理学路由器基本原理和配置.ppt

,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,Guo-juan,Associate Prof.of Communication Department of XIPT,*,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,*,单击此处编辑母版标题样式,单击此处编辑母版文本样式,第二级,第三级,第四级,第五级,*,理学路由器基本原理和配置,理学路由器基本原理和配置理学路由器基本原理和配置本章学习目标,掌握路由器基本原理,掌握路由器的定义与作用,掌握路由器的结构与工作原理,掌握路由器的操作,掌握路由器的基本配置命令,掌握路由器升级版本的方法,掌握路由器常用操作Guo-juan,Associate Prof.of Communication Department of XIPT,本章学习目标,掌握路由器基本原理,掌握路由器的定义与作用,掌握路由器的结构与工作原理,掌握路由器的操作,掌握路由器的基本配置命令,掌握路由器升级版本的方法,掌握路由器常用操作,Guo-juan,Associate Prof.of Communication Department of XIPT,内容提示,路由器基本原理,路由器的定义与作用,路由器的结构与工作原理,路由器的操作,Guo-juan,Associate Prof.of Communication Department of XIPT,路由器用于进行网络互连的计算机设备,路由器必须具备：,多个三层接口连接不同的网络,协议至少向上实现到网络层,具有存储、转发、寻径功能,路由器的定义,Guo-juan,Associate Prof.of Communication Department of XIPT,路由器的核心作用是实现网络互连，数据转发,路由（寻径）：路由表建立、更新,转发：在网络之间转发分组数据,隔离广播：路由器的每个端口都属于不同的广播域,指定访问规则：防火墙功能和分组过滤,异种网络互连：连接异构的底层网络,路由器的作用,Guo-juan,Associate Prof.of Communication Department of XIPT,路由器的结构与工作原理,路由功能：执行路由协议，生成、更新和维护路由表。,交换/转发功能：分组从路由器一个接口输入，根据目的IP地址，查找路由表，然后选择合适接口输出。,路由,功能,路由选择协议,路由表,输入端口,交换结构,输入端口,输出端口,转发,功能,输出端口,Guo-juan,Associate Prof.of Communication Department of XIPT,完成路由功能需要的几个基本信息：,路由的是什么协议？,目的地址是否已存在,?,从哪个端口发送出去？,下一跳地址是什么？,控制平面：路由功能,Guo-juan,Associate Prof.of Communication Department of XIPT,帧校验并缓存数据包,进入接口,将目的地逻辑地址与下一跳逻辑设备和外出接口相关联,路由表,将下一跳逻辑设备与物理地址相关联以生成帧头,ARP缓存,（局域网）,封装数据包并转发帧,外出接口,由路由协议维护,由ARP或逆向ARP进程所维护,映射列表,（广域网）,转发平面：交换/转发功能,Guo-juan,Associate Prof.of Communication Department of XIPT,同一网段内部的通信,网络A,通向,路由器1,通信需求,Hub/switch,网段（IP子网）：拥有相同网络前缀的接口构成的集合。,Guo-juan,Associate Prof.of Communication Department of XIPT,同一网段通信过程图示,IP地址：192.168.1.2,MAC地址：00:20:AF:00:00:02,IP地址：192.168.1.1,MAC地址：00:20:AF:00:00:01,以太网,IP层,封装IP包,包发往IP地址,192.168.1.2,以太网,IP层,封装MAC帧,帧发往MAC地址,00:20:AF:00:00:02,封装MAC帧,收到MAC帧,ARP,拆封IP包,收到IP包,A,B,网络,情况,协议,层次,Guo-juan,Associate Prof.of Communication Department of XIPT,不同网段之间的通信,网络B,网络A,路由器,通信需求,Ethernet,路由器,Ethernet,FR,PPP,20.1.1.0/24,20.1.2.0/24,Guo-juan,Associate Prof.of Communication Department of XIPT,以太网,以太网,接口,不同网段的通信过程,以太网,IP层,MAC帧,IP层,串行,接口,以太网,接口,IP层,网络,情况,协议,层次,PPP分组,IP包,IP包,发送端,主机A,接收端,主机B,路由器,Ethernet,PPP,HOST A,HOST B,fei-1/1,e1_2/1,Ethernet,fei-1/1,e1_2/1,IP层,路由器,PPP帧,IP包,IP包,串行,接口,MAC帧,IP包,IP包,20.1.1.2,20.1.2.2,Guo-juan,Associate Prof.of Communication Department of XIPT,判断,与,目的端,是否处于同一,网段,检查,ARP表是否有目的端,MAC地址,做数据链,路层封装,（,目的MAC为,目的端,MAC地址）,通过物理层,发送数据,通过ARP获得,目的端,MAC地址,YES,NO,YES,NO,是否配置了,缺省网关？,YES,检查,ARP表是否有网关,MAC地址,做数据链,路层封装,（,目的MAC为网,关MAC地址）,通过ARP获得,网关MAC地址,NO,发送错误信息,YES,NO,End,获取目的IP地址,源端主机IP分组转发流程,Guo-juan,Associate Prof.of Communication Department of XIPT,IP,分组转发,流程基本概念,IP,分组转发是基于,hop by hop,的方式（数据报）,从源到目的之间源,IP,和目的,IP,地址保持不变,每经过一个数据链路层，数据链路层封装都要做相应,的重新封装,返回的数据选路与到达的数据选路无关,IP分组转发基本概念,Guo-juan,Associate Prof.of Communication Department of XIPT,路由过程示例,192.168.6.0/24,192.168.2.0/24,e1_1,e1_1,fei_1/1,192.168.2.3,192.168.1.0/24,192.168.3.0/24,192.168.3.3,192.168.4.0/24,R1,R2,R3,R1 路由表,192.168.4.0 255.255.255.0 192.168.4.1 e1_1 direct 0 0,192.168.2.0 255.255.255.0 192.168.2.1 fei_1/1 direct 0 0,192.168.1.0 255.255.255.0 192.168.4.2 e1_1 rip 120 1,192.168.6.0 255.255.255.0 192.168.4.2 e1_1 rip 120 1,192.168.3.0 255.255.255.0 192.168.4.2 e1_1 rip 120 2,e1_2,e1_1,fei_1/1,fei_1/1,目的地址为:,192.168.3.3,A,B,Guo-juan,Associate Prof.of Communication Department of XIPT,1.目的地址为:192.168.3.3,192.168.6.0/24,192.168.2.0/24,192.168.2.3,192.168.1.0/24,192.168.3.0/24,192.168.3.3,192.168.4.0/24,R1,R2,R3,R2 路由表,192.168.4.0 255.255.255.0 192.168.4.2 e1_1 direct 0 0,192.168.6.0 255.255.255.0 192.168.6.1 e1_2 direct 0 0,192.168.1.0 255.255.255.0 192.168.1.1 fei_1/1 direct 0 0,192.168.2.0 255.255.255.0 192.168.4.1 e1_1 rip 120 1,192.168.3.0 255.255.255.0 192.168.6.2 e1_1 rip 120 1,e1_1,e1_1,fei_1/1,e1_2,e1_1,fei_1/1,fei_1/1,目的地址为:,192.168.3.3,路由过程示例（续）,A,B,Guo-juan,Associate Prof.of Communication Department of XIPT,路由过程示例（续）,192.168.6.0/24,192.168.2.0/24,192.168.2.3,192.168.1.0/24,192.168.3.0/24,192.168.3.3,192.168.4.0/24,R1,R2,R3,R3 路由表,192.168.3.0 255.255.255.0 192.168.3.1 fei_1/1 direct 0 0,192.168.6.0 255.255.255.0 192.168.6.2 e1_1 direct 0 0,192.168.1.0 255.255.255.0 192.168.6.1 e1_1 rip 120 1,192.168.4.0 255.255.255.0 192.168.6.1 e1_1 rip 120 1,192.168.2.0 255.255.255.0 192.168.6.1 e1_1 rip 120 2,反方向数据包的转发流程,？,e1_1,e1_1,fei_1/1,e1_2,e1_1,fei_1/1,fei_1/1,目的地址为:,192.168.3.3,Guo-juan,Associate Prof.of Communication Department of XIPT,路由器基本原理,路由器的操作,路由器的基本配置命令,路由器升级版本的方法,路由器常用操作,内容提示,Guo-juan,Associate Prof.of Communication Department of XIPT,中兴路由器全系列产品,性能,ZXR10 GAR Series,GAR 7208/3608/2608,GAR 2604,交换容量：,1G-5.4G,转发性能：,50K-1.2Mpps,ZXR10 GER,交换容量：32G,转发性能:,24Mpps,ZXR10 T64E,交换容量：128G/320G,转发性能：48M-200Mpps,ZXR10 18/28/38,转发性能：30K-1Mpps,ZXR10 T128,交换容量：256G/640G,转发性能：96M-400Mpps,Guo-juan,Associate Prof.of Communication Department of XIPT,GAR2604硬件介绍,GAR2604正面视图,GAR2604背面视图,Console,AUX,FE,电源,电源开关,模块化接口板,常见接口板：单端口10/100M接口板,四端口V24/V35同步接口板,四端口E1接口板,Guo-juan,Associate Prof.of Communication Department of XIPT,可以通过多种方式配置路由器,Console port,Auxiliary port,Interfaces,PC or Unix server,GAR,路由器配置方式,Virtual terminal,telnet,ftp,Guo-juan,Associate Prof.of Communication Department of XIPT,串口连接方式,超级终端软件：,推荐使用Windows的超级终端,开始程序附件通讯超级终端,参数设置：,波特率,数据位数,奇偶校验,停止位数,流控,Guo-juan,Associate Prof.of Communication Department of XIPT,Telnet方式,在命令行方式下,键入：telnet,Guo-juan,Associate Prof.of Communication Department of XIPT,命令模式,Guo-juan,Associate Prof.of Communication Department of XIPT,ZXR10?,Exec commands:,enable Turn on privileged commands,exit Exit from the EXEC,login Login as a particular user,logout Exit from the EXEC,ping Send echo messages,quit,Quit from the EXEC,ZXR10#co?,configure copy,ZXR10#von ter,%Invalid input detected at marker.,ZXR10#con,ZXR10#configure,ZXR10#configure?,terminal Enter configuration mode,ZXR10#conf t,在线帮助和命令缩写,Guo-juan,Associate Prof.of Communication Department of XIPT,按Ctrl-P 或 向上箭头键,重新调用记录缓冲区中的最新命令，重复这些按键,向前调用旧命令,按Ctrl-N 或 向下箭头键,向后滚，到达最后一条命令行时再滚动则从缓冲区,的头部开始循环滚动,特权模式下执行,show history,命令,列出该模式下最新的输入的几条命令,调用与显示历史命令,Guo-juan,Associate Prof.of Communication Department of XIPT,文件系统介绍,FLASH,中包含三个目录：,IMG,：,版本文件存放在该目录下。,CFG,：,配置文件存放在该目录下,。,DATA,：,该目录用于存放,记录告警信息。,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,192.168.1.2,192.168.1.1,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,步骤一：,将路由器的管理以太口与运行,的,PC,机连接,步骤二：,重新启动路由器在显示,Press any key to stop auto-boot.,时按任意键中断路由器的引导过程。,Boot Location 0:Net,1:Flash:1,Client IP 0:bootp:168.1.168.1,Netmask:255.255.0.0,Server IP 0:bootp:168.1.168.110,Gateway IP:168.1.168.1,.,Press any key to stop for auto-boot.,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,步骤三：在,GAR Boot,状态下敲击,c,键回车后进入数据更改状态，修改以下 参数，其余一律回车直到出现,GAR Boot:,提示。,GAR Boot:c,.=clear field;-=go to previous field;D=quit,Boot Location 0:Net,1:Flash:0,0,为从后台,FTP，,启动,1,表示从,FLASH,启动,Client IP 0:bootp:192.168.1.2,对应为,网管,以太口地址,Netmask:255.255.0.0,Server IP 0:bootp:192.168.1.1,对应为后台,FTP,服务器地址,Gateway IP:192.168.1.2,网关地址，可设置为网管口地址,:target,对应为,上配置的,用户名,target,:,对应为,target,用户密码,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,步骤四：,敲入,回车后系统自动从后台,FTP,服务器启动版本,GAR Boot:,Start ZXR10 GAR,Version V4.6.02.a Build at Nov 29 2005,19:07:37,*,Welcome to ZXR10 General Access Router of ZTE Corporation,*,ZXR10,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,步骤五：注意此时运行的新版本是在内存中，先把原有的旧版本改名，然后手工从新版本到flash的img目录下。,zte#copy ftp:/192.168.1.1/zxr10gar.zarusername:password flash:img/zxr10gar.zar,或执行zte#write imgfile命令。,Guo-juan,Associate Prof.of Communication Department of XIPT,系统异常时的版本升级,步骤六：改变系统启动方式,下次设备启动从FLASH启动。,ZXR10#conf t,ZXR10(config)#nvram img local,ZXR10(config)#end,ZXR10#write,步骤七：验证版本升级是否成功。通过ZXR10#show version命令检查升级后版本号。,Guo-juan,Associate Prof.of Communication Department of XIPT,系统正常时的版本升级,192.168.1.2,192.168.1.1,Guo-juan,Associate Prof.of Communication Department of XIPT,系统正常时的版本升级,步骤一：准备FTP 服务器连接到网络上，保证该服务器能ping 通GAR 上的接口地址。,步骤二：更改旧版本文件的名称,在GAR 上将flash:/img 目录下当前运行的版本文件改名为zxr10old.zar，,ZXR10#cd img,ZXR10#rename zxr10gar.zar zxr10old.zar,Guo-juan,Associate Prof.of Communication Department of XIPT,系统正常时的版本升级,步骤三：从,FTP,服务器下载系统映像文件到,GAR,的,Flash memory,上。将新的软件版本文件下载到,GAR 的flash:/img,目录下,ZXR10#copy ftp:/192.168.1.1/zxr10gar.zartarget:target flash:/img/zxr10gar.zar,步骤四：重新启动后，验证版本是否升级成功,Guo-juan,Associate Prof.of Communication Department of XIPT,zxr10(config)#hostname zte,zte(config)#banner incoming#,Enter TEXT message.End with the character#.,You have entered a secured system.,#,zte(config)#exit,zte#write,主机名和登陆提示语,Guo-juan,Associate Prof.of Communication Department of XIPT,登陆用户名密码和enable密码,ZXR10(config)#username zte password zte,ZXR10(config)#enable secret zte,ZXR10(config)#,登陆用户名和密码只在telnet时使用，console口连接无需登陆用户名和密码,Guo-juan,Associate Prof.of Communication Department of XIPT,密码是什么?,老天!我忘,了密码!,我死定了!,别担心，有解决方法的,.,enable密码恢复,Guo-juan,Associate Prof.of Communication Department of XIPT,enable密码恢复,系统上电后通过终端连接启动命令行界面（CLI）,启动,7,秒内按任意键打断启动顺序，,进入,BOOT,模式,使用命令“,c”,按提示重新设置路由器的,enable password,使用,BOOT,命令“,”,继续启动路由器,使用新密码进入特权模式,Guo-juan,Associate Prof.of Communication Department of XIPT,enable密码恢复,1：启动路由器，在超级终端下根据提示按任意键进入ROS状态,ZXR10 System Boot Version:1.0,Creation date:Mar 1 2002,11:11:58,Boot Location 0:Net,1:Flash:1,Client IP 0:bootp :250.1.1.1,Netmask :255.255.255.0,Server IP 0:bootp :10.40.87.88,Press any key to stop for change parameters.,1,ZXR10 Boot:,Guo-juan,Associate Prof.of Communication Department of XIPT,enable密码恢复,2：敲c进入配置状态，前面全部回车,ZXR10 Boot:c,.=clear field;-=go to previous field;D=quit,Boot Location,0:Net,1:Flash:1（0为从后台FTP启动，1表示从 FLASH启动）,Client IP 0:bootp:168.4.168.168（对应为BIC板以太口地址）,Netmask:255.255.0.0,Enable Password:（设置新密码，不能直接回车）,Enable Password Confirm:（重复输入新密码）,ZXR10 Boot:,Guo-juan,Associate Prof.of Communication Department of XIPT,enable密码恢复,3：敲入，回车后系统会自动重新启动。,4：通过上述操作后即恢复enable密码，使用新密码可以进入 enable模式。,Guo-juan,Associate Prof.of Communication Department of XIPT,接口配置,fei_0/1,1,33,2,43,fei_1/1,Zxr10#config terminal,Zxr10(config)#interface fei_0/1,Zxr10(config-if)#no,negotiation auto,/关闭自动协商,Zxr10(config-if)#duplex full|half /设置双工模式,Zxr10(config-if)#,speed 10|100,/设置速率,Zxr10(config-if)#shutdown|no shutdown /打开或关闭端口,Zxr10(config-if)#ip address 10.1.1.1 255.255.0.0/配置IP地址,Zxr10(config-if)#no ip address 10.1.1.1 255.255.0.0/删除IP,Guo-juan,Associate Prof.of Communication Department of XIPT,配置同/异步接口,进入接口配置模式,ZXR10（config）#interface serial_4/1,配置接口的工作方式（,DTE/DCE,）,ZXR10（config-if）#dte enable,配置接口同,/,异步模式（,V24,接口上起作用）,ZXR10（config-if）#physical-layer mode sync,配置同,/,异步接口的工作速率,ZXR10（config-if）#baudrate 640000,配置接口二层协议封装,ZXR10（config-if）#encapsulation ppp,Guo-juan,Associate Prof.of Communication Department of XIPT,配置CE1接口,进入E1 controller配置模式,ZXR10（config）#controller e1_5/1,配置E1通道,ZXR10（config-control）#channel-group 1 timeslots 1-31,进入接口配置模式,ZXR10（config）#interface e1_5/1.1,配置接口二层协议封装,ZXR10（config-if）#encapsulation ppp,Guo-juan,Associate Prof.of Communication Department of XIPT,显示接口命令,ZXR10#,show ip interface fei_1/1,fei_0/1 AdminStatus is down,PhyStatus is down,line protocol is down,Internet address is 10.1.1.1/24,Broadcast address is 255.255.255.255,MTU is 1500 bytes,ICMP unreachables are always sent,ICMP redirects replies are always sent,Policy routing is disabled,Inbound access list is not set,Outgoing access list is not set,ZXR10#,Guo-juan,Associate Prof.of Communication Department of XIPT,ZXR10#show ip interface fei_1/1,fei_1/1 is up,line protocol is up,.,正常工作.,连接问题.,接口问题.,去激活（Disabled）.,Port is up,line protocol is up,Port is up,line protocol is down,Port is down,line protocol is down,Port is administratively down,line protocol is down,Keepalives,载波检测,解释接口状态,Guo-juan,Associate Prof.of Communication Department of XIPT,简要显示接口命令,ZXR10#,show ip inter brief,InterfaceIP-AddressMaskAdminStatusProtocol,fei_0/1unassignedunassignedupdown,fei_1/1170.1.1.1255.255.255.0upup,Guo-juan,Associate Prof.of Communication Department of XIPT,系统信息,ZXR10,show version,ZXR10 Router Operating System Software,ZTE Corporation,ROS ZXR10-GAR Software(ZXR10-GAR-P-G),Version V1.0.2f,(EARLY,DEPLOYMENT RELEASE SOFTWARE),ZXR10#,show environment temperature,Rack inside temperature sample time 10:33:53,Rack inside temperature 33,ZXR10#,show processor,Peak CPU:CPU peak utility measured in 2 minutes,PhyMem:Physical memory(megabyte),Panel CPU(5s)CPU(30s)CPU(2m)Peak CPU PhyMem Buffer Memory,MP(M)2%2%2%3%128 0%78.447%,ZXR10#,show running,Guo-juan,Associate Prof.of Communication Department of XIPT,诊断工具,ZXR10#ping 1.1.1.1,sending 5,100-byte ICMP echos to 1.1.1.1,timeout is 2 seconds.,!,Success rate is 100 percent(5/5),round-trip min/avg/max=40/40/40 ms.,ZXR10#trace 202.102.19.141,tracing the route to 202.102.19.141,1 218.90.164.1 1 ms 0 ms 0 ms,2 202.97.27.153 0 ms 0 ms 0 ms,3 202.97.27.98 0 ms 0 ms 0 ms,4 202.102.19.141 0 ms 0 ms 0 ms,Guo-juan,Associate Prof.of Communication Department of XIPT,内容回顾,路由器基本原理,路由器的基本配置命令,路由器升级版本的方法,路由器常用操作,Guo-juan,Associate Prof.of Communication Department of XIPT,思考题,如何进行密码恢复？,当路由器因为版本文件损坏而无法正常启动时，应该如何解决？,Guo-juan,Associate Prof.of Communication Department of XIPT,谢谢观赏,