Collection of typical Cisco network configuration commands 02/21 Update SLTechnology News&Howtos

Collection of typical Cisco network configuration commands

2025-02-21 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Servers >

Shulou(Shulou.com)06/03 Report--

Cisco Firewall

3. Enter the command: enable, enter privileged mode, and the prompt is pixfirewall#.

4. Enter the command: configure terminal to initialize the system.

5. Configure etheric port parameters:

Interface ethernet0 auto (the auto option indicates the system adaptive Nic type)

Interface ethernet1 auto

6. Configure the IP address of the internal and external network card:

Ip address inside ip_address netmask

Ip address outside ip_address netmask

7. Specify an external address range:

Global 1 ip_address-ip_address

8. Specify the internal address to be translated:

Nat 1 ip_address netmask

9. Set default routes to intranets and extranets

Route inside 0 0 inside_default_router_ip_address

Route outside 0 0 outside_default_router_ip_address

10. Configure static IP address mapping:

Static outside ip_address inside ip_address

11. Set some control options:

Conduit global_ip port [- port] protocol foreign_ip [netmask]

Global_ip refers to the address to be controlled.

Port refers to the port being used, where 0 represents all ports

Protocol refers to connection protocols, such as TCP, UDP, etc.

Foreign_ip represents the external ip that can access the global_ip, where all ip are represented.

twelve。 Set the telnet options:

Telnet local_ip [netmask]

Local_ip indicates that the ip address of the pix is allowed to be accessed through telnet (if this is not set

The matching of PIX

Setting can only be done by consle).

13. Save the configuration:

Wr mem

14. Several common network test commands:

# ping

# show interface to view port status

# show static View static address Mapping

2900XL VLAN config

Switch# vlan database

Switch (vlan) # vtp domain domain-name

Switch (vlan) # vtp domain domain-name password password-value

Switch (vlan) # vtp server

Switch (vlan) # show vtp status

To Disable VTP, simply change the VTP mode to transparent

Namely Switch (vlan) # vtptransparent

two。 Activate VTP V2 (the switch defaults to VTP V1).

Switch# vlan database

Switch (vlan) # vtp v2-mode

Switch# show vtp status

3. Add VLAN. Catalyst 2900XL series switches support up to 64 active VLAN

VLAN ID number from 1Mel 1005.

Switch# vlan database

Switch (vlan) # vlan vlan-id name vlan-name

Switch# show vlan name vlan-name

Switch (vlan) # no vlan vlan-id / / Delete VLAN

4. Add the port to the VLAN.

Switch# configure terminal

Switch (config) # interface interface

Switch (config-if) # switchport mode access

Switch (config-if) # switchport access vlan vlan-id

Switch (config-if) # show interface interface-id switchport

5. Configure the trunk port.

Switch# configure terminal

Switch (config) # interface interface

Switch (config-if) # switchport mode trunk

Switch (config-if) # switchport trunk encapsulation isl

Switch (config-if) # end

Switch# show interface interface switchport

Switch# copy running-config startup-config

6. Configure the VLAN allowed on the trunk.

Switch (config) # interface interface

Switch (config-if) # switchport mode trunk

Switch (config-if) # switchport trunk allowed vlan remove vlan-id-range

Switch (config-if) # switchport trunk allowed vlan add vlan-id-range

Switch (config-if) # end

Switch# show interface interface switchport allowed-vlan

To cancel the trunk port, simply

Switch (config-if) # no switchport mode

7. Use STP to implement the load.

There are two ways to achieve load sharing:

1) use port priority.

Configuration:

Switch_1 (config-if) # interface fa0/1

Switch_1 (config-if) # spanning-tree vlan 8 9 10 port-priority 10

Switch_1 (config) # interface fa0/2

Switch_1 (config-if) # spanning-tree vlan 3 4 5 6 port-priority 10

2) use the path value. For example:

Switch_1 (config) # interface fa0/1

Switch_1 (config-if) # spanning-tree vlan 2 3 4 cost 30

Switch_1 (config) # interface fa0/2

Switch_1 (config-if) # spanning-tree vlan 8 9 10 cost 30

Configuration of Cisco HSRP

Version 12.0

Service timestamps debug uptime

Service timestamps log uptime

No service password-encryption

Hostname r1

Enable password cisco

Ip subnet-zero

Interface Ethernet0

Ip address 136.147.107.101 255.255.0.0

No ip redirects

No ip directed-broadcast

Standby 150 timers 5 15 / * define 150 groups to exchange hello messages once in 5 seconds, but not received in 15 seconds

The hello message starts to switch * /

Standby 150 priority 110 / * defines the weights of 150 groups of primary routers. The higher the value, the primary route.

The greater the hope * /

Standby 150preempt / * hsrp preemption of enable 150group * /

Standby 150 authentication cisco / * set 150 groups of router authentication strings * /

Standby 150 ip 136.147.107.100 / * defines the floating address of 150 groups, which is also this router

Gateway of the connected network * /

Standby 150 track Ethernet0 / * define the port for monitoring * /

Interface Serial0

No ip address

No ip directed-broadcast

No ip mroute-cache

Shutdown

No fair-queue

Ip classless

Line con 0

Transport input none

Line 1 16

Line aux 0

Line vty 0 4

Password cisco

End

Now the three places are interconnected with three Cisco, which can work normally.

But now it is necessary to back up the communication line between the central point and the two remote ends.

Plan to use ISDN dial-up backup.

Sample Configuration for C2503

C2503#wr t

Current configuration:

Version 10.2

Hostname C2503

Enable password test

Username C4000 password cisco (See username explanation in the followi

Section.)

Isdn switch-type basic-dms100

Interface Ethernet0

Ip address 172.16.10.1 255.255.255.0

Interface Serial0

No ip address

Shutdown

Interface Serial1

No ip address

Shutdown

Interface BRI0

Ip address 172.16.20.1 255.255.255.0

Encapsulation ppp

Bandwidth 56

Dialer idle-timeout 300

Dialer map ip 172.16.20.2 name C4000 speed 56 broadcast 14155551234

Dialer map ip 172.16.20.2 name C4000 speed 56 broadcast 14155556789

Dialer hold-queue 5

Dialer load-threshold 100

Dialer-group 1

Isdn spid1 408555432101 5554321

Isdn spid2 408555987601 5559876

Ppp authentication chap

Router igrp 1

Network 172.16.0.0

Ip route 192.168.24.0 255.255.255.0 172.16.20.2

Access-list 100 deny ip 0.0.0.0255.255.255.255 255.255.255.255 0.0.0.

Access-list 100 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.

two hundred and fifty five

Dialer-list 1 list 100

Line con 0

Line aux 0

Line vty 0 4

Password test

End

Explanation of C2503 Configuration

C2503#wr t

Current configuration:

Version 10.2

Hostname C2503

Enable password test

Username C4000 password cisco

The username "C4000" is the hostname of the remote router and is used

By the dialer map command below. The username is case sensitive and mu

St match the remote router's hostname exactly.

The password, which is used by the CHAP authentication process, is cas

E sensitive and must match the remote router's password exactly.

Note: To avoid confusion, the unencrypted form of the password cisco i

S shown in this sample configuration. In the actual configuration, the

Password would appear in its encrypted form: 7 13061E010803, where 7

Denotes the encryption type and 13061E010803 is the encrypted form of

The password cisco. When entering or making changes to the username co

Mmand, always type the password in its unencrypted form and do not ent

Er the encryption type (7). It is set automatically.

Isdn switch-type basic-dms100

The ISDN switch type must match your carrier's equipment. If you chang

E the switch-type, you must reload the router for the new switch type

To take effect.

Interface Ethernet0

Ip address 172.16.10.1 255.255.255.0

Interface Serial0

No ip address

Shutdown

Interface Serial1

No ip address

Shutdown

Interface BRI0

Ip address 172.16.20.1 255.255.255.0

Encapsulation ppp

PPP encapsulation is recommended over HDLC in order to allow the use o

F CHAP authentication.

Bandwidth 56

The default bandwidth setting for a BRI interface is 64k. If you confi

Gured your dialer map statements with the speed 56 option, you should

Include the bandwidth statement.

Note: This command does not control the speed of your ISDN line. It se

Ts the correct reference point for the BRI port's show interface stati

Stics, for the dialer load-threshold command, and for IGRP/EIGRP routi

Ng metrics.

Dialer idle-timeout 300

This command sets the number of seconds the ISDN connection will remai

N open if no interesting traffic is being routed. The timer is reset e

Ach time an interesting packet is forwarded.

Dialer map ip 172.16.20.2 name C4000 speed 56 broadcast 14155551234

Dialer map ip 172.16.20.2 name C4000 speed 56 broadcast 14155556789

The dialer map command is used with CHAP authentication to place the i

Nitial call to the remote router when interesting traffic is forwarded

To the BRI interface. Once the connection is active, the dialer idle-

Timeout command determines how long it will remain active. A dialer ma

P statement is required for each ISDN phone number that will be called

. Be aware though, that two dialer map statements pointing to the same

Location might activate both B channels when you may only want to use

One channel.

Note: The command parameters for this example are:

172.16.20.2 = the IP address of the remote router's BRI interface. To

Determine this address, type show interface bri 0 at the remote router

's console prompt.

Name C4000 = the hostname of the remote router. The name is case sensi

Tive and should match the name configured for the username command abo

Ve.

Speed 56 = sets the dialer speed to 56k for ISDN circuits that are not

64k end-to-end, and should be included in both routers' dialer map st

Atements. Most installations in North Americamust be configured for 5

6K.

Broadcast = allows the forwarding of broadcast packets. Unless broadca

St packets are specified as interesting packets by the dialer-list com

Mand, they will only be forwarded when the ISDN link is active.

14155551234

14155556789 = the remote router's ISDN telephone numbers.

Dialer hold-queue 5

This command allows interesting packets to be queued until the ISDN co

Nnection is established. In this example, five interesting packets wil

L be queued.

Dialer load-threshold 100

This command is used to configure bandwidth on demand by setting the m

Aximum load before the dialer places another call through the second B

Channel. The load is the calculated weighted average load value for t

He interface, where 1 is unloaded and 255 is fully loaded. The actual

Load value you should configure depends on the characteristics of your

Particular network. In this example, the second B channel will be act

Ivated when the load reaches 39% of maximum utilization, which is 100

Divided by 255.

Dialer-group 1

The dialer-group 1 command enables the dialer-list 1 on the BRI interf

Ace, which determines which packets will be interesting and activate t

He ISDN connection.

Isdn spid1 408555432101 5554321

Isdn spid2 408555987601 5559876

The isdn spid commands are used if your carrier assigns spids to your

ISDN lines.

Ppp authentication chap

This command enables CHAP authentication.

Router igrp 1

Network 172.16.0.0

Ip route 192.168.24.0 255.255.255.0 172.16.20.2

This IP route command creates a static route to the remote router's ne

Twork via the remote router's BRI interface. This is required because

Dynamic routes are lost when the ISDN link is down.

Note: The command parameters for this example are:

192.168.24.0 = the target network.

255.255.255.0 = the target network mask. A 255 in an octet's position

Specifies an exact match for that octet is required, and a 0 in an oct

Et's position specifies any value will match.

172.16.20.2 = the address of the next hop that can be used to reach th

E target network.

Access-list 100 deny ip 0.0.0.0 255.255.255.255 255.255.255.255 0.0.0.

Access-list 100 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.

two hundred and fifty five

This access list determines which IP packets will be interesting and a

Ctivate the ISDN link. The access-list you should create depends on yo

Ur particularnetwork design.

Note: The command parameters for this example are:

Access-list 100 deny ip 0.0.0.0 255.255.255.255 255.255.255.255 0.0.0.

Defines all broadcast packets as uninteresting.

Access-list 100 permit ip 0.0.0.0255.255.255.255 0.0.0.0255.255.255.255

Defines all other IP packets as interesting.

Dialer-list 1 list 100

This command points to access-list 100, which determines which IP pack

Ets will be interesting.

Line con 0

Line aux 0

Line vty 0 4

Password test

End

Sample Configuration for C4000

C4000#wr t

Current configuration:

Version 10.2

Hostname C4000

Enable password test

Username C2503 password cisco (See username explanation in the followi

Section.)

Isdn switch-type basic-dms100

Interface Ethernet0

Ip address 192.168.24.65 255.255.255.0

Interface Serial0

No ip address

Shutdown

Interface Serial1

No ip address

Shutdown

Interface BRI0

Ip address 172.16.20.2 255.255.255.0

Encapsulation ppp

Bandwidth 56

Dialer idle-timeout 300

Dialer map ip 172.16.20.1 name C2503 speed 56 broadcast 14085554321

Dialer map ip 172.16.20.1 name C2503 speed 56 broadcast 14085559876

Dialer hold-queue 5

Dialer load-threshold 100

Dialer-group 1

Isdn spid1 415555123401 5551234

Isdn spid2 415555678901 5556789

Ppp authentication chap

Router igrp 1

Network 172.16.0.0

Network 192.168.24.0

Ip route 172.16.10.0 255.255.255.0 172.16.20.1

Access-list 100 deny ip 0.0.0.0 255.255.255.255 255.255.255.255 0.0.0.

Access-list 100 permit ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.

two hundred and fifty five

Dialer-list 1 list 100

Line con 0

Line aux 0

Line vty 0 4

Password test

End

Explanation of C4000 Configuration

C4000#wr t

Current configuration:

Version 10.2

Hostname C4000

Enable password test

Username C2503 password cisco

The username "C2503" is the hostname of the remote router and is used