CCNA内部培训课件

1、内部培训CCNA教材内部培训CCNA教材目录第一章 数据通信基本原理第二章 管理CISCO设备第三章 使用CDP和Telnet第四章 路由器的构造和启动第五章 交换机的基本配置第六章 VLAN的配置第七章 IP路由(static、rip、igrp、eigrp、ospf)第八章 访问列表第九章 NAT(网络地址转换)第十章 点到点连接第十一章 帧中继第十二章 ISDN技术第十三章 VPN技术第十四章 无线技术目录第一章 数据通信基本原理标准化组织国际标准化组织（ISO）电子电器工程师协会（IEEE）美国国家标准局（ANSI）电子工业协会（EIA / TIA）国际电信联盟（ITU）INTERNET

2、架构委员会（IAB）标准化组织国际标准化组织（ISO）标准化组织 在计算机网络的发展过程中有许多国际标准化组织做出了重大的贡献,他们统一了网络的标准,使各个网络产品厂家生产的产品的可以相互通信,目前为网络的发展做出贡献的标准化组织有:ISO: 制定了大型的标准,包括与INTERNET相关的标准,ISO提出了OSI参考模型,OSI参考模型描述了网络的工作原理,为计算机网络构建了一个易于理解的,清晰的层次模型IEEE: 提供了网络硬件上的标准使各种不同网络硬件厂商生产的硬件设备相互通信,IEEE LAN标准是当今居于主导地位的LAN标准,它主要定了802.X协议族,期中802.3为以太网标准协议簇

3、,802.4为令牌总线网(TOKEN BUS)标准,802.5为令牌环网(TOKEN RING)标准,802.11为无线局域网(WLAN)标准.ANSI: 是公司 政府 和期它组织成员组成的自愿组织,主要定义了光纤分布式数据接口FDDI的标准EIA/TIA: 定义了网络连接线线缆,如:RS232 CAT5 HSSI V.24 同时还有线缆布放标准,如:568BITU: 定义了作为广域边接的电信网络的标准;如:X.25 FRINTERNET架构委员会(Iab internet architectur board) 下设工程任务委员去(IETF) 研究任务委员会(IRTF),号码分配委员会(IAN

4、A)负责各种INTERNET,的标准的定义,是目前最具影响力和国 际标准化组织.标准化组织 在计算机网络的发展过程中有许多国际标第章 数据通信基本原理第章 数据通信基本原理一般通信的过程NameAddressPost OfficePost OfficeNameAddressNameAddressPost OfficePost OfficeNameAddress一般通信的过程NameAddressPost OfficeP传输层 数据链路层物理层 网络层 上层数据上层数据TCP 头数据IP 头0101110101001000010数据Frame头表示层应用层会话层段包比特帧PDUFCS封装数据传输

5、层 数据链路层物理层 网络层 上层数据上层数据TCP 头上层数据IP + TCP +上层数据Frame 头TCP+上层数据IP 头上层数据TCP 头0101110101001000010传输层 数据链路层物理层 网络层 表示层应用层会话层解封装数据上层数据IP + TCP +上层数据Frame 头TCP+上OSI 模式 概述应用层 (高) 会话层表示层应用层OSI 模式 概述应用层 会话层表示层应用层OSI 模式数据流层传输层数据链路层网络层物理层应用层 (高) 会话层表示层应用层OSI 模式数据流层传输层数据链路层网络层物理层应用层 会话应用层作用Telnet SMTPHTTP FTP用户接

6、口例子应用层应用层作用Telnet SMTP用户接口例子应用层Telnet SMTPHTTP FTP JPEG用户接口数据表示加密等特殊处理过程例子表示层应用层应用层作用Telnet SMTPJPEG用户接口数据表示例子表示层应用TelnetHTTPJPEG保证不同应用间的数据区分用户接口数据表示加密等特殊处理过程Operating System/Application Access Scheduling例子会话层表示层应用层应用层作用TelnetJPEG保证不同应用间的数据区分用户接口数据表示保证不同应用间的数据区分用户接口数据表示加密等特殊处理过程TelnetHTTPJPEGOperati

7、ng System/Application Access Scheduling传输层数据链路层网络层物理层例子会话层表示层应用层应用层作用保证不同应用间的数据区分用户接口数据表示TelnetJPEG数据流层的作用EIA/TIA-232V.35例子物理层 设备间接收或发送比特流说明电压、线速和线缆等数据流层的作用EIA/TIA-232V.35例子物理层 设802.3 / 802.2HDLCEIA/TIA-232V.35例子数据流层的作用数据链路层物理层 将比特组合成字节进而组合成帧用MAC地址访问介质错误发现但不能纠正设备间接收或发送比特流说明电压、线速和线缆等802.3 / 802.2EIA/

8、TIA-232V.35例802.3 / 802.2HDLCEIA/TIA-232V.35IPIPX例子数据流层的作用网络层 数据链路层物理层将比特组合成字节进而组合成帧用MAC地址访问介质错误发现但不能纠正设备间接收或发送比特流说明电压、线速和线缆等提供路由器用来决定路径的逻辑寻址802.3 / 802.2EIA/TIA-232V.35ITCPUDPSPX802.3 / 802.2HDLCEIA/TIA-232V.35IPIPX例子数据流层的作用传输层 数据链路层物理层 可靠或不可靠的数据传输数据重传前的错误纠正将比特组合成字节进而组合成帧用MAC地址访问介质错误发现但不能纠正设备间接收或发送

9、比特流说明电压、线速和线缆等网络层提供路由器用来决定路径的逻辑寻址TCP802.3 / 802.2EIA/TIA-232V.TCPUDPSPX802.3 / 802.2HDLCEIA/TIA-232V.35IPIPX表示层应用层会话层例子数据流层的作用可靠或不可靠的数据传输数据重传前的错误纠正将比特组合成字节进而组合成帧用MAC地址访问介质错误发现但不能纠正设备间接收或发送比特流说明电压、线速和线缆等传输层 数据链路层物理层网络层提供路由器用来决定路径的逻辑寻址TCP802.3 / 802.2EIA/TIA-232V.PDUPDU（protocol data unit):每一层使用自己层的协议

10、和别的系统的对应层相互通信，协议层的协议在对等层之间交换的信息叫协议数据单元。上层 : messagetransport layer : segmentNetwork layer: packetData-link layer: FramePhysical layer: bitPDUPDU（protocol data unit):每一层数据传输过程中的帧结构和包结构DataDataAAEthernet BBFrom LANFrame Relayto WANDatato LANDataDataDataDataFram relay DataEthernet Data数据传输过程中，帧结构在改变，但是

11、包结构不改变数据传输过程中的帧结构和包结构Data1.1.第二章 交换机和路由器简单配置第二章 交换机和路由器简单配置配置方式配置方式EXEC模式用户模式对交换机和路由器的有限操作命令提示符为 主机名主要有两个命令模式提供命令键入.模式一:EXEC模式用户模式主要有两个命令模式提供命令键入.模式一:EXEC模式 (续)特权(或enabled)模式对交换机和路由器更深入的操作有配置和监视权力是进入其它配置模式的前提命令提示符为 主机名#模式二 (也是最常用的模式):EXEC模式 (续)特权(或enabled)模式模式二 (也Catalyst 2950 Switch启动界面 - System Co

12、nfiguration Dialog - At any point you may enter a question mark ? for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .Continue with configuration dialog? yes/no: yesEnter IP address: ip_addressEnter IP netmask: ip_netmaskWould you like to enter a

13、default gateway address? yes: yesIP address of the default gateway: ip_addressEnter a host name: host_nameEnter enable secret: secret_passwordWould you like to configure a Telnet password? yes yesEnter Telnet password: telnet_passwordWould you like to enable as a cluster command switch? noEnter clus

14、ter name: cls_nameCatalyst 2950 Switch启动界面 - SLogging In to the Switch and Entering the Enable PasswordLogging In to the Switch and Configuration Modes:Global configuration mode wg_sw_a#configure terminalwg_sw_a(config)#Interface configuration modewg_sw_a(config)#interface e0/1wg_sw_a(config-if)#Con

15、figuring the SwitchConfiguration Modes:ConfigurinSets the local identity for the switchConfiguring Switch IdentificationSets the local identity for th配置交换机的管理IP地址SW2950(config)#interface vlan 1SW2950(config-if)#ip address SW2950(config-if)#no shutdown配置交换机的网关Switch(config)#ip default-gateway ip addr

16、ess例如:SW2950(config)#ip default-gateway 54Configuring the Switch IP Address配置交换机的管理IP地址Configuring the SwShowing Switch Initial Startup Statuswg_sw_a#show version Displays the configuration of the system hardware, software version, names and sources of configuration files, and boot images wg_sw_a#sh

17、ow running-configuration Displays the switchs current active configuration filewg_sw_a#show interfacesDisplays statistics for all interfaces configured on the switchShowing Switch Initial StartupSwitch show version Commandsw2950#show versionCisco Internetwork Operating System Software IOS (tm) C2950

18、 Software (C2950-I6Q4L2-M), Version 12.1(14)EA1a, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2003 by cisco Systems, Inc.Compiled Tue 02-Sep-03 03:33 by antoninoImage text-base: 0 x80010000, data-base: 0 x805C0000ROM: Bootstrap program is CALHOUN boot loadersw2950 uptime is 1 minuteSystem returned to R

19、OM by power-onSystem image file is flash:/c2950-i6q4l2-mz.121-14.EA1a.bincisco WS-C2950-24 (RC32300) processor with 20710K bytes of memory.Last reset from system-resetRunning Standard Image24 FastEthernet/IEEE 802.3 interface(s)32K bytes of flash-simulated non-volatile configuration memory.Base ethe

20、rnet MAC Address: 00:0F:72:DB:4E:C0Motherboard serial number: FOC0813Y1H6Configuration register is 0 xFSwitch show version Commandsw2sw2950#show interfaces fastEthernet 0/1FastEthernet0/1 is down, line protocol is down (notconnect) Hardware is Fast Ethernet, address is 000f.72db.4ec1 (bia 000f.72db.

21、4ec1) MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Auto-duplex, Auto-speed input flow-control is off, output flow-control is off ARP type: ARPA, ARP Timeout 04:00:00 Last input never, output

22、00:14:53, output hang never-More-Switch show interfaces Commandsw2950#show interfaces fastEth路由器的简单配置任何时侯按Ctrl+C推出对话模式路由器的简单配置任何时侯按Ctrl+C推出对话模式Router#setup - System Configuration Dialog -Continue with configuration dialog? yes/no: yesAt any point you may enter a question mark ? for help.Use ctrl-c t

23、o abort configuration dialog at any prompt.Default settings are in square brackets .Basic management setup configures only enough connectivityfor management of the system, extended setup will ask youto configure each interface on the systemWould you like to enter basic management setup? yes/no: no出厂

24、时的缺省配置Router#setup出厂时的缺省配置Setup Interface SummaryFirst, would you like to see the current interface summary? yes:InterfaceIP-AddressOK?Method Status ProtocolBRI0unassignedYES unset administratively down downBRI0:1unassignedYES unset administratively down downBRI0:2unassignedYES unset administrativel

25、y down downEthernet0unassignedYES unset administratively down downSerial0unassignedYES unset administratively down downInterfaces Found During StartupSetup Interface SummaryFirst, Setup Initial Global ParametersConfiguring global parameters: Enter host name Router:wg_ro_c The enable secret is a pass

26、word used to protect access to privileged EXEC and configuration modes. This password, after entered, becomes encrypted in the configuration. Enter enable secret: cisco The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot ima

27、ges. Enter enable password: sanfran The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: sanjose Configure SNMP Network Management? no:Setup Initial Global ParameteSetup Initial Protocol Configurations Configure LAT? yes: no

28、 Configure AppleTalk? no: Configure DECnet? no: Configure IP? yes: Configure IGRP routing? yes: no Configure RIP routing? no: Configure CLNS? no: Configure IPX? no: Configure Vines? no: Configure XNS? no: Configure Apollo? no:Setup Initial Protocol ConfigSetup Interface ParametersBRI interface needs

29、 isdn switch-type to be configured Valid switch types are : 0 none.Only if you dont want to configure BRI. 1 basic-1tr6.1TR6 switch type for Germany2 basic-5ess.AT&T 5ESS switch type for the US/Canada3 basic-dms100.Northern DMS-100 switch type for US/Canada 4 basic-net3.NET3 switch type for UK and E

30、urope5 basic-ni.National ISDN switch type6 basic-ts013.TS013 switch type for Australia7 ntt.NTT switch type for Japan8 vn3.VN3 and VN4 switch types for France Choose ISDN BRI Switch Type 2:Configuring interface parameters:Do you want to configure BRI0 (BRI d-channel) interface? no:Do you want to con

31、figure Ethernet0 interface? no: yes Configure IP on this interface? no: yes IP address for this interface: 3 Subnet mask for this interface : Class A network is , 24 subnet bits; mask is /24Do you want to configure Serial0 interface? no:Setup Interface ParametersBRISetup Script Review and UseThe fol

32、lowing configuration command script was created:hostname Routerenable secret 5 $1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enable password sanfranline vty 0 4password sanjoseno snmp-server!no appletalk routingno decnet routingip routingno clns routingno ipx routingno vines routingno xns routingno apollo routingis

33、dn switch-type basic-5essinterface BRI0shutdownno ip address!interface Ethernet0no shutdownip address 1 no mop enabled!interface Serial0shutdownno ip addressend0 Go to the IOS command prompt without saving this config.1 Return back to the setup without saving this config.2 Save this configuration to

34、 nvram and exit.Enter your selection 2:Setup Script Review and UseThLogging In to the RouterLogging In to the RouterYou can abbreviate a command to the fewest characters that make a unique character string.Router User-Mode Command Listwg_ro_c?Exec commands: access-enable Create a temporary Access-Li

35、st entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from

36、 the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC- More -You can abbreviate a command twg_ro_c#?Exec commands: access-enable Create a temporary Access-List entry access-profile Apply

37、user-profile to interface access-template Create a temporary Access-List entry bfe For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy from one file to anoth

38、er debug Debugging functions (see also undebug) delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase a filesystem exit Exit from the EXEC help Description of the in

39、teractive help system- More -You can complete a command string by entering the unique character string, then pressing the Tab key.Router Privileged-Mode Command Listwg_ro_c#?You can complete a co帮助机制上下文关联帮助错误信息提示指出所输入交换机命令的错误所在，以便于修改或纠正.可以重新调出以前运行过的命令，用来再次运行、查看或修改. 之前命令保存区提供命令清单和与特定命令相关联的参数. 帮助机制上下文

40、关联帮助错误信息提示指出所输入交换机命令的错误路由上下文帮助Router# clokTranslating CLOK% Unknown command or computer name, or unable to find computer addressRouter# clear clockRouter# % Incomplete command.Router# set Set the time and dateRouter# % Incomplete command.Router# hh:mm:ss Current TimeRouter# clock set 19:56:00% Incom

41、plete command.Router# clock set 19:56:00 ? Day of the monthMONTH Month of the yearRouter# clock set 19:56:00 04 8 % Invalid input detected at the markerRouter# clock set 19:56:00 04 August% Incomplete command.Router# clock set 19:56:00 04 August ? YearCommand PromptingSyntax CheckingCommand Promptin

42、g路由上下文帮助Router# clokTranslatinshow version Commandwg_ro_a#show versionCisco Internetwork Operating System Software IOS (tm) 2500 Software (C2500-JS-L), Version 12.0(3), RELEASE SOFTWARE (fc1)Copyright (c) 1986-1999 by cisco Systems, Inc.Compiled Mon 08-Feb-99 18:18 by phanguyeImage text-base: 0 x030

43、50C84, data-base: 0 x00001000ROM: System Bootstrap, Version 11.0(10c), SOFTWAREBOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(10c), RELEASE SOFTWARE(fc1)wg_ro_a uptime is 20 minutesSystem restarted by reloadSystem image file is flash:c2500-js-l_120-3.bin(output omitted)-More-Configura

44、tion register is 0 x2102show version Commandwg_ro_a#sh(一行中长字串会自动滚卷).光标移动到命令行的开始位置.光标移动到命令行的结束位置.回移一个单词下移一个字符.回移一个字符.下移一个单词使用增强的编辑命令删除当前字符Router$ value for customers, employees, and partners.(一行中长字串会自动滚卷). show history显示命令保存区内容Router terminal history size lines 设置命令缓冲区大小查看之前用过的命令Ctrl-P or Up arrow调出最

45、近(前一)使用过的Viewing the ConfigurationViewing the Configurationshow running-config and show startup-config Commandswg_ro_c#show startup-configUsing 1359 out of 32762 bytes!version 12.0!- More -wg_ro_c#show running-configBuilding configuration.Current configuration:!version 12.0!- More -In NVRAMIn RAMDis

46、plays the current and saved configurationshow running-config and show Overview of Router ModesOverview of Router Modes基本实验操作WisdomenableWisdom#configure terminal Wisdom(config)#no ip domain-lookup Wisdom(config)#line console 0Wisdom(config-line)#logging synchronous Wisdom(config-line)#no exec-timeou

47、t Wisdom(config-line)#password ciscoWisdom(config-line)#loginWisdom(config-line)#exitWisdom(config)#line vty 0 4Wisdom(config-line)#logging synchronous Wisdom(config-line)#no exec-timeout Wisdom(config-line)#password ciscoWisdom(config-line)#loginWisdom(config-line)#endWisdom#configure terminalWisdo

48、m(config)#enable secret ciscoWisdom(config)#endWisdom#service password-encryption /手工加密,不再显示明文密码基本实验操作Wisdomenable保存配置wg_ro_c#wg_ro_c#copy running-config startup-configDestination filename startup-config?Building configurationwg_ro_c#Copies the current configuration to NVRAM保存命令Copy running-config s

49、tartup-config=write保存配置wg_ro_c#Copies the currentSets the local identity or message for the accessed router or interface配置路由器主机名等参数Sets the local identity or mes配置路由器的密码配置路由器的密码两条常用的命令Router(config)#line console 0Router(config-line)#exec-timeout 0 0 Router(config)#line console 0Router(config-line)#l

50、ogging synchronous阻止会话退出使光标还原到原来的位置，重新显示被覆盖的命里两条常用的命令Router(config)#line conUnique addressing allows communication between end stations.Path choice is based on destination address.Location is represented by an addressIP地址规划Unique addressing allows commu主机通信对IP地址的要求1、网络中IP地址必须唯一2、在一个交换网络中主机必须有相同的网络号才

51、能通信3、在不同的交换网络中（用路由器分开的网络），主机不能有相同的网络号主机通信对IP地址的要求1、网络中IP地址必须唯一IP寻址IP寻址IP 地址分类IP 地址分类不带子网的IP寻址不带子网的IP寻址带子网的IP寻址(这里的子网掩码为24位)带子网的IP寻址(这里的子网掩码为24位)子网地址子网地址子网掩码子网掩码二进制子网掩码子网掩码只能有这9个数字二进制子网掩码子网掩码只能有这9个数字Subnets not in usethe default没有子网的子网掩码缺省子网掩码Subnets not in usethe defaultNetwork number extended by ei

52、ght bits有子网的子网掩码Network number extended by eig有子网的子网掩码 (续)Network number extended by ten bits有子网的子网掩码 (续)Network number ext划分子网的几个捷径:1.你所选择的子网掩码将会产生多少个子网?:2的x次方-2(x代表掩码位,即2进制为1的部分)2.每个子网能有多少主机?: 2的y次方-2(y代表主机位,即2进制为0的部分)3.有效子网是?:有效子网号=256-10进制的子网掩码4.每个子网的广播地址是?:广播地址=下个子网号-15.每个子网的有效主机分别是?:忽略子网内全为0和全

53、为1的地址剩下的就是有效主机地址.最后有效1个主机地址=下个子网号-2(即广播地址-1)划分子网的几个捷径:1.你所选择的子网掩码将会产生多少个子网子网划分Other subnets24申请到一段C类地址，将这段地址分配给网络中的主机，要求有5个子网，每个子网最少有20台主机，地址分配的步骤：1、确定网络的主机位n，利用32-n算出网络位，然后算出子网掩码2、根据子网掩码，确定每段IP地址的范围子网划分Other 220.160.1配置路由器IP地址wg_ro_c#configure terminalwg_ro_c(config)#interface ethernet 0wg_ro_c(con

54、fig-if)#ip address wg_ro_c(config-if)#no shutdownwg_ro_c(config-if)#exit配置路由器IP地址wg_ro_c#configure tershow interfacesRouter#show interfacesEthernet0 is up, line protocol is up Hardware is Lance, address is 00e0.1e5d.ae2f (bia 00e0.1e5d.ae2f) Internet address is 1/24 MTU 1500 bytes, BW 10000 Kbit, DL

55、Y 1000 usec, rely 255/255, load 1/255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:07, output 00:00:08, output hang never Last clearing of show interface counters never Queueing strategy: fifo Output queue 0/40, 0 drops; input que

56、ue 0/75, 0 drops 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec 81833 packets input, 27556491 bytes, 0 no buffer Received 42308 broadcasts, 0 runts, 0 giants, 0 throttles 1 input errors, 0 CRC, 0 frame, 0 overrun, 1 ignored, 0 abort 0 input packets with

57、dribble condition detected 55794 packets output, 3929696 bytes, 0 underruns 0 output errors, 0 collisions, 1 interface resets 0 babbles, 0 late collision, 4 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped outshow interfacesRouter#show int接口的几种状态诊断的步骤接口的几种状态诊断

58、的步骤检查串口Router#show interface serial 0Serial0 is up, line protocol is up Hardware is HD64570 Internet address is /24 MTU 1500 bytes, BW 64 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 00:00:09, output 00:00:04, output hang neve

59、r Last clearing of show interface counters never Input queue: 0/75/0 (size/max/drops); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/1/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max alloc

60、ated) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 0 bits/sec, 0 packets/sec(output omitted) BW 64 Kbit,检查串口Router#show interface seri检查串行线是否连接好Router#show controller serial 0HD unit 0, idb = 0 x121C04, driver structure at 0 x127078buffer size 1524 HD unit 0, V.35 DTE cable.Sho