Chaer－路由器配置和應(yīng)用

Chapter10路由器配置和應(yīng)用課前復(fù)習(xí)Ping查看TCP/IP是否安裝成功TTL經(jīng)過幾個(gè)設(shè)備（路由器或三層交換）WindowsTTL一般128Ping或本地觀察結(jié)果Tracert觀察結(jié)果（丟棄并產(chǎn)生ICMP報(bào)文）RouteprintMicrosoftOfficeVisio華為、思科模擬器華為6臺(tái)+思科5臺(tái)（如何分組）2本章目標(biāo)路由器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議學(xué)習(xí)本章節(jié)，您應(yīng)該能夠：3課程內(nèi)容

路由器的功能、結(jié)構(gòu)和接口路由器的基本配置常見廣域網(wǎng)協(xié)議4路由器工作流程IPETHPPP以太網(wǎng)口串口IPPPPETH串口以太網(wǎng)口協(xié)議封裝路由選擇協(xié)議轉(zhuǎn)換路由器路由器傳送拆包接收發(fā)送工作過程5路由器的結(jié)構(gòu)硬件組成CPU(處理器）：中央處理單元，和計(jì)算機(jī)一樣，它是路由器的控制和運(yùn)算部件。RAM(存儲(chǔ)正在運(yùn)行的配置文件)：內(nèi)存，用于存儲(chǔ)臨時(shí)的運(yùn)算結(jié)果。如路由表、ARP表、快速交換緩存、緩沖數(shù)據(jù)包、數(shù)據(jù)隊(duì)列、當(dāng)前配置文件。眾所周知，RAM中的數(shù)據(jù)在路由器斷電后是會(huì)丟失的。FLASHMemory（負(fù)責(zé)保存OS的映像和路由器的微碼）：閃存，可擦除、可編程的ROM，用于存放路由器的IOS，F(xiàn)lash的可擦除特性允許更新、升級(jí)IOS而不用更換路由器內(nèi)部的芯片。路由器斷電后，flash的內(nèi)容不會(huì)丟失。Flash容量較大時(shí)，就可以存放多個(gè)IOS版本。6路由器的結(jié)構(gòu)硬件組成：NVRAM（保存配置件）ROM（加載OS）Cisco(InternetworkOperatingSystem，網(wǎng)際操作系統(tǒng)) Huawei(VersatileRoutingPlatform，通用路由平臺(tái))接口（完成路由器與其它設(shè)備的數(shù)據(jù)交換）7路由器的結(jié)構(gòu)軟件結(jié)構(gòu)BOOTROM：主要功能是路由器加電后完成有關(guān)初始化工作，并向內(nèi)存中加入操作系統(tǒng)代碼VRP（通用路由平臺(tái)）：Quidway路由器上運(yùn)行的軟件平臺(tái)路由器的廠商：銳捷，神州數(shù)碼8VRP體系結(jié)構(gòu)9中低端路由器發(fā)展路標(biāo)低端路由器R1600/2500介入中低端路由器之間R1760中端路由器R2600/3600增強(qiáng)型中端路由器R2630E/R3600E智能型中端路由器R2611/26101996199820022003統(tǒng)一的VRP平臺(tái)2000ADSL寬帶接入路由器4/8口語音網(wǎng)關(guān)冗余電源款型R2600-RPS/3600-RPS2004AR18,28,46系列路由器Aolynk路由器10AR18-1XAR18-2XAR28-0X/1XAR28-3X/40/80AR46-20/40/80SOHOSMB企業(yè)業(yè)分分支支企業(yè)業(yè)大大型型分分支支企業(yè)業(yè)中中心心靈活活性能能業(yè)務(wù)務(wù)性性能能Quidway??AR全全系系列列路路由由器器11課程程內(nèi)內(nèi)容容路由由器器的的功功能能、、結(jié)結(jié)構(gòu)構(gòu)和和接接口口路由由器器的的基基本本配配置置常見見廣廣域域網(wǎng)網(wǎng)協(xié)協(xié)議議12AR28-31備份份口口配置置口口13配置置路路由由器器通過過console口口配配置置通過過撥撥號(hào)號(hào)遠(yuǎn)遠(yuǎn)程程配配置置通過過telnet方方式式配配置置通過過啞啞終終端端方方式式配配置置通過過FTP方方式式傳傳送送配配置置文文件件14通過過console口口配配置置建立立本本地地配配置置環(huán)環(huán)境境配置置口口(Console)配置置口口（（console））電電纜纜R232串串口口（（db9的的簡(jiǎn)簡(jiǎn)化化應(yīng)應(yīng)用用））Console線線就就是是反反轉(zhuǎn)轉(zhuǎn)線線(rollovercable):一一端端采采用用568A或或568B做做線線標(biāo)標(biāo)準(zhǔn)準(zhǔn),另另一一端端把把568A或或568B的的順順序序剛剛好好從從第第一一根根到到最最后后一一根根反反過過來來。。一一般般小小于于15米米，，所所以以本本地地配配置置。。反轉(zhuǎn)轉(zhuǎn)線線一一般般長(zhǎng)長(zhǎng)度度固固定定，，可可以以購購買買RJ45-DB9轉(zhuǎn)轉(zhuǎn)接接器器。。15創(chuàng)建建超超級(jí)級(jí)終終端端（（II））16選擇擇串串口口（（III））17端口口設(shè)設(shè)置置（（IV））18通過過撥撥號(hào)號(hào)線線路路配配置置路路由由器器將路路由由器器和和PC分分別別與與modem連連接接備份份電電纜纜modemmodemPSTN/ISDN19通過過Telnet配配置置本本地地路路由由器器[Quidway-Ethernet0/0]ipaddress0024缺省省的的telnet登登錄錄用用戶戶名名：：admin口口令令：：admin服務(wù)務(wù)器器PC工作作站站工作作站站10Base-T網(wǎng)口20通過啞終端端配置[Quidway-Serial0/0]physical-modeasync同/異步串串口21通過FTP配置在路由器上上啟動(dòng)FTP服務(wù)器在終端上啟啟動(dòng)FTP客戶端程序序FTPserverFTPclientEthernet22命令行概述述用戶視圖系統(tǒng)視圖RIP視圖圖OSPF視視圖BGP視圖圖以太網(wǎng)接口口視圖同步串口視視圖Dialer接口視視圖注意：視圖圖切換（華華為）模式切換（（思科）23進(jìn)入路由器器配置界面面UserinterfaceCon0isavailable.PressENTERtogetstarted.<Quidway>console用戶視圖：：<H3C>system進(jìn)進(jìn)入入系統(tǒng)模式式[H3C]用戶模式：：Router>enable進(jìn)入入特權(quán)模式式Router#24用戶視圖常常用命令<Quidway>?cdChangecurrentdirectorydebuggingEnablesystemdebuggingfunctionsdeleteDeleteafiledisplayDisplaycurrentsysteminformationpingSendechomessagessaveSavecurrentconfigurationresetResetoperationrebootRebootsystem25系統(tǒng)視圖常常用命令<Quidway>system-view[Quidway]?aclSpecifyaclconfigurationinformationarpAddstaticARPentrybgpSpecifyBGP(BorderGatewayProtocol)configurationinformationfirewallSpecifyfirewallconfigurationinformationipsecSpecifyIPSec(IPSecurity)configurationinformationlocal-userSpecifylocaluserconfigurationinformationpppSpecifyPPP(thePoint-to-PointProtocol)26接口視圖命命令[Quidway]interfaces0/0[Quidway-Serial0/0]？baudrateSettransmitandreceivebaudrateasyncAsynchronouslineconfigurationcommandipSpecifyIPconfigurationinformationshutdownShutdownthespecifiedinterfacephysical-modeSetsynchronousorasynchronousmodeonserialinterfacedialerSpecifyDCC(Dial-Control-Center)configurationinformationquitExitfromcurrentcommandviewloopbackSetloopbackonaninterface27在線幫助[Quidway]display?aclAclstatusandconfigurationinformationarpDisplayARPentryaspfASPFstatusandconfigurationinformationauto-configSpecifyautoconfigurationinformationbgpBGPstatusandconfigurationinformationcurrent-configurationCurrentconfigurationdebuggingCurrentsettingofdebuggingswitchesdhcpDHCPconfigurationsubcommandsdiagnostic-informationSystemInformationforDiagnosis28命令行錯(cuò)誤誤信息[Quidway]dispaly?^%Unrecognizedcommandfoundat'^'position.[Quidway]display^%Incompletecommandfoundat'^'position.[Quidway]displayinterfaceSerial0/00^%Toomanyparametersfoundat'^'position.29歷史命令displayhistory-command補(bǔ)全命令使用Tab鍵查看歷史記記錄使用↑↓↓鍵使用Ctrl＋P快捷鍵歷史命令30編輯特性普通按鍵輸輸入字符到到當(dāng)前光標(biāo)標(biāo)位置退格鍵BackSpace刪除光標(biāo)位位置的前一一個(gè)字符刪除鍵Delete刪除光標(biāo)位位置字符左光標(biāo)鍵←光標(biāo)向左移移動(dòng)一個(gè)字字符位置右光標(biāo)鍵→光標(biāo)向右移移動(dòng)一個(gè)字字符位置上下光標(biāo)鍵鍵↑↓顯示歷史命命令31Language中英文顯示示方式切換換暫停顯示時(shí)時(shí)鍵入'Ctrl+c'停停止顯示示和命令執(zhí)執(zhí)行暫停顯示時(shí)時(shí)鍵入空格格鍵 繼續(xù)續(xù)顯示下一一屏信息暫停顯示時(shí)時(shí)鍵入回車車鍵 繼續(xù)續(xù)顯示下一一行信息顯示特性32狀態(tài)查看命命令displayversiondisplaycurrent-configurationdisplayinterfacedisplayiproute基本操作命命令33常用命令[Quidway]displayflashRouter#showflash[H3C]copytftpflash[H3C]copycurstartup-config(current-config)Router#copyrunsaved-config(running-config)34displayversion[Quidway]displayversionCopyrightNotice:Allrightsreserved(Apr082005).Withouttheowner'spriorwrittenconsent,nodecompilingnorreverse-engineeringshallbeallowed.Huawei-3ComVersatileRoutingPlatformSoftwareVRP(R)software,Version3.40,ReleaseRT-0009Copyright(c)2003-2005HangzhouHuawei-3ComTech.Co.,Ltd.Allrightsreserved.Copyright(c)2000-2003HuaweiTech.Co.,Ltd.Allrightsreserved.QuidwayAR28-11uptimeis0week,0day,0hour,1minuteCPUtype:PowerPC8241200MHz128MbytesSDRAMMemory32MbytesFlashMemoryPcbVersion:1.0LogicVersion:1.0BootROMVersion:9.09[SLOT0]AUX(Hardware)1.0,(Driver)1.0,(Cpld)1.035displaycurrent-configuration[Quidway]displaycurrent-configuration#sysnameQuidway#FTPserverenable#local-servernas-ipkeyhuawei#domaindefaultenablesystem#radiusschemesystemserver-typehuaweiprimaryauthentication1645primaryaccounting1646user-name-formatwithout-domain#domainsystemaccess-limitdisablestateactive………#36displayinterface顯示示接口信信息[Quidway]displayinterfaceSerial1/1Serial1/1currentstate:UPLineprotocolcurrentstate:UPDescription:Serial1/1InterfaceTheMaximumTransmitUnitis1500,Holdtimeris10(sec)Internetprotocolprocessing:disabledInternetAddressis/8LinklayerprotocolisPPPLCPinitialOutputqueue:(Urgentqueue:Size/Length/Discards)0/50/0Outputqueue:(Protocolqueue:Size/Length/Discards)0/500/0Outputqueue:(FIFOqueuing:Size/Length/Discards)0/75/0Physicallayerissynchronous,Baudrateis64000bps,InterfacehasnocableLast300secondsinputrate0.00bytes/sec,0.00packets/secLast300secondsoutputrate0.00bytes/sec,0.00packets/secInput:0packets,0bytes0broadcasts,0multicasts0errors,0runts,0giants0CRC,0alignerrors,0overruns0dribbles,0aborts,0nobuffers0frameerrorsOutput:0packets,0bytes0errors,0underruns,0collisions0deferredDCD=UPDTR=UPDSR=UPRTS=UPCTS=UP37[Quidway]interfaceserial0/0[Quidway-serial0/0]undoshutdown開啟或關(guān)關(guān)閉端口口開啟已經(jīng)經(jīng)關(guān)閉的的端口[Quidway]interfaceserial0/0[Quidway-serial0/0]shutdown人工關(guān)閉閉端口38解讀端口口狀態(tài)[Quidway]displayinterfaceserial0/0physicallayerissynchronous,baudrateis64000bps,nocableLink-protocolisPPPLCPinitial,IPCPinitial,IPXCPinitial,CCPinitiallineprotocolisdownSerial0/0isdown,物理層組組件的狀狀態(tài)數(shù)據(jù)鏈路路層的狀狀態(tài)39displayiprouting-table[Quidway]disiprouting-tableRoutingTables:Destination/MaskprotoprefMetricNexthopInterface/0Static600Serial0/8RIP1003Serial0/8OSPF1050Ethernet0/8RIP1004Serial0/8Static600Serial0/8Direct00Ethernet0/32Direct00LoopBack0......40<Quidway>terminaldebugging<Quidway>debugging?allAlldebuggingfunctionsarpARPmoduleaspfASPFmoduleatmATMmodulebgpBGPmodulebridgeDebuggingbridgedhcpDHCPmoduledialerDCCmoduledlswDataLinkSwitchingmodulednsDomainnamesystemmodule調(diào)試命令令：debugging41[Quidway]pingPING:56databytes,pressCTRL_CtobreakReplyfrom:bytes=56Sequence=0ttl=255time=31msReplyfrom:bytes=56Sequence=1ttl=255time=31msReplyfrom:bytes=56Sequence=2ttl=255time=32msReplyfrom:bytes=56Sequence=3ttl=255time=31msReplyfrom:bytes=56Sequence=4ttl=255time=31ms---pingstatistics---5packetstransmitted5packetsreceived0.00%packetlossround-tripmin/avg/max=31/31/32msping:網(wǎng)絡(luò)連通測(cè)試試命令42tracert:網(wǎng)絡(luò)連通測(cè)試試命令[Quidway]tracert86tracerouteto86(86)30hopsmax,40bytespacket129ms22ms21ms28638ms24ms24ms43課程內(nèi)容路由器的功能能、結(jié)構(gòu)和接接口路由器的基本本配置常見廣域網(wǎng)協(xié)協(xié)議44廣域網(wǎng)

V.24,V.35,X.21BisEIA/TIA-232/449LAPB,FrameRelay,HDLC,PPP,SDLC網(wǎng)絡(luò)層X.25物理層數(shù)據(jù)鏈路層路由器A廣域網(wǎng)的下三層網(wǎng)絡(luò)層物理層數(shù)據(jù)鏈路層路由器B45廣域網(wǎng)的數(shù)據(jù)據(jù)鏈路層專用點(diǎn)到點(diǎn)HDLC,PPP分組交換X.25,幀幀中繼電路交換PSTN:PPPISDNB信道:PPPISDND信道:LAPD46高級(jí)數(shù)據(jù)鏈路路控制HDLC面向比特透明傳輸－零零比特填充法法運(yùn)行于同步串串行線路地址標(biāo)志控制信息幀校驗(yàn)標(biāo)志47HDLC協(xié)議議的配置在接口上封裝裝HDLC協(xié)協(xié)議link-protocolhdlc打開HDLC所有報(bào)文調(diào)調(diào)試信息開關(guān)關(guān)debugginghdlcall[interfacetypenumber]打開HDLC事件調(diào)試信信息開關(guān)debugginghdlcevent[interfacetypenumber]打開HDLC數(shù)據(jù)包調(diào)試試信息開關(guān)debugginghdlcpacket[interfacetypenumber]48PPP配置命命令封裝PPPlink-protocolppp設(shè)置驗(yàn)證類型型pppauthentication-mode{pap|chap}設(shè)置用戶名、、口令、服務(wù)務(wù)類型[Quidway]local-userhuawei[Quidway-luser-huawei]passwordsimplesharepass[Quidway-luser-huawei]service-typeppp49PAP配置命命令驗(yàn)證方配置配置驗(yàn)證方式式pppauthentication-modepap配置用戶列表表[Quidway]local-userhuawei[Quidway-luser-huawei]passwordsimplesharepass[Quidway-luser-huawei]service-typeppp被驗(yàn)證方配置置配置PAP用用戶名ppppaplocal-userusernamepassword{simple|cipher}password50CHAP配置置命令主驗(yàn)證方配置置：配置本地驗(yàn)證證對(duì)端（方式式為CHAP）pppauthentication-modechap配置本地名稱稱pppchapuserusername將對(duì)端用戶名名和密碼加入入本地用戶列列表[Quidway]local-userhuawei[Quidway-luser-huawei]passwordsimplesharepass[Quidway-luser-huawei]service-typeppp被驗(yàn)證方配置置:配置本地名稱稱密碼[Quidway-Serial0/0]pppchapuserusername[Quidway-Serial1/1]pppchappassword{simple|cipher}password51PPP典型配配置舉例一主驗(yàn)證方被驗(yàn)證方RouterARouterBPAP驗(yàn)證S0/0S0/0[RouterA]local-userrouterb[RouterA-luser-routerb]passwordsimplehello[RouterA-luser-routerb]service-typeppp[RouterA]interfaceserial0/0[RouterA-Serial0/0]pppauthentication-modepap[RouterB]interfaceserial0/0[RouterB-Serial0/0]ppppaplocal-userrouterbpasswordsimplehello52PPP典型配配置舉例二RouterARouterBCHAP驗(yàn)證S0/0S0/0RouterA]local-userrouterb[RouterA-luser-routerb]passwordsimplehello[RouterA-luser-routerb]service-typeppp[RouterA]interfaceserial0/0[RouterA-Serial0/0]pppchapuserroutera[RouterA-Serial0/0]pppauthentication-modechap[RouterB]local-userroutera[RouterB-luser-routera]passwordsimplehello[RouterB-luser-routera]service-typeppp[RouterB]interfaceserial0/0[RouterB-Serial0/0]pppchapuserrouterb[RouterB-Serial0/0]pppauthentication-modechap主驗(yàn)證證方被驗(yàn)證證方53幀中繼繼的配配置封裝幀幀中繼繼協(xié)議議link-protocolframe-relay[MFR|nonstandard|ietf]配置幀幀中繼繼接口口的終終端類類型frinterface-type｛dce|dte|nni｝｝選擇LMI類型型frlmitype｛ansi|nonstandard|q933a｝｝54配置幀幀中繼繼地址址映射射手工配配置靜靜態(tài)映映射：frmap{ip|ipx}protocol-addressdlci[broadcast]動(dòng)態(tài)建建立：：使能能動(dòng)態(tài)態(tài)逆向向地址址解析析協(xié)議議frinarp[ip|ipx][dlci]幀中繼繼地址址映射射也就就是建建立對(duì)對(duì)端協(xié)協(xié)議地地址與與本地地DLCI的映映射關(guān)關(guān)系，，該地地址映映射可可靜態(tài)態(tài)配置置，也也可動(dòng)動(dòng)態(tài)建建立55配置幀幀中繼繼本地地虛電電路為主接接口分分配一一條虛虛電路路號(hào)frdlcidlci56配置幀幀中繼繼子接接口創(chuàng)建幀幀中繼繼子接接口，，進(jìn)入入子接接口配配置模模式interfacetypenumber.subinterface-number[multipoint|point-to-point]配置幀幀中繼繼子接接口的的虛電電路號(hào)號(hào)frdlcidlci建立地地址映映射的的命令令和物物理接接口相相同，，可以以使用用靜態(tài)態(tài)或動(dòng)動(dòng)態(tài)地地址映映射。。地址址映射射只有有在點(diǎn)點(diǎn)到多多點(diǎn)的的情況況下才才需要要配置置子接口口有兩兩種類類型：：點(diǎn)到到點(diǎn)和和點(diǎn)到到多點(diǎn)點(diǎn)57配置幀幀中繼繼交換換允許幀幀中繼繼進(jìn)行行PVC交交換frswitching設(shè)置幀幀中繼繼接口口類型型frinterface-type{dce|dte|nni}配置幀幀中繼繼PVC交交換的的路由由[Quidway-Serial1/0]frdlci-switch16interfaceSerial1/1dlci40注意：：如果果使用用幀中中繼交交換，，接口口類型型必須須為DCE或NNI58幀中繼繼典型型配置置舉例例一DLCI100RouterARouterB封裝為為幀中中繼DCEDTEinterfaceserial1/0ipaddress51link-protocolfrfrinterface-typedcefrdlci100frinarp(frmapip52dlci100）interfaceserial1/0ipaddress52link-protocolframe-relay