H3C 路由器配置命令2
一、路由器基本配置命令 1、system-view 进入系统视图模式 2、sysname R1 为设备命名为 R 3、display ip routing-table 显示当前路由表 4、language-mode Chinese|English 中英文切换 5、interface Ethernet 0/0 进入以太网端口视图 6、ip address 192.168.1.1 255.255.255.0 配置 IP 地址和子网掩码 7、undo shutdown 打开以太网端口 8、shutdown 关闭以太网端口 9、quit 退出当前视图模式 10、ip route-static 192.168.2.0 255.255.255.0 192.168.12.2 de ion To.R2 配置静态路由 11、ip route-static 0.0.0.0 0.0.0.0 192.168.12.2 de ion To.R2 配 置默认的路由 基本配置案例
[Quidway]display [Quidway]display [Quidway]display [Quidway]display version current-configuration interfaces ip route 显示版本信息 显示当前配置 显示接口信息 显示路由信息 更改主机名 设置口令 进入接口 激活端口 绑定 hdlc 协议
[Quidway]sysname aabbcc [Quidway]super passwrod 123456 [Quidway]interface serial0 [Quidway-serial0]ip address [Quidway-serial0]undo shutdown [Quidway] -protocol hdlc
[Quidway]user-interface vty 0 4 [Quidway-ui-vty0-4]authentication-mode password [Quidway-ui-vty0-4]set authentication-mode password simple 2 [Quidway-ui-vty0-4]user privilege level 3 [Quidway-ui-vty0-4]quit [Quidway]debugging hdlc all serial0 [Quidway]debugging hdlc event serial0 [Quidway]debugging hdlc packet serial0 显示所有信息 调试事件信息 显示包的信息
静态路由配置案例： [Quidway]ip route-static {interface
number|nexthop}[value][reject|blackhole] 例如： [Quidway]ip [Quidway]ip [Quidway]ip [Quidway]ip route-static route-static route-static route-static 129.1.0.0 16 10.0.0. 129.1.0.0 255.255.0.0 10.0.0. 129.1.0.0 16 Serial 0.0.0.0 0.0.0.0 10.0.0.
动态路由配置案例（RIP）： [Quidway]rip [Quidway]rip work [Quidway]rip input [Quidway]rip output [Quidway-rip]network 1.0.0.0 [Quidway-rip]network 2.0.0.0 [Quidway-rip]peer ip-address [Quidway-rip]summary [Quidway]rip version [Quidway]rip version 2 multicast [Quidway-Ethernet0]rip split-horizon
;可以 all
;水平分隔
动态路由配置案例（OSPF）： [Quidway]router id A.B.C.D 配置路由器的 ID [Quidway]ospf enable 启动 OSPF 协议 [Quidway-ospf]import-route direct 引入直联路由 [Quidway-Serial0]ospf enable area 配置 OSPF 区域 标准访问列表命令格式如下： acl [match-order config|auto] 默认前者顺序匹配。 rule [normal|special]{permit|deny} [source source-addr source-wildcard|any] 例： [Quidway]acl 10 [Quidway-acl-10]rule normal permit source 10.0.0.0 0.0.0.25 [Quidway-acl-10]rule normal deny source any 二、ACL 配置 扩展访问控制列表配置命令
1.配置 TCP/UDP 协议的扩展访问列表：
rule {normal|special}{permit|deny}{tcp|udp}source {|any}destination |any} [operate] 2.配置 ICMP 协议的扩展访问列表： rule {normal|special}{permit|deny}icmp source {|any]destination {|any]
[icmp-code] [logging] 扩展访问控制列表操作符的含义 equal portnumber 等于 greater-than portnumber 大于 less-than portnumber 小于 not-equal portnumber 不等 range portnumber1 portnumber 区间
3.扩展访问控制列表案例
[Quidway]acl 10 [Quidway-acl-101]rule deny souce any destination any [Quidway-acl-101]rule permit icmp source any destination any icmp-type echo [Quidway-acl-101]rule permit icmp source any destination any icmp-type echo-reply [Quidway]acl 10 [Quidway-acl-102]rule permit ip source 10.0.0.1 0.0.0.0 destination 202.0.0.1 0.0.0.0 [Quidway-acl-102]rule deny ip source any destination any [Quidway]acl 103 [Quidway-acl-103]rule permit tcp source any destination 10.0.0.1 0.0.0.0 destination-port equal ftp [Quidway-acl-103]rule permit tcp source any destination 10.0.0.2 0.0.0.0 destination-port equal www [Quidway]firewall enable [Quidway]firewall default permit|deny [Quidway]int e0 [Quidway-Ethernet0]firewall packet-filter 101 inbound|outbound 4. NAT 的配置 地址转换配置案例 [Quidway]firewall enable [Quidway]firewall default permit [Quidway]acl 10 [Quidway-acl-101]rule deny ip source any destination any [Quidway-acl-101]rule permit ip source 129.38.1.4 0 destination any [Quidway-acl-101]rule permit ip source 129.38.1.1 0 destination any [Quidway-acl-101]rule permit ip source 129.38.1.2 0 destination any [Quidway-acl-101]rule permit ip source 129.38.1.3 0 destination any [Quidway]acl 10 [Quidway-acl-102]rule permit tcp source 202.39.2.3 0 destination
202.38.160.1 0 [Quidway-acl-102]rule permit tcp source any destination 202.38.160.1 0 destination-port great-than 1024 [Quidway-Ethernet0]firewall packet-filter 101 inbound [Quidway-Serial0]firewall packet-filter 102 inbound [Quidway]nat address-group 202.38.160.101 202.38.160.103 pool [Quidway]acl [Quidway-acl-1]rule permit source 10.110.10.0 0.0.0.25 [Quidway-acl-1]rule deny source any [Quidway-acl-1]int serial 0 [Quidway-Serial0]nat outbound 1 address-group pool [Quidway-Serial0]nat [Quidway-Serial0]nat tcp [Quidway-Serial0]nat www tcp [Quidway-Serial0]nat udp server global 202.38.160.101 inside 10.110.10.1 ftp tcp server global 202.38.160.102 inside 10.110.10.2 www server global 202.38.160.102 8080 inside 10.110.10.3 server global 202.38.160.103 inside 10.110.10.4 smtp
5. PPP 验证配置： 主验方：pap|chap [Quidway]local-user u2 password {simple|cipher} aaa [Quidway]interface serial 0 [Quidway-serial0]ppp authentication-mode {pap|chap} [Quidway-serial0]ppp chap user u1 //pap 时，不用此句 pap 被验方： [Quidway]interface serial 0 [Quidway-serial0]ppp pap local-user u2 password {simple|cipher} aaa chap 被验方： [Quidway]interface serial 0 [Quidway-serial0]ppp chap user u1 [Quidway-serial0]local-user u2 password {simple|cipher} aaa
