网络工程师路由交换代码手册：Cisco/华为命令对照表+OSPF调优参数

enable
configure terminal
hostname Router1                # 设置设备名称
enable secret cisco@123         # 配置特权模式密码
service password-encryption     # 加密明文密码
line console 0
 password console@123           # 配置Console密码
 login
line vty 0 4
 password telnet@123            # 配置Telnet密码
 login
end
copy running-config startup-config  # 保存配置

interface GigabitEthernet0/0
 description Link-to-Core      # 接口描述
 ip address 192.168.1.1 255.255.255.0  # 配置IP地址
 duplex auto                    # 双工模式自动协商
 speed auto                     # 速率自动协商
 no shutdown                    # 启用接口

ip route 10.1.1.0 255.255.255.0 192.168.1.2   # 目标网络→下一跳
ip route 0.0.0.0 0.0.0.0 192.168.2.1         # 默认路由

router ospf 1
 network 192.168.1.0 0.0.0.255 area 0     # 宣告直连网络
 network 10.1.1.0 0.0.0.255 area 0
 passive-interface GigabitEthernet0/1     # 禁止接口发送OSPF报文
 auto-cost reference-bandwidth 1000       # 调整OSPF Cost计算基准（1Gbps）

router bgp 65001
 neighbor 200.1.1.1 remote-as 65002      # 指定BGP邻居
 network 192.168.1.0 mask 255.255.255.0  # 宣告本地网络
 bgp log-neighbor-changes                # 记录邻居状态变更

vlan 10
 name Sales                    # 创建VLAN
vlan 20
 name Engineering
interface GigabitEthernet0/1
 switchport mode access        # 接口设为Access模式
 switchport access vlan 10     # 分配VLAN
interface GigabitEthernet0/24
 switchport mode trunk         # 接口设为Trunk模式
 switchport trunk allowed vlan 10,20  # 允许VLAN通过

spanning-tree mode rapid-pvst          # 启用快速PVST+
spanning-tree vlan 10 root primary     # 强制当前交换机为VLAN 10的根桥
interface GigabitEthernet0/1
 spanning-tree portfast                # 启用PortFast（接入端口）

interface Port-channel1
 switchport mode trunk                 # 聚合口配置为Trunk
 switchport trunk allowed vlan 10,20
interface range GigabitEthernet0/1-2
 channel-group 1 mode active           # LACP主动模式

ip access-list extended BLOCK-SSH       # 扩展ACL
 deny tcp any 192.168.1.0 0.0.0.255 eq 22  # 阻止SSH访问
 permit ip any any                     # 允许其他流量
interface GigabitEthernet0/0
 ip access-group BLOCK-SSH in          # 应用ACL到接口入方向

ip access-list standard NAT-POOL
 permit 192.168.1.0 0.0.0.255          # 定义内部地址池
ip nat inside source list NAT-POOL interface GigabitEthernet0/1 overload  # PAT配置
interface GigabitEthernet0/0
 ip nat inside                         # 内部接口
interface GigabitEthernet0/1
 ip nat outside                        # 外部接口

ip dhcp pool LAN-POOL
 network 192.168.1.0 255.255.255.0     # DHCP地址池
 default-router 192.168.1.1            # 默认网关
 dns-server 8.8.8.8                    # DNS服务器
 lease 7                               # 租期7天

ping 192.168.1.1                # ICMP连通性测试
traceroute 10.1.1.1             # 路由追踪
telnet 192.168.1.1 80           # 测试TCP端口可达性

show ip route                   # 查看路由表
show ip ospf neighbor           # 查看OSPF邻居
show ip bgp summary             # 查看BGP会话状态

show logging                    # 查看系统日志
show processes cpu              # 查看CPU利用率
show interface counters         # 查看接口流量统计

interface GigabitEthernet0/0.10
 encapsulation dot1Q 10        # 子接口封装VLAN 10
 ip address 192.168.10.1 255.255.255.0
interface GigabitEthernet0/0.20
 encapsulation dot1Q 20
 ip address 192.168.20.1 255.255.255.0

router ospf 1
 area 1 virtual-link 10.1.1.1  # 配置虚链路（非骨干区域连接）