四川電信CRS1培訓(xùn)教材思科NOS服務(wù)組目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹

()'

CRS-18-slotCRS-116-slot

:”*””(()):():.:

().

.

:

,,’

:

,:

;,()

A0A1A2AM0B0B1B2AM1Z1Z2Z3Z4Z5Z6Z1Z2Z3Z4Z5Z6PS0(Powershelf)PS1(Powershelf)()

:

()

:

PowerOKFaultDCInputFailCBTripOT

.

:

:

:

:,,

:,

,.

:

:

..

()

:

,()

:

–.“”“”,,

:

,,,,.

1234567

()

():

()–

():,

:,,

::

FPGAFE/GEswitchMEMCTLCPUTofabricFromfabricCPUIF

123

56789410

(.)FPGAFE/GEswitchMEMCTLCPUTofabricFromfabricCPUIF

123

56789410

():,..“”.,.,“”“”..“”,“”,.,“”.“”,“”“”.,,“”,“”,.目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹

CiscoIOSXRkernel

Routingmodules(BGP,OSPF)Protocolmodules(IP)Applicationmodules

’()

,,

,:

..

BGPRIPIS-ISOSPFRoutingPolicyPIMIGMPRIBL2DriversACLFIBQoSLPTSHostServicesPFIInterfacesDataplaneCLISNMPXMLNetflowAlarmPerf.Mgmt.SSHManagementplaneControlplaneControlPlaneBGPRIPIS-ISOSPFRoutingPolicyPIMIGMPRIBL2DriversACLFIBQoSLPTSHostServicesPFIInterfacesDataplaneCLISNMPXMLNetflowAlarmPerf.Mgmt.SSHManagementplaneControlplaneControlPlaneBGPRIPIS-ISOSPFRoutingpolicyPIMIGMPRIBL2driversACLFIBQoSLPTSHostservicesPFIInterfacesDataplaneCLISNMPXMLNetflowAlarmPerf.mgmt.SSHManagementplane

()

DataplaneControlplaneManagementplane

DataplaneControlplaneManagementplane

(Processfails)

(.)...

..!!!!!...

..—:::':'

′

′

′

111

2234CheckptprocessCheckptprocess()

,

,

():,,,,

Controlupdatesinterrupted…!!!

():,,,,

Controlupdatesinterrupted…!

()

––

,

:

OSPFISISStaticroutesRIBBGPHardwareFIB

FIBprocessAIBIfmgr

L2/L3applicationsandH/WdriversMSCHardwareConfigurationmanagerL2/L3applicationsandH/WdriversMSCHardwareConfigurationmanager

commitConfigchanges

ConfigagentsCLI/XML

Router#>Configt:

:

“:”

IOSXR

;

:

()

:<>:<>

LoginConfigurationmodesEXECmode

Managementnetworkconnections(.)

()()()()

()()

()()

()()

()()()()()()()

;;()()

()()(),()[]

()(),()[])""""

(,)RP/0/RP0/CPU0:P1(config)#showrunning-configBuildingconfiguration...!!Lastconfigurationchangeat15:57:39UTCWedJun162004bycisco!hostnameP1interfaceMgmtEth0/RP0/CPU0/0ipv4address05!interfacePOS0/4/0/0ipv4address!interfacePOS0/4/0/1ipv4addressendAdditionalmessagesarenotshownAdditionalmessagesarenotshown

()...

!

!!

RP/0/RP0/CPU0:P1(config)#showconfigmergeBuildingconfiguration...hostnameP1interfaceMgmtEth0/RP0/CPU0/0ipv4address05!interfacePOS0/4/0/0ipv4address!interfacePOS0/4/0/1ipv4addressinterfacePOS0/4/0/3ipv4address!interfacePOS0/5/0/1ipv4addressposcrc16!!endAddedAdditionalmessagesarenotshownAdditionalmessagesarenotshown目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹

AdminEXECmodeAdminconfigurationmode

ConfigurationmodeInterfaceconfigsubmodeRouterconfigsubmodeUserandTaskgroupconfigsubmodeposconfigsubmodeAddressfamilyconfigsubmode

AdminEXECmodeAdminconfigurationmodeLogicalrouterconfigurationsubmode()RP/0/0/CPU0:P4#EXECGlobalconfig:RP/0/0/CPU0:P4#configureRP/0/0/CPU0:P4(config)#SubmodeandInterfaceconfig:RP/0/0/CPU0:P4(config)#interfacepos0/2/0/0RP/0/0/CPU0:P4(config-if)#Protocolandsubmodeconfig:RP/0/0/CPU0:P4(config)#routerbgp140RP/0/0/CPU0:P4(config-bgp)#address-familyipv4RP/0/0/CPU0:P4(config-bgp-af)#RP/0/0/CPU0:P4#adminRP/0/0/CPU0:P4#(admin)#Admin

RP/0/0/CPU0:P4#EXECGlobalconfig:RP/0/0/CPU0:P4#configureRP/0/0/CPU0:P4(config)#SubmodeandInterfaceconfig:RP/0/0/CPU0:P4(config)#interfacepos0/2/0/0RP/0/0/CPU0:P4(config-if)#Protocolandsubmodeconfig:RP/0/0/CPU0:P4(config)#routerbgp140RP/0/0/CPU0:P4(config-bgp)#address-familyipv4RP/0/0/CPU0:P4(config-bgp-af)#RP/0/0/CPU0:P4#adminRP/0/0/CPU0:P4#(admin)#Admin

—

——,

——

——

——RacknumberSlot=PhysicalslotofcardModule=CPU0orSP:

DirectterminalconnectionManagementnetworkconnection

,,

RunningconfigConfigdatabaseCLI

()()()CLI()Priortoinstallinglinecard,itsconfigurationcanbeenteredConfigureresourcesnotyetpresentReducedowntimeImproveoperationaltasksCLIPriortoinstallinglinecard,itsconfigurationcanbeenteredConfigureresourcesnotyetpresentReducedowntimeImproveoperationaltasks(.)()()()()

()

()()()...

!()()...

()()()()...[]()

()...().()()...

!

()()()

()()().''()!!

!()

()()().''()!!

!()(.)

()()().''()!!

!()!

“”“”

Configlog CommitID#100 CommitID#099 CommitID#098 CommitID#001TargetconfigcommitRunningconfigConfigdatabase

()..

()

.

.

.

...

!

...

!

...

!()

...

!

...

!

...

!

(.)

...

!

...

!

PreviouschangeLastchangePreviouschangeLastchangePriorchange(.)

RP/0/0/CPU0:P4#showconfigcommitchangessincedougBuildingconfiguration...config-register0x2usernamedougpassword7110D161010grouproot-systemgroupcisco-support!usernamejeffpassword71213001114!noredundancydisablexmlagentcorbahttpserverendChange#168Change#165Change#164Change#167Change#166Change#163/doug

...

!

...

!

...

!

()()Previouschangeswouldbereversed

...

!

...

!

...

!

()Previouschangeswouldbereversed(.)

...

!

!

()

;

.

.().

''.

;

.

.().

''.(.)()

.

.().

.

()....()()...

!()

:

<><>()()()

):::::::

.

()()

):::::::

.

(.)()()

):::::::

.

()()

):::::::

.

()

()

()

(.)

''

::():::()

::

()

::

()(.)

()

():[].

[]

.().............()...

()

:

()

:,,:,,:,,::

:

()

:,,:,,:,,::

(.)()

....[]>[].,,

()

()

<>

.

.

.

.

:::::::.::::::.::::::,,

(.)

<>

,

()

,,

,,

,

,,

,,

,

:::::::.:::(:):()::.:::::()

:::::::.:::(:):()::.:::::

:::::::.:::(:):::.::::::,,

,:

目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹()OSKernel,filesystem,memorymanagement,andotherslowchangingcorecomponentsBaseInterfacemanager,systemdatabase,checkpointservices,configurationmanagement,otherslow-changingcomponentsAdministrationResourcemanagement:rack,fabric,LRForwardingFIB,ARP,QoS,ACL,soonManageabilityORB,XML,alarmsmanagementMulticastPIM,MFIB,IGMPMPLSMPLS,UCPSecurityIPSec,encryption,decryptionRouting

RIB,BGP,ISIS,OSPF,RPLLinecardLinecarddrivers

OSKernel,filesystem,memorymanagement,andotherslowchangingcorecomponentsBaseInterfacemanager,systemdatabase,checkpointservices,configurationmanagement,otherslow-changingcomponentsAdministrationResourcemanagement:rack,fabric,LRForwardingFIB,ARP,QoS,ACL,soonManageabilityORB,XML,alarmsmanagementMulticastPIM,MFIB,IGMPMPLSMPLS,UCPSecurityIPSec,encryption,decryptionRouting

RIB,BGP,ISIS,OSPF,RPLLinecardLinecarddriversMand.OS-MBIAdminBaseSCMand.MPLSMulti-castOpt'lMSCorLCOS-MBIBaseForwardingLinecard

Mand.Opt’lDRPRoutingMPLSMulti-castManage-abilitySecurityOS-MBIBaseForwardingLinecardMPLSMulti-castManage-abilitySecurityMand.Opt’lRPOS-MBIBaseAdminForwardingLinecardRouting()()

:

()

:

UpgradedISISprocess3AllotherprocessesremainthesameISISprocessnISISprocess…ISISprocess…ISISprocess3ISISprocess2ISISprocess1ISISsoftwareISISprocessnISISprocess...ISISprocess...ISISprocess2ISISprocess1UpgradedISISprocess3ISISsoftware()

OS-MBIBaseAdminForwardingLinecardRoutingOS-MBIBaseAdminForwardingLinecardRouting

OS-MBIBaseAdminForwardingLinecardRoutingOS-MBIBaseAdminForwardingLinecardRouting

:

OS-MBIBaseAdminForwardingLinecardRouting

:

–

CRS-1Flashdisk1:Flashdisk0:internal

Router#clockupdate-calendarUpdatethehardwareclockRouter#clockset17:24:2330June2004SetsoftwaresystemclockRouter#clockset17:24:23June302004or

:()():

Disk0:Disk1:DirectaddTFTP,FTP,RCP,SFTPActivateDeactivateAddCommitServer

():::..():..:[]':'::[]:[]:[]:[]:[][]:[][]:[]...:[]''.:[].:[]()()::[]:[]

:[]()::..():..:[]''::[]:[][]:[]...:[][]:[].:[]::[]:[]..:[].:[]::.:[]:[].:[]::[].'':[].:[]

():

:[]''::[].:[].:[]

()::..():..:[]''::[]''.:[]

()::..():‘’::...[]:...:[]:...:[]:.:::.'':.:

():

:..():..:[]''::[].:[]::[]:[]:[]:[]:[]:[]:[]()

():

:..():..:[]''::[].:[]::[]:[]:[]:[]:[]:[]:[]

:[]...:[].:[]:******:[]:******:[]:******:[]:******:[]:[]:[]::...:[]:[]::.[:[].:[]***,***:[]:

:[].'':[].(.)

():::..():..:[]':'::[]:[]:[]''::[].:[]::[].'':[].:[]

()::::::::''''',.':::::'':

()

()()::::

[][]...''..()():

()::::

[][]...''..()():

()::::(,,,):(,,,):::::::::::::

(:)[](.)

[]::

[]::

[()]::

[()]::

[]::

[]::

[()]::

,

<>

目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹

,,

()()

(.):

(.)

(),,

()

(),,(.)()()

()()

Administration(Admin)planeLogicalrouter(LR)plane(.)ADMINAAA

(–)AAAAAAAAA

CiscopredefinedtaskgroupsCustom-definedtaskgroupsHierarchicallystructuredgroupsRe-useoftaskgroupsTaskgroups,,,,“”:,,,

,,

()();,,:,,,

—————

()

:

,,,,,

,,,

,,:(),()

,,()Authentication,authorization,andaccounting(AAA)

CLIHTTPXMLagentsAAAclientlibraryAAAserverTACACSDRADIUSDExternalAAAserver

––

(.)

—————

———

()

Userrequestsauthenticationbyprovidingausernameandpassword1AuthenticationmethodlistdeterminedAAAsourceofdataconsulted2AAAverifiesuserpasswordAAArejectsuserifpassworddoesnotmatchdatabase3

(.)AAAdeterminestheroleoftheuser(root-systemuser,root-lrowner,orLRuser)4

AAAinformationabouttheuser(identity,start/stoptimes,commandsexecuted)5

().......().........().......()

()

Accountingdatabase

User

NamePasswordListofusergroupsUsergroup(UG)NameInheritanceofTGpermissionsTaskgroupassociationsTaskgroup(TG)

NameTaskIDassociationsRead,write,soonInheritanceofotherTGpermissions

:

:::::[]::()()::

Requiredtoinstallsoftware

“”(“”)()()

()()()()

“”

'':::::::''():::::::

“”“”“”()()()()

“”

''''

()()()()

()()

RP/0/0/CPU0:POD5#showaaauserdbUsernamekenUsergrouprouteadminUsernameciscoUsergrouproot-systemRP/0/0/CPU0:POD5#showaaauserdbkenUsername:kenUsergrouprouteadminTask:bgp:READWRITEEXECUTETask:ospf:READWRITEEXECUTEDisplayaspecificuser

()

(.)

,,

,,()

()()()()()()()()

()

(.)

()

目錄介紹介紹基本配置軟件安裝介紹安全配置路由協(xié)議配置配置介紹()–

()

()

()

()()()()()()router

bgpneighboraddress-familyaddress-familyneighbor-groupsession-groupaf-groupaddress-family

()()()()()()

()router(config-router)#neighborgroup_1peer-grouprouter(config-router)#neighborgroup_1remote-as64500router(config-router)#neighborgroup_1update-sourceloopback0router(config-router)#neighbor0peer-groupgroup_1RP/0/RP0/CPU0:router(config-bgp)#neighbor-group

group_1RP/0/RP0/CPU0:router(config-bgp-nbrgrp)#remote-as64500RP/0/RP0/CPU0:router(config-bgp-nbrgrp)#update-sourceloopback0RP/0/RP0/CPU0:router(config-bgp-nbrgrp)#exitRP/0/RP0/CPU0:router(config-bgp)#neighbor0RP/0/RP0/CPU0:router(config-bgp-nbr)#use

neighbor-group

group_1

address-family{ipv4|ipv6}{unicast|multicast}()RP/0/RP0/CPU0:router(config)#routerbgp65000RP/0/RP0/CPU0:router(config-bgp)#address-familyipv4unicastRP/0/RP0/CPU0:router(config-bgp-af)#network/8RP/0/RP0/CPU0:router(config-bgp-af)#exitRP/0/RP0/CPU0:router(config-bgp)#neighborRP/0/RP0/CPU0:router(config-bgp-nbr)#remote-as64500RP/0/RP0/CPU0:router(config-bgp-nbr)#address-familyipv4unicastRP/0/RP0/CPU0:router(config-bgp-nbr-af)#weight200()

P3.3.3.2142.50.20POS0/4/0/0POS0/3/0/1P1P2(.)interfaceLoopback0ipv4address55!interfacePOS0/3/0/1ipv4address!interfacePOS0/4/0/0ipv4address!routerbgp65000address-familyipv4unicast!neighbor-groupinternalremote-as65000passwordencrypted121A0C041104update-sourceLoopback0address-familyipv4unicast!!neighboruseneighbor-groupinternaldescriptionP1router!neighboruseneighbor-groupinternaldescriptionP2router!!

[][][][]

::

(.)

,

.