华为路由器交换机配置命令、管理、Layer2、Layer3、IGP.docx

基础/管理配置：system-viewquitreturnundodisplay current-configurationdisplay thisdisplay this include-defaultsave//用户视图下rebootheader login information Hello,Welcome to Huawei!display hotkeylanguage-mode { chinese | english }history-command max-size VALUEdisplay history-command [ all-users ]clock datetime HH:MM:SS YYYY-MM-DDclock timezone time-zone-name { add | minus } offset配置Console:使用AAA验证：user-interface console 0 authentication-mode aaa quitaaa local-user ADMIN123 password irreversible-cipher ADMIN123 local-user ADMIN123 service-type terminal quit使用密码验证：user-interface console 0 authentication-mode password set authentication password cipher ADMIN123配置VTY(Telent):telnet server enableaaa local-user ADMIN123 password irreversible-cipher ADMIN123 local-user ADMIN123 privilege level 15 local-user ADMIN123 service-type telnet quituser-interface maximum-vty 15user-interface vty 0 4 user privilege level 15 authentication-mode aaa idle-timeout 10 0 quit验证命令：display usersdisplay user-interface maximum-vtydisplay user-interface vty summarydisplay local-userdisplay vty mode配置SSH:使用本地用户密码方式（可使用rsa密钥方式）system-viewrsa local-key-pair create //或dsa local-key-pair create //display rsa local-key-pair public //display dsa local-key-pair publicstelnet server enablessh server timeout 60user-interface vty 0 4 authentication-mode aaa protocol inbound {all | ssh} //默认为telnet方式aaa local-user CLIENT001 password irreversible-cipher CLIENT001 local-user CLIENT001 privilege level 3 local-user CLIENT001 service-type ssh quitssh user CLIENT001 authentication-type passwordssh user CLIENT001 service-type stelnetdisplay ssh user-informationdisplay ssh server statusdisplay ssh server sessionssh client first-time enableWeb网管（https）:system-viewhttp server load defaulthttp secure-server enablehttp timeout xxxaaa local-user NAME password irreversible-cipher PASSWORD local-user NAME privilege level LEVEL //级别在3级以上具有管理权限 local-user NAME service-type httpdisplay http userdisplay http server配置管理VLA