05.08.2016
Cisco
LANCOM
MicroTik
Securepoint
Watchguard
ubiquiti
Funkwerk
Cisco
AVM
NetGear
LevelOne
Siemens
Telekom Speedport/Digibox
ZyXEL
PC Engines
sonstiges
MicroTik
Securepoint
Watchguard
ubiquiti
Funkwerk
Cisco
AVM
NetGear
LevelOne
Siemens
Telekom Speedport/Digibox
ZyXEL
PC Engines
sonstiges
- Allgemeine Hinweise
- Privilegierte Modus
- Globale Konfiguration
- Interface Konfiguration
- Line Konfiguration
- Beispiele
- Kennwort zurücksetzten
- sonstiges
Allgemeine Hinweise
Das Consolenkabel mit dem Router verbinden und folgende Einstellungen vornehmen
Hyperterminal Verbindung
Einstellungen
Bits pro Sekunde 9600 Datenbits 8 Parität keine Stoppbits 1 Flusssteuerung keine
nach dem Herstellen der Verbindung kann der Router gestartet werden, es sollten gleich einige Startmeldungen erscheinen.
wenn der Router neu ist erfolgt die abfrage der Passwörter und der Zuweisung der IP Adresse für den Router.
Liste aller möglichen Befehle erhält man mit ?
Router>? Exec commands: access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface clear Reset functions connect Open a terminal connection disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system lock Lock the terminal login Log in as a particular user logout Exit from the EXEC name-connection Name an existing network connection ping Send echo messages ppp Start IETF Point-to-Point Protocol (PPP) resume Resume an active network connection rlogin Open an rlogin connection set Set system parameter (not config) show Show running system information slip Start Serial-line IP (SLIP) systat Display information about terminal lines telnet Open a telnet connection terminal Set terminal line parameters traceroute Trace route to destination tunnel Open a tunnel connection where List active connections
Privilegierte Modus
in dem "Privilegierten Modus" kommt man durch die Eingabe von "enable" am Prompt des Routers. Beendet wird der "Privilegierten Modus" mit "disable".
Router>enable Router#? Exec commands: access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface access-template Create a temporary Access-List entry archive manage archive files cd Change current directory clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy from one file to another debug Debugging f delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase a filesystem exit Exit from the EXEC help Description of the interactive help system isdn Make/disconnect an isdn data call on a BRI interface lock Lock the terminal login Log in as a part logout Exit from the EXEC more Display the contents of a file name-connection Name an existing network connection no Disable debugging functions ping Send echo messages ppp Start IETF Point-to-Point Protocol (PPP) pwd Display current working directory reload Halt and perform a cold restart resume Resume an active network connection rlogin Open an rlogin connection rsh Execute a remote command send Send a message to other tty lines set Set system parameter (not config) setup Run the SETUP command facility show Show running system information slip Start Serial-line IP (SLIP) squeeze Squeeze a filesystem start-chat Start a chat-script on a line systat Display information about terminal lines telnet Open a telnet connection terminal Set terminal line parameters test Test subsystems, memory, and interfaces traceroute Trace route to destination tunnel Open a tunnel connection undebug Disable debugging functions (see also 'debug') undelete Undelete a file verify Verify a file where List active connections write Write running configuration to memory, network, or terminal
Globale Konfiguration
durch die Eingabe von "configure" kommt man in den globalen Konfigurationsmodus, beendet wird dieser durch "exit". Mit "end" oder der Tastenkonbination "CTRL-Z" kommt man zum Privilegierten Modus.
Router>enable
Router#configure
Configuring from terminal, memory, or network [terminal]?
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#?
Configure commands:
aaa Authentication, Authorization and Accounting.
access-list Add an access list entry
alias Create command alias
arp Set a static ARP entry
async-bootp Modify system bootp parameters
banner Define a login banner
boot Modify system boot parameters
bridge Bridge Group.
buffers Adjust system buffer pool parameters
busy-message Display message when connection to host fails
call-history-mib Define call history mib parameters
cdp Global CDP configuration subcommands
chat-script Define a modem chat script
clock Configure time-of-day clock
config-register Define the configuration register
default Set a command to its defaults
default-value Default character-bits values
dial-peer Dial Map (Peer) configuration commands
dialer Dialer watch commands
dialer-list Create a dialer list entry
dnsix-dmdp Provide DMDP service for DNSIX
dnsix-dmdp Provide DMDP service for DNSIX
dnsix-nat Provide DNSIX service for audit trails
downward-compatible-config Generate a configuration compatible with older
software
enable Modify enable password parameters
end Exit from configure mode
exception Exception handling
exit Exit from configure mode
file Adjust file system parameters
frame-relay global frame relay configuration commands
help Description of the interactive help system
hostname Set system's network name
interface Select an interface to configure
ip Global IP configuration subcommands
isdn ISDN configuration commands
key Key management
line Configure a terminal line
logging Modify message logging facilities
login-string Define a host-specific login string
map-class Configure static map class
map-list Configure static map list
menu Define a user-interface menu
multilink PPP multilink global configuration
netbios NETBIOS access control filtering
no Negate a command or set its defaults
pots Phone configuration commands
priority-list Build a priority list
privilege Command privilege parameters
prompt Set system's prompt
queue-list Build a custom queue list
resume-string Define a host-specific resume string
rlogin Rlogin configuration commands
route-map Create route-map or enter route-map command mode
router Enable a routing process
scheduler Scheduler parameters
service Modify use of network based services
snmp-server Modify SNMP parameters
sntp Configure SNTP
state-machine Define a TCP dispatch state machine
subscriber-policy Subscriber policy
tacacs-server Modify TACACS query parameters
terminal-queue Terminal queue commands
tftp-server Provide TFTP service for netload requests
time-range Define time range entries
username Establish User Name Authentication
Router(config)#
durch die Eingabe von einem Buchstaben und dem ? erhält man eine Auswahl von den möglichen Befehlen.
Router(config)#i? interface ip isdn
Router(config)#in ? Async Async interface BRI ISDN Basic Rate Interface BVI Bridge-Group Virtual Interface Dialer Dialer interface Ethernet IEEE 802.3 Group-Async Async Group interface Lex Lex interface Loopback Loopback interface Multilink Multilink-group interface Null Null interface Port-channel Ethernet Channel of interfaces Tunnel Tunnel interface Virtual-Template Virtual Template interface Virtual-TokenRing Virtual TokenRing
mit TAB kann man den aktuellen Befehl ergänzen.
Interface Konfiguration
die Interfacekonfiguration erreicht man durch die Eingabe von "interface"Name des zu konfigurierenden Interface", beendet wird es wie die globale Konfiguration mittels "exit". Mit "end" oder der Tastenkonbination "CTRL-Z" kommt man zum Privilegierten Modus.
Router(config)#interface ethernet 0
Router(config-if)#?
Interface configuration commands:
access-expression Build a bridge boolean access expression
arp Set arp type (arpa, probe, snap) or timeout
bandwidth Set bandwidth informational parameter
bridge-group Transparent bridging interface parameters
carrier-delay Specify delay for interface transitions
cdp CDP interface subcommands
custom-queue-list Assign a custom queue list to an interface
default Set a command to its defaults
delay Specify interface throughput delay
description Interface specific description
exit Exit from interface configuration mode
fair-queue Enable Fair Queuing on an Interface
help Description of the interactive help system
hold-queue Set hold queue depth
ip Interface Internet Protocol config commands
keepalive Enable keepalive
llc2 LLC2 Interface Subcommands
load-interval Specify interval for load calculation for an interface
logging Configure logging for interface
loopback Configure internal loopback on an interface
mac-address Manually set interface MAC address
mtu Set the interface Maximum Transmission Unit (MTU)
multilink-group Put interface in a multilink bundle
netbios Use a defined NETBIOS access list or enable name-caching
no Negate a command or set its defaults
priority-group Assign a priority group to an interface
random-detect Enable Weighted Random Early Detection (WRED) on an
Interface
shutdown Shutdown the selected interface
snapshot Configure snapshot support on the interface
snmp Modify SNMP interface parameters
standby Hot standby interface subcommands
timeout Define timeout values for this interface
transmit-interface Assign a transmit interface to a receive-only interface
tx-queue-limit Configure card level transmit queue limit
Line Konfiguration
Die Konfiguration wird gestartet durch "line", beendet wird es wie die Line Konfiguration mittels "exit". Mit "end" oder der Tastenkonbination "CTRL-Z" kommt man zum Privilegierten Modus.
Router(config)#line vty 1
Router(config-line)#?
Line configuration commands:
absolute-timeout Set absolute timeout for line disconnection
access-class Filter connections based on an IP access list
activation-character Define the activation character
autobaud Set line to autobaud
autocommand Automatically execute an EXEC command
autocommand-options Autocommand options
autohangup Automatically hangup when last connection closes
data-character-bits Size of characters being handled
databits Set number of data bits per character
default Set a command to its defaults
disconnect-character Define the disconnect character
dispatch-character Define the dispatch character
dispatch-machine Reference a TCP dispatch state machine
dispatch-timeout Set the dispatch timer
domain-lookup Enable domain lookups in show commands
editing Enable command line editing
escape-character Change the current line's escape character
exec Start an EXEC process
exec-banner Enable the display of the EXEC banner
exec-character-bits Size of characters to the command exec
exec-timeout Set the EXEC timeout
exit Exit from line configuration mode
flowcontrol Set the flow control
flush-at-activation Clear input stream at activation
full-help Provide help to unprivileged user
help Description of the interactive help system
history Enable and control the command history function
hold-character Define the hold character
insecure Mark line as 'insecure' for LAT
international Enable international 8-bit character support
ip IP options
length Set number of lines on a screen
location Enter terminal location description
lockable Allow users to lock a line
logging Modify message logging facilities
login Enable password checking
logout-warning Set Warning countdown for absolute timeout of
line
modem Configure the Modem Control Lines
monitor Copy debug output to the current terminal line
motd-banner Enable the display of the MOTD banner
no Negate a command or set its defaults
notify Inform users of output from concurrent sessions
padding Set padding for a specified output character
parity Set terminal parity
password Set a password
private Configuration options that user can set will
remain in effect between terminal sessions
privilege Change privilege level for line
refuse-message Define a refuse banner
rotary Add line to a rotary group
rxspeed Set the receive speed
script specify event related chat scripts to run on the
line
session-disconnect-warning Set warning countdown for session-timeout
session-limit Set maximum number of sessions
session-timeout Set interval for closing connection when there is
no input traffic
special-character-bits Size of the escape (and other special) characters
speed Set the transmit and receive speeds
start-character Define the start character
stop-character Define the stop character
stopbits Set async line stop bits
telnet Telnet protocol-specific configuration
terminal-type Set the terminal type
timeout Timeouts for the line
transport Define transport protocols for line
txspeed Set the transmit speeds
vacant-message Define a vacant banner
width Set width of the display terminal
Beispiele
Hostname setzen
Router(config)#hostname cisco
Passwort setzen
cisco(config)#enable secret <geheim>
cisco(config)#ip subnet-zero cisco(config)#no ip domain-lookup
IP Addresse setzen
cisco(config)#interface eth 0 cisco(config-if)#ip add 192.168.2.254 255.255.255.0 cisco(config-if)#no shutdown cisco(config-if)#end cisco#copy run start
Konfiguration permanent sichern
cisco#copy running-config startup-config
Konfiguration anzeigen
cisco#show running-config
Kennwort zurücksetzten
Cisco 160x Serie
User break detected at location 0x2006718 rommon 1 > confreg 0x2142 rommon 2 > i
Cisco 250x Serie
Abort at 0x3171892 (PC) >o/r 0x2142 >i
enable erase nvram
oder
| enable | enable Modus |
| erase startup-config | Alte Konfiguration inclusive Kennwörter löschen |
| configure terminal | Konfiguration des Registers vorbereiten |
| config-register 0x2102 | Original Register setzen |
| exit | Konfigurationsmodus beenden |
| reload | Keine Änderungen speichern |
sonstiges