第五章操作与配置Cisco-IOS设备教学文案.ppt

Body Text,Second Level,Third Level,Fourth Level,Fifth Level,Slide Title,5-,*,第五章操作与配置Cisco IOS设备,本章目标(续),在不同的用户界面下应用各种帮助和命令行编辑功能,查看并确认并于各网络设备的基本信息,Cisco,路由器的硬件构成,1.中央处理器(,CPU),2.内存,(1)只读内存(,ROM),(2),随机访问内存(,RAM),(3),闪存(,FLASH),(4),非易失性内存(,NVRAM),3.,接口(,Interface),Cisco IOS,软件提供多种网络服务，支持各种网络应用,.,Cisco,互连网操作系统,(IOS),软件,网络设备的配置,基于以下各方面来配置设备,:,所需功能的网络策略,与协议关联的地址和相关参数,管理方面的需要,交换机将出厂缺省设置作为初始配置,如果路由器中没有配置文件，会提示进入初始化设置过程,硬件自检,定位并加载,Cisco IOS,映象文件,定位并运行配置文件,Cisco,设备的简单启动过程,可以通过多种途径来配置,配置直接在设备的内存中生效,控制端口,Aux,端口,端口,PC or Unix,服务器,Web,或网络管,理服务器,虚拟终端,多种途径的配置,Telnet,TFTP,提供命令行界面,在不同的网络设备上运行时有差别,在命令模式下可以键入或粘贴命令,键入命令后回车，设备即解析和执行所键入的命令,两个主要命令模式是用户模式和特权模式,不同的命令模式有不同的提示符,Cisco,IOS,Cisco IOS,用户界面的基本特性,用户模式,对交换机和路由器的有限操作,命令提示符为,主机名,主要有两个命令模式提供命令键入.,模式一:,Cisco IOS,的主要命令模式,特权,(,或,enabled),模式,对交换机和路由器更深入的操作,有配置和监视权力,是进入其它配置模式的前提,命令提示符为,主机名,#,模式二,(,也是最常用的模式):,Cisco IOS,的主要命令模式(续),系统启动例程会初始化交换机,初始启动利用缺省配置参数,1.启动前确认正确连接线缆和控制线,2.,接入电源,3.,观察启动顺序,面板上的指示灯,LEDs,Cisco IOS,输出到控制台上的内容,交换机的初始启动,检查交换机指示灯(,LEDs),交换机自检期间的端口指示灯,1.启动时，所有端口指示灯变绿,.,2.,每个端口自检完毕，对应的指示灯熄灭,.,3.,如果端口自检失败,对应指示灯呈黄色,.,4.,如果有任何自检失败情况，系统指示灯呈现黄色,.,5.,如果没有自检失败,自检过程完成.,6.,随着自检过程的完成,指示灯闪亮后熄灭,.,交换机初次启动时的显示信息,控制台连接,Catalyst 1900 Management Console,Copyright(c)Cisco Systems,Inc.1993-1998,All rights reserved.,Enterprise Edition Software,Ethernet Address:00-50-BD-73-E2-C0,PCA Number:73-3121-01,PCA Serial Number:FAA0252A0QX,Model Number:WS-C1924-EN,System Serial Number:FAA0304S0U3,Power Supply S/N:PHI025101F3,-,1 user(s)now active on Management Console.,User Interface Menu,M Menus,K Command Line,I IP Configuration,Enter Selection:,控制台,登入交换机并键入特权模式密码,enable,Enter password:,#,#,disable,quit,用户模式提示,特权模式提示,上下文关联帮助,错误信息提示,指出所输入交换机命令的错误所在，以便于修改或纠正,.,可以重新调出一个较长或较复杂的命令或其它内容，用来再次运行、查看或修改,.,之前命令保存区,交换机命令行帮助机制,提供命令清单和与特定命令相关联的参数,.,Switch,#show interfaces,Switch#show version,显示交换机初始启动的状态,Switch#show running-config,显示交换机的各种运行状态,wg_sw_c#,show version,Cisco Catalyst 1900/2820 Enterprise Edition Software,Version V8.01.01 written from 171.068.229.225,Copyright(c)Cisco Systems,Inc.1993-1998,wg_sw_c uptime is 15day(s)21hour(s)53minute(s)11second(s),cisco Catalyst 1900(486sxl)processor with 2048K/1024K bytes of memory,Hardware board revision is 5,Upgrade Status:No upgrade currently in progress.,Config File Status:No configuration upload/download is in progress,27 Fixed Ethernet/IEEE 802.3 interface(s),Base Ethernet Address:00-50-BD-73-E2-C0,交换机之,show version,命令,wg_sw_c#show run,Building configuration.,Current configuration:,!,hostname wg_sw_c,!,ip address 10.1.1.33 255.255.255.0,ip default-gateway 10.3.3.3,!,interface Ethernet 0/1,interface Ethernet 0/24,!,Interface Ethernet 0/25,!,interface FastEthernet 0/26,!,interface FastEthernet 0/27,交换机之,show running-configuration,命令,wg_sw_c#show run,Building configuration.,Current configuration:,!,hostname wg_sw_c,!,ip address 10.1.1.33 255.255.255.0,ip default-gateway 10.3.3.3,!,interface Ethernet 0/1,interface Ethernet 0/12,!,Interface Ethernet 0/25,!,interface FastEthernet 0/26,!,interface FastEthernet 0/27,Catalyst 1924,Catalyst 1912,wg_sw_c#,show interfaces ethernet 0/1,Ethernet 0/1 is Enabled,Hardware is Built-in 10Base-T,Address is 0050.BD73.E2C1,MTU 1500 bytes,BW 10000 Kbits,802.1d STP State:Forwarding Forward Transitions:1,Port monitoring:Disabled,Unknown unicast flooding:Enabled,Unregistered multicast flooding:Enabled,Description:,Duplex setting:Half duplex,Back pressure:Disabled,-More-,交换机之,show,interfaces,命令,wg_sw_a#,show ip,IP Address:10.5.5.11,Subnet Mask:255.255.255.0,Default Gateway:10.5.5.3,Management VLAN:1,Domain name:,Name server 1:0.0.0.0,Name server 2:0.0.0.0,HTTP serverEnabled,HTTP port:80,RIP:Enabled,wg_sw_a#,查看交换机的,IP,地址,配置模式:,全局配置模式,wg_sw_a#conf term,wg_sw_a(config)#,端口配置模式,wg_sw_a(config)#interface e0/1,wg_sw_a(config-if)#,配置交换机,配置交换机的各种标识,为交换机设置本地标识,交换机名,(,config)#,hostname wg_sw_c,wg_sw_c(config)#,wg_sw_a(config)#,ip address ip address mask,wg_sw_a(config)#ip address 10.5.5.11 255.255.255.0,配置交换机,IP,地址,系统启动例程会初始化路由器,如果需要，路由器可以有选择性地回退启动,Check hardware,Find and load Cisco IOS,software image,Find and apply router,configuration information,Load Bootstrap,1.启动前确认正确连接线缆和控制线,2.,按下电源开关,3.,观察启动顺序,Cisco IOS,输出到控制台上的内容,Cisco,路由器的初始启动,没有配置文件与有配置文件的路由器启动对比,-,System Configuration Dialog-,Continue with configuration dialog?yes/no:,yes,At any point you may enter a question mark?for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .,Setup,模式,wg_ro_c con0 is now available,Press RETURN to get started.,用户模式,提示,wg_ro_c,路由器启动时在控制台上的输出内容,控制台,Setup:,初始配置对话框,Router#,setup,-System Configuration Dialog-,Continue with configuration dialog?yes/no:,y,At any point you may enter a question mark?for help.,Use ctrl-c to abort configuration dialog at any prompt.,Default settings are in square brackets.,Basic management setup configures only enough connectivity,for management of the system,extended setup will ask you,to configure each interface on the system,Would you like to enter basic management setup?yes/no:,n,预先浏览端口配置情况,First,would you like to see the current interface summary?,yes,:,Interface IP-Address OK?Method Status Protocol,BRI0 unassigned YES unset administratively down down,BRI0:1 unassigned YES unset administratively down down,BRI0:2 unassigned YES unset administratively down down,Ethernet0 unassigned YES unset administratively down down,Serial0 unassigned YES unset administratively down down,自检过程中所找到的端口,设置全局参数,初始化全局参数,Configuring global parameters:,Enter host name Router:,wg_ro_c,The enable secret is a password used to protect access to,privileged EXEC and configuration modes.This password,after,entered,becomes encrypted in the configuration.,Enter enable secret:,cisco,The enable password is used when you do not specify an,enable secret password,with some older software versions,and,some boot images.,Enter enable password:,sanfran,The virtual terminal password is used to protect,access to the router over a network interface.,Enter virtual terminal password:,sanjose,Configure SNMP Network Management?,no,:,设置全局参数(续),初始化协议配置,Configure LAT?yes:,n,Configure AppleTalk?no:,Configure DECnet?no:,Configure IP?yes:,Configure IGRP routing?yes:,n,Configure RIP routing?no:,Configure CLNS?no:,Configure IPX?no:,Configure Vines?no:,Configure XNS?no:,Configure Apollo?no:,设置端口参数,BRI interface needs isdn switch-type to be configured,Valid switch types are:,0 none.Only if you dont want to configure BRI.,1 basic-1tr6.1TR6 switch type for Germany,2 basic-5ess.AT&T 5ESS switch type for the US/Canada,3 basic-dms100.Northern DMS-100 switch type for US/Canada,4 basic-net3.NET3 switch type for UK and Europe,5 basic-ni.National ISDN switch type,6 basic-ts013.TS013 switch type for Australia,7 ntt.NTT switch type for Japan,8 vn3.VN3 and VN4 switch types for France,Choose ISDN BRI Switch Type 2:,Configuring interface parameters:,Do you want to configure BRI0(BRI d-channel)interface?no:,Do you want to configure Ethernet0 interface?no:,y,Configure IP on this interface?no:,y,IP address for this interface:,10.1.1.33,Subnet mask for this interface 255.0.0.0:,255.255.255.0,Class A network is 10.0.0.0,24 subnet bits;mask is/24,Do you want to configure Serial0 interface?no:,设置脚本的确认与应用,The following configuration command script was created:,hostname Router,enable secret 5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0,enable password sanfran,line vty 0 4,password sanjose,no snmp-server,!,no appletalk routing,no decnet routing,ip routing,no clns routing,no ipx routing,no vines routing,no xns routing,no apollo routing,isdn switch-type basic-5ess,interface BRI0,shutdown,no ip address,!,interface Ethernet0,no shutdown,ip address 10.1.1.31 255.255.255.0,no mop enabled,!,interface Serial0,shutdown,no ip address,end,0 Go to the IOS command prompt without saving this config.,1 Return back to the setup without saving this config.,2 Save this configuration to nvram and exit.,Enter your selection 2:,Console,wg_ro_c,wg_ro_c,enable,wg_ro_c#,wg_ro_c#,disable,wg_ro_c,wg_ro_c,logout,wg_ro_c con0 is now available,Press RETURN to get started.,用户模式提示,特权模式提示,登入路由器,只要所输命令串在全部命令中是唯一的，可以将一个命令尽可能地简写，,路由器在用户模式下的命令清单,wg_ro_c,?,Exec commands:,access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC-More-,wg_ro_c#?,Exec commands:,access-enable Create a temporary Access-List entry,access-profile Apply user-profile to interface,access-template Create a temporary Access-List entry,bfe For manual emergency modes setting,cd Change current directory,clear Reset functions,clock Manage the system clock,configure Enter configuration mode,connect Open a terminal connection,copy Copy from one file to another,debug Debugging functions(see also undebug),delete Delete a file,dir List files on a filesystem,disable Turn off privileged commands,disconnect Disconnect an existing network connection,enable Turn on privileged commands,erase Erase a filesystem,exit Exit from the EXEC,help Description of the interactive help system,-More-,路由器在特权模式下的命令清单,只要输入部分命令串(唯一表示某个命令)，紧接着按,tab,键就可以完整地输入一个命令,路由器命令行帮助机制,上下文关联帮助,错误信息提示,指出所输入交换机命令的错误所在，以便于修改或纠正,.,可以重新调出一个较长或较复杂的命令或其它内容，用来再次运行、查看或修改,.,之前命令保存区,提供命令清单和与特定命令相关联的参数,.,路由器的上下文相关联帮助,Router#,clok,Translating CLOK,%,Unknown command or computer name,or unable to find computer address,Router#,cl?,clear clock,Router#,clock,%,Incomplete command.,Router#,clock?,set Set the time and date,Router#,clock set,%,Incomplete command.,Router#,clock set?,hh:mm:ss Current Time,符号解析,命令提示,调出最近用过的内容,路由器的上下文相关联帮助(续,),Router#clok,Translating CLOK,%,Unknown command or computer name,or unable to find computer address,Router#,clear clock,Router#,%,Incomplete command.,Router#,set Set the time and date,Router#,%,Incomplete command.,Router#,hh:mm:ss Current Time,Router#,clock set 19:56:00,%,Incomplete command.,Router#,clock set 19:56:00?,Day of the month,MONTH Month of the year,Router#,clock set 19:56:00 04 8,%,Invalid input detected at the marker,Router#,clock set 19:56:00 04 August,%,Incomplete command.,Router#,clock set 19:56:00 04 August?,Year,命令提示,语法检查,命令提示,RouterShape the future of internetworking by creating unpreced,使用增强的编辑命令,“Shape the future of internetworking by creating unprecedented value for customers,employees,and partners.”,上述文字段在输入时会超出一行,Router,$,future of internetworking by creating unprecedented op,使用增强的编辑命令,(一行中长字串会自动滚卷,).,RouterShape the value of internetworking by creating unpreced,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,Router,$,value for customers,employees,and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,回移一个单词,Router,$,value for customers,employees,and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,回移一个单词.,下移一个字符.,Router,$,value for customers,employees,and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,回移一个单词,向前移动一个字符.,回移一个字符.,Router,$,value for customers,employees,and partners.,使用增强的编辑命令,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,回移一个单词,向前移动一个字符.,回移一个字符.,向前移动一个单词,Router,$,value for customers,employees,and partners.,(一行中长字串会自动滚卷,).,光标移动到命令行的开始位置,.,光标移动到命令行的结束位置,.,回移一个单词,下移一个字符.,回移一个字符.,下移一个单词,使用增强的编辑命令,删除当前字符,Router,$,value for customers,employees,and partners.,Ctrl-P or Up arrow,调出最近,(,前一,),使用过的命令,Ctrl-N or Down arrow,调出更近使用过的命令,Router show history,显示命令保存区内容,Router terminal history size,lines,设置命令保存区大小,回览之前用过的命令,show version,命令,wg_ro_a#,show version,Cisco Internetwork Operating System Software,IOS(tm)2500 Software(C2500-JS-L),Version 12.0(3),RELEASE SOFTWARE(fc1),Copyright(c)1986-1999 by cisco Systems,Inc.,Compiled Mon 08-Feb-99 18:18 by phanguye,Image text-base:0 x03050C84,data-base:0 x00001000,ROM:System Bootstrap,Version 11.0(10c),SOFTWARE,BOOTFLASH:3000 Bootstrap Software(IGS-BOOT-R),Version 11.0(10c),RELEASE SOFTWARE(fc1),wg_ro_a uptime is 20 minutes,System restarted by reload,System image file is flash:c2500-js-l_120-3.bin,(output omitted),-More-,Configuration register is 0 x2102,查看配置情况,控制台,IOS,Setup utility,show,startup-config,show,running-config,将配置参数保存到,NVRAM,中,Config,Config,RAM,NVRAM,show running,和,show startup,命令,wg_ro_c#,show startup-config,Using 1359 out of 32762 bytes,!,version 12.0,!,-More-,wg_ro_c,#,show running-config,Building configuration.Current configuration:!version 12.0,!,-More-,保存在,NVRAM,中,保存在,RAM,中,显示当前运行的和保存的配置情况,路由器模式一览,Router(config)#,Routerenable,Router#config term,Exit,Ctrl-Z(end),用户模式,特权模式,全局配置模式,配置模式,模式提示,InterfaceRouter(config-if)#,Subinterface Router(config-subif)#,Controller Router(config-controller)#,LineRouterconfig-line)#,RouterRouter(config-router)#,IPX router Router(config-ipx-router)#,保存配置,wg_ro_c#,wg_ro_c#,copy running-config startup-config,Destination filename startup-config?,Building configuration,wg_ro_c#,将当前运行的配置复制到,NVRAM,中,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#,hostname,wg_ro_c,wg_ro_c(config)#,开机时的固定显示信息,wg_ro_c(config),#,banner motd,#,Accounting Department,You have entered a secured,system.Authorized access,only!,#,配置路由器的各种标识,为路由器或其端口设置标识或信息,路由器名,Router(config)#,hostname wg_ro_c,wg_ro_c(config)#,开机时的固定显示信息,wg_ro_c(config)#,banner motd,#,Accounting Department,You have entered a secured,system.Authorized access,only!,#,端口描述,wg_ro_c(config)#,interface ethernet 0,wg_ro_c(config-if)#,description Engineering LAN,Bldg.18,Router(config)#,line console 0,Router(config-line)#,login,Router(config-line)#,password cisco,控制台密码,虚拟终端密码,Router(config)#,line vty 0 4,Router(config-line)#,login,Router(config-line)#,password sanjose,路由器密码配置,Router(config)#,line console 0,Router(config-line)#,login,Router(config-line)#,password cisco,控制台密码,虚拟终端密码,Router(config)#,line vty 0 4,Router(config-line)#,login,Router(config-line)#,password sanjose,特权模式明文密码,Router(config)#,enable password cisco,特权模式加密密码,Router(config)#,enable secret sanfran,路由器密码配置,其它控制台命令,Router(config)#,line console 0,Router(config-line)#,exec-timeout 0 0,Router(config)#,line console 0,Router(config-line)#,logging synchronous,禁止控制台会话自动退出,重显被打乱的控制台输入,Router(config)#,interface,type number,Router(config-if)#,端口配置,type,包括,serial,ethernet,token ring,fddi,hssi,loopback,dialer,null,async,atm,bri,and tunnel,number,用来识别具体的单个端口,Router(config-if)#,exit,从当前端口配置模式退出,Router(config)#,interface,type slot/port,Router(config-if)#,模块化端口的表示法,配置串口,进入全局配置模式,Router(config)#,interface serial 0,Router(config-if)#,Router#,configure term,Router(config)#,指定某个端口,配置串口,进入全局配置模式,Router(config-if)#,clock rate 64000,Router(config-if)#,Router(config)#,interface serial 0,Router(config-if)#,Router#,configure term,Router(config)#,Router(config-if)#,bandwidth 64,Router(config-if)#,exit,Router(config)#,exit,Router#,指定某个端口,设置时钟频率,(,只在,DCE,端,),调协波特率,(,