構(gòu)建簡單的網(wǎng)絡(luò)：第4章 操作與配置Cisco IOS

第四章

操作與配置

CiscoIOSCiscoIOS軟件提供多種網(wǎng)絡(luò)服務(wù)進而支持各種網(wǎng)絡(luò)應(yīng)用.Cisco互連網(wǎng)操作系統(tǒng)(IOS)軟件硬件自檢定位并加載CiscoIOS映象文件定位并運行配置文件Cisco設(shè)備的簡單啟動過程提供命令行界面在不同的網(wǎng)絡(luò)設(shè)備上運行時有差別在命令模式下可以鍵入或粘貼命令

鍵入命令后回車，設(shè)備即解析和執(zhí)行所鍵入的命令兩個主要命令模式是用戶模式和特權(quán)模式不同的命令模式有不同的提示符CiscoIOSCiscoIOS用戶界面的基本特性特權(quán)(或enabled)模式對交換機和路由器更深入的操作有配置和監(jiān)視權(quán)力是進入其它配置模式的前提命令提示符為

主機名#模式二(也是最常用的模式):CiscoIOS的主要命令模式(續(xù))系統(tǒng)啟動例程會初始化路由器如果需要，路由器可以有選擇性地回退啟動CheckhardwareFindandloadCiscoIOSsoftwareimage

Findandapplyrouterconfigurationinformation

LoadBootstrap1. 啟動前確認正確連接線纜和控制線2. 按下電源開關(guān)3. 觀察啟動順序 CiscoIOS輸出到控制臺上的內(nèi)容Cisco路由器的初始啟動沒有配置文件與有配置文件的路由器啟動對比 ---SystemConfigurationDialog---

Continuewithconfigurationdialog?[yes/no]:yes

Atanypointyoumayenteraquestionmark'?'forhelp.

Usectrl-ctoabortconfigurationdialogatanyprompt.

Defaultsettingsareinsquarebrackets'[]'.

Setup模式wg_ro_ccon0isnowavailablePressRETURNtogetstarted.用戶模式提示wg_ro_c>路由器啟動時在控制臺上的輸出內(nèi)容控制臺Setup:初始配置對話框Router#setup---SystemConfigurationDialog---Continuewithconfigurationdialog?[yes/no]:yAtanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Basicmanagementsetupconfiguresonlyenoughconnectivityformanagementofthesystem,extendedsetupwillaskyoutoconfigureeachinterfaceonthesystemWouldyouliketoenterbasicmanagementsetup?[yes/no]:n設(shè)置全局參數(shù)初始化全局參數(shù)Configuringglobalparameters:Enterhostname[Router]:wg_ro_cTheenablesecretisapasswordusedtoprotectaccesstoprivilegedEXECandconfigurationmodes.Thispassword,afterentered,becomesencryptedintheconfiguration.Enterenablesecret:ciscoTheenablepasswordisusedwhenyoudonotspecifyanenablesecretpassword,withsomeoldersoftwareversions,andsomebootimages.Enterenablepassword:sanfranThevirtualterminalpasswordisusedtoprotectaccesstotherouteroveranetworkinterface.Entervirtualterminalpassword:sanjoseConfigureSNMPNetworkManagement?[no]:設(shè)置腳本的確認與應(yīng)用Thefollowingconfigurationcommandscriptwascreated:hostnameRouterenablesecret5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enablepasswordsanfranlinevty04passwordsanjosenosnmp-server!noappletalkroutingnodecnetroutingiproutingnoclnsroutingnoipxroutingnovinesroutingnoxnsroutingnoapolloroutingisdnswitch-typebasic-5essinterfaceBRI0shutdownnoipaddress!interfaceEthernet0noshutdownipaddress1nomopenabled!interfaceSerial0shutdownnoipaddress<textomitted>end[0]GototheIOScommandpromptwithoutsavingthisconfig.[1]Returnbacktothesetupwithoutsavingthisconfig.[2]Savethisconfigurationtonvramandexit.Enteryourselection[2]:Consolewg_ro_c>wg_ro_c>enablewg_ro_c#wg_ro_c#disablewg_ro_c>wg_ro_c>logoutwg_ro_ccon0isnowavailablePressRETURNtogetstarted.用戶模式提示特權(quán)模式提示登入路由器只要所輸命令串在全部命令中是唯一的，可以將一個命令盡可能地簡寫，路由器在用戶模式下的命令清單wg_ro_c>?Execcommands:

access-enableCreateatemporaryAccess-Listentry

atmsigExecuteAtmSignallingCommands

cdChangecurrentdevice

clearResetfunctions

connectOpenaterminalconnection

dirListfilesongivendevice

disableTurnoffprivilegedcommands

disconnectDisconnectanexistingnetworkconnection

enableTurnonprivilegedcommands

exitExitfromtheEXEC

helpDescriptionoftheinteractivehelpsystem

latOpenalatconnection

lockLocktheterminal

loginLoginasaparticularuser

logoutExitfromtheEXEC

--More--wg_ro_c#?Execcommands:access-enableCreateatemporaryAccess-Listentryaccess-profileApplyuser-profiletointerfaceaccess-templateCreateatemporaryAccess-ListentrybfeFormanualemergencymodessettingcdChangecurrentdirectoryclearResetfunctionsclockManagethesystemclockconfigureEnterconfigurationmodeconnectOpenaterminalconnectioncopyCopyfromonefiletoanotherdebugDebuggingfunctions(seealso'undebug')deleteDeleteafiledirListfilesonafilesystemdisableTurnoffprivilegedcommandsdisconnectDisconnectanexistingnetworkconnectionenableTurnonprivilegedcommandseraseEraseafilesystemexitExitfromtheEXEChelpDescriptionoftheinteractivehelpsystem--More--路由器在特權(quán)模式下的命令清單只要輸入部分命令串(唯一表示某個命令)，緊接著按tab鍵就可以完整地輸入一個命令showversion命令wg_ro_a#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)2500Software(C2500-JS-L),Version12.0(3),RELEASESOFTWARE(fc1)Copyright(c)1986-1999byciscoSystems,Inc.CompiledMon08-Feb-9918:18byphanguyeImagetext-base:0x03050C84,data-base:0x00001000ROM:SystemBootstrap,Version11.0(10c),SOFTWAREBOOTFLASH:3000BootstrapSoftware(IGS-BOOT-R),Version11.0(10c),RELEASESOFTWARE(fc1)wg_ro_auptimeis20minutesSystemrestartedbyreloadSystemimagefileis"flash:c2500-js-l_120-3.bin"(outputomitted)--More--Configurationregisteris0x2102

查看配置情況控制臺IOSSetuputilityshowstartup-configshowrunning-config將配置參數(shù)保存到NVRAM中ConfigConfigRAMNVRAMshowrunning

和showstartup

命令wg_ro_c#showstartup-configUsing1359outof32762bytes!version12.0! --More--wg_ro_c#showrunning-configBuildingconfiguration...

Currentconfiguration:

!

version12.0! --More--保存在NVRAM中保存在RAM中顯示當(dāng)前運行的和保存的配置情況路由器模式一覽Router(config)#Router>enableRouter#configtermExitCtrl-Z(end)用戶模式特權(quán)模式全局配置模式配置模式模式提示Interface Router(config-if)#Subinterface Router(config-subif)#Controller Router(config-controller)#Line Router(config-line)#Router Router(config-router)#IPXrouter Router(config-ipx-router)#保存配置wg_ro_c#wg_ro_c#copyrunning-configstartup-configDestinationfilename[startup-config]?Buildingconfiguration…wg_ro_c#將當(dāng)前運行的配置復(fù)制到NVRAM中配置路由器的各種標識為路由器或其端口設(shè)置標識或信息路由器名Router(config)#hostnamewg_ro_cwg_ro_c(config)#開機時的固定顯示信息wg_ro_c(config)#bannermotd#

AccountingDepartmentYouhaveenteredasecuredsystem.Authorizedaccessonly!

#配置路由器的各種標識為路由器或其端口設(shè)置標識或信息路由器名Router(config)#hostnamewg_ro_cwg_ro_c(config)#開機時的固定顯示信息wg_ro_c(config)#bannermotd# AccountingDepartmentYouhaveenteredasecuredsystem.Authorizedaccessonly!

#端口描述wg_ro_c(config)#interfaceethernet0wg_ro_c(config-if)#descriptionEngineeringLAN,Bldg.18Router(config)#lineconsole0Router(config-line)#loginRouter(config-line)#passwordcisco控制臺密碼虛擬終端密碼Router(config)#linevty04Router(config-line)#loginRouter(config-line)#passwordsanjose路由器密碼配置Router(config)#lineconsole0Router(config-line)#loginRouter(config-line)#passwordcisco控制臺密碼虛擬終端密碼Router(config)#linevty04Router(config-line)#loginRouter(config-line)#passwordsanjose特權(quán)模式明文密碼Router(config)#enablepasswordcisco特權(quán)模式加密密碼Router(config)#enablesecretsanfran

路由器密碼配置其它控制臺命令Router(config)#lineconsole0Router(config-line)#exec-timeout00Router(config)#lineconsole0Router(config-line)#loggingsynchronous禁止控制臺會話自動退出重顯被打亂的控制臺輸入Router(config)#interfacetypenumberRouter(config-if)#端口配置type

包括serial,ethernet,tokenring,fddi,hssi,loopback,dialer,null,async,atm,bri,andtunnelnumber

用來識別具體的單個端口Router(config-if)#exit從當(dāng)前端口配置模式退出Router(config)#interfacetypeslot/portRouter(config-if)#模塊化端口的表示法開啟或關(guān)閉端口Router#configuretermRouter(config)#interfaceserial0

Router(config-if)#noshutdown%LINK-3-UPDOWN:InterfaceSeria0,changedstatetoup%LINEPROTO-5-UPDOWN:LineProtocolonInterfaceSerial0,changedstatetoup開啟已經(jīng)關(guān)閉的端口Router#configuretermRouter(config)#interfaceserial0

Router(config-if)#shutdown%LINK-5-CHANGED:InterfaceSerial0,changedstatetoadministrativelydown%LINEPROTO-5-UPDOWN:LineprotocolonInterfaceSerial0,changedstatetodown人工關(guān)閉端口路由器的

showinterfaces

命令Router#showinterfacesEthernet0isup,lineprotocolisupHardwareisLance,addressis00e0.1e5d.ae2f(bia00e0.1e5d.ae2f)Internetaddressis1/24MTU1500bytes,BW10000Kbit,DLY1000usec,rely255/255,load1/255EncapsulationARPA,loopbacknotset,keepaliveset(10sec)ARPtype:ARPA,ARPTimeout04:00:00Lastinput00:00:07,output00:00:08,outputhangneverLastclearingof"showinterface"countersneverQueueingstrategy:fifoOutputqueue0/40,0drops;inputqueue0/75,0drops5minuteinputrate0bits/sec,0packets/sec5m