CCNAExperiments（英文版）.ppt

CCNAExperiments,Experiment1TelnetandConsoleRouter,1、Topoloy(experimentspecification),IP:00/16Gate:192.1698.0.1,f0/0IP:IP:/16,2、RouterinterfaceconfigureenableconfigureterminalInterfacef0/0IpaddressNoshut3、RouterpasswordConfigureterminalLinevty04PasswordciscoLoginExitEnablepasswordcisco,4、TestlinkC:Ping5、TestTelnetC:telnet,Experiment2Basicoperationcommand,Enable、DisableClockset、showclock设置用户模式密码：router(config)#lineconsole0router(config-line)#passwordciscorouter(config-line)#loginrouter(config-line)#z,设置Telnet密码：router(config)#linevty04router(config-line)#passwordciscotelnetrouter(config-line)#loginrouter(config-line)#z设置特权模式密码：router(config)#enablepasswordcisco2600router(config)#enablesecretSet-Passwordrouter(config)#z,给所有密码加密：router(config)#servicepassword-ancryptionSet-Password-Hererouter(config)#noservicepassword-ancryptionrouter(config)#z设置登录Banner：router(config)#bannermotd分隔符Set-Banner-Information-Here分隔符,更改路由器启动顺序：router(config)#bootsystemflashIOS-FileNamerouter(config)#bootsystemtftpIOS-FileNameTFTP-IP-Addressrouter(config)#bootsystemromrouter(config)#zshowipintbrief,Ping的使用：router#pingIP-Addressrouter#pingProtocolip：Protocol-TypeTargetIPaddress：IP-AddressRepeatcount5：Datagramsize100：Timeoutinseconds2：Extendedcommandsn：ySweeprangeofsizesn：,router#showsessions查看本机上的TELNET会话router#disconnect关闭所有的TELNET会话router#showusers查看本机上的用户router#erasestartup-config删除NVRAM中的配置router#reload重启路由器router(config)#hostnamerl配置用户名为rlrouter(config)#bannerwelcome#配置开机话语router#showcontrollersserial0查看串口0的物理层信息，主要是查看DTE/DCErouter#showipinterface查看端口的IP配置信息router#showhosts查看主机表endorctrl+z从各种配置模式退到特权模式,ShowShowversionShowrunning-configShowstartup-configShowinterface*ShowflashShowcontrollers*Showiparp,Experiment3Backup,RecoveryconfigurationfileandIOS,1、TFTP使用!Configurationfigure,seeexperiment1,2、BackupandrecoveryconfigurationfileBackupRouter#copyrunning-configftptRecoveryCopytftprunning-config3、BackupandrecoveryIOSBackupRouter#dir(orshowflash)Directoryofflash:/1-rw-5849872c2600-i-mz.122-8.T5.binRouter#copyflashtftpSourcefilename?c2600-i-mz.122-8.T5.binAddressornameofremotehost?00Destinationfilenamec2600-i-mz.122-8.T5.bin?.!,Recovery恢复方法1：PC配置同前，正常启动Router，路由器的配置方法同上Router#copytftpflashAddressornameofremotehost00?Sourcefilenamec2600-i-mz.122-8.T5.bin?c2600-ipbase-mz.123-6b.binDestinationfilenamec2600-ipbase-mz.123-6b.bin?Accessingt00/c2600-ipbase-mz.123-6b.bin.Eraseflash:beforecopying?confirmErasingtheflashfilesystemwillremoveallfiles!Continue?confirmErasingdevice.eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee.erasedEraseofflash:completeLoadingc2600-ipbase-mz.123-6b.binfrom(viaFastEthernet0/0):!,恢复方法2：（RomMonitor方法）pc机的设置：ip地址00掩码网关（路由器的ip地址）后路由器在rommon（启动路由器，Ctrl+Break）状态下输入：（注意大小写）,rommon1IP_ADDRESS(路由器的ip地址)rommon2IP_SUBNET_MASK（路由器的掩码）rommon3DEFAULT_GATEWAY00（网关，是pc机的ip地址）rommon4TFTP_SERVER00（是pc机的ip地址）rommon5TFTP_FILEc2600-i-mz.122-12（上传文件的名称）rommon6sync（保存）rommon7set（查看）rommon8tftpdnld（传送文件）出现提示选择yInvokethiscommandfordisasterrecoveryonly.WARNING:allexistingdatainallpartitionsonflashwillbelost!Doyouwishtocontinue?y/n:n:yReceivingc2600-i-mz.122-8.T5.binfrom00!,Experiment4PasswordRecovery,Cancelpassword：冷关机，然后再开机并在60秒内按+进入ROM监视器模式:rommonconfreg0 x2142i（重启）进入setup模式，使用ctrl+c或者回答n,恢复：routerenablerouter#copystartup-configrunning-configrouter#configureterminalrouter(config)#enablepasswordcisco2600(如果还有别的密码，一一配置好)router(config)#config-register0 x2102router(config)#z(exit)router#copyrunning-configstartup-configrouter#reload,Experiment5ReverseTelnet,注意：Console口和Aux口的连接要用反转线。两台路由器之间的切换用Ctrl+Shift+6,后按X。interfaceloopback0Ipaddressexitshowlinelineaux0transportinputallExitiphostr2206clearline65,Experiment6DirectConnectionNetworkandStaticRouting,Topology,S0/0:IP:/24,R1,S0/0:IP:/24,f0/0:IP:/24,f0/0IP:/24,IP:、24Gate:,IP:/24Gate:,R1:Iproutes0/0or：IprouteR2Iproutes0/0or：IprouteTestShowiproutePing,Experiment6(2)StaticRouteandDefaultRoute,Basicconfiguration(seelastexperiment)R1：ConfigtIproute..R2:Iproute.s0/1R3:Iproute.s0/.0,TestUsingdefaultrouteinR1，R3（Notice：Deletetheformerconfiguration）R1：IprouteR3:Iproutes0/1,TopologySeeexperiment6（2）RIPV1BasicConfiguration(configurationineveryRouter)R1configurationinterfacef0/0ipaddressinterfaceS0/0ipaddressrouterripnetworknetworkclockrate128000（ifDCE）Version1,Experiment7RIP,TestShowiproutePingShowipprotocolsCleariproute*Debugiprip,RIPV2:interfaceF0/0ipaddressinterfaceS0/0ipaddressrouterripnetworknetworkclockrate128000(ifDCE)Version2,RoutingSummary：Configure3loopbackportsinR3(removethePClinkandtheconfigurationoflastexperiment)：Interfaceloopback0IpaddressInterfaceloopback1IpaddressInterfaceloopback2IpaddressManualsummaryRouterripVersion2Noauto-summaryNetworkNetworkclockrate128000Version2Noauto-summaryinterfaceS0/0ipsummary-addressrip(手工汇总)Showiproute,Auto-summaryRouterripAuto-summaryinterfaceS0/0noipsummary-addressripCleariproute*Triggerupdate接口模式：IPriptriggered,Experiment8IGRP,Topology,S0/0:IP:,R1,S0/0:IP:,f0/0:IP:,f0/0IP:,IP:Gate:,IP:Gate:,BasicConfigrationrouterigrp1networknetwork,Experiment9EIGRP,Topology,BasicConfigurationR1:Routereigrp*(AS)Network55Network.TroubleshootingShowipeigrpneighborsShowrun|brr,RoutingsummaryJustlikethesummaryofRIPV2Ipsummary-addresseigrp,EIGRPAuthentication,R1:KeychainccnaKey1Key-stringciscoInterfaces0/0Ipauthenticationmodeeigrp1md5Ipauthenticationkey-chaineigrp1ccnaConfuretheotherrouterslikethis;Noticetheinterfacesyouuse;Iftherearemorethanonelinkinarouter,youmustconfigureMD5authenticationineveryWAN(Serial)interface.,Experiment10OSPF,Topology,BasicConfigurationRouterospf*(Process)Network55area*(AS)Network.TroubleshootingShowipospfneighborShowiposfpinterfaceShowiprouteospfShowipospfdatabaseClearipospf,OSPFAuthenticationR1:routerospf1area0authenticationmessage-digestinterface*ipospfmessage-digest-key1md5ciscoR2:Justlikewhatmentionedabove,Experiment11HDLCandPPP,1Topology,S0/0:IP:,R1,S0/0:IP:,f0/0:IP:,f0/0IP:,IP:Gate:,IP:Gate:,2Configurethenetworkandconfirmtheconnectivity3Showinterfaces0/04PPPencapsulationInterfaces0/0Encapsulationppp,5PAPauthentication单向认证：R1:Interfaces0/0PppauthenticationpapConfigtUsernameR2password654321R2:Interfaces0/0Ppppapsent-usernameR2password654321Ping,双向认证：R2:PppauthenticationConfigtUsernameR1password123456R1:Ppppapsent-usernameR1password123456DebugpppauthenticationUndebugall,6Chapauthentication删除上述认证内容，将所有PAP的地方换为CHAP，而且CHAP要求认证双方密码要一样。,Experiment12SwitchpasswordandIOSRecovery,1、Topology,Step1ConfigureswitchSwitchenableSwitch#configureterminalSwitch(config)#hostnameSwitch_ASwitch_A(config)#enablesecretclassSwitch_A(config)#enablepasswordciscoSwitch_A(config)#linecon0Switch_A(config-line)#passwordciscoSwitch_A(config-line)#loginSwitch_A(config-line)#linevty015Switch_A(config-line)#passwordciscoSwitch_A(config-line)#loginSwitch_A(config-line)#exit,Step2ConfiguremanagementaddressinterfaceVlan1ipaddressnoshutdownexitipdefault-gatewayend,Step3LinktoswitchConsoleTelnetWeb,Step4PasswordRecoveryPushtheModelkeyandsetuptheswitchFlash_initLoad_helperDirflashRenameflash:config.textflash:config.oldBootEnableRenameflash:config.oldflash:config.textCopyflash:config.textflash:runing-configConfigtEnablesecretciscoExitCopyrunning-configstartup-config,Step5IOSRecoveryMethod1:TFTPCopytftpflashTheninputtherequiredinformationandwaitMethod2:XModemLinkconsoleportFlash_initFlash_helperCopyXModel:flash:*(IOSname)TransferusingHyperTerminal(Transfer-.)Notice:TherateisVeryVeryVeryslow,JustlikeaSICKSNAIL!,Experiment13VLANConfiguration,Topology,Step1ConfigureswitchSwitchSwitchenableSwitch#configureterminalSwitch(config)#hostnameSwitch_ASwitch_A(config)#enablesecretclassSwitch_A(config)#enablepasswordciscoSwitch_A(config)#linecon0Switch_A(config-line)#passwordciscoSwitch_A(config-line)#loginSwitch_A(config-line)#linevty015Switch_A(config-line)#passwordciscoSwitch_A(config-line)#loginSwitch_A(config-line)#exit,interfaceVlan1ipaddressnoshutdownexitipdefault-gatewayend,Step2ConfigureIPaddressandmaskforPCStep3CheckconnectivityUseswitchtopingtwoPCsStep4ConfigurePC1toVLAN1PC2toVLAN2Switch_A#vlandatabaseSwitch_A(vlan)#vlan2nameVLAN2Switch_A#configureterminalSwitch_A(config)#interfacef0/4Switch_A(config-if)#switchportmodeaccessSwitch_A(config-if)#switchportaccessvlan2Step5PC1pingPC2,Experiment14VLANTrunkTopology,Step1BasicconfigurationSeelastexperimentStep2ConfigurecorrectIPaddress,subnetmaskanddefaultgatewayforPCs.Step3TestconnectivityUseswitchtopingtwoPCsStep4ShowVLANinterfaceinformationSwitch_A#showvlan,Step5CreatingandNamingVLANinSwitchAStep6AllocatinginterfacestoVLANStep7Creatingdot1qtrunkSwitch_A(config)#interfacef0/1Switch_A(config-if)#switchportmodetrunkSwitch_A(config-if)#switchporttrunkencapsulationdot1qSwitch_A(config-if)#endSwitch_B(config)#interfacef0/1Switch_B(config-if)#switchportmodetrunkSwitch_B(config-if)#switchporttrunkencapsulationdot1qSwitch_B(config-if)#endStep8Testdot1qtrunk,Experiment15VLANRoute,Topology,Step1ConfigurationSwitchSeelastexperimentStep2ConfurationthePCconnecttoSwitcha.ThePCconnecttoport0/5IPaddressSubnetmaskDefaultgatewayb.ThePCconnecttoport0/9IPaddressSubnetmaskDefaultgatewayStep3TestConnectivity,Step4创建，命名两个VLANsStep5分配端口到VLANStep6创建trunkSwitch_A(config)#interfacef0/1Switch_A(config-if)#switchportmodetrunkSwitch_A(config-if)#switchporttrunkencapsulationdot1qSwitch_A(config-if)#end,Step7配置路由器Router_A(config)#interfacefastethernet0/0Router_A(config-if)#noshutdownRouter_A(config-if)#interfacef0/0.1Router_A(config-subif)#encapsulationdot1q1Router_A(config-subif)#ipaddressRouter_A(config-if)#interfacef0/0.2Router_A(config-subif)#encapsulationdot1q10Router_A(config-subif)#ipaddressRouter_A(config-if)#interfacefastethernet0/0.3Router_A(config-subif)#encapsulationdot1q20Router_A(config-subif)#ipaddressRouter_A(config-subif)#endStep8保存路由器的配置文件Step9显示路由器的路由表Step10测试VLANS和Trunk,Experiment16STP,Topology,显示生成树：Showspanningtree改根桥：Spanning-treevlan1priority20480(?)Showspinning-tree查看非根桥根口：Showspinning-treebrief,Experiment17VTP,Topology,Step1创建，命名VLANsvlandatabasevlan10nameqfnuvlan20nameqrnuStep2配置VTP服务器端(sw1)vlandatabasevtpservervtpdomaingroup1showvlan,Step11配置VTP客户端(sw3)vlandatabasevtpclientvtpdomaingroup1Step13创建透明端(sw2)VlandatabaseVTPtransparentvtpdomaingroup1Step12创建trunk（三台交换机都要配置）interfacefastethernet*switchportmodetrunk,试验内容：SW1上创建VLAN，后查看SW2和SW3上VLAN信息SW3上改VLAN的名字SW2上创建VLAN，查看SW1和SW3将SW3改为Server模式,Experiment18StaticNAT,00/24,Internet,Inside,00/24,F0/0,S0/0,R1,R2,S0/0,F0/0,/24,/24,172.16.0.XX,54/24,54/24,主要步骤（R1上）(config)#interfacef0/0ipadddress54ipnatinside(config)#interfaces0/0ipaddressipnatoutside如果为dce，配置时钟(config)#ipnatinsidesourcestatic00(config)#iproutes0/0showipnattranslation,R2上的基本配置根据图自己给出把内部的00和进行静态转换内外网的计算机能够互相ping通，注意外网的计算机ping内网的计算机时应该ping哪个地址,Experiment19DynamicNAT（PAT）,R1上的几个关键配置命令interfaceFastEthernet0/0ipaddress54ipnatinsideinterfaceSerial0/0ipaddressipnatoutsideaccess-list1permit55ipnatpoolMY-NATnetmaskipnatinsidesourcelist1poolMY-NAToverloadiprouteSerial0/0若为DCE配置时钟,R2上几条关键配置interfaceFastEthernet0/0ipaddress54interfaceSerial0/0ipaddress若为DCE配置时钟,自己配置如果为动态NAT，不使用超载，该如何配置？ipnatinsidesourcelist1poolMY-NAT,Experiment20DHCP,54/24,基本配置R2：基本配置同前routerospf1network55area0network55area0,R1：删除所有关于前试验NAT的内容其他基本配置同前Routerospf1Network55area0Network55area0,在路由器R1创建R1所连接本地网地址池ipdhcppoolMYLANnetworkdefault-router54（以太网口IP）dns-serverdomain-netbios-name-server172.16.0.*,测试:PC改为自动获取选做内容：从地址池中排除保留地址ipdhcpexcluded-address1,DHCP中继在路由器R1创建R2所连LAN地址池ipdhcppoolremotenetworkdefault-router54dns-server00domain-netbios-name-server61.1.1.*配置DHCP中继interfacefastethernet0iphelper-address54,Experiment21Frame-Relay,103,104,R1,R2,R3,,,301,S0/0,S0/0,S0/1,S0/1,帧中继交换机配置(R2)：Frame-relayswitchinginterfaceSerial0/0noshutnoipaddressencapsulationframe-relayclockrate128000frame-relaylmi-typeciscoframe-relayintf-typedce(dte)frame-relayroute103interfaceSerial0/1301,interfaceSerial0/1noshutnoipaddressclockrate128000encapsulationframe-relayframe-relaylmi-typeciscoframe-relayintf-typedce(dte)frame-relayroute301interfaceSerial0/0103,R1：ConfigtInterfaces0/0IpaddressNoshutEncapsulationframe-relayFrame-relaylmi-type?Showframe-relaypvcShowframe-relaymay,R3ConfigtInterfaces0/1IpaddressNoshutEncapsulationframe-relayFrame-relaylmi-type?Showframe-relaypvcShowframe-relaymayPing测试,ping自己是否可以ping通?,手工映射：R1:关自动映射,在接口模式noframe-relayinverse-arpframe-relaymapip103Showframe-relaymapClearframe-relayinarpR3：同上，注意ip和DLCI是不一样的.配置时，ip地址用的时对方的IP，DLCI为自己的Ping测试,Experiment22Frame-Relay,帧中继交换机配置：interfaceSerial0/0noshutnoipaddressencapsulationframe-relayclockrate128000frame-relaylmi-typeciscoframe-relayintf-typedceframe-relayroute103interfaceSerial0/1301frame-relayroute104interfaceSerial0/2401,interfaceSerial0/1noshutnoipaddressclockrate128000encapsulationframe-relayframe-relaylmi-typeciscoframe-relayintf-typedceframe-relayroute301interfaceSerial0/0103frame-relayroute304interfaceSerial0/2403,interfaceSerial0/2noshutnoipaddressencapsulationframe-relayclockrate128000frame-relaylmi-typ