网络管理员必备：cisco设备配置

 cisco设备配置—前提配置：

 

en  

 

conf t  

 

no ip domain-lookup  

 

line con 0  

 

logg syn  

 

exec-time 0 0  

 

exit  

 

host r1 

cisco设备配置—VTP配置：

 

vtp domain domain_name  

 

vtp mode server/client/transparent  

 

vtp password password  

 

vtp pruning  

 

vtp version 2 

查看VTP配置：show vtp status

 

cisco设备配置—VLAN配置：

 

vlan database (特权模式)  

 

vlan 2 name caiwubu  

 

exit  

 

vlan 2 (全局模式) 

查看VLAN配置：show vlan brief

 

cisco设备配置—VLAN Trunk配置：

 

swit trunk encapsulation isl/dot1q/negotiate (接口里面，封装类型)  

 

swit mode trunk 

查看配置：show int f0/1 swit

 

以太网通道：

 

int rang f0/1 -f0/10  

 

swit mode trunk  

 

chan lacp;pagp  

 

channel-group 1 mode on  

 

exit 

cisco设备配置—三层交换配置：

 

ip routing  

 

no swt (改为路由接口)  

 

ip helper-add 192.168.1.1 (DHCP服务器地址) 

cisco设备配置—PVST+配置：

 

1.span vlan 2,4-6 pri 4096(倍数0-32768)  

 

2. root pri/sec  

 

span vlan 2 cost 150 (0-255)  

 

span vlan 2 por * 

查看配置：show span show span vlan * d

 

cisco设备配置—HSRP配置：

 

int vlan 2  

 

ip add 192.168.1.1 255.255.255.0  

 

stan 2 ip 192.168.1.254 (虚拟的IP地址)  

 

stan 2 pri 150 (0-255)  

 

stan 2 pree  

 

stan 2 track int f1/0 100 

查看HSRP：show stan b

 

cisco设备配置—ACL配置：

 

标准：acc 1(1-99) per(pre den) source(数据源地址)

 

int f0/0  

 

ip nat inside  

 

int f1/0  

 

ip nat outside  

 

int f0/0  

 

ip acc 1 in 

扩展：acc 101(100-199) per(pre/den) protocol(协议) 源地址 目标地址 --

 

命名：ip acc stan/ext test

 

per/den host 192.168.1.1

 

定时：time-range mytie

 

per wee 8:30 to 17:30

 

acc ....... time-range mytie

 

查看：show acc

 

cisco设备配置—NAT配置：

 

静态：ip nat ins sou sta 192.168.100.2 61.159.62.136

 

端口映射：ip nat ins sou sta tcp 192.168.100.2 80 61.159.62.131 8080 extendable

 

动态：acc 1 per 192.168.1.0 0.0.0.255

 

ip nat pool test0 61.159.62.131 62.159.62.190 netmask 255.255.255.192  

 

ip nat ins sou list 1 pool test0 overload  

 

PAT: acc 1 per 10.1.1.0 0.0.0.255  

 

1.ip nat pool test1 61.159.62.131 61.159.62.131 netmask 255.255.255.148  

 

ip nat ins sou list 1 pool test1 overload  

 

2.ip nat ins sou list 1 int f0/0 overload 

cisco设备配置—RIP配置：

 

router rip  

 

ver 2  

 

no au-  

 

network 192.168.1.0  

 

----- 

cisco设备配置—OSPF配置：

 

router ospf 1  

 

router-id 1.1.1.1  

 

network 10.0.0.0 0.0.0.3 area 0 

末梢区域：area 1 stub

 

完全末梢区域：area 1 stub no-su

 

ness：area 1 nssa

 

完全ness：area 1 nssa no-su

 

路由重分发：

 

router rip  

 

red ospf 1 metric 10  

 

router ospf 1  

 

red rip subnets  

 

def-in orig (默认)  

 

red sta subnets (静态)  

 

red conn subnets (直连)