1、 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-1iPLab CCNA系列课程系列课程Cisco IOS 软件的操作 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-2Cisco IOS 软件软件 功能，能承载所选网络协议和功能 连通性，允许在设备间高速传输数据 安全性，可控制访问并禁止未经授权使用网络 可扩展性，可根据网络规模变化来增加接口和容量 可靠性，能确保可靠地访问网络资源 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-3配置网络设备配置网络设备 初始默认设置足以保证交换机在
2、第二层运行。如果 Cisco 设备的内存中没有配置信息，那么它将提示您进行初始配置。其它配置任务通过以下信息来设置设备：协议编址和参数设置 管理选项 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-4Cisco 设备启动概述设备启动概述 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-5外部配置源外部配置源 配置的来源多种多样。配置将在设备内存中发挥作用。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-6 CLI 可用于输入命令。不同网络互联设备上的操作各不相同。用户可在控制台命令模式下
3、输入或粘贴条目。各命令模式的提示符各不相同。Enter 键可以指示设备解析和执行命令。两大 EXEC 模式为用户模式和特权模式。Cisco IOS 用户界面功能用户界面功能 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-7可使用两种主要的 EXEC 模式输入命令。Cisco IOS 软件软件 EXEC 模式（用户）模式（用户）2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-8Cisco IOS 软件软件 EXEC 模式（特权）模式（特权）2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-
4、9交换机命令行的帮助工具交换机命令行的帮助工具 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-10对上下文敏感的帮助对上下文敏感的帮助 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-11对上下文敏感的帮助（续）对上下文敏感的帮助（续）2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-12SwitchXShape the future of internetworking by creating unpreced为客户、员工和合作伙伴创造前所未有的高价值，藉此塑造网络互联的未来。增强编辑
5、命令增强编辑命令 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-13增强编辑命令（续）增强编辑命令（续）301P_990SwitchX$value for customers,employees,and partners.(长命令行的自动滚动)Ctrl-A移动到命令行的起始位置。Ctrl-E移动到命令行的末尾。Esc-B移回一个词。Esc-F向前移动一个词。Ctrl-B移回一个字符。Ctrl-F向前移动一个字符。Ctrl-D删除一个字符。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-14路由器命令历史记录路由器命令历史
6、记录022P_249Ctrl-P 或向上箭头调用上一个（前面的）命令。Ctrl-N 或向下箭头调用较新的命令。show history显示命令缓冲区的内容。terminal history size lines设置会话命令缓冲区大小。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-15查看配置查看配置 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-16显示当前配置及已保存的配置show running-config 命令和命令和 show startup-config 命令命令 2007 Cisco Systems,In
7、c.保留所有权利。ICND1 v1.02-17总结总结 Cisco IOS 软件是所有 Cisco 设备中的嵌入式软件架构，也是 Catalyst 交换机的操作系统。其功能包括承载所选的网络协议、连通性、安全性、可扩展性和可靠性。交换机或 IOS 设备可通过连接到控制台端口的本地终端进行配置，也可通过连接到辅助端口的调制解调器从所连接的远程终端进行配置。网络管理员可以使用 CLI 来监控和配置各种 Cisco IOS 设备。CLI 还提供帮助工具，帮助网络管理员检验和配置命令。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-18总结（续）总结（续）CLI 支
8、持两种 EXEC 模式：用户模式和特权模式。特权 EXEC 模式提供的功能多于用户 EXEC 模式。Cisco IOS 设备使用带有扩展命令行输入帮助工具的 Cisco IOS 软件，包括对上下文敏感的帮助。Cisco IOS CLI 包括增强的编辑模式，这种模式提供一系列的编辑关键功能。Cisco IOS 设备 CLI 可提供已输入命令的历史记录或记录。这个功能称作命令历史记录，它对于帮助调出长的或复杂的命令或输入尤为有用。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-19iPLab CCNA系列课程系列课程启动路由器 2007 Cisco System
9、s,Inc.保留所有权利。ICND1 v1.02-20 系统启动例程初始化路由器软件 如果需要，路由器可回退到启动备用例程Cisco 路由器的初始启动路由器的初始启动 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-21未配置的路由器与已配置的路由器路由器的启动输出路由器的启动输出 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-22设置：初始配置对话设置：初始配置对话 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-23接口设置总结接口设置总结 启动过程中检测到的接口Any inter
10、face listed with OK?value NO does not have a valid configurationInterface IP-Address OK?Method Status ProtocolFastEthernet0/0 unassigned NO unset up upFastEthernet0/1 unassigned NO unset up upSerial0/0/0 unassigned NO unset up upSerial0/0/1 unassigned NO unset down down 2007 Cisco Systems,Inc.保留所有权利
11、。ICND1 v1.02-24设置初始全局参数设置初始全局参数Configuring global parameters:Enter host name Router:RouterXThe enable secret is a password used to protect access to privileged EC and configuration modes.This password,after entered,becomes encrypted in the configuration.Enter enable secret:Cisco1The enable password
12、is used when you do not specify an enable secret password,with some older software versions,and some boot images.Enter enable password:SanFran3The virtual terminal password is used to protect access to the router over a network interface.Enter virtual terminal password:Sanj0se Configure SNMP Network
13、 Management?no:2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-25设置初始协议配置设置初始协议配置Configure IP?yes:Configure RIP routing?yes:noConfigure CLNS?no:Configure bridging?no:根据软件的修订版可能会出现以上文字。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-26设置接口参数设置接口参数Configuring interface parameters:Do you want to configure FastEthe
14、rnet0/0 interface?yes:Use the 100 Base-TX(RJ-45)connector?yes:Operate in full-duplex mode?no:Configure IP on this interface?yes:IP address for this interface:10.2.2.11 Subnet mask for this interface 255.0.0.0:255.255.255.0 Class A network is 10.0.0.0,24 subnet bits;mask is/24Do you want to configure
15、 FastEthernet0/1 interface?yes:noDo you want to configure Serial0/0/0 interface?yes:noDo you want to configure Serial0/0/1 interface?yes:no 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-27Cisco AutoSecureWould you like to go through AutoSecure configuration?yes:noAutoSecure dialog can be started later u
16、sing auto secure CLI根据软件的修订版可能会出现以上文字。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-28查看和使用设置脚本查看和使用设置脚本The following configuration command script was created:hostname RouterXenable secret 5$1$aNMG$kV3mxjlWDRGXmfwjEBNAf1enable password ciscoline vty 0 4password sanjoseno snmp-server!ip routingno clns ro
17、utingno bridge 1!interface FastEthernet0/0media-type 100BaseXhalf-duplexip address 10.2.2.11 255.255.255.0no mop enabled!interface FastEthernet0/1shutdownno ip address!interface Serial0/0/0shutdownno ip address!interface Serial0/0/1shutdownno ip addressdialer-list 1 protocol ip permit!end0 Go to the
18、 IOS command prompt without saving this config.1 Return back to the setup without saving this config.2 Save this configuration to nvram and exit.Enter your selection 2:2 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-29登录到登录到 Cisco 路由器路由器 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-30可用最少的字符缩写命令，但要确保字符串是唯一
19、的。路由器用户模式命令列表路由器用户模式命令列表RouterX?Exec commands:access-enable Create a temporary Access-List entryaccess-profile Apply user-profile to interfaceclear Reset functionsconnect Open a terminal connectiondisable Turn off privileged commandsdisconnect Disconnect an existing network connectionenable Turn on
20、privileged commandsexit Exit from the EXEChelp Description of the interactive help systemlat Open a lat connectionlock Lock the terminallogin Log in as a particular userlogout Exit from the EXEC-More-2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-31输入唯一的字符串，然后按 Tab 键来补全命令字符串。路由器特权模式命令列表路由器特权模式命令列表RouterX
21、#?Exec commands:access-enable Create a temporary Access-List entryaccess-profile Apply user-profile to interfaceaccess-template Create a temporary Access-List entrybfe For manual emergency modes settingcd Change current directoryclear Reset functionsclock Manage the system clockconfigure Enter confi
22、guration modeconnect Open a terminal connectioncopy Copy from one file to anotherdebug Debugging functions(see also undebug)delete Delete a filedir List files on a filesystemdisable Turn off privileged commandsdisconnect Disconnect an existing network connectionenable Turn on privileged commandseras
23、e Erase a filesystemexit Exit from the EXEChelp Description of the interactive help system-More-2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-32show version 命令命令Cisco IOS Software,2800 Software(C2800NM-ADVIPSERVICESK9-M),Version 12.4(12),RELEASE SOFTWARE(fc1)Technical Support:http:/ by Cisco Systems,Inc
24、.Compiled Fri 17-Nov-06 12:02 by prod_rel_teamROM:System Bootstrap,Version 12.4(13r)T,RELEASE SOFTWARE(fc1)RouterX uptime is 2 days,21 hours,15 minutesSystem returned to ROM by power-onSystem image file is flash:c2800nm-advipservicesk9-mz.124-12.binThis product contains cryptographic features and is
25、 subject to United States and local country laws governing import,export,transfer and use.Delivery of Cisco cryptographic products does not implythird-party authority to import,export,distribute or use encryption.Importers,exporters,distributors and users are responsible for compliance with U.S.and
26、local country laws.By using this product you agree to comply with applicable laws and regulations.If you are unable to comply with U.S.and local laws,return this product immediately.A summary of U.S.laws governing Cisco cryptographic products may be found at:http:/ you require further assistance ple
27、ase contact us by sending email .Cisco 2811(revision 53.50)with 249856K/12288K bytes of memory.Processor board ID FTX1107A6BB2 FastEthernet interfaces2 Serial(sync/async)interfaces1 Virtual Private Network(VPN)ModuleDRAM configuration is 64 bits wide with parity enabled.239K bytes of non-volatile co
28、nfiguration memory.62720K bytes of ATA CompactFlash(Read/Write)Configuration register is 0 x2102RouterX#2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-33总结总结 Cisco 路由器的启动过程与 Cisco Catalyst 交换机的启动过程类似。执行完 POST 之后，路由器会查找并加载 Cisco IOS 映像。最后，它会查找并加载设备配置文件。使用 enable 命令从用户 EXEC 模式访问特权 EXEC 模式。登录到 Cisco 路由器之后，可
29、使用以下路由器状态命令来检验路由器的初始启动状态：show version、show running-config 和 show startup-config 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-34iPLab CCNA系列课程系列课程管理 Cisco 路由器的启动和配置 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-35路由器通电启动过程路由器通电启动过程1.执行加电自检(POST)。2.加载并运行 bootstrap 代码。3.查找 Cisco IOS 软件。4.加载 Cisco IOS 软件。5.查找配
30、置。6.加载配置。7.运行配置好的 Cisco IOS 软件。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-36路由器的内部组件路由器的内部组件 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-37ROM 的功能的功能包含用于基本功能的微代码 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-38找到找到 Cisco IOS 映像映像搜索顺序：1.检查配置寄存器2.解析用于启动系统命令的配置3.默认到闪存中第一个文件4.尝试从网络服务器启动5.导入助手映像6.ROMMON 2007 Ci
31、sco Systems,Inc.保留所有权利。ICND1 v1.02-39从闪存加载从闪存加载 Cisco IOS 映像映像将闪存文件加载到将闪存文件加载到 RAM。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-40加载配置加载配置 从 NVRAM 加载并执行配置 如果 NVRAM 中当前没有配置，进入设置模式 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-41显示当前配置和已保存的配置show running-config 命令和命令和 show startup-config 命令命令301P_283RouterX#
32、show startup-configUsing 1359 out of 32762 bytes!version 12.2!-More-RouterX#show running-configBuilding configuration.?Current configuration:?!?version 12.2!-More-NVRAM 中RAM 中 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-42确定当前配置寄存器的值确定当前配置寄存器的值Cisco IOS Software,2800 Software(C2800NM-IPBASE-M),Version
33、 12.4(5a),RELEASE SOFTWARE(fc3)Technical Support:http:/ by Cisco Systems,Inc.Compiled Sat 14-Jan-06 03:19 by alnguyenROM:System Bootstrap,Version 12.4(1r)hqluong 1r,RELEASE SOFTWARE(fc1)RouterX uptime is 1 week,5 days,21 hours,30 minutesSystem returned to ROM by reload at 23:04:40 UTC Tue Mar 13 200
34、7System image file is flash:c2800nm-ipbase-mz.124-5a.binCisco 2811(revision 53.51)with 251,904K/10,240K bytes of memory.Processor board ID FTX1013A1DJ2 FastEthernet interfaces2 Serial(sync/async)interfacesDRAM configuration is 64 bits wide with parity enabled.239K bytes of non-volatile configuration
35、 memory.62,720K bytes of ATA CompactFlash(Read/Write)Configuration register is 0 x2102 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-43配置寄存器的值配置寄存器的值 配置寄存器位 3、2、1 和 0 用于设置启动选项 使用 show version 命令检查配置寄存器的值 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-44show version 命令命令Cisco IOS Software,2800 Software(C2800N
36、M-IPBASE-M),Version 12.4(5a),RELEASE SOFTWARE(fc3)Technical Support:http:/ by Cisco Systems,Inc.Compiled Sat 14-Jan-06 03:19 by alnguyenROM:System Bootstrap,Version 12.4(1r)hqluong 1r,RELEASE SOFTWARE(fc1)RouterX uptime is 1 week,5 days,21 hours,30 minutesSystem returned to ROM by reload at 23:04:40
37、 UTC Tue Mar 13 2007System image file is flash:c2800nm-ipbase-mz.124-5a.binCisco 2811(revision 53.51)with 251,904K/10,240K bytes of memory.Processor board ID FTX1013A1DJ2 FastEthernet interfaces2 Serial(sync/async)interfacesDRAM configuration is 64 bits wide with parity enabled.239K bytes of non-vol
38、atile configuration memory.62,720K bytes of ATA CompactFlash(Read/Write)Configuration register is 0 x2102(will be 2104 at next reload)2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-45show flash 命令命令RouterX#sh flash-#-length-date/time-path1 14951648 Feb 22 2007 21:38:56+00:00 c2800nm-ipbase-mz.124-5a.bin2
39、 1823 Dec 14 2006 08:24:54+00:00 sdmconfig-2811.cfg3 4734464 Dec 14 2006 08:25:24+00:00 sdm.tar4 833024 Dec 14 2006 08:25:38+00:00 es.tar5 1052160 Dec 14 2006 08:25:54+00:00 common.tar6 1038 Dec 14 2006 08:26:08+00:00 home.shtml7 102400 Dec 14 2006 08:26:22+00:00 home.tar8 491213 Dec 14 2006 08:26:4
40、0+00:00 128MB.sdf41836544 bytes available(22179840 bytes used)2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-46总结总结 路由器启动时，将执行测试、查找并加载软件，查找并加载配置，最后运行软件。路由器的主要内部组件包括 RAM、ROM、闪存、NVRAM 和配置寄存器。路由器启动时以特定顺序搜索 Cisco IOS 软件映像：配置寄存器、闪存、TFTP 服务器和 ROM 中指定的位置。配置寄存器包含用于查找 Cisco IOS 软件映像的启动信息。可使用 show 命令查看寄存器，并可使用 con
41、fig-register 全局配置命令更改寄存器的值。2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-47iPLab CCNA系列课程系列课程配置 Cisco 路由器 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-48路由器模式概述路由器模式概述 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-49保存配置保存配置将当前配置复制到 NVRAMRouterX#RouterX#copy running-config startup-configDestination filename st
42、artup-config?Building configurationRourterX#2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-50配置路由器标识配置路由器标识 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-51控制台线路命令控制台线路命令RouterX(config)#line console 0RouterX(config-line)#exec-timeout 20 30RouterX(config)#line console 0RouterX(config-line)#logging synchronous
43、 修改控制台会话的超时时间 重新显示中断的控制台输入 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-52RouterX(config)#interface type numberRouterX(config-if)#type 包括串行接口、以太网接口、令牌环接口、fddi 接口、hssi 接口、环回接口、拨号器接口、空接口、异步串口、atm 接口、bri 接口、隧道接口等等 number 用于标识各接口RouterX(config-if)#exit 退出当前接口配置模式RouterX(config)#interface type slot/portRout
44、erX(config-if)#如果是模块化路由器，选择一个接口配置接口配置接口 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-53RouterX(config-if)#description string string 是帮助您记住接口相关信息的注释或描述。参数 string 的最大长度是 238 个字符。配置接口描述配置接口描述 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-54RouterX#configure terminalRouterX(config)#interface serial 0 RouterX(c
45、onfig-if)#no shutdown%LINK-3-UPDOWN:Interface Serial0,changed state to up%LINEPROTO-5-UPDOWN:Line Protocol on Interface Serial0,changed state to up 启用管理性关闭的接口RouterX#configure terminalRouterX(config)#interface serial 0 RouterX(config-if)#shutdown%LINK-5-CHANGED:Interface Serial0,changed state to adm
46、inistratively down%LINEPROTO-5-UPDOWN:Line protocol on Interface Serial0,changed state to down 管理性地关闭接口禁用或启用接口禁用或启用接口 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-55 唯一的地址使终端站之间的通信成为可能 根据目的地址进行路径选择配置配置 IP 地址地址 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-56路由器的路由器的 show interfaces 命令命令RouterX#show interfa
47、cesEthernet0 is up,line protocol is up Hardware is Lance,address is 00e0.1e5d.ae2f(bia 00e0.1e5d.ae2f)Internet address is 10.1.1.11/24MTU 1500 bytes,BW 10000 Kbit,DLY 1000 usec,rely 255/255,load 1/255Encapsulation ARPA,loopback not set,keepalive set(10 sec)ARP type:ARPA,ARP Timeout 04:00:00Last inpu
48、t 00:00:07,output 00:00:08,output hang neverLast clearing of show interface counters neverQueueing strategy:fifoOutput queue 0/40,0 drops;input queue 0/75,0 drops5 minute input rate 0 bits/sec,0 packets/sec5 minute output rate 0 bits/sec,0 packets/sec81833 packets input,27556491 bytes,0 no bufferRec
49、eived 42308 broadcasts,0 runts,0 giants,0 throttles1 input errors,0 CRC,0 frame,0 overrun,1 ignored,0 abort0 input packets with dribble condition detected55794 packets output,3929696 bytes,0 underruns0 output errors,0 collisions,1 interface resets0 babbles,0 late collision,4 deferred0 lost carrier,0
50、 no carrier0 output buffer failures,0 output buffers swapped out 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-57解读接口状态解读接口状态 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-58检验串行接口配置检验串行接口配置 2007 Cisco Systems,Inc.保留所有权利。ICND1 v1.02-59总结总结 可从特权 EXEC 模式进入全局配置模式，进而访问其它配置模式，如接口配置模式或线路配置模式。路由器的主要功能是将数据包从一台网络中继设
