[PPT자료] 라우터 기초

Download Report

Transcript [PPT자료] 라우터 기초

Router의 기초
ICND
Copyright © 2002, Cisco Systems, Inc.
목적
• Router 하드웨어 구성
• 라우터의 로그인
• 도움기능을 이용해 완전한 명령 수행
• 불완전한 명령어를 수정
• 라우터 상태 검사
• Password 설정방법
• 라우터 배너 설정
• 인터페이스 환경설정의 수행
• 인터페이스 설명문
• 호스트명 설정
ICND
Copyright © 2002, Systems, Inc.
2
Cisco Router 포트 (25xx)
Ethernet AUI LED
Serial 0 LED
Serial 1 LED
System OK LED
Input: 100-240VAC
Freq: 50.60 Hz
Current: 1.2-0.6A
Watts: 40W
AUI
SERIAL 0
SERIAL 1
CONSOLE
SD
AUX
CISCO 2501
Ethernet AUI Port
Serial Port 1
Serial Port 0
ICND
Power
AUX Port
Console Port
Copyright © 2002, Systems, Inc.
Switch on/off
3
Cisco Router 포트 (26xx)
Serial Port
AUX Port
Fastethernet Port
Power
Console Port
Switch on/off
ICND
Copyright © 2002, Systems, Inc.
4
Console 접속
라우터의 console 포트와 PC의 통신포트 연결
ICND
Copyright © 2002, Systems, Inc.
5
Console 접속
PC에서 하이퍼터미널 실행하여 위와 같이 접속
비트 9600, 데이터비트 8로 설정
ICND
Copyright © 2002, Systems, Inc.
6
외부에서 환경 설정하는 단말기
Virtual
Terminals
Console Port
Interfaces
Auxiliary Port
VTY 0 4
• 여러 단말기를 통해 환경정보를
제공받을 수 있음
ICND
Copyright © 2002, Systems, Inc.
Internet
7
Router Mode
ICND
ICRC_revision_11.3
Copyright
© 2002,©Systems,
Inc.Systems, Inc.
Copyright
1998, Cisco
8
라우터모드
Setup Mode
User EXEC Mode
Limited examination
of
라우터의
제한된 기능만
router.
Remote
access.
사용,
원격사용
가능
Router>
Privileged EXEC Mode
Detailed examination
of router.
라우터의
상세한 디버깅과
테스팅
Debugging
and testing.
기능
수행. 원격사용
가능 File
manipulation. Remote access.
Router#
ROM Monitor Mode
Operating system이 플래쉬나
부트시퀀스에 없을 경우나 start-up시
인터럽트 된 경우 사용
> or rommon>
ICND
초가 환경설정 시 사용되는 모드
RXBoot Mode
부팅시 플래쉬메모리에서 Cisco IOS를
발견하지 못했을 경우 도움을 주는
소프트웨어
Router<boot>
Global Configuration Mode
시스템의 전체적인 부분에 명령을
내리는 모드
Router(config)#
Other Configuration Modes
세부적인 명령이나 동시명령 수행시 사용
Router(config - mode)#
Copyright © 2002, Systems, Inc.
9
User Mode Command List
Router>?
Exec commands:
access-enable
atmsig
cd
clear
connect
dir
disable
disconnect
enable
exit
help
lat
lock
login
logout
mrinfo
Create a temporary Access-List entry
Execute Atm Signalling Commands
Change current device
Reset functions
Open a terminal connection
List files on given device
Turn off privileged commands
Disconnect an existing network connection
Turn on privileged commands
Exit from the EXEC
Description of the interactive help system
Open a lat connection
Lock the terminal
Log in as a particular user
Exit from the EXEC
Request neighbor and version information from a
multicast router
-- More --
ICND
Copyright © 2002, Systems, Inc.
10
Privileged Mode Command List
Router#?
Exec commands:
access-enable
access-template
bfe
clear
clock
configure
connect
copy
debug
disable
disconnect
enable
erase
exit
help
lat
lock
login
logout
mbranch
--More--
ICND
Create a temporary Access-List entry
Create a temporary Access-List entry
For manual emergency modes setting
Reset functions
Manage the system clock
Enter configuration mode
Open a terminal connection
Copy configuration or image data
Debugging functions (see also 'undebug')
Turn off privileged commands
Disconnect an existing network connection
Turn on privileged commands
Erase flash or configuration memory
Exit from the EXEC
Description of the interactive help system
Open a lat connection
Lock the terminal
Log in as a particular user
Exit from the EXEC
Trace multicast route down tree branch
Copyright © 2002, Systems, Inc.
11
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
ICND
Copyright © 2002, Systems, Inc.
12
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#cl?
clear
clock
ICND
Copyright © 2002, Systems, Inc.
13
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#cl?
clear
clock
Router#clock
% Incomplete command.
ICND
Copyright © 2002, Systems, Inc.
14
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#cl?
clear
clock
Router#clock
% Incomplete command.
Router#clock ?
set
Set the time and date
ICND
Copyright © 2002, Systems, Inc.
15
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#cl?
clear
clock
Router#clock
% Incomplete command.
Router#clock ?
set
Set the time and date
Router#clock set
% Incomplete command.
ICND
Copyright © 2002, Systems, Inc.
16
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#cl?
clear
clock
Router#clock
% Incomplete command.
Router#clock ?
set
Set the time and date
Router#clock set
% Incomplete command.
Router#clock set ?
Current Time (hh:mm:ss)
ICND
Copyright © 2002, Systems, Inc.
17
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#clock set 19:56:00
% Incomplete command.
Router#cl?
clear
clock
Router#clock set 19:56:00 ?
<1-31>
Day of the month
MONTH
Month of the year
Router#clock
% Incomplete command.
Router#clock ?
set
Set the time and date
Router#clock set
% Incomplete command.
Router#clock set ?
Current Time (hh:mm:ss)
ICND
Router#clock set 19:56:00 04 8
.
^
% Invalid input detected at the '^' marker
Router#clock set 19:56:00 04 August
% Incomplete command.
Router#clock set 19:56:00 04 August ?
<1993-2035>
Year
Copyright © 2002, Systems, Inc.
18
Help
Router#clok
Translating "clo"...domain server (255.255.255.255)
% Unknown command or computer name, or unable to find computer address
Router#clock set 19:56:00
% Incomplete command.
Router#cl?
clear
clock
Router#clock set 19:56:00 ?
<1-31>
Day of the month
MONTH
Month of the year
Router#clock
% Incomplete command.
Router#clock ?
set
Set the time and date
Router#clock set
% Incomplete command.
Router#clock set ?
Current Time (hh:mm:ss)
ICND
Router#clock set 19:56:00 04 8
.
^
% Invalid input detected at the '^' marker
Router#clock set 19:56:00 04 August
% Incomplete command.
Router#clock set 19:56:00 04 August ?
<1993-2035>
Year
Copyright © 2002, Systems, Inc.
19
단축키를 이용한 명령어 수정
Router>Shape the future of internetworking by creating unpreced
ICND
Copyright © 2002, Systems, Inc.
20
단축키를 이용한 명령어 수정
Router>$ future of internetworking by creating unprecedented op
Automatic scrolling of long lines.
ICND
Copyright © 2002, Systems, Inc.
21
단축키를 이용한 명령어 수정
Router>Shape the value of internetworking by creating unpreced
Automatic scrolling of long lines.
<Ctrl><A>
ICND
명령어의 처음으로 이동
Copyright © 2002, Systems, Inc.
22
단축키를 이용한 명령어 수정
Router>$ value for customers, employees, and partners.
Automatic scrolling of long lines.
ICND
<Ctrl><A>
명령어의 처음으로 이동.
<Ctrl><E>
명령어 마지막으로 이동.
Copyright © 2002, Systems, Inc.
23
단축키를 이용한 명령어 수정
Router>$ value for customers, employees, and partners.
Automatic scrolling of long lines.
ICND
<Ctrl><A>
명령어의 처음으로 이동.
<Ctrl><E>
명령어 마지막으로 이동.
<Esc><B>
직전 단어 처음으로 이동.
Copyright © 2002, Systems, Inc.
24
단축키를 이용한 명령어 수정
Router>$ value for customers, employees, and partners.
Automatic scrolling of long lines.
ICND
<Ctrl><A>
명령어의 처음으로 이동.
<Ctrl><E>
명령어 마지막으로 이동
<Esc><B>
직전 단어 처음으로 이동
<Ctrl><F>
한문자씩 앞으로 이동.
Copyright © 2002, Systems, Inc.
25
단축키를 이용한 명령어 수정
Router>$ value for customers, employees, and partners.
Automatic scrolling of long lines.
ICND
<Ctrl><A>
명령어의 처음으로 이동.
<Ctrl><E>
명령어 마지막으로 이동
<Esc><B>
직전 단어 처음으로 이동
<Ctrl><F>
한문자씩 앞으로 이동.
<Ctrl><B>
한문자씩 뒤로 이동.
Copyright © 2002, Systems, Inc.
26
단축키를 이용한 명령어 수정
Router>$ value for customers, employees, and partners.
Automatic scrolling of long lines.
ICND
[ Ctrl+A ]
명령어의 처음으로 이동.
[ Ctrl+E ]
명령어 마지막으로 이동
[ Esc+B ]
직전 단어 처음으로 이동
[ Ctrl+F ]
한문자씩 앞으로 이동.
[ Ctrl+B ]
한문자씩 뒤로 이동.
[ Esc+F ]
한단어씩 앞으로 이동
Copyright © 2002, Systems, Inc.
27
명령 history 수행
Router#show history
show history
enable
terminal history size 10
terminal no editing
terminal editing
show history
Router#
[ Ctrl+P ]
[ Ctrl+N ]
or Up arrow
마지막에 입력된 명령어를 보여줌
or Down arrow
직전에 입력된 명령어를 보여줌
명령어 입력을 끝냄
[ Tab ]
ICND
Copyright © 2002, Systems, Inc.
28
History Size 변경
Router#show terminal
Length: 25 lines, Width: 80 columns
Router# terminal history size ?
<0-256> Size of history buffer
[생략]
Router#terminal history size 30
Time since activation: never
Editing is enabled.
History is enabled, history size is 10.
.
.
History size를 변경할 수 있는
명령어는 terminal history size
Router#show terminal
Length: 25 lines, Width: 80 columns
[생략]
Time since activation: never
Editing is enabled.
History is enabled, history size is 30.
.
.
ICND
Copyright © 2002, Systems, Inc.
29
User Interface
ICND
Copyright © 2002, Cisco Systems, Inc.
##
사용자 인터페이스의 개요
사용자(User) Mode
Privileged Mode
• 명령모드에 접근이 가능함
ICND
Copyright © 2002, Systems, Inc.
31
Router에 로그인
Console
ICND
Copyright © 2002, Systems, Inc.
32
Router에 로그인
Console
Router con0 is now available
Press RETURN to get started.
ICND
Copyright © 2002, Systems, Inc.
33
Router에 로그인
Console
Router con0 is now available
Press RETURN to get started.
Router>
User Mode Prompt
Router>enable
Password:*****
ICND
Copyright © 2002, Systems, Inc.
34
Router에 로그인
Console
Router con0 is now available
Press RETURN to get started.
Router>
User Mode Prompt
Router>enable
Password:*****
Router#
Privileged-mode prompt
ICND
Copyright © 2002, Systems, Inc.
35
Router에 로그인
Console
Router con0 is now available
Press RETURN to get started.
Router>
User Mode Prompt
Router>enable
Password:*****
Router#
Router#disable
Router>
Privileged-mode prompt
ICND
Copyright © 2002, Systems, Inc.
36
Router에 로그인
Console
Router con0 is now available
Press RETURN to get started.
Router>
Router>enable
Password:*****
Router#
Router#disable
Router>
Router>logout
ICND
User Mode Prompt
Privileged-mode prompt
Copyright © 2002, Systems, Inc.
37
Router 상태 검사
ICND
Copyright © 2002, Cisco Systems, Inc.
라우터내부의 Configuration
관여 컴포넌트
RAM
Console
NVRAM
Flash
ROM
Interfaces
Auxiliary
ICND
Copyright © 2002, Systems, Inc.
39
라우터 상태 검사 명령어
Router#show version
Router#show flash
RAM
NVRAM
Router#show interfaces
Flash
Internetwork Operating System
Programs
Dynamic
Configuration
Information
Router#show processes CPU
Router#show protocols
Tables
and
Buffers
Backup
Configuration
File
Operating
Systems
I
n
t
e
r
f
a
c
e
s
Router#show mem
Router#show ip route
Router#show startup-config
Router#show running-config
ICND
Copyright © 2002, Systems, Inc.
40
show version 명령어
Router#show version
IOS (tm) 2500 Software (C2500-JS-L), Version 11.2 (6), RELEASE SOFTWARE (fc1)
Copyright (c) 1986-1997 by cisco Systems, Inc.
Compiled Tue 06-May-97 16:17 by kuong
Image text-base: 0x0303ED8C, data-base: 0x00001000
ROM: System Bootstrap, Version 5.2(8a), RELEASE SOFTWARE
ROM: 2500-XBOOT Bootstrap Software, Version 10.1(1), RELEASE SOFTWARE (fc1)
router uptime is 1 week, 3 days, 32 minutes
System restarted by reload
System image file is "c2500-js-l", booted via tftp from 171.69.1.129
--More--
ICND
Copyright © 2002, Systems, Inc.
41
show startup-config Command
and show running-config Command
Router#show startup-config
Using 1108 out of 130048 bytes
!
version 11.2
!
hostname router
-- More --
• 버전 10.2와 그 앞버젼은
show config 사용
ICND
Router#show running-config
Building configuration...
Current configuration:
!
version 11.2
!
-- More --
• 버전 10.2와 그 앞버젼은
write terminal 사용
Copyright © 2002, Systems, Inc.
42
Show Processes CPU
RouterB#sh processes CPU
CPU utilization for five seconds: 10%/9%; one minute: 23%; five minutes: 25%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min
TTY Process
1
152
4200
36
0.00% 0.00% 0.00% 0 Load Meter
2
664
100
6640
0.40% 0.85% 0.20% 2 Virtual Exec
3
47876
3228 14831
0.00% 0.21% 0.19% 0 Check heaps
4
0
1
0
0.00% 0.00% 0.00% 0 Pool Manager
5
0
2
0
0.00% 0.00% 0.00% 0 Timers
6
0
2
0
0.00% 0.00% 0.00% 0 Serial Backgroun
7
1504
378
3978
0.00% 0.00% 0.00% 0 ARP Input
8
8
3
2666
0.00% 0.00% 0.00% 0 DDR Timers
9
16
2
8000
0.00% 0.00% 0.00% 0 Entity MIB API
10
0
1
0
0.00% 0.00% 0.00% 0 SERIAL A'detect
RouterB#sh protocol
11
2576
2157
1194
0.40% 0.06% 0.01% 0 IP Input
Global values:
12
3360
2568
1308
0.00% 0.01% 0.01% 0 CDP Protocol
Internet Protocol routing is enabled
13
4
1 4000
0.00% 0.00% 0.00% 0 PPP IP Add Route
Ethernet0 is up, line protocol is up
14
4
36
111
0.00% 0.00% 0.00% 0 MOP Protocols
Internet address is 162.20.30.1/24
15
0
1
0
0.00% 0.00% 0.00% 0 X.25 Encaps Mana
Serial0 is down, line protocol is down
Internet address is 162.20.20.2/24
Serial1 is up, line protocol is up
Internet address is 162.20.40.1/24
ICND
Copyright © 2002, Systems, Inc.
43
Show memory of ip route
Router#show mem
Head
Processor
861F4
I/O
600000
Total(b) Used(b) Free(b) Lowest(b) Largest(b)
5737996 1050352 4687644 4457384 4471724
2097152 336376 1760776 1760776 1760556
Router#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
U - per-user static route, o - ODR
Gateway of last resort is 162.20.40.2 to network 0.0.0.0
I
C
C
S*
162.20.0.0/24 is subnetted, 3 subnets
162.20.60.0 [100/8976] via 162.20.40.2, 00:00:47, Serial1
162.20.40.0 is directly connected, Serial1
162.20.30.0 is directly connected, Ethernet0
0.0.0.0/0 [1/0] via 162.20.40.2
ICND
Copyright © 2002, Systems, Inc.
44
show interfaces Command
Router#show interfaces
Serial0 is up, line protocol is up
Hardware is MK5025
Internet address is 183.8.64.129, subnet mask is 255.255.255.128
MTU 1500 bytes, BW 56 Kbit, DLY 20000 usec, rely 255/255, load 9/255
Encapsulation HDLC, loopback not set, keepalive set (10 sec)
Last input 0:00:00, output 0:00:01, output hang never
Last clearing of "show interface" counters never
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
Five minute input rate 1000 bits/sec, 0 packets/sec
Five minute output rate 2000 bits/sec, 0 packets/sec
331885 packets input, 62400237 bytes, 0 no buffer
Received 230457 broadcasts, 0 runts, 0 giants
3 input errors, 3 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
403591 packets output, 66717279 bytes, 0 underruns
0 output errors, 0 collisions, 8 interface resets, 0 restarts
45 carrier transitions
ICND
Copyright © 2002, Systems, Inc.
45
Show flash Command
Router#show flash
System flash directory:
File Length Name/status
1 6888660 c2500-d-l.120-9.bin
[6888724 bytes used, 1499884 available, 8388608 total]
8192K bytes of processor board System flash (Read ONLY)
ICND
Copyright © 2002, Systems, Inc.
46
Password
Configuration
ICND
ICND
Copyright © 2002, Systems, Inc.
47
Password 개념
• Cisco 라우터는 보안을 위해 5개의 Password를 사용함.
• 두 가지의 패스워드는 Privileged 모드의 보안을 위해서 설정.
• 세가지 패스워드는 Consol Port, AUX Port, Telnet을 통해
사용자 모드로 접근할 때 사용.
ICND
Copyright © 2002, Systems, Inc.
48
Password 개념
• Enable Password Configuration
• Enable Secret Configuration
• Console Password Configuration
• AUX Password Configuration
• Telnet Password Configuration
ICND
Copyright © 2002, Systems, Inc.
49
Enable Password Configuration
Enable password 글로벌 환경설정 모드에서 가능.
소대 문자를 구분하기 때문의 주의.
명령 구문
Router#config terminal
Enter configuration commands, one per line. End with CNTL/Z
Router(config)#enable password {User password}
ICND
Copyright © 2002, Systems, Inc.
50
Enable Password Configuration
Consol Cable
Consol Port
Router
Router(config)#enable password cisco
User 모드에서 Privileged 모드로 전환시 묻는 암호
ICND
Copyright © 2002, Systems, Inc.
51
Enable Secret Password
Configuration
Consol Cable
Router
Router(config)#enable secret cisco1
User 모드에서 Privileged 모드로 전환시 묻는 또 하나의 암호
ICND
Copyright © 2002, Systems, Inc.
52
User Password Configuration
사용자 모드 패스워드는 Line 명령어를 사용하여 설정함.
Router(config)#line ?
<0-6> First Line number
aux
Auxiliary line
console Primary terminal line
vty
Virtual terminal
Router(config)#
ICND
Copyright © 2002, Systems, Inc.
53
AUX Password Configuration
Console Cable
Router
Router(config)#line aux 0
Router(config-line)#password auxpass
Router(config-line)#login
ICND
Copyright © 2002, Systems, Inc.
54
Console Password Configuration
Console Cable
Router
Router(config)#line console 0
Router(config-line)#password conpass
Router(config-line)#login
ICND
Copyright © 2002, Systems, Inc.
55
Telnet Password Configuration
Console Cable
Router
Router(config)#line vty 0 4
Router(config-line)#password telnetpass
Router(config-line)#login
ICND
Copyright © 2002, Systems, Inc.
56
Password 암호화 설정
Enable password는 수동으로 암호화를 설정해 주어야 함.
Router# show running-config
Building configuration...
Current configuration:
!
version 12.0
!
hostname Router
!
enable secret 5
$1$QFfP$ULrR2anexiRLw4cozRBmE1
enable password Cisco
!
ICND
Copyright © 2002, Systems, Inc.
57
Password 암호화 설정
명령어 형식: Router(config)#Service password-encryption
Router(config)#service password-encryption
ICND
Copyright © 2002, Systems, Inc.
58
Password 암호화 설정
Router# show running-config
Building configuration...
설정 전
Current configuration:
!
Router# show running-config
version 12.0
Building configuration...
!
hostname Router
Current configuration:
!
!
설정 후
enable secret 5 $1$QFfP$ULrR2anexiRLw4cozRBmE1
version 12.0
enable password Cisco
!
!
hostname Router
!
enable secret 5 $1$QFfP$ULrR2anexiRLw4cozRBmE1
enable password 7 030752180500
!
ICND
Copyright © 2002, Systems, Inc.
59
Password 삭제 방법
Password를 삭제 하고자 할 경우 글로벌 설정모드에서 NO를 사용함
Router((config)#no enable secret
Router(config)#no enable password
ICND
Copyright © 2002, Systems, Inc.
60
Interface
Configuration
ICND
Copyright © 2002, Systems, Inc.
61
Interface IP Address
Configuration
• 인터페이스에 IP 어드레스를 설정하려면 인터페이스 환경설정모드로부터 IP
어드레스 명령을 사용한다.
Router(config)#interface [포트이름]
Router(config)#ip address [IP주소] [서브넷마스크]
ICND
Copyright © 2002, Systems, Inc.
62
Interface IP Address
Configuration
* Interface IP Address 설정방법
Router(config)#interface fastethernet0/0
Router(config)#ip address 172.16.10.1 255.255.255.0
Router(config)#no shutdown
ICND
Copyright © 2002, Systems, Inc.
63
Secondary Command
• 두 번째 서브넷 어드레스를 인터페이스에 추가하고 싶을 경우 사용
• 세컨더리 IP 어드레스를 추가할 때는 반드시 Secondary 명령어를
사용.
Router(config-if)#
Ip address 172.16.20.1 255.255.255.0 secondary
ICND
Copyright © 2002, Systems, Inc.
64
Secondary 확인
Router#show running-config
Building configuration…
Current configuration:
[생략]
!
Interface fastethernet0/0
ip address 172.16.20.1 255.255.255.0 secondary
ip address 172.16.10.1 255.255.255.0
!
ICND
Copyright © 2002, Systems, Inc.
65
Configuring a Serial Interface
S0
S1
A
B
Serial
Interface
Router(config)#interface serial0/0
Router(config-if)#ip address [ip-address] [subnet mask]
Router(config-if)#no shutdown
ICND
Copyright © 2002, Systems, Inc.
66
Serial Interface Command
• Interface Line Clocking을 제공하는
CSU/DSU 타입의 디바이스
• 교육 용으로 사용되는 Back-to-Back 설정
ICND
Copyright © 2002, Systems, Inc.
67
DCE Serial Interface
Configuration
가입자
회선사업자
DTE
DCE
Router(config-if)#clock rate 56000
Serial Link 구간의 통신 속도 설정
DCE 포트에만 설정
ICND
Copyright © 2002, Systems, Inc.
68
DCE Serial Interface
Configuration
가입자
회선사업자
DTE
DCE
Router(config-if)#bandwidth 64
Serial Link 구간의 대역폭 설정
DCE 포트에만 설정
ICND
Copyright © 2002, Systems, Inc.
69
기타 설정
ICND
Copyright © 2002, Systems, Inc.
70
Hostname 설정
Hostname 명령어는 라우터를 식별하기 위한 명령어
Router(config)#hostname Cisco
Cisco(config)#hostname Router
라우터 이름 변경
ICND
Copyright © 2002, Systems, Inc.
71
Description (설명) 설정
• 인터페이스에 설명문을 보기 위해서는 Show running-config이나
show interface 명령어로 확인을 할 수가 있다.
Router(config)# interface fastethernet0/0
Router(config-if)# description Ethernet Interface
ICND
Copyright © 2002, Systems, Inc.
72
웹 관리 설정
• Web에서 라우터로 접속하여 라우터를 관리하기위한 설정
설정
Router(config)# ip http server
해제
Router(config)# no ip http server
ICND
Copyright © 2002, Systems, Inc.
73
사용자 계정
• 사용자별 게정및 암호를 설정할 수 있다.
Router(config)# username wpc password wpcpass
telnet 포트에 적용
Router(config)# line vty 0 4
Router(config)# login local
ICND
Copyright © 2002, Systems, Inc.
74
telnet 접속 유지 시간 설정
• 텔넷 접속 후 일정시간 동안 아무런 입력이 없으면 자동으로 연결을
해제하는 시간 설정
Router(config)# line vty 0 4
Router(config)# exec-timeout 2 30
ICND
Copyright © 2002, Systems, Inc.
75
Banner 설정
개요
• 사용자가 라우터로 로그인할 때 표시
• 다이얼링을 하는 사용자에게 보안통보를 표시
• 배너 설정방법에는 4가지의 종류가 있다.
ICND
Copyright © 2002, Systems, Inc.
76
Banner 설정
Router
Router(config)#banner ?
LINE
c banner-text c, where 'c' is a delimiting character
exec
Set EXEC process creation banner
incoming Set incoming terminal line banner
login
Set login banner
motd
Set Message of the Day banner
Router(config)#
ICND
Copyright © 2002, Systems, Inc.
77
Banner MOTD Configuration
Router
Router# config terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#banner motd #
World Academy #
Router(config)#
MOTD (Message of the Day)가 가장 널리 사용된다.
ICND
Copyright © 2002, Systems, Inc.
78
Banner Mode Configuration
Router
World Academy
User Access Verification
Password:
ICND
Copyright © 2002, Systems, Inc.
79