1、華為交換機(jī)的基本配置一、交換機(jī)的軟件版本 由于華為交換機(jī)的軟件版本不盡相同，我們以比較新的版本 V3.1R0005為例。New_S3552display versionHuawei Versatile Routing Platform SoftwareVRP (R) Software, Version 3.10, RELEASE 0007Copyright (c) 2000-2004 HUAWEI TECH CO., LTD.Quidway S3552G uptime is 41 weeks,0 day,9 hours,32 minutes二、端口操作1、打開(kāi)關(guān)閉以太網(wǎng)端口 shutdown

2、undo shutdown例如：YD_S3552interface eth 0/38YD_S3552-Ethernet0/38shutdownYD_S3552-Ethernet0/38undo shutdown二、端口操作2、端口描述 description text例如：YD_S3552interface eth 0/38YD_S3552-Ethernet0/38descYD_S3552-Ethernet0/38description shihuanbaoju.YD_S3552-Ethernet0/38undo desc二、端口操作3、端口雙工狀態(tài)、端口速率 duplex auto | fu

3、ll | half undo duplex speed 10 | 100 | auto undo speed二、端口操作4、端口鏈路類型設(shè)置端口為Access端口 port link-type access設(shè)置端口為Hybrid端口 port link-type hybrid設(shè)置端口為Trunk端口 port link-type trunk恢復(fù)端口的鏈路類型為缺省的Access端口undo port link-type二、端口操作7、查看端口狀態(tài) display interface 例如： display interface Ethernet 0/11 Ethernet0/11 current

4、 state : UP IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc37-a4f0 Description: to_qixiangju The Maximum Transmit Unit is 1500 Media type is twisted pair, loopback not set Port hardware type is 100_BASE_TX 10Mbps-speed mode, half-duplex mode Link speed type is force link, lin

5、k duplex type is autonegotiation Flow-control is not supported The Maximum Frame Length is 1552 Broadcast MAX-ratio: 100% PVID: 110 Mdi type: auto Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 110 Last 5 minutes input: 4 packets/sec 502 bytes/sec Last 5 minutes output: 6 packets/se

6、c 1827 bytes/sec Input(total): - packets, - bytes - broadcasts, - multicasts Input(normal): 919143 packets, 187520582 bytes 9502 broadcasts, 2221 multicasts Input: 0 input errors, 0 runts, 0 giants, - throttles, 0 CRC 0 frame, 0 overruns, 0 aborts, - ignored, - parity errors Output(total): - packets

7、, - bytes - broadcasts, - multicasts, - pauses Output(normal): 1139625 packets, 639282176 bytes 6450 broadcasts, 4878 multicasts, 0 pauses Output: 20415 output errors, - underruns, - buffer failures 0 aborts, 0 deferred, 20415 collisions, 0 late collisions - lost carrier, - no carrier三、Vlan 操作1、創(chuàng)建或刪

8、除Vlan vlan vlan_id undo vlan vlan_id三、Vlan 操作2、創(chuàng)建/刪除VLAN接口創(chuàng)建或進(jìn)入VLAN接口視圖interface vlan-interface vlan_id刪除VLAN接口undo interface vlan-interface vlan_id三、Vlan 操作3、給VLAN接口指定/刪除IP地址和掩碼ip address ip_address ip_netmaskundo ip address ip_address ip_netmask 例如： ip address 7 華為二層交換機(jī)允許配置一個(gè)三層IP地址。三、Vlan 操作4、VLAN

9、顯示和調(diào)試顯示VLAN接口相關(guān)信息display interface VLAN-interface vlan_id 顯示VLAN相關(guān)信息display vlan vlan_id | all | static | dynamic 例如：YD_S3552display interface vlan 103Vlan-interface103 current state : UPLine protocol current state : UPIP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc37-a4f3Int

10、ernet Address is 41/29 PrimaryDescription : qiaoqinzhongxueThe Maximum Transmit Unit is 1500四、訪問(wèn)管理配置1、認(rèn)證模式authentication-mode local/none/password/schemeLocal 本地帳號(hào)認(rèn)證None 不要認(rèn)證Password 密碼認(rèn)證Scheme Radius 認(rèn)證四、訪問(wèn)管理配置2、設(shè)置密碼認(rèn)證口令Set authentication password cipher/simple textCipher 加密顯示認(rèn)證口令Simple 明文顯示認(rèn)證口令例如：S

11、et authentication password cipher CMNetisgood!四、訪問(wèn)管理配置3、 創(chuàng)建本地用戶、設(shè)置本地用戶口令Local-user username level 03 password cipher/simple text例如：LY_LC_8016local-user CMNet level 3 password cipher CMNetisgood!創(chuàng)建一個(gè)user privilege為3、用戶名為CMNet，加密顯示密碼 CMNetisgood!User privilege 0 為最低級(jí)別 3為最高級(jí)別四、訪問(wèn)管理配置4、設(shè)置遠(yuǎn)程訪問(wèn)接入限制例如：只允許2

12、8/28的網(wǎng)段進(jìn)行遠(yuǎn)程登陸 acl number 1 #創(chuàng)建訪問(wèn)控制策略1 rule 0 permit source 28 5 #創(chuàng)建策略0只允許28/28的網(wǎng)段訪問(wèn) user-interface vty 0 4 acl 1 inbound #在VTY上適用策略1五、QOS命令1、配置端口鏡像Mirroring-port 指定鏡像端口Monitor-port 監(jiān)控端口例如：使用Eth 0/48端口監(jiān)控Eth 0/1端口的流入流出Mirroring-port Ethernet 0/1 bothMirror-port Ethernet 0/48 both五、QOS命令顯示鏡像Display mir

13、ror例如：CT_S3552display mirror Monitor-port: Ethernet0/48 both Mirroring-port: Ethernet0/1 both五、QOS命令2、端口訪問(wèn)策略 rule-map 定義端口策略 eacl 定義策略動(dòng)作 acces-group 策略使用到端口例如：在Eth 5/0/8 以太口上過(guò)濾沖擊波震蕩波病毒常用的445端口 rule-map intervlan fbd1 tcp any any eq 445 Eacl fbd fbd1 deny Access-group eacl fbd port Ethernet 5/0/8六、路由

14、配置1、缺省路由 ip route-static 例如：Ip route-static 在華為二層交換機(jī)上可配置路由，主要是為交換機(jī)遠(yuǎn)程控制服務(wù)。六、路由配置2、靜態(tài)路由 ip route-static Undo ip route-static 例如：Ip route-static 六、路由配置3、查看路由表 display ip routing-tableYD_S3552display ip routing-table Routing Table: public netDestination/Mask Protocol Pre Cost Nexthop Interface/0 STATIC

15、60 0 17 Vlan-interface1000/8 DIRECT 0 0 InLoopBack0/32 DIRECT 0 0 InLoopBack084/29 DIRECT 0 0 85 Vlan-interface10485/32 DIRECT 0 0 InLoopBack036/30 DIRECT 0 0 37 Vlan-interface10237/32 DIRECT 0 0 InLoopBack0七、系統(tǒng)管理操作1、顯示目錄或文件信息 dirdirDirectory of flash:/-rwxrwxrwx 1 noone nogroup 3418167 Dec 14 2003

16、10:00:44 S3552-VRP310-0005.bin-rwxrwxrwx 1 noone nogroup 4 Aug 05 2005 07:44:57 snmpboots-rwxrwxrwx 1 noone nogroup 5992 Jul 21 2005 17:22:33 vrpcfg.txt16125952 bytes total (12692480 bytes free)Vrpcfg.txt 為交換機(jī)配置文件。七、系統(tǒng)管理操作2、刪除文件 delete 恢復(fù)刪除文件 undelete 拷貝文件 copy 移動(dòng)文件 move可以通過(guò)刪除flash中的vrpcfg.txt，直接刪除交

17、換機(jī)的配置，恢復(fù)到出廠缺省配置。例如：detele vrpcfg.txt 七、系統(tǒng)管理操作3、查看以太網(wǎng)交換機(jī)的當(dāng)前配置和起始配置查看以太網(wǎng)交換機(jī)的起始配置display saved-configuration查看以太網(wǎng)交換機(jī)的當(dāng)前配置display current-configurationSaved-configuration保存在Flash MemoryCurrent-configuration保存在DRAM七、系統(tǒng)管理操作4、保存當(dāng)前配置 Save saveThis will save the configuration in the flash memory.The switch configurations will be written to flash.Are you sure?Y/NyNow saving current configuration to flash memory.Please wait for a while.Saved current configuration to flash successfully.七、系統(tǒng)管理操作5、擦除Flash Memory中配置文件 reset saved-configuration配置文件被擦除后，以太網(wǎng)交換機(jī)下次上電時(shí)，系統(tǒng)將采用缺省的配置參數(shù)進(jìn)行初始化