韩老师门徒级课程专题 https://edu.51cto.com/sd/00e42考研套餐https://edu.51cto.com/sd/33c07第二阶段Windows服务器 https://edu.51cto.com/sd/9169d第一阶段IT基础课https://edu.51cto.com/sd/d2aa8数据库专题https://edu.51cto.com/sd/f36482018年考研套餐https://e...

会话层提供的服务可使应用建立和维持会话，并能使会话获得同步。会话层使用校验点可使通信会话在通信失效时从校验点继续恢复通信。这种能力对于传送大的文件极为重要。

ARP 以太网中才使用的协议 通过广播 将IP解析到MAC地址

使用 ICMP协议的命令 ping pathping tracert

配置console口用户和密码身份验证[R3]user-interface console 0 [R3-line-console0]authentication-mode scheme [R3-line-console0]quit授予zhangsan console口登录的权利[R3]local-user zhangsan[R3-luser-manage-zhangsan]service-type terminal [R3-luser-manage-zhangsan]quit

查看Flash中的文件和文件夹dir保存配置save显示保存的配置display saved-configuration 更改路由器名[R3]hostname RouterA重启路由器reboot指定保存的配置文件startup saved-configuration backup.cfg 显示下一次启动使用的配置文件display startup 清空保存的配置reset saved-configuration

mkdir backup --创建文件夹copy backup.cfg flash:/backup/backup1.cfg --拷贝文件到backup目录dir backup/ ...

把文件上传到TFTPtftp 192.168.2.161 put startup.cfg startup1.cfg 从TFTP下载配置文件tftp 192.168.2.161 get startup1.cfg startuptftp.cfg连接到FTP服务ftp 192.168.2.161 21 source ip 192.168.2.254 Press CTRL+C to abort.Connected to 192.168.2.1...

添加静态路由[R3]ip route-static 192.168.0.0 255.255.255.0 172.16.1.1[R3]ip route-static 192.168.0.0 24 172.16.1.1显示全部路由[R1]display ip routing-table只显示静态路由[R1]display ip routing-table protocol static删除静态路由[R1]no ip route-static 172.16.1.0 24 172.16.0.2[R1]undo ip route-static 172.16.1.0 24 172.16.0.2

Internet是全球**的互联网，如果Internet上的路由器把全球所有的网段都添加到路由表，那将是一个非常庞大的路由表。路由器每转发一个数据包，都要检查路由表为该数据包选择转发接口，庞大的路由表势必会增加处理时延。通过合理的地址规划，可以通过路由汇总简化路由表。将物理位...

如果想删除到172.16.0.0 255.255.255.0网段的路由，指向以下命令。route delete 172.16.0.0 mask 255.255.255.0

[H3C]interface GigabitEthernet 0/1[H3C-GigabitEthernet0/1]bfd min-transmit-interval 500[H3C-GigabitEthernet0/1]bfd min-receive-interval 500[H3C-GigabitEthernet0/1]bfd detect-multiplier 9[H3C-GigabitEthernet0/1]quit[H3C]ip route-static 192.168.1.0 ...

启用RIP协议[H3C]rip 1[H3C-rip-1]network 192.168.0.0[H3C-rip-1]network 10.0.0.0[H3C-rip-1]quit显示RIP协议配置[H3C-rip-1]show this#rip 1 network 10.0.0.0 network 192.168.0.0#return

关闭自动汇总[H3C]rip 1 [H3C-rip-1]no summary重置RIP协议 重新生成路由表reset rip 1 process 在接口配置汇总[H3C]interface GigabitEthernet 0/0 [H3C-GigabitEthernet0/0]rip summary-address 192.168.10.128 25

两套方案触发更新+水平分割split-horizon 触发更新+路由毒化poison-reverse

1）每台路由器学习激活的直接相连的网络。2）每台路由器和直接相连的路由器互交，发送Hello报文，建立邻居关系。3）每台路由器构建包含直接相连的链路状态的LSA（Link-State Advertisement，链路状态通告）。链路状态通告(LSA)中记录了所有相关的路由器，包括邻路由器的标识、链路类...

设置router id[H3C]router id 1.1.1.1 显示router id[H3C]display router id Configured router ID is 1.1.1.1 如果配置了OSPF协议更改了Router id使之生效执行以下命令reset ospf process 配置OSPF协议指定的router id优先被使用，如果配置OSPF没有指定router id使用全局的router ID

可以跟接口所在网段[H3C-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255接口的地址[H3C-ospf-1-area-0.0.0.0] network 172.16.0.1 0.0.0.0如果接口在同一个区域area，并且能够合并[H3C-ospf-1-area-0.0.0.0] network 172.0.0.0 0.255.255.255172.16.0.1/30 255.255.255.252 翻转掩码 0.0.0.3172.16.0.64/26 255.255.255.192 翻转掩码 0.0.0.63

[H3C-GigabitEthernet0/0]ospf dr-priority 100

[H3C]ospf 1[H3C-ospf-1-area-0.0.0.0]network 192.168.1.0 0.0.0.255[H3C-ospf-1-area-0.0.0.0]quit[H3C-ospf-1]area 1[H3C-ospf-1-area-0.0.0.1]network 172.16.0.0 0.0.255.255[H3C-ospf-1-area-0.0.0.1]quit将Area 1汇总成一个网段 172.16.0.0 255.255.0.0[H3C-o...

在连接外部网络的路由器引入默认路由[H3C]ospf 1[H3C-ospf-1]default-route-advertise always cost 10

路由引入又称为路由再发布[H3C]rip 1[H3C-rip-1]version 2[H3C-rip-1]no summary[H3C-rip-1]import-route ospf 1 cost 5[H3C-rip-1]quit[H3C]ospf 1 [H3C-ospf-1]import-route rip 1 cost 3

[H3C]interface Vlan-interface 1 [H3C-Vlan-interface1]ip address 192.168.56.100 24[H3C]telnet server enable [H3C]user-interface vty 0 63[H3C-line-vty0-63]authentication-mode password [H3C-line-vty0-63]set authentication password simple 91xueit[H3C-line-vty0-63]user-role network-admin

全局启用端口安全[H3C]port-security enable设置端口安全参数[H3C]interface range GigabitEthernet 1/0/1 to GigabitEthernet 1/0/10[H3C-if-range]port-security port-mode secure [H3C-if-range]port-security max-mac-count 1[H3C-if-range]port-security ntk...

先删除以前的静态绑定[H3C]no mac-address static 8ebc-16af-0206 interface GigabitEthernet 1/0/1 vlan 1 [H3C]und mac-address static 8ebc-20f2-0306 interface GigabitEthernet 1/0/2 vlan 1 进入接口 重新设置端口安全参数[H3C]interface range Gigab...

需要先取消端口以前的安全设置[H3C-GigabitEthernet1/0/4]undo port-security port-mode 一定要先设置端口**接入数量[H3C-GigabitEthernet1/0/4]port-security max-mac-count 2[H3C-GigabitEthernet1/0/4]port-security port-mode autolearn 仅阻断不合法的计算机流量...

设置交换机端口 转发 IP地址和MAC地址完全匹配的帧 IP地址和MAC地址 不和端口绑定[H3C-GigabitEthernet1/0/2]arp filter binding 192.168.56.82 9004-3ff6-0506

以下配置实现G1/0/3端口监控G1/0/2-G1/0/3端口的出入流量创建镜像端口组[H3C]mirroring-group 1 local [H3C]mirroring-group 1 mirroring-port GigabitEthernet 1/0/1 to GigabitEthernet 1/0/2 both [H3C]mirroring-group 1 monitor-port GigabitEthernet 1/0/3...

LAN 局域网 WAN广域网VLAN虚拟局域网按部门来划分LAN 而不是按位置将安全要求一致的电脑放到一个VLAN 实现安全将网络广播控制在一个小范围在路由器上控制网络流量 可以按部门控制

创建VLAN 2[H3C]vlan 2[H3C-vlan2]quit将10-19接口指定到VLAN 2[H3C]interface range GigabitEthernet 1/0/10 to GigabitEthernet 1/0/19[H3C-if-range]port link-type access [H3C-if-range]port access vlan 2[H3C]display vlan 2 VLAN ID: 2 VLAN ...

配置干道链路接口[H3C]interface Ten-GigabitEthernet 1/0/50[H3C-Ten-GigabitEthernet1/0/50]port link-type trunk [H3C-Ten-GigabitEthernet1/0/50]port trunk permit vlan ? INTEGER VLAN ID all All VLANs[H3C-Ten-GigabitEthernet1/0/50]port trunk permit vlan all[H3C-Ten-GigabitEthernet1/0/50]

[H3C]interface Vlan-interface 1[H3C-Vlan-interface1]ip address 192.168.1.1 24display interface Vlan-interface

在交换机上的配置[H3C]undo interface Vlan-interface 1[H3C]undo interface Vlan-interface 2[H3C]interface GigabitEthernet 1/0/40[H3C-GigabitEthernet1/0/40]port link-type trunk [H3C-GigabitEthernet1/0/40]port trunk permit vlan all在路由器上的配置...

[H3C]stp region-configuration [H3C-mst-region]region-name 91xueit[H3C-mst-region]instance 1 vlan 1[H3C-mst-region]instance 2 vlan 2[H3C-mst-region]revision-level 0[H3C-mst-region]active region-configuration [H3C-mst-region]quit[H3C]stp instance 1 root primary [H3C]stp instance 2 root secondary [H3C]

[H3C]interface Bridge-Aggregation 1[H3C-Bridge-Aggregation1]port link-type trunk [H3C-Bridge-Aggregation1]port trunk permit vlan all[H3C-Bridge-Aggregation1]link-aggregation load-sharing mode ? destination-ip Destination IP address d...

[H3C]interface Vlan-interface 1[H3C-Vlan-interface1]vrrp vrid 1 virtual-ip 192.168.1.1[H3C-Vlan-interface1]vrrp vrid 1 priority 100[H3C-Vlan-interface1]vrrp vrid 1 preempt-mode delay 7

[H3C]access-list basic ? INTEGER Basic ACL number name Specify a named ACL[H3C]access-list basic 2000[H3C-acl-ipv4-basic-2000]rule 10 deny source 192.168.4.0 0.0.0.255[H3C-acl-ipv4-basic-2000]rule 20 permit source 192.168.1.0 0.0.0.255[H3C-acl-ipv4-basic-2000]rule 30 permit source 192.168.2.0 0.0.0.255 time-range zhongwu [H3C-acl-ipv4-basic-2000]rule 100 deny source any

针对服务器的ACL[H3C]access-list advanced 3000[H3C-acl-ipv4-adv-3000]rule 10 permit ip source 192.168.4.0 0.0.0.255 destination 192.168.0.0 0.0.255.255[H3C-acl-ipv4-adv-3000]rule 20 deny ip[H3C-acl-ipv4-adv-3000]quit针对市场部的ACL[H3C]access-l...

PC4不允许访问Internet[H3C-acl-ipv4-basic-2000]rule 15 deny source 192.168.1.3 0.0.0.0 删除rule[H3C-acl-ipv4-basic-2000]no rule 15一个接口的一个方向只能绑定一个ACL取消接口上绑定的ACL[H3C-Serial1/0]undo packet-filter 2000 outbound

针对销售部的ACL[H3C]access-list advanced 3020 [H3C-acl-ipv4-adv-3020]rule 10 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.1.0 0.0.0.255[H3C-acl-ipv4-adv-3020]rule 20 deny ip source 192.168.2.0 0.0.0.255 destination 192.168.3.0 ...

实现销售部能够访问Internet资源，Internet不能主动发起到销售部的访问，销售部能够ping通Internet，拒绝Internet ping销售部的网络。 拒绝建立TCP连接的数据包进入销售部，拒绝ICMP请求包进入销售部网络。[H3C]access-list advanced 3040[H3C-acl-ipv4-adv-3040]rule 10 per...

[H3C]access-list advanced 3000[H3C-acl-ipv4-adv-3000]rule 10 deny ip source 192.168.1.0 0.0.0.255 destination 192.168.3.0 0.0.0.255 [H3C-acl-ipv4-adv-3000]quit[H3C]interface Vlan-interface 1[H3C-Vlan-interface1]packet-filter 3000 inbound

阻塞外部访问主动访问内网[H3C]access-list advanced 3040[H3C-acl-ipv4-adv-3040]rule 10 permit tcp source any destination 192.168.0.0 0.0.255.255 established [H3C-acl-ipv4-adv-3040]rule 20 deny tcp source any destination 192.168.0.0 0.0.255.25...

企业或学校内网**使用私网地址私网地址访问Internet需要做地址转换 是修改数据包首部的路由 性能比单纯的路由差一点 私网地址在Internet上不可见 比较安全内网能够主动访问Internet Internet中的计算机不能主动访问内网如果企业的服务器在内网 让Internet中的计算...

NAT网络地址转换静态NAT 在路由器上将公网IP地址和私网IP地址一一对应可以实现内网相互通信不节省公网IP地址配置步骤[H3C]nat static outbound 172.16.1.2 24.6.8.2[H3C]nat static outbound 172.16.1.3 24.6.8.3[H3C]interface Serial 1/0 [H3C-Serial1/0]nat static enable

删除创建的静态映射[H3C]no nat static outbound 172.16.1.2[H3C]no nat static outbound 172.16.2.2[H3C]no nat static outbound 172.16.2.3[H3C]access-list advanced 3000[H3C-acl-ipv4-adv-3000]rule permit ip destination 131.107.4.4 0.0.0.0[H3C-acl-ipv4-adv-3000]rule deny ip[H3C]nat static outbound 172.16.1.2 24.6.8.2 acl 3000

[H3C]access-list basic 2000[H3C-acl-ipv4-basic-2000]rule permit source 172.16.1.0 0.0.0.255[H3C-acl-ipv4-basic-2000]rule deny source any[H3C]nat address-group 1 [H3C-address-group-1]address 24.6.8.10 24.6.8.20[H3C-address-group-1]quit[H3C]interface Serial 1/0[H3C-Serial1/0]nat outbound 2000 address-group 1 no-pat

[H3C]access-list basic 2000[H3C-acl-ipv4-basic-2000]rule permit source 172.16.1.0 0.0.0.255[H3C-acl-ipv4-basic-2000]rule deny source any[H3C]no nat address-group 1[H3C]nat address-group 1 [H3C-address-group-1]address 24.6.8.2 24.6.8.2[H3C-address-group-1]quit[H3C-Serial1/0]no nat outbound 2000[H3C]interface Serial 1/0[H3C-Serial1/0]nat outbound 2000 address-group 1

[H3C]access-list basic 2000[H3C-acl-ipv4-basic-2000]rule permit source 172.16.1.0 0.0.0.255[H3C-acl-ipv4-basic-2000]rule deny source any[H3C]interface Serial 1/0[H3C-Serial1/0]nat outbound 2000

定义服务器组[H3C]nat server-group 1[H3C-server-group-1]inside ip 172.16.1.2 port 80[H3C-server-group-1]inside ip 172.16.1.6 port 80定义端口映射[H3C]interface Serial 1/0[H3C-Serial1/0]nat server protocol tcp global 24.6.8.1 80 inside server-group 1

静态地址 服务器 动态地址 更适合移动设备 笔记本或手机DHCP客户端请求地址的过程华为路由器、H3C路由器、Windows、Linux来实现DHCP服务器DHCP协议

[H3C]dhcp enable --全局启用DHCP服务[[H3C]dhcp server ip-pool vlan1pool[H3C-dhcp-pool-vlan1pool]network 172.16.1.0 mask 255.255.255.0[H3C-dhcp-pool-vlan1pool]gateway-list 172.16.1.1[H3C-dhcp-pool-vlan1pool]dns-list 8.8.8.8 222.222.222.222[H3C-d...

Ipconfig /allIpconfig /releaseIpconfig /renew

[H3C]dhcp server ping packets 10[H3C]dhcp server ping timeout 1000

[H3C]dhcp server ip-pool vlan4pool[H3C-dhcp-pool-vlan4pool]network 172.16.4.0 mask 255.255.255.0[H3C-dhcp-pool-vlan4pool]gateway-list 172.16.4.1[H3C-dhcp-pool-vlan4pool]dns-list 114.114.114.114 8.8.8.8[H3C-dhcp-pool-vlan4pool]domain-name 51cto.com[...

[H3C]dns proxy enable [H3C]dns server 172.16.1.4

High-level Data Link Control，高级数据链路控制，简称HDLC，是一种面向比特的链路层协议。ISO制定的HDLC是一种面向比特的通信规则。HDLC传送的信息单位为帧。作为面向比特的同步数据控制协议的典型，HDLC具有如下特点：协议不依赖于任何一种字符编码集；数据报文可透明传输...

[H3C]interface Serial 1/0[H3C-Serial1/0]link-protocol hdlc [H3C-Serial1/0]ip address 10.0.1.1 30

[H3C]interface Serial 2/0[H3C-Serial2/0]link-protocol ppp

[H3C]interface Serial 1/0[H3C-Serial1/0]no ip address [H3C-Serial1/0]ip address ppp-negotiate [H3C]interface Serial 2/0[H3C-Serial2/0]remote address 192.18.3.2

创建拨号用户[H3C]local-user han class network [H3C-luser-network-han]password simple 91xueit[H3C-luser-network-han]service-type ppp [H3C-luser-network-han]quit创建地址池[H3C]dhcp enable [H3C]dhcp server ip-pool PPPoE1[H3C-dhcp-pool-PPPoE1]net...

[H3C]dialer-group 1 rule ip permit [H3C]interface Dialer 1[H3C-Dialer1]ppp pap local-user han password simple 91xueit [H3C-Dialer1]dialer bundle enable 启用DDR [H3C-Dialer1]dialer-group 1 [H3C-Dialer1]dia...

IPv6报文由IPv6基本报头、IPv6扩展报头以及上层协议数据单元三部分组成。基本报头中的各字段解释如下：Version：版本号，长度为4bit。对于IPv6，该值为6。Traffic Class：流类别，长度为8bit，这个8位字段可以为包赋予不同的类别或优先级。为差异化服务留有余地。 Flow Label...

如果IPv6基本首部的“下一个首部”字段，相当于IPv4首部中的“协议”字段，用来指明基本首部后面的数据应交付IP层上面的哪一个高层协议（6表示应交付给传输层的TCP，17表示应交付给传输层的UDP，58表示网络层ICMPv6）。如果有扩展首部如何表示呢？下面是规范中定义的所有扩展首部对...

每一组中的前导“0”都可以省略。 地址中包含的连续全为0的组，可以用双冒号“::”来代替。IPv6地址分为单播地址、任播地址、组播地址三种类型。

[H3C]interface GigabitEthernet 0/0[H3C-GigabitEthernet0/0]ipv6 address 2001:1::1 64[H3C-GigabitEthernet0/0]undo ipv6 nd ra halt

网络节点向相连的路由器发送RS，请求地址前缀信息。路由器通过发送路由器通告RA，回复地址前缀信息

[H3C-GigabitEthernet0/0]ipv6 nd autoconfig managed-address-flag [H3C-GigabitEthernet0/0]ipv6 nd autoconfig other-flag

[H3C]dhcp enable [H3C][H3C]ipv6 dhcp pool localNet[H3C-dhcp6-pool-localnet]address range 2001:1::100 2001:1::200[H3C-dhcp6-pool-localnet]network 2001:1::/64[H3C-dhcp6-pool-localnet]dns-server 2001:1::1000[H3C-dhcp6-pool-localnet]gateway-list 2001...

[H3C]ipv6 route-static 2001:3:: 64 2001:2::2查看IPv6路由表[H3C]display ipv6 routing-table 查看IPv6静态路由display ipv6 routing-table protocol static Summary count : 1Static Routing table status : Summary count : 1Destination: 200...

[H3C]ripng 1[H3C-ripng-1]quit[H3C]interface GigabitEthernet 0/0[H3C-GigabitEthernet0/0]ripng 1 enable [H3C-GigabitEthernet0/0]quit[H3C]interface GigabitEthernet 0/1[H3C-GigabitEthernet0/1]ripng 1 enable 查看RIPng配置display ripng 1查看运行RIPng的接口display ripng 1 interface

[H3C]ospfv3 1[H3C-ospfv3-1]router-id 2.2.2.2[H3C-ospfv3-1]quit[H3C]interface GigabitEthernet 0/0[H3C-GigabitEthernet0/0]ospfv3 1 area 0[H3C-GigabitEthernet0/0]quit[H3C]interface GigabitEthernet 0/1[H3C-GigabitEthernet0/1]ospfv3 1 area 0[H3C-Gi...

[H3C]interface Tunnel 0 mode ipv6-ipv4[H3C-Tunnel0]ipv6 address 2001:2::1 64[H3C-Tunnel0]destination 172.16.2.2[H3C-Tunnel0]source 172.16.1.1[H3C-Tunnel0]quit[H3C]ipv6 route-static 2001:3:: 64 2001:2::2

ISATAP （ Intra-Site Automatic Tunnel Addressing Protocol，站间自动隧道寻址协议）

[H3C]interface Tunnel 1 mode ipv6-ipv4 isatap [H3C-Tunnel1]ipv6 address 2001:1:: 64 eui-64[H3C-Tunnel1]source 172.16.1.2[H3C-Tunnel1]undo ipv6 nd ra halt