如何使用cisco常用命令

今天给小伙伴们介绍一下如何使用cisco常用命令:

如何使用cisco常用命令插图亿华云

进入特权模式

Routerenable

进入配置模式

Routerconfigure terminal

Routershow running-config

非特权模式下查看全局配置( do 在非特权模式下使用do show查看配置)

Routerconfig)#do show running-config

重启

Routerreload

保存配置

Routerwrite

清空配置

Routerwrite erase

删除命令

Routerconfig-if)#no ip address

修改主机名

Routerconfig)#hostname R1

设置进入特权模式的密码

Routerconfig)#enable password

设置远程登录

line vty 04
password cisco@123
login
//允许登录transport input telnet//允许协议

远程登录时查看日志信息

Routerterminal monitor

路由功能

Switchconfig)#ip routing //开启路由功能Switchconfig)#no ip routing //关闭路由功能Switchconfig)#ip default-gateway 192.168.1.254//设置默认网关

查看MAC地址表

Switchshow mac address-table

设置全/半双工

Routerconfig-if)#duplex full/half

路由管理距离(类似Huawei 优先级)

Routerconfig)#ip route0.0.0.00.0.0.01.1.1.1?ProtocolDistanceDirect0Static1Rip120
OSPF
110Eigrp90170
CDP
协议(思科私有,与LLDP相同)Routershow cdp neighbors
VLAN
,接口Switchconfig)#vlan 10,20,30//同时创建多个vlaninterfaceEthernet0/1
switchport access vlan
10
switchport mode access
interfaceEthernet0/2switchport trunk encapsulation dot1q//配置封装模式(Cisco默认私有模式ISL)
switchport trunk
native vlan 10//本征vlan(类似华为pvid)switchport mode trunk
switchport trunk allowed vlan all
switchport trunk allowed vlan
10switchport trunk allowed vlan remove10//不允许某个vlan通过子接口interfaceEthernet0/1.10//创建子接口
encapsulation dot1Q
10//封装vlan10ip address192.168.10.1255.255.255.0

DHCP

ip dhcp excluded-address 192.168.10.250192.168.10.254ip dhcp pool dhcp-pool
network
192.168.10.0255.255.255.0default-router 192.168.10.254
dns
-server 114.114.114.114Switchconfig-if)#ip helper-address 192.168.20.254//dhcp中继Routershow ip dhcp conflict //查看地址冲突Routerclear ip dhcp conflict *//清除dhcp冲突地址Routershow dhcp server

ACL

Routerconfig)#access-list 1permit192.168.10.10.0.0.0//基本aclRouterconfig)#access-list 100 permit tcp 192.168.10.10.0.0.0 eq 801.1.1.10.0.0.0 eq 8000//扩展acl//基于名称的acl(可以设置规则序号)Routerconfig)#ip access-list standard ciaco-acl
Routerconfig-std-nacl)#11 permit 192.168.1.10.0.0.0Routerconfig-if)#ip access-group1in/out//在接口上应用acl

NAT

interfaceEthernet0/0
ip address
192.168.10.1255.255.255.0
ip nat inside
//内网人口interfaceEthernet0/1
ip address
200.1.1.1255.255.255.0
ip nat outside
//外网出口
access
-list 10 permit 192.168.10.00.0.0.255ip nat inside source list10interfaceEthernet0/1//nat转换
ip nat inside source
static tcp 192.168.10.2323200.1.1.123//端口映射

链路聚合

Switchconfig)#interface range ethernet 0/2-3//创建接口组(类似port-group)Switchconfig-if-range)#channel-group12mode active//创建channel id(两端id不需要相同),设置模式// shutdown状态下配置,如果不成功更换channel idSwitchshow etherchannel summary//查看命令

VTP(私有用于vlan同步,只用于交换机间的接口是trunk口)

{vtp是危险协议,推荐修改为透明模式}Switchconfig)#vtp mode ?
client
Setthe device to client mode.//客户端模式(用于同步配置,不能创建修改删除vlan)
off
Set the device to off mode.//关闭
server
Setthe device to server mode.//服务器模式(同步配置,可以创建修改删除vlan)
transparent
Set the device to transparent mode.//透明模式(推荐配置,不会被同步)
vtp domain cisco
//创建vtp域名
vtp version
2//修改版本(v1,v2,v3存在版本兼容问题)
vtp password cisco@123
//设置认证密码

HSRP(类似vrrp)

interfaceEthernet0/1
ip address
192.168.1.2255.255.255.0
standby
12 ip 192.168.1.254//设置虚拟IP(standby id 两端必须一致)
standby
12 priority 110//设置优先级(默认100,越大越优)
standby
12 preempt //开启抢占

PPP

username admin password0 cisco@123 //设置用户,密码interfaceSerial1/0
ip address
192.168.10.1255.255.255.0
encapsulation ppp
//封装为PPP
ppp authentication chap
/pap //认证模式为chap或papinterfaceSerial1/0
ip address
192.168.10.2255.255.255.0encapsulation ppp
ppp chap hostname admin
ppp chap password ciaco@123
ppp pap sent
-username admin password ciaco@123

PPPoE

Serverbba-group pppoe Ciscovirtual-template1interfaceEthernet0/1no ip address
pppoe enable
groupCisco
username admin password
0cisco@123
ip
local pool pppoe-pool 200.1.1.2200.1.1.10//创建可分配的地址池interfaceVirtual-Template1
ip address
200.1.1.1255.255.255.0
peer
default ip address pool pppoe-pool
ppp authentication chap

Client:

interfaceEthernet0/1no ip address
pppoe enable
pppoe
-client dial-pool-number 1interfaceDialer1
ip address negotiated
ip mtu
1492//1500-ppp头部encapsulation ppp
ip tcp adjust
-mss 1452//1500-(ppp头部 ip头部 tcp头部)
dialer pool
1
ppp authentication chap callin
//启用chap验证ppp chap hostname admin
ppp chap password
0 cisco@123

GRE

interfaceTunnel10
ip address
10.1.1.1255.255.255.0
tunnel source
1.1.1.1//本端公网IP
tunnel destination
2.2.2.2//对端公网IP

以上就是关于“如何使用cisco常用命令”的相关解答,若有不清楚的可以咨询亿华云亿华云作为云南为数不错持有ICP/ISP/IDC等资质专业云计算提供商之一,成本控制良好,性价比高!提供各类云服务器产品及ICP备案一站式服务,操作简单快捷,7*24小时不间断售后运维技术支持,专业备案团队全力支持。

产品选购地址:

https://www.i658.com/

THE END
Copyright © 2024 亿华云