CCNA实验.doc

图1CCNA 实验拓图实验目录：Lab 1 - Basic Router ConfigurationLab 2 - Advanced Router ConfigurationLab 3 - CDPLab 4 - TelnetLab 5 - TFTPLab 6 - RIPLab 7 - IGRPLab 8 - EIGRPLab 9 - OSPFLab 10 Catalyst 1900 Switch ConfigurationLab 11 - VLANs & Trunking (Catalyst 1900)Lab 12 - Catalyst 2950 Switch ConfigurationLab 13 - VLANs and Trunking (Catalyst 2950)Lab 13-1 Routing inter VLAN(Dot1q)Lab 14 - IP Access ListsLab 15 - NAT/PATLab 16 - PPP & CHAPLab 17 - ISDN BRI-BRI using Legacy DDRLab 18 - ISDN BRI-BRI using Dialer ProfilesLab 19 - ISDN PRI using Dialer ProfilesLab 20 - Frame RelayLAB 1 基本配置1.Router3.Router ?4. Router enableRouter#5. Router# ?6. Router# disableRouter7. Router enableRouter# configure terminalRouter(config)#8. 配置路由器名字如naxxr1(注：如果你用的试验台号是03，则命名为na03r1,如果为12，则命名na12r1,依次类推).Router(config)# hostname naxxr1naxxr1(config)#9. 修改特权模式密码问题A: when both encrypted and unencrypted enable passwords are configured, which one is used?naxxr1(config)# enable ?naxxr1(config)# enable password ccnalab naxxr1(config)# enable secret cisco10. 在接口配置IPnaxxr1(config)# intnaxxr1(config)# interface ethernet0naxxr1(config-if)# ip address naxxr1(config-if)# no shutdown11. 在S0 口配置naxxr1(config-if)# int s0naxxr1(config-if)# ip address naxxr1(config-if)# no shut12. 测试ctrl-z 的作用naxxr1(config-if)# ctrlznaxxr1#13. 退出路由器naxxr1# logout14. 回到特权模式naxxr1 enablepassword: cisco naxxr1#15.显示接口的概况:naxxr1# show ip interface brief16. 显示详细信息:naxxr1# show interfaces17.显示内存信息:naxxr1# show running-config18. 显示NVRAM? If not, why not?naxxr1# show startup-config19. 保存配置:naxxr1# copy running-config startup-config20. 现在显示NVRAM.naxxr1# show startup-config21. 使用Show version:问题A: What IOS release is running 在naxxr1?问题B: What are the contents of the configuration register?naxxr1# show version22. 查看运行的协议问题A:which protocols are currently running on the router?naxxr1# show protocols23. 进入另一台Router.Router enableRouter# configure terminalRouter(config)#24. 配置主机名，配置密码.Router(config)# hostname naxxr2naxxr2(config)# enable secret cisco25. 配置以太网IP.naxxr2(config)# interface E0naxxr2(config-if)# ip address naxxr2(config-if)# no shut26. 显示所有接口简单信息naxxr2(config-if)# ctrl-znaxxr2# show ip interface briefLAB 2 路由器配置2. 配置路由器Console 接口的密码wisdomnaxxr1(config)# line console 0naxxr1(config-line)# loginnaxxr1(config-line)# password wisdom3. 配置Banner” Welcome to CISCO”.naxxr1(config)# banner motd #Welcome to CISCO #4. 退出路由器,重新登录.naxxr1# logoutenter password:wisdom naxxr1enable password: cisconaxxr1#5. 配置Telnet 密码:naxxr2(config)# line vty 0 4naxxr2(config-line)# loginnaxxr2(config-line)# password cisco6. 在Naxxr1 上将Naxxr2 和 对应起来（相当于Windows 里的Hosts 文件的作用）。.naxxr1(config)# ip host naxxr2 7. 检查Naxxr1 中主机名和IP 地址的对应.naxxr1# show hosts8. Ping naxxr2看是否成功.naxxr1# ping naxxr29.显示naxxr2 上的Flash.问题A: what is the name of the IOS image in flash and how large is it?naxxr2# show flash10. 显示Naxxr1 上曾经敲入的命令，可以看到前10 条，可以通过CtrlP 或向上箭头调出这些命令.naxxr1# show historynaxxr1# ctrl-p (to see previously entered commands)11.naxxr1# show interfaces serial 0naxxr1# configure terminalnaxxr1(config)# interface serial 0如果Naxxr1 的S0 口接的线是DCE 接头，输入下面命令，使得这个接口能根对端的接口建立串行连接，否则即使你配置了IP 也没法连通。naxxr1(config-if)# clock rate 64000naxxr1(config-if)# ctrl-znaxxr1# show interfaces serial 012. 配置接口的LABEL.naxxr1(config)# interface serial 0naxxr1(config-if)# description Serial Link to Naxxr2naxxr1(config-if)# exitnaxxr1(config)# exitnaxxr1# show interfaces serial 013. 配置naxxr3LAB 3 CDP1. 做好基本配置naxxr1# config tnaxxr1(config)# interface serial 0naxxr1(config-if)# no shnaxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)#exitnaxxr1(config)# interface serail 1naxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)# endnaxxr2# config tnaxxr2(config)# interface serial 0naxxr2(config-if)# no shnaxxr2(config-if)# ip add naxxr2(config-if)#endnaxxr3# config tnaxxr3(config)# interface serial 0naxxr3(config-if)# no shnaxxr3(config-if)# ip add naxxr3(config-if)#end2. 在Naxxr1.naxxr1# sh cdp neighbors3. 显示邻居的详细信息.naxxr1# show cdp neighbors detail naxxr1# show cdp entry *4. 查看那个接口运行CDP.问题A: what is the CDP advertisement interval?问题B: what is the holdtime interval and what does it signify?naxxr1# show cdp interface5.在naxxr1,改变CDP 的计时器.naxxr1(config)# cdp timer 50naxxr1(config)# cdp holdtime 170 naxxr1(config)# exitnaxxr1# sh cdp interface6. 启用和禁用CDPNaxxr1(config)#no cdp run !禁止路由器运行CDPnaxxr1#show cdp nei !检查看到没有CDP 运行naxxr1#configure terminalnaxxr1(config)#interface serial0naxxr1(config-if)#no cdp enable !禁止此接口运行CDPnaxxr1#show cdp interface !看不到Serial0 运行CDP启用CDPnaxxr1(config)#cdp runnaxxr1(config)#interface serial0naxxr1(config-if)#cdp enableLAB 4 TELNET1. 基本配置要配置好naxxr1# config tnaxxr1(config)# interface serial 0naxxr1(config-if)# no shnaxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)#exitnaxxr1(config)# interface serail 1naxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)# endnaxxr2# config tnaxxr2(config)# interface serial 0naxxr2(config-if)# no shnaxxr2(config-if)# ip add naxxr2(config-if)#endnaxxr3# config tnaxxr3(config)# interface serial 0naxxr3(config-if)# no shnaxxr3(config-if)# ip add naxxr3(config-if)#end2. 首先在naxxr2 和naxxr3 上配置好密码.naxxr3naxxr3# config tnaxxr3(config)#line vty 0 4naxxr3(config-line)#loginnaxxr3(config-line)#password cisconaxxr3naxxr3# config tnaxxr3(config)#line vty 0 4naxxr3(config-line)#loginnaxxr3(config-line)#password cisco3. 在Naxxr1 上登录到Naxxr2.naxxr1# telnet naxxr2naxxr2# show users4. 在Naxxr2 上输入CTRL-SHIFT-6 ，松开手然后输入X. 将回到Naxxr1naxxr2# ctrl-shift-6 Xnaxxr1#naxxr1# show sessions5. Telnet 到Naxxr3.naxxr1# telnet naxxr3naxxr3 ctrl-shift-6 x naxxr1#naxxr1# show sessions6. 在Naxxr1 上断开连接naxxr1# disconnect2 naxxr1# disconnect1 naxxr1# show sessions7在naxxr2 和naxxr3 上清除连接LAB 5 - TFTP在naxxr1 上配置：naxxr1#conf tnaxxr1(config)#int e0naxxr1(config-if)#ip address 172.16.1.xx(xx 是你的实验台的编号naxxr1#ping 54 !tftp Server 的地址是54,测试是否能连通naxxr1# copy startup-config tftp naxxr1# copy tftp startupconfigLAB 6 - RIP假设所有路由器已经配置好了IP 地址(路已经修好了)路由器基本配置：naxxr1# config tnaxxr1(config)# interface serial 0naxxr1(config-if)# no shnaxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)#exitnaxxr1(config)# interface serail 1naxxr1(config-if)# clock rate 4000000naxxr1(config-if)# ip add naxxr1(config-if)# exitnaxxr1(config)#interface ethernet0naxxr1(config-if)#ip add naxxr1(config-if)#no shutnaxxr1(config-if)#no keepalivenaxxr1(config-if)#endnaxxr2# config tnaxxr2(config)# interface serial 0naxxr1(config-if)# clock rate 4000000naxxr2(config-if)# no shnaxxr2(config-if)# ip add naxxr2(config-if)#exitnaxxr2(config)#interface ethernet0naxxr2(config-if)#ip add naxxr2(config-if)#no shutnaxxr2(config-if)#no keepalivenaxxr2(config-if)#endnaxxr3# config tnaxxr3(config)# interface serial 0naxxr3(config-if)# no shnaxxr1(config-if)# clock rate 4000000naxxr3(config-if)# ip add naxxr3(config-if)#exitnaxxr3(config)#interface ethernet0naxxr3(config-if)#ip add naxxr3(config-if)#no shutnaxxr3(config-if)#no keepalivenaxxr3(config-if)#endnaxxr1(config)# router ripnaxxr1(config-router)# network naxxr1(config-router)# network naxxr1(config-router)#network naxxr2(config)# routerripnaxxr2(config-router)# network naxxr2(config-router)#network naxxr3(config)#router ripnaxxr3(config-router)# network naxxr3(config-router)# network 2. 在naxxr1 上使用sh ip protocols 查看动态路由的信息问题A: how frequently does RIP advertise routing updates?问题B: what is the holddown timer interval for RIP?naxxr1# show ip protocols3 naxxr1 上有多少条路由？有几条是从RIP 得到的？其他两台呢？a. RIP 的管理距离是多少?Naxxr1# show ip route4.在naxxr2, ping naxxr3.naxxr2# ping naxxr2# ping 5. 使用cle ip route *清除路由表.router4# clear ip route *6. 在naxxr1 使用Debug 命令,将可以看到路由器每30 秒更新一次路由.naxxr1# debug ip rip7. 使用undebug all 命令Naxxr1#show debuging !检查目前打开了那些Debug 命令naxxr1# undebug all !关掉所有打开的Debug 命令LAB 8 EIGRP1. 清除刚才配置的IGRProuterx(config)# no router igrp 1002.naxxr1(config)# router eigrp 1naxxr1(config-router)# network naxxr1(config-router)#network naxxr1(config-router)#network naxxr2(config)# router eigrp 1 naxxr2(config-router)# network naxxr2(config-router)# network naxxr3(config)# router eigrp 1naxxr3(config-router)# network naxxr3(config-router)# network 3. 查看路由协议.问题A: what is the maximum router hop count with EIGRP?router4# show ip protocols4.在naxxr1 上显示EIGRP 邻居.naxxr1# show ip eigrp neighbors5.在naxxr1 是能够显示EIGRP 包的发送和接受数量.naxxr1# show ip eigrp traffic6.在naxxr1 上显示EIGRP topology database.问题A: what does the EIGRP topology database contain?naxxr1# show ip eigrp topology7. 在naxxr2 上显示路由问题A: EIGRP 的管理距离多少?router4# show ip route8. 在naxxr2, ping naxxr3.naxxr2# ping naxxr2# ping 9.naxxr1# debug ip eigrpLAB 9 - OSPFnaxxx(config)# no router eigrp 1002.naxxr1(config)# router ospf 1naxxr1(config-router)# network 55 area 0 naxxr1(config-router)# network 55 area 0 naxxr1(config-router)# network 55 area 0 naxxr2(config)# router ospf 1naxxr2(config-router)# network 55 area 0 naxxr2(config-router)# network 55 area 0 naxxr3(config)# router ospf 1naxxr3(config-router)# network 55 area 0naxxr3(config-router)# network 55 area 03. 显示路由协议信息.问题A: How frequently does OSPF send routing updates?Naxxr1# sh ip protocols4.在naxxr1 上检查邻居.naxxr1# sh ip ospf neighbor5.在naxxr1 检查运行OSPF 的接口.问题A: 10Mbps 以太网接口中的COST 是多少?naxxr1# sh ip ospf interface6. 检查路由表.问题A: OSPF 的管理距离多少?router4# show ip route7. 在naxxr2, ping naxxr3.naxxr2# ping naxxr2# ping LAB 12 - 2950 交换机配置Switch enableSwitch# ?Switch#disable Switch3.Switch enableSwitch# configure terminalSwitchconfig)# hostname sw2950 sw2050(config)# exitsw2950#4. 检查运行配置sw2950# show running-config5. 保存配置sw2950# copy running-config startupconfigsw2950# show startup-config6. 删除配置,重起sw2950# erase startupconfigsw2950# reload7. 配置交换机的IP 地址和默认网关Switch enableSwitch # configure terminalSwitch (config)# hostname sw2950sw2950(config)# enable password cisco sw2950(config)# interface vlan1sw2950(config-if)# ip address 10 sw2950(config-if)# no shutdown sw2950(config-if)#exitsw2950(config)# ip default-gateway 548. 检查地址sw2950# show interface vlan19. On switch3, issue the show interfaces command.问题A: interface fa0/1 的生成树状态是什么?问题B: fa0/2 的双工模式是什么?sw2950# showinterfaces sw2950#show version11. 使用Show spanning-tree问题A: 根网桥的网桥ID 是多少?问题B: fa0/1 的COST 是多少?问题C: maxage 是多少?问题D: hello 间隔是多少?sw2950# show spanning-tree12.检查MAC 地址表sw2950# show mac-address-table13. MAC 地址的静态指定sw2950(config)# mac-address-table static 4444-4444-4444 vlan 1 int fa0/5sw2950(config)# exitsw2950# show mac-address-table14. 交换机端口安全配置sw2950(config)# interface fa0/9sw2950(config-if)# switchport port-securitysw2950(config-if)# switchport port-security maximum 1sw2950(config-if)# switchport port-security mac-address-table 1111.1111.1111LAB 13 VLANs and TRUNKING图21. 检查交换机上的VLANsw01# show vlan2. 配置TrunkISL 封装方式:Sw01(config)# interface fa0/1sw01(config-if)# switchport mode trunkSw01(conifg-if)#swtichport trunk encapsulation isl !2950 交换机不能敲入此命令sw01(config-if)# ctrl-zsw01# show interface fa0/1 switchportSw01(config)# interface fa0/1sw01(config-if)# switchport mode trunkSw01(conifg-if)#swtichport trunk encapsulation isl !2950 交换机不能敲入此命令sw01(config-if)# ctrl-zsw01# show interface fa0/1 switchportDOT1Q 封装方式:Sw01(config)# interface fa0/1sw01(config-if)# switchport mode trunkSw01(conifg-if)#swtichport trunk encapsulation dot1q !2950 交换机不用敲入此命令sw01(config-if)# ctrl-zsw01# show interface fa0/1 switchportSw01(config)# interface fa0/1sw01(config-if)# switchport mode trunkSw01(conifg-if)#swtichport trunk encapsulation isl !2950 交换机不用敲入此命令sw01(config-if)# ctrl-zsw01# show interface fa0/1 switchport3. 配置VTP(两种方法)第一种:sw01# vlan databasesw01(vlan)# vtp domain wisdomsw01(vlan)#vtp serversw01(vlan)# ctrl-zsw01# show vtp status第二种:sw01(config)#vtp domain wisdomsw01(vlan)#vtp mode serversw01(config)#endsw01#show vtp statussw02# vlan databasesw02(vlan)# vtp domain wisdom sw02(vlan)#vtp clientsw02(vlan)# ctrl-zsw02# show vtp status4.创建Vlansw01# vlan databasesw01(vlan)# vlan 2 name vlan2 sw01(vlan)# vlan 3 name vlan3sw01(vlan)# exitsw01# show vlan在sw02 上检查Vlan,应该可以看到Vlan 2,3Sw02#show vlan5. 在sw01 上将f0/4 加入Vlan2,在Sw02 上将f0/6 加入Vlan2,将f0/10 加入Vlan3Sw01(config)# interface fa0/4Sw01 (config-if)# switchport mode accessSw01 (config-if)# switchport access vlan 2Sw02(config)# interface fa0/6Sw02(config-if)# switchport mode accessSw02(config-if)# switchport access vlan 2Sw02(config)# interface fa0/10Sw02(config-if)# switchport mode accessSw02(config-if)# switchport access vlan 3Sw02(config-if)# ctrl-z2950swx# show vlan6.配置R1、R2 和R3 的IPNaxxr1(config)#interfacee0Naxxr1(config-if)#ip add Naxxr2(config)#interface e0Naxxr2(config-if)#ip add Naxxr3(config)#interfacee0Naxxr3(config-if)#ipadd 7. 测试在naxxr1 上能ping 通, 不能ping 通naxxr1#ping naxxr1#ping LAB 13 1 VLAN间路由图3路由器配置:RouterRouterRouterenableRouter#confRouter#configure tRouter#configure terminalRouter(config)#ho stnam e R 2610R2610(config)#interface e0/0R2610(config-if)#no shutdownR2610(config-if)#no ip address R2610(config-if)#exitR2610(config)#interface e0/0.2R2610(config-subif)#en capsulation dot1Q 2R2610(config-subif)#ip add R2610(config)#int e0/0.3R2610(config-subif)#encapsulation dot1Q 3R2610(config-subif)#ip add R2610(config-subif)#exitR2610(config-subif)#encapsulation dot1Q 4R2610(config-subif)#ip add R2610(config-subif)#endR2610#交换机配置:Sw itchSwitchSwitchen ableSwitch#confSwitch#configure tSwitch#configure terminalSwitch(config)#host sw2950sw2950(config)#int f0/24sw2950(config-if)#switchpo rt mode trunksw2950(config-if)#exitsw2950(config)#vlan 2sw2950(config-vlan)#nam e VLAN2sw2950(config-vlan)#exitsw2950(config)#vlan 3sw2950(config-vlan)#name VLAN3sw2950(config-vlan)#exitsw2950(config)#vlan 4sw2950(config-vlan)#name VLAN4sw2950(config-vlan)#exisw2950(config)#int range f0/1 - 6sw2950(config-if-range)#switchportmode accesssw2950(config-if-range)#switchport access vlan 2sw2950(config-if-range)#exitsw2950(config)#int range f0/7 - 12sw2950(config-if-range)#switchport m ode accesssw2950(config-if-range)#switchport access vlan 3sw2950(config-if-range)#exitsw2950(config)#int range f0/13 - 18sw2950(config-if-range)#switchport mode accesssw2950(config-if-range)#switchport access vlan 4sw2950(config-if-range)#endsw2950#LAB 14 IP 访问列表图4实验一:将R2,R3 认为是一台计算机,R1 是路由器,配置标准访问列表,不允许naxxr2 访问naxxr3.1. 做好基本配置,并测试连通性Naxxr1:naxxr1#conf tnaxxr1(config)#int s0naxxr1(config-if)#no shnaxxr1(config-if)#ip add naxxr1(config-if)#clonaxxr1(config-if)#clock r 4000000naxxr1(config-if)#exinaxxr1(config)#int s1naxxr1(config-if)#ip add naxxr1(config-if)#no shnaxxr1(config-if)#clock r 4000000naxxr1(config-if)#endnaxxr2:naxxr2ennaxxr2#conf tEnter configuration commands, one per line. End with CNTL/Z.naxxr2(config)#hostname naxxr2naxxr2(config)#int s0naxxr2(config-if)#ip address naxxr2(config-if)#no shnaxxr2(config-if)#exinaxxr2(config)#ip route naxxr2(config)#endnaxxr2#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 4/7/8 msnaxxr2#NAXXR3:RouterenRouter#conf tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#hostname naxxr3naxxr3(config)#interface serial 0naxxr3(config-if)#no shutdownnaxxr3(config-if)#naxxr3(config-if)#ip add naxxr3(config-if)#exitnaxxr3(config)#ip route naxxr3(config)#endnaxxr3#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/8 msnaxxr3#2. naxxr1(config)#access-list 1 deny naxxr1(config)#access-list 1 permit anynaxxr1(config)#interface s1naxxr1(config-if)#ip access-group 1 out !如将列表应用在S0 口,怎么配置呢?naxxr1#show access-list !或者使用show ip access-listnaxxr1#show