管理Cisco設(shè)備分析

管理Cisco設(shè)備配置方式EXEC模式用戶模式對(duì)交換機(jī)和路由器的有限操作命令提示符為

主機(jī)名>主要有兩個(gè)命令模式提供命令鍵入.模式一:EXEC模式(續(xù))特權(quán)(或enabled)模式對(duì)交換機(jī)和路由器更深入的操作有配置和監(jiān)視權(quán)力是進(jìn)入其它配置模式的前提命令提示符為

主機(jī)名#模式二(也是最常用的模式):Catalyst2950Switch啟動(dòng)界面

---SystemConfigurationDialog---

Atanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Continuewithconfigurationdialog?[yes/no]:yesEnterIPaddress:ip_addressEnterIPnetmask:ip_netmaskWouldyouliketoenteradefaultgatewayaddress?[yes]:yesIPaddressofthedefaultgateway:ip_addressEnterahostname:host_nameEnterenablesecret:secret_passwordWouldyouliketoconfigureaTelnetpassword?[yes]yesEnterTelnetpassword:telnet_passwordWouldyouliketoenableasaclustercommandswitch?noEnterclustername:cls_nameLoggingIntotheSwitchand

EnteringtheEnablePasswordConfigurationModes:Globalconfigurationmodewg_sw_a#configureterminalwg_sw_a(config)#Interfaceconfigurationmodewg_sw_a(config)#interfacee0/1wg_sw_a(config-if)#ConfiguringtheSwitchSetsthelocalidentityfortheswitchConfiguringSwitchIdentification配置交換機(jī)的管理IP地址SW2950(config)#interfacevlan1SW2950(config-if)#noshutdown配置交換機(jī)的網(wǎng)關(guān)Switch(config)#ipdefault-gateway{ipaddress}例如:ConfiguringtheSwitchIPAddressShowingSwitchInitialStartupStatuswg_sw_a#showversionDisplaystheconfigurationofthesystemhardware,softwareversion,namesandsourcesofconfigurationfiles,andbootimageswg_sw_a#showrunning-configurationDisplaystheswitch’scurrentactiveconfigurationfilewg_sw_a#showinterfacesDisplaysstatisticsforallinterfacesconfiguredontheswitchSwitchshowversionCommandsw2950#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)C2950Software(C2950-I6Q4L2-M),Version12.1(14)EA1a,RELEASESOFTWARE(fc1)Copyright(c)1986-2003byciscoSystems,Inc.CompiledTue02-Sep-0303:33byantoninoImagetext-base:0x80010000,data-base:0x805C0000ROM:BootstrapprogramisCALHOUNbootloadersw2950uptimeis1minuteSystemreturnedtoROMbypower-onSystemimagefileis"flash:/c2950-i6q4l2-mz.121-14.EA1a.bin"ciscoWS-C2950-24(RC32300)processorwith20710Kbytesofmemory.Lastresetfromsystem-resetRunningStandardImage24FastEthernet/IEEE802.3interface(s)32Kbytesofflash-simulatednon-volatileconfigurationmemory.BaseethernetMACAddress:00:0F:72:DB:4E:C0Motherboardserialnumber:FOC0813Y1H6Configurationregisteris0xFsw2950#showinterfacesfastEthernet0/1FastEthernet0/1isdown,lineprotocolisdown(notconnect)HardwareisFastEthernet,addressis000f.72db.4ec1(bia000f.72db.4ec1)MTU1500bytes,BW10000Kbit,DLY1000usec,reliability255/255,txload1/255,rxload1/255EncapsulationARPA,loopbacknotsetKeepaliveset(10sec)Auto-duplex,Auto-speedinputflow-controlisoff,outputflow-controlisoffARPtype:ARPA,ARPTimeout04:00:00Lastinputnever,output00:14:53,outputhangnever--More--SwitchshowinterfacesCommand路由器的簡(jiǎn)單配置－任何時(shí)侯按Ctrl+C推出對(duì)話模式Router#setup---SystemConfigurationDialog---Continuewithconfigurationdialog?[yes/no]:yesAtanypointyoumayenteraquestionmark'?'forhelp.Usectrl-ctoabortconfigurationdialogatanyprompt.Defaultsettingsareinsquarebrackets'[]'.Basicmanagementsetupconfiguresonlyenoughconnectivityformanagementofthesystem,extendedsetupwillaskyoutoconfigureeachinterfaceonthesystemWouldyouliketoenterbasicmanagementsetup?[yes/no]:no出廠時(shí)的缺省配置SetupInterfaceSummaryFirst,wouldyouliketoseethecurrentinterfacesummary?[yes]:Interface IP-Address OK? Method Status ProtocolBRI0 unassigned YES unset administrativelydown downBRI0:1 unassigned YES unset administrativelydown downBRI0:2 unassigned YES unset administrativelydown downEthernet0 unassigned YES unset administrativelydown downSerial0 unassigned YES unset administrativelydown downInterfacesFoundDuringStartupSetupInitial

GlobalParameters

Configuringglobalparameters:Enterhostname[Router]:wg_ro_cTheenablesecretisapasswordusedtoprotectaccesstoprivilegedEXECandconfigurationmodes.Thispassword,afterentered,becomesencryptedintheconfiguration.Enterenablesecret:ciscoTheenablepasswordisusedwhenyoudonotspecifyanenablesecretpassword,withsomeoldersoftwareversions,andsomebootimages.Enterenablepassword:sanfranThevirtualterminalpasswordisusedtoprotectaccesstotherouteroveranetworkinterface.Entervirtualterminalpassword:sanjoseConfigureSNMPNetworkManagement?[no]:SetupInitial

ProtocolConfigurations

ConfigureLAT?[yes]:noConfigureAppleTalk?[no]:ConfigureDECnet?[no]:ConfigureIP?[yes]:ConfigureIGRProuting?[yes]:noConfigureRIProuting?[no]:ConfigureCLNS?[no]:ConfigureIPX?[no]:ConfigureVines?[no]:ConfigureXNS?[no]:ConfigureApollo?[no]:SetupInterface

ParametersBRIinterfaceneedsisdnswitch-typetobeconfiguredValidswitchtypesare: [0]none..........Onlyifyoudon'twanttoconfigureBRI. [1]basic-1tr6....1TR6switchtypeforGermany [2]basic-5ess....AT&T5ESSswitchtypefortheUS/Canada [3]basic-dms100..NorthernDMS-100switchtypeforUS/Canada [4]basic-net3....NET3switchtypeforUKandEurope [5]basic-ni......NationalISDNswitchtype [6]basic-ts013...TS013switchtypeforAustralia [7]ntt...........NTTswitchtypeforJapan [8]vn3...........VN3andVN4switchtypesforFranceChooseISDNBRISwitchType[2]:Configuringinterfaceparameters:DoyouwanttoconfigureBRI0(BRId-channel)interface?[no]:DoyouwanttoconfigureEthernet0interface?[no]:yesConfigureIPonthisinterface?[no]:yesIPaddressforthisinterface:Subnetmaskforthisinterface[]:ClassAnetworkis,24subnetbits;maskis/24DoyouwanttoconfigureSerial0interface?[no]:SetupScript

ReviewandUseThefollowingconfigurationcommandscriptwascreated:hostnameRouterenablesecret5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enablepasswordsanfranlinevty04passwordsanjosenosnmp-server!noappletalkroutingnodecnetroutingiproutingnoclnsroutingnoipxroutingnovinesroutingnoxnsroutingnoapolloroutingisdnswitch-typebasic-5essinterfaceBRI0shutdownnoipaddress!interfaceEthernet0noshutdownnomopenabled!interfaceSerial0shutdownnoipaddress<textomitted>end[0]GototheIOScommandpromptwithoutsavingthisconfig.[1]Returnbacktothesetupwithoutsavingthisconfig.[2]Savethisconfigurationtonvramandexit.Enteryourselection[2]:LoggingIntotheRouterYoucanabbreviateacommandtothefewestcharactersthatmakeauniquecharacterstring.RouterUser-Mode

CommandListwg_ro_c>?Execcommands:access-enableCreateatemporaryAccess-Listentry

atmsigExecuteAtmSignallingCommands

cdChangecurrentdevice

clearResetfunctions

connectOpenaterminalconnection

dirListfilesongivendevice

disableTurnoffprivilegedcommands

disconnectDisconnectanexistingnetworkconnection

enableTurnonprivilegedcommands

exitExitfromtheEXEC

helpDescriptionoftheinteractivehelpsystem

latOpenalatconnection

lockLocktheterminal

loginLoginasaparticularuser

logoutExitfromtheEXEC

--More--wg_ro_c#?Execcommands:access-enableCreateatemporaryAccess-Listentryaccess-profileApplyuser-profiletointerfaceaccess-templateCreateatemporaryAccess-ListentrybfeFormanualemergencymodessettingcdChangecurrentdirectoryclearResetfunctionsclockManagethesystemclockconfigureEnterconfigurationmodeconnectOpenaterminalconnectioncopyCopyfromonefiletoanotherdebugDebuggingfunctions(seealso'undebug')deleteDeleteafiledirListfilesonafilesystemdisableTurnoffprivilegedcommandsdisconnectDisconnectanexistingnetworkconnectionenableTurnonprivilegedcommandseraseEraseafilesystemexitExitfromtheEXEChelpDescriptionoftheinteractivehelpsystem--More--Youcancompleteacommandstringbyenteringtheuniquecharacterstring,thenpressingtheTabkey.RouterPrivileged-Mode

CommandList幫助機(jī)制上下文關(guān)聯(lián)幫助錯(cuò)誤信息提示指出所輸入交換機(jī)命令的錯(cuò)誤所在，以便于修改或糾正.可以重新調(diào)出以前運(yùn)行過的命令，用來再次運(yùn)行、查看或修改.之前命令保存區(qū)提供命令清單和與特定命令相關(guān)聯(lián)的參數(shù).

路由上下文幫助Router#clokTranslating"CLOK"%Unknowncommandorcomputername,orunabletofindcomputeraddressRouter#clearclockRouter#%Incompletecommand.Router#setSetthetimeanddateRouter#%Incompletecommand.Router#hh:mm:ssCurrentTimeRouter#clockset19:56:00%Incompletecommand.Router#clockset19:56:00?<1-31>DayofthemonthMONTHMonthoftheyearRouter#clockset19:56:00048

^%Invalidinputdetectedatthe'^'markerRouter#clockset19:56:0004August%Incompletecommand.Router#clockset19:56:0004August?<1993-2035>YearCommand

PromptingSyntaxCheckingCommand

PromptingshowversionCommandwg_ro_a#showversionCiscoInternetworkOperatingSystemSoftwareIOS(tm)2500Software(C2500-JS-L),Version12.0(3),RELEASESOFTWARE(fc1)Copyright(c)1986-1999byciscoSystems,Inc.CompiledMon08-Feb-9918:18byphanguyeImagetext-base:0x03050C84,data-base:0x00001000ROM:SystemBootstrap,Version11.0(10c),SOFTWAREBOOTFLASH:3000BootstrapSoftware(IGS-BOOT-R),Version11.0(10c),RELEASESOFTWARE(fc1)wg_ro_auptimeis20minutesSystemrestartedbyreloadSystemimagefileis"flash:c2500-js-l_120-3.bin"(outputomitted)--More--Configurationregisteris0x2102

(一行中長(zhǎng)字串會(huì)自動(dòng)滾卷).

<Ctrl-A>

光標(biāo)移動(dòng)到命令行的開始位置.

<Ctrl-E>

光標(biāo)移動(dòng)到命令行的結(jié)束位置.

<Esc-B>

回移一個(gè)單詞

<Ctrl-F>

下移一個(gè)字符.

<Ctrl-B>

回移一個(gè)字符.

<Esc-F>

下移一個(gè)單詞使用增強(qiáng)的編輯命令<Ctrl-D>刪除當(dāng)前字符

Router>$valueforcustomers,employees,andpartners.Ctrl-PorUparrow調(diào)出最近(前一)使用過的命令Ctrl-NorDownarrow調(diào)出更近使用過的命令Router>showhistory顯示命令保存區(qū)內(nèi)容Router>terminalhistorysizelines

設(shè)置命令緩沖區(qū)大小查看之前用過的命令ViewingtheConfigurationshowrunning-configand

showstartup-configCommandswg_ro_c#showstartup-configUsing1359outof32762bytes!version12.0! --More--wg_ro_c#showrunning-configBuildingconfiguration...

Currentconfiguration:

!

version12.0! --More--InNVRAMInRAMDisplaysthecurrentandsavedconfigurationOverviewofRouterModes基本實(shí)驗(yàn)操作Wisdom>enableWisdom#configureterminalWisdom(config)#noipdomain-lookupWisdom(config)#lineconsole0Wisdom(config-line)#loggingsynchronousWisdom(config-line)#noexec-timeoutWisdom(config-line)#passwordciscoWisdom(config-line)#loginWisdom(config-line)#exitWisdom(config)#linevty04Wisdom(config-line)#loggingsynchronousWisdom(config-line)#noexec-timeoutWisdom(config-line)#passwordciscoWisdom(config-line)#loginWisdom(config-line)#endWisdom#configureterminalWisdom(config)#enablesecretciscoWisdom(config)#endWisdom#servicepassword-encryption//手工加密,不再顯示明文密碼保存配置wg_ro_c#wg_ro_c#copyrunning-configstartup-configDestinationfilename[startup-config]?Buildingconfiguration…wg_ro_c#CopiesthecurrentconfigurationtoNVRAM保存命令Copyrunning-configstartup-config=writeSetsthelocalidentityormessagefortheaccessedrouterorinterface配置路由器主機(jī)名等參數(shù)配置路由器的密碼兩條常用的命令Router(config)#lineconsole0Router(config-line)#exec-timeout00Router(config)#lineconsole0Router(config-line)#loggingsynchronous阻止會(huì)話退出使光標(biāo)還原到原來的位置，重新顯示被覆蓋的命里Uniqueaddressingallowscommunication

betweenendstations.Pathchoiceisbasedondestinationaddress.LocationisrepresentedbyanaddressIP地址規(guī)劃主機(jī)通信對(duì)IP地址的要求1、網(wǎng)絡(luò)中IP地址必須唯一2、在一個(gè)交換網(wǎng)絡(luò)中主機(jī)必須有相同的網(wǎng)絡(luò)號(hào)才能通信3、在不同的交換網(wǎng)絡(luò)中（用路由器分開的網(wǎng)絡(luò)），主機(jī)不能有相同的網(wǎng)絡(luò)號(hào)IP尋址IP地址分類不帶子網(wǎng)的IP尋址帶子網(wǎng)的IP尋址(這里的子網(wǎng)掩碼為24位)子網(wǎng)地址子網(wǎng)掩碼二進(jìn)制子網(wǎng)掩碼－子網(wǎng)掩碼只能有這9個(gè)數(shù)字Subnetsnotinuse—thedefault沒有子網(wǎng)的子網(wǎng)掩碼－缺省子網(wǎng)掩碼Networknumberextendedbyeightbits有子網(wǎng)的子網(wǎng)掩碼有子網(wǎng)的子網(wǎng)掩碼(續(xù))Networknumberextendedbytenbits劃分子網(wǎng)的幾個(gè)捷徑:1.你所選擇的子網(wǎng)掩碼將會(huì)產(chǎn)生多少個(gè)子網(wǎng)?:2的x次方-2(x代表掩碼位,即2進(jìn)制為1的部分)

2.每個(gè)子網(wǎng)能有多少主機(jī)?:2的y次方-2(y代表主機(jī)位,即2進(jìn)制為0的部分)

3.有效子網(wǎng)是?:有效子網(wǎng)號(hào)=256-10進(jìn)制的子網(wǎng)掩碼4.每個(gè)子網(wǎng)的廣播地址是?:廣播地址=下個(gè)子網(wǎng)號(hào)-1

5.每個(gè)子網(wǎng)的有效主機(jī)分別是?:忽略子網(wǎng)內(nèi)全為0和全為1的地址剩下的就是有效主機(jī)地址.最后有效1個(gè)主機(jī)地址=下個(gè)子網(wǎng)號(hào)-2(即廣播地址-1)

子網(wǎng)劃分Othersubnets申請(qǐng)到一段C類地址，將這段地址分配給網(wǎng)絡(luò)中的主機(jī)，要求有5個(gè)子網(wǎng)，每個(gè)子網(wǎng)最少有20臺(tái)主機(jī)，地址分配的步驟：1、確定網(wǎng)絡(luò)的主機(jī)位n，利用32-n算出網(wǎng)絡(luò)位，然后算出子網(wǎng)掩碼2、根據(jù)子網(wǎng)掩碼，確定每段IP地址的范圍配置路由器IP地址wg_ro_c#configureterminalwg_ro_c(config)#interfaceethernet0wg_ro_c(config-if)#wg_ro_c(config-if)#noshutdownwg_ro_c(config-if)#exitshowinterfacesRouter#showinterfacesEthernet0isup,lineprotocolisupHardwareisLance,addressis00e0.1e5d.ae2f(bia00e0.1e5d.ae2f)MTU1500bytes,BW10000Kbit,DLY1000usec,rely255/255,load1/255EncapsulationARPA,loopbacknotset,keepaliveset(10sec)ARPtype:ARPA,ARPTimeout04:00:00Lastinput00:00:07,