Restablecimiento de contraseña y configuración básica de Cisco 1941

Da la casualidad de que tienes que afrontar tareas que parece que no estás preparado para resolver, pero necesitas obtener el resultado aquí y ahora. Suena familiar, ¿eh? Bienvenido al mundo de la gestión de Europa del Este con una cultura de gestión adecuada.





, , , , - ASUS, CCNA. , , " ", " , , ".





, , , , , .





. : , ( ), () . .





, . , :





Nos interesa su lado derecho, donde están todos los puertos.  La consola está marcada en azul, Ethernet en amarillo.
, . , -- Ethernet

Ethernet , , IP -- "" ( , ). - , . - . Cisco, .





El cable es Cisco "especial".  La desoldadura está en todas partes.
"" Cisco. .

COM- , COM-USB . , "" mini-usb . , , , . , . Cisco miniusb (COM LPT) Cisco Serial (COM14) ( 14, ). Putty, , , , . Serial (Com14) Telnet (TCP23).





Putty Serial ( COM14, Baud Rate 9600). , . ROMMON – – , cisco IOS ( IOS, ). ROMMON, IOS – .





, , Cisco 1941 Break ( Pause) Ctrl+Break ( , Putty special command – break). .





rommon (ROM monitor) :





rommon 1 >







confreg reset





rommon 1 > confreg 0x2142







rommon 2 > reset







enable



en



:)





Router1>en







«» :





Router1#copy startup-config running-config







, , , , telnet .





Router1#conf terminal







Router1(config)#enable secret $$$NewPassword







Router1(config)#enable password $$$NewPassword







Router1(config)#line vty 0 4







Router1(config-line)#password $$$NewPassword







Router1(config-line)#login







Router1(config-line)#exit







Router1(config)#line console 0







Router1(config-line)#password $$$NewPassword







Router1(config-line)#login







Router1(config-line)#exit







, . , .





Router1(config)# config-register 0x2102







Router1(config)#exit







:





Router1# copy running-config startup-config







Router1# reload







, . . " " ( , ?). , .





, " ". "" : GigabitEthernet0/0 GigabitEthernet0/1. WAN LAN , .





WAN, 100.200.100.202/30 100.200.100.201





LAN, , 192.168.1.1/24 192.168.1.1





:





>en







#







configure terminal, - exit:





#conf t







#exit







:





#conf t







#interface GigabitEthernet0/1







#description LAN







#ip address 192.168.1.1 255.255.255.0







#no shutdown







#exit







DHCP ( .1-.50 .200-.254).





:





#ip dhcp excluded-address 192.168.1.200 192.168.1.254







#ip dhcp excluded-address 192.168.1.1 192.168.1.50







#ip dhcp ping packets 4







:





#ip dhcp pool MY_DHCP_POOL_1







#import all







#network 192.168.1.0 255.255.255.0







#default-router 192.168.1.1







#dns-server 77.88.8.8







#lease 3







#exit







, ( )





DHCP . ping -t .





:





#conf t







#interface GigabitEthernet0/0







#ip address 100.200.100.202 255.255.255.252







#no shutdown







#exit







- 100.200.100.201 - , ( - )





#ip forward-protocol nd







#ip route 0.0.0.0 0.0.0.0 100.200.100.201







8.8.8.8





#ip domain timeout 2







#ip name-server 8.8.8.8







#ip name-server 77.88.8.8







#ip cef







ya.ru





#copy running-config startup-config



( #wr



)





, . .





, . NAT (ACL)





, (access-group), NAT, . . any ( -- any ). (access-list standard) , (access-list extended). -- , .





NAT





(, , iptables, ):





#ip access-list standard 10







#permit 192.168.1.0 0.0.0.255







#deny any







#exit







():





#interface gigabitethernet0/1







#ip nat inside







#exit







#interface gigabitethernet0/0







#ip nat outside







#exit







C : ( ):





#ip nat inside source list 10 interface gigabitethernet0/0 overload







TCPSYN:





#ip tcp synwait-time 30







– ( , dhcp ). -- (tcp 23). http(s) ssh –





( – icmp)





#ip access-list extended 101







#deny tcp any any eq 23







#permit tcp any any







#permit udp any any







#permit icmp any any echo-reply







#permit icmp any any time-exceeded







#permit icmp any any unreachable







#deny ip any any







#exit







:





#int gigabitethernet0/0







#ip access-group 101 in







#exit







#copy running-config startup-config



( #wr



)





"" , . , .





. , . , , , . .





P.S.

-- show.



sh



, , shutdown







, -, , :





#no shutdown







/ :





#show running-config







show:





#show ?







:





#ip ?







:





#show ip interface brief







L2:





#show interface summary







, DHCP:





#show ip dhcp bind







:





#no [ ]







, :





#no ip default-gateway







:





#no ip access-list extended 101







:





#no ip route []







- . , :) , ACL, . .






.





10% !








All Articles