ATEN命令<?XML:NAMESPACE PREFIX = O />

第一章命令

(1)創(chuàng)建VTP域：???????? vtp domain domain-name

(2)設(shè)置VTP模式：???? vtp mode [server\transparent\client]

(3)設(shè)置VTP密碼：???? vtp password password

(4)設(shè)置VTP修剪：???? vtp pruning

(5)配置VTP的版本：? vtp version 2

(6)查看VTP狀態(tài)信息：???? show vtp status

(7)查看VLAN信息：?? show vlan brief

第二章命令

(1)啟用生成樹：?? ????????????? spanning-tree vlan vlan-list

(2)配置交換機為根網(wǎng)橋：?? spanning-tree vlan vlan-list root primary | secondary

(3)修改交換機的優(yōu)先級：?? spanning-tree vlan vlan-list priority bridge-priority

(4)修改端口路徑成本：????? spanning-tree vlan vlan-list cost cost

(5)修改端口優(yōu)先級：????????? spanning-tree vlan vlan-list port-priority priority

(6)?配置上行速鏈路：???????? spanning-tree uplinkfast

(7)配置速端口：???????????????? spanning-tree portfast

(8)查看生成樹：???????????????? show spanning-tree

(9)查看某個VLAN的生成樹詳細信息：show spanning-tree vlan vlan-id detail

第三章命令

(1)配置三層交換機啟動路由功能：ip routing

(2)配置VLAN IP地址：????? interface vlan vlan-id

????????????????????????????????????????? Ip address ip-address subnet-mask

????????????????????????????????????????? No shutdown

(3)配置接口為三層模式：?? no switchport

(4)配置DHCP中繼轉(zhuǎn)發(fā)：?? int vlan vlan-id

????????????????????????????????????????? Ip helper-address Dhcpserver-address

(5)配置靜態(tài)路由：????? ?????? ip route targetnet-address netmask nexthop-address

(6)配置RIP協(xié)議：????? ?????? router rip

?????????????????????????????????? ?????? Network netaddress

(7)查看FIB表：???????????????? show ip cef

(8)查看鄰接關(guān)系表：????????? show adjacency detail

(9)查看路由表：???????????????? show ip route

第六章命令

(1)配置PPP協(xié)議：????? ?????? encapsulation ppp

(2)配置PPP 認證方式：???? ppp authentication

(3)配置CHAP認證用戶名：?????? ppp chap hostname

(4)配置CHAP認證密碼：?? ppp chap password

(5)配置為對端分配IP 地址：peer default ip address

(6)配置IP地址協(xié)商：???????? ip address negotialed

第八章命令

(1)配置Loopback接口地址： interface? loopback 0

????????????????????????? Ip address Ip 地址掩碼

(2)啟動OSPF進程： router ospf 進程號

(3)指定OSPF 協(xié)議運行的接口和所在的區(qū)域：network 網(wǎng)絡(luò)號反向掩碼 area 區(qū)域號

修改cost的值：???? ip ospf cost cost ?值

(4)配置OSPF計時器： ip ospf hello-interval? 時間(s)

???????????????????? ip ospf dead-interval? 時間(s)

(5)用于診斷的查看命令

? 查看鄰居列表：??????????? ?????? show ip ospf neighbor

? 查看鏈路狀態(tài)數(shù)據(jù)庫：? ?????? show ip ospf database

? 查看路由表：??????????????? ?????? show ip route

? 查看OSPF的配置：????? ?????? show ip ospf

? 查看OSPF接口數(shù)據(jù)結(jié)構(gòu)：??? show ip ospf interface 接口

第九章命令

末梢區(qū)域配置命令：

(1) 配置Stub Area（末梢區(qū)域）：??????????????????? area area-id stub

(2) 配置Totally Stubby Area （完全末梢)：???? area area-id stub no-summary

OSPF多域配置的常用檢查命令：

(1)查看路由表信息（直連/學習）：????????????????? show ip route

(2)只查看OSPF 學習到的路由：??????????????????? show ip route ospf

(3)查看OSPF協(xié)議配置信息：??????????????????????? show ip protocol

(4)查看在路由器上OSPF是如何配置的和ABR：????????? show ip ospf

(5)查看LSDB內(nèi)的所有LSA數(shù)據(jù)信息：??????????????????????? show ip ospf database

(6)接口上OSPF配置的信息

（進程ID，R-ID，Cost, Priority,鄰居的數(shù)量）:???????????? show ip ospf interface

(7)查看OSPF鄰居和鄰接的狀態(tài)（FULL表示鄰居狀態(tài)正常）：show ip ospf neighbor

(8)查看OSPF鄰居的詳細信息（包括DR/BDR）：???????? show ip ospf neighbor detail

(9)查看路由器“鄰接”的整個過程：?????????????????????????? debug ip ospf adj

(10)查看每個OSPF數(shù)據(jù)包的信息

（包括OSPF版本，R-ID，Area-ID）:?????????????????????????? debug ip ospf packet

(11)清空路由表：clear ip route

第十章命令

(1)配置非純末梢區(qū)域NSSA：??? area area-id nssa [no-summary]

(2)地址匯總：?????????????????????????? area area-id range ip-address mask (區(qū)域間路由匯總)

??????????? ??????????????????????????? Summary-address ip-address mask (外部路由匯總)

(3)配置路由重分發(fā)：???????????????? redistribute protocol [process-id] [metric metric-value] [metric-type type-value] [subnets]

(4)配置虛鏈路：??????????????????????? area area-id virtual-link route-id

(5)將RIP路由在OSPF NSSA 內(nèi)重分發(fā)：redistribute rip metric number

第十一章命令

HSRP的配置

(1)將路由器配置為HSRP的成員：?? standby group-number ip virtual-ip-address

(2)從HSRP組中取消一個端口：?????? no standby group ip

(3)配置HSRP的優(yōu)先級：???????????????? standby group-number priority priority-value

(4)配置HSRP的占先權(quán)：?? ????????????? standby group-number preempt

(5)配置HELLO消息的計時器：??????? standby group-number times hellotime holdtime

(6)配置HSRP的端口跟蹤：?????? standby group-number track type number interface-priority

(7)檢查HSRP的狀態(tài)：?????? show stabdby type-number group brief

(8)啟用調(diào)試功能:??????????????? debug standby

(9)關(guān)閉調(diào)試功能：???????????? no debug standby 或?debug all

????????????????????????????????? 第十二章命令

一．設(shè)置標準ACL

<!--[if !supportLists]-->1.?????? <!--[endif]-->創(chuàng)建允許172.16.0.0的流量的ACL

Access-list 1 permit 172.16.0.0 0.0.255.255

2.? 應用到接口f0/0和f1/0

?? Interface f0/0

?? Ip access-group <?XML:NAMESPACE PREFIX = ST1 />1 in

?? Interface f1/0

?? Ip access-group 1 out

3創(chuàng)建拒絕來自主機172.16.0.1的流量的ACL

? Access-list 1 deny? host? 172.16.0.1

二．配置擴展ACL

<!--[if !supportLists]-->1．? <!--[endif]-->拒絕所有從172.16.4.0到172.16.3.0的ftp通信流量通過f0/0

Access-list 101 deny tcp 172.16.4.0? 0.0.0.255? 172.16.3.0? 0.0.0.255? eq? 21

<!--[if !supportLists]-->2.?????? <!--[endif]-->應用到接口f0/0出口方向

Ip access-group 101 out

三．命名ACL

1. 創(chuàng)建名為name的命名ACL

?? Ip access-list extended name

<!--[if !supportLists]-->2．? <!--[endif]-->指定permit條件

permit tcp 172.16.1.0 ?0.0.0.255? 172.16.3.0 ?0.0.0.255? eq ?21

四．查看ACL列表

Show ip int f0/0

Show access-list 進程

第十三章命令

一.靜態(tài)NAT 的配置?????????????

<!--[if !supportLists]-->1.?????? <!--[endif]-->配置接口ip

2. 在內(nèi)局和內(nèi)全地址之間建立靜態(tài)地址轉(zhuǎn)換

ip nat inside source static local-ip global-ip

<!--[if !supportLists]-->3．? <!--[endif]-->在內(nèi)部與外部接口上啟用NAT

int f0/0

ip ant inside

int f1/0

ip nat outside

<!--[if !supportLists]-->二．<!--[endif]-->動態(tài)NAT配置

1．配置接口ip

2．定義內(nèi)部網(wǎng)絡(luò)中允許訪問外部網(wǎng)絡(luò)的訪問控制列表

?? Access-list 1 permit 172.168.100.0? 0.0.0.255

<!--[if !supportLists]-->3．? <!--[endif]-->定義合法ip地址

ip nat pool name?? 起始ip? 終止ip? netmask?

?如: ip ant pool test0 192.168.1.0? 192.168.3.0 netmask 255.255.255.0

<!--[if !supportLists]-->4.?????? <!--[endif]-->實現(xiàn)網(wǎng)絡(luò)地址轉(zhuǎn)換

ip nat inside source list 1 pool test0

5.? 在內(nèi)部和外部端口上啟NAT

int f0/0

ip nat outside

int f1/0

ip ant inside

<!--[if !supportLists]-->三．<!--[endif]-->PAT的配置

<!--[if !supportLists]-->1．? <!--[endif]-->使用外部全局地址

(1)配置接口ip

(2)定義內(nèi)部網(wǎng)絡(luò)中允許訪問外部網(wǎng)絡(luò)的訪問控制列表

?????? Access-list 1 permit 172.168.100.0? 0.0.0.255

(3)定義合法ip地址

ip nat pool name?? 起始ip? 終止ip? netmask?

如: ip ant pool test0 192.168.1.0? 192.168.3.0 netmask 255.255.255.0

(4)設(shè)置復用動態(tài)ip 地址轉(zhuǎn)換

ip nat inside source list 1 pool test0 overload

??? (5)在內(nèi)部和外部端口上啟NAT

int f0/0

ip nat outside

int f1/0

ip ant inside

? 2. 復用路由器外部接口地址

(1)配置接口ip

(2)為虛擬主機定義一個標準的ip 訪問列表

?? Access-list 1 permit 10.1.1.127

(3)給真實主機定義一個NAT地址集

? ip nat pool real-host 10.1.1.1 10.1.1.3 netmask 255.255.255.0 type rotary

(4)設(shè)置訪問控制列表與NAT地址集之間的映射

?? ip nat inside destination list 1 pool real-host

?(5)在內(nèi)部和外部端口上啟NAT

int f0/0

ip nat outside

int f1/0

ip ant inside

? 四.查看NAT地址轉(zhuǎn)換表

??? ??show ip nat translations

???? 調(diào)試命令

????? debug ip nat
第十四章命令

(1)啟用IKE???? ?????????????????? ???????? ??

?????? ?crypto isakmp enable

(2)建立IKE協(xié)商策略???? ???????????? ????

?????? ?crypto isakmp policy priority

(3)設(shè)置IKE所有的DH算法的復雜度? ???????????

?group[1\2]

(4)設(shè)置密角驗證所用的算法????????? ??? ?????? ?

?????? ?hash[md5\sha1]

(5)設(shè)置密碼所使用的算法????? ????????? ??????????

?encryption[des\3des]

(6)設(shè)置路由器要使用預先共享的密鑰?? ????

?????? ?authentication pre-share

(7)設(shè)置SA的生存時間??? ???????????? ???? ?

?????? ?lifetime seconds

(8)設(shè)置共享密鑰和對端地址?

?crypto isakmp key keystring address peer-address

(9)指定CRYPTO訪問列表??? ?????

?access-list access-list-number[deny\permit]protocol? source source-wildcard destination

(10)配置IPSEC傳輸模式 ??????

???? cryupto ipsec transform-set transform-set-name transform1 [transform2][transform3]

??????????????????????????????? 第十五章命令

IP電話配置

(1)定義端口電話號碼

??? dial-peer voice 1 ports

??? destination-pattern 1001(本端ip地址)

??? port 1/0/0

(2) 映射目的地電話號碼至ip地址

??? dial-peer voice 10 voip

??? destination-pattern 2001（對端ip地址）

??? session target ipv4:192.168.1.1（對端ip地址）

??????????????????????????????? 第十六章命令

(1)配置接口的ipv6地址

?? int f0/0

?? ipv6 address FEC0:0:0:1001::1/64

(2)在路由器上啟用ipv6的流量轉(zhuǎn)發(fā)

?? ipv6 unicast-routing

(3)在路由器上啟用ipv6的RIP路由協(xié)議

? ?ipv6 router rip name

(4)在接口上應用ipv6協(xié)議

?? int f0/0

?? ipv6 rip name enable

(5)查看ipv6地址的接口摘要信息

show ipv6 interface brief

(6)查看ipv6的路由表

?? show ipv6 route

?

轉(zhuǎn)載于:https://blog.51cto.com/winter82/191944

總結(jié)

以上是生活随笔為你收集整理的ATEN命令--北大青鸟benet课程的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。