迈普路由器配置手册 系统基础

䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
1
ᅮⱘ InfoExpress IOS 䜡㕂ੑҸˈҢ㗠䖒ࠄߚ㑻ֱᡸ㋏㒳ⱘⳂⱘˈ⹂ֱ㋏㒳ϡফ᳾㒣ᥜᴗⱘ䆓䯂DŽ Shell ᄤ㋏㒳ᔧࠡЎ䜡㕂ੑҸⱘ䖤㸠ᦤկҹϟ໮辵῵ᓣˈϡৠⱘ῵ᓣᇍᑨѢϡৠⱘ㋏㒳ᦤ冫ヺˈ⫼ҹᦤ
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
ࡴᆚবᤶ䜡㕂
crypto ipsec transform-set ੑҸ䖯ܹ
router(cfg-crypto-trans
῵ᓣ
䆹῵ᓣˈৠᯊࠊᅮⳌᑨⱘ )#
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
g䜡㕂ࡴᆚবᤶ䲚ড়
খ᭄
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
ࡴᆚ᯴ᇘ䜡㕂 crypto map ੑҸ䖯ܹ䆹 router(cfg-crypto-map)
೒ 1-1 InfoExpress ੑҸ㒧ᵘ῵ᓣ೒
1.3 ᨁᓎ䜡㕂⦃๗
⫼᠋ৃҹ䗮䖛ಯ辵䗨ᕘՓ⫼䏃⬅఼ᦤկⱘੑҸ㸠ˈϟ䴶ߚ߿ҟ㒡DŽ
䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
4
1.3.1 䗮䖛䜡㕂ষ˄Console˅䜡㕂䏃⬅఼
݊Ҫ䜡㕂῵ᓣ೼Ⳍ݇ゴ㡖Ё䖯㸠ҟ㒡ˈ㸼 1-1 ᦣ䗄њ৘辵ੑҸ῵ᓣⱘ䖯ܹᮍ⊩ঞ῵ᓣ䯈ⱘߛᤶᮍ⊩DŽ
㸼 1-1 InfoExpress ㋏㒳῵ᓣঞ݊ⳌѦ䯈ߛᤶᮍ⊩
῵ᓣৡ鹵
῵ᓣ䖯ܹᮍ⊩
㋏㒳ᦤ冫ヺ
䗔ߎᮍ⊩
ࡳ㛑䇈ᯢ
᱂䗮⫼᠋῵ᓣ Login
router>
ᠻ㸠 exit ੑҸ䗔ߎ
gᬍব㒜ッ䆒㕂 gᠻ㸠෎ᴀ⌟䆩 gᰒ冫㋏㒳ֵᙃ
2
䏃⬅䜡㕂῵ᓣ
೼ܼሔ䜡㕂῵ᓣϟᠻ㸠 Ⳍᑨⱘ䏃⬅䜡㕂ੑҸ
router(config-static)# router(config-rip)#
router(config-irmp)#
᭛ӊ㋏㒳䜡㕂 ೼ܼሔ῵ᓣϟ䗮䖛ੑҸ
router(config-fs)#
῵ᓣ
filesystem 䖯ܹ䆹῵ᓣ
g䜡㕂 IP phone ᥹ষ˗ g䜡㕂 E1 ᥹ষ g䜡㕂᥹ষ㒘
೼᱂䗮⫼᠋῵ᓣϟᠻ㸠
⡍ᴗ⫼᠋῵ᓣ enable ੑҸ
router#
gᠻ㸠 disable ੑҸ䗔ಲ ࠄ᱂䗮⫼᠋῵ᓣ
g䜡㕂䏃⬅఼䖤㸠খ᭄ gᠻ㸠 configure ੑҸ䖯 ܹࠄܼሔ䜡㕂῵ᓣ
೼⡍ᴗ⫼᠋῵ᓣϟᠻ㸠 ܼሔ䜡㕂῵ᓣ configure ੑҸˈৠᯊᣛᅮ router(config)#
Ⳍᑨⱘ݇䬂ᄫ
݀䩹䜡㕂῵ᓣ
៪㗙 addressed-key ੑҸ
router(config-pubkeykey)#
䖯ܹ䆹῵ᓣˈৠᯊࠊᅮⳌ
ᑨⱘ݇䬂ᄫ੠খ᭄
g䖤㸠 exit ੑҸ䗔ಲࠄ config-pubkey-chain ῵ g䜡㕂݀݅ᆚ䩹 ᓣ
䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
umber])#
೼䆹῵ᓣϟ䜡㕂䏃⬅఼᥹
gᠻ㸠 exit ੑҸ䗔ಲࠄ ষˈࣙᣀ˖
ܼሔ䜡㕂῵ᓣ
gᠻ㸠 end ੑҸ䗔ಲࠄ ⡍ᴗ⫼᠋῵ᓣ
g䜡㕂 Ethernet ᥹ষ; g䜡㕂serial interface;
g䜡㕂 ISDN ᥹ষ
䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
g䇁䷇ষ䜡㕂῵ᓣ gᢼোッ䜡㕂῵ᓣ
crypto
crypto map
gࡴᆚবᤶ䜡㕂῵ᓣ gࡴᆚ᯴ᇘ䜡㕂῵ᓣ
crypto crypto
kiesyakpmupbk·eyI-EK
ㄪ⬹䜡㕂῵ᓣ
chain rsa
g ݀䩹㋏߫䜡㕂῵ᓣ
named-key៪㗙
addressed-key g݀䩹䜡㕂῵ᓣ
ip dhcp pool ·DHCP 䜡㕂῵ᓣ
䗮䖛 Console ষ䖲᥹㒜ッ䜡㕂䏃⬅఼ˈ䳔㽕ҹϟ޴Ͼℹ偸˖ 1ǃ䗝ᢽϔৄ㒜ッ 㒜ッ᮶ৃҹᰃᷛ‫݋ⱘޚ‬᳝ RS-232 Іষⱘ㒜ッˈгৃҹᰃϔৄ᱂䗮ⱘ PC ᴎˈ᳈ᐌ⫼ⱘᰃৢ㗙DŽབᵰ㽕 Ң䖰ッ䜡㕂ˈ߭䖬䳔ϸৄ MODEMDŽ 2ǃ೼⹂䅸䏃⬅఼៪㒜ッ݊Ё㟇ᇥ᳝ϔᮍᰃ݇ᴎⱘᚙ‫މ‬ϟˈ䗮䖛䜡㕂⬉㓚ᇚ㒜ッⱘ RS-232 ІষϢ䏃⬅ ఼ Console ষⳌ䖲DŽ᥹㒓݇㋏བ೒ 1-2 ᠔冫˖
݇䬂ᄫ੠খ᭄
݀䩹㋏߫䜡㕂 ῵ᓣ
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛 crypto key pubkey-chain rsa ੑҸ䖯ܹ䆹῵ᓣ
router(config-pubkey-c hain)#
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
g䜡㕂Փ⫼ RSA ݀䩹
೼ config-pubkey-chain
῵ᓣϟˈ䗮䖛 named-key
冫⫼᠋ᔧࠡ᠔໘ⱘ㋏㒳῵ᓣDŽ䖭ѯ῵ᓣߚ߿ᰃ˖ l ᱂䗮⫼᠋῵ᓣ˄user EXEC˅ l ⡍ᴗ⫼᠋῵ᓣ˄privileged EXEC˅ l ܼሔ䜡㕂῵ᓣ˄global configuration˅ l ᥹ষ䜡㕂῵ᓣ˄interface configuration˅ l 䏃⬅䜡㕂῵ᓣ˄router configuration˅ l ᭛ӊ㋏㒳῵ᓣ˄file system configuration˅ l 䆓䯂߫㸼䜡㕂῵ᓣ˄access list configuration˅ l 䇁䷇ষ䜡㕂῵ᓣ˄voice-port configuration˅ l ᢼোッ䜡㕂῵ᓣ˄dial-peer configuration˅ l ࡴᆚবᤶ䜡㕂῵ᓣ˄crypto transform-set configuration˅ l ࡴᆚ᯴ᇘ䜡㕂῵ᓣ˄crypto map configuration˅ l IKE ㄪ⬹䜡㕂῵ᓣ˄isakmp configuration˅ l ݀䩹㋏߫䜡㕂῵ᓣ˄pubkey-chain configuration˅ l ݀䩹䜡㕂῵ᓣ˄pubkey-key configuration˅ l DHCP 䜡㕂῵ᓣ˄dhcp configuration˅
݊Ё᳔ৢϔ辵䜡㕂ᮍᓣᦤկЁ㣅᭛ⱘ⫼᠋⬠䴶ˈЏ㽕⫼Ѣ⫼᠋ⲥ᥻㔥㒰ⱘᎹ԰⢊ᗕঞᬊ䲚㋏㒳㒳䅵ֵ ᙃDŽ
ᴀ⫼᠋᠟‫ݠ‬Џ㽕ᦣ䗄䗮䖛 console ষ䜡㕂䏃⬅఼ⱘᮍ⊩ˈ䗮䖛 56/336modem ῵ഫ LINE ষǃTelnet 䖰⿟ ⱏᔩ䜡㕂䏃⬅఼ⱘᮍ⊩ϢП㉏Ԑˈ䗮䖛 SNMP 㔥ㅵ㋏㒳ᇍ䏃⬅఼䖯㸠䜡㕂ⱘ㒚㡖䆺㾕䏃⬅఼㔥ㅵ㋏㒳䇈ᯢ кDŽ
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
g䜡㕂䇁䷇ষ
ᓣˈৠᯊࠊᅮⳌᑨⱘখ᭄
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
ᢼোッ䜡㕂῵ dial-peer ੑҸ䖯ܹ䆹῵ router(config-dial-peer g䖤㸠 exit ੑҸ䗔ಲࠄ g䜡㕂 VoIP
ᓣ
ᓣˈৠᯊࠊᅮⳌᑨⱘ݇䬂 )#
ܼሔ䜡㕂῵ᓣ
g䜡㕂 POTS
ᄫ੠খ᭄
ωயუᄵ༉‫؟‬ಾो‫އ‬ಓ໒ԅd
g᱂䗮⫼᠋῵ᓣ enable g⡍ᴗ⫼᠋῵ᓣ
filesystem g᭛ӊ㋏㒳῵ᓣ
configure gܼሔ䜡㕂῵ᓣ
interface g᥹ষ䜡㕂῵ᓣ router *** g䏃⬅䜡㕂῵ᓣ ip access-listg䆓䯂߫㸼䜡㕂῵ᓣ
voice-port dial-peer
gᠻ㸠 exit ੑҸ䗔ಲࠄ ೼䆹῵ᓣϟ䜡㕂 IP 䏃⬅ण 䆂ˈࣙᣀ˖
ܼሔ䜡㕂῵ᓣ g䴭ᗕ䏃⬅
gᠻ㸠 end ੑҸ䗔ಲࠄ ·RIP ࡼᗕ䏃⬅ ⡍ᴗ⫼᠋῵ᓣ
·IRMP 䜡㕂῵ᓣ
gᅠ៤䏃⬅఼ⱘ᭛ӊ㋏㒳 gᠻ㸠 exit ੑҸ䗔ಲࠄ ⱘㅵ⧚˗ ⡍ᴗ⫼᠋῵ᓣ
gछ㑻䏃⬅఼䕃ӊDŽ
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
䆓䯂߫㸼䜡㕂 ip access-list ੑҸ䖯ܹ䆹 router(config-std-nacl)#
5
೒ 1-4 䗝ᢽІ㸠䗮ֵষ
þ 䜡㕂І㸠䗮ֵষখ᭄˄೒ 1-5˅ ⊶⡍⥛üü9600bps ᭄᥂ԡüü8 ԡ ༛‫ي‬᷵偠üü᮴ ‫ذ‬ℶԡüü1 ԡ ⌕᥻üüXon/Xoff
೒ 1-5 䜡㕂І㸠䗮ֵষখ᭄
þ 㒭䏃⬅఼Ϟ⬉ˈ䏃⬅఼ਃࡼⱘֵᙃӮ೼㒜ッϞᰒ冫DŽਃࡼᅠ៤ৢӮᰒ冫˖ĀPress any key to start the shell!ā DŽབᵰ䜡㕂њⱏᔩ䳔㽕䅸䆕ˈ߭䕧ܹ⫼᠋ৡ੠ᆚⷕˈ৺߭ᣝӏᛣ䬂Ⳉ᥹ⱏᔩDŽⱏᔩ៤ࡳৢ Ӯ೼㒜ッϞᰒ冫Ārouter>āᦤ冫ヺ˗ህৃҹᇍ䏃⬅఼䖯㸠䜡㕂њDŽ
㄀ϔゴ ㋏㒳෎⸔
ᴀゴЏ㽕䆆䗄䖜᱂䏃⬅఼Ё InfoExpress IOS ㋏㒳ⱘ෎ᴀⶹ䆚ˈࣙᣀ InfoExpress ㋏㒳῵ᓣǃ䜡㕂⦃๗ ⱘ‫ޚ‬໛ঞੑҸ㸠᥹ষⱘ᳝݇ⶹ䆚ㄝDŽ
ᴀゴЏ㽕‫ݙ‬ᆍ˖ l 䏃⬅఼䜡㕂ᮍᓣ l ੑҸ䖤㸠῵ᓣ l ᨁᓎ䜡㕂⦃๗ l ੑҸ㸠᥹ষ
1.1 䏃⬅఼䜡㕂ᮍᓣ
䖜᱂䏃⬅఼Ў⫼᠋ᦤկњಯ辵‫݌‬ൟⱘ䜡㕂ᮍᓣˈߚ߿ᰃ˖ l 䗮䖛 console ষˈ䞛⫼ shell ੑҸ䖯㸠䜡㕂 l 䗮䖛 56/336modem ῵ഫ LINE ষ䖯㸠䜡㕂 l 䗮䖛 Telnet 䖰⿟ⱏᔩࠄ䏃⬅఼Ϟ䜡㕂 l 䗮䖛 SNMP 㔥ㅵ㋏㒳ᇍ䏃⬅఼䖯㸠䜡㕂
೒ 1-2 ᴀഄ䜡㕂䏃⬅఼䖲᥹೒
3ǃ㒭㒜ッϞ⬉ˈ䆒㕂㒜ッ䗮ֵখ᭄Ў⊶⡍⥛ 9600bpsǃ8 ԡ᭄᥂ԡǃ1 ԡ‫ذ‬ℶԡǃ᮴᷵偠੠䕃⌕᥻ˈ ᑊ䗝ᢽ㒜ッ㉏ൟЎ VT100DŽབᵰᰃ PC ᴎˈ䖤㸠 Win95/98/2000/NT ᪡԰㋏㒳ˈ߭䖤㸠 HyperTerminal˄䍙 㑻㒜ッ˅⿟ᑣˈᑊᣝ✻ҹϞখ᭄䆒㕂䍙㑻㒜ッ⿟ᑣⱘІষখ᭄DŽϟ䴶ҹ Windows NT ⱘ㒜ッ䍙㑻㒜ッ⿟ᑣ Ў՟೒冫䇈ᯢ˖
1.2 ੑҸ䖤㸠῵ᓣ
䖜᱂䏃⬅఼ InfoExpress IOS Ў㋏㒳ੑҸⱘㅵ⧚ঞᠻ㸠ϧ䮼ᦤկњϔϾੑҸ໘⧚ᄤ㋏㒳ˈ鹵ПЎ shellˈ ݊Џ㽕ࡳ㛑ࣙᣀ˖
l ㋏㒳ੑҸⱘ⊼‫ݠ‬ l ㋏㒳䜡㕂ੑҸⱘ⫼᠋㓪䕥 l ⫼᠋䕧ܹੑҸ˄䗮䖛 Console ষ៪ Telnet 䖲᥹˅ⱘ䇁⊩ߚᵤ l ㋏㒳ੑҸⱘᠻ㸠 ⫼᠋䗮䖛 shell ੑҸ䜡㕂䏃⬅఼ᯊˈ㋏㒳ЎੑҸⱘᠻ㸠ᦤկњ໮辵䖤㸠῵ᓣˈ↣辵ੑҸ῵ᓣߚ߿ᬃᣕ⡍
gᠻ㸠 exit ੑҸ䗔ಲࠄ
⡍ᴗ⫼᠋῵ᓣϟ˗
g䜡㕂䏃⬅఼䖤㸠᠔䳔ⱘ
gᠻ㸠 interface ੑҸ䖯 ܼሔখ᭄
ܹ᥹ষ䜡㕂῵ᓣ
router(config-if-xxx[nu
೼ܼሔ῵ᓣϟᠻ㸠
mber])#
᥹ষ䜡㕂῵ᓣ interface ੑҸ˄ৠᯊᣛᅮ ៪㗙
Ⳍᑨⱘ᥹ষ៪㗙᥹ষ㒘˅ router(config-ifgroup[n
῵ᓣ
῵ᓣˈৠᯊࠊᅮⳌᑨⱘ݇ #
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
g䜡㕂ࡴᆚ᯴ᇘᴵⳂ
䬂ᄫ੠খ᭄
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
IKE ㄪ⬹䜡㕂 ῵ᓣ
crypto isakmp ੑҸ䖯ܹ 䆹῵ᓣৠᯊࠊᅮⳌᑨⱘ
g䖤㸠 exit ੑҸ䗔ಲࠄ router(config-isakmp)#
ܼሔ䜡㕂῵ᓣ
g䜡㕂 IKE ㄪ⬹
῵ᓣ
῵ᓣˈৠᯊࠊᅮⳌᑨⱘ݇ router(config-ext-nacl)#
䬂ᄫ੠খ᭄
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
䜡㕂䰆☿๭䆓䯂߫㸼ˈ݊ ӏࡵࣙᣀ˖ g䜡㕂ᷛ‫ޚ‬䆓䯂߫㸼 g䜡㕂ᠽሩ䆓䯂߫㸼
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
䇁䷇ষ䜡㕂῵ ᓣБайду номын сангаас
voice-port ੑҸ䖯ܹ䆹῵
router(config-voice-po rt)#
䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
6
1.3.2 䗮䖛 56/336modem ῵ഫ LINE ষ䖯㸠䜡㕂
བᵰ䏃⬅఼䜡㕂њ 56/336modem ῵ഫˈৃҹ߽⫼῵ഫϞⱘ DIP ᢼⷕᓔ݇ᴹ䆒㕂 LINE ষⱘᎹ԰῵ᓣˈ
þ ߯ᓎ䖲᥹˄೒ 1-3˅ Ў䖲᥹฿‫ݭ‬ৡ鹵̣̣mp2600˄ৃҹᰃ݊ᅗӏᛣৡ鹵˅ˈᑊЎ᠔ᓎ䖲᥹䗝ᢽϔϾ Windows ೒ᷛDŽ
þ 䗝ᢽІ㸠䗮ֵষ˄೒ 1-4˅
೒ 1-3 ߯ᓎ䖲᥹೒
ḍ᥂᠔䖲᥹ⱘІ㸠ষˈৃҹ䗝ᢽ COM1 ៪ COM2DŽ
䖜᱂䗮ֵ⠜ᴗ᠔᳝ 㗏ॄᖙお Copyright © 2005 Maipu CommunicationˈAll Rights Reserved.
3
೼ܼሔ䜡㕂῵ᓣϟˈ䗮䖛
DHCP 䜡㕂῵ router(config)#ip dhcp
ᓣ
pool ੑҸ䖯ܹ䆹῵ᓣˈ router(dhcp-config)#
ৠᯊࠊᅮⳌᑨⱘখ᭄
g䖤㸠 exit ੑҸ䗔ಲࠄ ܼሔ䜡㕂῵ᓣ
g䜡㕂 DHCP
&⊼˖ router ಾಁ΁ѻЬನ௬ಘԅຂහ੠ыēဈ‫ྻࢶܜ‬ၽ௦ࡥଅᄢ੦಴ຏၮ໻ hostname ੡গ༉‫؟‬ຂහ੠ыē