《《操作与配置》PPT课件.ppt》由会员分享，可在线阅读，更多相关《《操作与配置》PPT课件.ppt（38页珍藏版）》请在三一办公上搜索。
1、第四章操作与配置Cisco IOS,本章目标,通过本章的学习，您应该掌握以下内容:完成路由器的初始参数配置在网络设备上进入并辨识不同的命令模式在不同的用户界面下应用各种帮助和命令行编辑功能查看并确认各网络设备的基本信息,2500 路由器背板一览,WAN串口可以采用固化方式,固化的端口,控制口,1603 路由器背板一览,AUI以太网口,10BaseT以太网口,ISDN BRI S/T,WAN串口可以采用模块化方式,3640 路由器背板一览,模块化端口,模块,WAN 接口卡,PCs需要一个将RJ-45转换到DB-9或DB-25的转换器通讯口设置为9600波特率,8个数据位,不设奇偶校验位,1个停止
2、位,不设流量控制这是通过控制口的一种管外管理方式AUX端口用于调制解调器的远程连接访问,控制台连接,带控制口的设备,Cisco IOS 软件提供多种网络服务进而支持各种网络应用.,Cisco 互连网操作系统(IOS)软件,硬件自检定位并加载Cisco IOS映象文件定位并运行配置文件,Cisco设备的简单启动过程,提供命令行界面在不同的网络设备上运行时有差别 在命令模式下可以键入或粘贴命令 键入命令后回车，设备即解析和执行所键入的命令两个主要命令模式是用户模式和特权模式不同的命令模式有不同的提示符,CiscoIOS,Cisco IOS用户界面的基本特性,Cisco IOS的主要命令模式,对交换
3、机和路由器的有限操作命令提示符为 用户名,模式一：,用户模式,特权(或enabled)模式对交换机和路由器更深入的操作有配置和监视权力是进入其它配置模式的前提命令提示符为 主机名#,模式二(也是最常用的模式):,Cisco IOS的主要命令模式(续),系统启动例程会初始化路由器如果需要，路由器可以有选择性地回退启动,Check hardware,Find and load Cisco IOSsoftware image,Find and apply routerconfiguration information,Load Bootstrap,1.启动前确认正确连接线缆和控制线2.按下电源开关3
4、.观察启动顺序 Cisco IOS输出到控制台上的内容,Cisco路由器的初始启动,没有配置文件与有配置文件的路由器启动对比,-System Configuration Dialog-Continue with configuration dialog?yes/no:yes At any point you may enter a question mark?for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets.,Setup模式,wg_ro_
5、c con0 is now availablePress RETURN to get started.,wg_ro_c,路由器启动时在控制台上的输出内容,控制台,Setup:初始配置对话框,Router#setup-System Configuration Dialog-Continue with configuration dialog?yes/no:yAt any point you may enter a question mark?for help.Use ctrl-c to abort configuration dialog at any prompt.Default settin
6、gs are in square brackets.Basic management setup configures only enough connectivityfor management of the system,extended setup will ask youto configure each interface on the systemWould you like to enter basic management setup?yes/no:n,设置全局参数,初始化全局参数,Configuring global parameters:Enter host name Ro
7、uter:wg_ro_c The enable secret is a password used to protect access to privileged EXEC and configuration modes.This password,after entered,becomes encrypted in the configuration.Enter enable secret:cisco The enable password is used when you do not specify an enable secret password,with some older so
8、ftware versions,and some boot images.Enter enable password:sanfran The virtual terminal password is used to protect access to the router over a network interface.Enter virtual terminal password:sanjose Configure SNMP Network Management?no:,设置脚本的确认与应用,The following configuration command script was cr
9、eated:hostname Routerenable secret 5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enable password sanfranline vty 0 4password sanjoseno snmp-server!no appletalk routingno decnet routingip routingno clns routingno ipx routingno vines routingno xns routingno apollo routingisdn switch-type basic-5ess,interface BRI0shu
10、tdownno ip address!interface Ethernet0no shutdownipno mop enabled!interface Serial0shutdownno ip addressend0 Go to the IOS command prompt without saving this config.1 Return back to the setup without saving this config.2 Save this configuration to nvram and exit.Enter your selection 2:,Console,wg_ro
11、_cwg_ro_cenablewg_ro_c#wg_ro_c#disablewg_ro_cwg_ro_clogout,wg_ro_c con0 is now availablePress RETURN to get started.,用户模式提示,特权模式提示,登入路由器,只要所输命令串在全部命令中是唯一的，可以将一个命令尽可能地简写，,路由器在用户模式下的命令清单,wg_ro_c?Exec commands:access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd
12、Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help
13、system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC-More-,wg_ro_c#?Exec commands:access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry bfe
14、For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy from one file to another debug Debugging functions(see also undebug)delete Delete a file dir List files o
15、n a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase a filesystem exit Exit from the EXEC help Description of the interactive help system-More-,路由器在特权模式下的命令清单,只要输入部分命令串(唯一表示某个命令)，紧接着按tab键就可以完整地输入一个命令,s
16、how version 命令,wg_ro_a#show versionCisco Internetwork Operating System Software IOS(tm)2500 Software(C2500-JS-L),Version 12.0(3),RELEASE SOFTWARE(fc1)Copyright(c)1986-1999 by cisco Systems,Inc.Compiled Mon 08-Feb-99 18:18 by phanguyeImage text-base:0 x03050C84,data-base:0 x00001000ROM:System Bootstr
17、ap,Version 11.0(10c),SOFTWAREBOOTFLASH:3000 Bootstrap Software(IGS-BOOT-R),Version 11.0(10c),RELEASE SOFTWARE(fc1)wg_ro_a uptime is 20 minutesSystem restarted by reloadSystem image file is flash:c2500-js-l_120-3.bin(output omitted)-More-Configuration register is 0 x2102,查看配置情况,控制台,IOS,Setup utility,
18、showstartup-config,showrunning-config,将配置参数保存到NVRAM中,Config,Config,RAM,NVRAM,show running 和 show startup 命令,wg_ro_c#show startup-configUsing 1359 out of 32762 bytes!version 12.0!-More-,wg_ro_c#show running-configBuilding configuration.Current configuration:!version 12.0!-More-,保存在NVRAM中,保存在RAM中,显示当前
19、运行的和保存的配置情况,路由器模式一览,Router(config)#,Routerenable,Router#config term,Exit,Ctrl-Z(end),用户模式特权模式全局配置模式,配置模式,模式提示,InterfaceRouter(config-if)#SubinterfaceRouter(config-subif)#Controller Router(config-controller)#LineRouter(config-line)#RouterRouter(config-router)#IPX router Router(config-ipx-router)#,保存配
20、置,wg_ro_c#wg_ro_c#copy running-config startup-configDestination filename startup-config?Building configurationwg_ro_c#,将当前运行的配置复制到NVRAM中,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#hostname wg_ro_cwg_ro_c(config)#,开机时的固定显示信息,wg_ro_c(config)#banner motd#Accounting Department You have entered a sec
21、ured system.Authorized access only!#,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#hostname wg_ro_cwg_ro_c(config)#,开机时的固定显示信息,wg_ro_c(config)#banner motd#Accounting Department You have entered a secured system.Authorized access only!#,端口描述,wg_ro_c(config)#interface ethernet 0wg_ro_c(config-if)#des
22、cription Engineering LAN,Bldg.18,Router(config)#line console 0Router(config-line)#loginRouter(config-line)#password cisco,控制台密码,虚拟终端密码,Router(config)#line vty 0 4Router(config-line)#login Router(config-line)#password sanjose,路由器密码配置,Router(config)#line console 0Router(config-line)#loginRouter(config
23、-line)#password cisco,控制台密码,虚拟终端密码,Router(config)#line vty 0 4Router(config-line)#login Router(config-line)#password sanjose,特权模式明文密码,Router(config)#enable password cisco,特权模式加密密码,Router(config)#enable secret sanfran,路由器密码配置,其它控制台命令,Router(config)#line console 0Router(config-line)#exec-timeout 0 0,R
24、outer(config)#line console 0Router(config-line)#logging synchronous,禁止控制台会话自动退出,重显被打乱的控制台输入,Router(config)#interface type numberRouter(config-if)#,端口配置,type 包括 serial,ethernet,token ring,fddi,hssi,loopback,dialer,null,async,atm,bri,and tunnelnumber 用来识别具体的单个端口,从当前端口配置模式退出,Router(config)#interface ty
25、pe slot/portRouter(config-if)#,模块化端口的表示法,配置串口,进入全局配置模式,Router(config)#interface serial 0 Router(config-if)#,Router#configure termRouter(config)#,指定某个端口,配置串口,进入全局配置模式,Router(config-if)#clock rate 64000Router(config-if)#,Router(config)#interface serial 0 Router(config-if)#,Router#configure termRouter(
26、config)#,指定某个端口,设置时钟频率(只在DCE端),Data Terminal Equipment数据终端设备 WAN连接中用户方的最后设备,Data Communications Equipmen数据通讯设备WAN服务商方的最后通讯设备 DCE提供时钟,DCE,DTE,调制解调器通道服务单元/数据服务单元,DTE,DTE,DCE,DCE,串行连接中的DTE和 DCE比较,DTE/DCE责任分界点,Router#show interface serial 0Serial0 is up,line protocol is up Hardware is HD64570 MTU 1500 b
27、ytes,BW 64 Kbit,DLY 20000 usec,rely 255/255,load 1/255 Encapsulation HDLC,loopback not set,keepalive set(10 sec)Last input 00:00:09,output 00:00:04,output hang never Last clearing of show interface counters never Input queue:0/75/0(size/max/drops);Total output drops:0 Queueing strategy:weighted fair
28、 Output queue:0/1000/64/0(size/max total/threshold/drops)Conversations 0/1/256(active/max active/max total)Reserved Conversations 0/0(allocated/max allocated)5 minute input rate 0 bits/sec,0 packets/sec 5 minute output rate 0 bits/sec,0 packets/sec(output omitted),确认参数修改情况,开启或关闭端口,Router#configure t
29、ermRouter(config)#interface serial 0 Router(config-if)#no shutdown%LINK-3-UPDOWN:Interface Seria0,changed state to up%LINEPROTO-5-UPDOWN:Line Protocol on Interface Serial0,changed state to up,开启已经关闭的端口,Router#configure termRouter(config)#interface serial 0 Router(config-if)#shutdown%LINK-5-CHANGED:I
30、nterface Serial0,changed state to administratively down%LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0,changed state to down,人工关闭端口,路由器的 show interfaces 命令,Router#show interfacesEthernet0 is up,line protocol is up Hardware is Lance,address is 00e0.1e5d.ae2f(bia 00e0.1e5d.ae2f)MTU 1500 bytes,B
31、W 10000 Kbit,DLY 1000 usec,rely 255/255,load 1/255 Encapsulation ARPA,loopback not set,keepalive set(10 sec)ARP type:ARPA,ARP Timeout 04:00:00 Last input 00:00:07,output 00:00:08,output hang never Last clearing of show interface counters never Queueing strategy:fifo Output queue 0/40,0 drops;input q
32、ueue 0/75,0 drops 5 minute input rate 0 bits/sec,0 packets/sec 5 minute output rate 0 bits/sec,0 packets/sec 81833 packets input,27556491 bytes,0 no buffer Received 42308 broadcasts,0 runts,0 giants,0 throttles 1 input errors,0 CRC,0 frame,0 overrun,1 ignored,0 abort 0 input packets with dribble con
33、dition detected 55794 packets output,3929696 bytes,0 underruns 0 output errors,0 collisions,1 interface resets 0 babbles,0 late collision,4 deferred 0 lost carrier,0 no carrier 0 output buffer failures,0 output buffers swapped out,Router#show interfaces serial 1Serial1 is up,line protocol is up Hard
34、ware is HD64570 Description:64Kb Line to San Jose:,Operational.Connection problem.Interface problem.Disabled.,Serial1 is up,line protocol is upSerial1 is up,line protocol is downSerial1 is down,line protocol is downSerial1 is administratively down,line protocol is down,存活信息,载波监测,解读端口状态,串口上用 show controller 命令,Router#show controller serial 0HD unit 0,idb=0 x121C04,driver structure at 0 x127078buffer size 1524 HD unit 0,V.35 DTE cable.,显示串口线的线缆类型,通过本章的学习，您应该掌握以下内容:完成路由器的初始参数配置在网络设备上进入并辨识不同的命令模式在不同的用户界面下应用各种帮助和命令行编辑功能查看并确认并于各网络设备的基本信息,本章总结,
