管理Cisco设备分析

管理Cisco设备配置方式EXEC模式用户模式对交换机和路由器的有限操作命令提示符为

主机名>主要有两个命令模式提供命令键入.模式一:EXEC模式(续)特权(或enabled)模式对交换机和路由器更深入的操作有配置和监视权力是进入其它配置模式的前提命令提示符为

主机名#模式二(也是最常用的模式):Catalyst2950Switch启动界面

---SystemConfigurationDialog---

Atanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Continuewithconfigurationdialog?[yes/no]:yesEnterIPaddress:ip_addressEnterIPnetmask:ip_netmaskWouldyouliketoenteradefaultgatewayaddress?[yes]:yesIPaddressofthedefaultgateway:ip_addressEnterahostname:host_nameEnterenablesecret:secret_passwordWouldyouliketoconfigureaTelnetpassword?[yes]yesEnterTelnetpassword:telnet_passwordWouldyouliketoenableasaclustercommandswitch?noEnterclustername:cls_nameLoggingIntotheSwitchand

EnteringtheEnablePasswordConfigurationModes:Globalconfigurationmodewg_sw_a#configureterminalwg_sw_a(config)#Interfaceconfigurationmodewg_sw_a(config)#interfacee0/1wg_sw_a(config-if)#ConfiguringtheSwitchSetsthelocalidentityfortheswitchConfiguringSwitchIdentification配置交换机的管理IP地址SW2950(config)#interfacevlan1SW2950(config-if)#noshutdown配置交换机的网关Switch(config)#ipdefault-gateway{ipaddress}例如:ConfiguringtheSwitchIPAddressShowingSwitchInitialStartupStatuswg_sw_a#showversionDisplaystheconfigurationofthesystemhardware,softwareversion,namesandsourcesofconfigurationfiles,andbootimageswg_sw_a#showrunning-configurationDisplaystheswitch’scurrentactiveconfigurationfilewg_sw_a#showinterfacesDisplaysstatisticsforallinterfacesconfiguredontheswitchSwitchshowversionCommandsw2950#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2950Software(C2950-I6Q4L2-M),Version12.1(14)EA1a,RELEASESOFTWARE(fc1)Copyright(c)1986-2003byciscoSystems,Inc.CompiledTue02-Sep-0303:33byantoninoImagetext-base:0x80010000,data-base:0x805C0000ROM:BootstrapprogramisCALHOUNbootloadersw2950uptimeis1minuteSystemreturnedtoROMbypower-onSystemimagefileis"flash:/c2950-i6q4l2-mz.121-14.EA1a.bin"ciscoWS-C2950-24(RC32300)processorwith20710Kbytesofmemory.Lastresetfromsystem-resetRunningStandardImage24FastEthernet/IEEE802.3interface(s)32Kbytesofflash-simulatednon-volatileconfigurationmemory.BaseethernetMACAddress:00:0F:72:DB:4E:C0Motherboardserialnumber:FOC0813Y1H6Configurationregisteris0xFsw2950#showinterfacesfastEthernet0/1FastEthernet0/1isdown,lineprotocolisdown(notconnect)HardwareisFastEthernet,addressis000f.72db.4ec1(bia000f.72db.4ec1)MTU1500bytes,BW10000Kbit,DLY1000usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Auto-duplex,Auto-speedinputflow-controlisoff,outputflow-controlisoffARPtype:ARPA,ARPTimeout04:00:00Lastinputnever,output00:14:53,outputhangnever--More--SwitchshowinterfacesCommand路由器的简单配置－任何时侯按Ctrl+C推出对话模式Router#setup---SystemConfigurationDialog---Continuewithconfigurationdialog?[yes/no]:yesAtanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Basicmanagementsetupconfiguresonlyenoughconnectivityformanagementofthesystem,extendedsetupwillaskyoutoconfigureeachinterfaceonthesystemWouldyouliketoenterbasicmanagementsetup?[yes/no]:no出厂时的缺省配置SetupInterfaceSummaryFirst,wouldyouliketoseethecurrentinterfacesummary?[yes]:Interface IP-Address OK? Method Status ProtocolBRI0 unassigned YES unset administrativelydown downBRI0:1 unassigned YES unset administrativelydown downBRI0:2 unassigned YES unset administrativelydown downEthernet0 unassigned YES unset administrativelydown downSerial0 unassigned YES unset administrativelydown downInterfacesFoundDuringStartupSetupInitial

GlobalParameters

Configuringglobalparameters:Enterhostname[Router]:wg_ro_cTheenablesecretisapasswordusedtoprotectaccesstoprivilegedEXECandconfigurationmodes.Thispassword,afterentered,becomesencryptedintheconfiguration.Enterenablesecret:ciscoTheenablepasswordisusedwhenyoudonotspecifyanenablesecretpassword,withsomeoldersoftwareversions,andsomebootimages.Enterenablepassword:sanfranThevirtualterminalpasswordisusedtoprotectaccesstotherouteroveranetworkinterface.Entervirtualterminalpassword:sanjoseConfigureSNMPNetworkManagement?[no]:SetupInitial

ProtocolConfigurations

ConfigureLAT?[yes]:noConfigureAppleTalk?[no]:ConfigureDECnet?[no]:ConfigureIP?[yes]:ConfigureIGRProuting?[yes]:noConfigureRIProuting?[no]:ConfigureCLNS?[no]:ConfigureIPX?[no]:ConfigureVines?[no]:ConfigureXNS?[no]:ConfigureApollo?[no]:SetupInterface

ParametersBRIinterfaceneedsisdnswitch-typetobeconfiguredValidswitchtypesare: [0]none..........Onlyifyoudon'twanttoconfigureBRI. [1]basic-1tr6....1TR6switchtypeforGermany [2]basic-5ess....AT&T5ESSswitchtypefortheUS/Canada [3]basic-dms100..NorthernDMS-100switchtypeforUS/Canada [4]basic-net3....NET3switchtypeforUKandEurope [5]basic-ni......NationalISDNswitchtype [6]basic-ts013...TS013switchtypeforAustralia [7]ntt...........NTTswitchtypeforJapan [8]vn3...........VN3andVN4switchtypesforFranceChooseISDNBRISwitchType[2]:Configuringinterfaceparameters:DoyouwanttoconfigureBRI0(BRId-channel)interface?[no]:DoyouwanttoconfigureEthernet0interface?[no]:yesConfigureIPonthisinterface?[no]:yesIPaddressforthisinterface:Subnetmaskforthisinterface[]:ClassAnetworkis,24subnetbits;maskis/24DoyouwanttoconfigureSerial0interface?[no]:SetupScript

ReviewandUseThefollowingconfigurationcommandscriptwascreated:hostnameRouterenablesecret5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enablepasswordsanfranlinevty04passwordsanjosenosnmp-server!noappletalkroutingnodecnetroutingiproutingnoclnsroutingnoipxroutingnovinesroutingnoxnsroutingnoapolloroutingisdnswitch-typebasic-5essinterfaceBRI0shutdownnoipaddress!interfaceEthernet0noshutdownnomopenabled!interfaceSerial0shutdownnoipaddress<textomitted>end[0]GototheIOScommandpromptwithoutsavingthisconfig.[1]Returnbacktothesetupwithoutsavingthisconfig.[2]Savethisconfigurationtonvramandexit.Enteryourselection[2]:LoggingIntotheRouterYoucanabbreviateacommandtothefewestcharactersthatmakeauniquecharacterstring.RouterUser-Mode

CommandListwg_ro_c>?Execcommands:access-enableCreateatemporaryAccess-Listentry

atmsigExecuteAtmSignallingCommands

cdChangecurrentdevice

clearResetfunctions

connectOpenaterminalconnection

dirListfilesongivendevice

disableTurnoffprivilegedcommands

disconnectDisconnectanexistingnetworkconnection

enableTurnonprivilegedcommands

exitExitfromtheEXEC

helpDescriptionoftheinteractivehelpsystem

latOpenalatconnection

lockLocktheterminal

loginLoginasaparticularuser

logoutExitfromtheEXEC

--More--wg_ro_c#?Execcommands:access-enableCreateatemporaryAccess-Listentryaccess-profileApplyuser-profiletointerfaceaccess-templateCreateatemporaryAccess-ListentrybfeFormanualemergencymodessettingcdChangecurrentdirectoryclearResetfunctionsclockManagethesystemclockconfigureEnterconfigurationmodeconnectOpenaterminalconnectioncopyCopyfromonefiletoanotherdebugDebuggingfunctions(seealso'undebug')deleteDeleteafiledirListfilesonafilesystemdisableTurnoffprivilegedcommandsdisconnectDisconnectanexistingnetworkconnectionenableTurnonprivilegedcommandseraseEraseafilesystemexitExitfromtheEXEChelpDescriptionoftheinteractivehelpsystem--More--Youcancompleteacommandstringbyenteringtheuniquecharacterstring,thenpressingtheTabkey.RouterPrivileged-Mode

CommandList帮助机制上下文关联帮助错误信息提示指出所输入交换机命令的错误所在，以便于修改或纠正.可以重新调出以前运行过的命令，用来再次运行、查看或修改.之前命令保存区提供命令清单和与特定命令相关联的参数.

路由上下文帮助Router#clokTranslating"CLOK"%Unknowncommandorcomputername,orunabletofindcomputeraddressRouter#clearclockRouter#%Incompletecommand.Router#setSetthetimeanddateRouter#%Incompletecommand.Router#hh:mm:ssCurrentTimeRouter#clockset19:56:00%Incompletecommand.Router#clockset19:56:00?<1-31>DayofthemonthMONTHMonthoftheyearRouter#clockset19:56:00048

^%Invalidinputdetectedatthe'^'markerRouter#clockset19:56:0004August%Incompletecommand.Router#clockset19:56:0004August?<1993-2035>YearCommand

PromptingSyntaxCheckingCommand

PromptingshowversionCommandwg_ro_a#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)2500Software(C2500-JS-L),Version12.0(3),RELEASESOFTWARE(fc1)Copyright(c)1986-1999byciscoSystems,Inc.CompiledMon08-Feb-9918:18byphanguyeImagetext-base:0x03050C84,data-base:0x00001000ROM:SystemBootstrap,Version11.0(10c),SOFTWAREBOOTFLASH:3000BootstrapSoftware(IGS-BOOT-R),Version11.0(10c),RELEASESOFTWARE(fc1)wg_ro_auptimeis20minutesSystemrestartedbyreloadSystemimagefileis"flash:c2500-js-l_120-3.bin"(outputomitted)--More--Configurationregisteris0x2102

(一行中长字串会自动滚卷).

<Ctrl-A>

光标移动到命令行的开始位置.

<Ctrl-E>

光标移动到命令行的结束位置.

<Esc-B>

回移一个单词

<Ctrl-F>

下移一个字符.

<Ctrl-B>

回移一个字符.

<Esc-F>

下移一个单词使用增强的编辑命令<Ctrl-D>删除当前字符

Router>$valueforcustomers,employees,andpartners.Ctrl-PorUparrow调出最近(前一)使用过的命令Ctrl-NorDownarrow调出更近使用过的命令Router>showhistory显示命令保存区内容Router>terminalhistorysizelines

设置命令缓冲区大小查看之前用过的命令ViewingtheConfigurationshowrunning-configand

showstartup-configCommandswg_ro_c#showstartup-configUsing1359outof32762bytes!version12.0! --More--wg_ro_c#showrunning-configBuildingconfiguration...

Currentconfiguration:

!

version12.0! --More--InNVRAMInRAMDisplaysthecurrentandsavedconfigurationOverviewofRouterModes基本实验操作Wisdom>enableWisdom#configureterminalWisdom(config)#noipdomain-lookupWisdom(config)#lineconsole0Wisdom(config-line)#loggingsynchronousWisdom(config-line)#noexec-timeoutWisdom(config-line)#passwordciscoWisdom(config-line)#loginWisdom(config-line)#exitWisdom(config)#linevty04Wisdom(config-line)#loggingsynchronousWisdom(config-line)#noexec-timeoutWisdom(config-line)#passwordciscoWisdom(config-line)#loginWisdom(config-line)#endWisdom#configureterminalWisdom(config)#enablesecretciscoWisdom(config)#endWisdom#servicepassword-encryption//手工加密,不再显示明文密码保存配置wg_ro_c#wg_ro_c#copyrunning-configstartup-configDestinationfilename[startup-config]?Buildingconfiguration…wg_ro_c#CopiesthecurrentconfigurationtoNVRAM保存命令Copyrunning-configstartup-config=writeSetsthelocalidentityormessagefortheaccessedrouterorinterface配置路由器主机名等参数配置路由器的密码两条常用的命令Router(config)#lineconsole0Router(config-line)#exec-timeout00Router(config)#lineconsole0Router(config-line)#loggingsynchronous阻止会话退出使光标还原到原来的位置，重新显示被覆盖的命里Uniqueaddressingallowscommunication

betweenendstations.Pathchoiceisbasedondestinationaddress.LocationisrepresentedbyanaddressIP地址规划主机通信对IP地址的要求1、网络中IP地址必须唯一2、在一个交换网络中主机必须有相同的网络号才能通信3、在不同的交换网络中（用路由器分开的网络），主机不能有相同的网络号IP寻址IP地址分类不带子网的IP寻址带子网的IP寻址(这里的子网掩码为24位)子网地址子网掩码二进制子网掩码－子网掩码只能有这9个数字Subnetsnotinuse—thedefault没有子网的子网掩码－缺省子网掩码Networknumberextendedbyeightbits有子网的子网掩码有子网的子网掩码(续)Networknumberextendedbytenbits划分子网的几个捷径:1.你所选择的子网掩码将会产生多少个子网?:2的x次方-2(x代表掩码位,即2进制为1的部分)

2.每个子网能有多少主机?:2的y次方-2(y代表主机位,即2进制为0的部分)

3.有效子网是?:有效子网号=256-10进制的子网掩码4.每个子网的广播地址是?:广播地址=下个子网号-1

5.每个子网的有效主机分别是?:忽略子网内全为0和全为1的地址剩下的就是有效主机地址.最后有效1个主机地址=下个子网号-2(即广播地址-1)

子网划分Othersubnets申请到一段C类地址，将这段地址分配给网络中的主机，要求有5个子网，每个子网最少有20台主机，地址分配的步骤：1、确定网络的主机位n，利用32-n算出网络位，然后算出子网掩码2、根据子网掩码，确定每段IP地址的范围配置路由器IP地址wg_ro_c#configureterminalwg_ro_c(config)#interfaceethernet0wg_ro_c(config-if)#wg_ro_c(config-if)#noshutdownwg_ro_c(config-if)#exitshowinterfacesRouter#showinterfacesEthernet0isup,lineprotocolisupHardwareisLance,addressis00e0.1e5d.ae2f(bia00e0.1e5d.ae2f)MTU1500bytes,BW10000Kbit,DLY1000usec,rely255/255,load1/255EncapsulationARPA,loopbacknotset,keepaliveset(10sec)ARPtype:ARPA,ARPTimeout04:00:00Lastinput00:00:07,