CCNA實驗手冊內(nèi)容

NorvelNetworks文件名：FILENAMECCNA實驗手冊 第/22/2023目錄TOC\o"1-1"\h\z\u實驗1． 登錄Cisco路由器/交換機 1實驗2． 初始化路由器和創(chuàng)建Startup-config文件 5實驗3． 了解用戶模式、特權(quán)模式和全局模式 8實驗4． 配置特權(quán)模式密碼 13實驗5． 配置VTY登錄安全 15實驗6． 查看路由器的Running-config配置文件 16實驗7． 查看路由器的Startup-config配置文件 17實驗8． 備份路由器的running-config至startup-config 19實驗9． 清除路由器的配置 21實驗10． 更改路由器的寄存器值 22實驗11． 配置路由器的主機名與IP地址映射表 23實驗11． 配置路由器的主機名與IP地址映射表 23實驗12． 配置命令縮寫 24實驗13． 配置路由器的BANNER信息 25實驗14． 做實驗前的默認配置 26實驗15． 查看路由器信息相關(guān)命令 27實驗16． 配置VTY接口使用本地用戶名與密碼進行登錄 31實驗17． 捕獲HyperTerminal和Telnet會話 32實驗18． 配置路由器基本連接 34實驗19． 路由器連接登錄操作 38實驗20． 靜態(tài)路由配置 40實驗21． 默認路由配置 64實驗22． RIP路由選擇基礎(chǔ)實驗 67實驗23． RIPv1發(fā)送和接收規(guī)則 76實驗24． RIP不支持不連續(xù)子網(wǎng) 81實驗25． 配置使用RIPv2 84實驗26． 配置RIP認證 89實驗27． IGRP實驗 93實驗28． EIGRP實驗 97實驗29． OSPF路由實驗 101實驗30． 使用ACL增強Router安全 107實驗31． 標準訪問控制列表 108實驗32． 擴展訪問控制列表 110實驗33． 備份IOS到TFTP服務(wù)器 110登錄Cisco路由器/交換機圖表SEQ圖表\*ARABIC1登錄CiscoRouterSwitch實驗?zāi)康牧私馐己卧赑C使用客戶端登錄到路由器上實驗過程啟動HyperTerminal程序圖表SEQ圖表\*ARABIC2在運行輸入HYPERTRM.EXE調(diào)出超級終端初始化路由器和創(chuàng)建Startup-config文件實驗?zāi)康牧私饴酚善鞒醮螁訒r如何進行配置與保存配置實驗過程登錄沒有進行過配置的路由器%Pleaseanswer'yes'or'no'.Wouldyouliketoentertheinitialconfigurationdialog?[yes/no]://如果路由器剛啟動時在nvram中沒有startup-config或是寄存器值為0x2142時，路由路會出現(xiàn)初始化本配置向?qū)?，如果我們選擇yes將進入其配置模式y(tǒng)esAtanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Basicmanagementsetupconfiguresonlyenoughconnectivityformanagementofthesystem,extendedsetupwillaskyoutoconfigureeachinterfaceonthesystemWouldyouliketoenterbasicmanagementsetup?[yes/no]:yes//是否進行基本配置Configuringglobalparameters:Enterhostname[Router]:Rack141R1//輸入路由器的hostnameTheenablesecretisapasswordusedtoprotectaccesstoprivilegedEXECandconfigurationmodes.Thispassword,afterentered,becomesencryptedintheconfiguration.Enterenablesecret:cisco//輸入路由器的特權(quán)md5密碼Theenablepasswordisusedwhenyoudonotspecifyanenablesecretpassword,withsomeoldersoftwareversions,andsomebootimages.Enterenablepassword:cisco//輸入路由器的特權(quán)密碼(明文顯示在配置文件中)%Pleasechooseapasswordthatisdifferentfromtheenablesecret//不允許特權(quán)md5密碼與特權(quán)密碼(明文)相同Enterenablepassword:training//再次輸入特權(quán)密碼（明文）Thevirtualterminalpasswordisusedtoprotectaccesstotherouteroveranetworkinterface.Entervirtualterminalpassword:trainingConfigureSNMPNetworkManagement?[yes]:yes//是否配置SNMP網(wǎng)管協(xié)議Communitystring[public]:public//配置SNMP網(wǎng)管協(xié)議的Communtiy社團值CurrentinterfacesummaryAnyinterfacelistedwithOK?value"NO"doesnothaveavalidconfigurationInterfaceIP-AddressOK?MethodStatusProtocolEthernet0/0unassignedNOunsetupupEthernet0/1unassignedNOunsetupupunassignedNOunsetupSerial1/0unassignedNOunsetupdownEnterinterfacenameusedtoconnecttothemanagementnetworkfromtheaboveinterfacesummary:ethernet0/0//對路由器上的某個接口進行配置，輸入接口的名稱即可ConfiguringinterfaceEthernet0/0:ConfigureIPonthisinterface?[yes]:yes//是否在接口上配置一個IP地址IPaddressforthisinterface://配置接口的IP地址Subnetmaskforthisinterface[]:ClassCnetworkis,24subnetbits;maskis/24Thefollowingconfigurationcommandscriptwascreated:hostnameRack141R1enablesecret5$1$k39O$aQQirPZhZhVOS.TEvypiY/enablepasswordtraininglinevty04passwordtrainingsnmp-servercommunitypublic!noiprouting!interfaceEthernet0/0noshutdownipaddress!interfaceEthernet0/1shutdownnoipaddress!!interfaceSerial1/0shutdownnoipaddress!end[0]GototheIOScommandpromptwithoutsavingthisconfig.[1]Returnbacktothesetupwithoutsavingthisconfig.[2]Savethisconfigurationtonvramandexit.Enteryourselection[2]:2//選擇選存配置文件到NVRAM中(即生成startup-config)，并退出至命令提示行Buildingconfiguration...Usetheenabledmode'configure'commandtomodifythisconfiguration.PressRETURNtogetstarted!*Mar100:01:31.599:%SYS-5-RESTART:Systemrestarted--CiscoInternetworkOperatingSystemSoftwareIOS(tm)3600Software(C3620-IS-M),Version12.3(21),RELEASESOFTWARE(fc2)TechnicalSupport:/techsupportCopyright(c)1986-2006byciscoSystems,Inc.CompiledMon06-Nov-0614:22byccai*Mar100:01:31.627:%SNMP-5-COLDSTART:SNMPagentonhostRack141R1isundergoingacoldstartRack141R1>

了解用戶模式、特權(quán)模式和全局模式實驗?zāi)康牧私馑伎艻OS的不同配置模式實驗過程登錄路由器%Pleaseanswer'yes'or'no'.Wouldyouliketoentertheinitialconfigurationdialog?[yes/no]:noPressRETURNtogetstarted!Router>//現(xiàn)在我們進入到了Usermode，在這個模式下我們使用?號可以看到能夠輸入的命令輸入?號查看能夠運行的命令列表Router>?Execcommands:access-enableCreateatemporaryAccess-Listentryaccess-profileApplyuser-profiletointerfaceclearResetfunctionsconnectOpenaterminalconnectiondisableTurnoffprivilegedcommandsdisconnectDisconnectanexistingnetworkconnectionenableTurnonprivilegedcommandsexitExitfromtheEXEChelpDescriptionoftheinteractivehelpsystemlockLocktheterminalloginLoginasaparticularuserlogoutExitfromtheEXECmlsexecmlsroutercommandsmstatShowstatisticsaftermultiplemulticasttraceroutesmtraceTracereversemulticastpathfromdestinationtosourcename-connectionNameanexistingnetworkconnectionpadOpenaX.29PADconnectionpingSendechomessagespppStartIETFPoint-to-PointProtocol(PPP)進入特權(quán)模式Router>enableRouter#//進行特權(quán)模式后，可以看到路由器的提示符由>變成了#在特權(quán)模式下輸入?號查看能夠運行的命令Router#?//輸入?號查看可以運行的命令//與用戶模式比較一下，看看有什么區(qū)別？Execcommands:access-enableCreateatemporaryAccess-Listentryaccess-profileApplyuser-profiletointerfaceaccess-templateCreateatemporaryAccess-ListentrybfeFormanualemergencymodessettingcdChangecurrentdirectoryclearResetfunctionsclockManagethesystemclockconfigureEnterconfigurationmodeconnectOpenaterminalconnectioncopyCopyfromonefiletoanotherdebugDebuggingfunctions(seealso'undebug')deleteDeleteafiledirListfilesonafilesystemdisableTurnoffprivilegedcommandsdisconnectDisconnectanexistingnetworkconnectionenableTurnonprivilegedcommandseraseEraseafilesystemexitExitfromtheEXEChelpDescriptionoftheinteractivehelpsystemlockLocktheterminalloginLoginasaparticularuserlogoutExitfromtheEXECmlsexecmlsroutercommandsmstatShowstatisticsaftermultiplemulticasttraceroutesmtraceTracereversemulticastpathfromdestinationtosourcename-connectionNameanexistingnetworkconnectionnoDisabledebuggingfunctionspadOpenaX.29PADconnectionpingSendechomessagespppStartIETFPoint-to-PointProtocol(PPP)reloadHaltandperformacoldrestartshowShowrunningsysteminformationslipStartSerial-lineIP(SLIP)start-chatStartachat-scriptonalinesystatDisplayinformationaboutterminallinestelnetOpenatelnetconnectionterminalSetterminallineparameterstestTestsubsystems,memory,andinterfacestracerouteTraceroutetodestinationRouter#再退出到用戶模式下Router#disableRouter>現(xiàn)在進入到全局配置模式下Router>Router>enableRouter#configureterminalEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#//當從特權(quán)模式轉(zhuǎn)到全局配置模式下時，路由器的提示符由Router#變成了Router(config)#在全局模式下輸入?號查看一下支持的命令Router(config)#?//現(xiàn)在可以看到在全局模式下支持的命令明顯的比較多Configurecommands:aaaAuthentication,AuthorizationandAccounting.access-listAddanaccesslistentryaliasCreatecommandaliasappletalkAppletalkglobalconfigurationcommandsarapAppletalkRemoteAccessProtocolarpSetastaticARPentryasync-bootpModifysystembootpparametersautonomous-systemSpecifylocalASnumbertowhichwebelongbannerDefinealoginbannerbootModifysystembootparametersbridgeBridgeGroup.buffersAdjustsystembufferpoolparametersbusy-messageDisplaymessagewhenconnectiontohostfailscall-history-mibDefinecallhistorymibparameterscdpGlobalCDPconfigurationsubcommandschat-scriptDefineamodemchatscriptclockConfiguretime-of-dayclockconfig-registerDefinetheconfigurationregistercontrollerConfigureaspecificcontrollerdecnetGlobalDECnetconfigurationsubcommandsdefaultSetacommandtoitsdefaultsdefault-valueDefaultcharacter-bitsvaluesdialerDialerwatchcommandsdialer-listCreateadialerlistentrydnsix-dmdpProvideDMDPserviceforDNSIXdnsix-natProvideDNSIXserviceforaudittrailsdownward-compatible-configGenerateaconfigurationcompatiblewitholdersoftwaredssConfiguredssparametersenableModifyenablepasswordparametersendExitfromconfiguremodeexceptionExceptionhandlingexitExitfromconfiguremodefileAdjustfilesystemparametersframe-relayglobalframerelayconfigurationcommandshelpDescriptionoftheinteractivehelpsystemhostnameSetsystem'snetworknameinterfaceSelectaninterfacetoconfigureipGlobalIPconfigurationsubcommandsipxNovell/IPXglobalconfigurationcommandskeyKeymanagementlineConfigureaterminallineloggingModifymessageloggingfacilitieslogin-stringDefineahost-specificloginstringmap-classConfigurestaticmapclassmap-listConfigurestaticmaplistmemory-sizeAdjustmemorysizebypercentagemenuDefineauser-interfacemenumlsmlsrouterglobalcommandsmodemcapModemCapabilitiesdatabasemopConfiguretheDECMOPServermultilinkPPPmultilinkglobalconfigurationnetbiosNETBIOSaccesscontrolfilteringnoNegateacommandorsetitsdefaultsntpConfigureNTPpartitionPartitiondeviceprinterDefineanLPDprinterpriority-listBuildaprioritylistprivilegeCommandprivilegeparameterspromptSetsystem'spromptqueue-listBuildacustomqueuelistresume-stringDefineahost-specificresumestringrifSource-routeRIFcacherloginRloginconfigurationcommandsrmonRemoteMonitoringroute-mapCreateroute-maporenterroute-mapcommandmoderouterEnablearoutingprocessrtrRTRBaseConfigurationschedulerSchedulerparametersserviceModifyuseofnetworkbasedservicessmrpSimpleMulticastRoutingProtocolconfigurationcommandssnmp-serverModifySNMPparametersstackmakerSpecifystacknameandadditsmemberstate-machineDefineaTCPdispatchstatemachinesubscriber-policySubscriberpolicytacacs-serverModifyTACACSqueryparametersterminal-queueTerminalqueuecommandstftp-serverProvideTFTPservicefornetloadrequestsusernameEstablishUserNameAuthenticationvirtual-profileVirtualProfileconfigurationx25X.25Level3x29X29commandsRouter(config)#退出到特權(quán)模式Router(config)#exitRouter#

配置特權(quán)模式密碼實驗?zāi)康牧私馊绾渭訌娞貦?quán)模式下的安全實驗過程首先配置路由器的enable權(quán)限密碼Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#enablepasswordcisco//配置登錄特權(quán)模式的密碼為cisco配置完后我們使用showrunning-config查看配置文件：Router#shrunBuildingconfiguration...Currentconfiguration:!version11.2noservicepassword-encryptionnoserviceudp-small-serversnoservicetcp-small-servers!hostnameRouter!enablepasswordcisco//可以在showrunning-config文件中看到密碼以明文形式，這樣密碼很容易泄漏為了對明文密碼加密，可以使用：Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#servicepassword-encryption再使用showrunning-config查看一下配置文件：Router#shrunBuildingconfiguration...Currentconfiguration:!version11.2servicepassword-encryptionnoserviceudp-small-serversnoservicetcp-small-servers!hostnameRouter!enablepassword7030752180500//現(xiàn)在看到當使用了servicepassword-encryption后在showrunning-config中密碼不在以明文的方式顯示出來我們使用更加安全的加密方式Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#enablesecretpassword再次查看一下配置文件Router#shrunBuildingconfiguration...Currentconfiguration:!version11.2servicepassword-encryptionnoserviceudp-small-serversnoservicetcp-small-servers!hostnameRouter!enablesecret5$1$Exm1$1U1XmnWnxYDRemFHhp4aS0//在showrunning-config的結(jié)果中enablesecret的密碼是無法看到的，且無法破解enablepassword7030752180500

配置VTY登錄安全實驗?zāi)康牧私馊绾渭訌娺h程登錄的安全性實驗過程Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#linevty04Router(config-line)#passwordciscoRouter(config-line)#login問題以下配置情況能否進行遠程登錄：Router(config)#linevty04Router(config-line)#passwordciscoRouter(config-line)#login□可以登錄□不能登錄Router(config)#linevty04Router(config-line)#login□可以登錄□不能登錄Router(config)#linevty04Router(config-line)#passwordcisco□可以登錄□不能登錄Router(config)#linevty04Router(config-line)#passwordciscoRouter(config-line)#loginRouter(config-line)#nologin□可以登錄□不能登錄Router(config)#linevty04Router(config-line)#passwordciscoRouter(config-line)#loginRouter(config-line)#nopassword□可以登錄□不能登錄使用什么方法可以查看到是否有人登錄到自己的路由器上？____________________________________________________________________________________________________________________________________________________________________________________________________________怎么驗證我們對Vty接口進行的配置呢？____________________________________________________________________________________________________________________________________________________________________________________________________________

查看路由器的Running-config配置文件實驗?zāi)康牧私馑伎坡酚善魃系腞unning-config文件的作用與操作方法實驗過程在特權(quán)模式下使用showrunning-config調(diào)出內(nèi)存中的配置Router#showrunning-configBuildingconfiguration...Currentconfiguration:!version11.2servicepassword-encryptionnoserviceudp-small-serversnoservicetcp-small-servers!hostnameRouter!enablesecret5$1$Exm1$1U1XmnWnxYDRemFHhp4aS0enablepassword7030752180500!usernameuser1password70311480E145Eusernameuser2password7010615014959usernameeeepassword703usernameeeeautocommandshowverusernamexxxpassword709!interfaceLoopback0noipaddress!interfaceEthernet0/0怎么驗證這個文件是否存在可以使用dirsystem:Router#dirsystem:Directoryofsystem:/12drwx0<nodate>its2dr-x0<nodate>memory1-rw-873<nodate>running-config//可以看到在路由器的system:文件系統(tǒng)（即內(nèi)存）下有一個名為running-confi

查看路由器的Startup-config配置文件實驗?zāi)康牧私馑伎坡酚善魃系膕tartup-config文件的作用與操作方法實驗過程：查看路由器的startup-configRouter#Router#showstartup-config//查看在nvram中的startup-config配置文件startup-configisnotpresent//nvram中沒有此文件現(xiàn)在使用copy命令保存文件Router#copysystem:/running-confignvram:/startup-config//copy命令的格式為copy源路徑:/文件名目標路徑:/文件名//這句命令的作用是把內(nèi)存中的running-config拷貝到nvram中的startup-config文件Destinationfilename[startup-config]?Buildingconfiguration...[OK]當拷貝完成后，查看一下nvram中的文件Router#dirnvram:Directoryofnvram:/124-rw-895<nodate>startup-config//現(xiàn)在可以看到在nvram中有一個名為startup-config的文件1255<nodate>private-config1-rw-0<nodate>ifIndex-table129016bytestotal(127040bytesfree)Startup-config文件在路由器重啟時是否調(diào)入到內(nèi)存中，是基于路由器的寄存器值來決定的Router#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)3600Software(C3620-IS-M),Version12.3(21),RELEASESOFTWARE(fc2)TechnicalSupport:/techsupportCopyright(c)1986-2006byciscoSystems,Inc.CompiledMon06-Nov-0614:22byccaiImagetext-base:0x60008B00,data-base:0x6194C000ROM:ROMMONEmulationMicrocodeROM:3600Software(C3620-IS-M),Version12.3(21),RELEASESOFTWARE(fc2)Routeruptimeis23minutesSystemreturnedtoROMbyunknownreloadcause-suspectboot_data[BOOT_COUNT]0x0,BOOT_COUNT0,BOOTDATA19Systemimagefileis"t55/unknown"cisco3620(R4700)processor(revision0xFF)with61440K/4096Kbytesofmemory.ProcessorboardID00000000R4700CPUat80MHz,Implementation33,Rev1.2Bridgingsoftware.X.25software,VersionEthernet/IEEE802.3interface(s)4Serialnetworkinterface(s)DRAMconfigurationis64bitswidewithparityenabled.125Kbytesofnon-volatileconfigurationmemory.8192KbytesofprocessorboardSystemflash(Read/Write)Configurationregisteris0x2102//值是0x2104則是指在路由器重啟時調(diào)startup-config到內(nèi)存//現(xiàn)在可以看到當前的路由器是0x2102

備份路由器的running-config至startup-config實驗?zāi)康牧私馑伎坡酚善鞯腞unning-config與startup-config文件的區(qū)別實驗過程登錄路由器cisco3620(R4700)processor(revision0xFF)with61440K/4096Kbytesofmemory.ProcessorboardID00000000R4700CPUat80MHz,Implementation33,Rev1.2Bridgingsoftware.X.25software,VersionEthernet/IEEE802.3interface(s)4Serialnetworkinterface(s)DRAMconfigurationis64bitswidewithparityenabled.125Kbytesofnon-volatileconfigurationmemory.8192KbytesofprocessorboardSystemflash(Read/Write)SystemConfigurationDialogouldyouliketoentertheinitialconfigurationdialog?[yes/no]:{%Pleaseanswer'yes'or'no'.//選擇NO以進入命令提示符下這時，輸入showstartup-configRouter#showstartup-configstartup-configisnotpresent//思考，現(xiàn)在為什么顯示沒有這個文件呢？我們將內(nèi)存中的配置文件保存到NVRAM中Router#copyrunning-configstartup-configDestinationfilename[startup-config]?Buildingconfiguration...[OK]Router#showstartup-config//現(xiàn)在在次查看startup-config，可以看到已經(jīng)有這個文件了！Using895outof129016bytes!version12.3servicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameRouter!boot-start-markerboot-end-marker!enablepasswordcisco使用相同的命令Router#copysystem:/running-confignvram:/startup-configDestinationfilename[startup-config]?Buildingconfiguration...[OK]問題使用dirnvram:/能否看到startup-config的文件內(nèi)容？________________________________________________________________________________________________________________________________________簡述running-config與startup-config的區(qū)別是什么？________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

清除路由器的配置實驗?zāi)康牧私馊绾吻宄酚善魃袭斍暗呐渲脤嶒灜h(huán)境描述當您的路由器已經(jīng)有配置、或是有殘留配置時可以對路由器進行重啟，但是如果路由器保存有startup-config的話，下次重啟時路由器會自動加載這個配置文件，所以我們需要對startup-config進行清除實驗過程首先確定您的路由器中是否有startup-config文件Router#showstartup-configUsing1268outof129016bytes!version12.0servicetimestampsdebuguptimeservicetimestampsloguptimenoservicepassword-encryption現(xiàn)在我們對這個文件進行清除Router#writeeraseErasingthenvramfilesystemwillremoveallfiles!Continue?[confirm]y[OK]Eraseofnvram:completeRouter#現(xiàn)在再查看一下是否還有startup-configRouter#showstartup-config%%Non-volatileconfigurationmemoryisnotpresentRouter#練習(xí)在深度的實驗室中，我們需要重新做實驗時，是否需要刪除Nvram中的startup-config文件呢？__________________________________________________________________________________________________________________________________________

更改路由器的寄存器值實驗?zāi)繕肆私釩isco路由器上的寄存器值的作用與配置方法實驗過程登錄Router，使用showversion查看版本Router#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)3600Software(C3620-IS-M),Version12.3(21),RELEASESOFTWARE(fc2)TechnicalSupport:/techsupportCopyright(c)1986-2006byciscoSystems,Inc.CompiledMon06-Nov-0614:22byccaiImagetext-base:0x60008B00,data-base:0x6194C000Configurationregisteris0x2142//在showversion命令的最后一行顯示了當前路由器的寄存器值，本實驗中的值為0x2142(16進制)修改路由器的寄存器值Router#Router#conftEnterconfigurationcommands,oneperline.EndwithCNTL/Z.Router(config)#config-register0x2102//Config-register后面跟上想修改的寄存器值實驗總結(jié)表格SEQ表格\*ARABIC1常用寄存器值0x2100RomMonitor0x2101從Rom啟動0x2102從FLASH啟動，同時讀取NVRAM中的startup-config（這是默認的值）0x2142從FLASH啟動，跳過NVRAM中的startup-config，常用于進行密碼恢復(fù)

配置路由器的主機名與IP地址映射表實驗?zāi)康牧私馑伎坡酚善鞯腍ost地址映射表的作用與操作方法實驗過程在R1上配置主機名(hostname)與IP地址的映射關(guān)系Rack141R1(config)#iphostRack141R28Rack141R1(config)#iphostRack141R323Rack141R1(config)#iphostRack141R4查看當前路由器上進行的映射關(guān)系配置Rack141R1#showhostsDefaultdomainisnotsetName/addresslookupusesdomainserviceNameserversare55Codes:UN-unknown,EX-expired,OK-OK,??-revalidatetemp-temporary,perm-permanentNA-NotApplicableNone-NotdefinedHostPortFlagsAgeTypeAddress(es)Rack141R2None(perm,OK)0IP8Rack141R3None(perm,OK)0IP23Rack141R4None(perm,OK)0IP練習(xí)在路由器上配置hostname與IP地址映射有什么作用呢？_______________________________________________________________________________________________________________________________________________________________________________________________________________（2）怎么樣驗證我們配置的映射是可以正常使用的？_______________________________________________________________________________________________________________________________________________________________________________________________________________

配置命令縮寫實驗?zāi)康牧私馑伎坡酚善魃厦羁s寫的使用實驗過程登錄路由器，開始配置Rack141R1(config)#aliasexecsirshowiproute//定義輸入sir等于輸入showiprouteRack141R1(config)#exitRack141R1#sir//現(xiàn)在直接輸入sir即等于輸入了showiproute,這樣我們就可以支持命令縮寫了Codes:C-connected,S-static,R-RIP,M-mobile,B-BGPD-EIGRP,EX-EIGRPexternal,O-OSPF,N1-OSPFNSSAexternaltype1,N2-OSPFNSSAexternaltype2E1-OSPFexternaltype1,E2-OSPFexternaltype2i-IS-IS,su-IS-ISsummary,L1-IS-ISlevel-1,L2-IS-ISlevel-2ia-IS-ISinterarea,*-candidatedefault,U-per-userstaticrouteo-ODR,P-periodicdownloadedstaticrouteGatewayoflastresortisnotsetRack141R1#實驗總結(jié)我們可以定義出自己經(jīng)常使用的命令的縮寫（注：以下并不是標準，具體縮寫根據(jù)習(xí)慣）aliasexecctconftaliasexecsrshrunaliasexecsrishrunintaliasexecuundeballaliasexecsfmshframemapaliasexecsfrshframeroutealiasexecsfpshframpvcaliasexecsisshisdnstataliasexecsamshatmmapaliasconfigurerrrouterripaliasconfigurerorouterospf

配置路由器的BANNER信息實驗?zāi)康牧私馊绾螌λ伎坡酚善魃线M行Banner配置實驗過程使用banndmotd%進行banner配置Router(config)#Router(config)#bannermotd%EnterTEXTmessage.Endwiththecharacter'%'.____/\@@@@\/|..|\@@@@@..|\(#(oo)#@@@@(oo)~)_!s/\~~\|\|<~~\!t(____H_)__(__~H___)_%Router(config)#退出路由器驗證banner是否有效Routercon0isnowavailablePressRETURNtogetstarted.*Mar100:20:20.119:%SYS-5-CONFIG_I:Configuredfromconsolebyconsole____/\@@@@\/|..|\@@@@@..|\(#(oo)#@@@@(oo)~)_!s/\~~\|\|<~~\!t(____H_)__(__~H___)_Router>

做實驗前的默認配置實驗?zāi)康牧私庾鰧嶒炛靶枰M行的基本配置實驗過程Router(config)#*Mar100:34:56.395:%SYS-5-CONFIG_I:ConfiguredfromconsolebyconsoleRouter(config)#enablepasswordciscoRouter(config)#hostnameRack141R1Rack141R1(config)#noipdomain-lookupRack141R1(config)#linecon0Rack141R1(config-line)#login%Logindisabledonline0,until'password'issetRack141R1(config-line)#passwordciscoRack141R1(config-line)#exec-timeout00Rack141R1(config-line)#loggingsynchronousRack141R1(config-line)#Rack141R1(config-line)#linevty04Rack141R1(config-line)#login%Logindisabledonline66,until'password'isset%Logindisabledonline67,until'password'isset%Logindisabledonline68,until'password