s2000-hi命令手册(V1.02)22-NTP命令

NTP 目录目录第1章 NTP.............................................................................................................................1-11.1 NTP简介............................................................................................................................1-11.1.1 NTP的应用..............................................................................................................1-11.1.2 NTP工作原理..........................................................................................................1-21.1.3 NTP的工作模式......................................................................................................1-31.2 配置NTP工作模式............................................................................................................1-51.2.1 配置准备..................................................................................................................1-51.2.2 配置过程..................................................................................................................1-61.3 配置访问控制权限..............................................................................................................1-71.4 配置NTP验证功能............................................................................................................1-71.4.1 配置准备..................................................................................................................1-71.4.2 配置过程..................................................................................................................1-81.5 配置NTP可选参数............................................................................................................1-91.6 NTP配置显示...................................................................................................................1-101.7 NTP典型配置举例...........................................................................................................1-111.7.1 配置NTP服务器模式............................................................................................1-111.7.2 配置NTP对等体模式............................................................................................1-121.7.3 配置NTP广播模式................................................................................................1-141.7.4 配置NTP组播模式................................................................................................1-161.7.5 配置带身份验证的NTP服务器模式......................................................................1-18第1章 NTP1.1 NTP简介NTP（Network Time Protocol，网络时间协议）是由RFC1305定义的时间同步协议，用来在分布式时间服务器和客户端之间进行时间同步。

目录第1章登录交换机..................................................................................................................1-11.1 登录以太网交换机方法简介................................................................................................1-11.2 用户界面简介.....................................................................................................................1-11.2.1 交换机支持的用户界面............................................................................................1-11.2.2 交换机用户界面编号................................................................................................1-11.2.3 用户界面公共配置....................................................................................................1-2第2章通过Console口进行本地登录.....................................................................................2-12.1 通过Console口进行本地登录简介....................................................................................2-12.2 通过Console口登录交换机...............................................................................................2-12.3 配置Console口登录方式的属性........................................................................................2-32.3.1 配置Console口登录方式的公共属性......................................................................2-32.3.2 不同认证方式下Console口登录方式的属性配置....................................................2-42.4 认证方式为None时Console口登录方式的配置...............................................................2-52.4.1 配置过程..................................................................................................................2-52.4.2 配置举例..................................................................................................................2-72.5 认证方式为Password时Console口登录方式的配置........................................................2-82.5.1 配置过程..................................................................................................................2-82.5.2 配置举例................................................................................................................2-102.6 认证方式为Scheme时Console口登录方式的配置........................................................2-112.6.1 配置过程................................................................................................................2-112.6.2 配置举例................................................................................................................2-13第3章通过Telnet进行登录...................................................................................................3-13.1 通过Telnet进行登录的简介...............................................................................................3-13.1.1 配置Telnet登录方式的公共属性.............................................................................3-13.1.2 不同认证方式下Telnet登录方式的配置..................................................................3-23.2 认证方式为None时Telnet登录方式的相关配置...............................................................3-23.2.1 配置过程..................................................................................................................3-23.2.2 配置举例..................................................................................................................3-43.3 认证方式为Password时Telnet登录方式的相关配置.......................................................3-53.3.1 配置过程..................................................................................................................3-53.3.2 配置举例..................................................................................................................3-63.4 认证方式为Scheme时Telnet登录方式的相关配置..........................................................3-83.4.1 配置过程..................................................................................................................3-83.4.2 配置举例................................................................................................................3-113.5 Telnet配置环境搭建........................................................................................................3-123.5.1 通过终端Telnet到以太网交换机...........................................................................3-123.5.2 通过以太网交换机Telnet到以太网交换机............................................................3-14第4章通过Console口利用Modem拨号远程登录................................................................4-14.1 通过Console口利用Modem拨号进行远程登录简介........................................................4-14.2 网络管理员端的相关配置...................................................................................................4-14.3 交换机端的相关配置..........................................................................................................4-14.3.1 与交换机直接相连的Modem上的配置....................................................................4-14.3.2 交换机的相关配置....................................................................................................4-24.4 通过Modem拨号搭建配置环境.........................................................................................4-3第5章通过WEB网管登录....................................................................................................5-15.1 通过WEB网管登录简介....................................................................................................5-15.2 WEB配置环境搭建............................................................................................................5-15.3 关闭/启动Web server........................................................................................................5-4第6章通过NMS登录............................................................................................................6-16.1 通过NMS登录简介............................................................................................................6-16.2 通过NMS方式登录组网结构.............................................................................................6-2第7章对登录用户的控制.......................................................................................................7-17.1 简介....................................................................................................................................7-17.2 配置对Telnet的控制..........................................................................................................7-17.2.1 配置准备..................................................................................................................7-17.2.2 通过源IP对Telnet进行控制...................................................................................7-17.2.3 通过源IP、目的IP对Telnet进行控制...................................................................7-27.2.4 配置举例..................................................................................................................7-37.3 通过源IP对网管用户进行控制..........................................................................................7-37.3.1 配置准备..................................................................................................................7-47.3.2 通过源IP对网管用户进行控制................................................................................7-47.3.3 配置举例..................................................................................................................7-57.4 通过源IP对WEB用户进行控制........................................................................................7-67.4.1 配置准备..................................................................................................................7-67.4.2 通过源IP对WEB用户进行控制.............................................................................7-67.4.3 强制在线WEB用户下线..........................................................................................7-67.4.4 配置举例..................................................................................................................7-7第1章登录交换机1.1 登录以太网交换机方法简介S2000-HI系列以太网交换机的登录，可以通过以下几种方式实现：z通过Console口进行本地登录z通过以太网端口利用Telnet进行本地或远程登录z通过Console口利用Modem拨号进行远程登录z通过WEB网管登录z通过NMS（Network Management Station，网管工作站）登录1.2 用户界面简介1.2.1 交换机支持的用户界面S2000-HI系列以太网交换机支持两种用户界面：AUX用户界面、VTY用户界面。

目录第1章加载BOOTROM和主机软件.......................................................................................1-11.1 加载方式简介.....................................................................................................................1-11.2 本地加载.............................................................................................................................1-11.2.1 BOOT菜单..............................................................................................................1-21.2.2 通过Console口利用XModem完成加载.................................................................1-31.2.3 通过以太网口利用TFTP完成加载..........................................................................1-71.2.4 通过以太网口利用FTP完成加载............................................................................1-91.3 远程加载...........................................................................................................................1-111.3.1 通过FTP实现远程加载.........................................................................................1-111.3.2 通过TFTP实现远程加载.......................................................................................1-12第2章系统基本配置与调试....................................................................................................2-12.1 系统基本配置.....................................................................................................................2-12.1.1 从用户视图进入系统视图.........................................................................................2-12.1.2 设置交换机的系统名................................................................................................2-12.1.3 设置系统时钟...........................................................................................................2-22.1.4 设置时区..................................................................................................................2-22.1.5 设置夏令时..............................................................................................................2-22.1.6 设置命令行显示的语言模式.....................................................................................2-22.1.7 从当前视图退回到较低级别视图..............................................................................2-32.1.8 从当前视图退回到用户视图.....................................................................................2-32.2 查看系统状态.....................................................................................................................2-32.3 系统调试.............................................................................................................................2-42.3.1 打开/关闭调试开关...................................................................................................2-42.3.2 显示系统当前各模块的运行信息..............................................................................2-5第3章 IP性能配置.................................................................................................................3-13.1 IP性能配置........................................................................................................................3-13.1.1 TCP属性简介..........................................................................................................3-13.1.2 配置TCP属性.........................................................................................................3-13.2 IP性能显示和调试..............................................................................................................3-13.3 IP性能配置排错.................................................................................................................3-2第4章网络连通性测试...........................................................................................................4-14.1 网络连通性测试..................................................................................................................4-14.1.1 ping..........................................................................................................................4-14.1.2 tracert......................................................................................................................4-1第5章设备管理.....................................................................................................................5-15.1 设备管理简介.....................................................................................................................5-15.2 配置设备管理.....................................................................................................................5-15.2.1 重新启动以太网交换机............................................................................................5-15.2.2 配置交换机定时重启功能.........................................................................................5-15.2.3 指定以太网交换机下次启动采用的APP..................................................................5-25.2.4 升级BootROM........................................................................................................5-25.3 设备管理的显示和维护.......................................................................................................5-25.4 利用设备管理命令实现远程升级交换机配置举例...............................................................5-3第1章加载BOOTROM和主机软件传统的交换机软件加载方式为串口加载，但该方式速度慢，耗时长，且不具备远程加载功能，致使操作不便。

华为S2000系列交换机配置命令和基本的操作[Quidway]super password 修改特权用户密码[Quidway]sysname 交换机命名[Quidway]interface ethernet 0/1 进入接口视图[Quidway]interface vlan x 进入接口视图[Quidway-Vlan-interfacex]ip address 10.65.1.1 255.255.0.0[Quidway]ip route-static 0.0.0.0 0.0.0.0 10.65.1.2 静态路由＝网关[Quidway]user-interface vty 0 4[S3026-ui-vty0-4]authentication-mode password[S3026-ui-vty0-4]set authentication-mode password simple 222[S3026-ui-vty0-4]user privilege level 3[Quidway-Ethernet0/1]duplex {half|full|auto} 配置端口双工工作状态[Quidway-Ethernet0/1]speed {10|100|auto} 配置端口工作速率[Quidway-Ethernet0/1]flow-control 配置端口流控[Quidway-Ethernet0/1]mdi {across|auto|normal} 配置端口MDI/MDIX状态平接或扭接[Quidway-Ethernet0/1]port link-type {trunk|access|hybrid} 设置接口工作模式(access(缺省)不支持802.1q帧的传送，而trunk支持（用于Switch间互连），hybrid和trunk的区别在于trunk 只允许缺省VLAN的报文发送时不打标签，而hybrid允许多个VLAN 报文发送时不打标签。

一、概述烽火网络现阶段S2系列二层交换机产品系列包括S2021M-A，S2021MF-B，S2209A，S2021M-A，S2021MF-B，S2216F，S2024M-A，S2024MF-B，S2226A，S2205A，S2206A，S2224G，S2250。

〔本PPT内容适用于S2250除外的产品〕〔设备型号确认〕二、硬件结构简介F-engine S2000M系列交换机是多端口的10/100M自适应网管型以太网交换机。

S2000M包括8个10/100M电口＋1个100M光口、16个10/100M电口+2个100M光口、24个10/100M 电口＋2个100M光口共三个规格，并提供带外网管口。

该系列交换机可到达全线速转发，具有Tag VLAN、端口聚合〔Trunk〕、端口地址绑定、组播和QOS等功能，可提供形象直观、功能强大的图形界面网管系统，支持集群网管，可满足各种场合下宽带网络接入的需求。

三、四、根本使用说明F-engine S2021\S2021交换机是为8个10/100Mbps端口的以太网交换机。

该交换机提供本地网管功能，支持基于端口VLAN、播送风暴控制等功能，是一款经济实用的桌面型快速以太网交换机1、功能描述S2021\S2021 10M/100M快速以太网交换机可以用于〔1〕提供8个节点用于微机，效劳器，集线器，交换机，桥接器或路由器的连接；〔2〕可作为10Mbps网络和100Mbps网络的桥接器；〔3〕可作为连接不同网络组之间的桥接器；〔4〕通过本交换机可以将整体网络分隔成数个冲突区的子网络；〔5〕支持VLAN；2、交换机的工作原理10M/100M快速以太网交换机的工作原理：〔1〕通过存储转发或直通模式，将内部缓存有效的分配给各RJ-45端口；〔2〕提供各端口每秒148800个封装包的过滤及转送速率；〔3〕提供流量控制策略，可有效防止包的丧失；〔4〕10M/100M自适应；〔5〕提供全双工/半双工的传输模式4、LED指示灯(1) (3)LED表示端口的速率，碰撞及电源的状态.具体含义如下：〔1〕电源LED指示灯(面板上为PWR)绿光代表交换器电源正常，指示灯不亮时请与效劳人员联系，自行拆卸交换机将有可能使产品失效。

ntp常用命令NTP常用命令NTP（Network Time Protocol）是一种用于同步计算机系统时钟的协议，它通过网络传输时间信息，使得计算机可以获得准确的时间。

在使用NTP时，我们可以通过一些常用的命令来配置和管理NTP服务器和客户端。

本文将介绍几个常用的NTP命令，并对其功能进行详细解析。

1. ntpdate命令ntpdate命令用于手动从NTP服务器同步时间。

它会向指定的NTP服务器发送时间请求，并将服务器返回的时间应用到本地计算机系统中。

使用该命令的格式如下：ntpdate [options] server其中，options表示ntpdate命令的选项，server表示要同步的NTP服务器地址。

可以使用多个server参数来同时同步多个NTP 服务器的时间。

2. ntpq命令ntpq命令用于查询和调试NTP服务器。

它可以显示NTP服务器的状态信息、连接状态、时间偏差等。

使用ntpq命令时，可以通过在命令行中直接输入ntpq命令，然后在交互界面中输入不同的命令来实现不同的功能。

下面是一些常用的ntpq命令及其功能：- `ntpq -p`：显示NTP服务器的状态信息，包括服务器的IP地址、参考ID、时间偏差、延迟等。

- `ntpq -c peers`：显示与NTP服务器连接的Peers信息，包括Peers的IP地址、时钟偏差、延迟等。

- `ntpq -c assoc`：显示与NTP服务器关联的时间源信息，包括时间源的IP地址、时钟偏差、延迟等。

3. ntpdc命令ntpdc命令用于查询和调试NTP服务器的信息。

它可以显示NTP 服务器的状态信息、连接状态、时间源等。

与ntpq命令类似，使用ntpdc命令时，可以通过在命令行中直接输入ntpdc命令，然后在交互界面中输入不同的命令来实现不同的功能。

下面是一些常用的ntpdc命令及其功能：- `ntpdc -c peers`：显示与NTP服务器连接的Peers信息，包括Peers的IP地址、时钟偏差、延迟等。

DHCP-Snooping 目录目录第1章 DHCP-Snooping配置.................................................................................................1-11.1 DHCP-Snooping简介........................................................................................................1-11.1.1 DHCP-Snooping工作原理......................................................................................1-11.1.2 DHCP-Snooping表项的更新...................................................................................1-21.2 DHCP-Snooping配置........................................................................................................1-31.2.1 开启DHCP-Snooping功能......................................................................................1-31.3 DHCP-Snooping显示和维护.............................................................................................1-3第1章 DHCP-Snooping配置1.1 DHCP-Snooping简介1.1.1 DHCP-Snooping工作原理出于安全性的考虑，网络管理员可能需要记录用户上网时所用的IP地址，确认用户从DHCP Server获取的IP地址和用户主机的MAC地址的对应关系。

目录第1章 AAA&RADIUS&HWTACACS协议配置命令................................................................1-11.1 AAA配置命令.....................................................................................................................1-11.1.1 access-limit..............................................................................................................1-11.1.2 attribute...................................................................................................................1-21.1.3 accounting...............................................................................................................1-31.1.4 accounting optional.................................................................................................1-41.1.5 authentication..........................................................................................................1-41.1.6 authorization............................................................................................................1-61.1.7 cut connection.........................................................................................................1-61.1.8 display connection...................................................................................................1-81.1.9 display domain........................................................................................................1-91.1.10 display local-user................................................................................................1-101.1.11 domain.................................................................................................................1-121.1.12 idle-cut.................................................................................................................1-131.1.13 level.....................................................................................................................1-131.1.14 local-user.............................................................................................................1-141.1.15 local-user password-display-mode......................................................................1-151.1.16 messenger...........................................................................................................1-161.1.17 name...................................................................................................................1-171.1.18 password.............................................................................................................1-181.1.19 radius-scheme.....................................................................................................1-191.1.20 scheme................................................................................................................1-191.1.21 self-service-url.....................................................................................................1-201.1.22 service-type.........................................................................................................1-221.1.23 state.....................................................................................................................1-221.1.24 vlan-assignment-mode........................................................................................1-231.2 RADIUS协议配置命令.....................................................................................................1-251.2.1 accounting optional...............................................................................................1-251.2.2 accounting-on enable............................................................................................1-261.2.3 data-flow-format....................................................................................................1-271.2.4 debugging radius...................................................................................................1-281.2.5 display local-server statistics.................................................................................1-291.2.6 display radius scheme...........................................................................................1-291.2.7 display radius statistics.........................................................................................1-311.2.8 display stop-accounting-buffer..............................................................................1-331.2.9 key.........................................................................................................................1-341.2.10 local-server..........................................................................................................1-351.2.11 nas-ip...................................................................................................................1-361.2.12 primary accounting..............................................................................................1-371.2.13 primary authentication.........................................................................................1-381.2.14 radius nas-ip........................................................................................................1-391.2.15 radius scheme.....................................................................................................1-401.2.16 radius trap...........................................................................................................1-411.2.17 reset radius statistics...........................................................................................1-421.2.18 reset stop-accounting-buffer...............................................................................1-421.2.19 retry.....................................................................................................................1-431.2.20 retry realtime-accounting.....................................................................................1-441.2.21 retry stop-accounting...........................................................................................1-451.2.22 secondary accounting.........................................................................................1-461.2.23 secondary authentication....................................................................................1-471.2.24 server-type..........................................................................................................1-481.2.25 state.....................................................................................................................1-491.2.26 stop-accounting-buffer enable.............................................................................1-501.2.27 timer....................................................................................................................1-511.2.28 timer quiet............................................................................................................1-521.2.29 timer realtime-accounting....................................................................................1-521.2.30 timer response-timeout.......................................................................................1-531.2.31 user-name-format................................................................................................1-54 1.3 HWTACACS协议配置命令..............................................................................................1-551.3.1 data-flow-format....................................................................................................1-551.3.2 display hwtacacs...................................................................................................1-571.3.3 display stop-accounting-buffer..............................................................................1-581.3.4 hwtacacs nas-ip.....................................................................................................1-581.3.5 hwtacacs scheme..................................................................................................1-591.3.6 key.........................................................................................................................1-601.3.7 nas-ip.....................................................................................................................1-611.3.8 primary accounting................................................................................................1-621.3.9 primary authentication...........................................................................................1-621.3.10 primary authorization...........................................................................................1-631.3.11 reset hwtacacs statistics.....................................................................................1-641.3.12 reset stop-accounting-buffer...............................................................................1-651.3.13 retry stop-accounting...........................................................................................1-661.3.14 secondary accounting.........................................................................................1-661.3.15 secondary authentication....................................................................................1-671.3.16 secondary authorization......................................................................................1-681.3.17 timer quiet............................................................................................................1-691.3.18 timer realtime-accounting....................................................................................1-691.3.19 timer response-timeout.......................................................................................1-701.3.20 user-name-format................................................................................................1-71第1章 AAA&RADIUS&HWTACACS协议配置命令1.1 AAA配置命令1.1.1 access-limit【命令】access-limit { disable | enable max-user-number }undo access-limit【视图】ISP域视图【参数】disable：表示不限制当前ISP域可容纳的接入用户数。