华为交换机的配置命令的解释

baorongabc

我本人对交换机的实际配置不是很懂，能否帮我解释一下每个命令意思啊？

<hlw>display cur
#
sysname hlw
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
radius-scheme system
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable
...

[ 本帖最后由 baorongabc 于 2006-12-4 08:06 编辑 ]

baorongabc

－－－－全部命令－－－－－－－－－－－－－－－－－－－－－－
<hlw>display cur
#
sysname hlw
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
radius-scheme system
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable

domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
temperature-limit 0 20 80
#
am enable


#-----配置访问控制表－－－－－－－－－－
acl number 3000
rule 0 deny icmp
rule 1 deny ip source 192.168.0.0 0.0.255.255 destination 192.168.0.0 0.0.255.255
#－－－－－－－－－－－－－－－－－－－－－－－


#－－增加VLAN－－－－－－－－－－－－－－－－
vlan 1
#
vlan 10
#
vlan 11
#
vlan 12
#
vlan 13
#－－－－－－－－－－－－－－－－－－－－－－－

#－－关闭默认VLAN1－－－－－－－－－－－－
interface Vlan-interface1
shutdown
#
interface Vlan-interface10
ip address 10.2.84.1 255.255.255.0   //???什么意思
#
interface Vlan-interface11
ip address 192.168.1.1 255.255.255.0
#
interface Vlan-interface12
ip address 192.168.2.1 255.255.255.128
#
interface Vlan-interface13
ip address 192.168.3.1 255.255.255.224
#－－－－－－－－－－－－－－－－－－－－－－－


#
interface Aux0/0

#－－配置每个端口属性－－－－－－－－－－－－－－－－－
interface Ethernet0/1
port access vlan 10   //配置端口属于那个VLAN
#
interface Ethernet0/2
flow-interval 10   
flow-control     
port access vlan 10
#
interface Ethernet0/3
port access vlan 10
packet-filter inbound ip-group 3000 rule 0 //包的过滤内部绑定访问控制列表3000的规则0
#
interface Ethernet0/4
port access vlan 10
#
interface Ethernet0/5
shutdown
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/6
shutdown
port access vlan 10
#
interface Ethernet0/7
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/8
broadcast-suppression 10    //???什么意思
mac-address max-mac-count 0   
port access vlan 11
am ip-pool 192.168.1.27 192.168.1.31    //添加地址池，地址为27，31
#
interface Ethernet0/9
port access vlan 10
#
interface Ethernet0/10
port access vlan 10
#
interface Ethernet0/11
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/12
mac-address max-mac-count 0  
port access vlan 11
am ip-pool 192.168.1.15
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/13
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/14
flow-interval 10  
flow-control   
broadcast-suppression 10  
shutdown
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/15
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/16
shutdown
port access vlan 10
#
interface Ethernet0/17
flow-interval 5  
flow-control   
broadcast-suppression bandwidth 1  
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/18
flow-interval 10
flow-control
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/19
speed 10
flow-interval 100 //设置统计接口流量的时间间隔
flow-control   //用来设置异步串口的流量控制方式
mac-address max-mac-count 0   //此端口进行mac地址绑定
port access vlan 11
am ip-pool 192.168.1.2 40 //添加地址池，从2－42地址
packet-filter inbound ip-group 3000 rule 1
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/20
flow-interval 10
flow-control
port access vlan 11
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/21
flow-interval 100
flow-control
broadcast-suppression 10    //指定以太网端口允许通过的最大广播流量的百分比
port access vlan 12
packet-filter inbound ip-group 3000 rule 1
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/22
port access vlan 10
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/23
flow-interval 5
flow-control
mac-address max-mac-count 0
port access vlan 13
am ip-pool 192.168.3.10 2 192.168.3.14
packet-filter inbound ip-group 3000 rule 1
packet-filter inbound ip-group 3000 rule 0
#
interface Ethernet0/24
flow-interval 5
flow-control
port access vlan 13
#－－－－－－－－－－－－－－－－－－－－－－－



#
interface GigabitEthernet1/1
#
interface GigabitEthernet1/2
#
interface GigabitEthernet1/3
#
interface GigabitEthernet1/4
#
interface NULL0
#
mac-address static 000f-eaab-db8e interface Ethernet0/8 vlan 11
mac-address static 00e0-4ce3-4e78 interface Ethernet0/8 vlan 11
mac-address static 00e0-4c70-3020 interface Ethernet0/12 vlan 11
mac-address static 0016-d32d-c436 interface Ethernet0/19 vlan 11
mac-address static 0010-dc38-9f71 interface Ethernet0/19 vlan 11
mac-address static 7806-1825-6125 interface Ethernet0/19 vlan 11
mac-address static 00d0-59a9-f234 interface Ethernet0/19 vlan 11
mac-address static 0011-5bd0-43b4 interface Ethernet0/19 vlan 11
mac-address static 000d-56de-39f3 interface Ethernet0/19 vlan 11
mac-address static 000d-87e1-acc3 interface Ethernet0/19 vlan 11
mac-address static 0011-5b62-a8e8 interface Ethernet0/19 vlan 11
mac-address static 0010-5cc5-08a9 interface Ethernet0/19 vlan 11
mac-address static 0003-4729-92df interface Ethernet0/19 vlan 11
mac-address static 0010-5cb8-7bff interface Ethernet0/19 vlan 11
mac-address static 0011-5b68-2f86 interface Ethernet0/19 vlan 11
mac-address static 00d0-f809-b0d0 interface Ethernet0/19 vlan 11
mac-address static 0010-5cc5-0d03 interface Ethernet0/19 vlan 11
mac-address static 000d-87ea-8708 interface Ethernet0/19 vlan 11
mac-address static 0010-5cf5-950e interface Ethernet0/19 vlan 11
mac-address static 00e0-4ce2-787d interface Ethernet0/19 vlan 11
mac-address static 000a-e69e-f0bf interface Ethernet0/19 vlan 11
mac-address static 00d0-59a9-e838 interface Ethernet0/19 vlan 11
mac-address static 0016-6f71-4eba interface Ethernet0/19 vlan 11
mac-address static 0013-a935-20bd interface Ethernet0/19 vlan 11
mac-address static 0002-3f00-2fa9 interface Ethernet0/23 vlan 13
mac-address static 0011-5b62-9265 interface Ethernet0/23 vlan 13
mac-address static 000c-76a0-8c95 interface Ethernet0/23 vlan 13
#
ip route-static 0.0.0.0 0.0.0.0 10.2.84.5 preference 60
#
user-interface aux 0
user-interface vty 0 4
user privilege level 3
set authentication password simple XXXX
#
return
<hlw>

[ 本帖最后由 baorongabc 于 2007-4-4 16:08 编辑 ]

badile

#
sysname hlw
#
radius scheme system
server-type huawei
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain

domain system
radius-scheme system
access-limit disable
state active
vlan-assignment-mode integer
idle-cut disable
self-service-url disable
messenger time disable

domain default enable system
#
local-server nas-ip 127.0.0.1 key huawei
#
temperature-limit 0 20 80

这段都是废话，所有设备都差不多。

后面都是一些端口和vlan的配置，配了些静态mac，默认路由。

baorongabc

资深网络工程师们，能否帮我解释一下红色代码？
最好讲解一下原理哦，万分感谢！
或者任何学习这方面的知识？

[ 本帖最后由 baorongabc 于 2006-12-8 10:11 编辑 ]