ICND第五章 基于TCPIP互连网络.ppt

1、第五章操作与配置Cisco IOS设备,Cisco IOS 软件提供多种网络服务进而支持各种网络应用.,Cisco 互连网操作系统(IOS)软件,硬件自检 定位并加载Cisco IOS映象文件 查找并运行配置文件,Cisco设备的简单启动过程,可以通过多种方法来配置 配置信息直接在设备的内存中生效,控制端口,Aux 端口,端口,PC or Unix服务器,Web 或网络管 理服务器,虚拟终端,多种配置方法,Telnet,TFTP,Cisco 路由器介绍,配置途径 用主控CONSOLE口接终端配置。 我们可以在AUX口接一MODEM同电话网相连，在远端配置 在TCP/IP网上可通过仿真终端TEL

2、NET配置(ie) 可以从TFTP SERVER上下载配置 可用网管工作站进行监控和配置,Cisco 路由器介绍,IOS 的用户界面: 是 CLI (Command Line interface) ，象MS-DOS， unix里面的command line都是 CLI的。而Windows是GUI (Graphic User Interface). CLI的特点是比较难学，但configure 起来比较快。现在Cisco也正在做Java 的GUI-based configuration software, 但大家还是喜欢CLI的。,Cisco 路由器配置途径,Cisco 路由器配置模式,一般用户

3、模式 只限于路由器的某一些有 限的权限登录到机器的缺省状态 router,全局设置状态 对设备进行全面配置，但是不能检查和查看配置； 在特权执行态输入config terminal 则进入该态 router(config)#,超级权限模式 有检查，配置，调试等所有权限 包含用户模式所有命令 通过enable可进入此状态 router#,其他的设置状态 在特权执行状态输入相应的命令时进入 例如：interface serial 2/0 router(config-mode)#,路由器模式一览,Router(config)#,Routerenable,Router#config term,Exit

4、,Ctrl-Z (end),用户模式 特权模式 全局配置模式,配置模式,模式提示,InterfaceRouter(config-if)# Subinterface Router(config-subif)# Controller Router(config-controller)# LineRouter(config-line)# RouterRouter(config-router)# IPX router Router(config-ipx-router)#,系统启动例程会初始化交换机 初始启动利用缺省配置参数,1. 启动前确认正确连接线缆和控制线 2. 接入电源 3. 观察启动顺序 面板

5、上的发光二极管LEDs Cisco IOS输出到控制台上的内容,交换机的初始启动,检查交换机发光二极管(LEDs),交换机自检期间的端口发光二极管,1. 启动时，所有端口发光二极管变绿. 2. 每个端口自检完毕，对应的发光二极管熄灭. 3. 如果端口自检失败, 对应发光二极管呈黄色. 4. 如果有任何自检失败情况，系统发光二极管呈现黄色. 5. 如果没有自检失败, 自检过程完成. 6. 随着自检过程的完成, 发光二极管闪亮后熄灭.,交换机初次启动时的显示信息,控制台连接,Catalyst 1900 Management Console Copyright (c) Cisco Systems,

6、Inc. 1993-1998 All rights reserved. Enterprise Edition Software Ethernet Address: 00-50-BD-73-E2-C0 PCA Number: 73-3121-01 PCA Serial Number: FAA0252A0QX Model Number: WS-C1924-EN System Serial Number: FAA0304S0U3 Power Supply S/N: PHI025101F3 - 1 user(s) now active on Management Console. User Inter

7、face Menu M Menus K Command Line I IP Configuration Enter Selection:,控制台,登入交换机并键入特权模式密码, enable Enter password: # # disable quit,用户模式提示,特权模式提示,wg_sw_c#show version Cisco Catalyst 1900/2820 Enterprise Edition Software Version V8.01.01 written from 171.068.229.225 Copyright (c) Cisco Systems, Inc. 199

8、3-1998 wg_sw_c uptime is 15day(s) 21hour(s) 53minute(s) 11second(s) cisco Catalyst 1900 (486sxl) processor with 2048K/1024K bytes of memory Hardware board revision is 5 Upgrade Status: No upgrade currently in progress. Config File Status: No configuration upload/download is in progress 27 Fixed Ethe

9、rnet/IEEE 802.3 interface(s) Base Ethernet Address: 00-50-BD-73-E2-C0,交换机的show version 命令,wg_sw_c#show run Building configuration. Current configuration: ! hostname wg_sw_c ! ip address 3 ip default-gateway ! interface Ethernet 0/1 interface Ethernet 0/24 ! Interface E

10、thernet 0/25 ! interface FastEthernet 0/26 ! interface FastEthernet 0/27,交换机的show running-configuration 命令,wg_sw_c#show run Building configuration. Current configuration: ! hostname wg_sw_c ! ip address 3 ip default-gateway ! interface Ethernet 0/1 interface Ethernet 0

11、/12 ! Interface Ethernet 0/25 ! interface FastEthernet 0/26 ! interface FastEthernet 0/27,Catalyst 1924,Catalyst 1912,wg_sw_c#show interfaces ethernet 0/1 show ip interface brief 简单查看所有端口的状态、端口数量类型、端口IP Ethernet 0/1 is Enabled Hardware is Built-in 10Base-T Address is 0050.BD73.E2C1 MTU 1500 bytes, B

12、W 10000 Kbits 802.1d STP State: Forwarding Forward Transitions: 1 Port monitoring: Disabled Unknown unicast flooding: Enabled Unregistered multicast flooding: Enabled Description: Duplex setting: Half duplex Back pressure: Disabled -More-,交换机的show interfaces命令,配置模式: 全局配置模式 wg_sw_a# conf term wg_sw_a

13、(config)# 接口配置模式 wg_sw_a(config)# interface e0/1 wg_sw_a(config-if)#,配置交换机,配置交换机的各种标识,为交换机设置本地标识,系统启动进程会初始化路由器 如果需要，路由器可以有选择性地启动,Check hardware,Find and load Cisco IOS software image,Find and apply router configuration information,Load Bootstrap,1.启动前确认正确连接线缆和控制线 2.按下电源开关 3.观察启动顺序 Cisco IOS输出到控制台上的内

14、容,Cisco路由器的初始启动,没有配置文件与有配置文件的路由器启动对比,- System Configuration Dialog - Continue with configuration dialog? yes/no:yes At any point you may enter a question mark ? for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .,Setup模式,wg_ro_c con0 is now avail

15、able Press RETURN to get started.,wg_ro_c,路由器启动时在控制台上的输出内容,控制台,Setup: 初始配置对话框,Router#setup - System Configuration Dialog - Continue with configuration dialog? yes/no: y At any point you may enter a question mark ? for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are

16、 in square brackets . Basic management setup configures only enough connectivity for management of the system, extended setup will ask you to configure each interface on the system Would you like to enter basic management setup? yes/no: n,浏览端口配置情况,First, would you like to see the current interface s

17、ummary? yes: Interface IP-Address OK? Method Status Protocol BRI0 unassigned YES unset administratively down down BRI0:1 unassigned YES unset administratively down down BRI0:2 unassigned YES unset administratively down down Ethernet0 unassigned YES unset administratively down down Serial0 unassigned

18、 YES unset administratively down down,自检过程中所找到的端口,设置全局参数,初始化全局参数,Configuring global parameters: Enter host name Router:wg_ro_c The enable secret is a password used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Ente

19、r enable secret: cisco The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: sanfran The virtual terminal password is used to protect access to the router over a network interface. Enter virtual

20、terminal password: sanjose Configure SNMP Network Management? no:,设置端口参数,BRI interface needs isdn switch-type to be configured Valid switch types are : 0 none.Only if you dont want to configure BRI. 1 basic-1tr6.1TR6 switch type for Germany 2 basic-5ess.AT mask is /24 Do you want to configure Serial

21、0 interface? no:,设置脚本的确认与应用,The following configuration command script was created: hostname Router enable secret 5 $1$/CCk$4r7zDwDNeqkxFO.kJxC3G0 enable password sanfran line vty 0 4 password sanjose no snmp-server ! no appletalk routing no decnet routing ip routing no clns routing no ipx routing n

22、o vines routing no xns routing no apollo routing isdn switch-type basic-5ess,interface BRI0 shutdown no ip address ! interface Ethernet0 no shutdown ip address 1 no mop enabled ! interface Serial0 shutdown no ip address end 0 Go to the IOS command prompt without saving this con

23、fig. 1 Return back to the setup without saving this config. 2 Save this configuration to nvram and exit. Enter your selection 2:,Console,wg_ro_c wg_ro_cenable wg_ro_c# wg_ro_c#disable wg_ro_c wg_ro_clogout,wg_ro_c con0 is now available Press RETURN to get started.,用户模式提示,特权模式提示,进入路由器,只要所输命令串在全部命令中是唯

24、一的，可以将一个命令尽可能地简写，,路由器在用户模式下的命令,wg_ro_c? Exec commands: access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disco

25、nnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC- More -,wg_ro_c#? Exec commands: acc

26、ess-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry bfe For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mod

27、e connect Open a terminal connection copy Copy from one file to another debug Debugging functions (see also undebug) delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase

28、Erase a filesystem exit Exit from the EXEC help Description of the interactive help system - More -,路由器在特权模式下的命令,只要输入部分命令串(唯一表示某个命令)，紧接着按tab键就可以完整地输入一个命令,路由器命令行帮助机制,上下文关联帮助,错误信息提示,指出所输入交换机命令的错误所在，以便于修改或纠正.,可以重新调出以前运行过的命令，用来再次运行、查看或修改.,之前命令保存区,提供命令清单和与特定命令相关联的参数.,配置设备的快捷方式总结,路由器、交换机配置的快捷方式有下面几种 1、？号键

29、：在任何模式下都可以用？号问出所有命令；一个单词在不太清楚的情况下，采用？号键问出；一个命令后不知道接什么命令可以用？号键问出。 ? #? （config）#？ #con？#config ？ 2、TAB键;补全命令（必须是唯一单词时） 3、上下键：翻出缓冲区刚刚用过的命令； 4、支持简写： （必须是唯一单词时） enable=en Configure terminal=conf t show running-config= sh run,路由器如何采用快捷键帮助,Router#,clok,Translating CLOK,% Unknown command or computer name,

30、or unable to find computer address,Router#,cl?,clear clock,Router#,clock,% Incomplete command.,Router#,clock ?,set Set the time and date,Router#,clock set,% Incomplete command.,Router#,clock set ?,hh:mm:ss Current Time,命令的名字解析 命令提示 调出最近用过的内容,路由器的上下文相关联帮助(续),Router# clok,Translating CLOK,% Unknown co

31、mmand or computer name, or unable to find computer address,Router#,clear clock,Router#,% Incomplete command.,Router#,set Set the time and date,Router#,% Incomplete command.,Router#,hh:mm:ss Current Time,Router#,clock set 19:56:00,% Incomplete command.,Router#,clock set 19:56:00 ?, Day of the month,M

32、ONTH Month of the year,Router#,clock set 19:56:00 04 8,% Invalid input detected at the marker,Router#,clock set 19:56:00 04 August,% Incomplete command.,Router#,clock set 19:56:00 04 August ?, Year,命令提示 语法检查 命令提示,RouterShape the future of internetworking by creating unpreced,使用增强的编辑命令,“Shape the fut

33、ure of internetworking by creating unprecedented value for customers, employees, and partners.” 上述文字段在输入时会超出一行,Router$ future of internetworking by creating unprecedented op,使用增强的编辑命令,(一行中长字串会自动滚卷).,RouterShape the value of internetworking by creating unpreced,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.

34、,Router$ value for customers, employees, and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,回移一个单词,Router$ value for customers, employees, and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,回移一个单词.,下移一个字符.,Rou

35、ter$ value for customers, employees, and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,回移一个单词,下移一个字符.,回移一个字符.,Router$ value for customers, employees, and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,回移一个单词,下移一个字符.,回移一个字符.,下移一个单词,Router$ value for customers, emp

36、loyees, and partners.,(一行中长字串会自动滚卷).,光标移动到命令行的开始位置.,光标移动到命令行的结束位置.,回移一个单词,下移一个字符.,回移一个字符.,下移一个单词,使用增强的编辑命令,删除当前字符,Router$ value for customers, employees, and partners.,Ctrl-P or Up arrow,调出最近(前一)使用过的命令,Ctrl-N or Down arrow,调出更近使用过的命令,Router show history,显示命令保存区内容,Router terminal history size lines,设

37、置命令缓冲区大小,回览之前用过的命令,show version 命令,wg_ro_a#show version Cisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(3), RELEASE SOFTWARE (fc1) Copyright (c) 1986-1999 by cisco Systems, Inc. Compiled Mon 08-Feb-99 18:18 by phanguye Image text-base: 0 x03050C84, data

38、-base: 0 x00001000 ROM: System Bootstrap, Version 11.0(10c), SOFTWARE BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE(fc1) wg_ro_a uptime is 20 minutes System restarted by reload System image file is flash:c2500-js-l_120-3.bin (output omitted) -More- Configuratio

39、n register is 0 x2102,查看配置情况,控制台,IOS,Setup utility,show startup-config,show running-config,将配置参数保存到NVRAM中,Config,Config,RAM,NVRAM,show running 和 show startup 命令,wg_ro_c#show startup-config Using 1359 out of 32762 bytes ! version 12.0 ! - More -,wg_ro_c#show running-config Building configuration.Curr

40、ent configuration:!version 12.0 ! - More -,保存在NVRAM中,保存在RAM中,显示当前运行的和保存的配置情况,保存配置,wg_ro_c# wg_ro_c#copy running-config startup-config Destination filename startup-config? Building configuration wg_ro_c#,将当前运行的配置复制到NVRAM中,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#hostname wg_ro_c wg_ro_c(config)

41、#,开机时的显示的信息,wg_ro_c(config)#banner motd # Accounting Department You have entered a secured system. Authorized access only! #,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#hostname wg_ro_c wg_ro_c(config)#,开机时的显示信息,wg_ro_c(config)#banner motd # Accounting Department You have entered a secured system

42、. Authorized access only! #,端口描述,wg_ro_c(config)#interface ethernet 0 wg_ro_c(config-if)#description Engineering LAN, Bldg. 18,Router(config)#line console 0 Router(config-line)#login Router(config-line)#password cisco,控制台密码,虚拟终端密码,Router(config)#line vty 0 4 Router(config-line)#login Router(config-l

43、ine)#password sanjose,路由器密码配置,Router(config)#line console 0 Router(config-line)#login Router(config-line)#password cisco,控制台密码,虚拟终端密码,Router(config)#line vty 0 4 Router(config-line)#login Router(config-line)#password sanjose,特权模式明文密码,Router(config)#enable password cisco,特权模式加密密码,Router(config)#enabl

44、e secret sanfran,路由器密码配置,其它控制台命令,Router(config)#line console 0 Router(config-line)#exec-timeout 0 0,Router(config)#line console 0 Router(config-line)#logging synchronous,禁止控制台会话自动退出,重显被覆盖的控制台输入,Router(config)#interface type number Router(config-if)#,端口配置,type 包括 serial, ethernet, token ring, fddi, h

45、ssi, loopback, dialer, null, async, atm, bri, and tunnel number 用来识别具体的端口号,从当前接口配置模式退出,Router(config)#interface type slot/port Router(config-if)#,模块化端口的表示法,配置串口,进入全局配置模式,Router(config)#interface serial 0 Router(config-if)#,Router#configure term Router(config)#,指定某个端口,配置串口,进入全局配置模式,Router(config-if)#

46、clock rate 64000 Router(config-if)#,Router(config)#interface serial 0 Router(config-if)#,Router#configure term Router(config)#,Router(config-if)#bandwidth 64 Router(config-if)#exit Router(config)#exit Router#,指定某个接口,设置时钟频率 (只在DCE端),设置带宽 (建议),Router#show interface serial 0 Serial0 is up, line protoco

47、l is up Hardware is HD64570 Internet address is /24 MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:09, output 00:00:04, output hang never Last clearing of show interface counters never Input

48、 queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) 5 minute input rate 0 bits/sec, 0 packets/sec 5

49、minute output rate 0 bits/sec, 0 packets/sec (output omitted),确认参数修改情况,打开或关闭端口,Router#configure term Router(config)#interface serial 0 Router(config-if)#no shutdown %LINK-3-UPDOWN: Interface Seria0, changed state to up %LINEPROTO-5-UPDOWN: Line Protocol on Interface Serial0, changed state to up,打开已经

50、关闭的端口,Router#configure term Router(config)#interface serial 0 Router(config-if)#shutdown %LINK-5-CHANGED: Interface Serial0, changed state to administratively down %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down,手工关闭端口,路由器的 show interfaces 命令,Router#show interfaces Eth

51、ernet0 is up, line protocol is up Hardware is Lance, address is 00e0.1e5d.ae2f (bia 00e0.1e5d.ae2f) Internet address is 1/24 MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255/255, load 1/255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:07, output 00:00:08, output hang never Last clearing of show interface counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 5 mi