1、路由器配置手冊CISCO路由器簡介統(tǒng)一采用IOS操作系統(tǒng)，操作具有一致性。CISCO IOS操作環(huán)境。ROM monitor BootROM router(boot) Cisco IOS router Failure of password recoveryFlash image upgradeNormal operationCommand Mode命令模式。User EXECPrivileged EXECConfiguration mode SetupRouteruser accessRouter#System adminstrationRouter(config)# Modify conf

2、igurationPrompted dialog Create the initial configuration二配置前的準(zhǔn)備工作用終端或仿真終端接入 CONSOL.E 。終端或仿真終端配置信息如下：9600 baud 8 data bits no parity 2 stop bits (9600,8/N/2)用TELNE偷令在網(wǎng)上進(jìn)行設(shè)置。系統(tǒng)管理員可在網(wǎng)上用telnet address命令進(jìn)行遠(yuǎn)程配置。三配置方法Auto installsetupconfig 命令行設(shè)置-四配置IP地址采用(3.1 /3.2)方法進(jìn)行配置。config命令行方式進(jìn)行設(shè)置首先啟動ROUTER進(jìn)入router

3、 模式。 鍵入Enable 進(jìn)入router # 模式 然后鍵入 config 進(jìn)入router(config)#模式選擇要配置的路由器端口Router(config) # interface 端口號 進(jìn)入端口設(shè)置狀態(tài)Router(config-if)此時用命令I(lǐng)P address 設(shè)定路由器端口 IP地址五 配置 ip 路由協(xié)議(RIP ,OSPF ,BGP ,STATICS)在 globle 模式下配置 例圖見附圖。靜態(tài)路由IP route目的網(wǎng)絡(luò)地址子網(wǎng)掩碼 端口號例：在RA1上配RA2的路由IP route 52 E0RIP2 設(shè)置;enable rip;選擇版本2;相關(guān)子網(wǎng)地址以路器

4、A1為例進(jìn)行如下設(shè)置router ripversion 2network network network OSP股置enable ospf 進(jìn)程號為；;相關(guān)子網(wǎng)地址及區(qū)以路由器D為例進(jìn)行如下配置router ospf 200200redistribute bgp 200 subnetsnetwork area 1域號network 6 area 1BGF置以路由器A2和D為例;enable bgp設(shè)置 自治域號;相關(guān)子網(wǎng)地址及子 網(wǎng)掩碼;這些地址由bgp發(fā)到居路由器;設(shè)置遠(yuǎn)程相連自治域邊 界路由器端口A2:router bgp 100network mask 52network mask 鄰r

5、edistribute ripneighbor remote-as 200D2:router bgp 200network mask 52network mask network 6 mask 52network mask 52 neighbor remote-as 100六radius 認(rèn)證的設(shè)置radius的簡述RADIUS勺全稱為(Remote Access Dail-In User Service),它是對遠(yuǎn)程撥號用戶訪問進(jìn)行認(rèn)證的一種協(xié)議。主要進(jìn)行 Authentication Authorization Accounting (AAA) 三方面的工作。radius的配置;enabl

6、e radius;指明 radius server 在網(wǎng) 上的地址;建立一個網(wǎng)上傳輸密;進(jìn)行 login 認(rèn)具體配置如下：aaa new-moderadius-server host radius-server key aaa authentication login default radius local 證，若 radiusserver未找到從本地數(shù)據(jù)庫內(nèi)查找aaa authentication ppp default radius local aaa authorization network radius local aaa accounting network start-stop

7、 radius七路由器軟件升級方法改變操作環(huán)境在 global config mode 設(shè)置：config -reg 0 x2101reload 進(jìn)入 Boot Rom 模式：router(boot)運行 tftp server在網(wǎng)上運行tftp server ,使升級文件可以傳輸。升級版本命令如下：copy tftp flash;將tftp server 上的文件傳入路由器的 flashmemo舛copy flash tftp ; j 將 flash 中的文件備份到 tftp server 中八 配置路由器的一些注意事項撥號用戶的配置。cisco 2509/2511 的異步串行通訊口在配置

8、modem寸,modenW設(shè)置成自動 應(yīng)答方式。具體方法如下：用超級終端進(jìn)入 modem AT命令方式，鍵入ats0=1 設(shè)置自動應(yīng)答方式， 然后鍵入at&w將設(shè)置寫入寄存器。RIP & BGP 的設(shè)置當(dāng)一個運行RIP路由協(xié)議的子網(wǎng)，做為一個自治域，用BGPft、議接入另一自治域時。此子網(wǎng)內(nèi)所有路由器需添加參數(shù)：ip classless 。同時 與邊界路由器直接相連的路由器上需添加一個缺省網(wǎng)關(guān)。設(shè)置如下：ip 邊界路由器地址。v.35 電纜直連的設(shè)置在相關(guān)的端口上設(shè)置時鐘速率：clock rate .loopback 端口的設(shè)置loopback端口是一個虛擬端口，端口狀態(tài)始終處于UR通過它可以

9、使由BGP 相連的AS之間始終保持連系，不會由于邊界路由器端口狀態(tài)的改變而發(fā)生 變化。其具體配置如下：interface loopback 九常用的路由器命令（見附錄）十問與答如何檢測網(wǎng)絡(luò)是否通暢？A:在網(wǎng)絡(luò)主機上采用命令 ping 來逐端檢測網(wǎng)端。如何查看路由器配置信息？A:在 EXECC!式下用 show config 命令。如何查看路由器路由信息？A:在 EXEd式下用 show ip route 命令。5如何查看路由器端口信息？A:在EXEX1式下用show int 命令。為什么端口協(xié)議已經(jīng)配置，狀態(tài)仍然是down?A:在CONFIGg式下，選擇該端口，執(zhí)行 no shutdwon命令

10、。config模式有幾種狀態(tài)，對應(yīng)那些操作？A： config模式有以下幾種狀態(tài)：globle config全局酉己置操作exec模式鍵入 config tinterface config端口酉已置操作config 模式鍵入 int line config線路配置操作config 模式鍵入line router config路由配置操作config 模式鍵入router卜一網(wǎng)絡(luò)實驗簡介本實驗?zāi)M廣東視聆通網(wǎng)絡(luò)情況。將網(wǎng)絡(luò)劃分為AS 100和AS 200 .AS 100內(nèi)動態(tài)路由協(xié)議采用RIP, AS 200內(nèi)采用OSPF兩個自治域間采用 BGPB議互連。 該實驗主要測試目的在于，測試一個采用R

11、IP協(xié)議的網(wǎng)絡(luò)能否劃分自治域，并與 其它自治域相連。測試環(huán)境網(wǎng)絡(luò)圖見附圖：各點配置如下：路由器A2酉已置:hostname a2 !enable secret 5 $1$kJyk$CfMLfg87wovmbVp5lHUfk/ enable password cisco !interface Loopback06ip address 52!interface Ethernet0ip address ip rip send version 2ip rip receive version 2!interface Ethernet1ip address 52ip rip send version 2i

12、p rip receive version 2!interface Serial0no ip address shutdown!interface Serial1no ip address shutdown!router ripversion 2redistribute bgp 100network !router bgp 100network mask 52network mask redistribute ripneighbor remote-as 200!ip classless!line con 0line aux 0line vty 0 4password ciscologin!en

13、d路由器D的配置：d#sh confUsing 1069 out of 32762 bytes !version 11.0service udp-small-serversservice tcp-small-servers !hostname d !enable secret 5 $1$EBoX$3AWqea9PpP9xTgr49gqLy. enable password cisco !interface Loopback0description Loopback Interface of Router ip address 52 no ip mroute-cache !interface E

14、thernet0description Core Region Router in Guangzhou ip address 52 no ip mroute-cache !interface Serial0ip address 7 52 no ip mroute-cache ip ospf network broadcast clockrate 9600 !interface Serial1no ip address no ip mroute-cache ip ospf network broadcast shutdown!router ospf 200redistribute bgp 200

15、 subnets network area 1 network 6 area 1router bgp 200network mask 52network mask network 6 mask 52network mask 52neighbor remote-as 100 !ip classlessip ospf name-lookup !line con 0line aux 0transport input allline vty 0 4password ciscologin !end路由器B的配置：b#sh ip routeCodes: C - connected, S - static,

16、 I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidatedefaultU - per-user static routeGateway of last resort is to network /8

17、 is variably subnetted, 7 subnets, 2 masksR /30 120/2 via , 00:00:25, Serial0C /20 is directly connected, Ethernet0R/20 120/1 via , 00:00:25, Serial0R/20 120/2 via , 00:00:25, Serial0R /30 120/1 via , 00:00:25, Serial0C /30 is directly connected, Serial0R /30 120/2 via , 00:00:25, Serial0R* /0 120/1

18、 via , 00:00:00, Serial0b#sh confUsing 572 out of 32762 bytes !version 11.1service udp-small-servers service tcp-small-servers !hostname binterface Ethernet。ip address ip rip send version 2ip rip receive version 2!interface SerialOip address 52ip rip send version 2ip rip receive version 2 clockrate

19、9600!interface Serial1ip address 3 52ip rip send version 2ip rip receive version 2 clockrate 9600!router ripversion 2network !ip classless!line con 0line 1 8line aux 0line vty 0 4password ciscologinend10/* */路由器A1的配置：a1#sh ip routeCodes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B -

20、BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate defaultU - per-user static route, o - ODRGa

21、teway of last resort is to network /8 is variably subnetted, 7 subnets, 2 masksR /30 120/1 via , 00:00:23, Ethernet0R /20 120/1 via , 00:00:27, Serial0C /20 is directly connected, Ethernet0R /20 120/1 via 0, 00:00:24, Serial1C /30 is directly connected, Serial1C /30 is directly connected, Serial0R /

22、30 120/1 via , 00:00:23, Ethernet0S* /0 1/0 via a1#sh confUsing 600 out of 32762 bytes !version 11.2 !hostname a1 !enable secret 5 $1$PKCA$FzjiYXenZNipsGuOcpwAg0 enable password cisco !interface Ethernet0ip address ip rip send version 2ip rip receive version 2interface Serial011ip address 52ip rip s

23、end version 2ip rip receive version 2interface Seriallip address 52ip rip send version 2ip rip receive version 2 clockrate 9600!router rip version 2 network !ip classlessip route !line con 0line aux 0line vty 0 4 password cisco login !enda1#/*/路由器B1的配置：b1#sh ip routeCodes: C - connected, S - static,

24、 I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate defaultU - per-user static routeGateway of last resort is not set/8 is variably subnetted, 4 subnets, 3 masksO E2 /8 110/1 via 7, 00:34:51, Serial012C /20 is directly connected, Ethernet0C 6/30 is directly connected, Serial0O /30 110/74 via 7, 00:53:25, Serial0 b1