华为路由器的配置命令，谁能详细的帮我翻译一下，谢谢啊 谁能帮我逐条解释华为交换机的配置命令，谢谢！！
\u534e\u4e3agpon\u914d\u7f6e\u547d\u4ee4\uff0c\u6709\u4e2d\u6587\u7ffb\u8bd1\u7684\uff0c\u8c01\u6709\uff0c\u7ed9\u53d1\u4e0b\uff0c\u8c22\u8c22\uff0c\u547d\u4ee4\u884c\u624b\u518c\u8fd9\u79cd\u6587\u6863\u662f\u62ff\u4e0d\u5230\u5916\u9762\u7684\uff0c\u4f60\u60f3\u4e86\u89e3\u54ea\u4e9b\u547d\u4ee4\uff0c\u5199\u5177\u4f53\u4e9b\uff0c\u57fa\u672c\u4e1a\u52a1\u914d\u7f6e\u8fd8\u662f\u641e\u5f97\u5b9a\u7684\u3002
>system\\\u8fdb\u5165\u7528\u6237\u89c6\u56fe
] sysname C2960\\\u66f4\u6539\u4ea4\u6362\u673a\u540d\u4e3aC2960
] vlan batch 2 to 4094\\\u521b\u5efa2\u81f34094\u53f7vlan
] stp bpdu-protection\\\u542f\u7528BPDU\u4fdd\u62a4\u8fb9\u7f18\u7aef\u53e3
] domain abc\\AAA RADIUS HWTACACS\u547d\u4ee4
] domain abc1 admin\\AAA RADIUS HWTACACS\u547d\u4ee4
] undo http server enable\\\u5173\u95ed\u8bbe\u5907web\u7f51\u7ba1\u529f\u80fd
] aaa\\\u672c\u5730\u8ba4\u8bc1\u6388\u6743
aaa] local-user abc password cipher cisco\\\u65b0\u5efa\u672c\u5730\u7528\u6237\u8d26\u53f7\u540dabc \u767b\u5f55\u5bc6\u7801cisco \u5bc6\u6587\u52a0\u5bc6
aaa] local-user abc privilege level 15\\\u8d26\u53f7abc \u6743\u9650\u7ea7\u522b\u4e3a15\uff08\u6700\u9ad8\u6743\u9650\uff09
aaa] local-user abc service-type telnet\\\u8d26\u53f7abc \u767b\u5f55\u65b9\u5f0f\u4e3a telnet
aaa] quit\\\u9000\u51faaaa\u914d\u7f6e\u6a21\u5f0f
] interface Vlanif100\\\u8fdb\u5165vlan 100 \u914d\u7f6e\u4ea4\u6362\u673a\u7ba1\u7406ip
vlanif100] ip address 192.168.1.1 255.255.255.0\\\u914d\u7f6evlan100\u4e3a\u4ea4\u6362\u673a\u9ed8\u8ba4\u7ba1\u7406vlan,\u8bbe\u7f6e\u7ba1\u7406\u5730\u5740ip\u4e3a192.168.1.1 255.255.255.0
vlanif100] undo shut\\\u542f\u7528vlan100
vlanif100] quit\\\u9000\u51favlan100\u914d\u7f6e
] ip route-static 0.0.0.0 0.0.0.0 192.168.10.254\\\u8bbe\u7f6e\u4ea4\u6362\u673a\u7f51\u5173\u9ed8\u8ba4\u8def\u7531
]user-interface con 0\\\u8fdb\u5165\u4ea4\u6362\u673aconsole 0\u53e3\u914d\u7f6e\u6a21\u5f0f
console0] user privilege level 15\\\u8fde\u63a5console 0\u7684\u7528\u6237\u6743\u9650\u7ea7\u522b\u4e3a15 \uff08\u6700\u9ad8\u6743\u9650\uff09
console0] authentication-mode password\\\u8bbe\u7f6e\u63a5\u5165console 0\u53e3\u65f6\u7528\u6237\u9700\u8981\u8f93\u5165\u5bc6\u7801
console0] set authentication password cipher cisco\\\u914d\u7f6e\u63a5\u5165console 0\u53e3\u7684\u7528\u6237\u5bc6\u7801\u4e3acisco \u5bc6\u6587\u52a0\u5bc6
console0] quit\\\u9000\u51fa console 0\u53e3\u914d\u7f6e\u6a21\u5f0f
] user-interface vty 0 4\\\u914d\u7f6e\u8fdc\u7a0btelnet
vty0-4] user privilege level 15\\telnet 0-4\u53e3 \u63a5\u5165\u7684\u7528\u6237\u7ea7\u522b\u4e3a15\uff08\u6700\u9ad8\u7ea7\u522b\uff09
vty0-4] authentication-mode aaa\\\u8ba4\u8bc1\u6a21\u5f0f\u4e3aaaa
vty0-4] idle-timeout 10\\10\u5206\u949f\u5185\u7528\u6237\u4e0e\u8bbe\u5907\u95f4\u6ca1\u6709\u4fe1\u606f\u4ea4\u4e92 \u8bbe\u5907\u5c06\u65ad\u5f00\u8fdc\u7a0b\u8fde\u63a5
vty0-4] quit\\\u9000\u51fatelnet\u914d\u7f6e\u6a21\u5f0f
] ntp-service unicast-server 192.168.1.2\\\u8fdb\u5165\u914d\u7f6eNTP\u670d\u52a1\u5668192.168.1.2 \u65f6\u95f4\u540c\u6b65
] header login information ^\\\u8bbe\u7f6e\u767b\u5f55\u65f6\u7684\u663e\u793a\u4fe1\u606f
~~~~~~~~~~
PCA login: root ；使用root用户
password: linux ；口令是linux
# shutdown -h now ；关机
# init 0 ；关机
# logout
# login
# ifconfig ；显示IP地址
# ifconfig eth0 <ip address> netmask <netmask> ；设置IP地址
# ifconfig eht0 <ip address> netmask <netmask> down ; 删除IP地址
# route add 0.0.0.0 gw <ip>
# route del 0.0.0.0 gw <ip>
# route add default gw <ip> ；设置网关
# route del default gw <ip> ；删除网关
# route ；显示网关
# ping <ip>
# telnet <ip> ；建议telnet之前先ping一下－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
交换机命令
~~~~~~~~~~
[Quidway]super password 修改特权用户密码
[Quidway]sysname 交换机命名
[Quidway]interface ethernet 0/1 进入接口视图
[Quidway]interface vlan x 进入接口视图
[Quidway-Vlan-interfacex]ip address 10.65.1.1 255.255.0.0
[Quidway]ip route-static 0.0.0.0 0.0.0.0 10.65.1.2 静态路由＝网关[Quidway]user-interface vty 0 4
[S3026-ui-vty0-4]authentication-mode password
[S3026-ui-vty0-4]set authentication-mode password simple 222
[S3026-ui-vty0-4]user privilege level 3[Quidway-Ethernet0/1]duplex {half|full|auto} 配置端口双工工作状态
[Quidway-Ethernet0/1]speed {10|100|auto} 配置端口工作速率
[Quidway-Ethernet0/1]flow-control 配置端口流控
[Quidway-Ethernet0/1]mdi {across|auto|normal} 配置端口MDI/MDIX状态平接或扭接
[Quidway-Ethernet0/1]port link-type {trunk|access|hybrid} 设置接口工作模式
[Quidway-Ethernet0/1]shutdown 关闭/重起接口
[Quidway-Ethernet0/2]quit 退出系统视图[Quidway]vlan 3 创建/删除一个VLAN/进入VLAN模式
[Quidway-vlan3]port ethernet 0/1 to ethernet 0/4 在当前VLAN增加/删除以太网接口
[Quidway-Ethernet0/2]port access vlan 3 将当前接口加入到指定VLAN
[Quidway-Ethernet0/2]port trunk permit vlan {ID|All} 设trunk允许的VLAN
[Quidway-Ethernet0/2]port trunk pvid vlan 3 设置trunk端口的PVID[Quidway]monitor-port <interface_type interface_num> 指定和清除镜像端口
[Quidway]port mirror <interface_type interface_num> 指定和清除被镜像端口
[Quidway]port mirror int_list observing-port int_type int_num 指定镜像和被镜像[Quidway]description string 指定VLAN描述字符
[Quidway]description 删除VLAN描述字符
[Quidway]display vlan [vlan_id] 查看VLAN设置[Quidway]stp {enable|disable} 开启/关闭生成树,默认关闭
[Quidway]stp priority 4096 设置交换机的优先级
[Quidway]stp root {primary|secondary} 设置交换机为根或根的备份
[Quidway-Ethernet0/1]stp cost 200 设置交换机端口的花费[SwitchA-vlanx]isolate-user-vlan enable 设置主vlan
[SwitchA]Isolate-user-vlan <x> secondary <list> 设置主vlan包括的子vlan
[Quidway-Ethernet0/2]port hybrid pvid vlan <id> 设置vlan的pvid
[Quidway-Ethernet0/2]port hybrid pvid 删除vlan的pvid
[Quidway-Ethernet0/2]port hybrid vlan vlan_id_list untagged 设置无标识的vlan
如果包的vlan id与PVId一致，则去掉vlan信息. 默认PVID=1。
所以设置PVID为所属vlan id, 设置可以互通的vlan为untagged.
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
路由器命令
~~~~~~~~~~
[Quidway]display version 显示版本信息
[Quidway]display current-configuration 显示当前配置
[Quidway]display interfaces 显示接口信息
[Quidway]display ip route 显示路由信息[Quidway]sysname aabbcc 更改主机名
[Quidway]super passwrod 123456 设置口令
[Quidway]interface serial0 进入接口
[Quidway-serial0]ip address <ip><mask>
[Quidway-serial0]undo shutdown 激活端口
[Quidway]link-protocol hdlc 绑定hdlc协议
[Quidway]user-interface vty 0 4
[Quidway-ui-vty0-4]authentication-mode password
[Quidway-ui-vty0-4]set authentication-mode password simple 222
[Quidway-ui-vty0-4]user privilege level 3
[Quidway-ui-vty0-4]quit
[Quidway]debugging hdlc all serial0 显示所有信息
[Quidway]debugging hdlc event serial0 调试事件信息
[Quidway]debugging hdlc packet serial0 显示包的信息静态路由：
[Quidway]ip route-static <ip><mask>{interface number|nexthop}[value][reject|blackhole]
例如：
[Quidway]ip route-static 129.1.0.0 16 10.0.0.2
[Quidway]ip route-static 129.1.0.0 255.255.0.0 10.0.0.2
[Quidway]ip route-static 129.1.0.0 16 Serial 2
[Quidway]ip route-static 0.0.0.0 0.0.0.0 10.0.0.2
动态路由：
[Quidway]rip
[Quidway]rip work
[Quidway]rip input
[Quidway]rip output
[Quidway-rip]network 1.0.0.0 ;可以all
[Quidway-rip]network 2.0.0.0
[Quidway-rip]peer ip-address
[Quidway-rip]summary
[Quidway]rip version 1
[Quidway]rip version 2 multicast
[Quidway-Ethernet0]rip split-horizon ;水平分隔[Quidway]router id A.B.C.D 配置路由器的ID
[Quidway]ospf enable 启动OSPF协议
[Quidway-ospf]import-route direct 引入直联路由
[Quidway-Serial0]ospf enable area <area_id> 配置OSPF区域
标准访问列表命令格式如下：
acl <acl-number> [match-order config|auto] 默认前者顺序匹配。
rule [normal|special]{permit|deny} [source source-addr source-wildcard|any]
例：
[Quidway]acl 10
[Quidway-acl-10]rule normal permit source 10.0.0.0 0.0.0.255
[Quidway-acl-10]rule normal deny source any
扩展访问控制列表配置命令配置TCP/UDP协议的扩展访问列表：
rule {normal|special}{permit|deny}{tcp|udp}source {<ip wild>|any}destination <ip wild>|any}
[operate]配置ICMP协议的扩展访问列表：
rule {normal|special}{permit|deny}icmp source {<ip wild>|any]destination {<ip wild>|any]
[icmp-code] [logging]扩展访问控制列表操作符的含义
equal portnumber 等于
greater-than portnumber 大于
less-than portnumber 小于
not-equal portnumber 不等
range portnumber1 portnumber2 区间扩展访问控制列表举例
[Quidway]acl 101
[Quidway-acl-101]rule deny souce any destination any
[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo
[Quidway-acl-101]rule permit icmp source any destination any icmp-type echo-reply[Quidway]acl 102
[Quidway-acl-102]rule permit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0
[Quidway-acl-102]rule deny ip source any destination any[Quidway]acl 103
[Quidway-acl-103]rule permit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp
[Quidway-acl-103]rule permit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www
[Quidway]firewall enable
[Quidway]firewall default permit|deny
[Quidway]int e0
[Quidway-Ethernet0]firewall packet-filter 101 inbound|outbound
地址转换配置举例
[Quidway]firewall enable
[Quidway]firewall default permit
[Quidway]acl 101
[Quidway-acl-101]rule deny ip source any destination any
[Quidway-acl-101]rule permit ip source 129.38.1.4 0 destination any
[Quidway-acl-101]rule permit ip source 129.38.1.1 0 destination any
[Quidway-acl-101]rule permit ip source 129.38.1.2 0 destination any
[Quidway-acl-101]rule permit ip source 129.38.1.3 0 destination any
[Quidway]acl 102
[Quidway-acl-102]rule permit tcp source 202.39.2.3 0 destination 202.38.160.1 0
[Quidway-acl-102]rule permit tcp source any destination 202.38.160.1 0 destination-port great-than
1024[Quidway-Ethernet0]firewall packet-filter 101 inbound
[Quidway-Serial0]firewall packet-filter 102 inbound [Quidway]nat address-group 202.38.160.101 202.38.160.103 pool1
[Quidway]acl 1
[Quidway-acl-1]rule permit source 10.110.10.0 0.0.0.255
[Quidway-acl-1]rule deny source any
[Quidway-acl-1]int serial 0
[Quidway-Serial0]nat outbound 1 address-group pool1 [Quidway-Serial0]nat server global 202.38.160.101 inside 10.110.10.1 ftp tcp
[Quidway-Serial0]nat server global 202.38.160.102 inside 10.110.10.2 www tcp
[Quidway-Serial0]nat server global 202.38.160.102 8080 inside 10.110.10.3 www tcp
[Quidway-Serial0]nat server global 202.38.160.103 inside 10.110.10.4 smtp udp
PPP验证：
主验方：pap|chap
[Quidway]local-user u2 password {simple|cipher} aaa
[Quidway]interface serial 0
[Quidway-serial0]ppp authentication-mode {pap|chap}
[Quidway-serial0]ppp chap user u1 //pap时，不用此句 pap被验方：
[Quidway]interface serial 0
[Quidway-serial0]ppp pap local-user u2 password {simple|cipher} aaachap被验方：
[Quidway]interface serial 0
[Quidway-serial0]ppp chap user u1
[Quidway-serial0]local-user u2 password {simple|cipher} aaa
绛旓細鍗庝负璺敱鍣ㄧ殑鍩烘湰閰嶇疆 瑕佹兂閰嶇疆WBR-204g鏃犵嚎璺敱鍣紝蹇呴』鐭ラ亾璇ヨ矾鐢卞櫒鐨勬不鐞咺P銆傚崕涓3comWBR-204g鏃犵嚎璺敱鍣ㄣ佺鐞咺P鏄192.168.1.1锛岀敤鎴峰悕鍜屽瘑鐮侀兘鏄痑dmin銆傚皢璺敱鍣ㄤ笌鐢佃剳鐢ㄧ綉绾胯繛鎺ュソ涔嬪悗锛岄厤缃鐢佃剳IP鍦板潃锛岀數鑴戠殑IP鍦板潃蹇呴』涓庤矾鐢卞櫒鐨処P鍦板潃鍦ㄥ悓涓涓綉娈碉紝鍗崇數鑴戠殑IP鍦板潃蹇呴』鍦192.168.2-192....
绛旓細鐜板湪瓒婃潵瓒婂鐨勫搴紑濮嬮夋嫨鑷繁璐拱璺敱鍣ㄦ潵缁勫缓鑷繁鐨勫眬鍩熺綉锛岃屽崕涓轰綔涓哄浗鍐呯煡鍚嶅搧鐗岋紝鍏惰矾鐢卞櫒鐨勬т环姣斾篃闈炲父楂锛屽崕涓鸿矾鐢卞櫒鐨勮缃瀵逛簬鍒濆鑰呮潵璇村彲鑳戒細鏈変簺鍥伴毦锛屼笅闈㈠皢涓哄ぇ瀹璇︾粏浠嬬粛鍗庝负璺敱鍣ㄥ浣曡缃1.杩炴帴璺敱鍣 棣栧厛闇瑕佷繚璇佽嚜宸辫喘涔扮殑鍗庝负璺敱鍣ㄥ凡缁忔纭繛鎺ヤ笂浜嗙數婧愬拰缃戠嚎锛屾敞鎰忥細WAN鍙ｅ繀椤昏...
绛旓細鍗庝负璺敱鍣ㄥ懡浠ゅぇ鍏 杩欑瘒鏂囩珷涓鸿鑰呬粙缁嶄簡涓浜涘崕涓3COM璺敱鍣ㄥ懡浠ょ殑渚嬪瓙,鍦ㄧ綉缁滀腑缃戠粶绠＄悊鍛樺簲璇ラ殢鏃朵簡瑙ｈ矾鐢卞櫒鐨勫悇绉嶇姸鎬,浠ヤ究鍙婃椂鐨勬帓闄ゆ晠闅溿鍗庝负璺敱鍣ㄧ殑鍛戒护绫讳技浜巆isco鐨剆how鍛戒护銆傜敤濂戒粬鍙互澶уぇ鏂逛究鎴戜滑鏃ュ父宸ヤ綔銆俛aa 鎸囧畾 AAA(璁よ瘉,鎺堟潈鍜岃璐)閰嶇疆aaa-enable 浣胯兘AAA(璁よ瘉,鎺堟潈鍜岃璐)access-server 鎸囧畾鎺ュ叆...
绛旓細[Quidway]routeridA.B.C.D锛涢厤缃璺敱鍣ㄧ殑ID [Quidway]ospfenable锛涘惎鍔∣SPF鍗忚 [Quidway-ospf]import-routedirect锛涘紩鍏ョ洿鑱旇矾鐢 [Quidway-Serial0]ospfenablearea锛涢厤缃甇SPF鍖哄煙 鍗庝负璺敱鍣浜ゆ崲鏈閰嶇疆鍛戒护锛氭爣鍑嗚闂垪琛ㄥ懡浠ゆ牸寮忓涓嬶細acl[match-orderconfig|auto]锛涢粯璁ゅ墠鑰呴『搴忓尮閰嶃俽ule[normal|special]...
绛旓細鍗庝负瀹剁敤璺敱鍣璁剧疆鏁欑▼ 1銆佸湪IE涓啓鍏璺敱鍣ㄧ殑缃戠鐨処P鍦板潃(鍦ㄨ矾鐢卞櫒鍚庨潰鏈夛紝涓鑸负锛192.168.1.1)灏变細鍑虹幇鐧婚檰鐣岄潰銆傝緭鍏ュ叾璁块棶甯愬彿鍜岃闂瘑鐮佸氨杩涘叆璺敱鍣ㄧ殑璁块棶鐣岄潰浜嗐備富瑕佸鍏剁綉缁滃弬鏁般丏HCP鏈嶅姟鍣ㄥ拰瀹夊叏瑙勫垯杩涜璁剧疆灏卞彲浠ヨ交鏉剧殑杩涜涓婄綉浜嗐傞夋嫨“缃戠粶鍙傛暟”閫夐」锛岀劧鍚庨夋嫨LAN鍙ｅ弬鏁拌缃...
绛旓細鍗庝负璺敱鍣浜ゆ崲鏈閰嶇疆鍛戒护:鍦板潃杞崲閰嶇疆涓句緥 [Quidway]firewallenable [Quidway]firewalldefaultpermit [Quidway]acl101;鍐呴儴鎸囧畾涓绘満鍙互杩涘叆e0 [Quidway-acl-101]ruledenyipsourceanydestinationany [Quidway-acl-101]rulepermitipsource129.38.1.10destinationany [Quidway-acl-101]rulepermitipsource129.38.1.20destination...
绛旓細iproute鍜宺ecursive-lookup銆1銆乮proute鍛戒护鐢ㄤ簬閰嶇疆闈欐佽矾鐢便2銆乺ecursive-lookup鍛戒护鐢ㄤ簬鎺у埗闈欐佽矾鐢辨槸鍚﹀彲浠ヨ凯浠ｅ埌杩滅绉佺綉浜ゅ弶璺敱銆傚紑鍚簡recursive-lookup锛岄偅涔堥潤鎬佽矾鐢变細缁ф壙鍒拌繙绔缃戜氦鍙璺敱鐨Label鍜孴oken淇℃伅锛屼粠鑰屼娇璁惧鍙互鎸夌収闈欐佽矾鐢辫凯浠ｅ埌鐨勯毀閬撹浆鍙戞暟鎹
绛旓細鍗庝负璺敱鍣浜ゆ崲鏈閰嶇疆鍛戒护:鍦板潃杞崲閰嶇疆涓句緥 [Quidway]firewallenable [Quidway]firewalldefaultpermit [Quidway]acl101;鍐呴儴鎸囧畾涓绘満鍙互杩涘叆e0 [Quidway-acl-101]ruledenyipsourceanydestinationany [Quidway-acl-101]rulepermitipsource129.38.1.10destinationany [Quidway-acl-101]rulepermitipsource129.38.1.20destination...
绛旓細鍗庝负璺敱鍣绠鍗閰嶇疆(鑰鍛戒护琛)en 杩涘叆鐗规潈妯″紡conf 杩涘叆鍏ㄥ眬閰嶇疆妯″紡in s0 杩涘叆 serial 0 绔彛閰嶇疆ip add xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx 娣诲姞ip 鍦板潃鍜屾帺鐮,鐢典俊鍒嗛厤enca hdlc/ppp 鎹嗙粦閾捐矾鍗忚 hdlc 鎴栬 pppip unn e0exit 鍥炲埌鍏ㄥ眬閰嶇疆妯″紡in e0 杩涘叆浠ュお鎺ュ彛閰嶇疆ip add xxx.xxx.xxx.xxx ...
绛旓細銆鍛戒护妯″紡銆 浠ュお缃戞帴鍙閰嶇疆妯″紡 銆愪娇鐢ㄦ寚鍗椼 duplex 璁剧疆浠ュお缃戝彛宸ヤ綔浜庡叏鍙屽伐妯″紡,no duplex 鎭㈠浠ュお缃戝彛缂虹渷宸ヤ綔妯″紡.褰璺敱鍣浠ュお缃戝彛涓庡叡浜紡Hub鐩歌繛鏃,搴斿伐浣滀簬鍗婂弻宸ユ柟寮,褰撹矾鐢卞櫒浠ュお缃戝彛涓庝氦鎹㈠紡Lantch鐩歌繛,鑰屼笖Lantch璁剧疆浜嗗叏鍙屽伐鏂瑰紡鏃,搴斿伐浣滀簬鍏ㄥ弻宸ユ柟寮忋 銆愪妇渚嬨 璁剧疆浠ュお缃戞帴鍙ｆ弿杩颁负鍏ㄥ弻宸...
