10路由器配置和應用V2VIP

1、Chapter 10 路由器配置和應用ISSUE 2.1日期：杭州華三通信技術有限公司 版權所有，未經(jīng)授權不得使用與傳播路由器的功能、結構和接口路由器的基本配置常見廣域網(wǎng)協(xié)議課程目標學習完本課程，您應該能夠：路由器的功能、結構和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄路由器工作流程IPETHPPP以太網(wǎng)口串口IPPPPETH串口以太網(wǎng)口協(xié)議封裝路由選擇協(xié)議轉換路由器路由器傳送拆包接收發(fā)送工作過程路由器的結構硬件組成CPU(處理器）RAM(存儲正在運行的配置文件)FLASH（負責保存OS的映像和路由器的微碼）NVRAM（保存配置件）ROM（加載OS）接口（完成路由器與其它設備的數(shù)據(jù)交換） 軟件結構

2、BOOT ROM：主要功能是路由器加電后完成有關初始化工作，并向內存中加入操作系統(tǒng)代碼COMWARE：H3C路由器上運行的軟件平臺COMWARE體系結構中低端路由器發(fā)展路標低端路由器R1600/2500介入中低端路由器之間R1760中端路由器R2600/3600增強型中端路由器R2630E/R3600E智能型中端路由器R2611/261019961998200220032000ADSL寬帶接入路由器4/8口語音網(wǎng)關冗余電源款型R2600-RPS/3600-RPS2004AR18,28,46系列路由器Aolynk路由器路由器的功能、結構和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄AR28-31備份口

3、配置口配置路由器通過console口配置通過撥號遠程配置通過telnet方式配置通過啞終端方式配置通過FTP方式傳送配置文件通過console口配置建立本地配置環(huán)境配置口(Console)配置口（console）電纜R232 串口 創(chuàng)建超級終端（II）選擇串口（III）端口設置（IV）通過撥號線路配置路由器將路由器和PC分別與modem連接 備份電纜modemmodemPSTN/ISDN通過Telnet配置本地路由器H3C-Ethernet0/0ip address 00 24 缺省的telnet登錄用戶名：admin 口令：admin服務器PC工作站工作站10Base-T 網(wǎng)口通過啞終端配置

4、H3C-Serial0/0physical-mode async同/異步串口通過FTP配置在路由器上啟動FTP服務器在終端上啟動FTP客戶端程序FTP serverFTP clientEthernet命令行概述用戶視圖系統(tǒng)視圖 RIP視圖OSPF視圖BGP視圖以太網(wǎng)接口視圖同步串口視圖Dialer接口視圖進入路由器配置界面 User interface Con 0 is available. Press ENTER to get started. console用戶視圖常用命令? cdChange current directory debugging Enable system debugg

5、ing functions delete Delete a file displayDisplay current system informationpingSend echo messagessaveSave current configuration resetReset operationreboot Reboot system系統(tǒng)視圖常用命令system-viewH3C?aclSpecify acl configuration information arpAdd static ARP entry bgpSpecify BGP(Border Gateway Protocol) con

6、figuration informationfirewallSpecify firewall configuration information ipsecSpecify IPSec(IP Security) configuration information local-userSpecify local user configuration information pppSpecify PPP(the Point-to-Point Protocol)接口視圖命令H3Cinterface s0/0 H3C-Serial0/0？ baudrateSet transmit and receive

7、 baudrate async Asynchronous line configuration command ipSpecify IP configuration information shutdownShut down the specified interface physical-mode Set synchronous or asynchronous mode on serial interfacedialer Specify DCC(Dial-Control-Center) configuration information quit Exit from current comm

8、and view loopbackSet loopback on an interface在線幫助H3C display ?aclAcl status and configuration information arp Display ARP entryaspf ASPF status and configuration information auto-config Specify auto configuration information bgp BGP status and configuration informationcurrent-configurationCurrent co

9、nfigurationdebuggingCurrent setting of debugging switches dhcp DHCP configuration subcommands diagnostic-information System Information for Diagnosis 命令行錯誤信息 H3Cdispaly ? % Unrecognized command found at position. H3Cdisplay % Incomplete command found at position. H3Cdisplay interface Serial 0/0 0 %

10、Too many parameters found at position.歷史命令display history-command補全命令使用Tab鍵查看歷史記錄使用 鍵使用Ctrl P快捷鍵歷史命令編輯特性普通按鍵 輸入字符到當前光標位置退格鍵BackSpace 刪除光標位置的前一個字符刪除鍵Delete 刪除光標位置字符左光標鍵 光標向左移動一個字符位置右光標鍵 光標向右移動一個字符位置上下光標鍵 顯示歷史命令Language中英文顯示方式切換暫停顯示時鍵入Ctrl+c 停止顯示和命令執(zhí)行暫停顯示時鍵入空格鍵繼續(xù)顯示下一屏信息暫停顯示時鍵入回車鍵繼續(xù)顯示下一行信息顯示特性狀態(tài)查看命令dis

11、play versiondisplay current-configurationdisplay interfacedisplay ip route 基本操作命令display versionH3Cdisplay version H3C Comware Platform Software Comware software, Version 3.40, Feature 1711P01 Copyright(c). Without the owners prior written consent, no decompiling nor reverse-engineering shall be all

12、owed. H3C AR18-22S-8 uptime is 0 week, 0 day, 4 hours, 48 minutes Last reboot 2000/01/01 00:00:00 CPU type: PowerPC 8248 400MHz 128M bytes SDRAM Memory 16M bytes Flash Memory 0K bytes NvRAM Memory Pcb Version:3.0 Logic Version:1.0 BootROM Version:14.52 SLOT 0 AUX (Hardware)3.0, (Driver)1.0, (Cpld)1.

13、0 display current-configurationH3Cdisplay current-configuration# sysname H3C# FTP server enable# domain default enable system#radius scheme system server-type extended primary authentication 1645 primary accounting 1646 user-name-format without-domain#domain system access-limit disable state active#

14、display interface顯示接口信息H3Cdisplay interface Serial 1/1Serial1/1 current state :UPLine protocol current state :UPDescription : Serial1/1 InterfaceThe Maximum Transmit Unit is 1500, Hold timer is 10(sec)Internet protocol processing : disabledInternet Address is /8 Link layer protocol is PPPLCP initial

15、Output queue : (Urgent queue : Size/Length/Discards) 0/50/0Output queue : (Protocol queue : Size/Length/Discards) 0/500/0Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0Physical layer is synchronous,Baudrate is 64000 bps, Interface has no cable Last 300 seconds input rate 0.00 bytes/sec,

16、0.00 packets/sec Last 300 seconds output rate 0.00 bytes/sec, 0.00 packets/sec Input: 0 packets, 0 bytes 0 broadcasts, 0 multicasts 0 errors, 0 runts, 0 giants 0 CRC, 0 align errors, 0 overruns 0 dribbles, 0 aborts, 0 no buffers 0 frame errors Output:0 packets, 0 bytes 0 errors, 0 underruns, 0 colli

17、sions 0 deferred DCD=UP DTR=UP DSR=UP RTS=UP CTS=UP H3C interface serial 0/0H3C-serial0/0 undo shutdown開啟或關閉端口開啟已經(jīng)關閉的端口H3C interface serial 0/0H3C-serial 0/0 shutdown人工關閉端口解讀端口狀態(tài)H3Cdisplay interface serial 0/0physical layer is synchronous, baudrate is 64000 bps, no cable Link-protocol is PPP LCP ini

18、tial, IPCP initial, IPXCP initial, CCP initialline protocol is downSerial0/0 is down,物理層組件的狀態(tài)數(shù)據(jù)鏈路層的狀態(tài)display ip routing-tableH3Cdis ip routing-tableRouting Tables:Destination/Mask proto pref Metric Nexthop Interface /0 Static 60 0 Serial0 /8 RIP 100 3 Serial0 /8 OSPF 10 50 Ethernet0 /8 RIP 100 4 Ser

19、ial0 /8 Static 60 0 Serial0 /8 Direct 0 0 Ethernet0 /32 Direct 0 0 LoopBack0 . terminal debuggingdebugging ? all All debugging functionsarp ARP moduleaspf ASPF moduleatm ATM modulebgp BGP modulebridge Debugging bridgedhcp DHCP moduledialer DCC moduledlsw Data Link Switching moduledns Domain name sys

20、tem module調試命令：debugging H3Cping PING : 56 data bytes, press CTRL_C to break Reply from : bytes=56 Sequence=0 ttl=255 time = 31 ms Reply from : bytes=56 Sequence=1 ttl=255 time = 31 ms Reply from : bytes=56 Sequence=2 ttl=255 time = 32 ms Reply from : bytes=56 Sequence=3 ttl=255 time = 31 ms Reply f

21、rom : bytes=56 Sequence=4 ttl=255 time = 31 ms - ping statistics - 5 packets transmitted 5 packets received 0.00% packet loss round-trip min/avg/max = 31/31/32 msping:網(wǎng)絡連通測試命令tracert:網(wǎng)絡連通測試命令 H3C tracert 86 traceroute to 86(86) 30 hops max,40 bytes packet 1 29 ms 22 ms 21 ms 2 86 38 ms 24 ms 24 ms路由

22、器的功能、結構和接口路由器的基本配置常見廣域網(wǎng)協(xié)議目錄廣域網(wǎng) V.24 ,V.35, X.21BisEIA/TIA-232/449LAPB,Frame Relay,HDLC,PPP,SDLC網(wǎng)絡層X.25物理層數(shù)據(jù)鏈路層路由器 A廣域網(wǎng)的下三層網(wǎng)絡層物理層數(shù)據(jù)鏈路層路由器 B廣域網(wǎng)的數(shù)據(jù)鏈路層專用點到點HDLC,PPP分組交換X.25,幀中繼電路交換PSTN:PPPISDN B信道:PPPISDN D信道:LAPD高級數(shù)據(jù)鏈路控制HDLC 面向比特 透明傳輸零比特填充法 運行于同步串行線路地址標志控制信息幀校驗標志HDLC協(xié)議的配置在接口上封裝HDLC協(xié)議link-protocol hdlc打

23、開HDLC所有報文調試信息開關 debugging hdlc all interface type number 打開HDLC事件調試信息開關 debugging hdlc event interface type number 打開HDLC數(shù)據(jù)包調試信息開關 debugging hdlc packet interface type number PPP配置命令封裝PPPlink-protocol ppp設置驗證類型ppp authentication-mode pap|chap 設置用戶名、口令、服務類型H3Clocal-user huaweiH3C-luser-huaweipassword

24、 simple sharepassH3C-luser-huaweiservice-type pppPAP配置命令驗證方配置配置驗證方式ppp authentication-mode pap配置用戶列表H3Clocal-user huaweiH3C-luser-huaweipassword simple sharepassH3C-luser-huaweiservice-type ppp被驗證方配置配置PAP用戶名ppp pap local-user username password simple|cipher passwordCHAP配置命令主驗證方配置：配置本地驗證對端（方式為CHAP） p

25、pp authentication-mode chap配置本地名稱 ppp chap user username將對端用戶名和密碼加入本地用戶列表 H3Clocal-user huawei H3C-luser-huaweipassword simple sharepass H3C-luser-huaweiservice-type ppp被驗證方配置:配置本地名稱密碼H3C-Serial0/0 ppp chap user usernameH3C-Serial1/1ppp chap password simple|cipher passwordPPP典型配置舉例一主驗證方被驗證方RouterA R

26、outerB PAP 驗證S0/0S0/0RouterAlocal-user routerb RouterA-luser-routerbpassword simple helloRouterA-luser-routerbservice-type pppRouterAinterface serial 0/0RouterA-Serial0/0ppp authentication-mode papRouterBinterface serial 0/0 RouterB-Serial0/0ppp pap local-user routerb password simple helloPPP典型配置舉例二

27、RouterARouterBCHAP 驗證S0/0S0/0RouterAlocal-user routerbRouterA-luser-routerbpassword simple helloRouterA-luser-routerbservice-type pppRouterAinterface serial 0/0RouterA-Serial0/0ppp chap user routeraRouterA-Serial0/0ppp authentication-mode chapRouterBlocal-user routera RouterB-luser-routerapassword s

28、imple helloRouterB-luser-routeraservice-type pppRouterBinterface serial 0/0RouterB-Serial0/0ppp chap user routerbRouterB-Serial0/0ppp authentication-mode chap主驗證方被驗證方幀中繼的配置封裝幀中繼協(xié)議link-protocol frame-relay MFR |nonstandard | ietf 配置幀中繼接口的終端類型fr interface-type dce | dte | nni 選擇LMI類型fr lmi type ansi |

29、 nonstandard | q933a 配置幀中繼地址映射手工配置靜態(tài)映射：fr map ip | ipx protocol-address dlci broadcast 動態(tài)建立：使能動態(tài)逆向地址解析協(xié)議fr inarp ip | ipx dlci 幀中繼地址映射也就是建立對端協(xié)議地址與本地DLCI的映射關系，該地址映射可靜態(tài)配置，也可動態(tài)建立配置幀中繼本地虛電路為主接口分配一條虛電路號fr dlci dlci配置幀中繼子接口創(chuàng)建幀中繼子接口，進入子接口配置模式interface type number.subinterface-number multipoint | point-to-point 配置幀中繼子接口的虛電路號fr dlci dlci建立地址映射的命令和物理接口相同，可以使用靜態(tài)或動態(tài)地址映射。地址映射只有在點到多點的情況下才需要配置子接口有兩種類型：點到點和點到多點配置幀中繼交換允許幀中繼進行PVC交換fr switching設置幀中繼接口類型fr interface-type dce | dte | nni 配置幀中繼PVC交換的路由H3C-Serial1/0