思科路由器基本配置与常用配置命令.doc

思科路由器基本配置与常用配置命令启动接口，分配IP地址：routerrouter enablerouter#router# configure terminalrouter(config)#router(config)# interface Type Portrouter(config-if)# no shutdownrouter(config-if)# ip address IP-Address Subnet-Maskrouter(config-if)# z配置RIP路由协议：30秒更新一次router(config)# router riprouter(config-if)# network Network-Number router(config-if)# z配置IGRP路由协议：90秒更新一次router(config)# router igrp AS-Number router(config-if)# network Network-Number router(config-if)# z配置Novell IPX路由协议：Novell RIP 60秒更新一次router(config)# ipx routing node addressrouter(config)# ipx maximum-paths Paths router(config)# interface Type Portrouter(config-if)# ipx network Network-Number encapsulation encapsulation-type secondary router(config-if)# z配置DDR：router(config)# dialer-list Group-Number protocol Protocol-Type permit list ACL-Numberrouter(config)# interface bri 0router(config-if)# dialer-group Group-Numberrouter(config-if)# dialer map Protocol-Type Next-Hop-Address name Hostname Telphone-Numberrouter(config-if)# z配置ISDN：router(config)# isdn swith-type Swith-Type router(config-if)# z配置Frame Relay：router(config-if)# encapsulation frame-relay cisco | ietf router(config-if)# frame-relay lmi-type ansi | cisco | q933a router(config-if)# bandwidth kilobitsrouter(config-if)# frame-relay invers-arp Protocol dlci router(config-if)# z配置标准ACL：router(config)# access-list Access-List-Number permit | deny source source-mask router(config)# interface Type Portrouter(config-if)# ip access-group Access-List-Number in | out router(config-if)# z配置扩展ACL：router(config)# access-list Access-List-Number permit | deny Protocol | Protocol-Number source source-wildcard Source-Port destination destination-wildcard Destination-Port established router(config)# interface Type Portrouter(config-if)# ip access-group Access-List-Number in | out router(config-if)# z配置命名ACL：router(config)# ip access-list standard | extended ACL-Namerouter(config std- | ext- nacl)# permit | deny IP-Access-List-Test-Conditions router(config std- | ext- nacl)# no permit | deny IP-Access-List-Test-Conditions router(config std- | ext- nacl)# zrouter(config)# interface Type Portrouter(config-if)# ip access-group ACL-Name | 1199 in | out router(config-if)# z配置DCE时钟：router# show controllers Type Port router(confin-if)# clock rate 64000 router(config-if)# z配置PPP协议：router(config)# username Name password Set-Password-Here router(config)# interface Type Portrouter(config-if)# encapsulation ppp router(config-if)# ppp outhentication chap | chap pap | pap chap | pap router(config-if)# ppp pap sent-username Name password Password router(config-if)# zPAP单向认证配置实例：验证方：router-server(config)# username Client password 12345 router-server(config)# interface serial 0router-server(config-if)# encapsulation ppprouter-server(config-if)# ppp authentication pap router-server(config-if)# z被验证方：router-client(config-if)# encapsulation ppprouter-client(config-if)# ppp pap sent-username Client password 12345 router-client(config-if)# zPAP双向认证配置实例：路由器 A：routerA(config)# username B password 12345routerA(config)# interface serial 0routerA(config-if)# encapsulation ppprouterA(config-if)# ppp authentication paprouterA(config-if)# ppp pap sent-username A password 54321routerA(config-if)# z路由器 B：routerB(config)# username A password 54321routerB(config)# interface serial 1routerB(config-if)# encapsulation ppprouterB(config-if)# ppp authentication paprouterB(config-if)# ppp pap sent-username B password 12345routerB(config-if)# zCHAP单向认证配置实例：验证方：router-server(config)# username router-client password 12345router-server(config)# interface serial 0router-server(config-if)# encapsulation ppprouter-server(config-if)# ppp authentication chaprouter-server(config-if)# z被验证方：router-client(config-if)# encapsulation ppprouter-client(config-if)# ppp authentication chaprouter-client(config-if)# ppp chap hostname router-clientrouter-client(config-if)# ppp chap password 12345router-client(config-if)# zCHAP双向认证配置实例：路由器 A：routerA(config)# username routerB password 12345routerA(config)# interface serial 0routerA(config-if)# encapsulation ppprouterA(config-if)# ppp authentication chaprouterA(config-if)# ppp chap hostname routerArouterA(config-if)# ppp chap password 54321routerA(config-if)# z路由器 B：routerB(config)# username routerA password 54321routerB(config)# interface serial 1routerB(config-if)# encapsulation ppprouterB(config-if)# ppp authentication chaprouterB(config-if)# ppp chap hostname routerBrouterB(config-if)# ppp chap password 12345routerB(config-if)# zTelnet使用：routerA# terminal monitor routerA# telnet IP-Address Router-Name routerB# exit | logout routerB# +再按 routerA# show sessions routerA# Connect-Number routerA# disconnect IP-Address Router-Name routerA# show user routerA# clear line 0 | 1 | 2 | 3 | 4 禁止任何Telnet到本机：router(config)# line vty 0 4router(config-line)# access-class ACL-Numberrouter(config)# z设置主机名：router(config)# hostname Set-Hostnamerouter(config)# zrouter(config)# z设置用户模式密码：router(config)# line console 0router(config-line)#