;使用root用戶；口令是linux;關(guān)機(jī);使用root用戶；口令是linux;關(guān)機(jī)；關(guān)機(jī)；用戶注銷；用戶登錄；顯示IP地址；設(shè)置IP地址；禁用IP地址；設(shè)置網(wǎng)關(guān)；刪除網(wǎng)關(guān)；設(shè)置網(wǎng)關(guān)；刪除網(wǎng)關(guān)；顯示網(wǎng)關(guān)；發(fā)ECHO包；遠(yuǎn)程登錄；顯示當(dāng)前配置；顯示當(dāng)前配置；顯示接口信息；顯示路由信息；顯示版本信息；修改特權(quán)用戶密碼；交換機(jī)命名；進(jìn)入接口視圖；進(jìn)入接口視圖；配置VLAN的IP地址；設(shè)置靜態(tài)路由=網(wǎng)關(guān)；三層交換支持計(jì)算機(jī)命令—PCAlogin:rootpassword:linuxshutdown-hnowinit0logoutloginifconfigifconfigeth0<ipaddress>netmask<netmask>ifconfigeht0<ipaddress>netmask<netmask>downrouteaddgw<ip>routedelgw<ip>routeadddefaultgw<ip>routedeldefaultgw<ip>routeping<ip>telnet<ip>交換機(jī)命令—[Quidway]discur[Quidway]displaycurrent-configuration[Quidway]displayinterfaces[Quidway]displayvlanall[Quidway]displayversion[Quidway]superpassword[Quidway]sysname[Quidway]interfaceethernet0/1[Quidway]interfacevlanx[Quidway-Vlan-interfacex]ipaddress[Quidway]iproute-static[Quidway]rip[Quidway]local-userftp

[Quidway]user-interfacevty04[S3026-ui-vty0-4]authentication-modepassword[S3026-ui-vty0-4]setauthentication-modepasswordsimple222[S3026-ui-vty0-4]userprivilegelevel3[Quidway]interfaceethernet0/1[Quidway]inte0/1[Quidway-Ethernet0/1]duplex{half|full|auto}[Quidway-Ethernet0/1]speed{10|100|auto}[Quidway-Ethernet0/1]flow-control[Quidway-Ethernet0/1]mdi{across|auto|normal}[Quidway-Ethernet0/1]portlink-type{trunk|access|hybrid}[Quidway-Ethernet0/1]portaccessvlan3[Quidway-Ethernet0/2]porttrunkpermitvlan{ID|All}[Quidway-Ethernet0/3]porttrunkpvidvlan3[Quidway-Ethernet0/1]undoshutdown[Quidway-Ethernet0/1]shutdown[Quidway-Ethernet0/1]quit[Quidway]vlan3[Quidway-vlan3]portethernet0/1[Quidway-vlan3]porte0/1[Quidway-vlan3]portethernet0/1toethernet0/4[Quidway-vlan3]porte0/1toe0/4[Quidway]monitor-port<interface_typeinterface_num>[Quidway]portmirror<interface_typeinterface_num>[Quidway]portmirrorint_listobserving-portint_typeint_num；[Quidway]descriptionstring[Quidway]description符[Quidway]displayvlan[vlan_id][Quidway]stp{enable|disable}[Quidway]stppriority4096[Quidway]stproot{primary|secondary}[Quidway-Ethernet0/1]stpcost200[Quidway]link-aggregatione0/1toe0/4ingress|both[Quidway]undolink-aggregatione0/1|all[SwitchA-vlanx]isolate-user-vlanenable；進(jìn)入虛擬終端;設(shè)置口令模式;設(shè)置口令;用戶級(jí)別;進(jìn)入端口模式;進(jìn)入端口模式；配置端口工作狀態(tài);配置端口工作速率；配置端口流控；配置端口平接扭接;設(shè)置端口工作模式;當(dāng)前端口加入到VLAN；設(shè)trunk允許的VLAN；設(shè)置trunk端口的PVID；激活端口;關(guān)閉端口;返回；創(chuàng)建VLAN；在VLAN中增加端口;簡寫方式；在VLAN；進(jìn)入虛擬終端;設(shè)置口令模式;設(shè)置口令;用戶級(jí)別;進(jìn)入端口模式;進(jìn)入端口模式；配置端口工作狀態(tài);配置端口工作速率；配置端口流控；配置端口平接扭接;設(shè)置端口工作模式;當(dāng)前端口加入到VLAN；設(shè)trunk允許的VLAN；設(shè)置trunk端口的PVID；激活端口;關(guān)閉端口;返回；創(chuàng)建VLAN；在VLAN中增加端口;簡寫方式；在VLAN中增加端口;簡寫方式;指定鏡像端口;指定被鏡像端口指定鏡像和被鏡像;指定VLAN描述字符；刪除VLAN描述字；查看VLAN設(shè)置;設(shè)置生成樹，默認(rèn)關(guān)閉;設(shè)置交換機(jī)的優(yōu)先級(jí);設(shè)置為根或根的備份;設(shè)置交換機(jī)端口的花費(fèi)；端口的聚合；始端口為通道號(hào)；設(shè)置主vlan；設(shè)置主vlan包括的子vlan；顯示版本信息；顯示當(dāng)前配置；顯示接口信息；顯示路由信息；更改主機(jī)名；設(shè)置口令；進(jìn)入接口；配置端口IP地址；激活端口；綁定hdlc協(xié)議；顯示所有信息；調(diào)試事件信息；顯示包的信息；設(shè)置動(dòng)態(tài)路由；設(shè)置工作允許；設(shè)置入口允許；設(shè)置出口允許[Quidway-Ethernet0/2]porthybridpvidvlan<id>；設(shè)置vlan的pvid[Quidway-Ethernet0/2]porthybridpvid;刪除vlan的pvid；顯示版本信息；顯示當(dāng)前配置；顯示接口信息；顯示路由信息；更改主機(jī)名；設(shè)置口令；進(jìn)入接口；配置端口IP地址；激活端口；綁定hdlc協(xié)議；顯示所有信息；調(diào)試事件信息；顯示包的信息；設(shè)置動(dòng)態(tài)路由；設(shè)置工作允許；設(shè)置入口允許；設(shè)置出口允許所以設(shè)置PVID為所屬vlanid,設(shè)置可以互通的vlan為untagged.路由器命令—[Quidway]displayversion[Quidway]displaycurrent-configuration[Quidway]displayinterfaces[Quidway]displayiproute[Quidway]sysnameaabbcc[Quidway]superpasswrod123456[Quidway]interfaceserial0[Quidway-serial0]ipaddress<ip><mask|mask_len>[Quidway-serial0]undoshutdown[Quidway]link-protocolhdlc[Quidway]user-interfacevty04[Quidway-ui-vty0-4]authentication-modepassword[Quidway-ui-vty0-4]setauthentication-modepasswordsimple222[Quidway-ui-vty0-4]userprivilegelevel3[Quidway-ui-vty0-4]quit[Quidway]debugginghdlcallserial0[Quidway]debugginghdlceventserial0[Quidway]debugginghdlcpacketserial0靜態(tài)路由：[Quidway]iproute-static<ip><mask>(interfacenumber|nexthop}[value][reject|blackhole]例如：[Quidway]iproute-static16[Quidway]iproute-static[Quidway]iproute-static16Serial2[Quidway]iproute-static動(dòng)態(tài)路由：[Quidway]rip[Quidway]ripwork[Quidway]ripinput[Quidway]ripoutput

;設(shè)置交換路由網(wǎng)絡(luò);設(shè)置與所有網(wǎng)絡(luò)交換;;路由聚合;設(shè)置工作在版本1；設(shè)版本2,多播方式;水平分隔;配置路由器的ID；啟動(dòng)OSPF協(xié)議；引入直聯(lián)路由；配置OSPF區(qū)域[Quidway-rip]network[Quidway-rip]networkall[Quidway-rip]peerip-address[Quidway-rip]summary;設(shè)置交換路由網(wǎng)絡(luò);設(shè)置與所有網(wǎng)絡(luò)交換;;路由聚合;設(shè)置工作在版本1；設(shè)版本2,多播方式;水平分隔;配置路由器的ID；啟動(dòng)OSPF協(xié)議；引入直聯(lián)路由；配置OSPF區(qū)域;默認(rèn)前者順序匹配。acl<acl-number>[match-orderconfiglauto]rule[normallspecial](permitldeny}[sourcesource-addrsource-wildcardlany]例：;默認(rèn)前者順序匹配。[Quidway]acl10[Quidway-acl-10]rulenormalpermitsource55[Quidway-acl-10]rulenormaldenysourceany擴(kuò)展訪問控制列表配置命令配置TCP/UDP協(xié)議的擴(kuò)展訪問列表：rule{normallspecial}{permitldeny}{tcpludp}source{<ipwild>lany}destination<ipwild>lany}[operate]配置ICMP協(xié)議的擴(kuò)展訪問列表：rule{normallspecial}{permitldeny}icmpsource{<ipwild>lany]destination{<ipwild>lany][icmp-code][logging]擴(kuò)展訪問控制列表操作符的含義equalportnumber;等于greater-thanportnumber；大于less-thanportnumber;小于not-equalportnumber;不等rangeportnumber1portnumber2;區(qū)間擴(kuò)展訪問控制列表舉例[Quidway]acl101[Quidway-acl-101]ruledenysouceanydestinationany[Quidway-acl-101]rulepermiticmpsourceanydestinationanyicmp-typeecho[Quidway-acl-101]rulepermiticmpsourceanydestinationanyicmp-typeecho-reply[Quidway]acl102[Quidway-acl-102]rulepermitipsourcedestination[Quidway-acl-102]ruledenyipsourceanydestinationany[Quidway]acl103[Quidway-acl-103]rulepermittcpsourceanydestinationdestination-portequalftp[Quidway-acl-103]rulepermittcpsourceanydestinationdestination-portequalwww[Quidway]firewallenable[Quidway]firewalldefaultpermit|deny[Quidway]inte0[Quidway-Ethernet0]firewallpacket-filter101inbound|outbound地址轉(zhuǎn)換配置舉例[Quidway]firewallenable[Quidway]firewalldefaultpermit[Quidway]acl101;內(nèi)部指定主機(jī)可以進(jìn)入e0[Quidway-acl-101]ruledenyipsourceanydestinationany[Quidway-acl-101]rulepermitipsource0destinationany[Quidway-acl-101]rulepermitipsource0destinationany[Quidway-acl-101]rulepermitipsource0destinationany[Quidway-acl-101]rulepermitipsource0destinationany[Quidway-acl-101]quit[Quidway]inte0[Quidway-Ethernet0]firewallpacket-filter101inbound[Quidway]acl102;外部特定主機(jī)和大于1024端口的數(shù)據(jù)包允許進(jìn)入S0[Quidway-acl-102]ruledenyipsourceanydestinationany[Quidway-acl-102]rulepermittcpsource0destination0[Quidway-acl-102]rulepermittcpsourceanydestination0destination-portgreat-than1024[Quidway-acl-102]quit[Quidway]ints0[Quidway-Serial0]firewallpacket-filter102inbound；設(shè)是路由器出口IP。[Quidway-Serial0]natoutbound101interface;是Easyip，將acl101允許的IP從本接口出時(shí)變換源地址。內(nèi)部服務(wù)器地址轉(zhuǎn)換配置命令（靜態(tài)nat）：natserverglobal<ip>[port]inside<ip>port[protocol];global_port不寫時(shí)使用inside_port[Quidway-Serial0]natserverglobalinsideftptcp[Quidway-Serial0]natserverglobalinsidetelnettcp[Quidway-Serial0]natserverglobalinsidewwwtcp設(shè)有公網(wǎng)IP：01?03可以使用。；對外訪問（原例題）[Quidway]nataddress-group0103pool1;建立地址池[Quidway]acl1[Quidway-acl-1]rulepermitsource55;指定允許的內(nèi)部網(wǎng)絡(luò)[Quidway-acl-1]ruledenysourceany[Quidway-acl-1]intserial0[Quidway-Serial0]natoutbound1address-grouppool1;在s0口從地址池取出IP對外訪問[Quidway-Serial0]natserverglobal01insideftptcp[Quidway-Serial0]natserverglobal02insidewwwtcp[Quidway-Serial0]natserverglobal028080insidewwwtcp[Quidway-Serial0]natserverglobal03insidesmtpudpPPP設(shè)置：[Quidway-s0]link-protocolppp;默認(rèn)的協(xié)議PPP驗(yàn)證：主驗(yàn)方：paplchap[Quidway]local-userq2password{simplelcipher}hello;路由器1[Quidway]interfaceserial0[Quidway-serial0]pppauthentication-mode{paplchap}[Quidway-serial0]pppchapuserq1;pap時(shí)，沒有此句pap被驗(yàn)方：[Quidway]interfaceserial0;路由器2[Quidway-serial0]ppppaplocal-userq2password{simplelcipher}hellochap被驗(yàn)方：[Quidway]interfaceserial0;路由器2[Quidway-serial0]pppchapuserq2;自己路由器名[Quidway-serial0]local-userq1password{simplelcipher}hello;對方路由器名幀中繼frame-relay（二分