【正文】 !interface5Router!enableserviceserviceserviceconfiguration:!versiontBuilding(enable)12,777,888,1003,1005camspaninpkts1/1spanport13121110/1112port10/910port10/78port10/56port10/34port10/12port10/912port10/58port10/14port110setmodule10moduleMM12port1098isl7/211005setontrunk8887/122setvlanenablesetnameEthernetset24port7isl6/160setinterval6/1setcdpnamedisablesettrapnormalsetlevelsetnameSwitchset1port654isl3/13/24setvlan7773/122setvlanenablesetnameEthernetset24port3:1/12!moduleport1setnameSupervisorset2port1flashbootconfigregistermandset!setstemaxhoparemaxhopmoderingparentstatesaidmtutypenamevlanibm0x0active1010051500trbrftrnetdefault1005setstpbridgestatesaidmtutypenamevlanactive1010021500fddifddidefault1002setstatesaidmtutypenamevlanactive1007771500ethernetrgw777setstatesaidmtutypenamevlanpruneeligible21000clearvtppruningdisablesetvtpmodehnesetvtp!Commandalias1setipfragmentationenablesetipredirect1200setarpsl0setsl0upsetinterface1interfacecontactsetsystemnamedisablesetsystembaud^C^C!systemsetbannerlogout24Consoleset$1$FMFQ$HfZR5DUszVHIRhrz4h6V70set$1$FMFQ$HfZR5DUszVHIRhrz4h6V70set5500配置：beginset5500C為需設(shè)置的命令。system在交換機(jī)內(nèi)劃有3個(gè)虛擬網(wǎng)，分別名為default、qbw、rgw，通過WSX5302實(shí)現(xiàn)虛擬網(wǎng)間路由。例一：設(shè)備選用Catalyst5500交換機(jī)1臺(tái)，安裝WSX5530E3管理引擎，多塊WSX5225R及WSX5302路由交換模塊,WSX5302被直接插入交換機(jī)，通過二個(gè)通道與系統(tǒng)背板上的VLAN如下圖所示，在支持ISL的接口上可以傳送來自不同VLAN的數(shù)據(jù)。Link)協(xié)議用于實(shí)現(xiàn)交換機(jī)間的VLAN中繼。隨著虛擬網(wǎng)絡(luò)技術(shù)的應(yīng)用，隨之必然產(chǎn)生了在虛擬網(wǎng)間如何通訊的問題．交換機(jī)間鏈路（ISL）協(xié)議ISL(Interior虛擬網(wǎng)絡(luò)技術(shù)打破了地理環(huán)境的制約,在不改動(dòng)網(wǎng)絡(luò)物理連接的情況下可以任意將工作站在工作組或子網(wǎng)之間移動(dòng),工作站組成邏輯工作組或虛擬子網(wǎng),提高信息系統(tǒng)的運(yùn)作性能,均衡網(wǎng)絡(luò)數(shù)據(jù)流量,合理利用硬件及信息資源。!虛擬局域網(wǎng)(VLAN)當(dāng)前在我們構(gòu)造企業(yè)網(wǎng)絡(luò)時(shí)所采用的主干網(wǎng)絡(luò)技術(shù)一般都是基于交換和虛擬網(wǎng)絡(luò)的。200network2．舉例Router1:routernetwork指定與該Cisco思科路由器相鄰的節(jié)點(diǎn)地址neighborigrp軟件從路由表中清除路由。在7個(gè)更新周期即630秒后，Cisco使用組合用戶配置尺度，包括延遲、帶寬、可靠性和負(fù)載。Routing(Interioripipnetworkripversion{1|2}1指定與該Cisco思科路由器相連的網(wǎng)絡(luò)network任務(wù)命令指定使用RIP協(xié)議router如果到相同目標(biāo)有二個(gè)不等速或不同帶寬的Cisco思科路由器，但跳躍計(jì)數(shù)相同，則RIP認(rèn)為兩個(gè)路由是等距離的。RIP提供跳躍計(jì)數(shù)(hop文檔見RFC105RFC1723。Gatewayinformation00!line0exectimeoutro!linemunity0interfacelistinsideNAT!ippermit!!protocolany!dialerlist2ListAccessbriRoutes!ipclassless!!splithorizonnoenablenonopasswordsentusername120pppdialerstringholdqueuemultilinkdialergrouppapppppppnataddressbriip1shutdownnoaddress!interfacedescriptionnoSerialinsidenoipaddressEthernetdomainlookupipsubnetzeronoswitchtypeany具體配置如下：hostname20interfacelistinside0所擁有的地址ipbri263設(shè)定默認(rèn)路由ip263pap2633permit設(shè)定撥號(hào)，號(hào)碼為2633dialerprotocol1定義撥號(hào)組1允許所有IP協(xié)議dialerlistpapoutside}使用ppp/pap作認(rèn)證ppp{insidenegotiated指定內(nèi)部和外部端口ip263的ISDN電話號(hào)碼為2633，用戶為263，口令為263，所涉及的命令如下表：任務(wù)命令指定接口通過PPP/IPCP地址協(xié)商獲得IP地址iptonowBRI0:1%ISDN6CONNECT:tochangedInterfaceprotocol%LINEPROTO5UPDOWN:statetoBRI0:1,onLineVi100:04:06:updialertochangedInterfacenegotiated00:04:05:Noup00:04:05:stateBRI0:1,%LINK3UPDOWN:router2callback57200:04:05:toBRI0:router2callbackexpired00:04:05:Callbackcall00:04:05:BRI0:2:disconnectingdown00:03:52:stateBRI0:2,%LINK3UPDOWN:disconnectingstarted00:03:52:router2callbacktochangedInterfacecall00:03:51:BRI0:1:disconnectingdown00:03:50:stateBRI0:1,%LINK3UPDOWN:disconnecting57200:03:50:toservercallbackup00:03:50:stateBRI0:1,%LINK3UPDOWN:dialerrouter2pingstatus舉例:執(zhí)行debugdialershowppppppppppppisdnisdnisdnpermit!相關(guān)調(diào)試命令：debugprotocolchap！dialerlist1ppppppcallbackloadthresholdrouter1mapencapsulationaddressbriswitchtypepasswordrouter2userip1callbackserverdialerauthenticationmultilinkdialergroupcallbackloadthresholds3router2mapencapsulationaddressbriswitchtypepasswordrouter1userrequest[username]設(shè)置接口要求PPP回?fù)躳ppdialerclassname通過查找注冊在dialeraccept在全局模式下為PPP回?fù)茉O(shè)置映射類別mapclassdialstring設(shè)置接口支持PPP回?fù)躳ppclassnameprotocoldialerClient。permit!CiscoCisco思科路由器同時(shí)支持回?fù)芄δ?，我們將Cisco思科路由器Router1作為Callbackprotocolchap！dialerlist1pppppploadthresholdrouter1mapencapsulationaddressbriswitchtypepasswordrouter2userip1authenticationmultilinkdialergrouploadthresholdrouter2mapencapsulationaddressbriswitchtypepasswordrouter1userswitches（dialondemandZealandZealandbasicnznet3PRI.forswitchNTonly)(ISDNthetype5ESSATamp。only)(ISDNthetype4ESSATamp。switchesNationalswitchesbasicNTswitchesbasicATamp。switchesNorthISDNprimarynttISDNJapaneseISDNFrenchswitchesVN2vn2andswitchesprimarynet5signallingEuroISDNcoversnations)。and(UK,ISDNbasicnet3(phaseNET3basicnwnet3ISDNGermanTS013交換機(jī)類型Australiabasicts013timers}注：,國內(nèi)交換機(jī)一般為basicnet3。number]|statusservicesmemoryhistory{activeload顯示ISDN有關(guān)信息showmultilink設(shè)置啟動(dòng)另一個(gè)B通道的閾值dialer[broadcast][nameprotocolppp設(shè)置協(xié)議地址與電話號(hào)碼的映射dialerbriswitchtypePRI為30B+D。D信道。在北美和日本，ISDN的主速率接口（PRI）提供23個(gè)B信道和1個(gè)D信道，其中D信道速率為64Kbps。BRI的B信道速率為64Kbps,用于傳輸用戶數(shù)據(jù)。chap!ISDN（ISDN）綜合數(shù)字業(yè)務(wù)網(wǎng)（ISDN）由數(shù)字電話和數(shù)據(jù)傳輸服務(wù)兩部分組成，一般由電話局提供這種服務(wù)。pppaddressxxxinterfacerouter1chap!Router2:hostname1000000pppSerial0ippasswordrouter1username所建的這兩用戶的password必須相同。speed舉例Cisco思科路由器Router1和Router2的S0口均封裝PPP協(xié)議，采用CHAP做認(rèn)證，在Router1中應(yīng)建立一個(gè)用戶，以對端Cisco思科路由器主機(jī)名作為用戶名，即用戶名應(yīng)為router2。password指定口令usernamedefault][listnamepap}chap|chap{chapppp1設(shè)置認(rèn)證方法ppp使用CHAP和PAP認(rèn)證,每個(gè)Cisco思科路由器通過名字來識(shí)別，可以防止未經(jīng)授權(quán)的訪問。Protocol)Protoc