10路由器配置和應(yīng)用V2

1、Chapter 10 路由器配置和應(yīng)用ISSUE 2.1日期：杭州華三通信技術(shù)有限公司 版權(quán)所有，未經(jīng)授權(quán)不得使用與傳播路由器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議課程目標(biāo)學(xué)習(xí)完本課程，您應(yīng)該能夠：路由器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄路由器工作流程IPETHPPP以太網(wǎng)口串口IPPPPETH串口以太網(wǎng)口協(xié)議封裝路由選擇協(xié)議轉(zhuǎn)換路由器路由器傳送拆包接收發(fā)送工作過(guò)程路由器的結(jié)構(gòu)硬件組成CPU(處理器）RAM(存儲(chǔ)正在運(yùn)行的配置文件)FLASH（負(fù)責(zé)保存OS的映像和路由器的微碼）NVRAM（保存配置件）ROM（加載OS）接口（完成路由器與其它設(shè)備的數(shù)據(jù)交換） 軟件結(jié)構(gòu)

2、BOOT ROM：主要功能是路由器加電后完成有關(guān)初始化工作，并向內(nèi)存中加入操作系統(tǒng)代碼COMWARE：H3C路由器上運(yùn)行的軟件平臺(tái)COMWARE體系結(jié)構(gòu)中低端路由器發(fā)展路標(biāo)低端路由器R1600/2500介入中低端路由器之間R1760中端路由器R2600/3600增強(qiáng)型中端路由器R2630E/R3600E智能型中端路由器R2611/261019961998200220032000ADSL寬帶接入路由器4/8口語(yǔ)音網(wǎng)關(guān)冗余電源款型R2600-RPS/3600-RPS2004AR18,28,46系列路由器Aolynk路由器路由器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄AR28-31備份口

3、配置口配置路由器通過(guò)console口配置通過(guò)撥號(hào)遠(yuǎn)程配置通過(guò)telnet方式配置通過(guò)啞終端方式配置通過(guò)FTP方式傳送配置文件通過(guò)console口配置建立本地配置環(huán)境配置口(Console)配置口（console）電纜R232 串口 創(chuàng)建超級(jí)終端（II）選擇串口（III）端口設(shè)置（IV）通過(guò)撥號(hào)線路配置路由器將路由器和PC分別與modem連接 備份電纜modemmodemPSTN/ISDN通過(guò)Telnet配置本地路由器H3C-Ethernet0/0ip address 00 24 缺省的telnet登錄用戶名：admin 口令：admin服務(wù)器PC工作站工作站10Base-T 網(wǎng)口通過(guò)啞終端配置

4、H3C-Serial0/0physical-mode async同/異步串口通過(guò)FTP配置在路由器上啟動(dòng)FTP服務(wù)器在終端上啟動(dòng)FTP客戶端程序FTP serverFTP clientEthernet命令行概述用戶視圖系統(tǒng)視圖 RIP視圖OSPF視圖BGP視圖以太網(wǎng)接口視圖同步串口視圖Dialer接口視圖進(jìn)入路由器配置界面 User interface Con 0 is available. Press ENTER to get started. console用戶視圖常用命令? cdChange current directory debugging Enable system debugg

5、ing functions delete Delete a file displayDisplay current system informationpingSend echo messagessaveSave current configuration resetReset operationreboot Reboot system系統(tǒng)視圖常用命令system-viewH3C?aclSpecify acl configuration information arpAdd static ARP entry bgpSpecify BGP(Border Gateway Protocol) con

6、figuration informationfirewallSpecify firewall configuration information ipsecSpecify IPSec(IP Security) configuration information local-userSpecify local user configuration information pppSpecify PPP(the Point-to-Point Protocol)接口視圖命令H3Cinterface s0/0 H3C-Serial0/0？ baudrateSet transmit and receive

7、 baudrate async Asynchronous line configuration command ipSpecify IP configuration information shutdownShut down the specified interface physical-mode Set synchronous or asynchronous mode on serial interfacedialer Specify DCC(Dial-Control-Center) configuration information quit Exit from current comm

8、and view loopbackSet loopback on an interface在線幫助H3C display ?aclAcl status and configuration information arp Display ARP entryaspf ASPF status and configuration information auto-config Specify auto configuration information bgp BGP status and configuration informationcurrent-configurationCurrent co

9、nfigurationdebuggingCurrent setting of debugging switches dhcp DHCP configuration subcommands diagnostic-information System Information for Diagnosis 命令行錯(cuò)誤信息 H3Cdispaly ? % Unrecognized command found at position. H3Cdisplay % Incomplete command found at position. H3Cdisplay interface Serial 0/0 0 %

10、Too many parameters found at position.歷史命令display history-command補(bǔ)全命令使用Tab鍵查看歷史記錄使用 鍵使用Ctrl P快捷鍵歷史命令編輯特性普通按鍵 輸入字符到當(dāng)前光標(biāo)位置退格鍵BackSpace 刪除光標(biāo)位置的前一個(gè)字符刪除鍵Delete 刪除光標(biāo)位置字符左光標(biāo)鍵 光標(biāo)向左移動(dòng)一個(gè)字符位置右光標(biāo)鍵 光標(biāo)向右移動(dòng)一個(gè)字符位置上下光標(biāo)鍵 顯示歷史命令Language中英文顯示方式切換暫停顯示時(shí)鍵入Ctrl+c 停止顯示和命令執(zhí)行暫停顯示時(shí)鍵入空格鍵繼續(xù)顯示下一屏信息暫停顯示時(shí)鍵入回車鍵繼續(xù)顯示下一行信息顯示特性狀態(tài)查看命令dis

11、play versiondisplay current-configurationdisplay interfacedisplay ip route 基本操作命令display versionH3Cdisplay version H3C Comware Platform Software Comware software, Version 3.40, Feature 1711P01 Copyright(c). Without the owners prior written consent, no decompiling nor reverse-engineering shall be all

12、owed. H3C AR18-22S-8 uptime is 0 week, 0 day, 4 hours, 48 minutes Last reboot 2000/01/01 00:00:00 CPU type: PowerPC 8248 400MHz 128M bytes SDRAM Memory 16M bytes Flash Memory 0K bytes NvRAM Memory Pcb Version:3.0 Logic Version:1.0 BootROM Version:14.52 SLOT 0 AUX (Hardware)3.0, (Driver)1.0, (Cpld)1.

13、0 display current-configurationH3Cdisplay current-configuration# sysname H3C# FTP server enable# domain default enable system#radius scheme system server-type extended primary authentication 1645 primary accounting 1646 user-name-format without-domain#domain system access-limit disable state active#

14、display interface顯示接口信息H3Cdisplay interface Serial 1/1Serial1/1 current state :UPLine protocol current state :UPDescription : Serial1/1 InterfaceThe Maximum Transmit Unit is 1500, Hold timer is 10(sec)Internet protocol processing : disabledInternet Address is /8 Link layer protocol is PPPLCP initial

15、Output queue : (Urgent queue : Size/Length/Discards) 0/50/0Output queue : (Protocol queue : Size/Length/Discards) 0/500/0Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0Physical layer is synchronous,Baudrate is 64000 bps, Interface has no cable Last 300 seconds input rate 0.00 bytes/sec,

16、0.00 packets/sec Last 300 seconds output rate 0.00 bytes/sec, 0.00 packets/sec Input: 0 packets, 0 bytes 0 broadcasts, 0 multicasts 0 errors, 0 runts, 0 giants 0 CRC, 0 align errors, 0 overruns 0 dribbles, 0 aborts, 0 no buffers 0 frame errors Output:0 packets, 0 bytes 0 errors, 0 underruns, 0 colli

17、sions 0 deferred DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP H3C interface serial 0/0H3C-serial0/0 undo shutdown開啟或關(guān)閉端口開啟已經(jīng)關(guān)閉的端口H3C interface serial 0/0H3C-serial 0/0 shutdown人工關(guān)閉端口解讀端口狀態(tài)H3Cdisplay interface serial 0/0physical layer is synchronous, baudrate is 64000 bps, no cable Link-protocol is PPP LCP ini

18、tial, IPCP initial, IPXCP initial, CCP initialline protocol is downSerial0/0 is down,物理層組件的狀態(tài)數(shù)據(jù)鏈路層的狀態(tài)display ip routing-tableH3Cdis ip routing-tableRouting Tables:Destination/Mask proto pref Metric Nexthop Interface /0 Static 60 0 Serial0 /8 RIP 100 3 Serial0 /8 OSPF 10 50 Ethernet0 /8 RIP 100 4 Ser

19、ial0 /8 Static 60 0 Serial0 /8 Direct 0 0 Ethernet0 /32 Direct 0 0 LoopBack0 . terminal debuggingdebugging ? all All debugging functionsarp ARP moduleaspf ASPF moduleatm ATM modulebgp BGP modulebridge Debugging bridgedhcp DHCP moduledialer DCC moduledlsw Data Link Switching moduledns Domain name sys

20、tem module調(diào)試命令：debugging H3Cping PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=0 ttl=255 time = 31 ms Reply from : bytes=56 Sequence=1 ttl=255 time = 31 ms Reply from : bytes=56 Sequence=2 ttl=255 time = 32 ms Reply from : bytes=56 Sequence=3 ttl=255 time = 31 ms Reply f

21、rom : bytes=56 Sequence=4 ttl=255 time = 31 ms - ping statistics - 5 packets transmitted 5 packets received 0.00% packet loss round-trip min/avg/max = 31/31/32 msping:網(wǎng)絡(luò)連通測(cè)試命令tracert:網(wǎng)絡(luò)連通測(cè)試命令 H3C tracert 86 traceroute to 86(86) 30 hops max,40 bytes packet 1 29 ms 22 ms 21 ms 2 86 38 ms 24 ms 24 ms路由

22、器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄廣域網(wǎng) V.24 ,V.35, X.21BisEIA/TIA-232/449LAPB,Frame Relay,HDLC,PPP,SDLC網(wǎng)絡(luò)層X.25物理層數(shù)據(jù)鏈路層路由器 A廣域網(wǎng)的下三層網(wǎng)絡(luò)層物理層數(shù)據(jù)鏈路層路由器 B廣域網(wǎng)的數(shù)據(jù)鏈路層專用點(diǎn)到點(diǎn)HDLC,PPP分組交換X.25,幀中繼電路交換PSTN:PPPISDN B信道:PPPISDN D信道:LAPD高級(jí)數(shù)據(jù)鏈路控制HDLC 面向比特 透明傳輸零比特填充法 運(yùn)行于同步串行線路地址標(biāo)志控制信息幀校驗(yàn)標(biāo)志HDLC協(xié)議的配置在接口上封裝HDLC協(xié)議link-protocol hdlc打

23、開HDLC所有報(bào)文調(diào)試信息開關(guān) debugging hdlc all interface type number 打開HDLC事件調(diào)試信息開關(guān) debugging hdlc event interface type number 打開HDLC數(shù)據(jù)包調(diào)試信息開關(guān) debugging hdlc packet interface type number PPP配置命令封裝PPPlink-protocol ppp設(shè)置驗(yàn)證類型ppp authentication-mode pap|chap 設(shè)置用戶名、口令、服務(wù)類型H3Clocal-user huaweiH3C-luser-huaweipassword

24、 simple sharepassH3C-luser-huaweiservice-type pppPAP配置命令驗(yàn)證方配置配置驗(yàn)證方式ppp authentication-mode pap配置用戶列表H3Clocal-user huaweiH3C-luser-huaweipassword simple sharepassH3C-luser-huaweiservice-type ppp被驗(yàn)證方配置配置PAP用戶名ppp pap local-user username password simple|cipher passwordCHAP配置命令主驗(yàn)證方配置：配置本地驗(yàn)證對(duì)端（方式為CHAP） p

25、pp authentication-mode chap配置本地名稱 ppp chap user username將對(duì)端用戶名和密碼加入本地用戶列表 H3Clocal-user huawei H3C-luser-huaweipassword simple sharepass H3C-luser-huaweiservice-type ppp被驗(yàn)證方配置:配置本地名稱密碼H3C-Serial0/0 ppp chap user usernameH3C-Serial1/1ppp chap password simple|cipher passwordPPP典型配置舉例一主驗(yàn)證方被驗(yàn)證方RouterA R

26、outerB PAP 驗(yàn)證S0/0S0/0RouterAlocal-user routerb RouterA-luser-routerbpassword simple helloRouterA-luser-routerbservice-type pppRouterAinterface serial 0/0RouterA-Serial0/0ppp authentication-mode papRouterBinterface serial 0/0 RouterB-Serial0/0ppp pap local-user routerb password simple helloPPP典型配置舉例二

27、RouterARouterBCHAP 驗(yàn)證S0/0S0/0RouterAlocal-user routerbRouterA-luser-routerbpassword simple helloRouterA-luser-routerbservice-type pppRouterAinterface serial 0/0RouterA-Serial0/0ppp chap user routeraRouterA-Serial0/0ppp authentication-mode chapRouterBlocal-user routera RouterB-luser-routerapassword s

28、imple helloRouterB-luser-routeraservice-type pppRouterBinterface serial 0/0RouterB-Serial0/0ppp chap user routerbRouterB-Serial0/0ppp authentication-mode chap主驗(yàn)證方被驗(yàn)證方幀中繼的配置封裝幀中繼協(xié)議link-protocol frame-relay MFR |nonstandard | ietf 配置幀中繼接口的終端類型fr interface-type dce | dte | nni 選擇LMI類型fr lmi type ansi |

29、 nonstandard | q933a 配置幀中繼地址映射手工配置靜態(tài)映射：fr map ip | ipx protocol-address dlci broadcast 動(dòng)態(tài)建立：使能動(dòng)態(tài)逆向地址解析協(xié)議fr inarp ip | ipx dlci 幀中繼地址映射也就是建立對(duì)端協(xié)議地址與本地DLCI的映射關(guān)系，該地址映射可靜態(tài)配置，也可動(dòng)態(tài)建立配置幀中繼本地虛電路為主接口分配一條虛電路號(hào)fr dlci dlci配置幀中繼子接口創(chuàng)建幀中繼子接口，進(jìn)入子接口配置模式interface type number.subinterface-number multipoint | point-to-point 配置幀中繼子接口的虛電路號(hào)fr dlci dlci建立地址映射的命令和物理接口相同，可以使用靜態(tài)或動(dòng)態(tài)地址映射。地址映射只有在點(diǎn)到多點(diǎn)的情況下才需要配置子接口有兩種類型：點(diǎn)到點(diǎn)和點(diǎn)到多點(diǎn)配置幀中繼交換允許幀中繼進(jìn)行PVC交換fr switching設(shè)置幀中繼接口類型fr interface-type dce | dte | nni 配置幀中繼PVC交換的路由H3C-Serial1/0