iprouting启用IP路由功能

1、ip routing启用IP路由功能no ip routing关闭IP路由功能ip source routing IP源路由，如果依靠IP源地址做确认的服务将产生问题并且会被非法入侵路由器的ip routing是缺省启用的，关闭ip routing是为了把路由器当做一台主机来用，所以此时要配上ip default-gateway ，就象在自己的 PC上设置缺省网关一样。有时候会在三层交换机上使用，打开三层交换机的路由功能！(1) 配置三层交换机启动路由功能：ip rout ing(2) 配置 VLAN IP 地址：in terface vlan via n-idIp address ip-ad

2、dress sub net-maskNo shutdow n(3) 配置接口为三层模式：no switchport配置DHCP中继转发：int vlan vlan-idIp helper-address Dhcpserver-address(5) 配己置静态路由：ip route target net-address n etmask n exthop-address(6) 配置 RIP 协议：router ripNetwork n etaddress(7) 查看 FIB 表：show ip cef(8) 查看邻接关系表：show adjace ncy detail(9) 查看路由表： sho

3、w ip route设置虚拟局域网 vlan 1 in terface vlan 1switch> en ableswitch # c on figure termi nalswitch(c on f)#host name aptch2950aptech2950(co nf)# in terface vlan 1子网掩码aptech2950(co nf-if)# no shut是配置处于运行中aptech2950(co nf-if)#exit2010-05-31 11:30 CICSO 必会命令PCA logi n: rootpassword: linux# shutdow n -h n

4、ow# init 0# logout|EPs# logi nNU# ifconfig# ifconfig eth0 <ip address> n etmask <n etmask># ifconfig eht0 <ip address> n etmask <n etmask> dow n ;#配置交换机端口ip和设置网关地址;使用root用户;口令是;关机;关机;显示IP地址;设置IP地址删除IP地址;设置网关# route add default gw <ip># route del default gw <ip>删除网

5、关# route# pi ng <ip># telnet <ip>显示网关;建立tel net之前先ping 下AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAswitch#vla n database;进入VLAN设置switch(vla n) #vla n 2；建 VLAN 2switch(vla n)# no vla n 2;删 vlan 2switch(co nfig)#i nt fO/1;进入端口 114switch(c on fig-if)#switchport access vla n 2;当前端口 1加

6、入VLAN 2switch(c on fig-if)#switchport mode trunk;设置为干线switch(config-if)#switchport trunk allowed vlan 1,2;设置允许的vlanswitch(c on fig-if)#switchport trunk en cap dot1q;设置vlan中继switch(c on fig)#vtp domai n <n ame>设置发vtp域名4交换机VLAN设置switch(c on fig)#vtp password <word>switch(c on fig)#vtp mode

7、 serverswitch(c on fig)#vtp mode clie ntswitch(c on fig)# in terface vla n 1;进入vlanswitch(c on fig-if)#ip address <IP> <mask>添加远程登录IPswitch(c on fig)#ip default-gateway <IP>添加默认网关交换机设置IP地址：switch#dir flash:;查看内存交换机显示命令： switch#write switch#show vtp switch#show run switch#show vla n

8、 switch#show in terface switch#show int fO/O;写入保存;查看当前配置信息；看 VLAN；显示所有端口信息;显示端口 0的信息路由器显示命令：b配置IP地址：router(c on fig)# int s0/0router(c on fig-if)# no shutdow nrouter(co nfig-if)#clock rate 64000router(co nfig-if)#i nt f0/0.1router(c on fig-subif.1)#ip address <ip> <n etmask>router(config

9、-subif.1)#encapsulation dot1q <n>router(c on fig)#c on fig-register 0x2142router(c on fig)#c on fig-register 0x2102router#reload;进行串Serail接口;起动接口;设置时钟-;设置IP地址和子网掩码 ;进入子接口;跳过配置文件;正常使用配置文件;重新引导rommo n> TFTP_FILE=c2600.b inrommon> tftpd nldrommon> dir flash:rommon> boot静态路由：#ip route

10、<ip-address> <sub net-mask> <gateway>动态路由：”router(c on fig)#ip routi ngrouter(c on fig)#router riprouter(c on fig-router)# network <n etid>router(c on fig-router)# negihbor <ip-address>帧中继命令：router(c on fig)# frame-relay switch ingrouter(c on fig-sO)# en capsulati on fr

11、ame-relay;设置路由器IP;设置路由器掩码;指定TFTP服务器;所要下载的文件;ROM监控状态下升级;查看闪存中的内容;引导IOS例：;启动路由;启动RIP路由协议。;配置范围，有的支持;点对点帧中继用;使能帧中继交换;使能帧中继;DCE端（需要配虚电路）router(c on fig-sO)# frame-relay in tf-type DCE;配置虚电路号router(c on fig-sO)# frame-relay local-dlci 20基本访问控制列表:router(config)#access-list <number> permit|deny <s

12、ource ip> <wild|any>；default: deny any；default: outrouter(c on fig)# in terface <in terface>router(c on fig-if)#ip access-group <nu mber> in|out例：RB(c on fig)#access-list 4 permit anyRB(co nfig)#i nt f0/0-tRB(c on fig-if)#ip access-group 4 in扩展访问控制列表：access-list<nu mber>permit|de nyicmp <SourcelP wild><dest in ati onIP&wild>typeaccess-list <nu mber>permit|de nytcp <SourceIP wild><dest in ati onIPwild>portrouter(c on fig)#access-list 101 permit ip any anyrouter(c on fig)# int s0/0router(c on fig-if)#ip access-group 101 in例2 :route