华为交换机常用命令大全

华为交换机常用配置大全

2010-02-27

目 录

一、基础配置举例........................................................................................................ 3

1.1配置文件处理................................................................................................... 3 1.2配置交换机远程管理....................................................................................... 3 二、以太网配置举例.................................................................................................... 4

2.1配置端口属性................................................................................................... 4 2.2配置链路聚合................................................................................................... 6 2.3配置VLAN ...................................................................................................... 7 9.配置MSTP ........................................................................................................ 14 三、可靠性.................................................................................................................. 20

3.1配置基于主备份VRRP ................................................................................. 20 3.2配置基于负载分担VRRP ............................................................................. 21 四、IP路由 ................................................................................................................. 23

4.1配置静态路由................................................................................................. 23 4.2配置动态路由................................................................................................. 24 五、IP业务 ................................................................................................................. 26

5.1配置虚接口IP地址 ....................................................................................... 26 5.2DHCP设置 ...................................................................................................... 27 5.3 ACL 举例 ....................................................................................................... 29 六、IGMP ................................................................................................................... 31 七、QOS ..................................................................................................................... 32 八、安全性.................................................................................................................. 33

8.1接口安全......................................................................................................... 33 九、网络管理.............................................................................................................. 34

9.1简单网络管理协议配置................................................................................. 34 十、设备管理.............................................................................................................. 36

10.1测试命令....................................................................................................... 36

一、基础配置举例

1.1配置文件处理

导入配置文件

tftp x.x.x.x get vrpcfg.zip vrpcfg.zip 导出配置文件

tftp x.x.x.x put vrpcfg.zip vrpcfg.zip

1.2配置交换机远程管理

aaa 方式 system-view aaa

local-user huawei password simple huawei local-user huawei service-type telnet local-user huawei priority level 3 quit

user-interface vty 0 4 authentication-mode aaa quit

没有密码和使用密码认证同上

二、以太网配置举例

2.1配置端口属性

system-view

interface gigabitethernet 0/0/24 combo-port fiber/copper netgotination auto

loopback-detect enable //环路检测 port-isolate enable //端口隔离 qos lr cir 625 cbs 625000 //端口限速 quit

端口隔离举例

2.2配置链路聚合

system-view interface eth-trunk 1

interface gigabitgibabitethernet0/0/1 eth-trunk 1

interface gigabitgibabitethernet0/0/2 eth-trunk 1

2.3配置VLAN

1.创建单一vlan sys vlan 2 quit

2.创建批量vlan system-view

vlan batch vlan 10 to vlan 20 quit

3.基于干道链路VLAN 实例

4．配置基于子网vlan

允许一个vlan通过某个接口Vlan 2 port gigabitethernet 0/0/1 quit

允许多个vlan通过某个接口 sys

port gigabitethernet 0/0/1 port link-type trunk

port trunk allow-pass vlan all

5.配置VLAN聚合

6.配置VLAN映射

7.配置

QINQ

8.配置MAC学习限制功能

2.4.配置

MSTP

三、可靠性

3.1配置基于主备份

VRRP

3.2配置基于负载分担

VRRP

四、IP路由

4.1配置静态路由

配置默认静态路由

system-view

ip route-static 0.0.0.0 0.0.0.0 next-hop 配置静态路由

system-view

ip route-static 10.1.1.0 255.255.255.0 next-hop

4.2配置动态路由

五、IP业务

5.1配置虚接口IP地址

1.单一地址

Sys

Vlan 2

Quit

Interface vlanif 2

Ip address 192.168.1.1 24 Quit

2.配置主从IP地址 system-view

interface vlanif 2 ip address 10.1.1.1 24 ip address 10.1.2.1 24 sub

5.2DHCP设置

1.基于全局的DHCP

2.DHCP中继

5.3 ACL 举例

六、

IGMP

七、QOS

基于端口限速的

QOS

八、安全性

8.1接口安全

九、网络管理

9.1简单网络管理协议配置

system-view

snmp-agent sys-info version v3

snmp-agent community read public

snmp-agent community write private

snmp-agent trap enable

snmp-agent target-host trap address udp-domain 10.10.10.2 udp-port 5000 params securityname public

十、设备管理

10.1测试命令

十一、802.1X认证 1创建认证模板

设置认证服务器的IP地址和协议端口号、密钥 Radius-server template radiusserver

Radius-server authentication 10.1.1.254 1812 Radius-server according 10.1.1.254 1813 Radius-server shared-key huawei

Undo radius-server user-name domain-included 2 配置用户认证域

aaa

domain system

radius-server radiusserver

3 使能全局和接口下的802.1x功能 Dot1x

Interface ethernet 0/0/1

Dot1x