Base de Conhecimento

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Huawei - VRP configuração básica ======
===== Desativando as mensagens do terminal =====
<code bash>
<Huawei>undo terminal monitor 
Info: Current terminal monitor is off.
</code>

===== Definindo hostname =====
<code bash>
<Huawei>system-view 
Enter system view, return user view with Ctrl+Z.
</code>

<code bash>
[Huawei]sysname AR1000v
[AR1000v]
</code>

===== Ajustando o timezone e hora do sistema =====
<code bash>
[AR1000v]return
</code>

FIXME Observer que alternamos para o modo User View

<code bash>
<AR1000v>display clock 
2023-03-28 19:13:15
Tuesday
Time Zone(Default Zone Name) : UTC+00:00
</code>

<code bash>
<AR1000v>clock timezone BR minus 03:00:00
<AR1000v>clock datetime 16:15:00 2023-03-28
</code>

<code bash>
<AR1000v>display clock 
2023-03-28 16:15:08
Tuesday
Time Zone(BR) : UTC-03:00
</code>

===== Ativanodo o DHCP Client =====
<code bash>
<AR1000v>system-view 
[AR1000v]display ip interface brief 
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 8
The number of interface that is DOWN in Physical is 0
The number of interface that is UP in Protocol is 1
The number of interface that is DOWN in Protocol is 7

Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              unassigned           up         down      
GigabitEthernet0/0/1              unassigned           up         down      
GigabitEthernet0/0/2              unassigned           up         down      
GigabitEthernet0/0/3              unassigned           up         down      
GigabitEthernet0/0/4              unassigned           up         down      
GigabitEthernet0/0/5              unassigned           up         down      
GigabitEthernet0/0/6              unassigned           up         down      
NULL0                             unassigned           up         up(s)    
</code>

<code bash>
[AR1000v]interface GigabitEthernet 0/0/0
[AR1000v-GigabitEthernet0/0/0]ip address dhcp-alloc 
[AR1000v-GigabitEthernet0/0/0]quit  
</code>

<code bash>
[AR1000v]display ip interface brief     
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 8
The number of interface that is DOWN in Physical is 0
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 6

Interface                         IP Address/Mask      Physical   Protocol  
GigabitEthernet0/0/0              172.20.64.26/27      up         up        
GigabitEthernet0/0/1              unassigned           up         down      
GigabitEthernet0/0/2              unassigned           up         down      
GigabitEthernet0/0/3              unassigned           up         down      
GigabitEthernet0/0/4              unassigned           up         down      
GigabitEthernet0/0/5              unassigned           up         down      
GigabitEthernet0/0/6              unassigned           up         down      
NULL0                             unassigned           up         up(s)
</code>

<code bash>
[AR1000v]display current-configuration interface GigabitEthernet0/0/0
[V300R019C00SPC300]
#
interface GigabitEthernet0/0/0
 ip address dhcp-alloc
#
return
</code>

<code bash>
[AR1000v]display ip routing-table
Route Flags: R - relay, D - download to fib, T - to vpn-instance
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 8        Routes : 8        

Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface

        0.0.0.0/0   Unr     60   0           D   172.20.64.1     GigabitEthernet0/0/0
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
    172.20.64.0/27  Direct  0    0           D   172.20.64.26    GigabitEthernet0/0/0
   172.20.64.26/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
   172.20.64.31/32  Direct  0    0           D   127.0.0.1       GigabitEthernet0/0/0
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
</code>

===== Ativando o NTP =====

<code bash>
[AR1000v]ntp-service unicast-server 200.160.7.193
[AR1000v]ntp-service unicast-server 200.160.7.186
</code>


===== Definindo mensagem de login =====
<code bash>
[AR1000v]header login information "Welcome to Huawei"
[AR1000v]header shell information "Please don't reboot the device!"
</code>

===== Criando usuários =====

<code bash>
[AR1000v]aaa  

[AR1000v-aaa]local-user admin privilege level 15 password cipher admin123
[AR1000v-aaa]local-user admin service-type terminal telnet ssh http 

[AR1000v-aaa]local-user monitor privilege level 1 password cipher monitor123
[AR1000v-aaa]local-user monitor service-type terminal 

[AR1000v-aaa]quit
[AR1000v]
</code>

===== Definindo tempo de inatividade =====
<code bash>
[AR1000v]user-interface console 0
[AR1000v-ui-console0]authentication-mode aaa
[AR1000v-ui-console0]idle-timeout 20 0
[AR1000v-ui-console0]screen-length 0
[AR1000v-ui-console0]quit
</code>

<code bash>
[AR1000v-ui-console0]display this
[V300R019C00SPC300]
#
user-interface con 0
 authentication-mode aaa
 idle-timeout 20 0
 screen-length 0
user-interface vty 0
 authentication-mode aaa
 user privilege level 15
user-interface vty 1 4
#
return
</code>

===== Atribuindo IP a uma interface =====

<code bash>
[AR1000v]interface GigabitEthernet 0/0/1
[AR1000v-GigabitEthernet0/0/1]description ENLACE-LAN
[AR1000v-GigabitEthernet0/0/1]undo shutdown 
[AR1000v-GigabitEthernet0/0/1]ip address 172.28.95.1 27
[AR1000v-GigabitEthernet0/0/1]quit
</code>

<code bash>
[AR1000v]display current-configuration interface  GigabitEthernet0/0/1
[V300R019C00SPC300]
#
interface GigabitEthernet0/0/1
 description ENLACE-LAN
 ip address 172.28.95.1 255.255.255.224
#
return
</code>

===== Configurando acesso SSH =====

<code bash>
[AR1000v-aaa]local-user huawei password cipher huawei
[AR1000v-aaa]local-user huawei service-type ssh
[AR1000v-aaa]local-user huawei privilege level 15
[AR1000v-aaa]quit
</code>

<code bash>
[AR1000v]rsa local-key-pair create 
The key name will be: Host
RSA keys defined for Host already exist.
Warning: Confirm to replace them! Continue? [Y/N]y
The range of public key size is (512 ~ 2048).
NOTES: If the key modulus is less than 2048,
       It will introduce potential security risks.
Input the bits in the modulus[default = 2048]:
Generating keys...
....+++
.....................................................................+++
...........++++++++
.++++++++
</code>

<code bash>
[AR1000v]stelnet server enable 
[AR1000v]ssh user huawei authentication-type password
</code>

<code bash>
[AR1000v]user-interface vty 0 4
[AR1000v-ui-vty0-4]authentication-mode aaa
[AR1000v-ui-vty0-4]protocol inbound ssh 
[AR1000v-ui-vty0-4]quit
</code>