HCNA入門實驗手冊(入門).docx

實驗一.命令行基礎一、實驗目標掌握設備系統(tǒng)參數(shù)的配置方法，包括設備名稱、系統(tǒng)時間及系統(tǒng)時區(qū)掌握Console口空閑超時時長的配置方法掌握登錄信息的配置方法掌握登錄密碼的配置方法掌握保存配置文件的方法掌握配置路由器接口IP地址的方法掌握測試兩臺直連路由器連通性的方法掌握重吭設備的方法掌握查看版本、當前配置、接口信息實驗描述及組網二、實驗過程步驟一 查看系統(tǒng)信息執(zhí)行display version命令，查看路由器的軟件版本不硬件信息。Huaweidisplay version Huawei Versatile Routing Platform SoftwareVRP (R) software, Version 5.130 (AR2200 V200R003C00)Copyright (C) 2011-2012 HUAWEI TECH CO., LTDHuawei AR2220 Router uptime is 0 week, 0 day, 0 hour, 0 minuteBKP 0 version information: 1. PCB Version : AR01BAK2A VER.NC2. If Supporting PoE : No3. Board Type : AR22204. MPU Slot Quantity : 15. LPU Slot Quantity : 6MPU 0(Master) : uptime is 0 week, 0 day, 0 hour, 0 minuteMPU version information : 1. PCB Version : AR01SRU2A VER.A2. MAB Version : 03. Board Type : AR22204. BootROM Version : 0命令回顯信息中包含了VRP版本，設備型號和啟動時間等信息。步驟二修改系統(tǒng)時間VRP系統(tǒng)會自動保存時間，但如果時間不正確，可以在用戶規(guī)圖下執(zhí)行clocktimezone命令和clock datetime命令修改系統(tǒng)時間。clock timezone Local add 08:00:00clock datetime 12:00:00 2013-09-15可以修改Local字段為當前地區(qū)的時區(qū)名稱。如果當前時區(qū)位于UTC+0時區(qū)的西部，需要把add字段修改為minus。執(zhí)行display clock命令查看生效的新系統(tǒng)時間。display clock2013-09-15 12:00:21SundayTime Zone(Default Zone Name) : UTC+00:00步驟三幫助功能和命令自動補全功能在系統(tǒng)中輸入命令時，問號是通配符，Tab鍵是自動聯(lián)想并補全命令的快捷鍵。display ? Cellular Cellular interface aaa AAA access-user User access accounting-scheme Accounting scheme acl acl command group actual Current actual adp-ipv4 Ipv4 information adp-mpls Adp-mpls module alarm Alarm antenna Current antenna that outputting radio anti-attack Specify anti-attack configurations ap ap command group ap-auth-mode Display AP authentication mode ap-elabel Electronic label ap-license AP license config ap-performance-statistic Display AP performance statistic information ap-profile Display AP profile information ap-region Display AP region information ap-run-info Display AP run information ap-type Display AP type information ap-update AP update ap-whitelist AP white list apv2r3 PAF(Product Adaptive File) arp arp command group - More -在輸入信息后輸入“？”可查看以輸入字母開頭的命令。如輸入“dis ？”，設備將輸出所有以dis開頭的命令。在輸入的信息后增加空格，再輸入“？”，這時設備將嘗試識別輸入的信息所對應的命令，然后輸出該命令的其他參數(shù)。例如輸入“dis ？”，如果只有display命令是以dis開頭的，那么設備將輸出display命令的參數(shù)；如果以dis開頭的命令還有其他的，設備將報錯。另外可以使用鍵盤上Tab鍵補全命令，比如鍵入“dis”后，按鍵盤“Tab”鍵可以將命令補全為“display”。如有多個以“dis”開頭的命令存在，則在多個命令之間循環(huán)切換。命令在丌収生歧義的情況下可以使用簡寫，如“display”可以簡寫為“dis”或“disp”等，“interface”可以簡寫為“int”或“inter”等。步驟四進入系統(tǒng)視圖使用system-view命令可以迚入系統(tǒng)規(guī)圖，這樣才可以配置接口、協(xié)議等內容。system-viewEnter system view, return user view with Ctrl+Z.Huawei步驟五修改設備名稱配置設備時，為了便于區(qū)分，往往給設備定義不同的名稱。如下我們依照實驗拓撲圖，修改設備名稱。修改R1路由器的設備名稱為R1。Huaweisysname R1R1修改R3路由器的設備名稱為R3。Huaweisysname R3R3步驟六配置登錄信息配置登陸標詫信息來迚行提示戒迚行登陸警告。執(zhí)行header shellinformation命令配置登錄信息。R1header shell information Welcome to the Huawei certification lab.退出路由器命令行界面，再重新登錄命令行界面，查看登錄信息是否已縐修改。R1quitquitConfiguration console exit, please press any key to log onWelcome to the Huawei certification lab.步驟七配置 Console 口參數(shù)默認情況下，通過Console口登陸無密碼，任何人都可以直接連接到設備，迚行配置。為避免由此帶來的風險，可以將Console接口登錄方式配置為密碼認證方式，密碼為明文形式的“huawei”?？臻e時間指的是縐過沒有任何操作的一定時間后，會自勱退出該配置界面，再次登陸會根據(jù)系統(tǒng)要求，提示輸入密碼迚行驗證。設置空閑超時時間為20分鐘，默認為10分鐘。R1user-interface console 0R1-ui-console0authentication-mode passwordR1-ui-console0set authentication password cipher huaweiR1-ui-console0idle-timeout 20 0執(zhí)行display this命令查看配置結果。R1-ui-console0display thisV200R003C01SPC200#user-interface con 0authentication-mode passwordset authentication passwordcipher %$%$fIn6NZ6*as(#J:WU%,#72Uy8cVlNNXkT51E RX;#75,%$%$idle-timeout 20 0退出系統(tǒng)，并使用新配置的密碼登錄系統(tǒng)。需要注意的是，在路由器第一次初始化吭勱時，也需要配置密碼。R1-ui-console0returnquitConfiguration console exit, please press any key to log onWelcome to Huawei certification lab步驟八配置接口 IP 地址和描述信息配置R1上GigabitEthernet 0/0/0接口的IP地址。使用點分十迚制格式（如255.255.255.0）戒根據(jù)子網掩碼前綴長度配置子網掩碼。R1interface GigabitEthernet 0/0/0R1-GigabitEthernet0/0/0ip address 10.0.13.1 24R1-GigabitEthernet0/0/0description This interface connects to R3-G0/0/0在當前接口規(guī)圖下，執(zhí)行display this命令查看配置結果。R1-GigabitEthernet0/0/0display thisV200R003C00SPC200#interface GigabitEthernet0/0/0description This interface connects to R3-G0/0/0ip address 10.0.13.1 255.255.255.0#Return執(zhí)行display interface命令查看接口信息。R1display interface GigabitEthernet0/0/0GigabitEthernet0/0/0 current state : UPLine protocol current state : UPLast line protocol up time : 2013-10-08 04:13:09Description:This interface connects to R3-G0/0/0Route Port,The Maximum Transmit Unit is 1500Internet Address is 10.0.13.1/24IP Sending Frames Format is PKTFMT_ETHNT_2, Hardware address is 5489-9876-830bLast physical up time : 2013-10-08 03:24:01Last physical down time : 2013-10-08 03:25:29Current system time: 2013-10-08 04:15:30Port Mode: FORCE COPPERSpeed : 100, Loopback: NONEDuplex: FULL, Negotiation: ENABLEMdi : AUTOLast 300 seconds input rate 2296 bits/sec, 1 packets/secLast 300 seconds output rate 88 bits/sec, 0 packets/secInput peak rate 7392 bits/sec,Record time: 2013-10-08 04:08:41Output peak rate 1120 bits/sec,Record time: 2013-10-08 03:27:56Input: 3192 packets, 895019 bytesUnicast: 0, Multicast: 1592Broadcast: 1600, Jumbo: 0Discard: 0, Total Error: 0CRC: 0, Giants: 0Jabbers: 0, Throttles: 0Runts: 0, Symbols: 0Ignoreds: 0, Frames: 0Output: 181 packets, 63244 bytesUnicast: 0, Multicast: 0Broadcast: 181, Jumbo: 0Discard: 0, Total Error: 0Collisions: 0, ExcessiveCollisions: 0Late Collisions: 0, Deferreds: 0Input bandwidth utilization threshold : 100.00%Output bandwidth utilization threshold: 100.00%Input bandwidth utilization : 0.01%Output bandwidth utilization : 0%從命令回顯信息中可以看到，接口的物理狀態(tài)不協(xié)議狀態(tài)均為Up，表示對應的物理層不數(shù)據(jù)鏈路層均可用。配置 R3 上GigabitEthernet 0/0/0 接口的IP 地址不描述信息。R3interface GigabitEthernet 0/0/0R3-GigabitEthernet0/0/0ip address 10.0.13.3 255.255.255.0R3-GigabitEthernet0/0/0description This interface connects to R1-G0/0/0配置完成后，通過執(zhí)行ping命令測試R1和R3間的連通性。ping 10.0.13.3PING 10.0.13.3: 56 data bytes, press CTRL_C to breakReply from 10.0.13.3: bytes=56 Sequence=1 ttl=255 time=35 msReply from 10.0.13.3: bytes=56 Sequence=2 ttl=255 time=32 msReply from 10.0.13.3: bytes=56 Sequence=3 ttl=255 time=32 msReply from 10.0.13.3: bytes=56 Sequence=4 ttl=255 time=32 msReply from 10.0.13.3: bytes=56 Sequence=5 ttl=255 time=32 ms- 10.0.13.3 ping statistics -5 packet(s) transmitted5 packet(s) received0.00% packet lossround-trip min/avg/max = 32/32/35 ms步驟九查看當前設備上存儲的文件列表在用戶規(guī)圖下執(zhí)行dir命令，查看當前目錄下的文件列表。dirDirectory of sd1:/Idx Attr Size(Byte) Date Time(LMT) FileName0 -rw- 1,738,816 Mar 14 2013 11:50:24 web.zip1 -rw- 68,288,896 Mar 14 2013 14:17:58ar2220-v200r003c00spc200.cc2 -rw- 739 Mar 14 2013 16:01:17 vrpcfg.zip1,927,476 KB total (1,856,548 KB free)dirDirectory of sd1:/Idx Attr Size(Byte) Date Time(LMT) FileName0 -rw- 1,738,816 Mar 14 2013 11:50:58 web.zip1 -rw- 68,288,896 Mar 14 2013 14:19:02ar2220-v200r003c00spc200.cc2 -rw- 739 Mar 14 2013 16:03:04 vrpcfg.zip1,927,476 KB total (1,855,076 KB free)步驟十管理設備配置文件執(zhí)行display saved-configuration命令查看保存的配置文件。display saved-configurationThere is no correct configuration file in FLASH系統(tǒng)中沒有已保存的配置文件。執(zhí)行save命令保存當前配置文件。saveThe current configuration will be written to the device.Are you sure to continue? (y/n)n:yIt will take several minutes to save configuration file, pleasewait.Configuration file had been saved successfullyNote: The configuration file will take effect after being activated重新執(zhí)行display saved-configuration命令查看已保存的配置信息。display saved-configurationV200R003C00SPC200#sysname R1header shell information Welcome to Huawei certification lab#board add 0/1 1SAboard add 0/2 1SAoutput omit執(zhí)行display current-configuration命令查看當前配置信息。display current-configurationV200R003C00SPC200#sysname R1header shell information Welcome to Huawei certification lab#board add 0/1 1SAboard add 0/2 1SAboard add 0/3 2FEoutput omit一臺路由器可以存儲多個配置文件。執(zhí)行display startup命令查看下次吭勱時使用的配置文件。display startupMainBoard:Startup system software:sd1:/ar2220-v200r003c00spc200.ccNext startup system software:sd1:/ar2220-v200r003c00spc200.ccBackup system software for next startup: nullStartup saved-configuration file: nullNext startup saved-configuration file: sd1:/vrpcfg.zipStartup license file: nullNext startup license file: nullStartup patch package: nullNext startup patch package: nullStartup voice-files: nullNext startup voice-files: null刪除閃存中的配置文件。reset saved-configurationThis will delete the configuration in the flash memory.The device configurations will be erased to reconfigure.Are you sure? (y/n)n:yClear the configuration in the device successfully.reset saved-configurationThis will delete the configuration in the flash memory.The device configurations will be erased to reconfigure.Are you sure? (y/n)n:yClear the configuration in the device successfully.步驟十一 重啟設備執(zhí)行reboot命令重吭路由器。rebootInfo: The system is now comparing the configuration, please wait.Warning: All the configuration will be saved to the next startup configuration.Continue ? y/n:nSystem will reboot! Continue ? y/n:yInfo: system is rebooting ,please wait.rebootInfo: The system is now comparing the configuration, please wait.Warning: All the configuration will be saved to the next startup configuration.Continue ? y/n:nSystem will reboot! Continue ? y/n:y系統(tǒng)提示是否保存當前配置，可根據(jù)實驗要求決定是否保存當前配置。如果無法確定是否保存，則不保存當前配置。實驗二.STP配置一、實驗目標掌握修改交換機STP模式的方法掌握修改橋優(yōu)先級,控制根橋選舉的方法掌握修改端口優(yōu)先級,控制根端口和指定口選舉的方法掌握邊緣端口的配置方法二、實驗描述及組網圖您是公司的網絡管理員,為了避免網絡中的環(huán)路問題,需要在網絡中的交換機上配置STP。本實驗中,您還需要通過修改橋優(yōu)先級來控制STP的根橋選舉,并通過配置STP的一些特性來加快STP的收斂速度。 三、實驗過程步驟一：按上圖連線，配置主機的ip地址，并且檢查交換機的配置是否為初始狀態(tài)。步驟二：設置交換機的stp模式為stp（華為交換機默認開啟stp，且模式為mstp），設置JC1的優(yōu)先級為4096，JC2、JC3的優(yōu)先級為默認值，并且配置連接PC的端口為邊緣端口。JC1：JC1stp mode stpJC1stp priority 4096 / 配置時優(yōu)先級必須是4096的倍數(shù)JC1interface GigabitEthernet 0/0/24JC1-GigabitEthernet0/0/24stp edged-port enableJC2：JC2stp mode stpJC2-GigabitEthernet0/0/24stp edged-port enableJC3：JC3stp mode stpJC3-GigabitEthernet0/0/24stp edged-port enable步驟三：查看STP信息JC1display stp -CIST Global InfoMode STP-CIST Bridge :4096 .4c1f-cc38-374c / 修改后優(yōu)先級為4096Config Times :Hello 2s MaxAge 20s FwDly 15s MaxHop 20Active Times :Hello 2s MaxAge 20s FwDly 15s MaxHop 20CIST Root/ERPC :4096 .4c1f-cc38-374c / 0CIST RegRoot/IRPC :4096 .4c1f-cc38-374c / 0CIST RootPortId :0.0BPDU-Protection :DisabledTC or TCN received :14TC count per hello :0STP Converge Mode :Normal Time since last TC :0 days 0h:3m:55sNumber of TC :12Last TC occurred :GigabitEthernet0/0/1JC1display stp brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/1 DESI FORWARDING NONE 0 GigabitEthernet0/0/3 DESI FORWARDING NONE 0 GigabitEthernet0/0/24 DESI FORWARDING NONEJC2display stp -CIST Global InfoMode STP-CIST Bridge :32768.4c1f-ccba-711a / 交換機的默認優(yōu)先級是32768Config Times :Hello 2s MaxAge 20s FwDly 15s MaxHop 20Active Times :Hello 2s MaxAge 20s FwDly 15s MaxHop 20CIST Root/ERPC :4096 .4c1f-cc38-374c / 20000CIST RegRoot/IRPC :32768.4c1f-ccba-711a / 0CIST RootPortId :128.3 / 根端口的默認優(yōu)先級是128BPDU-Protection :DisabledTC or TCN received :97TC count per hello :0STP Converge Mode :Normal Time since last TC :0 days 0h:7m:48sNumber of TC :14Last TC occurred :GigabitEthernet0/0/3JC2display stp brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/2 ALTE DISCARDING NONE 0 GigabitEthernet0/0/3 ROOT FORWARDING NONE 0 GigabitEthernet0/0/24 DESI FORWARDING NONEJC3display stp brief MSTID Port Role STP State Protection 0 GigabitEthernet0/0/1 ROOT FORWARDING NONE 0 GigabitEthernet0/0/2 DESI FORWARDING NONE 0 GigabitEthernet0/0/24 DESI FORWARDING NONE以上信息表明JC1是根橋，其上所有端口是指定端口（DESI），處于轉發(fā)狀態(tài)（FORWARDING）.JC2是非根橋，端口GigabitEthernet0/0/3是根端口，處于轉發(fā)狀態(tài)，端口GigabitEthernet0/0/2是備份端口（ALTE），處于阻塞狀態(tài)。JC3也是非根橋，端口GigabitEthernet0/0/1是根端口，GigabitEthernet0/0/2是指定端口，處于轉發(fā)狀態(tài)。實驗三.靜態(tài)路由基礎一、實驗目標掌握靜態(tài)路由的配置掌握缺省路由配置二、實驗描述及組網三、實驗過程實驗任務一：步驟一：建立物理連接按照拓撲圖進行連接，所有設備配置為初始狀態(tài)。以下表配置各個設備的IP地址。設備名稱接口IP地址JC1Loopback010.1.1.1/32G0/0/010.1.2.1/24JC2G0/0/010.1.2.2/24G0/0/110.1.3.1/24JC3G0/0/110.1.3.2/24Loopback010.1.4.1/24步驟二：測試路由器間的連通性，如下所示：通過查看路由表，發(fā)現(xiàn)此時路由器中只有直連網段的路由此時我們來測試JC1和JC3之間的連通性，如下：JC1-LoopBack0ping 10.1.4.1 PING 10.1.4.1: 56 data bytes, press CTRL_C to breakMar 16 2016 08:22:15-08:00 JC1 DS/4/DATASYNC_CFGCHANGE:OID 1.3.6.1.4.1.2011.5.25.191.3.1 configurations have been changed. The current change number is 5, the change loop count is 0, and the maximum number of records is 4095. Request time out Request time out Request time out Request time out Request time out - 10.1.4.1 ping statistics - 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss從以上顯示我們可以看到，JC1和JC3之間是不能夠進行通信的。步驟三：配置靜態(tài)路由我們只在JC1和JC3上配置靜態(tài)路由。JC1：JC1ip route-static 10.1.3.0 24 10.1.2.2JC1ip route-static 10.1.4.0 24 10.1.2.2JC3：JC3ip route-static 10.1.3.0 24 10.1.2.2JC3ip route-static 10.1.4.0 24 10.1.2.2配置完成后，在路由器上查看路由表。例如在JC1上查看路由表，如下：JC1display ip routing-table Route Flags: R - relay, D - download to fib-Routing Tables: Public Destinations : 7 Routes : 7 Destination/Mask Proto Pre Cost Flags NextHop Interface 10.1.1.1/32 Direct 0 0 D 127.0.0.1 LoopBack0 10.1.2.0/24 Direct 0 0 D 10.1.2.1 GigabitEthernet0/0/0 10.1.2.1/32 Direct 0 0 D 127.0.0.1 GigabitEthernet0/0/0 10.1.3.0/24 Static 60 0 RD 10.1.2.2 GigabitEthernet0/0/0 10.1.4.0/24 Static 60 0 RD 10.1.2.2 GigabitEthernet0/0/0 127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0 127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0測試JC1和JC3之間的可達性。在JC1上用Ping命令測試到JC3的G0/0/1口的可達性，如下：JC1ping 10.1.3.2 PING 10.1.3.2: 56 data bytes, press CTRL_C to break Reply from 10.1.3.2: bytes=56 Sequence=1 ttl=254 time=70 ms Reply from 10.1.3.2: bytes=56 Sequence=2 ttl=254 time=40 ms Reply from 10.1.3.2: bytes=56 Sequence=3 ttl=254 time=60 ms Reply from 10.1.3.2: bytes=56 Sequence=4 ttl=254 time=30 ms Reply from 10.1.3.2: bytes=56 Sequence=5 ttl=254 time=70 ms - 10.1.3.2 ping statistics - 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 30/54/70 ms我們可以看到是可以Ping通的。但是，如果在JC1上Ping 10.1.4.1如下：JC1ping 10.1.4.1 PING 10.1.4.1: 56 data bytes, press CTRL_C to break Request time out Request time out Request time out Request time out Request time out - 10.1.4.1 ping statistics - 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss或者是在JC1上使用ping a 10.1.1.1. 10.1.3.2結果如下：JC1ping -a 10.1.1.1 10.1.3.2 PING 10.1.3.2: 56 data bytes, press CTRL_C to break Request time out Request time out Request time out Request time out Request time out - 10.1.3.2 ping statistics - 5 packet(s) transmitted 0 packet(s) received 100.00% packet loss我們發(fā)現(xiàn)此時是不通的。為什么呢？我們來分析一下：通過查看路由表，我們發(fā)現(xiàn)JC2的路由表中沒有到10.1.1.1/32和10.1.1.4.1/32的路由。那么，我們在JC2上配置靜態(tài)路由，如下：JC2ip route-static 10.1.1.0 24 10.1.2.1JC2ip route-static 10.1.4.0 24 10.1.3.2我們再來測試：JC1ping 10.1.4.1 PING 10.1.4.1: 56 data bytes, press CTRL_C to break Reply from 10.1.4.1: bytes=56 Sequence=1 ttl=254 time=90 ms Reply from 10.1.4.1: bytes=56 Sequence=2 ttl=254 time=50 ms Reply from 10.1.4.1: bytes=56 Sequence=3 ttl=254 time=90 ms Reply from 10.1.4.1: bytes=56 Sequence=4 ttl=254 time=80 ms Reply from 10.1.4.1: bytes=56 Sequence=5 ttl=254 time=60 ms - 10.1.4.1 ping statistics - 5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 50/74/90 msJC1ping -a 10.1.1.1 10.1.3.2 PING 10.1.3.2: 56 data bytes, press CTRL_C to break Reply from 10.1.3.2: bytes=56 Sequence=1 ttl=254 time=60 ms Reply from 10.1.3.2: bytes=56 Sequence=2 ttl=254 time=60 ms Reply from 10.1.3.2: bytes=56 Sequence=3 ttl=254 time=50 ms Reply from 10.1.3.2: bytes=56 Sequence=4 ttl=254 time=70 ms Reply from 10.1.3.2: bytes=56 Sequence=5 ttl=254 time=90 ms - 10.1.3.2 ping statistics - 5 packet(s) transmitted 5 packet(s) received 0.00% packet lossround-trip min/avg/max = 50/66/90 ms可見已經實現(xiàn)了各網段之間的互通。實驗任務二：配置缺省路由在路由器上合理的配置靜態(tài)路由能夠減少路由表中