20242025學(xué)年度華為認(rèn)證高頻難、易錯(cuò)點(diǎn)題及參考答案詳解1.關(guān)于華為交換機(jī)的VLAN劃分題目：在華為交換機(jī)上，要將端口Eth0/0/1、Eth0/0/2和Eth0/0/3加入VLAN10，以下配置命令正確的是（）A.<Huawei>vlan10<Huaweivlan10>porteth0/0/1eth0/0/2eth0/0/3B.<Huawei>systemview[Huawei]vlanbatch10[Huawei]interfaceeth0/0/1[HuaweiEthernet0/0/1]portlinktypeaccess[HuaweiEthernet0/0/1]portaccessvlan10[HuaweiEthernet0/0/1]quit[Huawei]interfaceeth0/0/2[HuaweiEthernet0/0/2]portlinktypeaccess[HuaweiEthernet0/0/2]portaccessvlan10[HuaweiEthernet0/0/2]quit[Huawei]interfaceeth0/0/3[HuaweiEthernet0/0/3]portlinktypeaccess[HuaweiEthernet0/0/3]portaccessvlan10C.<Huawei>systemview[Huawei]vlan10[Huaweivlan10]porteth0/0/1eth0/0/2eth0/0/3D.<Huawei>systemview[Huawei]vlanbatch10[Huawei]interfaceeth0/0/1eth0/0/2eth0/0/3[Huaweiifrange]portlinktypeaccess[Huaweiifrange]portaccessvlan10答案：B答案分析：A選項(xiàng)未進(jìn)入系統(tǒng)視圖，配置命令格式錯(cuò)誤。C選項(xiàng)在VLAN視圖下直接添加端口，沒有先配置端口鏈路類型。D選項(xiàng)接口批量配置語法錯(cuò)誤，不能這樣批量進(jìn)入接口。B選項(xiàng)先創(chuàng)建VLAN10，然后分別進(jìn)入每個(gè)接口配置為access模式并加入VLAN10，配置正確。2.華為路由器靜態(tài)路由配置題目：在華為路由器上，要配置一條靜態(tài)路由，目的網(wǎng)絡(luò)為/24，下一跳地址為，以下命令正確的是（）A.<Huawei>iproutestaticB.<Huawei>systemview[Huawei]iproutestaticC.<Huawei>systemview[Huawei]iproutestatic55D.<Huawei>systemview[Huawei]iproutestaticnexthop答案：B答案分析：A選項(xiàng)未進(jìn)入系統(tǒng)視圖，無法進(jìn)行靜態(tài)路由配置。C選項(xiàng)子網(wǎng)掩碼錯(cuò)誤，55不是正確的子網(wǎng)掩碼表示。D選項(xiàng)“nexthop”多余，正確的靜態(tài)路由配置格式為“iproutestatic目的網(wǎng)絡(luò)子網(wǎng)掩碼下一跳地址”，B選項(xiàng)配置正確。3.OSPF協(xié)議相關(guān)題目：在華為路由器上運(yùn)行OSPF協(xié)議，要將接口GigabitEthernet0/0/1加入?yún)^(qū)域0，以下配置正確的是（）A.<Huawei>systemview[Huawei]ospf1[Huaweiospf1]area0[Huaweiospf1area]network55[Huaweiospf1area]quit[Huaweiospf1]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]ipaddressB.<Huawei>systemview[Huawei]ospf1[Huaweiospf1]area0[Huaweiospf1area]network[Huaweiospf1area]quit[Huaweiospf1]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]ipaddressC.<Huawei>systemview[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]ipaddress[HuaweiGigabitEthernet0/0/1]quit[Huawei]ospf1[Huaweiospf1]area0[Huaweiospf1area]networkD.<Huawei>systemview[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]ipaddress[HuaweiGigabitEthernet0/0/1]ospfenable1area0答案：C答案分析：A選項(xiàng)通過network命令宣告的是一個(gè)網(wǎng)絡(luò)范圍，不一定能準(zhǔn)確將接口GigabitEthernet0/0/1加入?yún)^(qū)域0。B選項(xiàng)同理，宣告的范圍不準(zhǔn)確。D選項(xiàng)“ospfenable1area0”命令在華為設(shè)備中不是標(biāo)準(zhǔn)的將接口加入OSPF區(qū)域的命令。C選項(xiàng)先配置接口IP地址，然后在OSPF進(jìn)程中通過network命令準(zhǔn)確宣告該接口IP地址，將其加入?yún)^(qū)域0，配置正確。4.BGP協(xié)議基本配置題目：在華為路由器上配置BGP，要與對(duì)端建立鄰居關(guān)系，本端AS號(hào)為65000，對(duì)端AS號(hào)為65001，以下配置正確的是（）A.<Huawei>systemview[Huawei]bgp65000[Huaweibgp]peerasnumber65001B.<Huawei>systemview[Huawei]bgp65000[Huaweibgp]peeras65001C.<Huawei>systemview[Huawei]bgp65000[Huaweibgp]neighborasnumber65001D.<Huawei>systemview[Huawei]bgp65000[Huaweibgp]neighboras65001答案：A答案分析：B選項(xiàng)“as”命令錯(cuò)誤，正確的是“asnumber”。C和D選項(xiàng)“neighbor”不是華為設(shè)備中BGP配置鄰居的正確關(guān)鍵字，華為設(shè)備中使用“peer”來配置BGP鄰居關(guān)系，A選項(xiàng)配置正確。5.華為防火墻安全區(qū)域配置題目：在華為防火墻中，要將接口GigabitEthernet1/0/1加入Trust區(qū)域，以下命令正確的是（）A.<Huawei>systemview[Huawei]zonetrust[Huaweizonetrust]addinterfaceGigabitEthernet1/0/1B.<Huawei>systemview[Huawei]interfaceGigabitEthernet1/0/1[HuaweiGigabitEthernet1/0/1]zonetrustC.<Huawei>systemview[Huawei]securityzonetrust[Huaweisecurityzonetrust]addinterfaceGigabitEthernet1/0/1D.<Huawei>systemview[Huawei]securityzonetrust[Huaweisecurityzonetrust]interfaceGigabitEthernet1/0/1答案：C答案分析：A選項(xiàng)在華為防火墻中沒有“zonetrust”這種配置方式。B選項(xiàng)“zonetrust”命令在接口視圖下使用錯(cuò)誤。D選項(xiàng)“interface”命令在安全區(qū)域視圖下使用錯(cuò)誤，正確的是先進(jìn)入安全區(qū)域視圖，然后使用“addinterface”將接口加入安全區(qū)域，C選項(xiàng)正確。6.華為無線AP配置題目：在華為無線AC上，要將一個(gè)AP加入到AP組“apgroup1”，已知AP的序列號(hào)為210235A2A02100E00016，以下命令正確的是（）A.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]apgroupnameapgroup1[Huaweiwlanapgroupapgroup1]apadd210235A2A02100E00016B.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]apgroupapgroup1[Huaweiwlanapgroupapgroup1]apadd210235A2A02100E00016C.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]apadd210235A2A02100E00016groupapgroup1D.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]apgroupnameapgroup1[Huaweiwlanapgroupapgroup1]apserialnumber210235A2A02100E00016答案：A答案分析：B選項(xiàng)“apgroupapgroup1”命令格式錯(cuò)誤，應(yīng)該使用“apgroupnameapgroup1”創(chuàng)建AP組。C選項(xiàng)在wlan視圖下直接添加AP到組的命令格式錯(cuò)誤。D選項(xiàng)“apserialnumber”命令錯(cuò)誤，正確的是在AP組視圖下使用“apadd”添加AP序列號(hào)，A選項(xiàng)配置正確。7.華為交換機(jī)端口安全配置題目：在華為交換機(jī)上，要對(duì)端口Eth0/0/1配置端口安全，最大允許連接的MAC地址數(shù)量為3，以下命令正確的是（）A.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portsecurityenable[HuaweiEth0/0/1]portsecuritymacaddressmax3B.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portsecurity[HuaweiEth0/0/1]portsecuritymaxmaccount3C.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portsecurityenable[HuaweiEth0/0/1]portsecuritymaxmac3D.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portsecurity[HuaweiEth0/0/1]portsecuritymacmax3答案：A答案分析：B選項(xiàng)“portsecurity”后沒有先啟用端口安全就配置最大MAC數(shù)量，且“maxmaccount”命令錯(cuò)誤。C選項(xiàng)“portsecuritymaxmac”命令錯(cuò)誤。D選項(xiàng)“portsecuritymacmax”命令錯(cuò)誤。A選項(xiàng)先啟用端口安全，然后配置最大允許連接的MAC地址數(shù)量，命令正確。8.華為路由器DHCP配置題目：在華為路由器上配置DHCP服務(wù)，要為網(wǎng)段/24分配IP地址，地址池范圍為0000，網(wǎng)關(guān)為，以下配置正確的是（）A.<Huawei>systemview[Huawei]dhcpenable[Huawei]ippooldhcp_pool_1[Huaweiippooldhcp_pool_1]networkmask[Huaweiippooldhcp_pool_1]gatewaylist[Huaweiippooldhcp_pool_1]addressrange0000B.<Huawei>systemview[Huawei]dhcpenable[Huawei]ippooldhcp_pool_1[Huaweiippooldhcp_pool_1]network[Huaweiippooldhcp_pool_1]gateway[Huaweiippooldhcp_pool_1]address00to00C.<Huawei>systemview[Huawei]dhcpenable[Huawei]ippooldhcp_pool_1[Huaweiippooldhcp_pool_1]networkmask[Huaweiippooldhcp_pool_1]gateway[Huaweiippooldhcp_pool_1]addressrange0000D.<Huawei>systemview[Huawei]dhcpenable[Huawei]ippooldhcp_pool_1[Huaweiippooldhcp_pool_1]network[Huaweiippooldhcp_pool_1]gatewaylist[Huaweiippooldhcp_pool_1]address00to00答案：A答案分析：B選項(xiàng)“gateway”命令錯(cuò)誤，應(yīng)該使用“gatewaylist”，“address”命令格式錯(cuò)誤。C選項(xiàng)“addressrange”命令錯(cuò)誤。D選項(xiàng)“address”命令格式錯(cuò)誤。A選項(xiàng)配置步驟和命令格式均正確，先啟用DHCP，然后創(chuàng)建地址池，配置網(wǎng)絡(luò)、網(wǎng)關(guān)和地址范圍。9.華為設(shè)備Telnet服務(wù)配置題目：在華為路由器上配置Telnet服務(wù)，允許用戶通過Telnet以密碼認(rèn)證方式登錄，密碼為“huawei123”，以下命令正確的是（）A.<Huawei>systemview[Huawei]userinterfacevty04[Huaweiuivty04]authenticationmodepassword[Huaweiuivty04]setauthenticationpasswordcipherhuawei123B.<Huawei>systemview[Huawei]userinterfacevty04[Huaweiuivty04]authenticationmodepassword[Huaweiuivty04]setauthenticationpasswordsimplehuawei123C.<Huawei>systemview[Huawei]userinterfacevty04[Huaweiuivty04]authenticationpasswordsimplehuawei123D.<Huawei>systemview[Huawei]userinterfacevty04[Huaweiuivty04]authenticationpasswordcipherhuawei123答案：B答案分析：A選項(xiàng)“setauthenticationpasswordcipher”加密方式在這種場(chǎng)景下不是簡(jiǎn)單密碼認(rèn)證的正確用法。C選項(xiàng)“authenticationpassword”命令格式錯(cuò)誤，缺少“mode”。D選項(xiàng)同樣“authenticationpasswordcipher”命令格式錯(cuò)誤。B選項(xiàng)先配置認(rèn)證模式為密碼認(rèn)證，然后設(shè)置簡(jiǎn)單密碼，命令正確。10.華為交換機(jī)STP配置題目：在華為交換機(jī)上，要將交換機(jī)的優(yōu)先級(jí)設(shè)置為4096，以下命令正確的是（）A.<Huawei>systemview[Huawei]stppriority4096B.<Huawei>systemview[Huawei]stprootpriority4096C.<Huawei>systemview[Huawei]stpinstance0priority4096D.<Huawei>systemview[Huawei]stpregionpriority4096答案：C答案分析：A選項(xiàng)“stppriority”命令錯(cuò)誤，沒有這種配置方式。B選項(xiàng)“stprootpriority”命令錯(cuò)誤。D選項(xiàng)“stpregionpriority”命令錯(cuò)誤。在華為交換機(jī)上設(shè)置交換機(jī)優(yōu)先級(jí)需要在實(shí)例下進(jìn)行，C選項(xiàng)“stpinstance0priority4096”正確，通常默認(rèn)實(shí)例為0。11.華為路由器NAT配置題目：在華為路由器上配置動(dòng)態(tài)NAT，將內(nèi)部網(wǎng)絡(luò)/24的IP地址轉(zhuǎn)換為接口GigabitEthernet0/0/1的公網(wǎng)IP地址，以下命令正確的是（）A.<Huawei>systemview[Huawei]acl2000[Huaweiaclbasic2000]rulepermitsource55[Huaweiaclbasic2000]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]natoutbound2000B.<Huawei>systemview[Huawei]acl2000[Huaweiaclbasic2000]rulepermitsource[Huaweiaclbasic2000]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]natoutbound2000C.<Huawei>systemview[Huawei]acl2000[Huaweiaclbasic2000]rulepermitsource55[Huaweiaclbasic2000]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]natstatic2000D.<Huawei>systemview[Huawei]acl2000[Huaweiaclbasic2000]rulepermitsource[Huaweiaclbasic2000]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]natstatic2000答案：A答案分析：B選項(xiàng)ACL規(guī)則中源地址通配符掩碼使用錯(cuò)誤，應(yīng)該是55。C和D選項(xiàng)“natstatic”用于靜態(tài)NAT配置，本題要求動(dòng)態(tài)NAT，應(yīng)使用“natoutbound”，A選項(xiàng)先創(chuàng)建ACL允許內(nèi)部網(wǎng)絡(luò)，然后在接口上配置動(dòng)態(tài)NAT，命令正確。12.華為防火墻策略配置題目：在華為防火墻中，要配置一條策略允許Trust區(qū)域的設(shè)備訪問Untrust區(qū)域的Web服務(wù)（TCP80端口），以下命令正確的是（）A.<Huawei>systemview[Huawei]firewallpolicy[Huaweipolicysecurity]rulenameweb_access[Huaweipolicysecurityruleweb_access]sourcezonetrust[Huaweipolicysecurityruleweb_access]destinationzoneuntrust[Huaweipolicysecurityruleweb_access]sourceaddressany[Huaweipolicysecurityruleweb_access]destinationaddressany[Huaweipolicysecurityruleweb_access]servicehttp[Huaweipolicysecurityruleweb_access]actionpermitB.<Huawei>systemview[Huawei]firewallpolicy[Huaweipolicysecurity]rulenameweb_access[Huaweipolicysecurityruleweb_access]sourcezonetrust[Huaweipolicysecurityruleweb_access]destinationzoneuntrust[Huaweipolicysecurityruleweb_access]sourceaddress55[Huaweipolicysecurityruleweb_access]destinationaddress55[Huaweipolicysecurityruleweb_access]servicetcp80[Huaweipolicysecurityruleweb_access]actionpermitC.<Huawei>systemview[Huawei]firewallpolicy[Huaweipolicysecurity]rulenameweb_access[Huaweipolicysecurityruleweb_access]sourcezonetrust[Huaweipolicysecurityruleweb_access]destinationzoneuntrust[Huaweipolicysecurityruleweb_access]sourceaddressany[Huaweipolicysecurityruleweb_access]destinationaddressany[Huaweipolicysecurityruleweb_access]servicetcp80[Huaweipolicysecurityruleweb_access]actionpermitD.<Huawei>systemview[Huawei]firewallpolicy[Huaweipolicysecurity]rulenameweb_access[Huaweipolicysecurityruleweb_access]sourcezonetrust[Huaweipolicysecurityruleweb_access]destinationzoneuntrust[Huaweipolicysecurityruleweb_access]sourceaddressany[Huaweipolicysecurityruleweb_access]destinationaddressany[Huaweipolicysecurityruleweb_access]servicehttp[Huaweipolicysecurityruleweb_access]actiondeny答案：A答案分析：B選項(xiàng)“servicetcp80”可以實(shí)現(xiàn)功能，但不如“servicehttp”直觀，因?yàn)閔ttp默認(rèn)就是TCP80端口。C選項(xiàng)同理。D選項(xiàng)“actiondeny”是拒絕策略，與題目要求允許訪問不符。A選項(xiàng)配置源區(qū)域、目的區(qū)域、地址范圍和服務(wù)為http并允許訪問，配置正確。13.華為無線AC的SSID配置題目：在華為無線AC上，要?jiǎng)?chuàng)建一個(gè)名為“huawei_wifi”的SSID，并將其綁定到VLAN10，以下命令正確的是（）A.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]ssidprofilenamehuawei_wifi[Huaweiwlanssidprofhuawei_wifi]ssidhuawei_wifi[Huaweiwlanssidprofhuawei_wifi]servicevlanvlanid10B.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]ssidprofilehuawei_wifi[Huaweiwlanssidprofhuawei_wifi]ssidhuawei_wifi[Huaweiwlanssidprofhuawei_wifi]servicevlan10C.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]ssidprofilenamehuawei_wifi[Huaweiwlanssidprofhuawei_wifi]ssidhuawei_wifi[Huaweiwlanssidprofhuawei_wifi]vlan10D.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]ssidprofilehuawei_wifi[Huaweiwlanssidprofhuawei_wifi]ssidhuawei_wifi[Huaweiwlanssidprofhuawei_wifi]vlanid10答案：A答案分析：B選項(xiàng)“ssidprofilehuawei_wifi”命令格式錯(cuò)誤，應(yīng)該使用“ssidprofilenamehuawei_wifi”。C選項(xiàng)“vlan10”命令錯(cuò)誤，應(yīng)使用“servicevlanvlanid10”。D選項(xiàng)“vlanid10”命令缺少“servicevlan”，A選項(xiàng)配置正確，先創(chuàng)建SSID模板，設(shè)置SSID名稱，然后綁定VLAN。14.華為交換機(jī)端口鏡像配置題目：在華為交換機(jī)上，要將端口Eth0/0/1作為鏡像源端口，端口Eth0/0/2作為鏡像目的端口，以下命令正確的是（）A.<Huawei>systemview[Huawei]portmirroringtointerfaceEth0/0/2inbound[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portmirroringtointerfaceEth0/0/2outboundB.<Huawei>systemview[Huawei]interfaceEth0/0/2[HuaweiEth0/0/2]portmirroringinbound[HuaweiEth0/0/2]portmirroringoutbound[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portmirroringtointerfaceEth0/0/2bothC.<Huawei>systemview[Huawei]monitorportinterfaceEth0/0/2[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]mirroringporttomonitorportbothD.<Huawei>systemview[Huawei]monitorportinterfaceEth0/0/2[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]mirroringportinbound[HuaweiEth0/0/1]mirroringportoutbound答案：C答案分析：A選項(xiàng)命令格式錯(cuò)誤，沒有這樣的配置方式。B選項(xiàng)“portmirroringinbound”和“portmirroringoutbound”在目的端口視圖下使用錯(cuò)誤。D選項(xiàng)“mirroringportinbound”和“mirroringportoutbound”分開配置不完整。C選項(xiàng)先指定監(jiān)控端口，然后在鏡像源端口配置雙向鏡像，命令正確。15.華為路由器RIP協(xié)議配置題目：在華為路由器上運(yùn)行RIP協(xié)議，要將接口GigabitEthernet0/0/1所在的網(wǎng)絡(luò)宣告到RIP進(jìn)程中，該接口IP地址為/24，以下配置正確的是（）A.<Huawei>systemview[Huawei]rip1[Huaweirip1]version2[Huaweirip1]networkB.<Huawei>systemview[Huawei]rip1[Huaweirip1]version2[Huaweirip1]networkC.<Huawei>systemview[Huawei]rip1[Huaweirip1]version2[Huaweirip1]networkD.<Huawei>systemview[Huawei]rip1[Huaweirip1]version2[Huaweirip1]network答案：A答案分析：B選項(xiàng)RIP協(xié)議中network命令后面跟的是網(wǎng)絡(luò)地址，不是接口IP地址。C和D選項(xiàng)network命令后不需要跟子網(wǎng)掩碼，A選項(xiàng)先配置RIP進(jìn)程和版本，然后宣告網(wǎng)絡(luò)地址，配置正確。16.華為防火墻雙機(jī)熱備配置題目：在華為防火墻雙機(jī)熱備配置中，要將主防火墻的優(yōu)先級(jí)設(shè)置為200，以下命令正確的是（）A.<Huawei>systemview[Huawei]hrppriority200B.<Huawei>systemview[Huawei]hrpsystempriority200C.<Huawei>systemview[Huawei]hrpgrouppriority200D.<Huawei>systemview[Huawei]hrpdevicepriority200答案：B答案分析：A選項(xiàng)“hrppriority”命令錯(cuò)誤，沒有這種配置方式。C選項(xiàng)“hrpgrouppriority”用于配置組優(yōu)先級(jí)，不是設(shè)備優(yōu)先級(jí)。D選項(xiàng)“hrpdevicepriority”命令錯(cuò)誤。B選項(xiàng)“hrpsystempriority”用于設(shè)置設(shè)備的系統(tǒng)優(yōu)先級(jí)，命令正確。17.華為交換機(jī)端口速率和雙工模式配置題目：在華為交換機(jī)上，要將端口Eth0/0/1的速率設(shè)置為100M，雙工模式設(shè)置為全雙工，以下命令正確的是（）A.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]speed100[HuaweiEth0/0/1]duplexfullB.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portspeed100[HuaweiEth0/0/1]portduplexfullC.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]speed100m[HuaweiEth0/0/1]duplexfullD.<Huawei>systemview[Huawei]interfaceEth0/0/1[HuaweiEth0/0/1]portspeed100m[HuaweiEth0/0/1]portduplexfull答案：A答案分析：B選項(xiàng)“portspeed”和“portduplex”命令錯(cuò)誤，華為交換機(jī)使用“speed”和“duplex”。C選項(xiàng)“speed100m”命令錯(cuò)誤，不需要“m”。D選項(xiàng)同樣“portspeed100m”和“portduplex”命令錯(cuò)誤。A選項(xiàng)配置端口速率和雙工模式，命令正確。18.華為路由器MPLS配置題目：在華為路由器上配置MPLS，要啟用MPLSLDP協(xié)議，以下命令正確的是（）A.<Huawei>systemview[Huawei]mplsldp[Huaweimplsldp]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]mpls[HuaweiGigabitEthernet0/0/1]mplsldpB.<Huawei>systemview[Huawei]mpls[Huawei]mplsldp[Huaweimplsldp]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]mpls[HuaweiGigabitEthernet0/0/1]mplsldpC.<Huawei>systemview[Huawei]mpls[Huawei]mplsldp[Huaweimplsldp]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]mplsldpD.<Huawei>systemview[Huawei]mplsldp[Huaweimplsldp]quit[Huawei]interfaceGigabitEthernet0/0/1[HuaweiGigabitEthernet0/0/1]mpls[HuaweiGigabitEthernet0/0/1]mplsldpenable答案：B答案分析：A選項(xiàng)先配置“mplsldp”，沒有先全局啟用MPLS，命令順序錯(cuò)誤。C選項(xiàng)在接口上沒有先啟用MPLS就啟用MPLSLDP，命令順序錯(cuò)誤。D選項(xiàng)“mplsldpenable”命令錯(cuò)誤。B選項(xiàng)先全局啟用MPLS，再啟用MPLSLDP，然后在接口上依次啟用MPLS和MPLSLDP，命令正確。19.華為防火墻NAT策略配置題目：在華為防火墻中，要配置源NAT策略，將Trust區(qū)域的設(shè)備訪問Untrust區(qū)域的流量進(jìn)行源地址轉(zhuǎn)換，使用接口的公網(wǎng)IP地址，以下命令正確的是（）A.<Huawei>systemview[Huawei]firewallnatsource[Huaweipolicynatsource]rulenamenat_rule[Huaweipolicynatsourcerulenat_rule]sourcezonetrust[Huaweipolicynatsourcerulenat_rule]destinationzoneuntrust[Huaweipolicynatsourcerulenat_rule]actionsourcenateasyipB.<Huawei>systemview[Huawei]firewallnatsource[Huaweipolicynatsource]rulenamenat_rule[Huaweipolicynatsourcerulenat_rule]sourcezonetrust[Huaweipolicynatsourcerulenat_rule]destinationzoneuntrust[Huaweipolicynatsourcerulenat_rule]actionnateasyipC.<Huawei>systemview[Huawei]firewallnatsource[Huaweipolicynatsource]rulenamenat_rule[Huaweipolicynatsourcerulenat_rule]sourcezonetrust[Huaweipolicynatsourcerulenat_rule]destinationzoneuntrust[Huaweipolicynatsourcerulenat_rule]actionsourcenatstaticD.<Huawei>systemview[Huawei]firewallnatsource[Huaweipolicynatsource]rulenamenat_rule[Huaweipolicynatsourcerulenat_rule]sourcezonetrust[Huaweipolicynatsourcerulenat_rule]destinationzoneuntrust[Huaweipolicynatsourcerulenat_rule]actionnatstatic答案：A答案分析：B選項(xiàng)“actionnateasyip”命令錯(cuò)誤，應(yīng)該是“actionsourcenateasyip”。C選項(xiàng)“actionsourcenatstatic”用于靜態(tài)源NAT，本題要求動(dòng)態(tài)源NAT（使用接口公網(wǎng)IP），應(yīng)使用“easyip”。D選項(xiàng)“actionnatstatic”命令錯(cuò)誤。A選項(xiàng)配置源NAT策略使用easyip方式，命令正確。20.華為無線AP的信道和功率配置題目：在華為無線AC上，要將AP“ap_01”的2.4G頻段信道設(shè)置為6，發(fā)射功率設(shè)置為20dBm，以下命令正確的是（）A.<Huawei>systemview[Huawei]wlan[Huaweiwlanview]apnameap_01[Huaweiwlanapap_01]radio0[Huawe