运行和配置CiscoIOS

第2章 运行和配置Cisco IOS,本章目标,了解网络设备的运行软件 初始化交换机 配置交换机 初始化路由器 配置路由器,2.1 网络设备的软件运行,Cisco IOS 软件传递网络服务和实现网络的应用,2.1.1 IOS的启动程序,2.1.2 Cisco IOS用户界面,使用命令行界面 针对不同的设备有不同的操作 可以键入或粘贴命令条目 键入“回车”键后设备会解释并执行所键入的命令 两种主要的执行模式：用户模式、特权模式 不同的模式有不同的提示符, 用户EXEC模式,用户模式： 交换机或者路由器的有限检验模式 命令行模式的提示符 hostname,输入命令的两个主要EXEC模式,第一个模式：, 特许EXEC模式,特权模式 交换机或者路由器的详细检验 能够进入配置模式和调试设备 是进入其他配置模式的前提 命令行模式的提示符hostname#,第二个模式,2.1.3 与IOS沟通,命令的错误提示及帮助 查看使用过的命令 命令缩写 命令完成及撤销 注销本次登录 多种途径的资源配置, 命令的错误提示及帮助,Router#,clok,Translating “CLOK“,% Unknown command or computer name, or unable to find computer address,Router#,cl?,clear clock,Router#,clock,% Incomplete command.,Router#,clock ?,set Set the time and date,Router#,clock set,% Incomplete command.,Router#,clock set ?,hh:mm:ss Current Time,象征的翻译 命令表达提示 最后的命令回忆, 命令的错误提示及帮助（续）, 查看使用过的命令,Ctrl-P or Up键,调出上（前）一条命令,Ctrl-N or Down键,调出下（后）一条命令,show history,查看命令历史缓冲区的条目,history size line,设置命令历史缓冲区的大小,terminal history size lines,设置当前会话的命令历史缓冲区大小, 命令缩写,全名 缩写 show sh enable en configure terminal conf t Ethernet e Serial s FastEthernet fa, 命令完成及撤销,可以用键补全所使用的命令 可以用no命令取消以前所进行的配置，如： 2503(config)# router rip 2503(config-router)# exit 2503(config)# no router rip, 注销,可以用以下命令注销本次登录 Exit Logout Quit,2.1.4 多种途径的资源配置,2.2 Catalyst系列交换机初始化,系统初始交换机的过程 初始化使用默认的配置参数,1. 在启动交换机之前，检验线缆和console口的正确配置 2. 连接电源线到交换机的电源插槽 3. 观察交换机的启动过程 交换机面板上的指示灯 Cisco IOS软件输出文字,2.2.1 检查交换机LED指示灯C1900,2.2.1 检查交换机LED指示灯C2950,2.2.1 检查交换机LED指示灯（续）,在开始时刻，所有端口的LED指示灯都是绿色 每个端口自检完毕后，其LED指示灯熄灭 如果检测失败，LED指示灯变为琥珀色（黄色） 如果有任何检测失败，系统LED指示灯都变为琥珀色 如果没有检测失败，自检完成 自检完成后，LED指示灯闪烁，然后熄灭,2.2.2 交换机启动后的显示情况C1900,控制口 连接,Catalyst 1900 Management Console Copyright (c) Cisco Systems, Inc. 1993-1998 All rights reserved. Enterprise Edition Software Ethernet Address: 00-50-BD-73-E2-C0 PCA Number: 73-3121-01 PCA Serial Number: FAA0252A0QX Model Number: WS-C1924-EN System Serial Number: FAA0304S0U3 Power Supply S/N: PHI025101F3 - 1 user(s) now active on Management Console. User Interface Menu M Menus K Command Line I IP Configuration Enter Selection:,2.2.2 交换机启动后的显示情况C2950,2.2.3 登录交换机,2.2.4 显示交换机的初始化状态,Switch#show interfaces,Switch#show version,Switch#show running-config,显示交换机的工作状态, 显示版本号的命令,wg_sw_c#show version Cisco Catalyst 1900/2820 Enterprise Edition Software Version V8.01.01 written from 171.068.229.225 Copyright (c) Cisco Systems, Inc. 1993-1998 wg_sw_c uptime is 15day(s) 21hour(s) 53minute(s) 11second(s) cisco Catalyst 1900 (486sxl) processor with 2048K/1024K bytes of memory Hardware board revision is 5 Upgrade Status: No upgrade currently in progress. Config File Status: No configuration upload/download is in progress 27 Fixed Ethernet/IEEE 802.3 interface(s) Base Ethernet Address: 00-50-BD-73-E2-C0, 显示正在运行的配置信息的命令,wg_sw_c#show run Building configuration. Current configuration: ! hostname “wg_sw_c“ ! ip address 3 ip default-gateway ! interface Ethernet 0/1 interface Ethernet 0/24 ! Interface Ethernet 0/25 ! interface FastEthernet 0/26 ! interface FastEthernet 0/27,wg_sw_c#show run Building configuration. Current configuration: ! hostname “wg_sw_c“ ! ip address 3 ip default-gateway ! interface Ethernet 0/1 interface Ethernet 0/12 ! Interface Ethernet 0/25 ! interface FastEthernet 0/26 ! interface FastEthernet 0/27,Catalyst 1924,Catalyst 1912, 显示接口命令,wg_sw_c#show interfaces ethernet 0/1 Ethernet 0/1 is Enabled Hardware is Built-in 10Base-T Address is 0050.BD73.E2C1 MTU 1500 bytes, BW 10000 Kbits 802.1d STP State: Forwarding Forward Transitions: 1 Port monitoring: Disabled Unknown unicast flooding: Enabled Unregistered multicast flooding: Enabled Description: Duplex setting: Half duplex Back pressure: Disabled -More-, 显示交换机的IP地址,wg_sw_a#show ip IP Address: 1 Subnet Mask: Default Gateway: Management VLAN: 1 Domain name: Name server 1: Name server 2: HTTP server : Enabled HTTP port : 80 RIP : Enabled wg_sw_a#,2.3 配置交换机,配置模式: 全局配置模式 wg_sw_a#configure terminal wg_sw_a(config)# 接口配置模式 wg_sw_a(config)#interface e0/1 wg_sw_a(config-if)#,2.3.1 配置交换机的主机名,2.3.2 配置交换机的IP地址,wg_sw_a(config)#ip address ip address mask,例如： wg_sw_a(config)#ip address 1 ,2.3.3 配置交换机的缺省网关,wg_sw_a(config)#ip default-gateway ip address,例如： wg_sw_a(config)#ip default-gateway ,2.3.4 设定全双工/半双工选项,2.4 Cisco 路由器初始启动过程,2.4.1 系统配置对话,Router#setup - System Configuration Dialog - Continue with configuration dialog? yes/no: y At any point you may enter a question mark ? for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets . Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? yes/no: n, 设置全局参数,Configuring global parameters: Enter host name Router:wg_ro_c The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: cisco The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: sanfran The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: sanjose Configure SNMP Network Management? no:, 设置全局参数（续）,初始的协议设置,Configure LAT? yes: n Configure AppleTalk? no: Configure DECnet? no: Configure IP? yes: Configure IGRP routing? yes: n Configure RIP routing? no: Configure CLNS? no: Configure IPX? no: Configure Vines? no: Configure XNS? no: Configure Apollo? no:, 设置端口参数,BRI interface needs isdn switch-type to be configured Valid switch types are : 0 noneOnly if you dont want to configure BRI. 1 basic-1tr61TR6 switch type for Germany 2 basic-5essAT mask is /24 Do you want to configure Serial0 interface? no:, 全部设置的回顾和使用,The following configuration command script was created: hostname Router enable secret 5 $1$/CCk$4r7zDwDNeqkxFO.kJxC3G0 enable password sanfran line vty 0 4 password sanjose no snmp-server ! no appletalk routing no decnet routing ip routing no clns routing no ipx routing no vines routing no xns routing no apollo routing isdn switch-type basic-5ess,interface BRI0 shutdown no ip address ! interface Ethernet0 no shutdown ip address 1 no mop enabled ! interface Serial0 shutdown no ip address end 0 Go to the IOS command prompt without saving this config. 1 Return back to the setup without saving this config. 2 Save this configuration to nvram and exit. Enter your selection 2:,2.5 命令行界面,2.5.1 登录路由器, 路由器的用户模式命令,wg_ro_c? Exec commands: access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC - More -, 路由器的特权模式命令,wg_ro_c#? Exec commands: access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry bfe For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy from one file to another debug Debugging functions (see also undebug) delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase a filesystem exit Exit from the EXEC help Description of the interactive help system - More -, 显示版本号的命令,wg_ro_a#show version Cisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(3), RELEASE SOFTWARE (fc1) Copyright (c) 1986-1999 by cisco Systems, Inc. Compiled Mon 08-Feb-99 18:18 by phanguye Image text-base: 0x03050C84, data-base: 0x00001000 ROM: System Bootstrap, Version 11.0(10c), SOFTWARE BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE(fc1) wg_ro_a uptime is 20 minutes System restarted by reload System image file is “flash:c2500-js-l_120-3.bin“ (output omitted) -More- Configuration register is 0x2102, 查看配置, 查看配置（续）,wg_ro_c#show startup-config Using 1359 out of 32762 bytes ! version 12.0 ! - More -,wg_ro_c#show running-config Building configuration. Current configuration: ! version 12.0 ! - More -,NVRAM中的配置,内存中的配置,查看当前的和存储的配置, 路由器各种模式的回顾,2.5.2 配置路由器, 配置路由器的名称, 配置路由器的密码,Router(config)#line console 0 Router(config-line)#login Router(config-line)#password cisco,控制台密码,虚拟终端（Telnet）密码,Router(config)#line vty 0 4 Router(config-line)#login Router(config-line)#password sanjose,特权密码,Router(config)#enable password cisco,加密的特权密码,Router(config)#enable secret sanfran, 配置端口,Router(config)#interface type number Router(config-if)#,端口类型包括 serial, ethernet, token ring, fddi, hssi, loopback, dialer, null, async, atm, bri和tunnel等 number 用来标识具体的接口,从当前的接口模式下退出,Router(config)#interface type slot/port Router(config-if)#,针对有模块的设置, 配置一个串行端口,进入全局配置模式,Router(config-if)#clock rate 64000 Router(config-if)#,Router(config)#interface serial 0 Router(config-if)#,Router#configure term Router(config)#,Router(config-if)#bandwidth 64 Router(config-if)#exit Router(config)#exit Router#,指定端口,在DCE设备的端口下设置时钟速率,设置带宽, 检查串行端口设置,Router#show interface serial 0 Serial0 is up, line protocol is up Hardware is HD64570 Internet address is /24 MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:09, output 00:00:04, output hang never Last clearing of “show interface“ counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec (output omitted),BW 64 Kbit,配置端口的IP地址,wg_ro_c#configure terminal wg_ro_c(config)#interface ethernet 0 wg_ro_c(config-if)#ip address , 关闭和启动接口,Router#configure terminal Router(config)#interface serial 0 Router(config-if)#no shutdown %LINK-3-UPDOWN: Interface Seria0, changed sta