基本涵養(yǎng)網(wǎng)工所有實(shí)驗(yàn)---路由交換相關(guān)配置

1、網(wǎng)工路由交換相關(guān)配置思科2950交換機(jī)相關(guān)配置基本操作2950(config)#int vlan12950(config-if)#ip address 192.168.1.100 255.255.255.0 （VLAN1里面設(shè)置IP地址）2950(config)#ip default-gateway 192.168.1.1 (設(shè)置默認(rèn)網(wǎng)關(guān))2950(config)#ip name-server 192.168.1.1 （設(shè)置域名服務(wù)器）2950(config)#ip domain-name （設(shè)置域名）端口配置2950(config)#int f0/1 (進(jìn)入接口)2950(config-if

2、)#speed 100 （設(shè)置該接口速率為100Mb/s）2950(config-if)#duplex ? auto Enable AUTO duplex configurationfull Force full duplex operationhalf Force half-duplex operation2950(config-if)#description to_router12950(config-if)#description to_router1 （設(shè)置端口描述）2950#show interfaces fastethernet1 status （查看端口配置結(jié)果和狀態(tài)）MAC地址

3、表相關(guān)命令2950(config)#mac-address-table aging-time 100 (設(shè)置超時(shí)時(shí)間為100S)2950(config)#mac-address-table permanent 000.0c01.bbcc f0/3 (加入永久地址)2950(config)#mac-address-table restricted static 0000.0c02.bbcc f0/6 f0/7 (加入靜態(tài)地址)2950#show mac-address-table （查看整個(gè)MAC地址表）2950#clear mac-address-table restricted static

4、 （清除限制性MAC址表） VTP的配置也可以在配置模式下做：VTP mode serverVtp domain china2950#vlan database （進(jìn)入VLAN配置模式）2950(vlan)#vtp ? （查看VTP的子命令）domain Set the name of the VTP administrative domain.client Set the device to client mode.server Set the device to server mode.transparent Set the device to transparent mode.passw

5、ord Set the password for the VTP administrative domain.2950(vlan)#vtp domain server （設(shè)置本交換機(jī)為SEVER模式）2950(vlan)#vtp domain wqs （設(shè)置域名）2950(vlan)#vtp pruning (啟動(dòng)修剪模式)2950#show vtp status （查看VTP設(shè)置信息）配置VLAN TRUNK端口2950(config)#int f0/11 （進(jìn)入F端口）2950(config-if)#switchport mode trunk （設(shè)置該端口為T(mén)RUNK模式）2950(con

6、fig-if)#switchport trunk encapsulation dot1q | isl | negotiate （設(shè)置TRUNK封裝）創(chuàng)建VLAN2950#vlan database （進(jìn)入VLAN配置模式）2950(vlan)#vlan 2 （創(chuàng)建VLAN 2）VLAN 2 added: Name:VLAN0002 （系統(tǒng)默認(rèn)名）2950(vlan)#vlan 3 name wg_bisheng （創(chuàng)建VLAN 3，名為網(wǎng)工必勝）VLAN 3 added: Name:wg_bisheng2950(config)#int f0/9 （進(jìn)入接口配置模式）2950(config-if

7、)#switchport mode access （設(shè)置該接口為ACCESS模式）2950(config-if)#switchport access vlan 2 （把端口9分配給VLAN2）2950(config-if)#int f0/82950(config-if)#switchport mode access2950(config-if)#switchport access vlan 32950(config-if)#設(shè)置VLAN的管理地址Int vlan 1Ip address .生成樹(shù)協(xié)議的配置生成樹(shù)負(fù)載均衡實(shí)現(xiàn)方法（感謝黑客天使提醒）1 使用STP端口權(quán)值實(shí)現(xiàn)。2 使用STP路徑值

8、實(shí)現(xiàn)2950(config)#int f0/112950(config-if)#spanning-tree vlan 2 port-priority 10 (將VLAN2的端口權(quán)值設(shè)為10)2950(config-if)#spanning-tree vlan 2 cost 30 （設(shè)置VLAN2生成樹(shù)路徑值為30）路由器的一些設(shè)置靜態(tài)路由：Router(config)#ip route destination-network network-mask next-hop-ip | interface distanceRouter(config)#ip route 192.168.1.0 255.

9、255.255.0 10.1.1.1其中：192。168。1。0代表目標(biāo)網(wǎng)絡(luò)。 2552552550代表目標(biāo)網(wǎng)絡(luò)的子網(wǎng)掩碼； 10111代表下一跳地址。 next-hop-ip:到達(dá)目的網(wǎng)絡(luò)所經(jīng)由的下一跳路由器接口的IP地址。 Interface：到達(dá)目標(biāo)網(wǎng)絡(luò)的本機(jī)接口（僅限P2P線路） Distance：為該路由人工指定管理距離默認(rèn)路由：Router(config)#ip route 0.0.0.0 0.0.0.0 next-hop-ip | interface distanceRouter(config)#ip route 0.0.0.0 0.0.0.0 172.16.3.1其中：0。0。

10、0。0 0。0。0。0代表任意地址和任意掩碼，即所有網(wǎng)絡(luò)，其它參數(shù)同靜態(tài)路由。選擇性通告路由：如在RIP設(shè)置中，讓S0端口只收不發(fā)RIP通告。Router(config)#router ripRouter(config-router)#passive-interface serial 0常見(jiàn)路由協(xié)議的管理距離：TABLE 5 . 2 Default Administrative DistancesRoute Source Default ADConnected interface 0Static route 1EIGRP 90IGRP 100OSPF 110RIP 120External EI

11、GRP 170Unknown 255 (this route will never be used)ISDN（DDR，PRI，BRI，PPP）相關(guān)命令r1(config)#isdn switch-type ? (設(shè)置ISDN交換類型)basic-1tr6 1TR6 switch type for Germanybasic-5ess AT&T 5ESS switch type for the U.S.basic-dms100 Northern DMS-100 switch typebasic-net3 NET3 switch type for UK and Europebasic-ni Nati

12、onal ISDN switch typebasic-ts013 TS013 switch type for Australiantt NTT switch type for Japanvn3 VN3 and VN4 switch types for Franceprimary-5essbasic-ni1 Basic-Ni1r1(config)#username name password secret (指定口令)r1(config)#interface bri0 （接口BRI設(shè)置）r1(config-if)#encapsulation ppp （設(shè)置PPP封裝）r1(config-if)#

13、ppp authentication chap|chap pap |pap chap|papcallin（設(shè)置認(rèn)證方式）r1(config-if)# dialer map ip 200.10.1.1 name router1 broadcast 7782001 （設(shè)置協(xié)議地址與電話號(hào)碼的映射）r1(config-if)#ppp multilink （啟動(dòng)PPP多連接）r1(config-if)#dialer load-threshold load（設(shè)置啟動(dòng)另一個(gè)B通道的閾值）r1(config-if)#clock rate speed (設(shè)置DCE端的線速度)r1#sh isdn ? (查看I

14、SDN相關(guān)信息)active ISDN active callshistory ISDN call historymemory ISDN memory informationstatus ISDN Line Statustimers ISDN Timer values一般需要配置的信息有ISDN交換機(jī)類型，IP地址，封裝類型，撥號(hào)串，撥號(hào)組，撥號(hào)列表。r2(config)#isdn switch-type basic-net3 (設(shè)置ISDN交換類型)r2(config)#int bri0 （進(jìn)入BRI接口配置模式）r2(config-if)#ip address 192.168.1.2 25

15、5.255.255.0（設(shè)置接口IP地址）r2(config-if)#encapsulation ppp （封裝協(xié)議為PPP）r2(config-if)#dialer string 88888888 （設(shè)置撥號(hào)串，R1的ISDN號(hào)碼）r2(config-if)#dialer-group 1 （設(shè)置撥號(hào)組號(hào)碼為1，把BRI0接口與撥號(hào)列表1相關(guān)聯(lián)）r2(config-if)#no sh （激活接口）%LINK-3-UPDOWN: Interface Bri0, changed state to upr2(config-if)#exitr2(config)#dialer-list 1 protoc

16、ol ip permit （設(shè)置撥號(hào)列表1）r1(config-if)#dialer idle-timeout 30r1(config-if)#dilaer load-threshold 128r1(config-if)#ppp authentication chapr1(config)#dialer-list 1 protocol ip permit詳細(xì)實(shí)例見(jiàn)以下三個(gè)實(shí)驗(yàn)，建議大家用模擬器實(shí)踐以強(qiáng)化記憶。LAB 17 ISDN BRI-BRI using Legacy DDRRouter IP Address Mask SPID1 Local Tel# ISDN Switchrouter1

17、200.10.1.1 /24 32177820010100 7782001 basic-nirouter2 200.10.1.2 /24 32177820020100 7782002 basic-nirouter1(config)# isdn switch-type basic-nirouter1(config)# dialer-list 1 protocol ip permitrouter1(config)# username router2 password ciscorouter1(config)# interface bri0router1(config-if)# encap pppr

18、outer1(config-if)# ip address 200.10.1.1 255.255.255.0router1(config-if)# isdn spid1 32177820010100router1(config-if)# dialer-group 1router1(config-if)# dialer map ip 200.10.1.2 name router2 broadcast 7782002router1(config-if)# ppp authentication chaprouter1(config-if)# no shutrouter2(config)# isdn

19、switch-type basic-nirouter2(config)# dialer-list 1 protocol ip permitrouter2(config)# username router1 password ciscorouter2(config)# interface bri0/0router2(config-if)# encap ppprouter2(config-if)# ip address 200.10.1.2 255.255.255.0router2(config-if)# isdn spid1 32177820020100router2(config-if)# d

20、ialer-group 1router2(config-if)# dialer map ip 200.10.1.1 name router1 broadcast 7782001router2(config-if)# ppp authentication chaprouter2(config-if)# no shutLAB 18 ISDN BRI-BRI using Dialer ProfilesRouter IP Address Mask SPID1 Local Tel# ISDN Switchrouter1 200.10.1.1 /24 32177820010100 7782001 basi

21、c-nirouter2 200.10.1.2 /24 32177820020100 7782002 basic-nirouter1(config)# isdn switch-type basic-nirouter1(config)# dialer-list 1 protocol ip permitrouter1(config)# username router2 password ciscorouter1(config)# interface bri0router1(config-if)# encap ppprouter1(config-if)# ppp authentication chap

22、router1(config-if)# isdn spid1 32177820010100router1(config-if)# dialer pool-member 1router1(config-if)# no shutrouter1(config-if)# interface dialer 1router1(config-if)# no shutrouter1(config-if)# ip address 200.10.1.1 255.255.255.0router1(config-if)# encap ppprouter1(config-if)# dialer-group 1route

23、r1(config-if)# dialer pool 1router1(config-if)# dialer remote-name router2router1(config-if)# dialer string 7782002router1(config-if)# ppp authentication chaprouter2(config)# isdn switch-type basic-nirouter2(config)# dialer-list 1 protocol ip permitrouter2(config)# username router1 password ciscorou

24、ter2(config)# interface bri0/0router2(config-if)# encap ppprouter2(config-if)# ppp authentication chaprouter2(config-if)# isdn spid1 32177820020100router2(config-if)# dialer pool-member 1router2(config-if)# no shutrouter2(config-if)# interface dialer 1router2(config-if)# no shutrouter2(config-if)# i

25、p address 200.10.1.2 255.255.255.0router2(config-if)# encap ppprouter2(config-if)# dialer-group 1router2(config-if)# dialer pool 1router2(config-if)# dialer remote-name router1router2(config-if)# dialer string 7782001router2(config-if)# ppp authentication chapLAB 19 ISDN PRI using Dialer ProfilesRou

26、ter IP Address Mask SPID1 Local Tel# ISDN Switchrouter1 201.10.1.1 /24 32177820010100 7782001 basic-nirouter2 201.10.1.2 /24 - 7782002 primary-5essrouter1(config)# isdn switch-type basic-nirouter1(config)# dialer-list 1 protocol ip permitrouter1(config)# username router2 password ciscorouter1(config

27、)# interface bri0/0router1(config-if)# encap ppprouter1(config-if)# ppp authentication chaprouter1(config-if)# isdn spid1 32177820010100router1(config-if)# dialer pool-member 1router1(config-if)# no shutrouter1(config-if)# interface dialer 2router1(config-if)# no shutrouter1(config-if)# ip address 2

28、01.10.1.1 255.255.255.0router1(config-if)# encap ppprouter1(config-if)# dialer-group 1router1(config-if)# dialer pool 1router1(config-if)# dialer remote-name router2router1(config-if)# dialer string 7782002router1(config-if)# ppp authentication chaprouter2(config)# isdn switch-type primary-5esssrout

29、er2(config)# dialer-list 1 protocol ip permitrouter2(config)# username router1 password ciscorouter2(config)# controller t1 0/0router2(config-controller)# framing esfrouter2(config-controller)# linecode b8zsrouter2(config-controller)# pri-group timeslots 1-24router2(config-controller)# exitrouter2(c

30、onfig)# interface serial0/0:23router2(config-if)# encapsulation ppprouter2(config-if)# ppp authentication chaprouter2(config-if)# dialer pool-member 2router2(config-if)# no shutrouter2(config-if)# interface dialer 2router2(config-if)# ip address 201.10.1.2 255.255.255.0router2(config-if)# encapsulat

31、ion ppprouter2(config-if)# dialer-group 1router2(config-if)# dialer pool 2router2(config-if)# dialer remote-name router1router2(config-if)# dialer string 7782001router2(config-if)# ppp authentication chaprouter2(config-if)# no shutFR的配置Router(config-if)#encapsulation frame-relay ietf|cisco (在相關(guān)接口上封裝

32、FR)Router(config-if)#frame-relay lmi-type ? （設(shè)置LMI類型）ciscoansiq933aRouter(config-if)#frame-relay interface-dlci 100 （設(shè)置FR DLCL編號(hào)）Router(config-if)#frame-relay map ip 1.1.1.1 100 broadcast（映射協(xié)議地址與DLCL）Router(config)#interface serial 0/0.1 point-to-point | multipoint （設(shè)置子接口）Router#sh frame-relay ? （查看

33、FR狀態(tài)）map Frame-Relay map tablepvc show frame relay pvc statisticslmi show frame relay lmi statisticsroute show frame relay routesvc show frame relay SVC stufftraffic Frame-Relay protocol statisticsLAB 20 FRAME RELAYRouter Interface IP Address Local DLCIrouter1 serial 1 215.10.1.1 /24 105router5 seri

34、al 0 215.10.1.2 /24 501router1(config)# interface serial1router1(config-if)# encapsulation frame-relayrouter1(config-if)# ip address 215.10.1.1 255.255.255.0router1(config-if)# frame-relay map ip 215.10.1.2 105 broadcastrouter1(config-if)# frame-relay lmi-type ansirouter1(config-if)# no shutrouter5(

35、config)# interface serial0router5(config-if)# encapsulation frame-relayrouter5(config-if)# ip address 215.10.1.2 255.255.255.0router5(config-if)# frame-relay map ip 215.10.1.1 501 broadcastrouter5(config-if)# frame-relay lmi-type ansirouter5(config-if)# no shutrouter1(config)# interface serial1route

36、r1(config-if)# no ip address 215.10.1.1 255.255.255.0router1(config-if)# no frame map ip 215.10.1.2 105 broadcastrouter1(config-if)# interface serial1.1 point-to-pointrouter1(config-subif)# ip address 215.10.1.1 255.255.255.0router1(config-subif)# frame-relay interface-dlci 105router5(config)# inter

37、face serial0router5(config-if)# no ip address 215.10.1.2 255.255.255.0router5(config-if)# no frame map ip 215.10.1.1 501 broadcastrouter5(config-if)# interface serial0.1 point-to-pointrouter5(config-subif)# ip address 215.10.1.2 255.255.255.0router5(config-subif)# frame-relay interface-dlci 501配置NAT

38、靜態(tài)NAT：Router(config-if)#ip nat outside | inside 定義外部接口和內(nèi)部接口。Router(config)#ip nat inside | outside source static source_address translate_address定義源地址翻譯。router1(config)# ip nat inside source static 160.10.1.2 169.10.1.2router1(config)# interface ethernet0router1(config-if)# ip address 160.10.1.1 255

39、.255.255.0router1(config-if)# ip nat insiderouter1(config-if)# interface serial0router1(config-if)# ip address 175.10.1.1 255.255.255.0router1(config-if)# ip nat outsiderouter1(config-if)# no shut動(dòng)態(tài)NATRouter(config)#ip nat pool netmask | prefix-length router1(config)# no ip nat inside source static

40、160.10.1.2 169.10.1.2router1(config)# ip nat pool pool1 169.10.1.50 169.10.1.100 netmask 255.255.255.0router1(config)# ip nat inside source list 1 pool pool1router1(config)# access-list 1 permit 160.10.1.0 0.0.0.255OVERLOAD：router1(config)# ip nat inside source list 1 interface serial0 overloadroute

41、r1(config)# interface Ethernet 0router1(config-if)# ip address 160.10.1.1 255.255.255.0router1(config-if)# ip nat insiderouter1(config-if)# interface serial 0router1(config-if)# ip address 175.10.1.1 255.255.255.0router1(config-if)# ip nat outsiderouter1(config-if)# exitrouter1(config)# access-list

42、1 permit 160.10.1.0 0.0.0.255VPN的基本配置VPN的基本配置 工作原理：一邊服務(wù)器的網(wǎng)絡(luò)子網(wǎng)為192.168.1.0/24路由器為100.10.15.1另一邊的服務(wù)器為192.168.10.0/24路由器為200.20.25.1。執(zhí)行下列步驟：1. 確定一個(gè)預(yù)先共享的密鑰（保密密碼）（以下例子保密密碼假設(shè)為noIP4u）2. 為SA協(xié)商過(guò)程配置IKE。3. 配置IPSec。配置IKE:Shelby(config)#crypto isakmp policy 1注釋：policy 1表示策略1，假如想多配幾個(gè)VPN，可以寫(xiě)成policy 2、policy3Shelby(config-isakmp)#group 1注釋：除非購(gòu)買高端路由器，或是VPN通信比較少，否則最好使用group 1長(zhǎng)度的密鑰，group命令有兩個(gè)參數(shù)值：1和2。參數(shù)值1表示密鑰使用768位密鑰，參數(shù)值2表示密鑰使用1024位密鑰，顯然后一種密鑰安全性高，但消耗更多的CPU時(shí)間。Shelby(config-