路由器配置命令(打印版).doc

路由器配置命令系统工作模式1、进入特权模式1、Router enablePassword : Router # 全局配置模式 Router # configure terminalRouter (config) # 接口配置模式Router (config) # int f0/12Router (config-if) #虚拟终端配置模式Router (config) # line vty 0 15Router (config-line) #RIP路由协议配置模式Router (config) # router ripRouter (config-router) #系统基本信息检测与配置2、配置远程登录密码2、Router (config) # line vty 0 15 Router (config-line) # password 7 zzz3073、拷贝配置文件到TFTP Server3、Router # write network4、拷贝running-config 到TFTP Server4、Router # copy running-config tftp:5、拷贝bootflash 中的配置文件到TFTP Server5、Router # copy bootflash : tftp :6、从TFTP Server 拷贝配置文件到路由器6、Router # copy tftp : running-config7、将TFTP Server 上的配置文件拷贝到bootflash7、Router # copy tftp : bootflash :8、配置路由器的主机名8、Router (config) #hostname Router-phy9、配置超级用户口令9、Router (config) # enable secret phy12310、设置系统时钟10、Router # calendar set 10:24:00 30 march 200911、保存配置11、Router # write memory Router # write network tftp12、删除配置12、Router # write erase13、基本检测命令（telnet、ping、trace）13、Router telnet paris/Router ping 10Router trace 3Router traceroute 14、查看flash、系统时钟、软硬件版本、路由器配置、查看路由表、IP路由协议的详细信息14、Router show flashRouter sh clockRouter sh versionRouter # sh configurationRouter # sh ip routeRouter # sh ip protocols接口配置15、配置接口描述信息15、Router (config-if) # description To-BeiJing Foreign Studies University16、配置接口带宽16、Router (config-if) # bandwidth 2500,00017、配置接口的IP地址17、Router (config-if) # ip address 49 5218、接口的开启与关闭18、Router (config-if) # shutdown/no shutdown19、不作ARP代理19、Router (config-if) # duplex full # no ip directed-broadcast # no ip proxy-arp接口配置20、配置异步串行接口20、Router (config) # interface a1Router (config-if) # ip unnumbered ethernet0Router (config-if) # encapsulation pppRouter (config-if) # async default ip address 29Router (config-if) # async dynamic routingRouter (config-if) # async mode interactiveRouter (config-if) # no shutdownRouter (config-if) # exitRouter (config) # exitRouter (config) #21、配置高速同步串行接口21、Router (config) # interface s1/1Router (config-if) # description To-shenzhenRouter (config-if) # bandwidth 2048Router (config-if) # ip address 1 52Router (config-if) # encapsulation hdlcRouter (config-if) # no ip directed-broadcastRouter (config-if) # no ip proxy-arp22、配置POS接口22、Router (config) # interface POS3/0Router (config-if) # description To TianJingDaXueRouter (config-if) # bandwidth 2500,000Router (config-if) # ip address 8 52Router (config-if) # crc 32Router (config-if) # pos framing sdhRouter (config-if) # no ip directed-broadcastRouter (config-if) # pos flag s1 s0 223、loopback 接口的配置23、Router (config) # int loopback 0Router (config-if) # ip address 55Router (config-if) # no ip route-cacheRouter (config-if) # no ip mroute-cache24、配置静态路由24、Router (config) # ip route (静态路由的配置)RIP动态路由配置25、进入RIP配置模式25、Router (config) # router rip26、设置参与RIP协议的网络地址26、Router (config-router) # network 27、配置RIP的被动接口27、Router (config-router) # passive-interface ethernet 028、配置RIP的路由过滤28、Router (config) # access-list 12 deny anyRouter (config) # router ripRouter (config-router) # distribute-list 12 in ethernet029、配置RIP的管理距离29、Router (config-router) # distance 5030、配置RIP的邻居路由器30、Router (config-router) # neighbor OSPF31、配置单个IP地址参与OSPF31、Router (config) # router ospf 63Router (config-router) # network area 032、网络地址参与OSPF32、Router (config-router) # network 55 area 033、定义参与OSPF的子网地址33、Router (config-router) # area 0 range 34、配置被动接口（包括路由器和第三层交换机的配置）34、Router (config-router) # passive-interface Ethernet 0 Router (config-router) # passive-interface vlan37动态路由配置35、配置路由过滤35、Router (config) # access-list 12 deny anyRouter (config) # router ospf 63Router (config-router) # distribute-list 12 in serial 036、配置管理距离36、Router (config-router) # distance 1037、配置OSPF引入外部路由的花费值37、Router (config-router) # redistribute metric 10038、配置引入外部路由时缺省的标记值38、Router (config-router) # redistribute tag 1039、配置引入外部路由时缺省的外部路由类型39、Router (config-router) # redistribute connected metric-type 1 subnetsDHCP配置40、配置IP地址池的名称40、Router (config) # ip dhcp pool ttt/23441、配置IP地址池的子网地址和子网掩码41、Router (dhcp-config) # network Router (dhcp-config) # network /2442、配置不用于动态分配的IP地址42、Router (config) # ip dhcp excluded-address 043、配置IP地址池的缺省网关43、Router (dhcp-config) # default-router 44、配置IP地址池的域名44、Router (dhcp-config) # domain-name 45、配置IP地址池的域名服务器的IP地址45、Router (dhcp-config) # dns-server address 7 646、配置IP地址池的地址租用时间46、Router (dhcp-config) # lease 0 5/ # lease infinite47、取消地址冲突记录日志47、Router (config) # no ip dhcp conflict loggingIP访问控制列表配置48、配置标准访问控制列表，配置应用接口48、只允许源地址为 55子网的主机登录路由器Router (config) # access-list 10 permit 55Router (config) # line vty 0 5Router (config-line) #access-class 10 in49、查看访问控制列表 / 配置信息49、Router # sh access-lists / show configuration50、禁止源地址为非法地址的数据包进入路由器或从路由器输出全局配置模式下：Router (config) # access-list 30 deny 55 logRouter (config) # access-list 30 deny 55Router (config) # access-list 30 deny 55Router (config) # access-list 30 deny 55Router (config) # access-list 30 permit any配置应用接口：Router (config) # intertface g0/1Router (config-if) # ip access-group 30 in51、拒绝转发所有IP地址进出的，端口号为1434的UDP协议数据包（包括应用接口的配置）全局配置模式下：Rou ter (config) # access-list 130 deny udp any any eq 1434Router (config) # access-list 130 permit ip any anyRouter (config) # 配置应用接口：Router (config) # intertface g0/1Router (config-if) # ip access-group 130 inRouter (config-if) # ip access-group 130 outRouter (config-if) # 53、封禁某一台主机全局配置模式下：Router (config) # access-list 110 deny ip host 30 any logRouter (config) # access-list 110 aeny ip any host 30 logRouter (config) # access-list 110 permit ip any any配置应用接口：Router (config) #interface g0/1Router (config-if) #ip access-group 110 inRouter (config-if) #ip access-group 110 outRouter (config-if) #54、封禁ICMP协议，只允许/24和/24子网的ICMP数据包通过路由器全局配置模式下：Router (config) #access-list 198 permit icmp 55 anyRouter (config) #access-list 198 permit icmp 55 anyRouter (config) #access-list 198 deny icmp any anyRouter (config) #access-list 198 permit ip any anyRouter (config) #配置应用接口：Router (config) #interface g0/1Router (config-if) #ip access-group 198 inRouter (config-if) #ip access-group 198 outRouter (config-if) #55、拒绝转发所有IP地址进与出方向的，端口号为1434的UDP协议数据包全局配置模式下：Router (config) #ip access-list extended 130Router (config-iext-nacl) #Router (config-iext-nacl) #permit ip any any Router (config-iext-nacl) #配置应用接口：Router (config) #interface g0/1Router (config-if) #ip access-group 130 inRouter (config-if) #ip access-group 130 outRouter (config-if) #56、禁止源地址为非法地址的数据包进入路由器或从路由器输出全局配置模式下：Router (config) #ip access-list standard testRoute