3、acl命令格式:基本/高級(jí)ACL支持:acl[ipv6]acl-number{inbound|outbound}undoacl[ipv6]acl-number{inbound|outbound}二層ACL支持:aclacl-numberinboundundoaclacl-numberinbound功能:acl命令用來引用訪問控制列表(ACL),2000~2999:基本ACL編號(hào);3000~3999:高級(jí)ACL編號(hào);4000~4999:二層ACL編號(hào)。應(yīng)用實(shí)例:<Sysname>system-view[Sysname]aclnumber2001[Sysname-acl-basic-2001]rulepermitsource192.168.1.260<Sysname>system-view[Sysname]aclnumber3001[Sysname-acl-adv-3001]rulepermittcpdestination192.168.1.4104、DHCP命令格式:(1)配置基于接口地址池的DHCP[R1]dhcpenable開啟DHCP功能[R1-GigabitEthernet0/0/2]dhcpselectinterface開啟接口的DHCP服務(wù)功能[R1-GigabitEthernet0/0/2]dhcpserverleaseday2配置IP地址租用有效期限為2天,默認(rèn)為1天,超過租期后該地址將會(huì)重新分配[R1-GigabitEthernet0/0/2]dhcpserverexcluded-ip-address192.168.3.251192.168.3.253配置不參與自動(dòng)分配的IP地址[R1-GigabitEthernet0/0/2]dhcpserverdns-list8.8.8.8指定接口地址池下的DNS服務(wù)器(2)配置基于全局地址池的DHCP[R2]dhcpenable開啟DHCP功能[R2]ippoolhuawei1創(chuàng)建一個(gè)全局地址池,地址池名稱為huawei1[R3-ip-pool-huawei1]network192.168.4.0動(dòng)態(tài)分配的地址范圍192.168.4.0,如果不指定掩碼,則默認(rèn)使用自然掩碼[R3-ip-pool-huawei1]leaseday2全局地址池下的地址租期[R3-ip-pool-huawei1]gateway-list192.168.4.254配置DHCP客戶端的網(wǎng)關(guān)地址[R3-ip-pool-huawei1]excluded-ip-address192.168.4.250192.168.4.253[R3-ip-pool-huawei1]dns-list8.8.8.8[R3]interfaceGigabitEthernet0/0/0[R3-GigabitEthernet0/0/0]dhcpselectglobal開啟接口DHCP功能,指定接口采用全局地址池為客戶端分配IP地址5、Eth-Trunk命令格式:[S1]interfaceEth-Trunk1配置鏈路聚合,創(chuàng)建Eth-Trunk1[S1-Eth-Trunk1]modemanualload-balance指定為手工負(fù)載分擔(dān)模式[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]eth-trunk1加入到Eth-Trunk1接口[S1]interfaceGigabitEthernet0/0/2[S1-GigabitEthernet0/0/2]eth-trunk1加入到Eth-Trunk1接口6、GVRP命令格式:[S1]gvrp在交換機(jī)上啟用GVRP[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]gvrp在接口上啟用GVRP[S3]interfaceGigabitEthernet0/0/1[S3-GigabitEthernet0/0/1]gvrpregistrationfixed在接口下將GVRP的注冊(cè)模式修改為Fixed模式[S2]interfaceGigabitEthernet0/0/1[S2-GigabitEthernet0/0/1]gvrpregistrationforbidden在接口下將GVRP的注冊(cè)模式修改為Forbidden模式7、IPV6命令格式:[R1]ipv6全局開啟IPv6功能[R1]intg0/0/0[R1-GigabitEthernet0/0/0]ipv6enable接口下開啟IPv6功能[R1-GigabitEthernet0/0/0]ipv6addressautolink-local接口上配置自動(dòng)生成鏈路本地地址[r1-GigabitEthernet0/0/0]ipv6address2001:3:fd::64eui-64配置EUI-64地址[R1]intg0/0/0[R1-GigabitEthernet0/0/0]ipv6enable接口下開啟IPv6功能命令格式[Huawei]aaa進(jìn)入AAA視圖[Huawei-aaa]local-userhuaweipasswordcipherhello使用local-user命令創(chuàng)建本地用戶和用戶口令,并以密文方式顯示用戶口令,huawei為用戶名,hello為密碼。[Huawei-aaa]local-userhuaweiservice-typetelnet配置本地用戶的接入類型為telnet[Huawei-aaa]local-userhuaweiprivilegelevel3配置本地用戶的優(yōu)先級(jí)為322、路由策略命令格式[R2]route-policyimport-ospfpermitnode10新建一條名稱為import-ospf的路由策略,允許狀態(tài),節(jié)點(diǎn)為10[R2-route-policy]if-matchacl2000配置路由策略區(qū)配的ACL訪問控制列表[R2-route-policy]applycost20配置符合此路由策略的開銷設(shè)置為2023、路由器交換機(jī)常用命令[Huawei-GigabitEthernet0/0/0]return在任意模式下都可以使用這條(返回)命令退出到用戶視圖[Huawei]sysnameHuawei修改路由器名稱[Huawei]displaycurrent-configuration查看路由器當(dāng)前配置[Huawei]displayin