1、PCA login: root password: linux # shutdown -h now # init 0 # logout # login # ifconfig # ifconfig eth0 netmask # ifconfig eht0 netmask down # route add gw # route del gw # route add default gw # route del default gw # route # ping # telnet；使用 root 用戶 linux；關機；關機IP 地址IP 地址 刪除 IP 地址;設置

2、網關;刪除網關；顯示網關telnet 之前先 ping交換機命令Quidwaysuper password密碼QuidwaysysnameQuidwayinterface ethernet 0/1Quidwayinterface vlan xQuidway-Vlan-interfacexip address Quidwayip route-static 修改特權用戶交換機命名進入接口視圖進入接口視圖靜態路由=網關配置端口雙工工作狀態配置端口工作速率配置端口流控配置端口 MDI/MDIX狀Quidwayu

3、ser-interface vty 0 4S3026-ui-vty0-4authentication-mode passwordS3026-ui-vty0-4set authentication-mode password simple 222S3026-ui-vty0-4user privilege level 3 Quidway-Ethernet0/1duplex half|full|auto Quidway-Ethernet0/1speed 10|100|auto Quidway-Ethernet0/1flow-controlQuidway-Ethernet0/1mdi across|a

4、uto|normal 態平接或扭接Quidway-Ethernet0/1port link-type trunk|access|hybrid 式Quidway-Ethernet0/1shutdownQuidway-Ethernet0/2quit Quidwayvlan 3入VLANf式Quidway-vlan3port ethernet 0/1 to ethernet 0/4以太網接口Quidway-Ethernet0/2port access vlan 3入到指定 VLANQuidway-Ethernet0/2port trunk permit vlan ID|AllVLANQuidway-

5、Ethernet0/2port trunk pvid vlan 3PVID設置接口工作模關閉 / 重起接口退出系統視圖創建/刪除一個VLAN進在當前VLANt曾加/刪除將當前接口加設 trunk 允許的設置 trunk 端口的Quidwaymonitor-port指定和清除鏡像端口Quidwayport mirror指定和清除被鏡像端口Quidwayport mirror int_list observing-port int_type int_num指定鏡像和被鏡像Quidwaydescription stringQuidwaydescriptionQuidwaydisplay vlan v

6、lan_id Quidwaystp enable|disable關閉Quidwaystp priority 4096Quidwaystp root primary|secondary備份Quidway-Ethernet0/1stp cost 200 SwitchA-vlanxisolate-user-vlan enable SwitchAIsolate-user-vlan secondary Quidway-Ethernet0/2port hybrid pvid vlan Quidway-Ethernet0/2port hybrid pvid Quidway-Ethernet0/2port h

7、ybrid vlan vlan_id vlan指定VLAN的述字符 刪除VLAN的述字符查看VLANS置開啟 / 關閉生成樹, 默認設置交換機的優先級設置交換機為根或根的設置交換機端口的花費設置主 vlan設置主 vlan 包括的子 vlan設置 vlan 的 pvid刪除 vlan 的 pvidlist untagged設置無標識的如果包的 vlan id 與 PVId 一致，則去掉vlan 信息 . 默認 PVID=1。所以設置PVID為所屬vlan id,設置可以互通的vlan為untagged.路由器命令顯示版本信息 顯示當前配置 顯示接口信息 顯示路由信息Quidwaydisplay

8、 versionQuidwaydisplay current-configurationQuidwaydisplay interfacesQuidwaydisplay ip routeQuidwaysysname aabbcc更改主機名Quidwaysuper passwrod 123456設置口令Quidwayinterface serial0進入接口Quidway-serial0ip addressQuidway-serial0undo shutdown激活端口Quidwaylink-protocol hdlc綁定 hdlc協議Quidwayuser-interface vty 0 4 Q

9、uidway-ui-vty0-4authentication-mode passwordQuidway-ui-vty0-4set authentication-mode password simple 222Quidway-ui-vty0-4user privilege level 3Quidway-ui-vty0-4quitQuidwaydebugging hdlc all serial0顯示所有信息Quidwaydebugging hdlc event serial0調試事件信息Quidwaydebugging hdlc packet serial0顯示包的信息靜態路由：Quidwayip

10、 route-static interfacenumber|nexthopvaluereject|blackhole例如：Quidwayip route-static 16 Quidwayip route-static Quidwayip route-static 16 Serial 2Quidwayip route-static 動態路由：QuidwayripQuidwayrip workQuidwayrip inputQuidw

11、ayrip output可以 allQuidway-ripnetwork Quidway-ripnetwork Quidway-rippeer ip-address Quidway-ripsummary Quidwayrip version 1 Quidwayrip version 2 multicast Quidway-Ethernet0rip split-horizon水平分隔Quidwayrouter id A.B.C.DQuidwayospf enable Quidway-ospfimport-route directQuidway-Serial0ospf

12、 enable area配置路由器的 ID啟動OSPFW議 引入直聯路由配置OSPM域標準訪問列表命令格式如下：acl match-order config|auto默認前者順序匹配。rule normal|specialpermit|deny source source-addr source- wildcard|any例：Quidwayacl 10Quidway-acl-10rule normal permit source 55Quidway-acl-10rule normal deny source any擴展訪問控制列表配置命令配置TCP/UDPft、

13、議的擴展訪問列表：rule normal|specialpermit|denytcp|udpsource |anydestination |any operate配置ICMP協議的擴展訪問列表：rule normal|specialpermit|denyicmp source |anydestination |anyicmp-code logging擴展訪問控制列表操作符的含義equal portnumbergreater-than portnumberless-than portnumbernot-equal portnumberrange portnumber1 portnumber2大于

14、小于不等 區間擴展訪問控制列表舉例Quidwayacl 101Quidway-acl-101rule deny souce any destination anyQuidway-acl-101rule permit icmp source any destination any icmp-type echoQuidway-acl-101rule permit icmp source any destination any icmp-type echo-replyQuidwayacl 102Quidway-acl-102rule permit ip source

15、 destination Quidway-acl-102rule deny ip source any destination anyQuidwayacl 103Quidway-acl-103rule permit tcp source any destination destination-port equal ftpQuidway-acl-103rule permit tcp source any destination destination-port equal wwwQuidwayfi

16、rewall enableQuidwayfirewall default permit|denyQuidwayint e0Quidway-Ethernet0firewall packet-filter 101 inbound|outbound地址轉換配置舉例Quidwayfirewall enableQuidwayfirewall default permitQuidwayacl 101Quidway-acl-101rule deny ip source any destination anyQuidway-acl-101rule permit ip source 0 d

17、estination anyQuidway-acl-101rule permit ip source 0 destination anyQuidway-acl-101rule permit ip source 0 destination anyQuidway-acl-101rule permit ip source 0 destination anyQuidwayacl 102Quidway-acl-102rule permit tcp source 0 destination 0Q

18、uidway-acl-102rule permit tcp source any destination 0 destination-port great-than 1024Quidway-Ethernet0firewall packet-filter 101 inboundQuidway-Serial0firewall packet-filter 102 inbound Quidwaynat address-group 01 03 pool1Quidwayacl 1Quidway-acl-1rule permit so

19、urce 55Quidway-acl-1rule deny source anyQuidway-acl-1int serial 0Quidway-Serial0nat outbound 1 address-group pool1Quidway-Serial0nat server global 01 inside ftp tcpQuidway-Serial0nat server global 02 inside www tcpQuidway-Serial0nat server global 02 8080 inside www tcpQuidway-Serial0nat server global 03 inside smtp udpPPP驗證：