華為設備經典的地址以及遠程登錄（VTY）實施

阿新 • • 發佈：2018-09-27

ping 界面失敗 process ttl records ces password png

AR1--------SW

首先配置路由器
<Huawei>sys //進入系統視圖模式，能配置更多的命令
Enter system view, return user view with Ctrl+Z.
[Huawei]sys AR1 //路由器進行重命名，為了方便區分不同機器
[AR1]int g
[AR1]int GigabitEthernet 0/0/1 //進入界面接口0/0/1 模式，只對這一個接口進行命令配置
[AR1-GigabitEthernet0/0/1]ip add 10.1.10.30 255.255.255.224 //在接口模式下配置IP地址，指定了這個接口的靜態IP

[AR1-GigabitEthernet0/0/1]ip add 10.1.10.30 255.255.255.224
Sep 16 2018 12:30:51-08:00 AR1 %%01IFNET/4/LINKSTATE(l)[0]:The line protocol IP on the interface GigabitEthernet0/0/1 has entered the UP state.
[AR1-GigabitEthernet0/0/1]dis th //顯示這個接口的配置信息
[V200R003C00]
#
interface GigabitEthernet0/0/1
ip address 10.1.10.30 255.255.255.224
#

return
[AR1-GigabitEthernet0/0/1]return //返回用戶視圖模式
<AR1>
<AR1>tenlet 10.1.10.10
^
Error: Unrecognized command found at ‘^‘ position.
<AR1>telnet 10.1.10.10 //用戶視圖模式下通過Telnet遠程登錄交換機，只有用戶視圖下才能遠程連接
Press CTRL] to quit telnet mode
Trying 10.1.10.10 ...
Connected to 10.1.10.10 ...

Password: //登錄成功輸入密碼
Info: The max number of VTY users is 5, and the number
of current VTY users on line is 1.
The current login time is 2018-09-16 12:43:39.
<SwitchA> //登錄成功，顯示交換機用戶視圖
<SwitchA>
<SwitchA>
<SwitchA>sys //進入交換機的系統視圖模式
Enter system view, return user view with Ctrl+Z.

配置交換機
<Huawei>
<Huawei>
<Huawei>sys //進入系統視圖模式
Enter system view, return user view with Ctrl+Z.
[Huawei]sys SwitchA //交換機進行重命名
[SwitchA]
Sep 16 2018 12:31:23-08:00 SwitchA DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 4, the change loop count is 0, and the maximum number of records is 4095.
[SwitchA]int vlanif 1 //進入Vlanif1虛擬界面接口1配置模式
[SwitchA-Vlanif1]ip add 10.1.10.30 255.255.255.224 //在虛擬接口下配置IP地址，在物理接口下是不能配置IP地址的
[SwitchA-Vlanif1]
Sep 16 2018 12:31:54-08:00 SwitchA %%01IFNET/4/LINK_STATE(l)[0]:The line protocol IP on the interface Vlanif1 has entered the UP state.
[SwitchA-Vlanif1]dis th //顯示這個接口的配置信息
#
interface Vlanif1
ip address 10.1.10.30 255.255.255.224
#
return
[SwitchA-Vlanif1]
Sep 16 2018 12:32:03-08:00 SwitchA DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095.
[SwitchA-Vlanif1]quti
^
Error: Unrecognized command found at ‘^‘ position.
[SwitchA-Vlanif1]quit //退回上一層配置模式
[SwitchA]user-in
[SwitchA]user-interface vty 0 4 //進入用戶界面裏的遠程配置模式，可以有多個用戶同時進入交換機
[SwitchA-ui-vty0-4]aut
[SwitchA-ui-vty0-4]authentication-mode pass
[SwitchA-ui-vty0-4]authentication-mode password //在認證模式下選擇密碼認證
[SwitchA-ui-vty0-4]set aut
[SwitchA-ui-vty0-4]set authentication pass
[SwitchA-ui-vty0-4]set authentication password yyb-qytang
^
Error: Unrecognized command found at ‘^‘ position.
[SwitchA-ui-vty0-4]set authentication password c
[SwitchA-ui-vty0-4]set authentication password cipher yyb-qytang //設置認證密碼以密文模式下
[SwitchA-ui-vty0-4]
Sep 16 2018 12:34:23-08:00 SwitchA DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 6, the change loop count is 0, and the maximum number of records is 4095.
[SwitchA-ui-vty0-4]dis th //顯示這個接口的配置信息
#
user-interface con 0
user-interface vty 0 4
set authentication password cipher }v.E/rh)PRVE~rNUsCR!!#I#
#
Return
return
[SwitchA-ui-vty0-4]return //返回用戶視圖模式
<SwitchA>ping 10.1.10.30 //測試連接路由器成功
PING 10.1.10.30: 56 data bytes, press CTRL_C to break
Reply from 10.1.10.30: bytes=56 Sequence=1 ttl=255 time=10 ms
Reply from 10.1.10.30: bytes=56 Sequence=2 ttl=255 time=1 ms
Reply from 10.1.10.30: bytes=56 Sequence=3 ttl=255 time=30 ms
Reply from 10.1.10.30: bytes=56 Sequence=4 ttl=255 time=1 ms
Reply from 10.1.10.30: bytes=56 Sequence=5 ttl=255 time=1 ms

--- 10.1.10.30 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/8/30 ms

<SwitchA>ping 10.1.10.10 //測試連接自己失敗
PING 10.1.10.10: 56 data bytes, press CTRL_C to break
Request time out
Request time out
Request time out
Request time out
Request time out

--- 10.1.10.10 ping statistics ---
5 packet(s) transmitted
0 packet(s) received
100.00% packet loss //翻看前面設置的IP，不通的原因是設置了和路由器一樣的IP

<SwitchA>sys //在次進入系統視圖模式
Enter system view, return user view with Ctrl+Z.

#
return
[SwitchA-Vlanif1]ip add 10.1.10.10 255.255.255.224 //從新配置IP地址
[SwitchA-Vlanif1]
Sep 16 2018 12:36:50-08:00 SwitchA %%01IFNET/4/LINK_STATE(l)[2]:The line protocol IP on the interface Vlanif1 has entered the UP state.
Sep 16 2018 12:36:53-08:00 SwitchA DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 8, the change loop count is 0, and the maximum number of records is 4095.
[SwitchA-Vlanif1]dis th //顯示這個接口的配置信息

#
interface Vlanif1
 ip address 10.1.10.10 255.255.255.224
#
return
[SwitchA-Vlanif1]return                     //退到用戶視圖模式
<SwitchA>ping 10.1.10.10                              //Ping交換機自己成功
  PING 10.1.10.10: 56  data bytes, press CTRL_C to break
    Reply from 10.1.10.10: bytes=56 Sequence=1 ttl=255 time=30 ms
    Reply from 10.1.10.10: bytes=56 Sequence=2 ttl=255 time=1 ms
    Reply from 10.1.10.10: bytes=56 Sequence=3 ttl=255 time=10 ms
    Reply from 10.1.10.10: bytes=56 Sequence=4 ttl=255 time=1 ms
    Reply from 10.1.10.10: bytes=56 Sequence=5 ttl=255 time=1 ms

  --- 10.1.10.10 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 1/8/30 ms

<SwitchA>ping 10.1.10.30                         //Ping路由器成功
  PING 10.1.10.30: 56  data bytes, press CTRL_C to break
    Reply from 10.1.10.30: bytes=56 Sequence=1 ttl=255 time=110 ms
    Reply from 10.1.10.30: bytes=56 Sequence=2 ttl=255 time=20 ms
    Reply from 10.1.10.30: bytes=56 Sequence=3 ttl=255 time=50 ms
    Reply from 10.1.10.30: bytes=56 Sequence=4 ttl=255 time=50 ms
    Reply from 10.1.10.30: bytes=56 Sequence=5 ttl=255 time=40 ms

  --- 10.1.10.30 ping statistics ---
    5 packet(s) transmitted
    5 packet(s) received
    0.00% packet loss
    round-trip min/avg/max = 20/54/110 ms

<SwitchA>sys //進入系統視圖模式
Enter system view, return user view with Ctrl+Z.
[SwitchA]user-in
[SwitchA]user-interface vty 0 4 //進入用戶界面裏的遠程管理模式

[SwitchA-ui-vty0-4]user privilege level 15 //設置用戶訪問權限等級為最大15級，權限大小決定了能使用命令的多少
[SwitchA-ui-vty0-4]dis th //顯示這個接口的配置信息
#
user-interface con 0
user-interface vty 0 4
user privilege level 15
set authentication password cipher }v.E/rh)PRVE~rNUsCR!!#I#
#
return


[SwitchA-ui-vty0-4]
Sep 16 2018 12:42:13-08:00 SwitchA DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 9, the change loop count is 0, and the maximum number of records is 4095.
[SwitchA-ui-vty0-4]return                                
         //配置Telnet遠程登錄結束，下面開始抓包實驗

使用Wireshark對路由器0/0/1接口Telnet登錄時進行抓包
 ![](http://i2.51cto.com/images/blog/201809/27/ffcf0ea700a07ac577e0ca3beb093467.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

 ![](http://i2.51cto.com/images/blog/201809/27/bd5c1fd3affce42af7ba27c0cbcaf5fa.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

 ![](http://i2.51cto.com/images/blog/201809/27/bfcb5678cca1a191904e19d2e35778c3.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

 ![](http://i2.51cto.com/images/blog/201809/27/58414f6d5cc3deeca312e2dd1e7c8db5.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

 ![](http://i2.51cto.com/images/blog/201809/27/0e5a38931f469682d4adc2ca6346df4a.png?x-oss-process=image/watermark,size_16,text_QDUxQ1RP5Y2a5a6i,color_FFFFFF,t_100,g_se,x_10,y_10,shadow_90,type_ZmFuZ3poZW5naGVpdGk=)

實驗結果：
                  對命令的熟悉，IP地址配置一定要正確，IP配好後一定要確認ping通。
                抓包的數據顯示了TCP/IP的分層結構，了解了4層數據封裝結構模型，對遠程訪問的數據的傳輸形式，Telnet的傳輸模式不利於數據的保密性，很容易被破解密碼。

華為設備經典的地址以及遠程登錄（VTY）實施

ping 界面失敗 process ttl records ces password png AR1--------SW 首先配置路由器<Huawei>sys //進入系統視圖模式，能配置更多的命令Enter syst

華為設備經典的地址以及遠程登錄（VTY）實施

華為設備經典的地址以及遠程登錄（VTY）實施

華為PAT端口地址映射配置詳解（一）

華為PAT端口地址映射配置詳解（二）

華為PAT端口地址映射配置詳解（三）

為什麽以sys無法遠程登錄數據庫

MySQL的用戶的創建以及遠程登錄配置

pat靜態和動態的轉換以及遠程登錄

在華為設備實施經典的FTP實驗

綜合案例：配置基於源地址的策略路由（基於華為設備）

華為設備配置基於源地址的策略路由

華為設備IP流量統計

華為設備刪除vlan時，提示Error: The VLAN has a L3 interface.

華為設備的基本配置

華為設備stp 、vrrp的實力應用

華為設備STP，VRRP應用實驗

華為設備網絡故障排錯實驗

華為設備防火墻基礎

遠程登錄華為防火墻以及用戶權限的修改

華為設備開啟ssh登錄

華為設備上STP模式、RSTP模式下開關機是否觸發TC變更（源自考官的一道追問題目）

華為設備經典的地址以及遠程登錄（VTY）實施

相關推薦