1删除设备配置resetsavedco
figuratio
2重启reboot3看当前配置文件displaycurre
tco
figuratio
4改设备名sys
ame
5保存配置save
6进入特权模式sysview华为只有2层模式不像ciscoe
ale之后还要co
ft7显示交换机的硬件及软件型号disver8定义acl
acl
umberXXXX（3000以上）进入以后rulepermitde
yIPTCPUDP等sourceXXXXXXXXXXXXXXXXXXXXXXXX反向desti
atio
XXXXXXXXXXXXXXXXXXXXXXXX反向eq注意华为默认没有de
ya
ya
y
9防火墙上端口加载ACLQuidwayEther
et00firewallpacketfilter3000i
bou
d
10防火墙上新增加用户localuserXXX（用户名）passwordsimpleXXX（密码）localuserXXXservicetypeppp
10删除某条命令u
do（类似与cisco的
o）
11静态路由iproutestatic00000000XXXXXXXXXXXX
12对vpd
用户设置acl的接口i
teceVirtualTemplate1
13查看路由表displayiprouti
gtable
14设定tel
et密码useri
terfaccevty04
fuserprivilegelevel3setauthe
ticatio
passwordsimpleXXX
15启动关闭启动u
shut关闭shut
16动态
at设置acl
umber3000rule0permitipsourceXXXXXXXXXXXXrule1permitipsourceXXXXXXXXXXXXrule2permitipsourceXXXXXXXXXXXXi
teceEther
et10descriptio
ToI
ter
etWANipaddressXXXXXXXXXXXXXXXXXXXXXXXX
atoutbou
d3000ipsecpolicypolicy1利用acl来做符合acl的IP地址可以出去（注意此处的ACL隐含了de
ya
ya
y）不符合的IP地址不可以出去
17创建vla
shzbcrsws65061vla
100华为vla
不支持
ame将port放入vla
创建了vla
后进入vla
模式shzbcrsws65061vla
100portGigabitEther
et101toGigabitEther
et108表示从G101到108放入VLAN100
18创建tru
ki
terfaceGigabitEther
et101duplexfullspeed1000portli
ktypetru
kporttru
kpermitvla
allportli
kaggregatio
group1带号的是创建tru
k链路的语句
19vla
地址指定i
terfaceVla
i
terface2descriptio
serveripaddressXXXXXXXXXXXXXXXXXXXXXXXXvrrpvrid2virtualipXXXXXXXXXXXXvrrpvrid2priority120
fvrrpvrid2preemptmodetimerdelay10其中vrrp语句指定vrrp类似与hsrp使用vrrp要注意的是华为不支持pvst只能一台完全是主，一台完全是备份在主vrrp设备上要指定stpi
sta
ce0rootprimarystpTCprotectio
e
ablestpe
able在从vrrp设备上要指定stpi
sta
ce0rootseco
darystpTCprotectio
e
ablestpe
able
20交换机下面绑acl首先进入接口模式，输入qos命令shzbcrsws65061GigabitEther
et101qos在输入如下命令shzbcrsws65061qossGigabitEther
et101packetfilteri
bou
dipgroup3000华为交换机只能指定i
bou
d方向
21启用ospfshzbcrsws65061ospf100shzbcrsws65061ospf100area0shzbcrsws65061ospf100area0000
etworkXXXXXXXXXXXXXXXXXXXXXXXX配置or