Dcn工程深圳节点技术文档.doc

目 录一、DCN工程深圳节点网络结构2二、设备配置明细表2三、路由协议与IP编址3四、DCN的接入部分4五、Cisco网际操作系统(IOS)使用维护简介4附录A 路由器7206的配置文件10附录B 交换机2901的配置文件13一、 DCN工程深圳节点网络结构二、 设备配置明细表表1 设备配置明细表平台软件版本设备型号数量说明Y2K问题Catalyst 2901WS-C29011Cisco Catalyst 2901交换机,带固定的12个10M/100M以太网口无2-100BaseTX1固定的两个100M以太网口无Cisco 7206Cisco IOS11.1-24CACisco720616插槽,双电源无NPE-2001Cisco7200 Network Processing Engine,带4M SDRAM无PA-FE-TX1一口快速以太网模块无PA-4E1G/7514口E1 G.703 模块 (75欧,非平衡)无表2 交换机端口分配表VLAN 号VLAN用途交换机上的端口1交换网管2/12七号信令2/23数据网网管2/34数字交叉网管2/45PDH传输2/56SDH传输2/67数字同步2/78动力监控2/8三、 路由协议与IP编址路由协议：本次DCN工程采用EIGRP路由协议,AS号为100。表3 深圳节点IP地址表设备端口IP地址掩码说明Cisco 72061/0接2901交换机的1/1口1/0.254子端口2的实际IP地址1/0.354子端口3的实际IP地址1/0.454子端口4的实际IP地址1/0.554子端口5的实际IP地址1/0.654子端口6的实际IP地址1/0.754子端口7的实际IP地址1/0.854子端口8的实际IP地址1/0.954子端口9的实际IP地址2/0连到鸿波大厦九七机房2/1452连到省局网管中心Catalyst 2901092901交换机的IP地址,为管理和远程配置时用四、 DCN的接入部分本次施工在独立建造了DCN节点,增加了一台7206,上带一个1口快速以太网模块和一个4口E1模块；在网管中心增加一台2901交换机，上面配置了一块12口10M/100M自适应的快速以太模块,并且自带2个100M口。7206通过两根E1线连接到省中心，走的是2M的E1线路，即速率可达2.048kbs。同时通过一个100M口连接到网管中心的交换机上。另外通过一根E1线路将九七工程从鸿波大厦的九七机房接入。新增的Catalyst 2901是一台Cisco的中档交换机，它提供出色的性能，灵活的模块化和便捷的管理；它支持基于ISL的VLAN，有高达800Mbps的带宽。在网管中心的2901通过模块上的12个10M/100M以太口接入各专业网管，并且对它们进行VLAN管理；再通过一根100M的快速以太网上联到的7206上面。五、 Cisco网际操作系统(IOS)使用维护简介Cisco IOS的网际操作系统(IOS)是一个为网际互联优化的复杂的操作系统，为长时间经济有效地维护一个互联网络提供了统一的规则。它是一个与硬件分离的软件体系结构，随网络技术的不断发展，可动态地升级以适应不断变化的技术（硬件和软件）。IOS可以被视作一个网际互联中枢：一个高度智能的管理员，负责管理和控制复杂的分布式网络资源和功能。IOS已经可以发展到可以支持局域网和ATM交换机等，并成为网际互联软件事实上的工业标准。Cisco IOS提供了一个良好的用户界面。你可以远程telnet到Cisco设备上或用一台终端（或终端仿真软件）连到Cisco设备的Console口上来访问用户界面，并在这个界面上可以做显示状态、配置参数、调测链路等各种操作，在任何模式输入问号(?)将列出该模式下能执行的命令，在输入命令前几个字母并确认这几个字母唯一代表这条命令是，按下TAB键可让IOS补全剩下的字母。从CONSOLE口连接的通信参数是：波特率：9600；数据位：8；停止位：1；奇偶校验：无；流量控制：硬件。 下面以专线接入服务器（实际上也是路由器）为例简介IOS的几种模式。1、 用户命令模式：登录上路由器后就处于用户命令模式，此模式下的命令是特权命令模式命令的子集。该模式的提示符为路由器的主机名后跟一个尖括号()，如router。以下是该模式下的可以使用的命令列表： access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands clear Reset functions connect Open a terminal connection disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC ping Send echo messages ppp Start IETF Point-to-Point Protocol (PPP) resume Resume an active network connection rlogin Open an rlogin connection show Show running system information slip Start Serial-line IP (SLIP) systat Display information about terminal lines telnet Open a telnet connection terminal Set terminal line parameters如想了解命令的用法，只需在命令后带个问号作参数。几个最常用的维护命令：show version 显示版本、内存等信息show interface serial 0 显示串口0的各种配置及状态show interface eithernet 0 显示以太口0的各种配置及状态show controller e1 0 显示E1/PRI口0的各种配置及状态show ip route 显示IP路由表ping 检查网络地址的连通性telnet 远程登录到另一台机traceroute 跟踪路由2、 特权命令模式：在特权命令模式下可以执行所有的路由器命令，包括配置系统参数调试。在用户命令模式下输入enable，系统将提示你输入特权口令，输入正确后即进入特权命令模式，其提示符为路由器名后跟#，如router#。以下是特权命令模式下可以用到的一些命令列表： access-enable Create a temporary Access-List entry access-template Create a temporary Access-List entry atmsig Execute Atm Signalling Commands bfe For manual emergency modes setting calendar Manage the hardware calendar clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy configuration or image data debug Debugging functions (see also undebug) disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase flash or configuration memory exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC mstat Show statistics after multiple multicast traceroutes name-connection Name an existing network connection ncia Start/Stop NCIA Server no Disable debugging functions pad Open a X.29 PAD connection ping Send echo messages ppp Start IETF Point-to-Point Protocol (PPP) reload Halt and perform a cold restart resume Resume an active network connection rlogin Open an rlogin connection rsh Execute a remote command sdlc Send SDLC test frames send Send a message to other tty lines setup Run the SETUP command facility show Show running system information slip Start Serial-line IP (SLIP) start-chat Start a chat-script on a line systat Display information about terminal lines tarp TARP (Target ID Resolution Protocol) commands telnet Open a telnet connection terminal Set terminal line parameters test Test subsystems, memory, and interfaces tn3270 Open a tn3270 connection traceroute Trace route to destination tunnel Open a tunnel connection undebug Disable debugging functions (see also debug) verify Verify checksum of a Flash file where List active connections which-route Do OSI route table lookup and display results x3 Set X.3 parameters on PAD xremote Enter XRemote mode 特权命令一般会修改系统配置参数，甚至清除所有配置信息或清除操作系统映像。所以，特别注意：除非你很清楚一个命令的后果并且确信你的意图，否则不要在特权模式下执行该命令。3、 全局配置模式：全局配置模式命令一般是修改系统全局参数的命令，在特权模式下输入config terminal即进入全局配置模式，提示符为名称后加状态提示和#，如：router(config)#，以下是一些可能用到的命令列表： aaa Authentication, Authorization and Accounting. access-list Add an access list entry alias Create command alias arp Set a static ARP entry async-bootp Modify system bootp parameters autonomous-system Specify local AS number to which we belong banner Define a login banner boot Modify system boot parameters bridge Bridge Group. bstun BSTUN global configuration commands buffers Adjust system buffer pool parameters cdp Global CDP configuration subcommands chat-script Define a modem chat script clns Global CLNS configuration subcommands clock Configure time-of-day clock config-register Define the configuration register controller Configure a specific controller default Set a command to its defaults default-value Default character-bits values dialer-list Create a dialer list entry enable Modify enable password parameters end Exit from configure mode endnode SNA APPN endnode command exception Exception handling exit Exit from configure mode frame-relay global frame relay configuration commands help Description of the interactive help system hostname Set systems network name interface Select an interface to configure ip Global IP configuration subcommands ipx Novell/IPX global configuration commands isdn ISDN configuration commands key Key management keymap Define a new keymap line Configure a terminal line lnm IBM Lan Manager logging Modify message logging facilities login-string Define a host-specific login string map-class Configure static map class map-list Configure static map list menu Define a user-interface menu modemcap Modem Capabilities database mop Configure the DEC MOP Server multilink PPP multilink global configuration netbios NETBIOS access control filtering no Negate a command or set its defaults ntp Configure NTP partition Partition device priority-list Build a priority list privilege Command privilege parameters prompt Set systems prompt queue-list Build a custom queue list radius-server Modify RADIUS query parameters resume-string Define a host-specific resume string rif Source-route RIF cache rlogin Rlogin configuration commands rmon Remote Monitoring route-map Create route-map or enter route-map command mode router Enable a routing process rsrb RSRB LSAP/DSAP filtering rtr RTR Base Configuration scheduler Scheduler parameters service Modify use of network based services sgbp SGBP Stack Group Bidding Protocol configuration sna Network Management Physical Unit Command snmp-server Modify SNMP parameters source-bridge Source-route bridging ring groups state-machine Define a TCP dispatch state machine terminal-queue Terminal queue commands tftp-server Provide TFTP service for netload requests tn3270 tn3270 configuration command translate Translate global configuration commands ttycap Define a new termcap username Establish User Name Authentication vpdn Virtual Private Dialup Network vty-async Enable virtual async line configuration x25 X.25 Level 3 x29 X29 commands xns XNS global configuration commands xremote Configure XRemote 4、 接口配置模式：接口配置模式影响特定接口的参数，它仅影响所配置的接口，在全局配置模式下的输入interface int-type int-num（其中int-type为接口类型， int-num为接口号），即进入接口配置模式，系统提示符为router(config-if)#。该模式下的命令列表如前面所述，输入？即可列出，在此不再祥列。5、 线配置模式：线配置模式设置异步接口（包括虚拟异步接口）的物理方面的特征。在全局配置模式下的输入line abs-linet-num 或line line-type rev-line-num（其中abs-linet-num为绝对线编号，rev-line-num为相对线编号， line-type为线类型），即进入线配置模式，系统提示符为router(config-line)#。该模式下的命令列表如前面所述，输入？即可列出，在此不再祥列。绝对线编号的规则为：Console口为0，异步口自1到异步口总数，AUX口接着编号，然后是vty口。相对线编号规则为：在每种类型(con、asyn、aux、vty)中线的编号从0起按顺序编号。6、 协议配置模式：协议配置模式是对使用的协议进行参数配置。在全局配置模式下的输入router protocaol-type protocolt-name（其中protocol-type为协议类型， protocol-name为协议名称），即进入协议配置模式，系统提示符为router(config-router)#。该模式下的命令列表如前面所述，输入？即可列出，在此不再祥列。如想进一步详细了解路由器的各种命令的用法及各种应用下的路由器的配置，请参看Cisco Documentation CD中的Cisco IOS的各个相关的Command References和Configuration Guide。六、 附录A 路由器 7206 配置文件SZ_7206#sh confUsing 3440 out of 129016 bytes!version 11.1service udp-small-serversservice tcp-small-servers!hostname SZ_7206!enable secret 5 $1$Nazd$.ia6Dk4woNLmOkAokm13n.enable password cisco!ip subnet-zero!interface FastEthernet0/0 no ip address!interface FastEthernet1/0 no ip address!interface FastEthernet1/0.2 description : Connected to JiaoHuan_WG ip address 54 no ip redirects encapsulation isl 2!interface FastEthernet1/0.3 description : Connected to NO.7_WG ip address 54 ip access-group 103 out no ip redirects encapsulation isl 3!interface FastEthernet1/0.4 description : Connected to ShuJu_WG ip address 54 ip access-group 104 out no ip redirects encapsulation isl 4!interface FastEthernet1/0.5 description : Conncected to ShuZhiJiaoCha_WG ip address 54 ip access-group 105 out no ip redirects encapsulation isl 5!interface FastEthernet1/0.6 description : Connected to PDH_WG ip address 54 no ip redirects encapsulation isl 6!interface FastEthernet1/0.7 description : Connected to SDH_WG ip address 54 ip access-group 107 out no ip redirects encapsulation isl 7!interface FastEthernet1/0.8 description : Connected to ShuZhiTongBu_WG ip address 54 ip access-group 108 out no ip redirects encapsulation isl 8!interface FastEthernet1/0.9 description : Connected to DongLi_WG ip address 54 ip access-group 109 out no ip redirects encapsulation isl 9!interface Serial2/0 description : Connected to HongBo_97 ip address no fair-queue timeslot 1-31 ts16!interface Serial2/1 description : Connected to ShengWangGuan ip address 4 52!interface Serial2/2 no ip address!interface Serial2/3 no ip address shutdown!router eigrp 100 network network !ip classlessip route logging bufferedaccess-list 102 permit ip 55 anyaccess-list 102 permit ip 55 anyaccess-list 102 permit ip 55 anyaccess-list 103 permit ip 55 anyaccess-list 103 permit ip 55 anyaccess-list 103 permit ip 55 anyaccess-list 104 permit ip 55 anyaccess-list 104 permit ip 55 anyaccess-list 104 permit ip 55 anyaccess-list 105 permit ip 55 anyaccess-list 105 permit ip 55 anyaccess-list 105 permit ip 55 anyaccess-list 106 permit ip 55 anyaccess-list 106 permit ip 55 anyaccess-list 106 permit ip 55 anyaccess-list 107 permit ip 55 anyaccess-list 107 permit ip 55 anyaccess-list 107 permit ip 55 anyaccess-list 108 permit ip 55 anyaccess-list 108 permit ip 55 anyaccess-list 108 permit ip 55 anyaccess-list 109 permit ip 55 anyaccess-list 109 permit ip 55 anyaccess-list 109 permit ip 55 any!line con 0 exec-timeout 0 0line aux 0line vty 0 4 password cisco login!end附录B Catalyst 2901典型配置文件Console (enable)Console (enable)Console (enable) sh conf.beginset password $1$FMFQ$HfZR5DUszVHIRhrz4h6V70set enablepass $1$FMFQ$HfZR5DUszVHIRhrz4h6V70set prompt Consoleset length 24 defaultset logout 20!#systemset system baud 9600set system modem disableset system nameset system locationset system contact!#snmpset snmp community read-only publicset snmp community read-write privateset snmp community read-write-all secretset snmp rmon disableset snmp trap disable moduleset snmp trap disable chassisset snmp trap disable bridgeset snmp trap disable repeaterset snmp trap disable vtpset snmp trap disable auth!#ipset interface sc0 2 09 55set interface sl0 set arp agingtime 1200set ip redirect enableset ip unreachable enableset ip fragmentation enableset ip alias default !#Command alias!#switch port analyzer!set span 1 1/1 bothset span disable!#bridgeset bridge ipx snaptoether 8023rawset bridge ipx 8022toether 8023set bridge ipx 8023rawtofddi snap!#vtpset vtp domain zhongshan mode serverset vlan 1 name default type ethernet mtu 1500 said 100001 state activeset vlan 2 name NO.7wg type ethernet mtu 1500 said 100002 state activeset vlan 3 name 97gongcheng type ethernet mtu 1500 said 100003 state activeset vlan 4 name shujuwg type ethernet mtu 1500 said 100004 state activeset vlan 5 name shuzijiaochawg type ethernet mtu 1500 said 100005 state activeset vlan 6 name PDHwg type ethernet mtu 1500 said 100006 state activeset vlan 7 name SDHwg type ethernet mtu 1500 said 100007 state activeset vlan 8 name shuzitongbuwg type ethernet mtu 1500 said 100008 state activeset vlan 9 name donglijiankong type ethernet mtu 1500 said 100009 state activeset vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state active parent 0 ring 0set vlan 1003 name token-ring-default type token_ring mtu 1500 said 101003 state active parent 0 ring 0set vlan 1004 name fddinet-default type fddi_net mtu 1500 sai