CISCOIOS中文命令手冊

CiscoIOSCookbook中文精簡版V1.5版原著KevinDooley和IanJ.Brown翻譯NeoShiCiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄1前言Cookbook書系算是OReilly的一個出版品牌，這套叢書的特點就是可以幫助你快速找到解決問題的方法，而不需要你從大量的文檔中去查找，你可以現(xiàn)學現(xiàn)賣，就像菜譜一樣，照著里面的步驟去做就行了，當然也要注意下里面的參考注釋。這本CiscoIOSCookbook就是專注于思科IOS系統(tǒng)配置的，可以當做一本應急手冊來使用，也可以逐篇閱讀，因為里面很多小技巧也許你從來沒有注意過。這本書是第二版，跟前一版相比有什么區(qū)別呢，很明顯的就是書名變了，從CiscoCookbook變?yōu)镃iscoIOSCookbook，這樣讓書名更名副其實，畢竟思科現(xiàn)在的產品線很長，以后也許有CiscoPIXCookbook之類的。在內容上更新在于涵蓋了IOS12.4的新特性，當然原有的內容還繼續(xù)保留，畢竟思科的很多配置向后兼容，只是特別注明了一些新選項而已，同時與時俱進增加了四個新的章節(jié)：IPMobility,IPVersion6,MPLS,和Security，這樣就更符合現(xiàn)在的趨勢。這本中文精簡版每章的內容基本和原版保持一致，可能會省掉部分腳本。文中格式按照提問，回答和注釋三部分排列，注釋部分不是對原版的全盤翻譯，只是個人對配置的一些意見和注意事項，如果有什么錯漏以原版為主。此次翻譯從2007年1月23日開始，基本一天一章在我的Blog發(fā)帖，持續(xù)了兩個月，很感謝一直跟我在一起的QQ群里的朋友：綠豆大叔，``，猴哥，偶像miFor，財神Monk，帥哥Alex，兔總，若然等（誰也別吵吵，排名不分先后反正），也感謝一直關注我Blog的不知名朋友們。有福之州2007-3-27CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄2目錄第一章路由器配置和文件管理................................................................................................................221.1.通過TFTP來配置路由器..................................................................................................221.2.保存路由器配置到服務器................................................................................................221.3.使用遠端配置文件啟動路由器........................................................................................231.4.保存大于NVRAM大小的配置文件..................................................................................241.5.清除啟動配置文件............................................................................................................241.6.加載新的IOS鏡像.............................................................................................................251.7.以另一個IOS鏡像文件啟動.............................................................................................261.8.通過網(wǎng)絡啟動....................................................................................................................261.9.拷貝IOS鏡像文件到服務器.............................................................................................271.10.通過控制臺口拷貝IOS鏡像文件...................................................................................281.11.刪除Flash中的文件........................................................................................................291.12.對Flash進行分區(qū)............................................................................................................301.13.配置路由器為TFTP服務器............................................................................................301.14.在路由器上使用FTP.......................................................................................................311.15.批量產生路由器配置文件..............................................................................................321.16.同時改變多臺路由器的配置..........................................................................................321.17.獲的設備的硬件信息......................................................................................................321.18.備份路由器的配置..........................................................................................................321.19.熱重啟..............................................................................................................................32CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄31.20.熱升級..............................................................................................................................331.21.配置存檔特性..................................................................................................................331.22.路由器配置鎖定..............................................................................................................34第二章路由器管理...................................................................................................................................342.1.創(chuàng)建命令別名....................................................................................................................352.2.管理路由器ARP緩存........................................................................................................352.3.路由器Buffer調整............................................................................................................362.4.自動調整路由器Buffer.....................................................................................................372.5.使用CDP協(xié)議...................................................................................................................372.6.禁止CDP協(xié)議...................................................................................................................382.7.小服務的開啟....................................................................................................................382.8.啟用路由器HTTP訪問......................................................................................................392.9.啟用路由器安全HTTPS訪問............................................................................................402.10.使用靜態(tài)主機名映射......................................................................................................402.11.啟用DNS服務.................................................................................................................412.12.禁用域名解析..................................................................................................................412.13.配置路由器特定時間重啟..............................................................................................422.14.定時執(zhí)行配置命令..........................................................................................................432.15.顯示路由器CPU利用率的歷史數(shù)據(jù)..............................................................................432.16.生成意外導出文件（ExceptionDumpFiles）................................................................452.17.生成接口信息報告..........................................................................................................462.18.生成路由表報告..............................................................................................................46CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄42.19.生成ARP表報告..............................................................................................................462.20.生成主機表報告..............................................................................................................46第三章用戶訪問和權限管理....................................................................................................................463.1.設置用戶名和密碼............................................................................................................463.2.加密密碼............................................................................................................................473.3.使用更高強度加密技術....................................................................................................483.4.移去配置文件中的密碼信息............................................................................................493.5.解密思科的弱密碼............................................................................................................493.6.顯示當前登錄用戶............................................................................................................493.7.發(fā)信息給其它用戶............................................................................................................503.8.修改可用VTY數(shù)目............................................................................................................503.9.修改VTY的超時時長........................................................................................................503.10.限制用戶登錄可以使用的協(xié)議......................................................................................513.11.配置用戶登錄可用總時長..............................................................................................523.12.部署B(yǎng)anners....................................................................................................................523.13.在特定端口禁用Banners顯示.......................................................................................543.14.禁用Line登錄.................................................................................................................543.15.為管理員保留特定的登錄端口......................................................................................553.16.限制特定地址的Telnet登錄..........................................................................................563.17.對Telnet訪問進行日志記錄..........................................................................................573.18.設置發(fā)起Telnet的源地址..............................................................................................583.19.自動登錄..........................................................................................................................58CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄53.20.使用SSH登錄..................................................................................................................583.21．改變IOS命令的特權等級..............................................................................................593.22.基于用戶的特權等級......................................................................................................603.23.基于端口的特權等級......................................................................................................61第四章TACAS+..........................................................................................................................................614.1.用戶登錄集中鑒權............................................................................................................614.2.限制特定命令的執(zhí)行權限................................................................................................624.3.TACACS+服務器無法訪問..................................................................................................634.4.在特定端口禁用TACACS+鑒權.........................................................................................634.5.記錄用戶行為....................................................................................................................644.6.記錄系統(tǒng)事件....................................................................................................................654.7.設置TACACS+消息的源地址.............................................................................................654.8.TACACS+服務器配置文件樣本..........................................................................................66第五章IP路由...........................................................................................................................................665.1.查找路由條目....................................................................................................................665.2.查找特定類型的路由條目................................................................................................675.3.各種掩碼的轉換................................................................................................................675.4.使用靜態(tài)路由....................................................................................................................675.5.浮動靜態(tài)路由....................................................................................................................685.6.基于源地址的策略路由....................................................................................................695.7.基于應用的策略路由........................................................................................................705.8.策略路由檢查....................................................................................................................71CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄65.9.改變管理距離....................................................................................................................735.10.相同代價值的多路徑路由..............................................................................................755.11.配置靜態(tài)路由的追蹤......................................................................................................755.12.路由表變動統(tǒng)計..............................................................................................................77第六章RIP..................................................................................................................................................786.1.配置RIP（V1）..................................................................................................................786.2.RIP中的路由過濾..............................................................................................................796.3.再發(fā)布靜態(tài)路由至RIP......................................................................................................806.4.使用RouteMaps進行路由再發(fā)布...................................................................................816.5.在RIP中宣告缺省路由.....................................................................................................826.6.在特定接口禁用RIP..........................................................................................................836.7.缺省被動接口....................................................................................................................846.8.RIP更新使用單播包..........................................................................................................846.9.對路由應用Offsets............................................................................................................856.10.定時器調整......................................................................................................................866.11.增大路由更新數(shù)據(jù)包發(fā)送延遲......................................................................................866.12.啟用非周期性更新..........................................................................................................876.13.增大RIP的輸入隊列.......................................................................................................876.14.配置RIP（V2）................................................................................................................886.15.啟用RIP認證...................................................................................................................886.16.配置RIP路由匯總...........................................................................................................896.17.路由標簽..........................................................................................................................90CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄7第七章EIGRP.............................................................................................................................................917.1.配置EIGRP.........................................................................................................................917.2.路由過濾............................................................................................................................927.3.再發(fā)布路由到EIGRP.........................................................................................................937.4.使用RouteMap方式來配置再發(fā)布................................................................................947.5.特定接口禁止EIGRP.........................................................................................................957.6.調整EIGRP度量值............................................................................................................967.7.定時器調整........................................................................................................................977.8.啟用EIGRP認證................................................................................................................977.9.配置EIGRP路由匯總........................................................................................................997.10.記錄鄰居狀態(tài)變化........................................................................................................1007.11.限制EIGRP路由更新占用帶寬.....................................................................................1007.12.EIGRPStub路由.............................................................................................................1017.13.路由標簽........................................................................................................................1017.14.查看EIGRP狀態(tài)............................................................................................................102第八章OSPF.............................................................................................................................................1058.1.配置OSPF.........................................................................................................................1058.2.路由過濾..........................................................................................................................1068.3.調整OSPF代價值............................................................................................................1088.4.宣告缺省路由到OSPF.....................................................................................................1098.5.再發(fā)布靜態(tài)路由到OSPF.................................................................................................1098.6.再發(fā)布外部路由到OSPF.................................................................................................110CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄88.7.DR選舉............................................................................................................................1118.8.設置OSPFRID..................................................................................................................1118.9.啟用OSPF鑒權................................................................................................................1128.10.選擇合適的區(qū)域類型....................................................................................................1138.11.在撥號接口上配置OSPF...............................................................................................1158.12.路由匯總........................................................................................................................1178.13.在特定端口禁用OSPF...................................................................................................1178.14.修改接口的網(wǎng)絡類型....................................................................................................1188.15.路由標簽........................................................................................................................1208.16.記錄OSPF鄰居狀態(tài)變化..............................................................................................1218.17.OSPF定時器...................................................................................................................1218.18.減少OSPF協(xié)議流量......................................................................................................1228.19.OSPF虛擬鏈路...............................................................................................................1228.20.使用域名查看OSPF狀態(tài)..............................................................................................1238.21.OSPF排錯.......................................................................................................................123第九章BGP..............................................................................................................................................1249.1.配置BGP.........................................................................................................................1249.2.使用eBGPMultihop.........................................................................................................1269.3.調整Next-Hop屬性值.....................................................................................................1269.4.連接兩個ISPs...................................................................................................................1279.5.兩臺路由器分別連接兩個ISP........................................................................................1289.6.限制向BGP對端的網(wǎng)絡宣告.........................................................................................130CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄99.7.調整LocalPreference屬性值.........................................................................................1329.8.負載均衡..........................................................................................................................1349.9.在ASPath屬性值中清除私有ASNs...............................................................................1349.10.基于ASPath屬性值的路由過濾..................................................................................1359.11.減少接收到的路由表大小............................................................................................1369.12.出方向路由信息匯總....................................................................................................1379.13.在ASPath屬性值中添加更多ASN..............................................................................1389.14.再發(fā)布路由到BGP........................................................................................................1399.15.使用PeerGroups...........................................................................................................1409.16.BGP鄰居認證................................................................................................................1419.17.使用BGPCommunities..................................................................................................1429.18.使用BGP路由反射器..................................................................................................1459.19.匯總實驗........................................................................................................................148第十章幀中繼.........................................................................................................................................15010.1.使用點對點子接口的方式配置幀中繼........................................................................15110.2.調整LMI選項...............................................................................................................15310.3.使用MAP命令配置......................................................................................................15410.4.使用多點子接口............................................................................................................15510.5.配置幀中繼SVCs...........................................................................................................15610.6.模擬幀中繼云................................................................................................................15810.7.子接口配置下的幀中繼壓縮........................................................................................15910.8.MAP命令下的幀中繼壓縮...........................................................................................160CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄1010.9.幀中繼承載PPP.............................................................................................................16110.10.查看幀中繼狀態(tài)............................................................................................................162第十一章隊列和擁塞..............................................................................................................................16211.1.FastSwitching和CEF.....................................................................................................16211.2.設置DSCP或者TOS位................................................................................................16411.3.使用優(yōu)先級隊列(PriorityQueuing)...............................................................................16511.4.使用自定義隊列（CustomQueuing）.........................................................................16611.5.自定義隊列混和優(yōu)先級隊列........................................................................................16811.6.使用加權公平隊列（WeightedFairQueuing）...........................................................16911.7.使用基于類的加權公平隊列（UsingClass-BasedWeightedFairQueuing）.............17011.8.使用NBAR......................................................................................................................17211.9.使用WRED來控制擁塞................................................................................................17411.10.使用RSVP.....................................................................................................................17511.11.手動RSVP預留..........................................................................................................17611.12.聚合RSVP的預留（AggregatingRSVPReservations）..............................................17811.13.配置一般流量整形（GenericTrafficShaping）.........................................................17911.14.配置幀中繼流量整形..................................................................................................18011.15.配置承諾接入速率......................................................................................................18111.16.部署基于標準的PHB（Per-HopBehavior）..............................................................18311.17.AutoQoS........................................................................................................................18611.18.查看隊列參數(shù)................................................................................................................189第十二章隧道和VPN..............................................................................................................................189CiscoIOSCookBook中文精簡版RouteToTheFuture章:目錄1112.1.創(chuàng)建Tunnel....................................................................................................................18912.2.其他協(xié)議隧道至IP........................................................................................................19012.3.隧道和動態(tài)路由協(xié)議....................................................................................................19212.4.查看隧道狀態(tài)................................................................................................................19412.5.在GRE隧道中創(chuàng)建一個加密的路由器到路由器的VPN............................................19412.6.在兩個路由器的Lan接口之間創(chuàng)建加密VPN.............................................................19912.7.生成RSA密匙...............................................................................................................20212.8.使用RSA密匙創(chuàng)建路由器到路由器的VPN................................................................20612.9.創(chuàng)建主機到路由器的VPN............................................................................................21112.10.創(chuàng)建SSLVPN................................................................................................................21212.11.查看IPSec協(xié)議狀態(tài).....................................................