资料类别： 思科CCNA 640-802的英文原版教材 rar压缩文件/pdf文档 资料下载： 点击这里下载
ccna portable command guide
second edition
scott empson
ii
ccna portable command guide, second edition
scott empson
copyright? 2008 CISCO systems, inc.
published by:
cisco press
800 east 96th street
indianapolis, in 46240 usa
all rights reserved. no part of this book may be reproduced or transmitted in any form or
by any means, electronic or mechanical, including photocopying, recording, or by any
information storage and retrieval system, without written permission from the publisher,
except for the inclusion of brief quotations in a review.
printed in the united states of america
first printing july 2007
library of congress cataloging-in-publication data
empson, scott.
portable command reference / scott empson. -- 2nd ed.
p. cm.
isbn 978-1-58720-193-6 (pbk.)
1. computer networks--examinations--study guides. 2. internetworking
(telecommunication)--examinations--study guides. 3. electronic data
processing personnel--certification. i. title.
tk5105.5.e4352 2007
004.6--dc22
2007023863
isbn-13: 978-1-5872-0193-6
isbn-10: 1-58720-193-3
warning and disclaimer
this book is designed to provide information about the certified cisco networking
associate (ccna) exam and the commands needed at this level of network administration.
every effort has been made to make this book as complete and as accurate as possible, but
no warranty or fitness is implied.
the information is provided on an “as is” basis. the author, cisco press, and cisco
systems, inc. shall have neither liability nor responsibility to any person or entity with
respect to any loss or damages arising from the information contained in this book or from
the use of the discs or programs that may accompany it.
the opinions expressed in this book belong to the author and are not necessarily those of
cisco systems, inc.
trademark acknowledgments
all terms mentioned in this book that are known to be trademarks or service marks have
been appropriately capitalized. cisco press or cisco systems, inc., cannot attest to the
accuracy of this information. use of a term in this book should not be regarded as affecting
the validity of any trademark or service mark.
iii
corporate and government sales
the publisher offers excellent discounts on this book when ordered in quantity for bulk
purchases or special sales, which may include electronic versions and/or custom covers and
content particular to your business, training goals, marketing focus, and branding interests.
for more information, please contact: u.s. corporate and government sales
1-800-382-3419 corpsales@pearsontechgroup.com
for sales outside the united states please contact: international sales
international@pearsoned.com
feedback information
at cisco press, our goal is to create in-depth technical books of the highest quality and
value. each book is crafted with care and precision, undergoing rigorous development that
involves the unique expertise of members from the professional technical community.
readers’ feedback is a natural continuation of this process. if you have any comments
regarding how we could improve the quality of this book, or otherwise alter it to better suit
your needs, you can contact us through e-mail at feedback@ciscopress.com. please make
sure to include the book title and isbn in your message.
we greatly appreciate your assistance.
publisher paul boger
associate publisher dave dusthimer
cisco representative anthony wolfenden
cisco press program manager jeff brady
executive editor mary beth ray
managing editor patrick kanouse
senior development editor christopher cleveland
project editor meg shaw
copy editor keith cline
technical editors robert elling, philip vancil
editorial assistant vanessa evans
cover designer louisa adair
composition icc macmillan inc.
proofreader karen a. gill
iv
about the author
scott empson is the associate chair of the bachelor of applied information systems
technology degree program at the northern alberta institute of technology in edmonton,
alberta, canada, where he teaches cisco routing, switching, and network design courses in
a variety of different programs (certificate, diploma, and applied degree) at the postsecondary
level. scott is also the program coordinator of the cisco networking academy
program at nait, a regional academy covering central and northern alberta. he has
earned three undergraduate degrees: a bachelor of arts, with a major in english; a bachelor
of education, again with a major in english/language arts; and a bachelor of applied
information systems technology, with a major in network management. he currently
holds several industry certifications, including ccnp, ccda, ccai, and network .
before instructing at nait, he was a junior/senior high school english/language arts/
computer science teacher at different schools throughout northern alberta. scott lives in
edmonton, alberta, with his wife, trina, and two children, zachariah and shaelyn, where
he enjoys reading, performing music on the weekend with his classic/80s rock band “miss
understood,” and studying the martial art of taekwon-do.
v
about the technical reviewers
robert elling is a content consultant in the learning@cisco group in florida. he works in
the data center/foundation group supporting the ccna, ccnp, and ccip curriculum.
before coming to cisco, he worked for bell atlantic as a senior network analyst in the
networking operation center in harrisburg, pennsylvania. he holds numerous
certifications, including cne, ecne, MCSE, ccna, ccnp, and ccip.
philip vancil is a technical education consultant with cisco and has been in the
communication industry for more than 20 years. phil has extensive experience in both lan
and wan environments. he has performed at the technical level as a national support
engineer, at the managerial level running a tac, and at the instructor level as an instructor
for a major lan/wan product manufacturer. phil has earned ccip and ccnp
certifications and is a ccsi for customer contact bu products. he has been developing
courseware and certifications (including ccip, ccsp, and ccnp) for cisco for six years.
vi
dedications
this book is dedicated to trina, zach, and shae, without whom i couldn’t have made it
through those long nights of writing and editing.
vii
acknowledgments
anyone who has ever had anything to do with the publishing industry knows that it takes
many, many people to create a book. it may be my name on the cover, but there is no way
that i can take credit for all that occurred to get this book from idea to publication.
therefore, i must thank:
the team at cisco press—once again, you amaze me with your professionalism and the
ability to make me look good. mary beth, chris, patrick, meg, seth—thank you for your
continued support and belief in my little engineering journal.
to my technical reviewers, robert and phil—thanks for keeping me on track and making
sure that what i wrote was correct and relevant.
to the staff of the cisco Office here in edmonton, especially cesar barrero—thanks for
putting up with me and my continued requests to borrow equipment for development and
validation of the concepts in this book. but, can i keep the equipment for just a little bit
longer? please?
viii
ix
contents at a glance
introduction xxi
part i tcp/ip version 4 1
chapter 1 how to subnet 3
chapter 2 vlsm 21
chapter 3 route summarization 29
part ii introduction to cisco devices 35
chapter 4 cables and connections 37
chapter 5 the command-line interface 45
part iii configuring a router 51
chapter 6 configuring a single cisco router 53
part iv routing 67
chapter 7 static routing 69
chapter 8 rip 75
chapter 9 eigrp 81
chapter 10 single area ospf 91
part v switching 103
chapter 11 configuring a switch 105
chapter 12 vlans 117
chapter 13 vlan trunking protocol and inter-vlan routing 125
chapter 14 stp and etherchannel 139
part vi extending the lan 159
chapter 15 implementing a wireless lan 161
part vii network administration and troubleshooting 183
chapter 16 backing up and restoring cisco ios software and
configurations 185
x
chapter 17 password-recovery procedures and the configuration
register 193
chapter 18 cisco discovery protocol (cdp) 201
chapter 19 telnet and ssh 203
chapter 20 the ping and traceroute commands 207
chapter 21 snmp and syslog 211
chapter 22 basic troubleshooting 213
part viii managing ip services 219
chapter 23 network address translation 221
chapter 24 dhcp 231
chapter 25 ipv6 237
part ix wans 249
chapter 26 hdlc and ppp 251
chapter 27 frame relay 257
part x network security 267
chapter 28 ip access control list security 269
chapter 29 security device manager 283
part xi appendixes 315
appendix a binary/hex/decimal conversion chart 317
appendix b create your own journal here 329
xi
contents
introduction xxi
part i tcp/ip version 4 1
chapter 1 how to subnet 3
class a–e addresses 3
converting between decimal numbers and binary 4
subnetting a class c network using binary 4
subnetting a class b network using binary 8
binary anding 12
so why and? 14
shortcuts in binary anding 15
the enhanced bob maneuver for subnetting 16
chapter 2 vlsm 21
ip subnet zero 21
vlsm example 22
step 1 determine how many h bits will be needed to
satisfy the largest network 22
step 2 pick a subnet for the largest network to use 23
step 3 pick the next largest network to work with 24
step 4 pick the third largest network to work with 26
step 5 determine network numbers for serial links 27
chapter 3 route summarization 29
example for understanding route summarization 29
step 1: summarize winnipeg’s routes 30
step 2: summarize calgary’s routes 31
step 3: summarize edmonton’s routes 31
step 4: summarize vancouver’s routes 32
route summarization and route flapping 34
requirements for route summarization 34
part ii introduction to cisco devices 35
chapter 4 cables and connections 37
connecting a rollover cable to your router or switch 37
terminal settings 37
lan connections 38
serial cable types 39
which cable to use? 41
568a versus 568b cables 42
xii
chapter 5 the command-line interface 45
shortcuts for entering commands 45
using the ? key to complete commands 45
using the question mark for help 46
enable command 46
exit command 47
disable command 47
logout command 47
setup mode 47
keyboard help 48
history commands 49
show commands 49
part iii configuring a router 51
chapter 6 configuring a single cisco router 53
router modes 53
entering global configuration mode 54
configuring a router name 54
configuring passwords 54
password encryption 55
interface names 56
moving between interfaces 58
configuring a serial interface 59
configuring a fast ethernet interface 59
creating a message-of-the-day banner 60
creating a login banner 60
setting the clock time zone 60
assigning a local host name to an ip address 61
the no ip domain-lookup command 61
the logging synchronous command 61
the exec-timeout command 62
saving configurations 62
erasing configurations 62
show commands 63
exec commands in configuration mode: the do command 64
configuration example: basic router configuration 64
part iv routing 67
chapter 7 static routing 69
configuring a static route on a router 69
the permanent keyword (optional) 70
xiii
static routes and administrative distance (optional) 70
configuring a default route on a router 71
verifying static routes 72
configuration example: static routes 72
chapter 8 rip 75
the ip classless command 75
rip routing: mandatory commands 75
rip routing: optional commands 76
troubleshooting rip issues 77
configuration example: ripv2 routing 78
chapter 9 eigrp 81
configuring enhanced interior gateway routing protocol
(eigrp) 81
eigrp auto-summarization 82
load balancing: variance 83
bandwidth use 84
authentication 84
verifying eigrp 86
troubleshooting eigrp 86
configuration example: eigrp 87
chapter 10 single area ospf 91
configuring ospf: mandatory commands 91
using wildcard masks with ospf areas 92
configuring ospf: optional commands 93
loopback interfaces 93
router id 94
dr/bdr elections 94
modifying cost metrics 95
authentication: simple 95
authentication: using md5 encryption 96
timers 96
propagating a default route 96
verifying ospf configuration 97
troubleshooting ospf 98
configuration example: single area ospf 98
part v switching 103
chapter 11 configuring a switch 105
help commands 105
command modes 105
xiv
verifying commands 106
resetting switch configuration 107
setting host names 107
setting passwords 107
setting ip addresses and default gateways 108
setting interface descriptions 108
setting duplex operation 109
setting operation speed 109
managing the mac address table 109
configuring static mac addresses 109
switch port security 110
verifying switch port security 111
sticky mac addresses 112
configuration example 113
chapter 12 vlans 117
creating static vlans 117
using vlan configuration mode 117
using vlan database mode 118
assigning ports to vlans 118
using the range command 119
verifying vlan information 119
saving vlan configurations 119
erasing vlan configurations 120
configuration example: vlans 121
chapter 13 vlan trunking protocol and inter-vlan routing 125
dynamic trunking protocol (dtp) 125
setting the encapsulation type 126
vlan trunking protocol (vtp) 127
using global configuration mode 127
using vlan database mode 128
verifying vtp 130
inter-vlan communication using an external router:
router-on-a-stick 130
inter-vlan communication tips 131
configuration example: inter-vlan communication 132
chapter 14 stp and etherchannel 139
spanning tree protocol 139
enabling spanning tree protocol 139
configuring the root switch 140
xv
configuring a secondary root switch 141
configuring port priority 141
configuring the path cost 142
configuring the switch priority of a vlan 142
configuring stp timers 143
verifying stp 143
optional stp configurations 144
changing the spanning-tree mode 145
extended system id 146
enabling rapid spanning tree 146
troubleshooting spanning tree 147
configuration example: stp 147
etherchannel 150
interface modes in etherchannel 151
guidelines for configuring etherchannel 151
configuring layer 2 etherchannel 152
verifying etherchannel 152
configuration example: etherchannel 153
part vi extending the lan 159
chapter 15 implementing a wireless lan 161
wireless access point configuration: linksys 300n access
point 161
wireless client configuration: linksys wireless-n notebook
adapter 174
part vii network administration and troubleshooting 183
chapter 16 backing up and restoring cisco ios software and
configurations 185
boot system commands 185
the cisco ios file system 186
backing up configurations to a tFtp server 186
restoring configurations from a tftp server 187
backing up the cisco ios software to a tftp server 188
restoring/upgrading the cisco ios software from a
tftp server 188
restoring the cisco ios software from rom monitor mode
using xmodem 189
restoring the cisco ios software using the rom monitor
environmental variables and tftpdnld command 192
xvi
chapter 17 password-recovery procedures and the configuration
register 193
the configuration register 193
a visual representation 193
what the bits mean 194
the boot field 194
console terminal baud rate settings 195
changing the console line speed: cli 195
changing the console line speed: rom monitor
mode 195
password-recovery procedures for cisco routers 196
password recovery for 2960 series switches 198
chapter 18 cisco discovery protocol (cdp) 201
cisco discovery protocol 201
chapter 19 telnet and ssh 203
using telnet to remotely connect to other devices 203
configuring the secure shell protocol (ssh) 205
chapter 20 the ping and traceroute commands 207
icmp redirect messages 207
the ping command 207
examples of using the ping and the extended ping
commands 208
the traceroute command 209
chapter 21 snmp and syslog 211
configuring snmp 211
configuring syslog 211
chapter 22 basic troubleshooting 213
viewing the routing table 213
determining the gateway of last resort 214
determining the last routing update 214
osi layer 3 testing 214
osi layer 7 testing 215
interpreting the show interface command 215
clearing interface counters 215
using cdp to troubleshoot 216
the traceroute command 216
the show controllers command 216
debug commands 216
using time stamps 217
xvii
operating system ip verification commands 217
the ip http server command 217
the netstat command 218
part viii managing ip services 219
chapter 23 network address translation 221
private ip addresses: rfc 1918 221
configuring dynamic nat: one private to
one public address translation 221
configuring pat: many private to one public address
translation 223
configuring static nat: one private to one permanent
public address translation 226
verifying nat and pat configurations 227
troubleshooting nat and pat configurations 227
configuration example: pat 228
chapter 24 dhcp 231
configuring dhcp 231
verifying and troubleshooting dhcp configuration 232
configuring a dhcp helper address 232
dhcp client on a cisco ios software ethernet interface 233
configuration example: dhcp 233
chapter 25 ipv6 237
assigning ipv6 addresses to interfaces 237
ipv6 and ripng 238
configuration example: ipv6 rip 239
ipv6 tunnels: manual overlay tunnel 241
static routes in ipv6 244
floating static routes in ipv6 245
verifying and troubleshooting ipv6 245
ipv6 ping 247
part ix wans 249
chapter 26 hdlc and ppp 251
configuring hdlc encapsulation on a serial line 251
configuring ppp on a serial line (mandatory commands) 251
configuring ppp on a serial line (optional commands):
compression 252
configuring ppp on a serial line (optional commands):
link quality 252
configuring ppp on a serial line (optional commands):
multilink 252
configuring ppp on a serial line (optional commands):
authentication 252
verifying or troubleshooting a serial link/ppp
encapsulation 253
configuration example: ppp 254
chapter 27 frame relay 257
configuring frame relay 257
setting the frame relay encapsulation type 257
setting the frame relay encapsulation lmi type 258
setting the frame relay dlci number 258
configuring a frame relay map statement 258
configuring a description of the interface (optional) 259
configuring frame relay using subinterfaces 259
verifying frame relay 260
troubleshooting frame relay 260
configuration examples: frame relay 260
part x network security 267
chapter 28 ip access control list security 269
access list numbers 269
using wildcard masks 270
acl keywords 270
creating standard acls 271
applying standard acls to an interface 272
verifying acls 273
removing acls 273
creating extended acls 273
applying extended acls to an interface 275
the established keyword (optional) 275
creating named acls 276
using sequence numbers in named acls 276
removing specific lines in named acls using sequence
numbers 277
sequence number tips 278
including comments about entries in acls 278
restricting virtual terminal access 279
configuration examples: acls 279
xix
chapter 29 security device manager 283
security device manager: connecting with cli 283
security device manager: connecting with gui 285
sdm express wizard with no cli preconfiguration 287
resetting the router to factory defaults using sdm 297
sdm user interfaces 298
configuring interfaces using sdm 298
configuring routing using sdm 302
sdm monitor mode 304
using sdm to configure a router to act as a dhcp server 305
using sdm to configure an interface as a dhcp client 307
using sdm to configure nat/pat 312
what to do if you lose sdm connectivity BECause of an erase
startup-config command 314
part xi appendixes 315
appendix a binary/hex/decimal conversion chart 317
appendix b create your own journal here 329
