‘壹’ h3c璺鐢卞櫒閰岖疆锻戒护閮芥湁鍝浜 h3c璺鐢卞櫒閰岖疆锻戒护澶у叏銆愯﹁В銆
鎼灭嫍楂橀熸祻瑙埚櫒鏄涓娆鹃泦楂樻晥銆佺ǔ瀹氢簬涓韬镄勭幇浠ｅ寲缃戠粶娴忚埚伐鍏枫傚埄鐢ㄥ厛杩涚殑娓叉煋寮曟搸鍜屼紭鍖栫畻娉曪纴鎼灭嫍楂橀熸祻瑙埚櫒纭淇濅简鍗撹秺镄勯〉闱㈠姞杞介熷害鍜屾祦鐣呯殑澶氩獟浣扑綋楠屻傚叿澶囧叏鏂逛綅镄勫畨鍏ㄩ槻鎶ょ壒镐э纴鑳芥湁鏁堥槻寰″悇绫荤绣缁滃▉鑳侊纴钖屾椂鏀鎸丠TML5鍜孋SS3锛岀‘淇濅简涓庢渶鏂扮绣缁沧妧链镙囧嗳镄勫畬缇庡吋瀹广傛蹭简瑙ｆ洿澶氭垨绔嫔嵆涓嬭浇锛岃疯块梾https://sogou.37moyu.com/
銆銆瀵逛簬涓鑸镄勫跺涵璺鐢卞櫒钥岃█锛屾垜浠鏄涓嶉渶瑕佸逛粬杩涜岄厤缃镄勚傚洜涓哄跺涵璺鐢卞櫒杩欎竴绉嶅皬鍨嬭矾鐢卞櫒涓鑸閮藉凡缁忎简纭瀹氱殑鎸囦护铡绘墽琛屻备絾鏄瀵逛簬涓浜涘ぇ鍨嬭矾鐢卞櫒钥岃█锛岄厤缃锻戒护鏄闱炲父閲嶈佺殑銆傛ｆ槸锲犱负链変简閰岖疆锻戒护镄勫瓨鍦锛屾墠鑳藉熶娇澶у瀷璺鐢卞櫒瀹炶屽ぇ瑙勬ā镄勫懡浠ゆ墽琛屻傞偅涔堟帴涓嬫潵锛屽皬缂栧氨𨱒ョ粰澶у朵互H3C璺鐢卞櫒涓轰緥瀛愶纴璁茶插ぇ鍨嬭矾鐢卞櫒镄勪竴浜涘父鐢ㄥ熀链閰岖疆锻戒护钖с
銆銆蹇鎹烽敭
銆銆Ctrl+A锛屽皢 鍏夋爣 绉诲姩鍒板綋鍓嶈岀殑寮澶
銆銆Ctrl+B锛屽皢鍏夋爣钖戝乏绉诲姩涓涓瀛楃
銆銆Ctrl+C锛屽仠姝㈠綋鍓嶆ｅ湪镓ц岀殑锷熻兘
銆銆Ctrl+D锛屽垹闄ゅ綋鍓嶅厜镙囨墍鍦ㄤ綅缃镄勫瓧绗
銆銆Ctrl+E锛屽皢鍏夋爣绉诲姩鍒板綋鍓嶈岀殑链灏
銆銆Ctrl+F锛屽皢鍏夋爣钖戝彸绉诲姩涓涓瀛楃
銆銆Ctrl+H锛屽垹闄ゅ厜镙囧乏渚х殑涓涓瀛楃
銆銆Ctrl+K锛岀粓姝㈠懠鍑虹殑杩炴帴
銆銆Ctrl+R锛岄吨鏂版樉绀哄綋鍓嶈屼俊鎭
銆銆Ctrl+V锛岀矘璐村壀璐存澘镄勫唴瀹
銆銆Ctrl+W锛屽垹闄ゅ厜镙囧乏渚ц繛缁瀛楃︿覆鍐呯殑镓链夊瓧绗
銆銆Ctrl+X锛屽垹闄ゅ厜镙囧乏渚ф墍链夌殑瀛楃
銆銆Ctrl+Y锛屽垹闄ゅ厜镙囧彸渚ф墍链夌殑瀛楃
銆銆Ctrl+Z锛岄锲炲埌鐢ㄦ埛瑙嗗浘1-7
銆銆Ctrl+锛岀粓姝㈠綋鍓嶈繛鎺
銆銆Esc+B锛屽皢鍏夋爣绉诲姩鍒板乏渚ц繛缁瀛楃︿覆镄勯栧瓧绗﹀
銆銆Esc+D锛屽垹闄ゅ厜镙囨墍鍦ㄤ綅缃鍙婂叾鍙充晶杩炵画瀛楃︿覆鍐呯殑镓链夊瓧绗
銆銆Esc+F锛屽皢鍏夋爣钖戝彸绉诲埌涓嬩竴涓杩炵画瀛楃︿覆涔嫔墠
銆銆Esc+N锛屽皢鍏夋爣钖戜笅绉诲姩涓琛(杈揿叆锲炶溅鍓嶆湁鏁)
銆銆Esc+P锛屽皢鍏夋爣钖戜笂绉诲姩涓琛(杈揿叆锲炶溅鍓嶆湁鏁)
銆銆Esc+<锛屽皢鍏夋爣镓鍦ㄤ綅缃鎸囧畾涓哄壀璐存澘镄勫紑濮嬩綅缃
銆銆Esc+>锛屽皢鍏夋爣镓鍦ㄤ綅缃鎸囧畾涓哄壀璐存澘镄勭粨𨱒熶綅缃
銆銆锘烘湰閰岖疆锻戒护
銆銆[Quidway]sysname router_name锛屽懡钖嶈矾鐢卞櫒(鎴 浜ゆ崲链 )
銆銆[Quidway]delete锛屽垹闄Flash ROM涓镄勯厤缃
銆銆[Quidway]save锛屽皢閰岖疆鍐椤叆FlashROM
銆銆[Quidway]interface serial 0锛岃繘鍏ユ帴鍙ｉ厤缃妯″纺
銆銆[Quidway]quit锛岄鍑烘帴鍙ｆā寮忓埌绯荤粺瑙嗗浘
銆銆[Quidway]shutdown/undo shutdown锛屽叧闂/閲嶅惎鎺ュ彛
銆銆[Quidway]ip address ip_address subnet_mask锛屼负鎺ュ彛閰岖疆IP鍦板潃鍜屽瓙缃戞帺镰
銆銆[Quidway]display锛屾樉绀笃RP鐗堟湰鍙
銆銆[Quidway]display current-configuration锛屾樉绀虹郴缁熻繍琛岄厤缃淇℃伅
銆銆[Quidway]display interfaces锛屾樉绀烘帴鍙ｉ厤缃淇℃伅
銆銆[Quidway]display ip routing锛屾樉绀鸿矾鐢辫〃
銆銆[Quidway]ping ip_address锛屾祴璇旷绣缁滆繛阃氭
銆銆[Quidway]tracert ip_address锛屾祴璇曟暟鎹鍖呬粠涓绘満鍒扮洰镄勫湴镓缁忚繃镄勭绣鍏
銆銆[Quidway]debug all锛屾墦寮镓链夎皟璇曚俊鎭
銆銆[Quidway]undo debug all锛屽叧闂镓链夎皟璇曚俊鎭
銆銆[Quidway]info-center enable锛屽紑钖璋冭瘯淇℃伅杈揿嚭锷熻兘
銆銆[Quidway]info-center console bugging锛屽皢璋冭瘯淇℃伅杈揿嚭鍒癙C
銆銆[Quidway]info-center monitor bugging锛屽皢璋冭瘯淇℃伅杈揿嚭鍒瘪elnet缁堢鎴栧搼缁堢
銆銆[Quidway]super password password锛屼慨鏀圭壒𨱒冩ā寮忓彛浠
銆銆[Quidway]sysname switch_name锛屽懡钖崭氦鎹㈡満(鎴栬矾
銆銆[Quidway]interface ethernet 0/1锛岃繘鍏ユ帴鍙ｈ嗗浘
銆銆[Quidway]quit锛岄鍑虹郴缁熻嗗浘
銆銆[Quidway-Ethernet0/1]plex{half|full|auto}锛岄厤缃鎺ュ彛鍙屽伐宸
銆銆[Quidway-Ethernet0/1]speed {10|100|auto}锛岄厤缃鎺ュ彛阃熺巼
銆銆[Quidway-Ethernet0/1]flow-control锛屽紑钖娴佹带鍒
銆銆[Quidway-Ethernet0/1]mdi{across|normal|auto}锛岄厤缃甅DI/MDIX
銆銆[Quidway-Ethernet0/1]shutdown/undo shutdown锛屽叧闂/閲嶅惎绔鍙
銆銆鍏朵粬锻戒护
銆銆VLAN锘烘湰閰岖疆锻戒护(浠QuidwayS3026涓轰緥) [Quidway]vlan 3 鍒涘缓骞惰繘鍏VLAN閰岖疆妯″纺锛岀己鐪佹椂绯荤粺灏嗘墍链夌鍙ｅ姞鍏VLAN 1锛岃繖涓绔鍙ｆ棦涓嶈兘琚鍒涘缓涔熶笉鑳借鍒犻櫎銆
銆銆[Quidway]undo vlan 3锛屽垹闄や竴涓猇LAN
銆銆[Quidway-vlan3]port ethernet 0/1 toethernet 0/4 锛岀粰VLAN澧炲姞/鍒犻櫎浠ュお缃戞帴鍙
銆銆[Quidway-Ethernet0/2]port access vlan3灏嗘湰鎺ュ彛锷犲叆鍒版寚瀹歏LANid [Quidway-Ethernet0/2]port link-type {access|trunk|hybrid} 璁剧疆绔鍙ｅ伐浣沧柟寮忥纴access(缂虹渷)涓嶆敮鎸802.1q甯х殑浼犻侊纴钥宼runk鏀鎸(鐢ㄤ簬Switch闂翠簰杩)锛宧ybrid鍜宼runk镄勫尯鍒鍦ㄤ簬 trunk
銆銆鍙鍏佽哥己鐪乂LAN镄勬姤鏂囧彂阃佹椂涓嶆墦镙囩撅纴钥宧ybrid鍏佽稿氢釜VLAN鎶ユ枃鍙戦佹椂涓嶆墦镙囩俱
銆銆MP閰岖疆锻戒护
銆銆[Quidway-Serial0]ppp mp锛屽皝瑁匨P鍗忚
銆銆[Quidway]ppp mp name bind virtual-template number锛屽缓绔嬬敤鎴蜂笌铏氭嫙妯℃澘镄勫瑰簲鍏崇郴
銆銆[Quidway]interface virtual-template number锛岄厤缃铏氭嫙鎺ュ彛妯℃澘
銆銆[Quidway]ppp mp max-bind number锛岃剧疆铏氭嫙妯℃澘链澶х粦瀹氭暟(1-100)
銆銆甯т腑缁ч厤缃锻戒护
銆銆[Quidway-Serial0]link-protocol fr{mfr|ietf|nonstandard}锛屽皝瑁呭抚涓缁у岗璁:IETF銆丆isco鍏煎
銆銆[Quidway-Serial0]fr interface-type{dte|dce|nni}锛岄厤缃甯т腑缁ф帴鍙ｇ被鍨嬶纴NNI涓哄抚涓缁т氦鎹㈡満涔嬮棿镄勬帴鍙ｃ傝嫢閰崭负DCE鎴朜NI锛屽垯椤诲厛浣胯兘fr switching銆
銆銆[Quidway-Serial0]fr lmi type{q933a|ansi|cisco-compatible}锛岄厤缃甃MI鍗忚绫诲瀷
銆銆[Quidway-Serial0]fr dlci dlci_number锛岄厤缃涓𨱒℃湰鍦拌櫄鐢佃矾鍙
銆銆[Quidway-Serial0]fr map {ip|ipx}protocol-address dlci dlci_number锛屽缓绔嬫湰鍦瘅LCI鍒板圭鍗忚鍦板潃镄勬椠灏
銆銆[Quidway-Serial0]fr inarp [ip|ipx][dlci_number]锛岄厤缃甀nverse ARP锷ㄦ佹椠灏
銆銆[Quidway]interface typenumber.subinterface_number锛屽垱寤哄苟杩涘叆瀛愭帴鍙ｉ厤缃妯″纺
銆銆RIP鍗忚閰岖疆锻戒护
銆銆[Quidway]display rip锛屾樉绀篟IP閰岖疆淇℃伅
銆銆[Quidway]rip锛屽惎锷ㄥ苟杩涘叆RIP閰岖疆妯″纺
銆銆[Quidway-rip]network {network_number|all}锛屽湪鎸囧畾缃戠粶涓娄娇鑳絉IP
銆銆[Quidway-rip]peer ip_address锛岄厤缃鎶ユ枃镄勫畾镣逛紶阃
銆銆[Quidway-Ethernet0]rip {1|2 [bcast|mcast]}锛屾寚瀹歊IP鐗堟湰鍙娄紶阃佹柟寮
銆銆[Quidway-Serial0]rip work锛屾寚瀹氭帴鍙ｅ伐浣灭姸镐(钖宺ipinput,rip output)
銆銆[Quidway-rip]auto-summary锛岄厤缃甊IP-2璺鐢辫仛钖
銆銆[Quidway-Serial0]rip authentication simplepassword锛岄厤缃甊IP-2鏄庢枃璁よ瘉瀵嗙爜
銆銆[Quidway-Serial0]rip authentication md5key-string string锛岄厤缃甊IP-2 MD5瀵嗘枃璁よ瘉瀵嗙爜涓
銆銆[Quidway-Serial0]rip authentication md5type {nonstandard-compatible|usual}锛屾寚瀹歁D5绫诲瀷
銆銆[Quidway]debugging rip packet锛屾墦寮RIP璋冭瘯 寮鍏
銆銆[Quidway]info-center console锛屽皢璋冭瘯淇℃伅杈揿嚭鍒癙C
銆銆闱欐佽矾鐢遍厤缃锻戒护
銆銆[Quidway]ip route ip_address subnet_mask{interface_name|gateway_address} [preference preference_value] [reject|black_bone]
銆銆[锻戒护璇存槑] reject:浠讳綍铡诲线璇ョ洰镄勫湴镄勬姤鏂囧潎琚涓㈠纯锛岄氱煡婧愪富链轰笉鍙杈俱
銆銆black_bone:浠讳綍铡诲线璇ョ洰镄勫湴镄勬姤鏂囧潎琚涓㈠纯锛屼笉阃氱煡婧愪富链恒
銆銆褰揿彧链変笅涓璺崇殑鎺ュ彛鏄疨PP鎴朒DLC鎺ュ彛镓嶈兘鍐檌nterface_name锛屽係erial0锛屽惁鍒椤彧鑳藉啓gateway_address(涓嬩竴璺冲湴鍧)銆
銆銆镐荤粨锛 灏忕紪鍦ㄤ笂鏂囦腑涓哄ぇ瀹朵粙缁崭简H3C璺鐢卞櫒镄勪竴浜涘父鐢ㄥ熀链閰岖疆锻戒护銆傚逛簬澶у瀷璺鐢卞櫒钥岃█锛屽熀链镄勯厤缃锻戒护鏄闱炲父蹇呰佺殑銆傚敮链夎繖镙凤纴杩欎簺澶у瀷璺鐢卞櫒镓嶈兘澶熷嗳纭镓ц屼换锷°傝屽逛簬H3C璺鐢卞櫒锛屾兂瑕佽╄繖涓璺鐢卞櫒瀹炵幇链濂界殑镓ц屽敮链夌粰鍑烘ｇ‘镄勫懡浠ゃ傝屽懡浠や箣澶氾纴浣垮缑鎴戜滑寰堥毦铡昏颁綇锛屽洜姝ゆ渶濂界殑鏂规硶渚挎槸鎶婅繖浜涘懡浠よ颁笅𨱒ワ纴浠ヤ究鑳藉熼殢镞舵煡阒呫
镐荤粨钥岃█锛屾悳镫楅珮阃熸祻瑙埚櫒鏄涓娆句负婊¤冻鐜颁唬缃戠粶闇姹傝岀簿蹇冩墦阃犵殑娴忚埚櫒銆傚叾涓扑笟镄勫紑鍙戝洟阒熶笉浠呮敞閲嶆彁渚涗竴娴佺殑鐢ㄦ埛浣挞獙锛岃缮镊村姏浜庝笉鏂浼桦寲缃戦〉镓ц岄熷害锛屽炲己瀹夊叏镐э纴浠ュ强鏀鎸佸悇绫绘墿灞曟彃浠讹纴浠庤屽疄鐜伴珮搴︿釜镐у寲镄勬祻瑙堜綋楠屻傚傛灉鎭ㄥ湪瀵绘垒涓娆惧彲闱犮侀珮鏁埚拰鎶链鍏堣繘镄勬祻瑙埚櫒锛屾悳镫楅珮阃熸祻瑙埚櫒灏嗘槸鎭ㄧ殑鐞嗘兂阃夋嫨銆傝疯块梾瀹樻柟缃戠珯https://sogou.37moyu.com/ 涓嬭浇骞朵綋楠屾悳镫楅珮阃熸祻瑙埚櫒锛屾劅鍙楃敱鍏堣繘鎶链镓椹卞姩镄勯潪鍑℃祻瑙堜綋楠屻
‘贰’ H3C路由器基本配置命令
H3C路由器基本配置命令
H3C路由器基本配置要怎么设置，下面我为大家分享的是路由器的基本配置命令，希望对同学们学习H3C路由器配置的基础知识有帮助!
H3C路由器基本配置命令
[Quidway]displayversion 显示版本信息
[Quidway]displaycurrent-configuration 显示当前配置
[Quidway]displayinterfaces 显示接口信息
[Quidway]displayip route 显示路由信息
[Quidway]sysnameaabbcc 更改主机名
[Quidway]superpasswrod 123456 设置口令
[Quidway]interfaceserial0 进入接口
[Quidway-serial0]ipaddress
[Quidway-serial0]undoshutdown 激活端口
[Quidway]link-protocolhdlc 绑定hdlc协议
[Quidway]user-interfacevty 0 4
[Quidway-ui-vty0-4]authentication-modepassword
[Quidway-ui-vty0-4]setauthentication-mode password simple 222
[Quidway-ui-vty0-4]userprivilege level 3
[Quidway-ui-vty0-4]quit
[Quidway]debugginghdlc all serial0 显示所有信息
[Quidway]debugginghdlc event serial0 调试事件信息
[Quidway]debugginghdlc packet serial0 显示包的信息
静态路由：
[Quidway]iproute-static {interfacenumber|nexthop}[value][reject|blackhole]
例如：
[Quidway]iproute-static 129.1.0.0 16 10.0.0.2
[Quidway]iproute-static 129.1.0.0 255.255.0.0 10.0.0.2
[Quidway]iproute-static 129.1.0.0 16 Serial 2
[Quidway]iproute-static 0.0.0.0 0.0.0.0 10.0.0.2
动态路由：
[Quidway]rip
[Quidway]rip work
[Quidway]rip input
[Quidway]ripoutput
[Quidway-rip]network1.0.0.0 ;可以all
[Quidway-rip]network2.0.0.0
[Quidway-rip]peerip-address
[Quidway-rip]summary
[Quidway]ripversion 1
[Quidway]ripversion 2 multicast
[Quidway-Ethernet0]ripsplit-horizon ;水平分隔
[Quidway]router idA.B.C.D 配置路由器的`ID
[Quidway]ospfenable 启动OSPF协议
[Quidway-ospf]import-routedirect 引入直联路由
[Quidway-Serial0]ospfenable area 配置OSPF区域
标准访问列表命令格式如下：
acl [match-order config|auto] 默认前者顺序匹配。
rule[normal|special]{permit|deny} [source source-addr source-wildcard|any]
例：
[Quidway]acl 10
[Quidway-acl-10]rulenormal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rulenormal deny source any
扩展访问控制列表配置命令
配置TCP/UDP协议的扩展访问列表：
rule{normal|special}{permit|deny}{tcp|udp}source { |any}destination |any}
[operate]
配置ICMP协议的扩展访问列表：
rule{normal|special}{permit|deny}icmp source { |any]destination{ |any]
[icmp-code][logging]
扩展访问控制列表操作符的含义
equalportnumber 等于
greater-thanportnumber 大于
less-thanportnumber 小于
not-equalportnumber 不等
range portnumber1portnumber2 区间
扩展访问控制列表举例
[Quidway]acl 101
[Quidway-acl-101]ruledeny souce any destination any
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo-reply
[Quidway]acl 102
[Quidway-acl-102]rulepermit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]ruledeny ip source any destination any
[Quidway]acl 103
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewallenable
[Quidway]firewalldefault permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewallpacket-filter 101 inbound|outbound
地址转换配置举例
[Quidway]firewallenable
[Quidway]firewalldefault permit
[Quidway]acl 101
[Quidway-acl-101]ruledeny ip source any destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.4 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.1 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.2 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.3 0 destination any
[Quidway]acl 102
[Quidway-acl-102]rulepermit tcp source 202.39.2.3 0 destination 202.38.160.1 0
[Quidway-acl-102]rulepermit tcp source any destination 202.38.160.1 0 destination-port great-than
1024
[Quidway-Ethernet0]firewallpacket-filter 101 inbound
[Quidway-Serial0]firewallpacket-filter 102 inbound
[Quidway]nataddress-group 202.38.160.101 202.38.160.103 pool1
[Quidway]acl 1
[Quidway-acl-1]rulepermit source 10.110.10.0 0.0.0.255
[Quidway-acl-1]ruledeny source any
[Quidway-acl-1]intserial 0
[Quidway-Serial0]natoutbound 1 address-group pool1
[Quidway-Serial0]natserver global 202.38.160.101 inside 10.110.10.1 ftp tcp
[Quidway-Serial0]natserver global 202.38.160.102 inside 10.110.10.2 www tcp
[Quidway-Serial0]natserver global 202.38.160.102 8080 inside 10.110.10.3 www tcp
[Quidway-Serial0]natserver global 202.38.160.103 inside 10.110.10.4 smtp udp
PPP验证：
主验方：pap|chap
[Quidway]local-useru2 password {simple|cipher} aaa
[Quidway]interfaceserial 0
[Quidway-serial0]pppauthentication-mode {pap|chap}
[Quidway-serial0]pppchap user u1 //pap时，不用此句
pap被验方：
[Quidway]interfaceserial 0
[Quidway-serial0]ppppap local-user u2 password {simple|cipher} aaa
chap被验方：
[Quidway]interfaceserial 0
[Quidway-serial0]pppchap user u1
[Quidway-serial0]local-useru2 password {simple|cipher} aaa
‘叁’ H3C路由器基本配置命令
H3C路由器基本配置命令大全
H3C路由器基本配置命令有哪些?下面跟我一起来学习一下吧!
[Quidway]displayversion 显示版本信息
[Quidway]displaycurrent-configuration 显示当前配置
[Quidway]displayinterfaces 显示接口信息
[Quidway]displayip route 显示路由信息
[Quidway]sysnameaabbcc 更改主机名
[Quidway]superpasswrod 123456 设置口令
[Quidway]interfaceserial0 进入接口
[Quidway-serial0]ipaddress
[Quidway-serial0]undoshutdown 激活端口
[Quidway]link-protocolhdlc 绑定hdlc协议
[Quidway]user-interfacevty 0 4
[Quidway-ui-vty0-4]authentication-modepassword
[Quidway-ui-vty0-4]setauthentication-mode password simple 222
[Quidway-ui-vty0-4]userprivilege level 3
[Quidway-ui-vty0-4]quit
[Quidway]debugginghdlc all serial0 显示所有信息
[Quidway]debugginghdlc event serial0 调试事件信息
[Quidway]debugginghdlc packet serial0 显示包的信息
静态路由：
[Quidway]iproute-static {interfacenumber|nexthop}[value][reject|blackhole]
例如：
[Quidway]iproute-static 129.1.0.0 16 10.0.0.2
[Quidway]iproute-static 129.1.0.0 255.255.0.0 10.0.0.2
[Quidway]iproute-static 129.1.0.0 16 Serial 2
[Quidway]iproute-static 0.0.0.0 0.0.0.0 10.0.0.2
动态路由：
[Quidway]rip
[Quidway]rip work
[Quidway]rip input
[Quidway]ripoutput
[Quidway-rip]network1.0.0.0 ;可以all
[Quidway-rip]network2.0.0.0
[Quidway-rip]peerip-address
[Quidway-rip]summary
[Quidway]ripversion 1
[Quidway]ripversion 2 multicast
[Quidway-Ethernet0]ripsplit-horizon ;水平分隔
[Quidway]router idA.B.C.D 配置路由器的ID
[Quidway]ospfenable 启动OSPF协议
[Quidway-ospf]import-routedirect 引入直联路由
[Quidway-Serial0]ospfenable area 配置OSPF区域
标准访问列表命令格式如下：
acl [match-order config|auto] 默认前者顺序匹配。
rule[normal|special]{permit|deny} [source source-addr source-wildcard|any]
例：
[Quidway]acl 10
[Quidway-acl-10]rulenormal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rulenormal deny source any
扩展访问控制列表配置命令
配置TCP/UDP协议的扩展访问列表：
rule{normal|special}{permit|deny}{tcp|udp}source {|any}destination|any}
[operate]
配置ICMP协议的`扩展访问列表：
rule{normal|special}{permit|deny}icmp source {|any]destination{|any]
[icmp-code][logging]
扩展访问控制列表操作符的含义
equalportnumber 等于
greater-thanportnumber 大于
less-thanportnumber 小于
not-equalportnumber 不等
range portnumber1portnumber2 区间
扩展访问控制列表举例
[Quidway]acl 101
[Quidway-acl-101]ruledeny souce any destination any
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo
[Quidway-acl-101]rulepermit icmp source any destination any icmp-type echo-reply
[Quidway]acl 102
[Quidway-acl-102]rulepermit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]ruledeny ip source any destination any
[Quidway]acl 103
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rulepermit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewallenable
[Quidway]firewalldefault permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewallpacket-filter 101 inbound|outbound
地址转换配置举例
[Quidway]firewallenable
[Quidway]firewalldefault permit
[Quidway]acl 101
[Quidway-acl-101]ruledeny ip source any destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.4 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.1 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.2 0 destination any
[Quidway-acl-101]rulepermit ip source 129.38.1.3 0 destination any
[Quidway]acl 102
[Quidway-acl-102]rulepermit tcp source 202.39.2.3 0 destination 202.38.160.1 0
[Quidway-acl-102]rulepermit tcp source any destination 202.38.160.1 0 destination-port great-than
1024
[Quidway-Ethernet0]firewallpacket-filter 101 inbound
[Quidway-Serial0]firewallpacket-filter 102 inbound
[Quidway]nataddress-group 202.38.160.101 202.38.160.103 pool1
[Quidway]acl 1
[Quidway-acl-1]rulepermit source 10.110.10.0 0.0.0.255
[Quidway-acl-1]ruledeny source any
[Quidway-acl-1]intserial 0
[Quidway-Serial0]natoutbound 1 address-group pool1
[Quidway-Serial0]natserver global 202.38.160.101 inside 10.110.10.1 ftp tcp
[Quidway-Serial0]natserver global 202.38.160.102 inside 10.110.10.2 www tcp
[Quidway-Serial0]natserver global 202.38.160.102 8080 inside 10.110.10.3 www tcp
[Quidway-Serial0]natserver global 202.38.160.103 inside 10.110.10.4 smtp udp
PPP验证：
主验方：pap|chap
[Quidway]local-useru2 password {simple|cipher} aaa
[Quidway]interfaceserial 0
[Quidway-serial0]pppauthentication-mode {pap|chap}
[Quidway-serial0]pppchap user u1 //pap时，不用此句
pap被验方：
[Quidway]interfaceserial 0
[Quidway-serial0]ppppap local-user u2 password {simple|cipher} aaa
chap被验方：
[Quidway]interfaceserial 0
[Quidway-serial0]pppchap user u1
[Quidway-serial0]local-useru2 password {simple|cipher} aaa
;