Cisco路由器配置手冊

一•CISCO路由器簡介
  
  1.1 統一採用IOS操作系統,操作具有一致性。
  
  1.2 CISCO IOS操作環境。
  ROM monitor > Failure of password recovery
  BootROM router(boot) > Flash image upgrade
  Cisco IOS router > Normal operation
  
  1.3 Command Modes命令模式。
  User EXEC Router> user access
  Privileged EXEC Router# System adminstration
  Configuration mode Router(config)# Modify configuration
  Setup Prompted dialog Create the initial
  configuration
  
  二 配置前的準備工作
  
  2.1 用終端或仿真終端接入CONSOLE口 。
  終端或仿真終端配置信息如下:
  9600 baud 8 data bits no parity 2 stop bits (9600,8/N/2)
  
  2.2 用TELNET命令在網上進行設置。
  系統管理員可在網上用telnet address命令進行遠程配置。
  
  三 配置方法
  
  3.1 Auto install
  3.2 setup
  3.3 config 命令行設置-
  
  
  四 配置IP地址
  
  4. 1採用 (3.1 /3.2) 方法進行配置。
  
  4.2 config命令行方式進行設置
  4.2.1 首先啓動ROUTER 進入router > 模式。
  鍵入Enable 進入router # 模式
  然後鍵入config 進入router(config)# 模式
  4.2.2 選擇要配置的路由器端口
  Router(config) # interface端口號
  進入端口設置狀態 Router(config-if)
  此時用命令IP address <掩碼>
  設定路由器端口IP地址
  
  
  五 配置ip路由協議 (RIP ,OSPF ,BGP ,STATICS)
  在globle模式下配置 例圖見附圖。
  
  5. 1靜態路由
  IP route 目的網絡地址 子網掩碼 端口號
  例:在RA1上配RA2的路由
  IP route 10.0.210.4 255.255.255.252 E0
  
  5.2 RIP2設置
  以路器A1爲例進行如下設置
  router rip ;enable rip
  version 2 ;選擇版本2
  network 10.86.16.0 ;相關子網地址
  network 10.85.1.4
  network 10.85.1.8
  
  
  5.3 OSPF設置
  以路由器D爲例進行如下配置
  router ospf 200 ;enable ospf 進程號爲200
  redistribute bgp 200 subnets ;
  network 10.0.210.4 0.0.0.3 area 1 ; 相關子網地址及區域號
  network 10.185.1.16 0.0.0.3 area 1
  
  
  5.4 BGP設置
  以路由器A2和D爲例
  A2:
  router bgp 100 ;enable bgp 設置自治域號
  network 10.0.210.4 mask 255.255.255.252 ;相關子網地址及子
  網掩碼
  network 10.80.0.0 mask 255.240.0.0 ; 這些地址由bgp發到鄰
  居路由器
  redistribute rip
  neighbor 10.0.210.6 remote-as 200 ;設置遠程相連自治域邊
  界路由器端口
  D2:
  router bgp 200
  network 10.0.210.4 mask 255.255.255.252
  network 10.0.32.0 mask 255.255.240.0
  network 10.185.1.16 mask 255.255.255.252
  network 10.0.1.0 mask 255.255.255.252
  neighbor 10.0.210.5 remote-as 100
  
  六 radius認證的設置
  
  6.1 radius的簡述
  RADIUS的全稱爲(Remote Access Dail-In User Service),它是對遠程撥號用戶訪問進行認證的一種協議。主要進行Authentication Authorization Accounting (AAA) 三方面的工作。
  
  6.2 radius的配置
  具體配置如下:
  aaa new-mode ;enable radius
  radius-server host
;指明radius server在網
  上的地址
  radius-server key ;建立一個網上傳輸密
  aaa authentication login default radius local ;進行login認證,若radius
  server未找到從本地數據庫內查找
  aaa authentication ppp default radius local
  aaa authorization network radius local ;授權檢測
  aaa accounting network start-stop radius ;計帳檢測
  
  七 路由器軟件升級方法
  
  7.1 改變操作環境
  在global config mode設置: config -reg 0x2101
  reload 進入Boot Rom 模式:router(boot)>
  
  7.2 運行tftp server
  在網上運行tftp server,使升級文件可以傳輸。
  
  7.3 升級版本
  命令如下:
  copy tftp flash ;將tftp server上的文件傳入路由器的flash memoy中
  copy flash tftp ; j將flash中的文件備份到tftp server中
  
  八 配置路由器的一些注意事項
  
  8.1撥號用戶的配置。
  cisco 2509/2511的異步串行通訊口在配置modem時,modem需設置成自動應答方式。具體方法如下:
  用超級終端進入modem AT 命令方式,鍵入ats0=1 設置自動應答方式,然後鍵入at&w 將設置寫入寄存器。
  
  8.2 RIP & BGP的設置
  當一個運行RIP路由協議的子網,做爲一個自治域,用BGP協議接入另一
  自治域時。此子網內所有路由器需添加參數: ip classless 。同時在
  與邊界路由器直接相連的路由器上需添加一個缺省網關。
  設置如下:
  ip 0.0.0.0 0.0.0.0 邊界路由器地址。
  
  8.3 v.35電纜直連的設置
  在相關的端口上設置時鐘速率:clock rate < speed> .
  
  8.4 loopback端口的設置
  loopback端口是一個虛擬端口,端口狀態始終處於UP。通過它可以使由BGP相連的AS之間始終保持連繫,不會由於邊界路由器端口狀態的改變而發生變化。其具體配置如下:
  interface loopback
  
  九常用的路由器命令 (見附錄)
  
  
  十 問與答
  
  10.1如何檢測網絡是否通暢?
  A:在網絡主機上採用命令ping 來逐端檢測網端。
  
  10.2如何查看路由器配置信息?
  A:在EXEC模式下用show config命令。
  
  10.3如何查看路由器路由信息?
  A:在EXEC模式下用show ip route 命令。
  
  10.4如何查看路由器端口信息?
  A:在EXEX模式下用show int <端口號> 命令。
  
  10.5爲什麼端口協議已經配置,狀態仍然是down?
  A:在CONFIG模式下,選擇該端口,執行no shutdwon命令。
  
  10.6 config模式有幾種狀態,對應那些操作?
  A:config模式有以下幾種狀態:
  • globle config 全局配置操作 exec模式鍵入config t
  • interface config 端口配置操作 config模式鍵入int <端口號>
  • line config 線路配置操作 config模式鍵入line <線路號>
  • router config 路由配置操作 config模式鍵入router<路由
  協議>
  
  十一網絡實驗簡介
  
  本實驗模擬廣東視聆通網絡情況。將網絡劃分爲AS 100和AS 200 .AS 100內動態路由協議採用RIP,AS 200內採用OSPF。兩個自治域間採用BGP協議互連。該實驗主要測試目的在於,測試一個採用RIP協議的網絡能否劃分自治域,並與其它自治域相連。
  
  測試環境網絡圖見附圖:
  各點配置如下:
  
  路由器A2配置:
  hostname a2
  !
  enable secret 5 $1$kJyk$CfMLfg87wovmbVp5lHUfk/
  enable password cisco
  !
  !
  interface Loopback0
  ip address 10.0.2.1 255.255.255.252
  !
  interface Ethernet0
  ip address 10.86.16.2 255.255.240.0
  ip rip send version 2
  ip rip receive version 2
  !
  interface Ethernet1
  ip address 10.0.210.5 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  !
  interface Serial0
  no ip address
  shutdown
  !
  interface Serial1
  no ip address
  shutdown
  !
  router rip
  version 2
  redistribute bgp 100
  network 10.0.0.0
  !
  router bgp 100
  network 10.0.210.4 mask 255.255.255.252
  network 10.80.0.0 mask 255.240.0.0
  redistribute rip
  neighbor 10.0.210.6 remote-as 200
  !
  ip classless
  !
  line con 0
  line aux 0
  line vty 0 4
  password cisco
  login
  !
  end
  
  路由器D的配置:
  d#sh conf
  Using 1069 out of 32762 bytes
  !
  version 11.0
  service udp-small-servers
  service tcp-small-servers
  !
  hostname d
  !
  enable secret 5 $1$EBoX$3AWqea9PpP9xTgr49gqLy.
  enable password cisco
  !
  !
  interface Loopback0
  description Loopback Interface of Router
  ip address 10.0.1.1 255.255.255.252
  no ip mroute-cache
  !
  interface Ethernet0
  description Core Region Router in Guangzhou
  ip address 10.0.210.6 255.255.255.252
  no ip mroute-cache
  !
  interface Serial0
  ip address 10.185.1.17 255.255.255.252
  no ip mroute-cache
  ip ospf network broadcast
  clockrate 9600
  !
  interface Serial1
  no ip address
  no ip mroute-cache
  ip ospf network broadcast
  shutdown
  !
  router ospf 200
  redistribute bgp 200 subnets
  network 10.0.210.4 0.0.0.3 area 1
  network 10.185.1.16 0.0.0.3 area 1
  !
  router bgp 200
  network 10.0.210.4 mask 255.255.255.252
  network 10.0.32.0 mask 255.255.240.0
  network 10.185.1.16 mask 255.255.255.252
  network 10.0.1.0 mask 255.255.255.252
  neighbor 10.0.210.5 remote-as 100
  !
  ip classless
  ip ospf name-lookup
  !
  line con 0
  line aux 0
  transport input all
  line vty 0 4
  password cisco
  login
  !
  end
  
  路由器B的配置:
  b#sh ip route
  Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
  D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
  E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
  i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
  U - per-user static route
  
  Gateway of last resort is 10.85.1.5 to network 0.0.0.0
  
  10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
  R 10.0.2.0/30 [120/2] via 10.85.1.5, 00:00:25, Serial0
  C 10.88.16.0/20 is directly connected, Ethernet0
  R 10.86.16.0/20 [120/1] via 10.85.1.5, 00:00:25, Serial0
  R 10.87.16.0/20 [120/2] via 10.85.1.5, 00:00:25, Serial0
  R 10.85.1.8/30 [120/1] via 10.85.1.5, 00:00:25, Serial0
  C 10.85.1.4/30 is directly connected, Serial0
  R 10.0.210.4/30 [120/2] via 10.85.1.5, 00:00:25, Serial0
  R* 0.0.0.0/0 [120/1] via 10.85.1.5, 00:00:00, Serial0
  
  b#sh conf
  Using 572 out of 32762 bytes
  !
  version 11.1
  service udp-small-servers
  service tcp-small-servers
  !
  hostname b
  !
  !
  !
  interface Ethernet0
  ip address 10.88.16.1 255.255.240.0
  ip rip send version 2
  ip rip receive version 2
  !
  interface Serial0
  ip address 10.85.1.6 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  clockrate 9600
  !
  interface Serial1
  ip address 10.85.1.13 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  clockrate 9600
  !
  router rip
  version 2
  network 10.0.0.0
  !
  ip classless
  !
  line con 0
  line 1 8
  line aux 0
  line vty 0 4
  password cisco
  login
  !
  end
  /************************************************************************/
  
  路由器A1的配置:
  a1#sh ip route
  Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
  D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
  N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
  E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
  i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
  U - per-user static route, o - ODR
  
  Gateway of last resort is 10.86.16.2 to network 0.0.0.0
  
  10.0.0.0/8 is variably subnetted, 7 subnets, 2 masks
  R 10.0.2.0/30 [120/1] via 10.86.16.2, 00:00:23, Ethernet0
  R 10.88.16.0/20 [120/1] via 10.85.1.6, 00:00:27, Serial0
  C 10.86.16.0/20 is directly connected, Ethernet0
  R 10.87.16.0/20 [120/1] via 10.85.1.10, 00:00:24, Serial1
  C 10.85.1.8/30 is directly connected, Serial1
  C 10.85.1.4/30 is directly connected, Serial0
  R 10.0.210.4/30 [120/1] via 10.86.16.2, 00:00:23, Ethernet0
  S* 0.0.0.0/0 [1/0] via 10.86.16.2
  a1#sh conf
  Using 600 out of 32762 bytes
  !
  version 11.2
  !
  hostname a1
  !
  enable secret 5 $1$PKCA$FzjiYXenZNipsGuOcpwAg0
  enable password cisco
  !
  !
  interface Ethernet0
  ip address 10.86.16.1 255.255.240.0
  ip rip send version 2
  ip rip receive version 2
  !
  interface Serial0
  ip address 10.85.1.5 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  !
  interface Serial1
  ip address 10.85.1.9 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  clockrate 9600
  !
  router rip
  version 2
  network 10.0.0.0
  !
  ip classless
  ip route 0.0.0.0 0.0.0.0 10.86.16.2
  !
  line con 0
  line aux 0
  line vty 0 4
  password cisco
  login
  !
  end
  
  a1#
  
  /*****************************************************/
  路由器B1的配置:
  b1#sh ip route
  Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
  D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
  E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
  i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
  U - per-user static route
  
  Gateway of last resort is not set
  
  10.0.0.0/8 is variably subnetted, 4 subnets, 3 masks
  O E2 10.0.0.0/8 [110/1] via 10.185.1.17, 00:34:51, Serial0
  C 10.0.32.0/20 is directly connected, Ethernet0
  C 10.185.1.16/30 is directly connected, Serial0
  O 10.0.210.4/30 [110/74] via 10.185.1.17, 00:53:25, Serial0
  b1#sh conf
  Using 441 out of 32762 bytes
  !
  version 11.1
  service udp-small-servers
  service tcp-small-servers
  !
  hostname b1
  !
  !
  !
  interface Ethernet0
  ip address 10.0.32.1 255.255.240.0
  !
  interface Serial0
  ip address 10.185.1.18 255.255.255.252
  ip ospf network broadcast
  !
  interface Serial1
  no ip address
  shutdown
  !
  router ospf 200
  network 10.0.32.0 0.0.0.3 area 1
  network 10.185.1.16 0.0.0.3 area 1
  !
  no ip classless
  !
  line con 0
  line 1 8
  line aux 0
  line vty 0 4
  login
  !
  end
  
  路由器C的配置:
  !
  hostname c
  !
  enable secret 5 $1$IoKm$0ai6l75ThSs0zeR9T90W3/
  enable password cisco
  !
  !
  interface Ethernet0
  ip address 10.87.16.1 255.255.240.0
  ip rip send version 2
  ip rip receive version 2
  !
  interface Serial0
  ip address 10.85.1.14 255.255.255.252
  ip rip send version 2
  clockrate 9600
  !
  interface Serial1
  ip address 10.85.1.10 255.255.255.252
  ip rip send version 2
  ip rip receive version 2
  !
  router rip
  version 2
  network 10.0.0.0
  !
  ip classless
  !
  line con 0
  line 1 16
  transport input all
  line aux 0
  transport input all
  line vty 0 4
  password cisco
  login
  !
  end
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章