CISCO技术大全

Transcription

1 CISCO 5 1. Console 2. AUX MODEM 3. Ethernet TFTP 4. Ethernet TELNET 5. Ethernet SNMP, : : 1. router> 2. router# router> enable, router# 3. router(config)# router# configure terminal, router(config)# 4. router(config-if)#; router(config-line)#; router(config-router)#; EMIAL boway@263.net 1

2 5. > RXBOOT 60 ctrl-break 6. SETUP --- System Configuration Dialog --- At any point you may enter a question mark '?' for help. Use ctrl-c to abort configuration dialog at any prompt. Default settings are in square brackets '[]'. ctrl-c [] Would you like to enter the initial configuration dialog? [yes]: y First, would you like to see the current interface summary? [yes]: Any interface listed with OK? value "NO" does not have a valid config uration Interface IP-Address OK? Method Status Protocol Ethernet0 unassigned NO unset up up Serial0 unassigned NO unset up up Configuring global parameters: 1 Enter host name [Router]: 2 (secret) The enable secret is a one-way cryptographic secret used instead of the enable password when it exists. Enter enable secret: cisco 3 (password) The enable password is used when there is no enable secret and when using older software and some boot images. Enter enable password: pass EMIAL boway@263.net 2

3 Enter virtual terminal password: cisco 5 Configure SNMP Network Management? [yes]: Configure DECnet? [no]: Configure AppleTalk? [no]: Configure IPX? [no]: Configure IP? [yes]: Configure IGRP routing? [yes]: Configure RIP routing? [no]: 6 Configure Async lines? [yes]: 1) Async line speed [9600]: 2) Configure for HW flow control? [yes]: 3) modem Configure for modems? [yes/no]: yes 4) modem Configure for default chat script? [yes]: 5) PPP Configure for Dial-in IP SLIP/PPP access? [no]: yes 6) IP Configure for Dynamic IP addresses? [yes]: 7) IP Configure Default IP addresses? [no]: yes 8) TCP Configure for TCP Header Compression? [yes]: 9) Configure for routing updates on async links? [no]: y 10) 1 Configuring interface Ethernet0: 1) Is this interface in use? [yes]: 2) IP Configure IP on this interface? [yes]: 3) IP IP address for this interface: ) IP Number of bits in subnet field [0]: Class C network is , 0 subnet bits; mask is /24 The following configuration command script was created: EMIAL boway@263.net 3

4 hostname Router enable secret 5 $1$W5Oh$p6J7tIgRMBOIKVXVG53Uh1 enable password pass enable secret enable password Use this configuration? [yes/no]: yes yes NVRAM 1. IOS 2. enable disable setup config terminal end interface type slot/number interface type number.subinterface [point-to-point multipoint] line type slot/number router protocol exit 3. show version show running-config show startup-config show interface type slot/number show ip router 4. IOS CONFIG EMIAL boway@263.net 4

5 telnet hostname IP address ping hostname IP address trace hostname IP address 6. config terminal username username password password enable secret password hostname name ip route destination subnet-mask next-hop IP ip routing IPX ipx routing interface type slot/number IP ip address address subnet-mask IPX ipx network network no shutdown line type number login [local tacacs server] password password IP 1. IP IP A 8 24 B C EMIAL boway@263.net 5

6 A B C D E IP interface type slot/number IP ip address ip-address mask mask IP IP ip-address mask 3. IP IP Router1 Router2 E0 C Router1 E , , Router2 E , C 4. NAT NAT Network Address Translation IP NAT Inte rnet., Network Wo rking Group(RFC 1918). l Class A: to l Class B: to l Class C: to EMIAL boway@263.net 6

7 access-list access-list-number permit source [so urce-wildcard] ip nat pool name start-ip end-ip {netmask netmask prefix-length prefix-length} [type rotary] ip nat inside source {list {access-list-number nam e} pool name [overload] static local-ipglobal-ip} ip nat {inside outside} Ethernet 0 inside Serial 0 outside IP NIC IP, /24 IP c2501 S erial 0 Internet ip nat inside source list 2 pool c2501 ov erload overload IP NIC ip nat pool c netmask ip nat pool c netmask interface Ethernet 0 ip address ip nat inside interface Serial 0 ip address ip nat outside EMIAL boway@263.net 7

8 ip route Serial 0 access-list 2 permit Dynamic NAT ip nat inside source list 2 pool c2501 overload line console 0 exec-timeout 0 0 line vty 0 4 end, ip route prefix mask {address interface} [distance] [t ag tag] [permanent] Prefix : mask : address : IP interface : distance : tag tag :tag permanent : Router / , / Router / / Router1 Se rial / /30 Router EMIAL boway@263.net 8

9 Router1: ip route Router3: ip route ip route Router3 Router2 ip route , EMIAL boway@263.net 9

10 HDLC HDLC CISCO HDLC 1. HDLC encapsulation hdlc DCE clockrate speed clear interface serial unit show interfaces serial [unit] 1 :1. Cisco. Router#show interface serial 0 Serial 0 is up, line protocol is up Hardware is MCI Serial Internet address is , subnet mask is MTU 1500 bytes, BW 1544 Kbit, DLY usec, rely 255/255, load 1/25 5 Encapsulation HDLC, loopback not set, keepalive set (10 sec) Last input 0:00:07, output 0:00:00, output hang never Output queue 0/40, 0 drops; input queue 0/75, 0 drops Five minute input rate 0 bits/sec, 0 packets/sec Five minute output rate 0 bits/sec, 0 packets/sec packets input, bytes, 0 no buffer Received broadcasts, 0 runts, 0 giants 2 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 2 abort packets output, bytes, 0 underruns 0 output errors, 0 collisions, 2 interface resets, 0 restarts 1 carrier transitions EMIAL boway@263.net 10

11 Router1: interface Serial0 ip address clockrate Router2: interface Serial0 ip address E1 64K. : controller controller {t1 e1} number framing {crc4 no-crc4} line-code linecode {ami b8zs hdb3} channel-group number timeslots range1 controllers show controllers e1 [slot/port]2 : 1. T1,channel-group 0-23, Timeslot 1-24; E1, channel-group 0-30, Timeslot show controllers e1 controller, crc4 co ntrollers. Router# show controllers e1 e1 0/0 is up. Applique type is Channelized E1 - unbalanced Framing is CRC4, Line Code is HDB3 No alarms detected EMIAL boway@263.net 11

12 Data in current interval (725 seconds elapsed): 0 Line Code Violations, 0 Path Code Violations 0 Slip Secs, 0 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins 0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Sec s Total Data (last 24 hours) 0 Line Code Violations, 0 Path Code Violat ions, 0 Slip Secs, 0 Fr Loss Secs, 0 Line Err Secs, 0 Degraded Mins, 0 Errored Secs, 0 Bursty Err Secs, 0 Severely Err Secs, 0 Unavail Sec s E1 3 64K, NO-CRC4,, : shanxi#wri t Building configuration... Current configuration: version 11.2 no service udp-small-servers no service tcp-small-servers hostname shanxi enable secret 5 $1$XN08$Ttr8nfLoP9.2RgZhcBzkk/ enable password shanxi ip subnet-zero controller E1 0 framing NO-CRC4 channel-group 0 timeslots 1 channel-group 1 timeslots 2 channel-group 2 timeslots 3 interface Ethernet0 ip address media-type 10BaseT interface Ethernet1 no ip address shutdown EMIAL boway@263.net 12

13 interface Serial0:0 ip address no ip mroute-cache interface Serial0:1 ip address no ip mroute-cache interface Serial0:2 ip address no ip mroute-cache no ip classless ip route Serial0:0 ip route Serial0:1 ip route Serial0:2 line con 0 line aux 0 line vty 0 4 password shanxi login end PPP PPP(Point-to-Point Protocol) SLIP(Serial Line IP protocol) (router-to-router) (host-to-network) CHAP(Challenge Handshake Authentication Protocol) PAP(Password Auth entication Protocol) (PAP) PPP CHAP PAP, CHAP PAP RFC PPP encapsulation ppp1 ppp authentication {chap chap pap pap chap pap} [i f-needed] [list-name default] [callin] username name password secret EMIAL boway@263.net 13

14 DCE clockrate speed 1 CHAP/PAP PPP Cisco PPP Cisco HDLC 2. Router1 Router2 S0 PPP CHAP Rou ter1 rout er2 Router2 router1 password Router1: hostname router1 username router2 password xxx interface Serial0 ip address clockrate ppp authentication chap Router2: hostname router2 username router1 password xxx interface Serial0 ip address ppp authentication chap X X25 X.25 OSI X.25 X EMIAL boway@263.net 14

15 25 LAPB Link Access Procedure, Balanced DTE/DCE X.25 X.25 DTE DCE PSE DTE X.25 Cisco DTE DCE PSE X.25 x.25 x.1 21 SVC x.25 x.121 x.25 x.121 htc x.25 X.25 PVC DDN 2. : X.25 encapsulation x25 [dce] X.121 x25 address x.121-address x25 map protocol address [protocol2 address2 [...[protocol9 address9]]] x121-address [option] x25 htc citcuit-number1 x25 nvc count2 x25 x25 idle minutes x25 svc pvc clear x25 {serial num ber cmns-interface mac-address} [vc-number] 3 x25 clear x25-vc x25 show interfaces serialshow x25 interfaceshow x 25 mapshow x25 vc Cisco x.25 x25( clear x25 {seria l number cmns-interface mac-address} [vc-number] clear x25-vc ) x svc /24, NAT ISDN 26 3 Internet 263 ISDN EMIAL boway@263.net 15

16 PPP/IPCP IP ip address negotiated ip nat {inside outside} ppp/pap ppp authentication pap callin 1 dialer-group 1 1 IP dialer-list 1 protocol ip permit 2633 dialer string ppp pap sent-username 263 password 263 ip route bri 0 2 bri 0 ip nat insid e source list 2 interface bri 0 overload 2 access-list 2 permit any hostname Cisco2503 isdn switch-type basic-net3 ip subnet-zero no ip domain-lookup ip routing interface Ethernet 0 ip address ip nat inside no shutdown interface Serial 0 shutdown no description no ip address interface Serial 1 shutdown no description no ip address interface bri 0 ip address negotiated ip nat outside encapsulation ppp ppp authentication pap callin ppp multilink dialer-group EMIAL boway@263.net 16

17 dialer hold-queue 10 dialer string 2633 dialer idle-timeout 120 ppp pap sent-username 263 password 263 no cdp enable no ip split-horizon no shutdown ip classless Static Routes ip route bri 0 Access Control List 2 access-list 2 permit any dialer-list 1 protocol ip permit Dynamic NAT ip nat inside source list 2 interface bri 0 overload snmp-server community public ro line console 0 exec-timeout 0 0 line vty 0 4 end 5. Cisco765M ISDN 263 Cisco765 Cisco Cisco Internet >set system c765 c765> set multidestination on c765> set switch net3 c765> set ppp multilink on c765> cd lan c765:lan> set ip routing on c765:lan> set ip address c765:lan> set ip netmask EMIAL boway@263.net 17

18 c765:lan> set briding off c765:lan>cd c765> set user remotenet New user remotenet being created c765:remotenet> set ip routing on c765:remotenet> set bridging off c765:remotenet> set ip framing none c765:remotenet> set ppp clientname 263 c765:remotenet> set ppp password client Enter new Password: 263 Re-Type new Password: 263 c765:remotenet> set ppp authentication out none c765:remotenet> set ip address c765:remotenet> set ip netmask c765:remotenet> set ppp address negotiation local on c765:remotenet> set ip pat on c765:remotenet> set ip route destination /0 gateway c765:remotenet> set number 2633 c765:remotenet> set active set system c765 set multidestination on ISDN NET3 set switch net3 set ppp multilink on set briding off - set user remotenet PPP/IPCP set ip framing none set ppp clientname 263 set ppp password cliententer new Password: 263Re-Type ne w Password: 263 PPP/CHAP PAP set ppp authentication out none set ppp address negotiation local on set ip pat on set ip route destination /0 gateway ISP set number 2633 set active PSTN (PSTN) EMIAL boway@263.net 18

19 (DDR) ISP 1. Router1: interface Serial0 encapsulation x25 ip address x25 address x25 htc 16 x25 nvc 2 x25 map ip broadcast x25 map ip broadcast Router2: interface Serial0 encapsulation x25 ip address x25 address EMIAL boway@263.net 19

20 x25 htc 16 x25 nvc 2 x25 map ip broadcast x25 map ip broadcast Router: interface Serial0 encapsulation x25 ip address x25 address x25 htc 16 x25 nvc 2 x25 map ip broadcast x25 map ip broadcast clear x25-vc show interfaces serial show x25 map show x25 route show x25 vc 3.2. router1 router2 svc router r outer1 router2 svc RIP router1 router2 router1 router2 Subinterface split horizon ( X.25 Frame Relay) (vc) C isco subinterface, split horizon EMIAL boway@263.net 20

21 Router1: interface Serial0 encapsulation x25 ip address x25 address x25 htc 16 x25 nvc 2 x25 map ip broadcast router rip network Router2: interface Serial0 encapsulation x25 ip address x25 address x25 htc 16 x25 nvc 2 x25 map ip broadcast router rip network Router: interface Serial0 encapsulation x EMIAL boway@263.net 21

22 x25 address x25 htc 16 x25 nvc 2 interface Serial0.1 point-to-point ip address x25 map ip broadcast interface Serial0.2 point-to-point ip address x25 map ip broadcast router rip network network EMIAL boway@263.net 22

23 Frame Relay 1. WAN OSI X.25 X.25 WAN X.25 WAN OSI X.25 X.25 DTE DCE Cisco DTE DLCI DLCI PVC SVC LMI 2. : Frame Relay encapsulation frame-relay[ietf] EMIAL boway@263.net 23

24 Frame Relay LMI frame-relay lmi-type {ansi cisco q933 a}2 interface interface-type interface-number.subinterface -number [multipoint point-to-point] DLCI frame-relay map protocol protocol-address dlci [broadcast]3 FR DLCI frame-relay interface-dlci dlci [broadcast] 1. Cisco Internet IETF 2. Cisco IOS 11.2 LMI LMI L MI 3.broadcast 3. point to point Router1: interface serial 0 encapsulation frame-relay interface serial 0.1 point-to-point ip address frame-reply interface-dlci 105 interface serial 0.2 point-to-point ip address EMIAL boway@263.net 24

25 frame-reply interface-dlci 102 interface serial 0.3 point-to-point ip address frame-reply interface-dlci 104 Router2: interface serial 0 encapsulation frame-relay interface serial 0.1 point-to-point ip address frame-reply interface-dlci 201 interface serial 0.2 point-to-point ip address frame-reply interface-dlci 203 show frame-relay lmi show frame-relay map show frame-relay pvc show frame-relay route show interfaces serial 4. Multipoint : EMIAL boway@263.net 25

26 Router1: interface serial 0 encapsulation frame-reply interface serial 0.1 multipoint ip address frame-reply map ip broadcast frame-reply map ip broadcast frame-reply map ip broadcast Router2: interface serial 0 encapsulation frame-reply interface serial 0.1 multipoint ip address frame-reply map ip broadcast frame-reply map ip broadcast frame-reply map ip broadcast ISDN 1. ISDN ISDN ISDN BRI 2 B 1 D 2B+D BRI B 64Kbps, D 16Kbps ISDN PRI 23 B 1 D 1.544Mbps D 64Kbps ISDN PRI 30 B 1 64Kbps D 2.048Mbps ISDN PRI 30B+D 2. ISDN isdn switch-type switch-type1 interface bri 0 PPP encapsulation ppp dialer map protocol next-hop-address [na me hostname] [broadcast] [dial-string] PPP ppp multilink B dialer load-threshold load ISDN show isdn {active history memory services s tatus [dsl interface-type number] timers} 1., basic-net3 Australia EMIAL boway@263.net 26

27 basic-ts013 Australian TS013 switches Europe basic-1tr6 German 1TR6 ISDN switches basic-nwnet3 Norway NET3 switches (phase 1) basic-net3 NET3 ISDN switches (UK, Denmark, and other nations); cover s the Euro-ISDN E-DSS1 signalling system primary-net5 NET5 switches (UK and Europe) vn2 French VN2 ISDN switches vn3 French VN3 ISDN switches Japan ntt Japanese NTT ISDN switches primary-ntt Japanese ISDN PRI switches North America basic-5ess AT&T basic rate switches basic-dms100 NT DMS-100 basic rate switches basic-ni1 National ISDN-1 switches primary-4ess AT&T 4ESS switch type for the U.S. (ISDN PRI only) primary-5ess AT&T 5ESS switch type for the U.S. (ISDN PRI only) primary-dms100 NT DMS-100 switch type for the U.S. (ISDN PRI only) New Zealand basic-nznet3 New Zealand Net3 switches 3. ISDN DDR dial-on-demand routing EMIAL boway@263.net 27

28 Router1: hostname router1 user router2 password cisco isdn switch-type basic-net3 interface bri 0 ip address encapsulation ppp dialer map ip name router2 572 dialer load-threshold 80 ppp multilink dialer-group 1 ppp authentication chap dialer-list 1 protocol ip permit Router2: hostname router2 user router1 password cisco isdn switch-type basic-net3 interface bri 0 ip address encapsulation ppp dialer map ip name router1 571 dialer load-threshold 80 ppp multilink dialer-group 1 ppp authentication chap dialer-list 1 protocol ip permit Cisco Router1 Callback Server, Router2 Callback Client : PPP dialer map protocol address name hostname class classname dial EMIAL boway@263.net 28

29 -string PPP ppp callback accept PPP map-class dialer classname dialer map. dialer callback-server [username] PPP ppp callback request Router1: hostname router1 user router2 password cisco isdn switch-type basic-net3 interface bri 0 ip address encapsulation ppp dialer map ip name router2 class s3 572 dialer load-threshold 80 ppp callback accept ppp multilink dialer-group 1 ppp authentication chap map-class dialer s3 dialer callback-server username dialer-list 1 protocol ip permit Router2: hostname router2 user router1 password cisco isdn switch-type basic-net3 interface bri 0 ip address encapsulation ppp dialer map ip name router1 571 dialer load-threshold 80 ppp callback request ppp multilink dialer-group 1 ppp authentication chap EMIAL boway@263.net 29

30 dialer-list 1 protocol ip permit debug dialer debug isdn event debug isdn q921 debug isdn q931 debug ppp authentication debug ppp error debug ppp negotiation debug ppp packet show dialer show isdn status : debug dialer router2 router1,router1 router2. router1#debug dialer router2#ping router1# 00:03:50: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 00:03:50: BRI0:1:PPP callback Callback server starting to router :03:50: BRI0:1: disconnecting call 00:03:50: %LINK-3-UPDOWN: Interface BRI0:1, changed state to down 00:03:50: BRI0:1: disconnecting call 00:03:50: BRI0:1: disconnecting call 00:03:51: %LINK-3-UPDOWN: Interface BRI0:2, changed state to up 00:03:52: callback to router2 already started 00:03:52: BRI0:2: disconnecting call 00:03:52: %LINK-3-UPDOWN: Interface BRI0:2, changed state to down 00:03:52: BRI0:2: disconnecting call 00:03:52: BRI0:2: disconnecting call 00:04:05: : Callback timer expired 00:04:05: BRI0:beginning callback to router :04:05: BRI0: Attempting to dial :04:05: Freeing callback to router :04:05: %LINK-3-UPDOWN: Interface BRI0:1, changed state to up 00:04:05: BRI0:1: No callback negotiated 00:04:05: %LINK-3-UPDOWN: Interface Virtual-Access1, changed state to up 00:04:05: dialer Protocol up for Vi1 00:04:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0:1, cha EMIAL boway@263.net 30

31 nged state to up 00:04:06: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Acc ess1, chang ed state to up 00:04:11: %ISDN-6-CONNECT: Interface BRI0:1 is now connected to 572 #router1 4. ISDN 263 : /24, NAT ISDN 26 3 Internet 263 ISDN PPP/IPCP IP ip address negotiated ip nat {inside outside} ppp/pap ppp authentication pap callin 1 dialer-group 1 1 IP dialer-list 1 protocol ip permit 2633 dialer string ppp pap sent-username 263 password 263 ip route bri 0 2 bri 0 ip nat insid e source list 2 interface bri 0 overload 2 access-list 2 permit any hostname Cisco EMIAL boway@263.net 31

32 isdn switch-type basic-net3 ip subnet-zero no ip domain-lookup ip routing interface Ethernet 0 ip address ip nat inside no shutdown interface Serial 0 shutdown no description no ip address interface Serial 1 shutdown no description no ip address interface bri 0 ip address negotiated ip nat outside encapsulation ppp ppp authentication pap callin ppp multilink dialer-group 1 dialer hold-queue 10 dialer string 2633 dialer idle-timeout 120 ppp pap sent-username 263 password 263 no cdp enable no ip split-horizon no shutdown ip classless Static Routes ip route bri 0 Access Control List EMIAL boway@263.net 32

33 access-list 2 permit any dialer-list 1 protocol ip permit Dynamic NAT ip nat inside source list 2 interface bri 0 overload snmp-server community public ro line console 0 exec-timeout 0 0 line vty 0 4 end 5. Cisco765M ISDN 263 Cisco765 Cisco Cisco Internet >set system c765 c765> set multidestination on c765> set switch net3 c765> set ppp multilink on c765> cd lan c765:lan> set ip routing on c765:lan> set ip address c765:lan> set ip netmask c765:lan> set briding off c765:lan>cd c765> set user remotenet New user remotenet being created c765:remotenet> set ip routing on c765:remotenet> set bridging off c765:remotenet> set ip framing none c765:remotenet> set ppp clientname 263 c765:remotenet> set ppp password client Enter new Password: 263 Re-Type new Password: 263 c765:remotenet> set ppp authentication out none c765:remotenet> set ip address c765:remotenet> set ip netmask c765:remotenet> set ppp address negotiation local on EMIAL boway@263.net 33

34 c765:remotenet> set ip pat on c765:remotenet> set ip route destination /0 gateway c765:remotenet> set number 2633 c765:remotenet> set active set system c765 set multidestination on ISDN NET3 set switch net3 set ppp multilink on set briding off - set user remotenet PPP/IPCP set ip framing none set ppp clientname 263 set ppp password cliententer new Password: 263Re-Type ne w Password: 263 PPP/CHAP PAP set ppp authentication out none set ppp address negotiation local on set ip pat on set ip route destination /0 gateway ISP set number 2633 set active PSTN (PSTN) (DDR) ISP EMIAL boway@263.net 34

35 1.1. Access Server Cisco2511, IP. WIN95 username username password password IP ip local pool {default pool-name low-ip-address [high-ip-address]} ip address-pool [dhcp-proxy-client local] PPP encapsulation ppp async default routing PPP async mode {dedicated interactive} IP peer default ip address {ip-address dhcp pool [pool-name]} IP Ethernet0 ip unnumbered ethernet0 line modem modem {inout dialin} modem modem autoconfig discovery speed speed flowcontrol {none software [lock] [in out] EMIAL 35

36 hardware [in out]} autocommand command Router: hostname Router enable secret 5 $1$EFqU$tYLJLrynNUKzE4bx6fmH// interface Ethernet0 ip address interface Async1 ip unnumbered Ethernet0 encapsulation ppp keepalive 10 async mode interactive peer default ip address pool Cisco2511-Group-142 ip local pool Cisco2511-Group line con 0 exec-timeout 0 0 password cisco line 1 16 modem InOut modem autoconfigure discovery flowcontrol hardware line aux 0 transport input all line vty 0 4 password cisco end show interface show line 1.2. Access Server Tacacs WINDOWS NT Tacacs , Cis co2511 Easy ACS EMIAL boway@263.net 36

37 AAA aaa new-model Tacacs+ AAA aaa authentication login default tacacs+ no_tacacs ENABLE aaa authentication login no_t acacs enable PPP Tacacs+ aaa authentication ppp default tacacs+ TACACS+ EXEC aaa authorization exec tacacs+ TACACS+ aaa authorization network t acacs+ EXEC. TACACS+ aaa accou nting exec start-stop tacacs+ SLIP,PPP,PPP NCPs,ARAP. TACACS+ aaa accounting network start-stop t acacs+ Tacacs tacacs-server host Tacacs+ tac tacacs -server key tac hostname router aaa new-model aaa authentication login default tacacs+ aaa authentication login no_tacacs enable aaa authentication ppp default tacacs+ aaa authorization exec tacacs+ aaa authorization network tacacs+ aaa accounting exec start-stop tacacs+ aaa accounting network start-stop tacacs+ enable secret 5 $1$kN4g$CvS4d2.rJzWntCnn/0hvE0 interface Ethernet0 ip address interface Serial0 no ip address shutdown interface Serial1 no ip address shutdown EMIAL boway@263.net 37

38 interface Group-Async1 ip unnumbered Ethernet0 encapsulation ppp async mode interactive peer default ip address pool Cisco2511-Group-142 no cdp enable group-range 1 16 ip local pool Cisco2511-Group tacacs-server host tacacs-server key tac line con 0 exec-timeout 0 0 password cisco login authentication no_tacacs line 1 16 login authentication tacacs modem InOut modem autoconfigure type usr_courier autocommand ppp transport input all stopbits 1 rxspeed txspeed flowcontrol hardware line aux 0 transport input all line vty 0 4 password cisco end 2. DDR dial-on-demand routing EMIAL boway@263.net 38

39 Cisco 2500 aux DDR Router1 Router2 PPP/CHAP Router1 Router2 er1 Router2 Rout password modem chat-script script-name EXPECT SEND EXPE CT SEND (etc.) dialer idle-timeout seconds dialer map protocol next-hop-address [na me hostname] [broadcast] [modem-scriptmodem-regexp] [system-script sy stem-regexp] [dial-string] dialer string dial-string chat-script script {dialer reset} s cript-name Router1: hostname Router1 enable secret 5 $1$QKI7$wXjpFqC74vDAyKBUMallw/ username Router2 password cisco chat-script cisco-default "" "AT" TIMEOUT 30 OK "ATDT T" TIMEOUT 30 CONNECT c interface Ethernet0 ip address EMIAL boway@263.net 39

40 interface Async1 ip address encapsulation ppp async default routing async mode dedicated dialer in-band dialer idle-timeout 60 dialer map ip name Router2 modem-script cisco-default 57 3 dialer-group 1 ppp authentication chap ip route dialer-list 1 protocol ip permit line con 0 line aux 0 modem InOut modem autoconfigure discovery flowcontrol hardware Router2: hostname Router2 enable secret 5 $1$F6EV$5U8puzNt2/o9g.t56PXHo. username Router1 password cisco interface Ethernet0 ip address interface Async1 ip address encapsulation ppp async default routing async mode dedicated dialer in-band dialer idle-timeout 60 dialer map ip name Router1 dialer-group 1 ppp authentication chap ip route EMIAL boway@263.net 40

41 dialer-list 1 protocol ip permit line con 0 line aux 0 modem InOut modem autoconfigure discovery flowcontrol hardware debug dialer debug ppp authentication debug ppp error debug ppp negotiation debug ppp packet show dialer 3. DDN DDN DDN S0 up line protocol up, standby line protocol down down X.25 X.25 X.25 line protocol up, 4 X.25 backup delay {enable-d EMIAL boway@263.net 41

42 elay never} {disable-delay never} backup interface type number hostname c2522rb enable secret 5 $1$J5vn$ceYDe2FwPhrZi6qsIIz6g0 enable password cisco username c4700 password 0 cisco ip subnet-zero chat-script cisco-default "" "AT" TIMEOUT 30 OK "ATDT T" TIMEOUT 30 CONNECT c chat-script reset atz interface Ethernet0 ip address no ip mroute-cache interface Serial0 backup delay backup interface Serial2 ip address no ip mroute-cache no fair-queue interface Serial1 no ip address no ip mroute-cache shutdown interface Serial2 physical-layer async ip address encapsulation ppp async mode dedicated dialer in-band dialer idle-timeout 60 dialer map ip name c dialer-group 1 ppp authentication chap interface Serial3 no ip address EMIAL boway@263.net 42

43 shutdown no cdp enable interface Serial4 no ip address shutdown no cdp enable interface Serial5 no ip address no ip mroute-cache shutdown interface Serial6 no ip address no ip mroute-cache shutdown interface Serial7 no ip address no ip mroute-cache shutdown interface Serial8 no ip address no ip mroute-cache shutdown interface Serial9 no ip address no ip mroute-cache shutdown interface BRI0 no ip address no ip mroute-cache shutdown router eigrp 200 network ip classless dialer-list 1 protocol ip permit EMIAL boway@263.net 43

44 line con 0 line 2 script dialer cisco-default script reset reset modem InOut modem autoconfigure discovery rxspeed txspeed flowcontrol hardware line aux 0 line vty 0 4 password cisco login end c2522rb# 4. X.25: X.25, X.25,. EIGRP, Metric 200, EIGRP Metric 90,, Metric, X.25, X.25 Metric EMIAL boway@263.net 44

45 Router1 : hostname router1 enable secret 5 $1$UTvD$99YiY2XsRMxHudcYeHn.Y. enable password cisco username router2 password cisco ip subnet-zero chat-script cisco-default "" "AT" TIMEOUT 30 OK "ATDT T" TIMEOUT 30 CONNECT c chat-script reset atz interface Ethernet0 ip address interface Serial0 ip address encapsulation x25 x25 address x25 htc 16 x25 map ip broadcast interface Serial1 no ip address shutdown interface Async 1 ip address encapsulation ppp dialer in-band dialer idle-timeout 60 dialer map ip name router2 modem-script cisco-default dialer-group 1 ppp authentication chap router eigrp 200 redistribute connected network ip route dialer-list 1 protocol ip permit EMIAL boway@263.net 45

46 line con 0 line aux 0 script dialer cisco-default script reset reset modem InOut modem autoconfigure discovery transport input all rxspeed txspeed flowcontrol hardware line vty 0 4 password cisco login end Router2 : hostname router2 enable secret 5 $1$T4IU$2cIqak8f/E4Ug6dLT0k.J0 enable password cisco username router1 password cisco ip subnet-zero chat-script cisco-default "" "AT" TIMEOUT 30 OK "ATDT T" TIMEOUT 30 CONNECT c chat-script reset atz interface Ethernet0 ip address interface Serial0 ip address no ip mroute-cache encapsulation x25 x25 address x25 htc 16 x25 map ip broadcast interface Serial1 no ip address shutdown interface Async EMIAL boway@263.net 46

47 ip address encapsulation ppp keepalive 30 async default routing async mode dedicated dialer in-band dialer idle-timeout 60 dialer wait-for-carrier-time 120 dialer map ip name router1 modem-script cisco-default dialer-group 1 ppp authentication chap router eigrp 200 redistribute static network no ip classless ip route dialer-list 1 protocol ip permit line con 0 exec-timeout 0 0 line aux 0 script reset reset modem InOut modem autoconfigure discovery transport input all rxspeed txspeed flowcontrol hardware line vty 0 4 password cisco login end RIP RIP(Routing information Protocol) (Interior Gateway Protocol, IGP) (distance-vector) RFC1058 RFC EMIAL boway@263.net 47

48 RIP UDP 30 RIP (hop count) RIP RIP RIP router rip RIP version {1 2}1 network network 1.Cisco RIP 2 (CID R) (VLSMs) 2. Router1: router rip version 2 network network show ip protocol show ip route IGRP EMIAL boway@263.net 48

49 IGRP (Interior Gateway Routing Protocol) Cisco IGRP 90 3 ( 270 ) Cisco IOS 1. RIP router igrp autonomous-system1 network network neighbor ip-address 1 autonomous-system autonomous-sys tem, IGRP autonomous-system EMIAL boway@263.net 49