h3c無線配置命令

『壹』 H3C MSR系列路由器求配置命令

1、進入H3C路由器的管理地址。192.168.55.1。輸入密碼等信息進入頁面。

『貳』 H3C路由器配置命令

H3C路由器配置命令

H3C CAS雲計算管理平台基於業界領先的虛擬化基礎架構，實現了數據中心IaaS雲計算環境的中央管理控制，以簡潔的`管理界面，統一管理數據中心內所有的物理資源和虛擬資源。下面是我整理的關於H3C路由器配置命令，希望大家認真閱讀!

一、路由器基本配置命令

1、system-view 進入系統視圖模式

2、sysname R1 為設備命名為R

3、display ip routing-table 顯示當前路由表

4、language-mode Chinese|English 中英文切換

5、interface Ethernet 0/0 進入乙太網埠視圖

6、ip address 192.168.1.1 255.255.255.0 配置IP地址和子網掩碼

7、undo shutdown 打開乙太網埠

8、shutdown 關閉乙太網埠

9、quit 退出當前視圖模式

10、ip route-static 192.168.2.0 255.255.255.0 192.168.12.2 description To.R2 配置靜態路由

11、ip route-static 0.0.0.0 0.0.0.0 192.168.12.2 description To.R2 配置默認的路由

基本配置案例

[Quidway]display version 顯示版本信息

[Quidway]display current-configuration 顯示當前配置

[Quidway]display interfaces 顯示介面信息

[Quidway]display ip route 顯示路由信息

[Quidway]sysname aabbcc 更改主機名

[Quidway]super passwrod 123456 設置口令

[Quidway]interface serial0 進入介面

[Quidway-serial0]ip address

[Quidway-serial0]undo shutdown 激活埠

[Quidway]link-protocol hdlc 綁定hdlc協議

[Quidway]user-interface vty 0 4

[Quidway-ui-vty0-4]authentication-mode password

[Quidway-ui-vty0-4]set authentication-mode password simple 2

[Quidway-ui-vty0-4]user privilege level 3

[Quidway-ui-vty0-4]quit

[Quidway]debugging hdlc all serial0 顯示所有信息

[Quidway]debugging hdlc event serial0 調試事件信息

[Quidway]debugging hdlc packet serial0 顯示包的信息

靜態路由配置案例：

[Quidway]ip route-static {interface

number|nexthop}[value][reject|blackhole]

例如：

[Quidway]ip route-static 129.1.0.0 16 10.0.0.

[Quidway]ip route-static 129.1.0.0 255.255.0.0 10.0.0.

[Quidway]ip route-static 129.1.0.0 16 Serial

[Quidway]ip route-static 0.0.0.0 0.0.0.0 10.0.0.

動態路由配置案例(RIP)：

[Quidway]rip

[Quidway]rip work

[Quidway]rip input

[Quidway]rip output

[Quidway-rip]network 1.0.0.0 ;可以all

[Quidway-rip]network 2.0.0.0

[Quidway-rip]peer ip-address

[Quidway-rip]summary

[Quidway]rip version

[Quidway]rip version 2 multicast

[Quidway-Ethernet0]rip split-horizon ;水平分隔

動態路由配置案例(OSPF)：

[Quidway]router id A.B.C.D 配置路由器的ID

[Quidway]ospf enable 啟動OSPF協議

[Quidway-ospf]import-route direct 引入直聯路由

[Quidway-Serial0]ospf enable area 配置OSPF區域

標准訪問列表命令格式如下：

acl [match-order config|auto] 默認前者順序匹配。

rule [normal|special]{permit|deny} [source source-addr source-wildcard|any] 例：

[Quidway]acl 10

[Quidway-acl-10]rule normal permit source 10.0.0.0 0.0.0.25

[Quidway-acl-10]rule normal deny source any

二、ACL配置

擴展訪問控制列表配置命令

1.配置TCP/UDP協議的擴展訪問列表：

rule {normal|special}{permit|deny}{tcp|udp}source {<ip p=""> </ip>

wild>|any}destination |any}

[operate]

2.配置ICMP協議的擴展訪問列表：

rule {normal|special}{permit|deny}icmp source { |any]destination { |any]

[icmp-code] [logging]

擴展訪問控制列表操作符的含義

equal portnumber 等於

greater-than portnumber 大於

less-than portnumber 小於

not-equal portnumber 不等

range portnumber1 portnumber 區間

3.擴展訪問控制列表案例

[Quidway]acl 10

[Quidway-acl-101]rule deny souce any destination any

[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo

[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo-reply

[Quidway]acl 10

[Quidway-acl-102]rule permit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0

[Quidway-acl-102]rule deny ip source any destination any

[Quidway]acl 103

[Quidway-acl-103]rule permit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp

[Quidway-acl-103]rule permit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www

[Quidway]firewall enable

[Quidway]firewall default permit|deny

[Quidway]int e0

[Quidway-Ethernet0]firewall packet-filter 101 inbound|outbound

4. NAT的配置

地址轉換配置案例

[Quidway]firewall enable

[Quidway]firewall default permit

[Quidway]acl 10

[Quidway-acl-101]rule deny ip source any destination any

[Quidway-acl-101]rule permit ip source 129.38.1.4 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.1 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.2 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.3 0 destination any

[Quidway]acl 10

[Quidway-acl-102]rule permit tcp source 202.39.2.3 0 destination

202.38.160.1 0

[Quidway-acl-102]rule permit tcp source any destination 202.38.160.1 0 destination-port great-than

1024

[Quidway-Ethernet0]firewall packet-filter 101 inbound

[Quidway-Serial0]firewall packet-filter 102 inbound

[Quidway]nat address-group 202.38.160.101 202.38.160.103 pool

[Quidway]acl

[Quidway-acl-1]rule permit source 10.110.10.0 0.0.0.25

[Quidway-acl-1]rule deny source any

[Quidway-acl-1]int serial 0

[Quidway-Serial0]nat outbound 1 address-group pool

[Quidway-Serial0]nat server global 202.38.160.101 inside 10.110.10.1 ftp tcp

[Quidway-Serial0]nat server global 202.38.160.102 inside 10.110.10.2 www tcp

[Quidway-Serial0]nat server global 202.38.160.102 8080 inside 10.110.10.3 www tcp

[Quidway-Serial0]nat server global 202.38.160.103 inside 10.110.10.4 smtp udp

5. PPP驗證配置：

主驗方：pap|chap

[Quidway]local-user u2 password {simple|cipher} aaa

[Quidway]interface serial 0

[Quidway-serial0]ppp authentication-mode {pap|chap}

[Quidway-serial0]ppp chap user u1 //pap時，不用此句

pap被驗方：

[Quidway]interface serial 0

[Quidway-serial0]ppp pap local-user u2 password {simple|cipher} aaa

chap被驗方：

[Quidway]interface serial 0

[Quidway-serial0]ppp chap user u1

[Quidway-serial0]local-user u2 password {simple|cipher} aaa

ip http enable 開啟一下 ;

『叄』 求高手解決H3C無線網路 WX3024E和無線AP設備之間的詳細配置命令！

要實現什麼目的？是FITAP+AC集中管理，公用一個SSID和密碼，實現無線漫遊嗎？

新手的話建議WEB登錄192.168.0.100（本機要0的網段）帳號admin密碼admin
進入後就用配置向導，區域碼CN；AP需要填寫設備序列號並注冊（AP地址192.168.0.50帳號admin密碼h3capadmin，需要改成FITAP模式）；然後配置無線服務名稱就是SSID；認證方式配置好。無線服務啟用，AP射頻開啟，記得保存。

高手就照我這配就可以
<H3C>dis cur
#
version 5.20, Release 3308P23
#
sysname H3C
#
clock timezone UTC add 00:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$
authorization-attribute level 3
service-type telnet
service-type web
#
wlan mesh-profile 1
mesh-id 1
bind WLAN-MESH 1
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
mesh calibrate-channel self-decisive
#
wlan service-template 1 crypto
ssid njhw
bind WLAN-ESS 0
cipher-suite wep40
wep default-key 1 wep40 pass-phrase cipher $c$3$zF//Agk1rW58U8mysQtdKT82/rbMZsq
p
service-template enable
#
wlan ap-group 1
ap 1
ap 2
ap 3
ap 4
ap 5
ap 6
ap 7
ap 8
ap 9
ap 10
ap 11
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.16.253 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS0
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-MESH1
#
wlan ap 1 model WA2210-AG id 1
serial-id 210235A0HTC117001157
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 10 model WA2210-AG id 10
serial-id 210235A0HTB118000520
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 11 model WA2210-AG id 11
serial-id 210235A0HTB118000534
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 2 model WA2210-AG id 2
serial-id 210235A0HTB118001005
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 3 model WA2210-AG id 3
serial-id 210235A0HTB118000178
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 4 model WA2210-AG id 4
serial-id 210235A0HTB118000618
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 5 model WA2210-AG id 5
serial-id 210235A0HTB118000525
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 6 model WA2210-AG id 6
serial-id 210235A0HTB118001044
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 7 model WA2210-AG id 7
serial-id 210235A0HTB118000783
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 8 model WA2210-AG id 8
serial-id 210235A0HTB118001332
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 9 model WA2210-AG id 9
serial-id 210235A0HTB118001155
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface1 192.168.16.1
#
mkd-service enable mesh-profile 1
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<H3C>dis wlan client
Total Number of Clients : 9
Client Information
SSID: njhw
--------------------------------------------------------------------------------

MAC Address User Name APID/RID IP Address VLAN

--------------------------------------------------------------------------------

0016-6dcf-6e17 -NA- 5 /1 0.0.0.0 1
087a-4ce3-86db -NA- 10 /1 0.0.0.0 1
2469-a5a4-d16d -NA- 9 /1 0.0.0.0 1
2469-a5b2-eae9 -NA- 10 /1 0.0.0.0 1
3cd0-f8e9-fca7 -NA- 10 /1 0.0.0.0 1
5cac-4c43-eb54 -NA- 10 /1 0.0.0.0 1
984b-4ad0-0a57 -NA- 10 /1 0.0.0.0 1
a499-479e-4ab5 -NA- 8 /1 0.0.0.0 1
d022-be2d-bd4e -NA- 9 /1 0.0.0.0 1
--------------------------------------------------------------------------------

<H3C>dis vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: configured
IP Address: 192.168.16.253
Subnet Mask: 255.255.255.0
Description: VLAN 0001
Name: VLAN 0001
Tagged Ports: none
Untagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/1 GigabitEthernet1/0/2
WLAN-ESS0
WLAN-DBSS0:0 WLAN-DBSS0:1 WLAN-DBSS0:2
WLAN-DBSS0:3 WLAN-DBSS0:4 WLAN-DBSS0:5
WLAN-DBSS0:6 WLAN-DBSS0:7 WLAN-DBSS0:8
WLAN-DBSS0:9
WLAN-ESS1
WLAN-MESH1

<H3C>dis
<H3C>di
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dis cur
#
version 5.20, Release 3308P23
#
sysname H3C
#
clock timezone UTC add 00:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$
authorization-attribute level 3
service-type telnet
service-type web
#
wlan mesh-profile 1
mesh-id 1
bind WLAN-MESH 1
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
mesh calibrate-channel self-decisive
#
wlan service-template 1 crypto
ssid njhw
bind WLAN-ESS 0
cipher-suite wep40
wep default-key 1 wep40 pass-phrase cipher $c$3$zF//Agk1rW58U8mysQtdKT82/rbMZsq
p
service-template enable
#
wlan ap-group 1
ap 1
ap 2
ap 3
ap 4
ap 5
ap 6
ap 7
ap 8
ap 9
ap 10
ap 11
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.16.253 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS0
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-MESH1
#
wlan ap 1 model WA2210-AG id 1
serial-id 210235A0HTC117001157
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 10 model WA2210-AG id 10
serial-id 210235A0HTB118000520
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 11 model WA2210-AG id 11
serial-id 210235A0HTB118000534
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 2 model WA2210-AG id 2
serial-id 210235A0HTB118001005
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 3 model WA2210-AG id 3
serial-id 210235A0HTB118000178
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 4 model WA2210-AG id 4
serial-id 210235A0HTB118000618
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 5 model WA2210-AG id 5
serial-id 210235A0HTB118000525
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 6 model WA2210-AG id 6
serial-id 210235A0HTB118001044
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 7 model WA2210-AG id 7
serial-id 210235A0HTB118000783
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 8 model WA2210-AG id 8
serial-id 210235A0HTB118001332
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 9 model WA2210-AG id 9
serial-id 210235A0HTB118001155
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface1 192.168.16.1
#
mkd-service enable mesh-profile 1
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<H3C>