admin管理员组

文章数量:1532488

文章目录

    • 一、使用console口登录管理设备
    • 二、单臂路由

一、使用console口登录管理设备

这里展示两种方法:1.串口认证;2.aaa认证.

拓扑

连接设备之后,开启设备;在PC端别忘了点击连接(双击PC端设备–>串口–>连接)

1、串口认证

基本配置:

<Huawei>system-view 
[Huawei]sysname AR-1
[AR-1]user-interface console 0	
[AR-1-ui-console0]authentication-mode password 
Please configure the login password (maximum length 16):8
[AR-1-ui-console0]set authentication password cipher 12345678
[AR-1-ui-console0]quit
[AR-1]quit
<AR-1>quit


输入正确密码,才能进入系统。

(温馨提示:输入密码的时候,是不显示如何信息的)

2、AAA认证

基本配置:

<Huawei>system-view 
[Huawei]sysname AR-1
[AR-1]user-interface console 0
[AR-1-ui-console0]authentication-mode aaa
[AR-1-ui-console0]quit
[AR-1]aaa
[AR-1-aaa]loca		
[AR-1-aaa]local-user ybd password cipher 12345678	
[AR-1-aaa]local-user ybd privilege level 3
[AR-1-aaa]quit
[AR-1]
[AR-1]quit
<AR-1>quit


输入正确用户名和密码,才能进入系统。

二、单臂路由

1、拓扑

2、配置

AR1

<AR-1>di cu
 sysname AR-1
......
#
interface GigabitEthernet0/0/0
#
interface GigabitEthernet0/0/0.1
 dot1q termination vid 10
 ip address 192.168.10.1 255.255.255.0 
 arp broadcast enable
#
interface GigabitEthernet0/0/0.2
 dot1q termination vid 20
 ip address 192.168.20.1 255.255.255.0 
 arp broadcast enable
#
.....

LSW1

<LSW1>di cu
#
sysname LSW1
#
vlan batch 10 20
#
stp edged-port default
stp instance 1 root primary
stp instance 2 root secondary
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
 region-name aa
 revision-level 12
 instance 1 vlan 10
 instance 2 vlan 20
 active region-configuration
#
drop-profile default
#
......
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 10
#
interface Ethernet0/0/3
 port link-type access
 port default vlan 20
#
interface Ethernet0/0/4
......

LSW2

<LSW2>di cu
#
sysname LSW2
#
vlan batch 10 20
#
stp edged-port default
stp instance 1 root secondary
stp instance 2 root primary
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
diffserv domain default
#
stp region-configuration
 region-name aa
 revision-level 12
 instance 1 vlan 10
 instance 2 vlan 20
 active region-configuration
#
drop-profile default
#
......
#
interface Vlanif1
#
interface MEth0/0/1
#
interface Ethernet0/0/1
 port link-type access
 port default vlan 10
#
interface Ethernet0/0/2
 port link-type access
 port default vlan 20
#
interface Ethernet0/0/3
 port link-type access
 port default vlan 10
 stp edged-port disable
#
interface Ethernet0/0/4
 port link-type access
 port default vlan 20
 stp edged-port disable
#
......

PC1 ping 测192.168.10.1

我是艺博东,一个人知道的越多,越能明白自己的无知。也欢迎你和我一起讨论,我们下期见。

本文标签: 路由基本配置设备Console