-
VRP 华为使用的通用路由平台，华为的交换机、防火墙、安全设备、无线和路由器的命令行几乎一样。
-
VRP分为用户视图、系统视图。
-
用户视图 user view
<Huawei>：其中<>代表的是用户视图，Huawei是设备的名称。命令比较少。开机、登录默认进入该视图。
使用system-view可以由用户视图进入系统视图。
- 系统视图 system view
Huawei\] : 其中\[\] 代表的是系统视图，Huawei是设备的名称。可以对设备进行控制。
Physical物理 # 如果状态为UP，代表接口连线正常。
如果状态为down，代表接口连线不正常。没有接线，或者光衰过大。
Protocol协议 # 如果状态为UP，代表三层的配置是正确的。
如果状态为DOWN，代表三层的配置是不正确的。
- display interface brief 与 display ip interface brief 的区别
display ip interface brief #查看三层接口的状态
display interface brief #查看所有接口的状态
[Huawei]display interface brief
PHY: Physical
*down: administratively down
(l): loopback
(s): spoofing
(b): BFD down
^down: standby
(e): ETHOAM down
(d): Dampening Suppressed
InUti/OutUti: input utility/output utility
Interface PHY Protocol InUti OutUti inErrors outErrors
Ethernet0/0/0 down down 0% 0% 0 0
Ethernet0/0/1 down down 0% 0% 0 0
Ethernet0/0/2 down down 0% 0% 0 0
Ethernet0/0/3 down down 0% 0% 0 0
Ethernet0/0/4 down down 0% 0% 0 0
Ethernet0/0/5 down down 0% 0% 0 0
Ethernet0/0/6 down down 0% 0% 0 0
Ethernet0/0/7 down down 0% 0% 0 0
GigabitEthernet0/0/0 up down 0% 0% 0 0
GigabitEthernet0/0/1 down down 0% 0% 0 0
NULL0 up up(s) 0% 0% 0 0
[Huawei]- 三层接口可以配置IP地址。
二层接口不能直接配置IP地址。华为的中低端交换机默认接口为二层接口，无法配置IP地址。使用undo portswitch 命令删除二层接口的配置，使用vlanif或者svi 才可以配置IP地址。
[Huawei-GigabitEthernet0/0/1]undo portswitch
Aug 2 2023 21:04:15-08:00 Huawei %%01IFNET/4/IF_STATE(l)[0]:Interface Vlanif1 has turned into DOWN state.
Aug 2 2023 21:04:16-08:00 Huawei %%01PHY/1/PHY(l)[1]: GigabitEthernet0/0/1: change status to down
[Huawei-GigabitEthernet0/0/1]
Aug 2 2023 21:04:17-08:00 Huawei %%01PHY/1/PHY(l)[2]: GigabitEthernet0/0/1: change status to up
Aug 2 2023 21:04:23-08:00 Huawei DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 4, the change loop count is 0, and the maximum number of records is 4095.
[Huawei-GigabitEthernet0/0/1]- 配置两台路由器的连通性测试
路由器1配置如下
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]interface g0/0/0
[Huawei-GigabitEthernet0/0/0]display this
[V200R003C00]
#
interface GigabitEthernet0/0/0
#
return
[Huawei-GigabitEthernet0/0/0]ip address 192.168.1.1 24
Aug 2 2023 21:18:41-08:00 Huawei %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[Huawei-GigabitEthernet0/0/0]display this
[V200R003C00]
#
interface GigabitEthernet0/0/0
ip address 192.168.1.1 255.255.255.0
#
return
[Huawei-GigabitEthernet0/0/0]quit
[Huawei]display ip interface br
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 0
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 1
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.1.1/24 up up
GigabitEthernet0/0/1 unassigned up down
NULL0 unassigned up up(s)
[Huawei]路由器2配置如下
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sysname R2
[R2]interface g0/0/0
[R2-GigabitEthernet0/0/0]display this
[V200R003C00]
#
interface GigabitEthernet0/0/0
#
return
[R2-GigabitEthernet0/0/0]interface g0/0/0
[R2-GigabitEthernet0/0/0]ip address 192.168.1.2 24
Aug 2 2023 21:19:40-08:00 R2 %%01IFNET/4/LINK_STATE(l)[1]:The line protocol IP on the interface GigabitEthernet0/0/0 has entered the UP state.
[R2-GigabitEthernet0/0/0]quit
[R2]display ip interface brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 1
Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 192.168.1.2/24 up up
GigabitEthernet0/0/1 unassigned down down
NULL0 unassigned up up(s)
[R2]ping 192.168.1.1
PING 192.168.1.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.1: bytes=56 Sequence=1 ttl=255 time=140 ms
Reply from 192.168.1.1: bytes=56 Sequence=2 ttl=255 time=30 ms
Reply from 192.168.1.1: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 192.168.1.1: bytes=56 Sequence=4 ttl=255 time=20 ms
Reply from 192.168.1.1: bytes=56 Sequence=5 ttl=255 time=30 ms
--- 192.168.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/48/140 ms
[R2]使用ping 命令ping对方IP。成功则返回ttl等信息。
-
shutdown 将接口关闭
-
查看当前设备的所有配置信息
[R1]display current-configuration
[V200R003C00]sysname R1
snmp-agent local-engineid 800007DB03000000000000
snmp-agentclock timezone China-Standard-Time minus 08:00:00
portal local-server load portalpage.zip
drop illegal-mac alarm
set cpu-usage threshold 80 restore 75
aaa
authentication-scheme default
authorization-scheme default
accounting-scheme default
domain default
domain default_admin
local-user admin password cipher %%K8m.Nt84DZ}e#<0`8bmE3Uw}%%
local-user admin service-type httpfirewall zone Local
priority 15interface GigabitEthernet0/0/0
interface GigabitEthernet0/0/1
interface GigabitEthernet0/0/2
interface NULL0
user-interface con 0
authentication-mode password
user-interface vty 0 4
user-interface vty 16 20wlan ac
return
[R1] -
查看路由器某接口的详细信息
[R1]display interface g0/0/1
GigabitEthernet0/0/1 current state : DOWN
Line protocol current state : DOWN
Description:HUAWEI, AR Series, GigabitEthernet0/0/1 Interface
Route Port,The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc63-6071
Last physical up time : -
Last physical down time : 2023-08-03 18:27:02 UTC-08:00
Current system time: 2023-08-03 18:30:05-08:00
Port Mode: COMMON COPPER
Speed : 1000, Loopback: NONE
Duplex: FULL, Negotiation: ENABLE
Mdi : AUTO
Last 300 seconds input rate 0 bits/sec, 0 packets/sec
Last 300 seconds output rate 0 bits/sec, 0 packets/sec
Input peak rate 0 bits/sec,Record time: -
Output peak rate 0 bits/sec,Record time: -Input: 0 packets, 0 bytes
Unicast: 0, Multicast: 0
Broadcast: 0, Jumbo: 0
Discard: 0, Total Error: 0CRC: 0, Giants: 0
Jabbers: 0, Throttles: 0
Runts: 0, Symbols: 0
Ignoreds: 0, Frames: 0Output: 0 packets, 0 bytes
Unicast: 0, Multicast: 0
Broadcast: 0, Jumbo: 0
Discard: 0, Total Error: 0Collisions: 0, ExcessiveCollisions: 0
Late Collisions: 0, Deferreds: 0Input bandwidth utilization threshold : 100.00% Output bandwidth utilization threshold: 100.00% Input bandwidth utilization : 0% Output bandwidth utilization : 0%[R1]
-
Ctrl + C 终止当前正在进行的命令。
-
display version 查看当前设备版本信息。
<R1>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.130 (AR2200 V200R003C00)
Copyright (C) 2011-2012 HUAWEI TECH CO., LTD
Huawei AR2220 Router uptime is 0 week, 0 day, 0 hour, 12 minutes
BKP 0 version information:- PCB Version : AR01BAK2A VER.NC
- If Supporting PoE : No
- Board Type : AR2220
- MPU Slot Quantity : 1
- LPU Slot Quantity : 6
MPU 0(Master) : uptime is 0 week, 0 day, 0 hour, 12 minutes
MPU version information :- PCB Version : AR01SRU2A VER.A
- MAB Version : 0
- Board Type : AR2220
- BootROM Version : 0
<R1>
-
配置环回接口IP地址
[R1]interface LoopBack 0
[R1-LoopBack0]ip address 1.1.1.1 32
[R1-LoopBack0]display ip interface brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
The number of interface that is UP in Physical is 3
The number of interface that is DOWN in Physical is 2
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 3Interface IP Address/Mask Physical Protocol
GigabitEthernet0/0/0 unassigned up down
GigabitEthernet0/0/1 unassigned down down
GigabitEthernet0/0/2 unassigned down down
LoopBack0 1.1.1.1/32 up up(s)
NULL0 unassigned up up(s)
[R1-LoopBack0] -
设置时间
<R1>clock timezone 8 add 08:00:00
-
设置设备当前的日期和时间
<R1>clock datetime 08:00:00 2023-08-04
-
查看当前时区和时间
<R1>display clock
2023-08-04 08:00:51
Friday
Time Zone(8) : UTC+08:00
<R1> -
登录设备前显示登录提示信息
[R1]header login information "Welcome to HUAWEI Certification!"
-
登录设备后显示登录提示信息
[R1]header shell information "Your Evevy operation will be record!"
22.开启路由器的虚拟远程终端接口
[R1]user-interface vty 0 4
[R1-ui-vty0-4]-
配置远程访问登录密码
[R1-ui-vty0-4]authentication-mode password
Please configure the login password (maximum length 16):
24.设置远程用户的访问权限
[R1-ui-vty0-4]user privilege level ?
INTEGER<0-15> Set a priority, the default value is 0
[R1-ui-vty0-4]user privilege level 4
[R1-ui-vty0-4]-
可以在用户视图下执行的命令及解释
<R1>?
User view commands:
arp-ping ARP-ping
autosave <Group> autosave command group
backup Backup information
cd Change current directory
clear <Group> clear command group
clock Specify the system clock
cls Clear screen
compare Compare configuration file
copy Copy from one file to another
debugging <Group> debugging command group
delete Delete a file
dialer Dialer
dir List files on a filesystem
display Display information
factory-configuration Factory configuration
fixdisk Try to restory disk
format Format file system
free Release a user terminal interface
ftp Establish an FTP connection
help Description of the interactive help system
hwtacacs-user HWTACACS user
license <Group> license command group
lldp Link Layer Discovery Protocol
local-user Add/Delete/Set user(s)
lock Lock the current user terminal interface
mkdir Create a new directory
more Display the contents of a file
move Move from one file to another
mpls MPLS parameters
mtrace Trace route to multicast source
pad Establish one PAD connection
patch Patch operation
ping <Group> ping command group
power Power on or off operate
pwd Display current working directory
quit Exit from current mode and enter prior mode
reboot Reboot system
refresh Do soft reset
rename Rename a file or directory
reset <Group> reset command group
resource System resources(mem,message,cpu)
return Enter the privileged mode
rmdir Remove an existing directory
rollback Active/standby mainboard rollback command
save <Group> save command group
schedule Schedule system task
screen-length Set the number of lines displayed on a screen
send Send information to other user terminal interfaces
set <Group> set command group
sslvpn Sslvpn
startup Config parameter for system to startup
super Modify super password parameters
system-view SystemView from terminal
telnet Open a telnet connection
terminal Set the terminal line characteristics
test-aaa Accounts test
tftp Establish a TFTP connection
tracert <Group> tracert command group
undelete Restore deleted files or directory
undo Negate a command or set its defaults
unzip Unzip files or directory
upgrade Upgrade
xdsl Display board temperature
zip Zip files or directory
<R1> -
可以在系统视图下执行的命令及解释
[R1]?
System view commands:
aaa <Group> aaa command group
aaa-authen-bypass Set remote authentication bypass
aaa-author-bypass Set remote authorization bypass
aaa-author-cmd-bypass Set remote command authorization bypass
access-user User access
acl Specify ACL configuration information
alarm Alarm
anti-attack Specify anti-attack configurations
application-apperceive Set application-apperceive information
arp <Group> arp command group
arp-miss <Group> arp-miss command group
arp-ping ARP-ping
arp-suppress Specify arp suppress configuration information,
default is disabled
as-notation The AS notation
authentication Authentication
autoconfig Auto-config
backup Backup information
bfd Specify BFD(Bidirectional Forwarding Detection)
configuration information
bgp Border Gateway Protocol(BGP)
bitschip Reset bits chip
bridge Bridge
capture-packet Capture-packet
ccc Circuit cross connection
clear <Group> clear command group
clock Clock
command-privilege Specify the command level
config System config
controller Specify controller configuration view
cpu-defend Configure CPU defend policy
cpu-defend-policy Apply CPU defend policy
cwmp CWMP View
ddns DDNS
dhcp <Group> dhcp command group
dhcpv6 <Group> dhcpv6 command group
dialer Dialer
dialer-rule Enter dialer-rule view
display Display information
dlsw <Group> dlsw command group
dns <Group> dns command group
dns-server-select-algorithm Configure algorithm of selecting dns server
domain Default domain
dot1x 802.1x configuration information
drop Discard attribute
drop-profile Drop profile
efm EFM module
error-diffusion Error-diffusion
error-down The interface was shut down because of an error
event
event Enter the event view
execute Batch Command
explicit-path Configure explicit path
fec-list FEC list
fib <Group> fib command group
file File system command word
firewall <Group> firewall command group
firewall-nat Firewall & NAT infomation
fr <Group> fr command group
ftp <Group> ftp command group
garp Generic Attribute Registration Protocol
gvrp Generic VLAN Registration Protocol
header Define the login banner
hotkey Specify hotkey configuration information
http <Group> http command group
hwtacacs Set the status of the HWTACACS(Huawei Terminal
Access Controller Access Control System) service
hwtacacs-server Set HWTACACS server
icmp <Group> icmp command group
icmp-reply Enable ICMP reply fast
igmp <Group> igmp command group
igmp-snooping Specify parameters for IGMP-Snooping
ike Specify IKE(Internet Key Exchange) configuration
information
info-center <Group> info-center command group
interface Specify the interface configuration view
ip <Group> ip command group
ipsec Specify IPSec(IP Security) configuration
information
ipv6 <Group> ipv6 command group
isdn Specify ISDN configuration information
isis Intermediate System to Intermediate System (ISIS)
routes
keychain Keychain authentication
l2-topology Layer 2 topology
l2tp Specify L2TP(Layer Two Tunneling Protocol)
configuration information
l2tp-group Specify L2TP(Layer Two Tunneling Protocol) group
configuration information
lacp Link aggregation control protocol
lldp Link Layer Discovery Protocol
load-balance Set load-balance arithmetic
loop-detect Loop detect
lspv Lsp verification
mac-address MAC address
mac-authen MAC authenticate configure information
matched Is Command can be matched by upper template
mld-snooping Specify parameters for MLD-Snooping
mpls <Group> mpls command group
msdp Specify MSDP(Multicast Source Discovery Protocol)
configuration information
mtrace Trace route to multicast source
multicast <Group> multicast command group
multicast-mib Specify multicast MIB configuration information
nat <Group> nat command group
netconf <Group> netconf command group
nqa Network Quality Analysis(NQA)
nqa-ftp-record Save NQA record to FTP server by FTP
nqa-jitter Switch NQA jitter version
nqa-server Specify NQA echo server
ntp-service Specify NTP(Network Time Protocol) configuration
information
oam-mgr Oam-mgr view
observe-port Specify observing port
observe-server Specify remote observing server
ospf Open Shortest Path First (OSPF)
ospfv3 <Group> ospfv3 command group
pim Specify PIM(Protocol Independent Multicast)
configuration information
ping <Group> ping command group
pki <Group> pki command group
policy-based-route Specify a policy for policy based routing
port-group Port-group
port-isolate Port isolate
port-mapping Specify PAM(Port to Application Mapping)
configuration information
portal <Group> portal command group
ppp Specify PPP(the Point-to-Point Protocol)
configuration information
pppoe PPPoE users
pppoe-server Specify PPPoE(PPP over Ethernet) server
configuration information
qos <Group> qos command group
quit Exit from current mode and enter prior mode
radius-server <Group> radius-server command group
refresh <Group> refresh command group
remove Remove
reset <Group> reset command group
return Enter the privileged mode
rip RIP (Routing Information Protocol)
ripng RIPng (Routing Information Protocol next
generation)
rmon <Group> rmon command group
route Routing Module
route-policy Route-policy
route-policy-change Specify route policy change parameter
router Configure router information
rsa Specify RSA module configuration information
set <Group> set command group
sftp <Group> sftp command group
shutdown Shutdown
smart-policy-route Smart Policy Route
snmp-agent <Group> snmp-agent command group
ssh Specify SSH (secure shell) configuration
information
ssl SSL
sslvpn <Group> sslvpn command group
standby Specify DCC(Dial-Control-Center) configuration
information
static-cr-lsp Static CR-LSP configuration
static-lsp Static LSP configuration
stelnet <Group> stelnet command group
stp Specify Spanning Tree Protocol (STP)
configuration information
super Modify super password parameters
sysname Set the host name
tcp Specify TCP(Transmission Control Protocol)
configuration information
telnet <Group> telnet command group
test-aaa Accounts test
test-packet Set the test packet
tftp Establish a TFTP connection
tftp-server TFTP Server
time-range Specify time-range configuration information
tracert <Group> tracert command group
traffic Specify traffic configuration information
trunk Trunk interface
trunk-member The member of trunk
ttl Time to live
tunnel Tunnel module
tunnel-policy Tunnel policy
tunnel-selector Tunnel-policy selector
udp-helper UDP Helper
undo Negate a command or set its defaults
user-bind User bind
user-group User group
user-interface Configure the user terminal interface
vlan Virtual LAN
voice-vlan Voice VLAN
vrrp <Group> vrrp command group
web-auth-server Portal authentication server
wlan WLAN
x25 <Group> x25 command group
x29 X.29 protocol
[R1]