h3c无线配置命令

‘壹’ H3C MSR系列路由器求配置命令

1、进入H3C路由器的管理地址。192.168.55.1。输入密码等信息进入页面。

‘贰’ H3C路由器配置命令

H3C路由器配置命令

H3C CAS云计算管理平台基于业界领先的虚拟化基础架构，实现了数据中心IaaS云计算环境的中央管理控制，以简洁的`管理界面，统一管理数据中心内所有的物理资源和虚拟资源。下面是我整理的关于H3C路由器配置命令，希望大家认真阅读!

一、路由器基本配置命令

1、system-view 进入系统视图模式

2、sysname R1 为设备命名为R

3、display ip routing-table 显示当前路由表

4、language-mode Chinese|English 中英文切换

5、interface Ethernet 0/0 进入以太网端口视图

6、ip address 192.168.1.1 255.255.255.0 配置IP地址和子网掩码

7、undo shutdown 打开以太网端口

8、shutdown 关闭以太网端口

9、quit 退出当前视图模式

10、ip route-static 192.168.2.0 255.255.255.0 192.168.12.2 description To.R2 配置静态路由

11、ip route-static 0.0.0.0 0.0.0.0 192.168.12.2 description To.R2 配置默认的路由

基本配置案例

[Quidway]display version 显示版本信息

[Quidway]display current-configuration 显示当前配置

[Quidway]display interfaces 显示接口信息

[Quidway]display ip route 显示路由信息

[Quidway]sysname aabbcc 更改主机名

[Quidway]super passwrod 123456 设置口令

[Quidway]interface serial0 进入接口

[Quidway-serial0]ip address

[Quidway-serial0]undo shutdown 激活端口

[Quidway]link-protocol hdlc 绑定hdlc协议

[Quidway]user-interface vty 0 4

[Quidway-ui-vty0-4]authentication-mode password

[Quidway-ui-vty0-4]set authentication-mode password simple 2

[Quidway-ui-vty0-4]user privilege level 3

[Quidway-ui-vty0-4]quit

[Quidway]debugging hdlc all serial0 显示所有信息

[Quidway]debugging hdlc event serial0 调试事件信息

[Quidway]debugging hdlc packet serial0 显示包的信息

静态路由配置案例：

[Quidway]ip route-static {interface

number|nexthop}[value][reject|blackhole]

例如：

[Quidway]ip route-static 129.1.0.0 16 10.0.0.

[Quidway]ip route-static 129.1.0.0 255.255.0.0 10.0.0.

[Quidway]ip route-static 129.1.0.0 16 Serial

[Quidway]ip route-static 0.0.0.0 0.0.0.0 10.0.0.

动态路由配置案例(RIP)：

[Quidway]rip

[Quidway]rip work

[Quidway]rip input

[Quidway]rip output

[Quidway-rip]network 1.0.0.0 ;可以all

[Quidway-rip]network 2.0.0.0

[Quidway-rip]peer ip-address

[Quidway-rip]summary

[Quidway]rip version

[Quidway]rip version 2 multicast

[Quidway-Ethernet0]rip split-horizon ;水平分隔

动态路由配置案例(OSPF)：

[Quidway]router id A.B.C.D 配置路由器的ID

[Quidway]ospf enable 启动OSPF协议

[Quidway-ospf]import-route direct 引入直联路由

[Quidway-Serial0]ospf enable area 配置OSPF区域

标准访问列表命令格式如下：

acl [match-order config|auto] 默认前者顺序匹配。

rule [normal|special]{permit|deny} [source source-addr source-wildcard|any] 例：

[Quidway]acl 10

[Quidway-acl-10]rule normal permit source 10.0.0.0 0.0.0.25

[Quidway-acl-10]rule normal deny source any

二、ACL配置

扩展访问控制列表配置命令

1.配置TCP/UDP协议的扩展访问列表：

rule {normal|special}{permit|deny}{tcp|udp}source {<ip p=""> </ip>

wild>|any}destination |any}

[operate]

2.配置ICMP协议的扩展访问列表：

rule {normal|special}{permit|deny}icmp source { |any]destination { |any]

[icmp-code] [logging]

扩展访问控制列表操作符的含义

equal portnumber 等于

greater-than portnumber 大于

less-than portnumber 小于

not-equal portnumber 不等

range portnumber1 portnumber 区间

3.扩展访问控制列表案例

[Quidway]acl 10

[Quidway-acl-101]rule deny souce any destination any

[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo

[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo-reply

[Quidway]acl 10

[Quidway-acl-102]rule permit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0

[Quidway-acl-102]rule deny ip source any destination any

[Quidway]acl 103

[Quidway-acl-103]rule permit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp

[Quidway-acl-103]rule permit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www

[Quidway]firewall enable

[Quidway]firewall default permit|deny

[Quidway]int e0

[Quidway-Ethernet0]firewall packet-filter 101 inbound|outbound

4. NAT的配置

地址转换配置案例

[Quidway]firewall enable

[Quidway]firewall default permit

[Quidway]acl 10

[Quidway-acl-101]rule deny ip source any destination any

[Quidway-acl-101]rule permit ip source 129.38.1.4 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.1 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.2 0 destination any

[Quidway-acl-101]rule permit ip source 129.38.1.3 0 destination any

[Quidway]acl 10

[Quidway-acl-102]rule permit tcp source 202.39.2.3 0 destination

202.38.160.1 0

[Quidway-acl-102]rule permit tcp source any destination 202.38.160.1 0 destination-port great-than

1024

[Quidway-Ethernet0]firewall packet-filter 101 inbound

[Quidway-Serial0]firewall packet-filter 102 inbound

[Quidway]nat address-group 202.38.160.101 202.38.160.103 pool

[Quidway]acl

[Quidway-acl-1]rule permit source 10.110.10.0 0.0.0.25

[Quidway-acl-1]rule deny source any

[Quidway-acl-1]int serial 0

[Quidway-Serial0]nat outbound 1 address-group pool

[Quidway-Serial0]nat server global 202.38.160.101 inside 10.110.10.1 ftp tcp

[Quidway-Serial0]nat server global 202.38.160.102 inside 10.110.10.2 www tcp

[Quidway-Serial0]nat server global 202.38.160.102 8080 inside 10.110.10.3 www tcp

[Quidway-Serial0]nat server global 202.38.160.103 inside 10.110.10.4 smtp udp

5. PPP验证配置：

主验方：pap|chap

[Quidway]local-user u2 password {simple|cipher} aaa

[Quidway]interface serial 0

[Quidway-serial0]ppp authentication-mode {pap|chap}

[Quidway-serial0]ppp chap user u1 //pap时，不用此句

pap被验方：

[Quidway]interface serial 0

[Quidway-serial0]ppp pap local-user u2 password {simple|cipher} aaa

chap被验方：

[Quidway]interface serial 0

[Quidway-serial0]ppp chap user u1

[Quidway-serial0]local-user u2 password {simple|cipher} aaa

ip http enable 开启一下 ;

‘叁’ 求高手解决H3C无线网络 WX3024E和无线AP设备之间的详细配置命令！

要实现什么目的？是FITAP+AC集中管理，公用一个SSID和密码，实现无线漫游吗？

新手的话建议WEB登录192.168.0.100（本机要0的网段）帐号admin密码admin
进入后就用配置向导，区域码CN；AP需要填写设备序列号并注册（AP地址192.168.0.50帐号admin密码h3capadmin，需要改成FITAP模式）；然后配置无线服务名称就是SSID；认证方式配置好。无线服务启用，AP射频开启，记得保存。

高手就照我这配就可以
<H3C>dis cur
#
version 5.20, Release 3308P23
#
sysname H3C
#
clock timezone UTC add 00:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$
authorization-attribute level 3
service-type telnet
service-type web
#
wlan mesh-profile 1
mesh-id 1
bind WLAN-MESH 1
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
mesh calibrate-channel self-decisive
#
wlan service-template 1 crypto
ssid njhw
bind WLAN-ESS 0
cipher-suite wep40
wep default-key 1 wep40 pass-phrase cipher $c$3$zF//Agk1rW58U8mysQtdKT82/rbMZsq
p
service-template enable
#
wlan ap-group 1
ap 1
ap 2
ap 3
ap 4
ap 5
ap 6
ap 7
ap 8
ap 9
ap 10
ap 11
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.16.253 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS0
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-MESH1
#
wlan ap 1 model WA2210-AG id 1
serial-id 210235A0HTC117001157
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 10 model WA2210-AG id 10
serial-id 210235A0HTB118000520
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 11 model WA2210-AG id 11
serial-id 210235A0HTB118000534
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 2 model WA2210-AG id 2
serial-id 210235A0HTB118001005
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 3 model WA2210-AG id 3
serial-id 210235A0HTB118000178
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 4 model WA2210-AG id 4
serial-id 210235A0HTB118000618
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 5 model WA2210-AG id 5
serial-id 210235A0HTB118000525
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 6 model WA2210-AG id 6
serial-id 210235A0HTB118001044
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 7 model WA2210-AG id 7
serial-id 210235A0HTB118000783
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 8 model WA2210-AG id 8
serial-id 210235A0HTB118001332
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 9 model WA2210-AG id 9
serial-id 210235A0HTB118001155
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface1 192.168.16.1
#
mkd-service enable mesh-profile 1
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<H3C>dis wlan client
Total Number of Clients : 9
Client Information
SSID: njhw
--------------------------------------------------------------------------------

MAC Address User Name APID/RID IP Address VLAN

--------------------------------------------------------------------------------

0016-6dcf-6e17 -NA- 5 /1 0.0.0.0 1
087a-4ce3-86db -NA- 10 /1 0.0.0.0 1
2469-a5a4-d16d -NA- 9 /1 0.0.0.0 1
2469-a5b2-eae9 -NA- 10 /1 0.0.0.0 1
3cd0-f8e9-fca7 -NA- 10 /1 0.0.0.0 1
5cac-4c43-eb54 -NA- 10 /1 0.0.0.0 1
984b-4ad0-0a57 -NA- 10 /1 0.0.0.0 1
a499-479e-4ab5 -NA- 8 /1 0.0.0.0 1
d022-be2d-bd4e -NA- 9 /1 0.0.0.0 1
--------------------------------------------------------------------------------

<H3C>dis vlan all
VLAN ID: 1
VLAN Type: static
Route Interface: configured
IP Address: 192.168.16.253
Subnet Mask: 255.255.255.0
Description: VLAN 0001
Name: VLAN 0001
Tagged Ports: none
Untagged Ports:
Bridge-Aggregation1
GigabitEthernet1/0/1 GigabitEthernet1/0/2
WLAN-ESS0
WLAN-DBSS0:0 WLAN-DBSS0:1 WLAN-DBSS0:2
WLAN-DBSS0:3 WLAN-DBSS0:4 WLAN-DBSS0:5
WLAN-DBSS0:6 WLAN-DBSS0:7 WLAN-DBSS0:8
WLAN-DBSS0:9
WLAN-ESS1
WLAN-MESH1

<H3C>dis
<H3C>di
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dir
<H3C>display
<H3C>dis cur
#
version 5.20, Release 3308P23
#
sysname H3C
#
clock timezone UTC add 00:00:00
#
domain default enable system
#
telnet server enable
#
port-security enable
#
oap management-ip 192.168.0.101 slot 0
#
password-recovery enable
#
vlan 1
#
domain system
access-limit disable
state active
idle-cut disable
self-service-url disable
#
user-group system
group-attribute allow-guest
#
local-user admin
password cipher $c$3$
authorization-attribute level 3
service-type telnet
service-type web
#
wlan mesh-profile 1
mesh-id 1
bind WLAN-MESH 1
#
wlan rrm
dot11a mandatory-rate 6 12 24
dot11a supported-rate 9 18 36 48 54
dot11b mandatory-rate 1 2
dot11b supported-rate 5.5 11
dot11g mandatory-rate 1 2 5.5 11
dot11g supported-rate 6 9 12 18 24 36 48 54
mesh calibrate-channel self-decisive
#
wlan service-template 1 crypto
ssid njhw
bind WLAN-ESS 0
cipher-suite wep40
wep default-key 1 wep40 pass-phrase cipher $c$3$zF//Agk1rW58U8mysQtdKT82/rbMZsq
p
service-template enable
#
wlan ap-group 1
ap 1
ap 2
ap 3
ap 4
ap 5
ap 6
ap 7
ap 8
ap 9
ap 10
ap 11
#
interface Bridge-Aggregation1
#
interface NULL0
#
interface Vlan-interface1
ip address 192.168.16.253 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-aggregation group 1
#
interface GigabitEthernet1/0/2
port link-aggregation group 1
#
interface WLAN-ESS0
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-MESH1
#
wlan ap 1 model WA2210-AG id 1
serial-id 210235A0HTC117001157
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 10 model WA2210-AG id 10
serial-id 210235A0HTB118000520
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 11 model WA2210-AG id 11
serial-id 210235A0HTB118000534
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 2 model WA2210-AG id 2
serial-id 210235A0HTB118001005
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 3 model WA2210-AG id 3
serial-id 210235A0HTB118000178
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 4 model WA2210-AG id 4
serial-id 210235A0HTB118000618
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 5 model WA2210-AG id 5
serial-id 210235A0HTB118000525
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 6 model WA2210-AG id 6
serial-id 210235A0HTB118001044
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 7 model WA2210-AG id 7
serial-id 210235A0HTB118000783
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 8 model WA2210-AG id 8
serial-id 210235A0HTB118001332
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
wlan ap 9 model WA2210-AG id 9
serial-id 210235A0HTB118001155
country-code CN
portal-service enable
radio 1
service-template 1
radio enable
#
ip route-static 0.0.0.0 0.0.0.0 Vlan-interface1 192.168.16.1
#
mkd-service enable mesh-profile 1
#
load xml-configuration
#
user-interface con 0
user-interface vty 0 4
authentication-mode scheme
user privilege level 3
#
return
<H3C>