Cisco 명령어

1) History 설정

Router#Terminal history size [15] (관리자 설정 모드)

2) PPP PAP

Router(config)#username [username] password [password]

Router(config)#int [Interface-Type][Interface-Number]

Router(config-if)#no shut

Router(config-if)#encapsulation ppp

Router(config-if)#ppp authentication pap

Router(config-if)#ppp pap sent-username [username] password [password]

3) PPP CHAP

Router(config)#username [username] password [password]

Router(config)#int [Interface-Type][Interface-Number]

Router(config-if)#ip add [IP Addr] [Subnet mask]

Router(config-if)#no shut

Router(config-if)#encapsulation ppp

Router(config-if)#ppp authentication chap

4) Passive-Interface 설정

Router(config)#router rip

Router(config)#passive-interface [Interface-Type][Interface-Number]

5) SSH 접속 설정

Router(config)#ip domain-name [Domain-name]

Router(config)#crypto key generate rsa

Router(config)#username [username] password [password]

Router(config)#line vty 0 4

Router(config-line)#login local

Router(config-line)#transport input ssh

6) DHCP 서비스 구성

Router(config)# ip dhcp pool [Name]

Router(dhcp-config)#network [IP Addr] [Subnet mask]

Router(dhcp-config)#default-router [Gateway IP]

Router(dhcp-config)#dns-server [DNS IP](없으면 생략 가능)

Router(dhcp-config)#exit

Router(config)#ip dhcp excluded-address [IP] [IP](제외할 IP 대역) 

7) DHCP Relay 구성

Router(config)#int f0/0

Router(config-if)#ip address [IP Addr] [Subnet mask]

Router(config-if)#ip helper-address [DHCP Server IP Address]

8) Root-Bridge 설정

Switch(config)#spanning-tree vlan 1 [가장 낮은 값](ex. priority 4096)

Switch(config)#exit

Switch#show spanning-tree

9) Portfast 설정

Switch(config)#interface [Interface-Type][Interface-Number]

Switch(config-if)#spanning-tree portfast

10)Port-Security 설정

Switch(config)#int [Interface-Type][Interface-Number]

Switch(config-if)#switchport mode access

Switch(config-if)#switchport port-security

Switch(config-if)#switchport port-security maximum [개수]

Switch(config-if)#switchport port-security violation shutdown

11) VTP 설정(Server)

Switch(config)#vtp version 2

Switch(config)#vtp domain [Name]

Switch(config)#vtp password [Password]

Switch(config)#int [Interface-Type][Interface-Number]

Switch(config-if)#switchport mode trunk

12) VTP 설정(Client)

Switch(config)#vtp version 2

Switch(config)#vtp mode client

Switch(config)#vtp domain [Name]

Switch(config)#vtp password [Password]

Switch(config)#int [Interface-Type][Interface-Number]

Switch(config-if)#switchport mode trunk

13) Default-Gateway 설정

Switch(config)#int vlan 10

Switch(config-if)#ip address [IP Addr] [Subnet mask]

Switch(config-if)#exit

Switch(config)#ip default-gateway [Gateway IP]

14) Rip v1

Router(config)#router rip

Router(config-router)#do show ip int brief(인접 네트워크 확인)

Router(config-router)#network [라우터의 연결 IP Address]

Router(config-router)#no auto-summary(자동축약 금지)

15) Rip v2

Router(config)#router rip

Router(config-router)#version 2

Router(config-router)#do show ip int brief(인접 네트워크 확인)

Router(config-router)#network [라우터의 연결 IP Address]

Router(config-router)#no auto-summary(자동축약 금지)

16) OSPF

Router(config)#router ospf [Process ID]

Router(config-router)#network [IP Address] [Wildcard Mask] area [Number]

17) 정적라우팅

Router(config)#ip route [Destination Network] [Subnet Mask] [Next Hop Addresss]

Router#show ip route

- 라우팅 테이블 확인

Router#show ip int brief

- 인터페이스의 IP Address를 확인

Router#debug ip rip

- RIP 설정 시 문제점이나 설정 확인

Router#show ip protocols

- 설정된 라우팅 프로토콜 확인

18) Access-List

Router(config)#access-list [Number] [Permit|Deny] [출발지 IP Wildcard]

Router(config)#access-list 10 permit 168.126.0.0 0.0.0.255

- 168.126.0.0 네트워크 허용

Router(config)#access-list 10 deny 168.126.0.0 0.0.0.255

- 168.126.0.0 네트워크 거부

Router(config)#access-list 99 permit any

- 접근하는 모든 IP 허용

Router(config)#access-list 1 deny 255.255.255.255

- 접근하는 모든 IP 거부

연습문제)

R2(config)#username master password  passon

R2(config)#access-list 1 permit host 168.126.64.2

R2(config)#line vty 0 4

R2(config-line)#access-class 1 in

R2(config-line)#login local

R2(config-line)#exit

19) 정적 NAT

Router(config)#ip nat inside source static [사설 IP] [공인 IP]

Router(config)#int [사설 IP 진입 인터페이스 포트]

Router(config-if)#ip nat inside

Router(config-if)#exit

Router(config)#int [공인 IP 진입 인터페이스 포트]

Router(config-if)#ip nat outside

Router(config-if)#exit

20) 동적 NAT

Router(config)#ip nat pool [ACL 이름] [시작 공인 IP] [마지막 공인 IP] netmask [Subnet Mask]

Router(config)#ip nat inside source list [ACL 번호] pool [ACL 이름]

Router(config)#access-list [ACL 번호] permit [접근 가능한 IP 와일드마스크]

Router(config)#int [사설 IP 진입 인터페이스 포트]

Router(config-if)#ip nat inside

Router(config-if)#exit

Router(config)#int [공인 IP 진입 인터페이스 포트]

Router(config-if)#ip nat outside

Router(config-if)#exit

21) NAT Overload(=PAT)

Router(config)#ip nat inside source list [ACL 번호] int [Interface-Type][Interface-Number] overload

Router(config)#access-list [Number] [Permit|Deny] [출발지 IP Wildcard]

Router(config)#int [사설 IP 진입 인터페이스 포트]

Router(config-if)#ip nat inside

Router(config-if)#exit

Router(config)#int [공인 IP 진입 인터페이스 포트]

Router(config-if)#ip nat outside

Router(config-if)#exit

22) DNS 설정

Router(config)#ip host [DNS] [IP Addr]

Router(config)#ip name-server

Router(config)#ip domain lookup