1,路由器口令设置:
routerenable 进入特权模式routerhostname 设置交换机的主机名routerenable password xxb 设置特权非密口令routerline vty 0 4 进入虚拟终端routerpassword xx 设置登录口令xxrouterexit 返回命令
2,路由器配置:
routerno shutdown 激活当前接口routerip address 设置IP地址routerint f0/0.1 进入子接口routerencapsulation dot1q 绑定vlan中继协议routerconfig-register 0x2102 正常使用配置文件router#reload 重新引导
3,路由器文件操作:
routercopy running-config tftp 保存配置到tftproutercopy tftp flash: 下传文件到flashrouter#copy tftp startup-config 下载配置文件ROM状态:Ctrl+Break 进入ROM监控状态rommonconfreg 0x2142 跳过配置文件rommonconfreg 0x2102 恢复配置文件rommonreset 重新引导rommoncopy xmodem: flash: 从console传输文件rommonIP_ADDRESS=10.65.1.2 设置路由器IPrommonIP_SUBNET_MASK=255.255.0.0 设置路由器掩码rommonTFTP_SERVER=10.65.1.1 指定TFTP服务器IPrommonTFTP_FILE=c2600.bin 指定下载的文件rommontftpdnld 从tftp下载rommondir flash: 查看闪存内容rommonboot 引导IOS
4,静态路由:
ip route 命令格式routerip route 0.0.0.0 0.0.0.0 1.1.1.2 默认路由举例
5,动态路由:
routerrouter rip 启动RIP路由协议。routernegihbor 点对点帧中继用。
6,帧中继命令:
routerencapsulation frame-relay 使能帧中继routerframe-relay intf-type DCE 设置为DCErouterframe-relay local-dlci 20 设置虚电路号routerlog-adjacency-changes 记录邻接变化routershow frame pvc 显示永久虚电路router#show frame map 显示映射
7,基本访问控制列表:
routerinterface ;default:deny anyrouteraccess-list 1 deny host 10.65.1.1routerint f0/0routeraccess-list 4 permit 10.8.1.1routeraccess-list 4 permit 10.8.0.0 0.0.255.255routeraccess-list 4 permit anyrouterip access-group 4 in扩展访问控制列表:access-list permit|deny icmp access-list permit|deny tcp 例1:routeraccess-list 101 permit ip any anyrouterip access-group 101 in例2:routeraccess-list 102 permit ip any anyrouterip access-group 102 out删除访问控制例表:routerno ip access-group 101 in路由器的nat配置Routerip nat outside 当前接口指定为外部接口Routerip nat inside source static 10.65.1.2 60.1.1.1Routerip nat pool p1 60.1.1.1 60.1.1.20 255.255.255.0Routerip nat inside destination list 2 pool p2Routerip nat pool p2 10.65.1.2 10.65.1.4 255.255.255.0 type rotaryRouterrouter bgp 100routerAneighbor 8.1.1.2 remote-as 200配置PPP验证:RouterAint s0RouterA#ppp authentication {chap|pap}
8,路由器子接口封装为8021Q (补充)
Encapsulation dot1q 2 封装类型设置为 802.1Q,2是子接口号标识,这里是示范,可以随意设置。