3、acl命令格式:基本/高级ACL支持:acl[ipv6]acl-number{inbound|outbound}undoacl[ipv6]acl-number{inbound|outbound}二层ACL支持:aclacl-numberinboundundoaclacl-numberinbound功能:acl命令用来引用访问控制列表(ACL),2000~2999:基本ACL编号;3000~3999:高级ACL编号;4000~4999:二层ACL编号。应用实例:system-view[Sysname]aclnumber2001[Sysname-acl-basic-2001]rulepermitsource192.168.1.260system-view[Sysname]aclnumber3001[Sysname-acl-adv-3001]rulepermittcpdestination192.168.1.4104、DHCP命令格式:(1)配置基于接口地址池的DHCP[R1]dhcpenable开启DHCP功能[R1-GigabitEthernet0/0/2]dhcpselectinterface开启接口的DHCP服务功能[R1-GigabitEthernet0/0/2]dhcpserverleaseday2配置IP地址租用有效期限为2天,默认为1天,超过租期后该地址将会重新分配[R1-GigabitEthernet0/0/2]dhcpserverexcluded-ip-address192.168.3.251192.168.3.253配置不参与自动分配的IP地址[R1-GigabitEthernet0/0/2]dhcpserverdns-list8.8.8.8指定接口地址池下的DNS服务器(2)配置基于全局地址池的DHCP[R2]dhcpenable开启DHCP功能[R2]ippoolhuawei1创建一个全局地址池,地址池名称为huawei1[R3-ip-pool-huawei1]network192.168.4.0动态分配的地址范围192.168.4.0,如果不指定掩码,则默认使用自然掩码[R3-ip-pool-huawei1]leaseday2全局地址池下的地址租期[R3-ip-pool-huawei1]gateway-list192.168.4.254配置DHCP客户端的网关地址[R3-ip-pool-huawei1]excluded-ip-address192.168.4.250192.168.4.253[R3-ip-pool-huawei1]dns-list8.8.8.8[R3]interfaceGigabitEthernet0/0/0[R3-GigabitEthernet0/0/0]dhcpselectglobal开启接口DHCP功能,指定接口采用全局地址池为客户端分配IP地址5、Eth-Trunk命令格式:[S1]interfaceEth-Trunk1配置链路聚合,创建Eth-Trunk1[S1-Eth-Trunk1]modemanualload-balance指定为手工负载分担模式[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]eth-trunk1加入到Eth-Trunk1接口[S1]interfaceGigabitEthernet0/0/2[S1-GigabitEthernet0/0/2]eth-trunk1加入到Eth-Trunk1接口6、GVRP命令格式:[S1]gvrp在交换机上启用GVRP[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]gvrp在接口上启用GVRP[S3]interfaceGigabitEthernet0/0/1[S3-GigabitEthernet0/0/1]gvrpregistrationfixed在接口下将GVRP的注册模式修改为Fixed模式[S2]interfaceGigabitEthernet0/0/1[S2-GigabitEthernet0/0/1]gvrpregistrationforbidden在接口下将GVRP的注册模式修改为Forbidden模式7、IPV6命令格式:[R1]ipv6全局开启IPv6功能[R1]intg0/0/0[R1-GigabitEthernet0/0/0]ipv6enable接口下开启IPv6功能[R1-GigabitEthernet0/0/0]ipv6addressautolink-local接口上配置自动生成链路本地地址[r1-GigabitEthernet0/0/0]ipv6address2001:3:fd::64eui-64配置EUI-64地址[R1]intg0/0/0[R1-GigabitEthernet0/0/0]ipv6enable接口下开启IPv6功能[r1-GigabitEthernet0/0/0]ipv6add2031:0:130f::164在接口上手工静态配置全球单播地址8、NAT命令格式:[R1]intg0/0/0[R1-GigabitEthernet0/0/0]natstaticglobal202.169.10.5inside172.16.1.1静态NAT[r1]intg0/0/1[r1-GigabitEthernet0/0/1]natserverprotocoltcpglobalcurrent-interfacewwwinside192.168.1.1www静态PAT,使用当前接口IP作NAT映射[R1]nataddress-group1202.169.10.50202.169.10.60配置NAT地址池[R1]acl2001[R1-acl-basic-2001]rule5permitsource172.16.1.00.0.0.255配置访问控制列表[R1]intg0/0/0[R1-GigabitEthernet0/0/0]natoutbound2001address-group1配置NATOutbound[R1]acl2001[R1-acl-basic-2001]rule5permitsource172.16.1.00.0.0.255[R1]intg0/0/0[R1-GigabitEthernet0/0/0]natoutbound2001配置NATEasy–IP,使用接口的IP地址作为NAT9、OSPF命令格式:[Huawei]ospf11代表进程号,如果没有注明,则默认为进程1[Huawei-ospf-1]area0区域ID,配置为区域0[Huawei-ospf-1-area-0.0.0.0]network1.1.1.00.0.0.255精确区配所通告的网...
