【网工】华为设备命令学习（综合实验一)

实验要求和实验成果如图所示。

LSW2不需要其他配置，其下就一台设备，不需要区分。

LSW3配置如下：

**<Huawei>sy
Enter system view, return user view with Ctrl+Z.
$Huawei$ un in en //关闭系统提示信息
Info: Information center is disabled.
$Huawei$ vlan 20 //创建vlan20
$Huawei-vlan20$ q
$Huawei$ int e0/0/2
$Huawei-Ethernet0/0/2$ port link-type access
$Huawei-Ethernet0/0/2$ q
$Huawei$ vlan 30 //创建vlan30
$Huawei-vlan30$ q
$Huawei$ int e0/0/2
$Huawei-Ethernet0/0/2$ port default vlan 20 //将vlan 20划分进2号端口
$Huawei-Ethernet0/0/2$ int e0/0/3
$Huawei-Ethernet0/0/3$ port link-type access
$Huawei-Ethernet0/0/3$ port default vlan 20
$Huawei-Ethernet0/0/3$ port default vlan 30
$Huawei-Ethernet0/0/3$ dis this //展示当前配置了什么

interface Ethernet0/0/3
port link-type access
port default vlan 30

return
$Huawei-Ethernet0/0/3$ q
$Huawei$ int e0/0/1
$Huawei-Ethernet0/0/1$ port link-type trunk //配置trunk模式
$Huawei-Ethernet0/0/1$ port trunk allow-pass vlan all**

LSW1配置如下：

**<Huawei>sy
Enter system view, return user view with Ctrl+Z.
$Huawei$ un in en
Info: Information center is disabled.
$Huawei$ vlan batch 10 20 30 40 //批量创建 vlan
/*10 20 30 为pc1-3 vlan40为服务器*/
Info: This operation may take a few seconds. Please wait for a moment...done.
$Huawei$ int vlan 10
$Huawei-Vlanif10$ ip add 192.168.10.254 24 //充当网关
$Huawei-Vlanif10$ int vlan 20
$Huawei-Vlanif20$ ip add 192.168.20.254 24
$Huawei-Vlanif20$ int vlan 30
$Huawei-Vlanif30$ ip add 192.168.30.254 24
$Huawei-Vlanif30$ int vlan 40
$Huawei-Vlanif40$ ip add 172.16.100.254 24
$Huawei-Vlanif40$ q
$Huawei$ int g0/0/1
$Huawei-GigabitEthernet0/0/1$ port link-type access
$Huawei-GigabitEthernet0/0/1$ port default vlan 40
$Huawei-GigabitEthernet0/0/1$ int g0/0/2
$Huawei-GigabitEthernet0/0/2$ port link-type access
$Huawei-GigabitEthernet0/0/2$ port default vlan 10
$Huawei-GigabitEthernet0/0/2$ int g0/0/3
$Huawei-GigabitEthernet0/0/3$ port link-type trunk
$Huawei-GigabitEthernet0/0/3$ port trunk allow-pass vlan all
$Huawei-GigabitEthernet0/0/3$ q
$Huawei$ dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
$Huawei$ int g0/0/2
$Huawei-GigabitEthernet0/0/2$ int vlan 10 //为01端口配置dhcp服务器地址
$Huawei-Vlanif10$ dhcp select interface
$Huawei-Vlanif10$ dhcp server dns-list 172.16.100.1
$Huawei-Vlanif10$ dis this

interface Vlanif10
ip address 192.168.10.254 255.255.255.0
dhcp select interface
dhcp server dns-list 172.16.100.1

return
$Huawei-Vlanif10$ int vlan 20
$Huawei-Vlanif20$ dhcp select interface
$Huawei-Vlanif20$ dhcp server dns-list 172.16.100.1
$Huawei-Vlanif20$ int vlan 30
$Huawei-Vlanif30$ dhcp select interface
$Huawei-Vlanif30$ dhcp server dns-list 172.16.100.1
$Huawei-Vlanif30$ q**

$Huawei$ dis ip int brief

$Huawei$ vlan 100 //创建vlan100与路由器连接
$Huawei-vlan100$ q
$Huawei$ int g0/0/4
$Huawei-GigabitEthernet0/0/4$ port link-type access
$Huawei-GigabitEthernet0/0/4$ port default vlan 100
$Huawei-GigabitEthernet0/0/4$ q
$Huawei$ int vlan 100
$Huawei-Vlanif100$ ip add 10.10.10.2 24
$Huawei-Vlanif100$ q
$Huawei$ ping 10.10.10.1
PING 10.10.10.1: 56 data bytes, press CTRL_C to break
Reply from 10.10.10.1: bytes=56 Sequence=1 ttl=255 time=70 ms
Reply from 10.10.10.1: bytes=56 Sequence=2 ttl=255 time=50 ms
Reply from 10.10.10.1: bytes=56 Sequence=3 ttl=255 time=20 ms
Reply from 10.10.10.1: bytes=56 Sequence=4 ttl=255 time=10 ms
Reply from 10.10.10.1: bytes=56 Sequence=5 ttl=255 time=50 ms

--- 10.10.10.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/40/70 ms
$Huawei$ ip route-static 0.0.0.0 0.0.0.0 10.10.10.1 //告诉交换机出去的数据的下一跳

AR1的配置如下：

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
$Huawei$ un in en
Info: Information center is disabled.
$Huawei$ int g0/0/0
$Huawei-GigabitEthernet0/0/0$ ip add 10.10.10.1 24
$Huawei-GigabitEthernet0/0/0$ q
$Huawei$ int g0/0/1
$Huawei-GigabitEthernet0/0/1$ ip add 64.1.1.1 24
$Huawei-GigabitEthernet0/0/1$ q
$Huawei$ ip route-static 0.0.0.0 0.0.0.0 64.1.1.10 //配置静态路由告诉设备出去的下一跳
$Huawei$ ip route-static 192.168.0.0 255.255.0.0 10.10.10.2 //告诉设备进来的下一跳
$Huawei$ ip route-static 172.16.100.0 255.255.0.0 10.10.10.2 //同上
Info: The destination address and mask of the configured static route mismatched
, and the static route 172.16.0.0/16 was generated.
$Huawei$ acl 2000 //配置输入输出规则名称
$Huawei-acl-basic-2000$ rule permit source 192.168.0.0 0.0.255.255
$Huawei-acl-basic-2000$ q
$Huawei$ nat address-group 1 64.1.1.5 64.1.1.5 //nat地址组名称为1
$Huawei$ int g0/0/1
$Huawei-GigabitEthernet0/0/1$ nat outbound 2000 address-group 1 //将规则作用于2000出去的数据使用地址组里的IP
$Huawei-GigabitEthernet0/0/1$ q
$Huawei$ acl 2001
$Huawei-acl-basic-2001$ rule deny source 192.168.10.0 0.0.0.255
$Huawei-acl-basic-2001$ rule permit source any
$Huawei-acl-basic-2001$ int g0/0/0
$Huawei-GigabitEthernet0/0/0$ traffic-filter inbound acl 2001 //将2001作用于内部所有数据
$Huawei-GigabitEthernet0/0/0$ q
$Huawei$ int g0/0/1
$Huawei-GigabitEthernet0/0/1$ nat server global 64.1.1.3 inside 172.16.100.1 将内部IP转换为外部IP