课程三与实验一、CISCO 路由器操作与配置Cisco IOSppt课件

1、第四章操作与配置Cisco IOS设备本章目的经过本章的学习，您应该掌握以下内容:开启交换机和路由器并察看其启动过程留意交换机的出厂初始配置情况，完成路由器的初始参数配置在网络设备上进入并辨识不同的命令方式本章目的(续)在不同的用户界面下运用各种协助和命令行编辑功能查看并确认并于各网络设备的根本信息 Cisco IOS 软件提供多种网络效力进而支持各种网络运用.Cisco 互连网操作系统(IOS)软件网络设备的配置基于以下各方面来配置设备: 所需功能的网络战略 与协议关联的地址和相关参数 管理方面的需求 交换机将出厂缺省设置作为初始配置假设路由器中没有配置文件，会提示进入初始化设置过程 硬件自

2、检定位并加载Cisco IOS映象文件定位并运转配置文件Cisco设备的简单启动过程可以经过多种途径来配置配置直接在设备的内存中生效控制端口Aux 端口端口PC or Unix效力器Web 或网络管理效力器 虚拟终端多种途径的配置TelnetTFTP提供命令行界面在不同的网络设备上运转时有差别 在命令方式下可以键入或粘贴命令 键入命令后回车，设备即解析和执行所键入的命令两个主要命令方式是用户方式和特权方式不同的命令方式有不同的提示符CiscoIOSCisco IOS用户界面的根本特性用户方式对交换机和路由器的有限操作命令提示符为 主机名主要有两个命令方式提供命令键入.方式一:Cisco IOS

3、的主要命令方式特权(或enabled)方式对交换机和路由器更深化的操作有配置和监视权益是进入其它配置方式的前提命令提示符为 主机名#方式二 (也是最常用的方式):Cisco IOS的主要命令方式(续)系统启动例程会初始化交换机初始启动利用缺省配置参数1. 启动前确认正确衔接线缆和控制线2. 接入电源3. 察看启动顺序面板上的指示灯LEDsCisco IOS输出到控制台上的内容交换机的初始启动检查交换机指示灯(LEDs)交换机自检期间的端口指示灯 1. 启动时，一切端口指示灯变绿.2. 每个端口自检终了，对应的指示灯熄灭.3. 假设端口自检失败, 对应指示灯呈黄色.4. 假设有任何自检失败情况，

4、系统指示灯呈现黄色.5. 假设没有自检失败, 自检过程完成.6. 随着自检过程的完成, 指示灯闪亮后熄灭.交换机初次启动时的显示信息控制台衔接Catalyst 1900 Management ConsoleCopyright (c) Cisco Systems, Inc. 1993-1998All rights reserved.Enterprise Edition SoftwareEthernet Address: 00-50-BD-73-E2-C0PCA Number: 73-3121-01PCA Serial Number: FAA0252A0QXModel Number: WS-C19

5、24-ENSystem Serial Number: FAA0304S0U3Power Supply S/N: PHI025101F3-1 user(s) now active on Management Console. User Interface Menu M Menus K Command Line I IP ConfigurationEnter Selection: 控制台登入交换机并键入特权方式密码 enableEnter password:# disable quit用户方式提示特权方式提示上下文关联协助错误信息提示指出所输入交换机命令的错误所在，以便于修正或纠正.可以重新调出一

6、个较长或较复杂的命令或其它内容，用来再次运转、查看或修正. 之前命令保管区交换机命令行协助机制提供命令清单和与特定命令相关联的参数. Switch#show interfacesSwitch#show version显示交换机初始启动的形状Switch#show running-config显示交换机的各种运转形状wg_sw_c#show versionCisco Catalyst 1900/2820 Enterprise Edition SoftwareVersion V8.01.01 written from 171.068.229.225Copyright (c) Cisco Syste

7、ms, Inc. 1993-1998wg_sw_c uptime is 15day(s) 21hour(s) 53minute(s) 11second(s) cisco Catalyst 1900 (486sxl) processor with 2048K/1024K bytes of memoryHardware board revision is 5Upgrade Status: No upgrade currently in progress. Config File Status: No configuration upload/download is in progress 27 F

8、ixed Ethernet/IEEE 802.3 interface(s)Base Ethernet Address: 00-50-BD-73-E2-C0交换机之show version 命令wg_sw_c#show runBuilding configuration.Current configuration:!hostname wg_sw_c!ip address 3 ip default-gateway !interface Ethernet 0/1interface Ethernet 0/24!Interface Ethernet 0/25!interface FastEthernet

9、 0/26!interface FastEthernet 0/27交换机之show running-configuration 命令wg_sw_c#show runBuilding configuration.Current configuration:!hostname wg_sw_c!ip address 3 ip default-gateway !interface Ethernet 0/1interface Ethernet 0/12!Interface Ethernet 0/25!interface FastEthernet 0/26!interface FastEthernet 0

10、/27Catalyst 1924Catalyst 1912wg_sw_c#show interfaces ethernet 0/1Ethernet 0/1 is Enabled Hardware is Built-in 10Base-TAddress is 0050.BD73.E2C1MTU 1500 bytes, BW 10000 Kbits802.1d STP State: Forwarding Forward Transitions: 1Port monitoring: DisabledUnknown unicast flooding: Enabled Unregistered mult

11、icast flooding: Enabled Description: Duplex setting: Half duplex Back pressure: Disabled-More-交换机之show interfaces命令wg_sw_a#show ip IP Address: 1Subnet Mask: Default Gateway: Management VLAN: 1Domain name: Name server 1: Name server 2: server : Enabled port : 80RIP : Enabledwg_sw_a#查看交换机的IP地址配置方式:全局配

12、置方式 wg_sw_a# conf termwg_sw_a(config)#端口配置方式wg_sw_a(config)# interface e0/1wg_sw_a(config-if)#配置交换机配置交换机的各种标识为交换机设置本地标识交换机名(config)#hostname wg_sw_cwg_sw_c(config)#wg_sw_a(config)# ip address ip address maskwg_sw_a(config)#ip address 1 配置交换机IP地址系统启动例程会初始化路由器假设需求，路由器可以有选择性地回退启动Check hardwareFind and

13、load Cisco IOSsoftware image Find and apply routerconfiguration information Load Bootstrap1.启动前确认正确衔接线缆和控制线2.按下电源开关3.察看启动顺序 Cisco IOS输出到控制台上的内容Cisco路由器的初始启动没有配置文件与有配置文件的路由器启动对比- System Configuration Dialog -Continue with configuration dialog? yes/no:yes At any point you may enter a question mark ? f

14、or help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .Setup方式wg_ro_c con0 is now availablePress RETURN to get started.用户方式提示wg_ro_c路由器启动时在控制台上的输出内容控制台Setup: 初始配置对话框 Router#setup - System Configuration Dialog -Continue with configuration dialog? yes/n

15、o: yAt any point you may enter a question mark ? for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .Basic management setup configures only enough connectivityfor management of the system, extended setup will ask youto configure each interface on

16、the systemWould you like to enter basic management setup? yes/no: n预先阅读端口配置情况First, would you like to see the current interface summary? yes:Interface IP-Address OK? Method Status ProtocolBRI0 unassigned YES unset administratively down downBRI0:1 unassigned YES unset administratively down downBRI0:2

17、 unassigned YES unset administratively down downEthernet0 unassigned YES unset administratively down downSerial0 unassigned YES unset administratively down down自检过程中所找到的端口设置全局参数初始化全局参数Configuring global parameters: Enter host name Router:wg_ro_c The enable secret is a password used to protect access

18、 to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: cisco The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password:

19、 sanfran The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: sanjose Configure SNMP Network Management? no:设置全局参数(续)初始化协议配置 Configure LAT? yes: n Configure AppleTalk? no: Configure DECnet? no: Configure IP? yes: Configure I

20、GRP routing? yes: n Configure RIP routing? no: Configure CLNS? no: Configure IPX? no: Configure Vines? no: Configure XNS? no: Configure Apollo? no:设置端口参数BRI interface needs isdn switch-type to be configured Valid switch types are : 0 none.Only if you dont want to configure BRI. 1 basic-1tr6.1TR6 swi

21、tch type for Germany 2 basic-5ess.AT&T 5ESS switch type for the US/Canada 3 basic-dms100.Northern DMS-100 switch type for US/Canada 4 basic-net3.NET3 switch type for UK and Europe 5 basic-ni.National ISDN switch type 6 basic-ts013.TS013 switch type for Australia 7 ntt.NTT switch type for Japan 8 vn3

22、.VN3 and VN4 switch types for France Choose ISDN BRI Switch Type 2:Configuring interface parameters:Do you want to configure BRI0 (BRI d-channel) interface? no:Do you want to configure Ethernet0 interface? no: y Configure IP on this interface? no: y IP address for this interface: 3 Subnet mask for t

23、his interface : Class A network is , 24 subnet bits; mask is /24Do you want to configure Serial0 interface? no:设置脚本确实认与运用The following configuration command script was created:hostname Routerenable secret 5 $1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enable password sanfranline vty 0 4password sanjoseno snmp-serv

24、er!no appletalk routingno decnet routingip routingno clns routingno ipx routingno vines routingno xns routingno apollo routingisdn switch-type basic-5essinterface BRI0shutdownno ip address!interface Ethernet0no shutdownip address 1 no mop enabled!interface Serial0shutdownno ip addressend0 Go to the

25、IOS command prompt without saving this config.1 Return back to the setup without saving this config.2 Save this configuration to nvram and exit.Enter your selection 2:Consolewg_ro_cwg_ro_cenablewg_ro_c#wg_ro_c#disablewg_ro_cwg_ro_clogoutwg_ro_c con0 is now availablePress RETURN to get started.用户方式提示

26、特权方式提示登入路由器 只需所输命令串在全部命令中是独一的，可以将一个命令尽能够地简写，路由器在用户方式下的命令清单wg_ro_c?Exec commands: access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off

27、 privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC- More -wg_

28、ro_c#?Exec commands: access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry bfe For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure

29、 Enter configuration mode connect Open a terminal connection copy Copy from one file to another debug Debugging functions (see also undebug) delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on pr

30、ivileged commands erase Erase a filesystem exit Exit from the EXEC help Description of the interactive help system- More -路由器在特权方式下的命令清单只需输入部分命令串(独一表示某个命令)，紧接着按tab键就可以完好地输入一个命令路由器命令行协助机制上下文关联协助错误信息提示指出所输入交换机命令的错误所在，以便于修正或纠正.可以重新调出一个较长或较复杂的命令或其它内容，用来再次运转、查看或修正. 之前命令保管区提供命令清单和与特定命令相关联的参数. 路由器的上下文相关联协助

31、Router# clokTranslating CLOK% Unknown command or computer name, or unable to find computer addressRouter# cl?clear clockRouter# clock% Incomplete command.Router# clock ?set Set the time and dateRouter# clock set% Incomplete command.Router# clock set ?hh:mm:ss Current Time 符号解析命令提示调出最近用过的内容路由器的上下文相关联

32、协助(续)Router# clokTranslating CLOK% Unknown command or computer name, or unable to find computer addressRouter# clear clockRouter# % Incomplete command.Router# set Set the time and dateRouter# % Incomplete command.Router# hh:mm:ss Current TimeRouter# clock set 19:56:00% Incomplete command.Router# clo

33、ck set 19:56:00 ? Day of the monthMONTH Month of the yearRouter# clock set 19:56:00 04 8 % Invalid input detected at the markerRouter# clock set 19:56:00 04 August% Incomplete command.Router# clock set 19:56:00 04 August ? Year命令提示语法检查命令提示RouterShape the future of internetworking by creating unprece

34、d运用加强的编辑命令“Shape the future of internetworking by creating unprecedented value for customers, employees, and partners.上述文字段在输入时会超出一行Router$ future of internetworking by creating unprecedented op运用加强的编辑命令(一行中长字串会自动滚卷).RouterShape the value of internetworking by creating unpreced运用加强的编辑命令(一行中长字串会自动滚卷)

35、.光标挪动到命令行的开场位置.Router$ value for customers, employees, and partners.运用加强的编辑命令(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.运用加强的编辑命令(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.回移一个单词Router$ value for customers, employees, and partners.运用加强的编辑命令(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.回移一个单词.下移一个字符.Router

36、$ value for customers, employees, and partners.运用加强的编辑命令(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.回移一个单词下移一个字符.回移一个字符.Router$ value for customers, employees, and partners.运用加强的编辑命令(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.回移一个单词下移一个字符.回移一个字符.下移一个单词Router$ value for customers, employees, and partners

37、.(一行中长字串会自动滚卷).光标挪动到命令行的开场位置.光标挪动到命令行的终了位置.回移一个单词下移一个字符.回移一个字符.下移一个单词运用加强的编辑命令删除当前字符Router$ value for customers, employees, and partners.Ctrl-P or Up arrow调出最近(前一)运用过的命令Ctrl-N or Down arrow调出更近运用过的命令Router show history显示命令保管区内容Router terminal history size lines 设置命令保管区大小回览之前用过的命令show version 命令wg_ro

38、_a#show versionCisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(3), RELEASE SOFTWARE (fc1)Copyright (c) 1986-1999 by cisco Systems, Inc.Compiled Mon 08-Feb-99 18:18 by phanguyeImage text-base: 0 x03050C84, data-base: 0 x00001000ROM: System Bootstrap, Ver

39、sion 11.0(10c), SOFTWAREBOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE(fc1)wg_ro_a uptime is 20 minutesSystem restarted by reloadSystem image file is flash:c2500-js-l_120-3.bin(output omitted)-More-Configuration register is 0 x2102查看配置情况控制台IOSSetup utilityshowst

40、artup-configshowrunning-config将配置参数保管到NVRAM中ConfigConfigRAMNVRAMshow running 和 show startup 命令wg_ro_c#show startup-configUsing 9 out of 32762 bytes!version 12.0!- More -wg_ro_c#show running-configBuilding configuration.Current configuration:!version 12.0!- More -保管在NVRAM中保管在RAM中显示当前运转的和保管的配置情况路由器方式一

41、览Router(config)#RouterenableRouter#config termExitCtrl-Z (end)用户方式特权方式全局配置方式配置方式方式提示InterfaceRouter(config-if)#Subinterface Router(config-subif)#Controller Router(config-controller)#LineRouter(config-line)#RouterRouter(config-router)#IPX router Router(config-ipx-router)#保管配置wg_ro_c#wg_ro_c#copy runn

42、ing-config startup-configDestination filename startup-config?Building configurationwg_ro_c#将当前运转的配置复制到NVRAM中配置路由器的各种标识为路由器或其端口设置标识或信息路由器名Router(config)#hostname wg_ro_cwg_ro_c(config)#开机时的固定显示信息wg_ro_c(config)#banner motd # Accounting Department You have entered a secured system. Authorized access o

43、nly! #配置路由器的各种标识为路由器或其端口设置标识或信息路由器名Router(config)#hostname wg_ro_cwg_ro_c(config)#开机时的固定显示信息wg_ro_c(config)#banner motd # Accounting Department You have entered a secured system. Authorized access only! #端口描画wg_ro_c(config)#interface ethernet 0wg_ro_c(config-if)#description Engineering LAN, Bldg. 18

44、Router(config)#line console 0Router(config-line)#loginRouter(config-line)#password cisco控制台密码虚拟终端密码Router(config)#line vty 0 4Router(config-line)#login Router(config-line)#password sanjose路由器密码配置Router(config)#line console 0Router(config-line)#loginRouter(config-line)#password cisco控制台密码虚拟终端密码Router

45、(config)#line vty 0 4Router(config-line)#login Router(config-line)#password sanjose特权方式明文密码Router(config)#enable password cisco特权方式加密密码Router(config)#enable secret sanfran路由器密码配置其它控制台命令Router(config)#line console 0Router(config-line)#exec-timeout 0 0 Router(config)#line console 0Router(config-line)#

46、logging synchronous制止控制台会话自动退出重显被打乱的控制台输入Router(config)#interface type numberRouter(config-if)#端口配置type 包括 serial, ethernet, token ring, fddi, hssi, loopback, dialer, null, async, atm, bri, and tunnelnumber 用来识别详细的单个端口Router(config-if)#exit从当前端口配置方式退出Router(config)#interface type slot/portRouter(con

47、fig-if)#模块化端口的表示法配置串口进入全局配置方式Router(config)#interface serial 0 Router(config-if)#Router#configure termRouter(config)#指定某个端口配置串口进入全局配置方式Router(config-if)#clock rate 64000Router(config-if)#Router(config)#interface serial 0 Router(config-if)#Router#configure termRouter(config)#Router(config-if)#bandwid

48、th 64Router(config-if)#exitRouter(config)#exitRouter#指定某个端口设置时钟频率 (只在DCE端)调协波特率 (建议)Router#show interface serial 0Serial0 is up, line protocol is up Hardware is HD64570 Internet address is /24 MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set,

49、keepalive set (10 sec) Last input 00:00:09, output 00:00:04, output hang never Last clearing of show interface counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/256

50、(active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec(output omitted) 确认参数修正情况以太网的 media-type 命令Router(config)#interface ethernet 2Router(config-if)#media-type 10baset为以太网端口选择适当的

51、介质类型开启或封锁端口Router#configure termRouter(config)#interface serial 0 Router(config-if)#no shutdown%LINK-3-UPDOWN: Interface Seria0, changed state to up%LINEPROTO-5-UPDOWN: Line Protocol on Interface Serial0, changed state to up 开启曾经封锁的端口Router#configure termRouter(config)#interface serial 0 Router(conf

52、ig-if)#shutdown%LINK-5-CHANGED: Interface Serial0, changed state to administratively down %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down 人工封锁端口路由器的 show interfaces 命令Router#show interfacesEthernet0 is up, line protocol is up Hardware is Lance, address is 00e0.1e5d.ae2f (bia 00e0.1e5d.ae2f) Internet address is 1/24 MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255/255, load 1/255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type: ARPA, A