教你如何配置cisco路由

由但路由器的第一次设置必须通过第一种方式进行,此时终端的硬件设置如下:波特率：9600数据位：8停止位：1奇偶校验:无路由器处于用户命令状态，这时用户可以看路由器的连接状态，访问其它网络和主机，但routerrouterconfigifrouter(config-line)#;router(config-router)#;…5.>结果命令的烦琐，但它还不能完全代替手工设置，一些特SystemConfigurationDialog--Atanypointyoumayenteraquestionmark''forhelp.Usectrlctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Wouldyouliketoentertheinitialconfigurationdialog[yes]:First,wouldyouliketoseethecurrentinterfacesummary[yes]:AnyinterfacelistedwithOKvalue"NO"doesnothaveagurationthodStatusProtocolEthernetunassignedNOunsetupupSerial0unassignedNOunsetupup……………ingglobalparametersesecretisaonewaycryptographicsecretusedinsteadoftheenablepasswwhenitexistsEnterenablesecretciscousingoldersoftwareandsomebootimagesEnterenablepasswordpassConfigureSNMPNetworkManagement[yes]:ConfigureDECnet[no]:ConfigureAppleTalk[no]:ConfigureIPX[no]:ConfigureIP[yes]:ConfigureIGRProuting[yes]:ConfigureRIProuting[no]:………ConfigureAsynclines[yes]:Asynclinespeed[9600]:ConfigureforHWflowcontrol[yes]:ConfigureformodemsyesnoyesConfigurefordefaultchatscript[yes]:ConfigureforDialinIPSLIPPPPaccess[no]:yesConfigureforDynamicIPaddresses[yes]:ConfigureDefaultIPaddressesnoyesConfigureforTCPHeaderCompression[yes]:Configureforroutingupdatesonasynclinksnoy10)是否设置异步口上的其。inuseyesConfigureIPonthisinterface[yes]:Numberofbitsinsubnetfield[0]:ClassCnetworkissubnetbits;maskis/24来：ThefollowingconfigurationcommandscriptwascreatedeRoutertWOhpJtIgRMBOIKVXVGUhesyes态enableable话状态setupconfigterminalendinterfacetypeslot/numberlinetypeslotnumber由设置状态routerprotocol退出局部设置状态e及引导信息showversion查看运行设置showrunning-config查showstartupconfig口信息showinterfacetypeslot/number显iprouter机telnethostname|IPaddress网络侦测pinghostname|IPaddresstracehostnameIPaddress设置命令downd范围A到有效和保留B到有效和保留C和保留D到用于多点广播E用于广播sipmask掩玛(mask)用于识别IP地址中的网络地址位数，IP地址(ip-address)和掩码(mask)相与即得到网络地址。4.使用网络地址翻译(NAT)NAT(NetworkAddressTranslation)起到将内部私有地址翻译成外部合法的全局地址的RFC保留用于私有网络地址分配的.esslistaccesslistnumberpermitsourcesourcewildcard池ipnatpoolnamestart-ipend-ip{netmasknetmask|prefixlengthprefixlengthtyperotary立地址翻译ipnatinsidesource{listaccesslistnumbernamepoolnameoverload]|staticlocal-ipglobal-ip部端口ipnat{inside|outside}routerouteSerial0局地址(一个合法IP地址，它是由NIC或提供商所分配的地址)。命令ipnatpoolc2!ial!accesslistpermitDynamicNATipnatinsidesourcelist2poolc2501overloadlineconsoleexectimeout!linevty04end以人为地指定对某一网络访问时所要经过的路径,在网络结构iprouteprefixmaskaddressinterfacedistance][tagtag] (可选)tagtag:tag值(可选)permanent:指定此路由即使该端口关掉也不被移faceserialunit显示接口状态showinterfacesserial[unit]1注:Router#showinterfaceserial0Serialisup,lineprotocolisupHardwareisMCISerialInternetaddressissubnetmaskisMTU1500bytes,BW1544Kbit,DLY20000usec,rely255/255,load1/255EncapsulationHDLC,loopbacknotset,keepalive setsecLastinput0:00:07,output0:00:00,outputhangneverOutputqueue0/40,0drops;inputqueue0/75,0dropsFiveminuteinputrate0bits/sec, 0packets/secFiveminuteoutputrate0bits/sec,0packets/sec16263packetsinputbytesnobufferReceived13983broadcasts,0runts,0giantsinputerrorsCRC0frame,0overrun,0ignored,2abort22146packetsoutput,2383680bytes,0underruns0outputerrors,0collisions,2interfaceresets,0restarts1carriertransitionsleipaddress!相关命令:lotsrangeslotport注:Router#showcontrollerse1e10/0isup.AppliquetypeisChannelizedE1-unbalancedFramingisCRC4,LineCodeisHDB3Noalarmsdetected.Dataincurrentinterval725secondselapsed):eViolationsPathCodeViolationsSlipSecsFrLossSecsLineErrSecs0DegradedMinsErroredSecsBurstyErrSecsSeverelyErrSecs,TotalData(last24hours)0LineCodeViolations,0odeViolationsSlipSecsFrLossSecsLineErrSecs0DegradedMins,ErroredSecsBurstyErrSecsSeverelyErrSecs,iwritBuildingconfiguration...onfiguration!noserviceudp-small-serversnoservicetcp-small-servers!hostnameshanxi!enablesecret5ablepasswordshanxi!!!controllerE10ngNOCRCchannel-group0timeslots1channelgrouptimeslots2channelgroup2timeslots3!media-type10BaseT!noipaddress!noipmroute-cache!mroutecache!noipmroute-cache!noipclassless!passwordshanxilogin!end跨过同步和异步电路实现路由器到路由器(router-to-router)和主机到网络(host-to-nettionchapchappappapchappapifneededlistnamedefault][caldreroutersernamerouterpasswordxxxeauthenticationchap!stnamerouterusernamerouter1passwordxxxthenticationchapinkAccessProcedureBalanced用于DTE/DCE连接的帧格式。的第一网络设备分为数据终端设备(DTE)、数据电路终端设备(DCE)及分组交换设备(PS端口都具有一个地址，当用户申请到的是SVC(交换虚电路)时，一端的用户在访问另一端的用户时，首先将呼叫对方地址，然，如果接受请求，于是连接建立实现数据传输，当没程就类似我们拨打普通电话一样，其不同的是可以实DDN专线。encapsulationx25[dce]xaddress址映射x25mapprotocoladdress[protocoladdressprotocoladdressx121-address[option]设置最大的双向虚电xhtccitcuitnumber接可同时建立的虚电路数x25nvccount2esshowxinterfaceshowxmapshowxvc机端口的设置来配置路由器的相关参数，若出现参xaddress0101x25htc16x25nvc2xmapipbroadcastx25mapip110103broadcast!xaddress0102x25htc16x25nvc2xmapipbroadcastx25mapip110103broadcast!xaddress0103x25htc16x25nvc2xmapipbroadcastx25mapip110102broadcast!子接口(Subinterface)是一个物理接口上的多个虚接口，可以用于在同一个物理接口上接口，而不会再分配路由更新回到此路由被接收的接口。无vc，从同一接口来的路由更新信息不可以再被发回到相同的接e。你可以将路由器逻辑地连接到相同物理接口的不同子接口,这xaddress0101x25htc16x25nvc2xmapipbroadcast!erripnetwork!ionxx25htc16x25nvc2xmapipbroadcast!erripnetwork!ionxx25htc16x25nvc2!xmapip110101broadcast!xmapip110102broadcast!erripnetwork!据包交换，是的简化版本。它省略了的一些强健功能，如提供窗口和数据重发，而是依靠帧中继广域网的设备分为数据终端设备(DTE)和数据电路终端设备(DCE)，Cisco路由条定义好的通信链码。这种通过帧中继虚电路实现，每个帧中继虚电路都以数DLCI自己。DLCI的值一般由帧中继提供商指定。帧中继即支持PVC帧中继本地管理接口(LMI)是对基本的帧中继标准的扩展。它是路由器和帧中继交换机制。它提供了许多管理复杂互联网络的特性，其中包括2).有关命令:framerelayinterfacedlcidlci[broadcast]elay!topointframe-replyinterface-dlci105!topointframe-replyinterface-dlci102!topointframe-replyinterface-dlci104!ialonframerelay!topointframereplyinterfacedlci201!topointipaddressframe-replyinterface-dlci203!routeshowinterfacesserialgotop4).帧中继Multipoint配置实例:eply!framereplymapipbroadcastframereplymapipbroadcastframereplymapipbroadcast!ialonframereply!mapipbroadcastmapipbroadcastframe-replymapip102broadcast!SDNISDN综合数字业务网(ISDN)由数字电话和数据传输两部分组成，一般由电话局提供这种。ISmapprotocolnext-hop-address[namehostname][broadcast][dial-string]启动tusdmbertimerstraliabasictsAustralianTS013switchesbasictrGerman1TR6ISDNswitchesbasic-nwnet3NorwayNET3switches(phase1)basicnetNETISDNswitches(UK,Denmark,andothernationscoverstheEuroISDNE-DSS1signallingsystemprimarynetNETswitchesUKandEurope)renchVNISDNswitchesrenchVNISDNswitchesapaneseNTTISDNswitchesimarynttJapaneseISDNPRIswitchesrthAmericabasicessATTbasicrateswitchesbasicdmsNTDMS-100basicrateswitchesbasicniNationalISDN1switchesprimaryessATTESSswitchtypeforthe.(ISDNPRIonly)primaryessATTESSswitchtypeforthe.(ISDNPRIonly)primarydmsNTDMSswitchtypeforthe.(ISDNPRIonly)NewZealandbaetswitcheserouterserrouterpasswordcisco!t!alermapipnamerouterdialerloadthresholdpppmultilinkdialergroup1pppauthenticationchap!dialer-list1protocolippermit!erouterserrouterpasswordcisco!t!pppdialermapipnamerouter1571dialerload-threshold80pppmultilinkdialer-group1pppauthenticationchap!dialer-list1protocolippermit!erouterserrouterpasswordcisco!t!pppdialermapipnamerouter2classs3572dialerload-threshold80pppcallbackacceptpppmultilinkdialer-group1pppauthenticationchap!map-classdialers3dialercallback-serverusernamedialer-list1protocolippermit!erouterserrouterpasswordcisco!t!pppdialermapipnamerouter1571dialerload-threshold80pppcallbackrequestpppmultilinkdialer-group1pppauthenticationchap!dialer-list1protocolippermit!ebugpppauthenticationdebugppperrordebugpppnegotiationdebugppppacketowisdnstatusrdebugdialergrouter1#00:03:50:%LINK-3-UPDOWN:InterfaceBRI0:1,changedstatetoup00:03:50:BRI0:1PPcallbackCallbackserverstartingtorouter257200:03:50:BRI0:1:disconnectingcall00:03:50:%LINK-3-UPDOWN:InterfaceBRI0:1,changedstatetodown00:03:50:BRI0:1:disconnectingcall00:03:50:BRI0:1:disconnectingcall00:03:51:%LINK-3-UPDOWN:InterfaceBRI0:2,changedstatetoup00:03:52:callbacktorouter2alreadystarted00:03:52:BRI0:2:disconnectingcall00:03:52:%LINK-3-UPDOWN:InterfaceBRI0:2,changedstatetodown00:03:52:BRI0:2:disconnectingcall00:03:52:BRI0:2:disconnectingcall00:04:05::Callbacktimerexpired00:04:05:BRI0:beginningcallbacktorouter257200:04:05:BRI0:Attemptingtodial57200:04:05:Freeingcallbacktorouter257200:04:05:%LINK-3-UPDOWN:InterfaceBRI0:1,changedstatetoup00:04:05:BRI0:1:Nocallbacknegotiated00:04:05:%LINK-3-UPDOWN:InterfaceVirtual-Access1,changedstatetoup00:04:05:dialerProtocolupforVi100:04:06:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceBRI0:1,changedstatetoup00:04:06:%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceVirtual-Access1,changedstatetoup00:04:11:%ISDN-6-CONNECT:InterfaceBRI0:1isnowconnectedto572#router1ipnatinsideoutside}nameCisco!t!noipdomain-lookup!ernetutdown!ialdescriptionpaddress!interfaceSerial1descriptionpaddress!ppppppauthenticationpapcallinltilinkdialer-group1dialerhold-queue10rstringdialeridle-timeout120ppppapsentusername263password263nablehorizonown!!!iproutebriAccessControlList2!access-list2permitany!dialer-list1protocolippermit!!DynamicNAT!ipnatinsidesourcelist2interfacebri0overloadsnmp-servercommunitypublicro!lineconsole0exec-timeout00!linevty04!endmcc>setmultidestinationonetppmultilinkonansetiproutingoncLANsetipaddresssetipnetmaskenetNewuserremotenetbeingcreatedotenetsetiproutingonetsetbridgingoffsetipframingnoneotenetsetpppclientnametsetppppasswordclientEnternewPassword263ReTypenewPassword63tsetpppauthenticationoutnoneotenetsetipaddresstiationlocalonotenetsetippatonmotenetsetiproutedestinationtivesetsystemc65setmultidestinationonpppmultilinkondingoff拨号连接参数-可以设置多个用户预制文件用于相同的物理端setpppclientname3setppppasswordclientEnternewPasswordReTypenewPasswaddressnegotiationlocalonetippatonumbersetactive用一般可分为两种类型，一种是同等级别机构之间以dressipaddresspooldhcpproxyclientlocal]流控方式flowcontrol{none|software[lock][in|out]|hardware[ineRouter现用户认证功能.rizationnetworktacacsserverkeytacerouter!wmodelaaaauthenticationlogindefaulttacacs+aaaauthenticationloginno_tacacsenableaaaauthenticationpppdefaulttacacs+aaaauthorizationexectacacs+aaaauthorizationnetworktacacs+aaaaccountingexecstart-stoptacacs+aaaaccountingnetworkstart-stoptacacs+enablesecrethvE!!ressress!tationpppasyncmodeinteractivepeerdefaultipaddresspoolCisco2511-Group-142nocdpenablegroup-range116!iplocalpoolCisco2511-Group-142erverhosttacacsserverkeytaclineconexectimeoutpasswordcicologinauthenticationnotacacslineloginauthenticationtacacsmodemInemautoconfiguretypeusrcourierautocommandppptransportinputallstopbitsrxspeedtxspeed200flowcontrolhardwarelineaux0transportinputvtypasswordciscoendeEECTSENDEECTSENDetc置端口在挂断前的等待时间dialeridle-timeoutseconds的映射dialermapprotocolnext-hop-address[namehostnamebroadcastmodemscriptmodemregexp[system-scriptsystem-regexp]dialstringdialerstringdial-string指定在特定线路下路由器默tnameeRouter!enablesecretQKIwXjpFqC4vDAyKBUMallw/!usernameRouter2passwordciscochat-scriptcisco-default"""AT"TIMEOUT30OK"ATDT\T"TIMEOUT30CONNECT!!pppdefaultroutingmodededicatedialeridletimeoutdialermapipnameRouter2modem-scriptltdialer-group1authenticationchap!iproutedialerlistprotocolippermit!linecon0lineaux0modemInOutmodemautoconfigurediscoveryflowcontrolhardwarestnameRouter!enablesecret51F6EV5U8puzNt2/9g.!usernameRouter1passwordcisco!!routingicatedletimeouteRouterdialer-group1authenticationchap!iproutedialerlistprotocolippermit!linecon0lineaux0modemInOutmodemautoconfigurediscoveryflowcontrolhardware!negotiationdebugppppacketshowdialer方法不适合为做备份。因为，配置封装为的接口只要和交换pupdelayenabledelaynever}{disable-delay|never}指定一个接口作为备份接ackupinterfacetypenumberstnamecrb!enablesecret51J5vnceYDe2FwPhrZi6qsIIz6g0blepasswordcisco!usernamec4700password0ciscochat-scriptcisco-default"""AT"TIMEOUT30OK"ATDTOUTCONNECTcetatz!noipmroute-cache!backupdelay1010backupinterfaceSerial2noipmroute-cachenofair-queue!noipaddressmroutecache!physical-layerasyncationpppasyncmodededicatednddialeridle-timeout60dialermapipnamec47006825179dialer-group1pppauthenticationchap!noipaddressnable!noipaddressnocdpenable!noipaddressnoipmroute-cache!noipaddressnoipmroute-cache!noipaddressnoipmroute-cache!noipaddressnoipmroute-cache!noipaddressnoipmroute-cache!noipaddressnoipmroute-cache!routereigrp200network!ipclassless!dialer-list1protocolippermit!linecon0line2scriptdialercisco-defaultscriptresetresetmodemInOutmodemautoconfigurediscoveryrxspeed38400txspeed38400flowcontrolhardwarelineaux0linevty04passwordciscologin!endc2522rb#4.异步拨号备份:必须运行路由,异步拨号口必须使用静态路由.本例选择题时,路由器无法通过路由学习到路由表，则此时静态路由生效，访问通过拨号端口实erouter!enablesecret5.blepasswordcisco!usernamerouter2passwordciscochat-scriptcisco-default"""AT"TIMEOUT30OK"ATDT\T"TIMEOUT30CONNECTcriptresetatz!x25htc16pbroadcast!noipaddress!!interfaceAsync1ationpppnddialeridle-timeout60dialermapipnamerouter2modem-scriptltdialer-group1authenticationchap!routereigrp200redistributeconnectedk!iproute200dialer-list1protocolippermitlinecon0lineaux0scriptdialercisco-defaultscriptresetresetmodemInOutmodemautoconfigurediscoverytransportinputallrxspeed38400txspeed38400flowcontrolhardwarelinevty04passwordciscologin!endhostnamerouter2!enablesecret51T4IU2cIqak8f/blepasswordciscox25htc16!usernamerouter1passwordciscochat-scriptcisco-default"""AT"TIMEOUT30OK"ATDT\T"TIMEOUT30CONNECTcriptresetatz!!noipmroute-cachesulationxaddresspbroadcast!noipaddress!ationpppkeepalive30asyncdefaultroutingasyncmodededicatednddialeridle-timeout60dialerwait-for-carrier-time120dialermapipnamerouter1modem-scriptltdialer-group1authenticationchap!routereigrp200redistributestatick!noipclasslessiproute200dialer-list1protocolippermit!linecon0exec-timeout00lineaux0scriptresetresetmodemInOutmodemautoconfigurediscoverytransportinputallrxspeed38400txspeed38400flowcontrolhardwarelinevty04passwordciscoRIP(RoutinginformationProtocol)是应用较早、使用较普遍的内部网关(InteriorGahopcount离，跳跃计数是一个包到达目标所必须经过的路由tworksipversion2network!tworkripaddressouterigrpnetwork!ssidnetworkaddresswildcardmaskareaareaid指定与该路由器相邻的节点地址基本配置举例:!ial!routerospf100networkarea0networkarea1!ernet!ial!routerospf200networkarea0networkarea2!!routerospf300networkarea1!ernet!routerospf00networkarea1!ospfdatabaseshowipospfinterfaceshowipospfneighborshowiproutemd纯文本身份验证传送的身份验证口令为纯文本，它会被网，不建议使用。而消息摘要(md5)身份验证在传输身份验证口器接口必须使用相同的身份验证方法。为起用身份验验证areaarea-idauthentication[message-digest]使用纯文本ipospfauthenticationkeypasswordmd验证ipospfmessagedigest-keykeyidmd5key!ial!routerospf100networkarea0networkarea1uthentication!ernet!ialnkeycisco!routerospf200networkarea0networkarea2area0authentication!!ialedigestkeymdcisco!routerospf100networkarea0networkarea1area0authenticationmessage-digest!!ialedigestkeymdcisco!routerospf200networkarea0networkarea2area0authenticationmessage-digest!直连的路由redistributeconnected重新分配静态路由redistribe!ial!routerospf100redistributeripmetric10networkarea0!ipversion2redistributeospf100metric1!interfaceloopback1!ernet!ial!routerospf200tributeconnectedsubnettributestaticsubnetnetworkarea0!!ernet!erripversion2!ernet!interfaceethernet1!iproute!Ethernetnovell-ether(默认)arpasapsnaphernetIIEthernetSnapTokenRingsapsnapToken-RingnRingSnapFDDIsnap认)sapnovell-fddiFddi_SnapRawionsap!ial!ereigrpnetworka0network2a00!ernetbencapsulationsap!ial!ereigrpnetworkb0network3a00!fdebugipxspxshowipxeigrpinterfacesshowipxeigrpneighborsshowipxeigrptopologyshowipxinterfaceshowipxrouteshowipxserversshowipxspx-s务命令设置优先级表项目priority-listlist-numberprotocolprotocolhighmediumnormal|low}queue-keyw,ordkeyword-value的优先级表priority-grouplist-numberRouterprioritylistprotocoliphightcptelnetprioritylist1protocoliplowtcpftppriority-list1defaultnormalinterfaceserial0priority-group1protocolprotocolnamequeuenumberqueuekeywordkeywordvalue置队列表中队queuelistlistnumberqueuequeuenumberbyte-countbyte-count-number用指定的队列表custom-queue-listlistocoliptcpftpqueuelistqueuebytecountqueuelistqueuebytecountqueuelistqueue2byte-count100inrfaceserial二、交换机间链路(ISL)custom-queue-list11．有关命令任务命令设置访问表项目access-listlist{permit|denyaddressmask大小queue-listlist-numberqueuequeue-numberbyte-countbyte-count-number使用指定的访问表ipaccess-grouplist{inaccess-list1deny55access-list1permitanyinterfaceserial0oupin第五章虚拟局域网(VLAN)路由网络的。交换将共享介网络速度。虚拟网络打破了地理环境的制约,在不改动网络物理工作站在工作组或子网之间移动,工作站组成逻辑工作组或虚拟能,均衡网络数据流量,合理利用硬件及信息资源。同时,利用网间如何通讯的问题．三、虚拟局域网(VLAN)路由实例szVHIRhrzhVDUszVHIRhrzhVC!tembaudmmodemdisablestemnameCcationact!setinterfacesc01acescupsetinterfaceslaceslupmeesetiproute1!Commandalias!hneserverbleningdisablesetvtppruneeligible2-1000clearvtppruneeligible1001-1005medefaulttypeethernetmtusaidsetvlannamergwtypeethernetmtusaidsetvlannameqbwtypeethernetmtusaidannamefddidefaulttypefddimtusaidvlannamefddinetdefaulttypefddinetmtuateactivebridgexstpieeevlannametrnetdefaulttypetrbrfmtuidstateactivebridg