]ruledeny ip source any destination any
[Quidway]acl 103
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewallenable
[Quidway]firewalldefault permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewallpacket-filter 101 inbound|outbound
地址轉換配置舉例
[Quidway]firewallenable
[Quidway]firewalldefault permit
[Quidway]acl 101
[Quidway-acl-101]ruledeny ip source any destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.4 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.1 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.2 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.3 0 destination any
[Quidway]acl 102
[Quidway-acl-102]rulepermit tcp source 202.39.2.3 0 destination 202.38.160.1 0
[Quidway-acl-102]rulepermit tcp source any destination 202.38.160.1 0 destination-port great-than
1024
[Quidway-Ethernet0]firewallpacket-filter 101 inbound
[Quidway-Serial0]firewallpacket-filter 102 inbound
[Quidway]nataddress-group 202.38.160.101 202.38.160.103 pool1
[Quidway]acl 1
[Quidway-acl-1]rulepermit source 10.110.10.0 0.0.0.255
[Quidway-acl-1]ruledeny source any
[Quidway-acl-1]intserial 0
[Quidway-Serial0]natoutbound 1 address-group pool1
[Quidway-Serial0]natserver global 202.38.160.101 inside 10.110.10.1 ftp tcp
[Quidway-Serial0]natserver global 202.38.160.102 inside 10.110.10.2 www tcp
[Quidway-Serial0]natserver global 202.38.160.102 8080 inside 10.110.10.3 www tcp
[Quidway-Serial0]natserver global 202.38.160.103 inside 10.110.10.4 smtp udp
PPP驗證：
主驗方：pap|chap
[Quidway]local-useru2 password {simple|cipher} aaa
[Quidway]interfaceserial 0
[Quidway-serial0]pppauthentication-mode {pap|chap}
[Quidway-serial0]pppchap user u1 //pap時，不用此句
pap被驗方：
[Quidway]interfaceserial 0
[Quidway-serial0]ppppap local-user u2 password {simple|cipher} aaa
chap被驗方：
[Quidway]interfaceserial 0
[Quidway-serial0]pppchap user u1
[Quidway-serial0]local-useru2 password {simple|cipher} aaa
『叄』 H3C路由器基本配置命令
H3C路由器基本配置命令大全
H3C路由器基本配置命令有哪些?下面跟我一起來學習一下吧!
[Quidway]displayversion 顯示版本信息
[Quidway]displaycurrent-configuration 顯示當前配置
[Quidway]displayinterfaces 顯示介面信息
[Quidway]displayip route 顯示路由信息
[Quidway]sysnameaabbcc 更改主機名
[Quidway]superpasswrod 123456 設置口令
[Quidway]interfaceserial0 進入介面
[Quidway-serial0]ipaddress
[Quidway-serial0]undoshutdown 激活埠
[Quidway]link-protocolhdlc 綁定hdlc協議
[Quidway]user-interfacevty 0 4
[Quidway-ui-vty0-4]authentication-modepassword
[Quidway-ui-vty0-4]setauthentication-mode password simple 222
[Quidway-ui-vty0-4]userprivilege level 3
[Quidway-ui-vty0-4]quit
[Quidway]debugginghdlc all serial0 顯示所有信息
[Quidway]debugginghdlc event serial0 調試事件信息
[Quidway]debugginghdlc packet serial0 顯示包的信息
靜態路由：
[Quidway]iproute-static {interfacenumber|nexthop}[value][reject|blackhole]
例如：
[Quidway]iproute-static 129.1.0.0 16 10.0.0.2
[Quidway]iproute-static 129.1.0.0 255.255.0.0 10.0.0.2
[Quidway]iproute-static 129.1.0.0 16 Serial 2
[Quidway]iproute-static 0.0.0.0 0.0.0.0 10.0.0.2
動態路由：
[Quidway]rip
[Quidway]rip work
[Quidway]rip input
[Quidway]ripoutput
[Quidway-rip]network1.0.0.0 ;可以all
[Quidway-rip]network2.0.0.0
[Quidway-rip]peerip-address
[Quidway-rip]summary
[Quidway]ripversion 1
[Quidway]ripversion 2 multicast
[Quidway-Ethernet0]ripsplit-horizon ;水平分隔
[Quidway]router idA.B.C.D 配置路由器的ID
[Quidway]ospfenable 啟動OSPF協議
[Quidway-ospf]import-routedirect 引入直聯路由
[Quidway-Serial0]ospfenable area 配置OSPF區域
標准訪問列表命令格式如下：
acl [match-order config|auto] 默認前者順序匹配。
rule[normal|special]{permit|deny} [source source-addr source-wildcard|any]
例：
[Quidway]acl 10
[Quidway-acl-10]rulenormal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rulenormal deny source any
擴展訪問控制列表配置命令
配置TCP/UDP協議的擴展訪問列表：
rule{normal|special}{permit|deny}{tcp|udp}source {|any}destination|any}
[operate]
配置ICMP協議的`擴展訪問列表：
rule{normal|special}{permit|deny}icmp source {|any]destination{|any]
[icmp-code][logging]
擴展訪問控制列表操作符的含義
equalportnumber 等於
greater-thanportnumber 大於
less-thanportnumber 小於
not-equalportnumber 不等
range portnumber1portnumber2 區間
擴展訪問控制列表舉例
[Quidway]acl 101
[Quidway-acl-101]ruledeny souce any destination any
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo-reply
[Quidway]acl 102
[Quidway-acl-102]rulepermit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]ruledeny ip source any destination any
[Quidway]acl 103
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewallenable
[Quidway]firewalldefault permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewallpacket-filter 101 inbound|outbound
地址轉換配置舉例
[Quidway]firewallenable
[Quidway]firewalldefault permit
[Quidway]acl 101
[Quidway-acl-101]ruledeny ip source any destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.4 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.1 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.2 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.3 0 destination any
[Quidway]acl 102
[Quidway-acl-102]rulepermit tcp source 202.39.2.3 0 destination 202.38.160.1 0
[Quidway-acl-102]rulepermit tcp source any destination 202.38.160.1 0 destination-port great-than
1024
[Quidway-Ethernet0]firewallpacket-filter 101 inbound
[Quidway-Serial0]firewallpacket-filter 102 inbound
[Quidway]nataddress-group 202.38.160.101 202.38.160.103 pool1
[Quidway]acl 1
[Quidway-acl-1]rulepermit source 10.110.10.0 0.0.0.255
[Quidway-acl-1]ruledeny source any
[Quidway-acl-1]intserial 0
[Quidway-Serial0]natoutbound 1 address-group pool1
[Quidway-Serial0]natserver global 202.38.160.101 inside 10.110.10.1 ftp tcp
[Quidway-Serial0]natserver global 202.38.160.102 inside 10.110.10.2 www tcp
[Quidway-Serial0]natserver global 202.38.160.102 8080 inside 10.110.10.3 www tcp
[Quidway-Serial0]natserver global 202.38.160.103 inside 10.110.10.4 smtp udp
PPP驗證：
主驗方：pap|chap
[Quidway]local-useru2 password {simple|cipher} aaa
[Quidway]interfaceserial 0
[Quidway-serial0]pppauthentication-mode {pap|chap}
[Quidway-serial0]pppchap user u1 //pap時，不用此句
pap被驗方：
[Quidway]interfaceserial 0
[Quidway-serial0]ppppap local-user u2 password {simple|cipher} aaa
chap被驗方：
[Quidway]interfaceserial 0
[Quidway-serial0]pppchap user u1
[Quidway-serial0]local-useru2 password {simple|cipher} aaa
;