原版CCNA教材6章操作与配置CiscoIOS设备课件.ppt

1、1 2002,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5第六章第六章操作与配置操作与配置Cisco IOSCisco IOS设备设备2 2 2 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5本章目标本章目标 通过本章的学习，您应该掌握以下内容通过本章的学习，您应该掌握以下内容:开启交换机和路由器并观察其启动过程开启交换机和路由器并观察其启动过程注意交换机的出厂初始配置情况，完成路由器的初注意交换机的出厂初始配置情况，完成路由器的初始参数配置始参数配置在网络设备上

2、进入并辨识不同的命令模式在网络设备上进入并辨识不同的命令模式在不同的用户界面下应用各种帮助和命令行编辑功在不同的用户界面下应用各种帮助和命令行编辑功能能查看并确认并于各网络设备的基本信息查看并确认并于各网络设备的基本信息3 3 3 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5Cisco IOS 软件提供多种网络服务进而支持软件提供多种网络服务进而支持各种网络应用各种网络应用.Cisco 互连网操作系统互连网操作系统(IOS)软件软件4 4 4 2001,Cisco Systems,Inc.All rights reserv

3、ed.3901_11_2001_c5网络设备的配置网络设备的配置基于以下各方面来配置设备基于以下各方面来配置设备:所需功能的网络策略所需功能的网络策略 与协议关联的地址和相关参数与协议关联的地址和相关参数 管理方面的需要管理方面的需要 交换机将出厂缺省设置作为初始配置交换机将出厂缺省设置作为初始配置如果路由器中没有配置文件，会提示进入初始化设如果路由器中没有配置文件，会提示进入初始化设置过程置过程 5 5 5 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5硬件自检硬件自检定位并加载定位并加载Cisco IOS映象文件映象文件

4、定位并运行配置文件定位并运行配置文件Cisco设备的简单启动过程设备的简单启动过程6 6 6 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5 可以通过多种途径来配置可以通过多种途径来配置 配置直接在设备的内存中生配置直接在设备的内存中生效效控制端口控制端口Aux 端口端口端口端口PC or Unix服务器服务器Web 或网络管或网络管理服务器理服务器 虚拟终端虚拟终端多种途径的配置多种途径的配置TelnetTFTP7 7 7 2001,Cisco Systems,Inc.All rights reserved.3901_11

5、_2001_c5提供命令行界面提供命令行界面(CLI)在不同的网络设备上运行时有差别在不同的网络设备上运行时有差别 在命令模式下可以键入或粘贴命令在命令模式下可以键入或粘贴命令 键入命令后回车，设备即解析和执键入命令后回车，设备即解析和执行所键入的命令行所键入的命令两个主要命令模式是用户模式和特两个主要命令模式是用户模式和特权模式权模式不同的命令模式有不同的提示符不同的命令模式有不同的提示符CiscoIOSCisco IOS用户界面的基本特性用户界面的基本特性8 8 8 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5用户模式

6、用户模式 对交换机和路由器的有限操作对交换机和路由器的有限操作 命令提示符为命令提示符为 主机名主机名主要有两个命令模式提供命令键入主要有两个命令模式提供命令键入.模式一模式一:Cisco IOS的主要命令模式的主要命令模式9 9 9 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5特权特权(或或enabled)模式模式 对交换机和路由器更深入的操作对交换机和路由器更深入的操作 有配置和监视权力有配置和监视权力 是进入其它配置模式的前提是进入其它配置模式的前提 命令提示符为命令提示符为 主机名主机名#模式二模式二(也是最常用的

7、模式也是最常用的模式):Cisco IOS的主要命令模式的主要命令模式(续续)101010 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5系统启动例程会初始化交换机系统启动例程会初始化交换机初始启动利用缺省配置参数初始启动利用缺省配置参数1.启动前确认正确连接线缆和控制线启动前确认正确连接线缆和控制线2.接入电源接入电源3.观察启动顺序观察启动顺序面板上的指示灯面板上的指示灯LEDsCisco IOS输出到控制台上的内容输出到控制台上的内容交换机的初始启动交换机的初始启动111111 2001,Cisco Systems,I

8、nc.All rights reserved.3901_11_2001_c5检查交换机指示灯检查交换机指示灯(LEDs)Redundant Power Supply LED121212 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5交换机自检期间的端口指示灯交换机自检期间的端口指示灯 1.启动时，所有端口指示灯变绿启动时，所有端口指示灯变绿.2.每个端口自检完毕，对应的指示灯熄灭每个端口自检完毕，对应的指示灯熄灭.3.如果端口自检失败如果端口自检失败,对应指示灯呈黄色对应指示灯呈黄色.4.如果有任何自检失败情况，系统指示灯呈

9、现黄色如果有任何自检失败情况，系统指示灯呈现黄色.5.如果没有自检失败如果没有自检失败,自检过程完成自检过程完成.6.随着自检过程的完成随着自检过程的完成,指示灯闪亮后熄灭指示灯闪亮后熄灭.131313 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5交换机初次启动时的显示信息交换机初次启动时的显示信息控制台连接控制台连接Catalyst 1900 Management ConsoleCopyright(c)Cisco Systems,Inc.1993-1998All rights reserved.Enterprise Ed

10、ition SoftwareEthernet Address:00-50-BD-73-E2-C0PCA Number:73-3121-01PCA Serial Number:FAA0252A0QXModel Number:WS-C1924-ENSystem Serial Number:FAA0304S0U3Power Supply S/N:PHI025101F3-1 user(s)now active on Management Console.User Interface Menu M Menus K Command Line I IP ConfigurationEnter Selectio

11、n:141414 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5控制台控制台登入交换机并键入特权模式密码登入交换机并键入特权模式密码 enableEnter password:#disable quit用户模式提示用户模式提示特权模式提示特权模式提示151515 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5上下文关联帮助上下文关联帮助错误信息提示错误信息提示指出所输入交换机命令的错误所指出所输入交换机命令的错误所在，以便于修改或纠正在，以便于修改或纠正.

12、可以重新调出一个较长或较复杂可以重新调出一个较长或较复杂的命令或其它内容，用来再次运的命令或其它内容，用来再次运行、查看或修改行、查看或修改.之前命令保存区之前命令保存区交换机命令行帮助机制交换机命令行帮助机制提供命令清单和与特定命令提供命令清单和与特定命令相关联的参数相关联的参数.161616 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5Switch#show interfacesSwitch#show version显示交换机初始启动的状态显示交换机初始启动的状态Switch#show running-config显示

13、交换机的各种运行状态显示交换机的各种运行状态171717 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5wg_sw_c#show versionCisco Catalyst 1900/2820 Enterprise Edition SoftwareVersion V8.01.01 written from 171.068.229.225Copyright(c)Cisco Systems,Inc.1993-1998wg_sw_c uptime is 15day(s)21hour(s)53minute(s)11second(s)

14、cisco Catalyst 1900(486sxl)processor with 2048K/1024K bytes of memoryHardware board revision is 5Upgrade Status:No upgrade currently in progress.Config File Status:No configuration upload/download is in progress 27 Fixed Ethernet/IEEE 802.3 interface(s)Base Ethernet Address:00-50-BD-73-E2-C0交换机之交换机之

15、show version 命令命令181818 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5wg_sw_c#show runBuilding configuration.Current configuration:!hostname wg_sw_c!ip address 10.1.1.33 255.255.255.0ip default-gateway 10.3.3.3!interface Ethernet 0/1interface Ethernet 0/24!Interface Ethernet 0/25!interfa

16、ce FastEthernet 0/26!interface FastEthernet 0/27交换机之交换机之show running-configuration 命令命令wg_sw_c#show runBuilding configuration.Current configuration:!hostname wg_sw_c!ip address 10.1.1.33 255.255.255.0ip default-gateway 10.3.3.3!interface Ethernet 0/1interface Ethernet 0/12!Interface Ethernet 0/25!in

17、terface FastEthernet 0/26!interface FastEthernet 0/27Catalyst 1924Catalyst 1912191919 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5wg_sw_c#show interfaces ethernet 0/1Ethernet 0/1 is Enabled Hardware is Built-in 10Base-TAddress is 0050.BD73.E2C1MTU 1500 bytes,BW 10000 Kbits802.1d STP St

18、ate:Forwarding Forward Transitions:1Port monitoring:DisabledUnknown unicast flooding:Enabled Unregistered multicast flooding:Enabled Description:Duplex setting:Half duplex Back pressure:Disabled-More-交换机之交换机之show interfaces命令命令202020 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5wg_sw_a#

19、show ip interface vlan 1IP Address:10.5.5.11Subnet Mask:255.255.255.0Default Gateway:10.5.5.3Management VLAN:1Domain name:Name server 1:0.0.0.0Name server 2:0.0.0.0HTTP server:EnabledHTTP port:80RIP:Enabledwg_sw_a#查看交换机的查看交换机的IPIP地址地址212121 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5

20、配置模式配置模式:全局配置模式全局配置模式 wg_sw_a#conf termwg_sw_a(config)#端口配置模式端口配置模式1900(config)#interface ethernet 0/11900(config-if)#2950(config)#interface fastEthernet 0/12950(config-if)#配置交换机配置交换机222222 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5配置交换机的各种标识配置交换机的各种标识为交换机设置本地标识为交换机设置本地标识交换机名交换机名(con

21、fig)#hostname wg_sw_cwg_sw_c(config)#232323 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c51900(config)#ip address ip address mask1900(config)#ip address 10.5.5.11 255.255.255.0配置交换机配置交换机IPIP地址地址2950(config)#interface vlan 12950(config-if)#ip add2950(config-if)#ip address 192.168.2.10 255

22、.255.255.0242424 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5配置交换机默认网关配置交换机默认网关 2950(config-if)#exit 2950(config)#ip default-gateway 192.168.2.1252525 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5系统启动例程会初始化路由器系统启动例程会初始化路由器如果需要，路由器可以有选择性地回退启动如果需要，路由器可以有选择性地回退启动Check hardwar

23、eFind and load Cisco IOSsoftware image Find and apply routerconfiguration information Load Bootstrap1.启动前确认正确连接线缆和控制线启动前确认正确连接线缆和控制线2.按下电源开关按下电源开关3.观察启动顺序观察启动顺序 Cisco IOS输出到控制台上的内容输出到控制台上的内容Cisco路由器的初始启动路由器的初始启动262626 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5没有配置文件与有配置文件的路由器启动对比没有配置

24、文件与有配置文件的路由器启动对比-System Configuration Dialog-%Please answer yes or noContinue with configuration dialog?yes/no:yes At any point you may enter a question mark?for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets .Setup模式模式wg_ro_c con0 is now availabl

25、ePress RETURN to get started.用户模式用户模式提示提示wg_ro_c路由器启动时在控制台上的输出内容路由器启动时在控制台上的输出内容控制台控制台272727 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5Setup:初始配置对话框初始配置对话框 Router#setup -System Configuration Dialog-Continue with configuration dialog?yes/no:yAt any point you may enter a question mark?

26、for help.Use ctrl-c to abort configuration dialog at any prompt.Default settings are in square brackets.Basic management setup configures only enough connectivityfor management of the system,extended setup will ask youto configure each interface on the systemWould you like to enter basic management

27、setup?yes/no:n282828 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5预先浏览端口配置情况预先浏览端口配置情况First,would you like to see the current interface summary?yes:Interface IP-Address OK?Method Status ProtocolBRI0 unassigned YES unset administratively down downBRI0:1 unassigned YES unset administrativ

28、ely down downBRI0:2 unassigned YES unset administratively down downEthernet0 unassigned YES unset administratively down downSerial0 unassigned YES unset administratively down down自检过程中所找到的端口自检过程中所找到的端口292929 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5设置全局参数设置全局参数初始化全局参数初始化全局参数Configur

29、ing global parameters:Enter host name Router:wg_ro_c The enable secret is a password used to protect access to privileged EXEC and configuration modes.This password,after entered,becomes encrypted in the configuration.Enter enable secret:cisco The enable password is used when you do not specify an e

30、nable secret password,with some older software versions,and some boot images.Enter enable password:sanfran The virtual terminal password is used to protect access to the router over a network interface.Enter virtual terminal password:sanjose Configure SNMP Network Management?no:303030 2001,Cisco Sys

31、tems,Inc.All rights reserved.3901_11_2001_c5设置全局参数设置全局参数(续续)初始化协议配置初始化协议配置 Configure LAT?yes:n Configure AppleTalk?no:Configure DECnet?no:Configure IP?yes:Configure IGRP routing?yes:n Configure RIP routing?no:Configure CLNS?no:Configure IPX?no:Configure Vines?no:Configure XNS?no:Configure Apollo?no:

32、313131 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5设置端口参数设置端口参数BRI interface needs isdn switch-type to be configured Valid switch types are:0 none.Only if you dont want to configure BRI.1 basic-1tr6.1TR6 switch type for Germany 2 basic-5ess.AT&T 5ESS switch type for the US/Canada 3 bas

33、ic-dms100.Northern DMS-100 switch type for US/Canada 4 basic-net3.NET3 switch type for UK and Europe 5 basic-ni.National ISDN switch type 6 basic-ts013.TS013 switch type for Australia 7 ntt.NTT switch type for Japan 8 vn3.VN3 and VN4 switch types for France Choose ISDN BRI Switch Type 2:Configuring

34、interface parameters:Do you want to configure BRI0(BRI d-channel)interface?no:Do you want to configure Ethernet0 interface?no:y Configure IP on this interface?no:y IP address for this interface:10.1.1.33 Subnet mask for this interface 255.0.0.0:255.255.255.0 Class A network is 10.0.0.0,24 subnet bit

35、s;mask is/24Do you want to configure Serial0 interface?no:323232 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5设置脚本的确认与应用设置脚本的确认与应用The following configuration command script was created:hostname Routerenable secret 5$1$/CCk$4r7zDwDNeqkxFO.kJxC3G0enable password sanfranline vty 0 4passwor

36、d sanjoseno snmp-server!no appletalk routingno decnet routingip routingno clns routingno ipx routingno vines routingno xns routingno apollo routingisdn switch-type basic-5essinterface BRI0shutdownno ip address!interface Ethernet0no shutdownip address 10.1.1.31 255.255.255.0no mop enabled!interface S

37、erial0shutdownno ip addressend0 Go to the IOS command prompt without saving this config.1 Return back to the setup without saving this config.2 Save this configuration to nvram and exit.Enter your selection 2:333333 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5Consolewg_ro_cwg_ro_cenabl

38、ewg_ro_c#wg_ro_c#disablewg_ro_cwg_ro_clogoutwg_ro_c con0 is now availablePress RETURN to get started.用户模式提示用户模式提示特权模式提示特权模式提示登入路由器登入路由器343434 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5 只要所输命令串在全部命令中是唯一的，可以将一个命令只要所输命令串在全部命令中是唯一的，可以将一个命令尽可能地简写，尽可能地简写，路由器在用户模式下的命令清单路由器在用户模式下的命令清单wg_ro_c

39、?Exec commands:access-enable Create a temporary Access-List entry atmsig Execute Atm Signalling Commands cd Change current device clear Reset functions connect Open a terminal connection dir List files on given device disable Turn off privileged commands disconnect Disconnect an existing network con

40、nection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lat Open a lat connection lock Lock the terminal login Log in as a particular user logout Exit from the EXEC-More-353535 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5wg_ro_

41、c#?Exec commands:access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry bfe For manual emergency modes setting cd Change current directory clear Reset functions clock Manage the system clock configure Ent

42、er configuration mode connect Open a terminal connection copy Copy from one file to another debug Debugging functions(see also undebug)delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileg

43、ed commands erase Erase a filesystem exit Exit from the EXEC help Description of the interactive help system-More-路由器在特权模式下的命令清单路由器在特权模式下的命令清单只要输入部分命令串只要输入部分命令串(唯一表示某个命令唯一表示某个命令)，紧接着按，紧接着按tab键就可以完整地输入一个命令键就可以完整地输入一个命令363636 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5路由器命令行帮助机制路由器命令行帮助

44、机制上下文关联帮助上下文关联帮助错误信息提示错误信息提示指出所输入交换机命令的错误所指出所输入交换机命令的错误所在，以便于修改或纠正在，以便于修改或纠正.可以重新调出一个较长或较复杂可以重新调出一个较长或较复杂的命令或其它内容，用来再次运的命令或其它内容，用来再次运行、查看或修改行、查看或修改.之前命令保存区之前命令保存区提供命令清单和与特定命令提供命令清单和与特定命令相关联的参数相关联的参数.373737 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5路由器的上下文相关联帮助路由器的上下文相关联帮助Router#clokT

45、ranslating CLOK%Unknown command or computer name,or unable to find computer addressRouter#cl?clear clockRouter#clock%Incomplete command.Router#clock?set Set the time and dateRouter#clock set%Incomplete command.Router#clock set?hh:mm:ss Current Time 符号解析符号解析命令提示命令提示调出最近用过的内容调出最近用过的内容383838 2001,Cisco

46、 Systems,Inc.All rights reserved.3901_11_2001_c5路由器的上下文相关联帮助路由器的上下文相关联帮助(续续)Router#clokTranslating CLOK%Unknown command or computer name,or unable to find computer addressRouter#clear clockRouter#%Incomplete command.Router#set Set the time and dateRouter#%Incomplete command.Router#hh:mm:ss Current T

47、imeRouter#clock set 19:56:00%Incomplete command.Router#clock set 19:56:00?Day of the monthMONTH Month of the yearRouter#clock set 19:56:00 04 8%Invalid input detected at the markerRouter#clock set 19:56:00 04 August%Incomplete command.Router#clock set 19:56:00 04 August?Year 命令提示命令提示 语法检查语法检查 命令提示命令

48、提示393939 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5RouterShape the future of internetworking by creating unpreced使用增强的编辑命令使用增强的编辑命令“Shape the future of internetworking by creating unprecedented value for customers,employees,and partners.”上述文字段在输入时会超出一行上述文字段在输入时会超出一行404040 2001,Cisco

49、Systems,Inc.All rights reserved.3901_11_2001_c5Router$future of internetworking by creating unprecedented op使用增强的编辑命令使用增强的编辑命令(一行中长字串会自动滚卷一行中长字串会自动滚卷).414141 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5RouterShape the value of internetworking by creating unpreced使用增强的编辑命令使用增强的编辑命令(一行中长

50、字串会自动滚卷一行中长字串会自动滚卷).光标移动到命令行的开始位置光标移动到命令行的开始位置.424242 2001,Cisco Systems,Inc.All rights reserved.3901_11_2001_c5Router$value for customers,employees,and partners.使用增强的编辑命令使用增强的编辑命令(一行中长字串会自动滚卷一行中长字串会自动滚卷).光标移动到命令行的开始位置光标移动到命令行的开始位置.光标移动到命令行的结束位置光标移动到命令行的结束位置.434343 2001,Cisco Systems,Inc.All rights