Cisco路由器管理课件

-mm

国”碘

mm

Cisco路由器管理、配置及相关知识

黎耀

Email：yli@hustcc.

IIIHJ

丽睚为内容提要

,Cisco路由器的配置

■Cisco路由器的故障诊断

匈Cisco系列产品介名

“网络和系统安全配置邃议

勤找号服符器的介绍

IIIHJ

CERNET|)

"路由器组成

CPU

FLASH

ROM

RAM

NVRAM

IIIHI

趾疝E珍

min

AnOverviewofSystemStartup

•Checkhardware

•FindandloadCiscoIOS

softwareimage

•Findandapplyrouter

configurationinformation

•Systemstartuproutinesinitiate

routersoftware

•Fallbackroutinesprovidestartup

alternativesasneeded

IIIHI

趾疝E珍

min

StartupSequence

RAM

BootstrapLoadBootstrap

Cisco

InternetworkLocateandLoad

TFTPServerOperatingOperatingSystem

System

LocateandLoad

ConfigurationConfigurationFile

or

FileEncer"setup"Mode

°i

_IIIHI

min

CommandsRelatingtoStartup

Router#showstartup-config

(showconfig)•

Router#showrunning-config

(writeterm)*

Router#erasestartup-config

(writeerase),

Router#reload

Router#setup

MMM

说

mm

Setup:TheSystem-

ConfigurationDialog

#setup

-SystemConfigurationDialog-

Atanypointyoumayenteraquestionmark?forhelp

Usectrt-ctoabortconfigurationdialogatanypronpt

Defaultsettingsareinsquarebrackets*()'.

Continuewithconfigurationdialog?[yesj:

First,wouldyouliketosee»hecuaantinterfacesummary?[yes]:

InterfaceIP-AddressOKMethodStatusProtocol

TokenRingOunassignedNOnotsetdowndown

EthemetOunassignednotsetdowndown

NO

SerialOunassignednotsetdowndown

NO

FddiOunassignednotsetdowndown

NO

IIIHI

SetupGlobalParameters

■*.

Configuringglobalparameters:

Enterhostname[Router]

Ttieenablesecretisaone-waycryptographicsecretused

insteadoftheenablepasswordwhenitexists.

Enterenablesecret[〈Usecurrentsecret*]

,■1­•■•

Enterenablepassword(san-fran):

%Pleasechooseapasswordthatisdifferentfromtheenablesecret

Enterenablepassword[san-fran]:

Ente「virtualterminalpassword|san-fran):

ConfigureSNMPNetworkManagement9|no]:

IIIHI

OverviewoftheUserInterface

♦UserMode

♦PriviledgedMode

IIIHI

LoggingintotheRouter:-CiscoiOS

^□uter>

々ouwr>exit

IIIHI说

mm

Privileged-ModeCommandList

Router*ena

Password:

Router#?

Execcommaridx:

access-enkWeC'reKteatenjxjrKiyAcce»s-Iist«nhy

access-ten中图出Createaterif>ori»iyist«nhy

appnSeida(5oorna:>dtotleAJFNsubsyst«nri

atmsig-JcecjteAtrnSignallingG::nif'iands

bferointarukle'r<«rge?icy、rg8ssetting

calendarManagetie田Gvare(/er&r

cdChangecurentdevk第

clear^es«tfun::gns

clockt^esyRtern

cmtStaitorstopFDDIO0(i>ectic)?iManagenwiritft.rations

configureu:niiguratio'i

connectC)p«naixt'rinal:x)iiiie<^ion

copyCopyconfigurationorimagedata

debugDebuggingfunctions(seealso'undebug")

deleteDeleteafile

dirListfilesongivendevice

-M0<8-

IIIHI

HelpFunctions

Router#clok

Translating"CLOK°

%Unknowncommandorcomputername,orunabletofindcomputeraddress

Router#c1?

clearclockRouter*clockset19:56:00

%Incompletecommand.

Router*clock

%Incompletecommand.Router#clockset19:56:00?

<1-31>Dayofthemonth

Router*clock?MONTHMonthofth。year

setS«tth«timeanddate

Reuter#clockset19:56:00048

A

Router*clockset

%Incomplatecommand%Invalidinputdetectsdatthe'A'rrarker

Router#clockset?Router*clockset19:56:0004August

CurrentTime(hh:mm:s&)%lncompl«78comn-and.

*<out«rfclockset19:56:0004August?

<19932935>Ysar

fi的请i：r：伊”而N”国

随命建华气

J：域睇肃IF必也鼠:二史II谢新冷

IIIHI

min

UsingEditingCommands

Routen>$valueforourcustomers,employees,investorsandpartners.

Automaticscrollingoflonglines,

<Ctrl><A>Movetothebeginningofthecommandline.

<Ctrl><E>Movetotheendofttiecommandline.

<Esc><B>Movebackoneword.

<Ctrl><F>Moveforwardonectiaracter.

<Ctrl><B>Movebackorecharacter.

<Fso<l->Movetofwardonew〔）P

IIIHI

趾疝E珍

min

ReviewingCommandHistory

<Ctrl><P>orl?panxiwLast(piwTDiis)commandi^cnll

<CtrlxN>orDownnnmv\lor?recentcommandledl

kouter*showhistorySliowcommandbuffer

Renter”tprinm^lhistoiySIZAInumIMT仆1lines,拿Setcommaiulbiiffpr«】NP

Kontpr：-norennins1PtliimgDisable^dv3ncptleditingtmriiTpq

RouteroditmgRponnbgndvwdHhung

Fiurycnniplpriftn

m.乐W为T'SQ白事运取：:3;也通:益却

_IIIHI

ExternalConfigurationSources

Virtual

Terminals

T:r.x--?，rl：o；T，sTiT：2：?r^铲后丁仃号■「「彷旄?

IIIHI

mm

min

RAMfori/VorkingStorage

Theprogramthatconverts.

whatyouhavetypedonthe

consolecomputerinto—

commandsthattherouter

understandsCommand

ExecutiveInternetworkOperatingSystem

Bootstrap

Program

Executes

mgTables

FTables

一»汜工通话EM却

工TREfK听

HIHI

RouterModes

UserEXECModeGlobalConfigurationMode

LimitedexaminationofSimpleconfigurationcommands.

router.Remoteaccess.

Router(config)#

Router>

PrivilegedEXECMode

OtherConftguratioaModes

Detailedexaminationofrouter.

Debuggingandtesting.File

manipulation.Remoteaccess.

Router(config-mode)ft

Router#

RXBOOTMode

SETUPMode

Recoveryfromacatastropheinthe

Prompteddialogusedtoestablishcaseofalostpasswordorthe

aninitialconfiguratkxioperatkxigsystembeingaccidentally

erasedfromFlash.

_IIIHI

林RNE加

min

RouterStatusCommands

Router#showflashRouter#showinterfaces

Router#showversion

RAMNVRAMFlash

InternetworkOperationSystemD

Q

Actrv©Tables@

ConfigurationandQ

FileBuffers9

：outer#showprocessesCPURouter#showmem

：outer#showprotocolsRouter#showstacks

Router#showbuffers

Router#showconfig

Router#showrunnmgcon"

Router#writeterm

IIIHI

Mowrunning-configCommandand

showstartup-configCommand

Router#showrunning-configRouterWshowstartup-config

Buildingconfiguration...Using1108outof13004Bbytes

!

Currentconfiguration:version11.2

!t

version11Jhostnamerouter

t

—More--More-

.Usewriteterminalwith♦Useshowconfigwith

Release10.3andearlierRelease10.3andearlier

IIIHI

showinterfaceserialCommand

Router#showinterfaceserial1

Serial1isup,lineprotocolisup

HardwareisMK5025

Internetaddressis29,subnetmaskis28

MTU1500bytes,BW56Kbit,DLY20000usee,rely255/255,load9/255

EncapsulationHDLC,loopbacknotset,keepaliveset(10sec)

Lastinput0:00:00,output0:00:01,outputhangnever

Lastclearingof"showinterface-countersnever

Outputqueue0/40,0drops;inputqueueW75,0drops

Fiveminuteinputrate1000bits/sec,0packets/sec

Fiveminuteoutputrate2000bits/sec,0packets/sec

331885packetsinput62400237bytes,0nobuffer

Received230457broadcasts,0runts,0giants

3inputerrors.3CRC,0frame.0overrun,0ignored,0abort

403591packetsoutput,66717279bytes,0underruns

0outputerrors,0collisions.8interfaceresets.0restarts

45carriertransitions

IIIHI

IRmOaMge:tSeyxst-tbeamseB:oOoxts6t0ra0p0,88VAe0rs,iodnata5-.b1a(1s)e[.d0axv6e0u716]E,0R0E0LEASESOFTWARE(fc1)

ROM.4500-XB007BootstrapSoftware.Version101(1),RELEASESOFTWARE(fc1)

CompiledFri2s8-Jhuno-96w16:v32ebyrrtoseaichonCommand

CRopuyterirg#hts(ch)ow19v8e6r-s1io9n96byCiscoSystems,Inc.

CiscoInternetworkOperatingSystemSoftware

IOS(tm)4500Software(C4500-J-M),ExperimentalVersion11.2(19960626:214907)]

routeruptimeis1week,3days,32minutes

Systemrestartedbyreload

Systemimagefileis"c4500-j-mz",bootedviatftpfrom171.691.129

■~More-

IIIHI

<ERNE>

min

ShowprotocolsCommand-

Router#showprotocols

Globalvalues:

InternetProtocolroutingisenabled

DECNETroutingisenabled

XNSroutingisenabled

CLNSroutingisenabled(address47.0005.80ff.f800.0000.ffif.0021.1830.0812.8002.00)

Vinesroutingisenabled

Appletalkroutingisenabled

Novellroutingisenabled

—Mors-

EthernetOisup,lineprotocolisup

Internetaddressis,subnetmaskis28

Decnetcostis5

XNSaddressis3010.aaOO.0400.0284

CLNSenabled

Vinesmetricis32

A即leTalkaddressis301293,zoneId-eO

Novelladdressis3010.aaOO.0400.0284

~More一

IIIHI

CiscoDiscoveryProtocol(CDP)

Overview

UpperLayerNovell

EntryTCP/IP|pxAppleTalkOthers

Addresses

CiscoCDPdiscoversand

Proprietaryshowsinformation

Data-Linkaboutdirectlyconnected

ProtocolCiscodevices

MediaFrame

SupportingLANsRelayATMOthers

SNAP

♦Mediaand

IIIHI

I：珍

CDPConfigurationExample

RouterB

routsrA#showcdpinterface

SftrialOisup,linoprotocolisup>encapsulationisPramsRslay

SendingCDPpacketsevery60seconds

Hcldtirrwis1B0seconds

EthamsTOisup,lineprotocolupr«ncjipMulat>o>ni«ARPA

SendingCDPpicketsevwry59MGO-nds

-cldtima«"80s«cand»

routerA#shocdpentryrouterB

Devic®ID;routerB

Entryaddress(es):

(Paddress:198,926818

Platform:2501,Capabilities:Router

Interface:Ethern«t0,PortID(outgoingport):EthemetO

Hokitime:155sec

Version:

iOS(tm)GSSoftware(GS3),11.2(13337)(aaastry161]

Copynght(c)19861996byCiscoSystems,Inc

GampMTu«14-May-961:M

IIIHI

I：珍

ShowingCDPNeighbors

routerA#showcdpneighbors

CapabilityCodes:R-Router,T-TninsBridge,

B-SourceRouteBridge,

S-Switch.H-Ho«t.I-IGMP

DeviceIDLocalIntrfceHoldtmeCapabilityPlatformPortID

routerBEth0151R2501Eth0

routerBS*r01S5R2501Ser0

routerA#showcdpneighborsdetail

□•viceID:rout«rB

Entryaddressfos):

IPaddmss:198916818

Platform:2501,Capabiltnas:Router

interface-Eth^meW,PortID(outgoingport):EthemstC*

Hoidtime:143»«c

I：珍

telnetOperations

IP:131.108.1G0.152

Paris

Suspendasession

Paris><Cntl><Shift><6>

<x>Denver*

c.£scap<*sequence

Resumeasession

IIIHI

I：珍

stingwiththepingCommand

•Areprotocolpacketsbeingrouted?

NetworkLayer

17Z16.1.S

RouW»r>ping

Typeocap«saqu«nc«?oabort

Sanding5199bylHl(：v*lt：bc-xtctinwsutis2

l!ll(

rainEpsncsnt,n>undtripvrrvavj^n-^ax-1,3”，me

p：:uo*r>

IIIHI

I：珍

TestingwiththetraceCommand

•Whatpatharepacketstaking?

[NetworkLayer

Romo

16.12.3

York#traceROME

Typ«escapeto»bon.

Tracingth*routetoRom»(172J6.33.3)

1OMDOW()16gmMCSTS««:4

2PARIS(172.16.18J)8IYWKSTS«€ifmsxc

2^OME(172J6.35,5)Hmuts54T，A:

_IIIHI

林RNE加

min

UsingtheshowiprouteCommand

・Doesanentryexistintheroutingtable?

Paris#showiproute

Codes:I-IGRPderived,R-RIPderived,O-OSPFderived

C-connected,S-static,E-EGPderived,B-BGPderived

i-IS4sderived,D-EIGRPderived

*-condidatedefaultroute,IA-OSPFinterarearoute

E1-OSPFexternaltyp«1route,E2-OSPF«xterna'type2route

L1-IS-ISlevel-1route,L2-IS-ISl8v«l-2route

EX-EIGRPexternalroute

Gatewayoflastresortisnotset

“44253.0.0[1CC/13CC]via0:00:22

131.1M.0.0ksubrwttsd(maskis),3subnets

I[100/180771]via,0:01:29,Ethernet!

Cisdirectlyconnechid,E?h»m«t0

C13110B.46.0应dirwcUyconr«ct»ci,

21S.100.1010nCC；12CC(vis,3:33:22,三tiunrrl

IIIHI

I：珍

Interpretingshowinterfaceserial

Router*showints1

SeriaHisup.lineprotocolisup

△

HardwaiisexBusSerial

Deschp)n:56KbLineSaiJose-MP

CarrierDetectKeepalives

(LineStatus)

Serialli»up,lin»protocolisupOperational

SsnaH也up,lin«oro:oco*DowrConnftctrcnPrcblsn

S»rial1isdown,lin*pptocolissownn7«rtacHPrablsn

SBra,adEini*t，xtv*ydow^,tinsprotccolisdc-wnOx4iblwd

IIIHI

I：珍

showint*1

isup,lineprotocolisup

HardwareisexBusSerial

Description:56KbLineSanJos<

MTU1500bytes,BW56Kbit,DLY20000usee,rely255/255,load17255

IEncapsulationHDLC,loopbacknotset.keepalive&et(10sec)

Lastclearingof,'showinterface"counters2w4d

Outputqueue0/40,0drops：inputqu«u«GT75,0drops

FiveminuteinputrateCbits/secr0packets/soc

16263packetsinput,13472380nobuffer

Received13983broadcasts,00giants

2inputerrors.0CRC.0framerrun,0ignored.2abort

0inputpacketswithdribbleconditiondetected

22146packetsoutput,2^83680bytes,0underruns

0outputerrors,0collisions,2interfaceresets,0restarts

1carriertransitions

IIIHI

@ERNEL»)

HUH

CheckReaJ-TimeTrafficwithdebug

•Whatprotocolmessagesarebeingsent?

Data

Routing

Updates

Keepalive

Messages

Router*debugbroadcast

broadcastdebuggingison

EthgnetO:BroadoistARPA,*rc0000.0Sc3.8fx4,cat卅府丫册

type0x8880,data45«X»2B<XX»a»0rF1"38,1«n60

3*rial3:8gHDLC,HIZA€4,typs8其88。Jlx;沸Ox€>CC

IIIHI

趾疝E珍

Console

loggingbufferedTerminal

r>|terminalmonitorTelnet

Terminal

DebugOutput

and

IloggingonUNIXHost

SystemErrorIlogging(Running

MessagesSyslog

Server)

Jshowlogging

loggingbufferedBuffers

IIIHI

I：珍

RouterConfigurationOverview

•CiscoIOSsoftwareversion

•Routeridentification

IIIHI

趾疝E珍

min

Workingwith11<xConfigFiles-

Console

orTerminalconfigterm

showrunning-config

showstartup-config

configmemory

erasestartup-config

copyrunning-configRAM

NVRAMstartup-config

BitBucket

TFTPServer

copytftprunning-config

UPOnly)

copytftp

startup-config