1、Written by Aiko feat. AsuqaHttp:/CISCOCERTIFIEDNETWORKASSOCIATELAB GUIDE思科認(rèn)證網(wǎng)絡(luò)工程師完全實驗手冊作者 紅頭發(fā) CCIE#15101-1-Written by Aiko feat. Asuqa-2-Http:/Written by Aiko feat. Asuqa-3-Http:/Written by Aiko feat. Asuqa-4-Http:/Written by Aiko feat. Asuqa-5-Htt

2、p:/Written by Aiko feat. AsuqaHttp:/第一章基礎(chǔ)篇實驗一 - 路由器基本設(shè)置Lab Exercise 1.1目標(biāo):熟練掌握如何進(jìn)入路由器各種模式并設(shè)置主機(jī)名.設(shè)備需求:Cisco 2501 路由器一臺.語法:1.從路由器用戶模式進(jìn)入特權(quán)模式:Aikoenable2.從特權(quán)模式進(jìn)入全局配置模式:Aiko#configure terminal3.為路由器設(shè)置主機(jī)名:Aiko(config)#hostname hostname4.退出到特權(quán)模式:Aiko(config)#end5.退出到用戶模式:Aiko#disa

3、ble6.退出控制臺線路:Aikoquit解釋:路由器的模式大致可分為:1.用戶模式:權(quán)限最低,通常只能使用少量查看性質(zhì)的命令.2.特權(quán)模式:可以使用更多查看性質(zhì)的命令和一些少量修改路由器參數(shù)的命令.3.全局配置模式:不能使用查看性質(zhì)的命令,但是確實做全局性修改和設(shè)置的模式,它還可以向下分為一些子模式,比如接口配置模式,線路配置模式,路由進(jìn)程配置模式等等.配置實例一:RouterenableRouter#configure terminalEnter configuration commands, one per line.Router(config)#hostname AikoAiko(co

4、nfig)#exitAiko#End with CNTL/Z.*Mar1 00:04:30.815: %SYS-5-CONFIG_I: Configured from console by consoleAiko#disableAiko-6-Written by Aiko feat. AsuqaHttp:/Lab Exercise 1.2目標(biāo):熟練掌握如何為路由器設(shè)置時間.設(shè)備需求:Cisco 2501 路由器一臺.語法:在特權(quán)模式下設(shè)置路由器時間:Aiko#clock set hh:mm:ss day month year解釋:路由器本地的時間標(biāo)識.配置實例一:Ai

5、ko#clock set 16:16:16 25 September 2005Aiko#show clock16:16:24.503 UTC Sun Sep 25 2005Aiko#Lab Exercise 1.3目標(biāo):熟練掌握如何設(shè)置空閑超時時間.設(shè)備需求:Cisco 2501 路由器一臺語法:1.從全局配置模式進(jìn)入線路配置模式,進(jìn)入控制臺口線路:Aiko(config)#line console number2.啟用光標(biāo)跟隨:Aiko(config-line)#logging synchronous3.設(shè)置當(dāng)鍵盤多少時間內(nèi)無動作,自動被路由器彈出到用戶模式以外,即退出.如果設(shè)置為 0 分

6、0 秒代表永不超時:Aiko(config-line)#exec-timeout minute second解釋:所謂光標(biāo)跟隨,是指當(dāng)我們在輸入命令的時候,不會被一些日志信息或 debug 命令產(chǎn)生的調(diào)試命令所沖斷.模式該特性是沒有啟用的.配置實例一:Aiko(config)#exitAiko#-7-Written by Aiko feat. AsuqaHttp:/*Mar 1 00:20:11.231: %SYS-5-CONFIG_I: Configured from console by consoleconfigureterminalEnter configur

7、ation commands, one per line.Aiko(config)#line console 0Aiko(config-line)#logging synchronousAiko(config-line)#endAiko#End with CNTL/Z.*Mar1 00:20:38.123: %SYS-5-CONFIG_I: Configured from console by consoleAiko#configure terminalAiko(config)#配置實例二:Aiko#show clock*15:32:12.747 UTC Mon Jul 28 2005Aiko

8、#configure terminalEnter configuration commands, one per line.Aiko(config)#line console 0Aiko(config-line)#exec-timeout 20 0Aiko(config)#endAiko#exitEnd with CNTL/Z.*Mar1 00:24:33.643: %SYS-5-CONFIG_I: Configured from console by consoleAiko#Aiko#show clock*15:52:12.747 UTC Mon Jul 28 2005Aiko#Aiko c

9、on0 is now availablePress RETURN to get started.AikoLab Exercise 1.4目標(biāo):熟練掌握如何為路由器設(shè)置標(biāo)語信息和描述信息.設(shè)備需求:Cisco 2501 路由器一臺.語法:1.進(jìn)入全局配置模式,設(shè)置標(biāo)語信息:Aiko(config)#banner motd # text #2.進(jìn)入接口配置模式:Aiko(config-if)#interface type number-8-Written by Aiko feat. AsuqaHttp:/3.為路由器接口設(shè)置描述信息:Aiko(config-if)#des

10、cription text解釋:在設(shè)置標(biāo)語信息的時候,以#號做為分隔符,并按下回車鍵.描述語句的本地的一個標(biāo)識,它只在本地可見,并且 Cisco IOS 執(zhí)行命令的時候會跳過它.配置實例一:Aiko(config)#banner motd #Enter TEXT message.End with the character #.hello!#Aiko(config)#endAiko#exitAiko con0 is now availablePress RETURN to get started.hello!Aiko配置實例二:Aiko(config-if)#description LAN S

11、alesAiko(config-if)#endAiko#*Mar1 02:05:48.919: %SYS-5-CONFIG_I: Configured from console by consoleAiko#show running-config interface ethernet 0Building configuration.Current configuration : 75 bytes!interface Ethernet0description LAN Salesno ip addressshutdownendAiko#Lab Exercise 1.5目標(biāo):熟練掌握如何為路由器特權(quán)

12、模式設(shè)置密碼.-9-Written by Aiko feat. AsuqaHttp:/設(shè)備需求:Cisco 2501 路由器一臺.語法:進(jìn)入全局配置模式,設(shè)置密碼:Aiko(config)#enable password|secret password解釋:兩種密碼的區(qū)別在于,前者是一些低版本 Cisco IOS 軟件的認(rèn)證方式,并且密碼是基于明文的;后者是目前Cisco IOS 軟件最常用的認(rèn)證方式,它是基于 MD5 加密的.如果同時設(shè)置了這兩種認(rèn)證方式,他們的口令必須不一樣.但是,我們推薦使用后者進(jìn)行認(rèn)證,并且如果同時設(shè)置了兩種認(rèn)證方式,只有后者生效.密碼區(qū)分大小

13、寫.配置實例一:Aiko(config)#enable password AikoAiko(config)#enable secret AikoThe enable secret you have chosen is the same as your enable password.This is not recommended.Re-enter the enable secret.Aiko(config)#enable secret AsuqaAiko(config)#exitAiko#*Mar1 02:16:48.067: %SYS-5-CONFIG_I: Configured from

14、console by consoleAiko#exitAiko con0 is now availablePress RETURN to get started.AikoenablePassword:AsuqaAiko#show running-configBuilding configuration.Current configuration : 609 bytes!version 12.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encrypti

15、on!hostname Aiko!-10-Written by Aiko feat. AsuqaHttp:/logging queue-limit 100enable secret 5 $1$NTU5$EEYi0qfB1pGENzuPxDCyz.enable password Aiko!-More-Lab Exercise 1.6目標(biāo):熟練掌握如何為路由器各個配置模式設(shè)置密碼.設(shè)備需求:Cisco 2501 路由器一臺.語法:1.從全局配置模式進(jìn)入線路配置模式,進(jìn)入控制臺口線路:Aiko(config)#line console|aux|vty start-numbe

16、r end-number2.設(shè)置密碼:Aiko(config-line)#password password3.啟用登陸:Aiko(config-line)#login解釋:當(dāng)設(shè)置密碼之后,如果不啟用登陸命令,退出之后,路由器是不會提示輸入密碼的.控制臺線路密碼為控制臺線路所用;輔助接口(AUX)線路密碼為輔助接口線路所用;虛擬終端線路(VTY)是為 telnet 會話所用,路由器根據(jù) Cisco IOS 軟件版本不同 ,支持多條 VTY 會話數(shù)目也不同 .所有密碼是以明文方式保存在DRAM(running-config)文件里的.配置實例一:Aiko(config)#line console

17、 0Aiko(config-line)#password AikoAiko(config-line)#loginAiko(config-line)#line aux 0Aiko(config-line)#password AikoAiko(config-line)#loginAiko(config-line)#exitAiko(config)#line vty 0 4Aiko(config-line)#password AikoAiko(config-line)#loginAiko(config-line)#end*Mar1 03:04:43.491: %SYS-5-CONFIG_I: Con

18、figured from console by consoleAiko#exitAiko con0 is now available-11-Written by Aiko feat. AsuqaHttp:/Press RETURN to get started.User Access VerificationPassword:AikoAikoLab Exercise 1.7目標(biāo):熟練掌握如何為路由器關(guān)閉 DNS 查詢功能.設(shè)備需求:Cisco 2501 路由器一臺.語法:全局配置模式下,關(guān)閉 DNS 查詢功能:Aiko(config)#no ip domain loo

19、kup解釋:默認(rèn)情況下,路由器的 DNS 查詢是啟用的,即當(dāng)你錯誤的輸入一條 Cisco IOS 軟件無法識別的命令的時候,路由器會把這個命令當(dāng)成主機(jī)名,然后向 DNS 服務(wù)器進(jìn)行查詢.一般實驗性的環(huán)境中,如果我們沒有 DNS 服務(wù)器,因為輸入錯誤的命令而造成無用的查詢,是非常耗時的.因此我們可以關(guān)閉這一功能.配置實例一:Aiko#AikoTranslating Aiko.domain server (55)Translating Aiko.domain server (55)Translating Aiko.domain server (2

20、55)% Unknown command or computer name, or unable to find computer addressAiko#configure terminalEnter configuration commands, one per line.Aiko(config)#no ip domain lookupAiko(config)#endAiko#End with CNTL/Z.*Mar1 03:13:12.371: %SYS-5-CONFIG_I: Configured from console by consoleAiko#Aiko

21、Translating Aiko% Unknown command or computer name, or unable to find computer addressAiko#實驗二 - 路由器連通性設(shè)置-12-Written by Aiko feat. AsuqaHttp:/Lab Exercise 2.1目標(biāo):熟練掌握如何連通路由器并進(jìn)行相互間 ping 和 telnet 的測試.設(shè)備需求:Cisco 2501 路由器兩臺.語法:1.進(jìn)入接口配置模式:Aiko(config)#interface type number2.為接口設(shè)置 IP 地址信息:Aiko

22、(config-if)#ip address ip-address mask3.根據(jù)需要,如果接口為串行接口,要為 DCE 端設(shè)置時鐘頻率:Aiko(config-if)#clock rate speed4.開啟接口:Aiko(config-if)#no shutdown解釋:默認(rèn)所有接口都是處于關(guān)閉狀態(tài)的,對于一般的以太網(wǎng)接口,設(shè)置了 IP 地址信息之后,只需要開啟該接口即可;對于串行接口,還要注意在 DCE端設(shè)置時鐘頻率,以便為 DTE端提供時鐘頻率進(jìn)行同步.當(dāng)然這一般用于實驗室背對背環(huán)境中,真正現(xiàn)實環(huán)境中,DCE 是由 CSU/DSU 來提供,無須用戶設(shè)置.另外要注意的是,端到端(end

23、-to-end)的連接,直連的接口必須處于同一子網(wǎng).配置實例一:路由器 Aiko 配置如下:Aiko#configure terminalEnter configuration commands, one per line.End with CNTL/Z.Aiko(config)#interface serial 0Aiko(config-if)#ip address 52Aiko(config-if)#no shutdown*Mar 1 00:13:45.839: %LINK-3-UPDOWN: Interface Serial0, changed

24、 state to downAiko(config-if)#endAiko#*Mar 1 00:14:24.511: %LINK-3-UPDOWN: Interface Serial0, changed state to upAiko#*Mar1 00:14:25.515: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0,changed state to upAiko#路由器 Asuqa 配置如下:-13-Written by Aiko feat. AsuqaAsuqa#configure terminalEnter config

25、uration commands, one per line.End with CNTL/Z.Http:/Asuqa(config)#interface serial 0Asuqa(config-if)#ip address 52Asuqa(config-if)#clock rate 56000Asuqa(config-if)#no shutdownAsuqa(config-if)#endAsuqa#Sep 25 16:24:25.347: %SYS-5-CONFIG_I: Configured from console b

26、y consoleAsuqa#Sep 25 16:24:25.787: %LINK-3-UPDOWN: Interface Serial0, changed state to upAsuqa#Sep 25 16:24:26.791: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0,changed state to upAsuqa#測試一:Aiko#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeou

27、t is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 36/36/40 msAiko#Asuqa#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 36/36/40 msAsuqa#測試二:Aiko#telnet

28、Trying . OpenPassword required, but none setConnection to closed by foreign hostAiko#解釋:在 telnet 到遠(yuǎn)端路由器的時候,如果對方的 VTY 線路沒有設(shè)置密碼和啟用登陸,將拒絕本地路由器 telnet.-14-Written by Aiko feat. Asuqa解決方案:是在遠(yuǎn)端路由器設(shè)置 VTY 線路的密碼和啟用登陸.路由器 Asuqa 配置如下:Asuqa#configure terminalHttp:/Enter co

29、nfiguration commands, one per line.End with CNTL/Z.Asuqa(config)#line vty 0 4Asuqa(config-line)#password AikoAsuqa(config-line)#loginAsuqa(config-line)#endAsuqa#測試三:Aiko#telnet Trying . OpenUser Access VerificationPassword:AikoAsuqaexitConnection to closed by foreign hostAi

30、ko#Lab Exercise 2.2目標(biāo):熟練掌握如何創(chuàng)建主機(jī)列表,并使用 ping 和 telnet 測試.設(shè)備需求:Cisco 2501 路由器兩臺.準(zhǔn)備工作:確保兩臺路由器已經(jīng)預(yù)先的端到端的連通.語法:全局配置模式下創(chuàng)建靜態(tài)的 IP 地址到主機(jī)名的映射:Aiko(config)#ip host hostname ip-address配置實例一:路由器 Aiko 配置如下:Aiko(config)#ip host Asuqa Aiko(config)#end-15-Written by Aiko feat. AsuqaHttp:/Aiko#測試一

31、:Aiko#AsuqaTrying Asuqa (). OpenUser Access VerificationPassword:AikoAsuqaexitConnection to Asuqa closed by foreign hostAiko#測試二:Aiko#ping AsuqaType escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/av

32、g/max = 36/40/48 msAiko#實驗三 - 路由器恢復(fù)性設(shè)置Lab Exercise 3.1目標(biāo):熟練掌握如何快速和恢復(fù)路由器到出廠設(shè)置.設(shè)備需求:Cisco 2501 路由器一臺.準(zhǔn)備工作:確保路由器之間有所配置.語法:1.進(jìn)入全局配置模式,快速恢復(fù)路由器的接口配置到出廠配置:Aiko(config)#default interface type number2.特權(quán)模式下刪除啟動配置文件,路由器下次啟動將全局恢復(fù)到出廠設(shè)置:Aiko#erase startup-config配置實例一:Aiko#show running-config interface serial 0-1

33、6-Written by Aiko feat. AsuqaBuilding configuration.Current configuration : 62 bytes!interface Serial0ip address 52endAiko#configure terminalEnter configuration commands, one per line.End with CNTL/Z.Http:/Aiko(config)#default interface serial 0Building configurati

34、on.Interface Serial0 set to default configurationAiko(config)#endAiko#show running-config interface serial 0Building configuration.Current configuration : 40 bytes!interface Serial0no ip addressendAiko#Lab Exercise 3.2目標(biāo):熟練掌握如何重啟路由器和計劃性的重啟路由器.設(shè)備需求:Cisco 2501 路由器一臺.語法:在特權(quán)模式下,重啟或計劃性的重啟路由器:Aiko#reload

35、at hh:mm day year|in minutes text解釋:可以定義路由器,立即重啟或在多少分鐘之后,或在具體的時間里重啟,還可以指定重啟原因.如果在重啟之前,路由器配置文件被修改過,系統(tǒng)會提醒你是否保存修改.配置實例一:Aiko#reload in 1 the Administrators mad-17-Written by Aiko feat. AsuqaSystem configuration has been modified. Save? yes/no: nReload scheduled in 56 secondsReload reason: the Administr

36、ators madProceed with reload? confirmAiko#Http:/*Mar1 00:50:49.787: %SYS-5-SCHEDULED_RELOAD: Reload requested for 00:51:42UTC Mon Mar 1 1993 at 00:50:42 UTC Mon Mar 1 1993 by console. Reload Reason: theAdministrators mad.Aiko#測試:Aiko#show reloadReload scheduled in 47 seconds by consoleR

37、eload reason: the Administrators madAiko#* - SHUTDOWN NOW -*-18-Written by Aiko feat. AsuqaHttp:/第二章路由篇實驗一 - 靜態(tài)路由基本配置Lab Exercise 1.1目標(biāo):熟練掌握如何配置靜態(tài)路由.設(shè)備需求:Cisco 2501 路由器兩臺.準(zhǔn)備工作:確保路由器之間接口 IP 地址信息已經(jīng)設(shè)置好,能夠端到端的 ping 通.語法:進(jìn)入全局配置模式,定義目標(biāo)網(wǎng)絡(luò)號,目標(biāo)網(wǎng)絡(luò)的子網(wǎng)掩碼和下一跳地址或接口:Aiko(config)#ip route network mask

38、next-hop-address|exit-interface distance解釋:選用下一跳地址和選擇下一跳路由器的接口做為到達(dá)目標(biāo)網(wǎng)絡(luò)的出口的區(qū)別在于管理距離.選擇前者,管理距離為 1;選擇后者,管理距離為 0 還可以在定義靜態(tài)路由的時候指定管理距離.配置實例一:路由器 Asuqa 配置如下:Asuqa#configure terminalEnter configuration commands, one per line.End with CNTL/Z.Asuqa(config)#ip route Asuqa(conf

39、ig)#endAsuqa#-19-Written by Aiko feat. Asuqa路由器 Aiko 配置如下:Aiko#configure terminalEnter configuration commands, one per line.End with CNTL/Z.Http:/Aiko(config)#ip route serial 0Aiko(config)#end測試:Asuqa#show ip route staticS/24 1/0 via Asuqa#pi

40、ng Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 32/35/36 msAsuqa#Aiko#show ip route staticS/24 is directly connected, Serial0Aiko#ping Type escape sequen

41、ce to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 36/36/36 msAiko#Lab Exercise 1.2目標(biāo):熟練掌握如何配置默認(rèn)路由.設(shè)備需求:Cisco 2501 路由器兩臺.準(zhǔn)備工作:確保路由器之間接口 IP 地址信息已經(jīng)設(shè)置好,能夠端到端的 ping 通.語法:進(jìn)入全局配置模式,定義目標(biāo)網(wǎng)絡(luò)號,目標(biāo)網(wǎng)絡(luò)的子網(wǎng)掩碼分別為 ,并定義下一跳

42、地址或接口:Aiko(config)#ip route next-hop-address|exit-interface distance解釋: 代表所有網(wǎng)絡(luò).選用下一跳地址和選擇下一跳路由器的接口做為到達(dá)目標(biāo)網(wǎng)絡(luò)的出口的區(qū)-20-Written by Aiko feat. AsuqaHttp:/別在于管理距離.選擇前者,管理距離為 1;選擇后者,管理距離為 0 還可以在定義靜態(tài)路由的時候指定管理距離.配置實例一:路由器 Aiko 配置如下:Aiko#configure terminalEnter confi

43、guration commands, one per line.Aiko(config)#ip route Aiko(config)#endAiko#測試:Aiko#show ip route staticEnd with CNTL/Z.S*/0 1/0 via Aiko#實驗二 - 距離矢量路由協(xié)議基本配置Lab Exercise 2.1目標(biāo):熟練掌握如何配置 RIP.設(shè)備需求:Cisco 2501 路由器兩臺.準(zhǔn)備工作:確保路由器之間接口 IP 地址信息已經(jīng)設(shè)置好,能夠端到端的 ping 通.語法:1.進(jìn)入全局配

44、置模式,啟用 RIP:Aiko(config)#router rip-21-Written by Aiko feat. Asuqa2.定義要宣告的直連主類網(wǎng)絡(luò)號:Aiko(config-router)#network network-number解釋:啟用了 RIP 路由協(xié)議之后,只需要宣告主類直連網(wǎng)絡(luò)號,即可完成 RIP 的配置.配置實例一:路由器 Asuqa 配置如下:Asuqa#configure terminalHttp:/Enter configuration commands, one per line.Asuqa(config)#router ripAs

45、uqa(config-router)#network Asuqa(config-router)#network Asuqa(config-router)#endAsuqa#路由器 Aiko 配置如下:Aiko#configure terminalEnter configuration commands, one per line.Aiko(config)#router ripAiko(config-router)#network Aiko(config-router)#network Aiko(config-route

46、r)#endAiko#測試:Asuqa#show ip route ripEnd with CNTL/Z.End with CNTL/Z.R/24 120/1 via , 00:00:21, Serial0Asuqa#ping Type escape sequence to abort.-22-Written by Aiko feat. AsuqaHttp:/Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success

47、 rate is 100 percent (5/5), round-trip min/avg/max = 32/35/36 msAsuqa#Aiko#show ip route ripR/24 120/1 via , 00:00:02, Serial0Aiko#ping Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to , timeout is 2 seconds:!Success rate is 100 percent (5/5), round-trip min/avg/max = 32/35/36 msAiko#Lab Exercise 2.2目標(biāo):熟練掌握如何配置 RIPv2.設(shè)備需求:Cisco 2501 路由器