里歐's 布拉格

12月 21 週五 201218:04
MPLS QoS Example

class-map match-all mgmt
match access-group name mgmt
class-map match-all level_1
match access-group name level_1
class-map match-all level_2
match access-group name level_2
class-map match-any VOICE
match access-group name VOICE
match ip dscp ef
!
!
policy-map 2M_COS_Queuing
class level_1
  bandwidth 700
class level_2
  bandwidth 400
class VOICE
  priority 180
class mgmt
  bandwidth 64
class class-default
  fair-queue
policy-map shape-2M
class class-default-2M
  shape average 2000000
service-policy 2M_COS_Queuing

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(89)

個人分類：Cisco

▲top

6月 24 週四 201015:18
[Cisco] Password Recovery Procedure for the Cisco Routers

Example of Password Recovery Procedure
WebPage : http://www.cisco.com/en/US/products/hw/routers/ps221/products_password_recovery09186a0080094773.shtml

This section provides an example of the password recovery procedure. This example was created with a Cisco 2600 Series Router. Even if you do not use a Cisco 2600 Series Router, this output provides an example of what you should experience on your product.

Router>enable
Password:
Password:
Password:
% Bad secrets
Router>show version
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 02:21 by phanguye
Image text-base: 0x80008088, data-base: 0x80C524F8
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
Router uptime is 3 minutes
System returned to ROM by abort at PC 0x802D0B60
System image file is "flash:c2600-is-mz.120-7.T"
cisco 2611 (MPC860) processor (revision 0x202) with 26624K/6144K bytes of memory.
Processor board ID JAB031202NK (3878188963)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash partition 1 (Read/Write)
8192K bytes of processor board System flash partition 2 (Read/Write)
Configuration register is 0x2102
Router>

!--- The router was just powercycled, and during bootup a
!--- break sequence was sent to the router.

!
*** System received an abort due to Break Key ***
signal= 0x3, code= 0x500, context= 0x813ac158
PC = 0x802d0b60, Vector = 0x500, SP = 0x80006030
rommon 1 > confreg 0x2142
You must reset or power cycle for new config to take effect
rommon 2 > reset
System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
Copyright (c) 1999 by cisco Systems, Inc.
TAC:Home:SW:IOS:Specials for info
C2600 platform with 32768 Kbytes of main memory
program load complete, entry point: 0x80008000, size: 0x6fdb4c
Self decompressing the image : ###############################
##############################################################
##############################################################
##############################################################
############################### [OK]
Restricted Rights Legend
Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.
cisco Systems, Inc.
170 West Tasman Drive
San Jose, California 95134-1706
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 02:21 by phanguye
Image text-base: 0x80008088, data-base: 0x80C524F8
cisco 2611 (MPC860) processor (revision 0x202) with 26624K/6144K bytes of memory.
Processor board ID JAB031202NK (3878188963)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash partition 1 (Read/Write)
8192K bytes of processor board System flash partition 2 (Read/Write)
--- System Configuration Dialog ---
Would you like to enter the initial configuration dialog? [yes/no]: n
Press RETURN to get started!
00:00:19: %LINK-3-UPDOWN: Interface BRI0/0, changed state to up
00:00:19: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up
00:00:19: %LINK-3-UPDOWN: Interface Ethernet0/1, changed state to up
00:00:19: %LINK-3-UPDOWN: Interface Serial0/0, changed state to down
00:00:19: %LINK-3-UPDOWN: Interface Serial0/1, changed state to down
00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0, 
changed state to down
00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0,
changed state to up
Router>
00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, 
changed state to up
00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, 
changed state to down
00:00:20: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/1, 
changed state to down
00:00:50: %SYS-5-RESTART: System restarted --
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 02:21 by phanguye
00:00:50: %LINK-5-CHANGED: Interface BRI0/0, 
changed state to administratively down
00:00:52: %LINK-5-CHANGED: Interface Ethernet0/0, 
changed state to administratively down
00:00:52: %LINK-5-CHANGED: Interface Serial0/0, 
changed state to administratively down
00:00:52: %LINK-5-CHANGED: Interface Ethernet0/1, 
changed state to administratively down
00:00:52: %LINK-5-CHANGED: Interface Serial0/1, 
changed state to administratively down
00:00:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, 
changed state to down
00:00:53: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/1, 
changed state to down
Router>
Router>enable
Router#copy startup-config running-config
Destination filename [running-config]?
1324 bytes copied in 2.35 secs (662 bytes/sec)
Router#
00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:1, 
changed state to down
00:01:24: %LINEPROTO-5-UPDOWN: Line protocol on Interface BRI0/0:2, 
changed state to down
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#enable secret < password >
Router(config)#^Z
00:01:54: %SYS-5-CONFIG_I: Configured from console by console
Router#show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0/0 10.200.40.37 YES TFTP administratively down down
Serial0/0 unassigned YES TFTP administratively down down
BRI0/0 193.251.121.157 YES unset administratively down down
BRI0/0:1 unassigned YES unset administratively down down
BRI0/0:2 unassigned YES unset administratively down down
Ethernet0/1 unassigned YES TFTP administratively down down
Serial0/1 unassigned YES TFTP administratively down down
Loopback0 193.251.121.157 YES TFTP up up
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#interface Ethernet0/0
Router(config-if)#no shutdown
Router(config-if)#
00:02:14: %LINK-3-UPDOWN: Interface Ethernet0/0, changed state to up
00:02:15: %LINEPROTO-5-UPDOWN: Line protocol on Interface Ethernet0/0, 
changed state to up
Router(config-if)#interface BRI0/0
Router(config-if)#no shutdown
Router(config-if)#
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:1, changed state to down
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0:2, changed state to down
00:02:26: %LINK-3-UPDOWN: Interface BRI0/0, changed state to up
00:02:115964116991: %ISDN-6-LAYER2UP: Layer 2 for Interface BR0/0, 
TEI 68 changed to up
Router(config-if)#^Z
Router#
00:02:35: %SYS-5-CONFIG_I: Configured from console by console
Router#copy running-config startup-config
Destination filename [startup-config]?
Building configuration...
[OK]
Router#show version
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 02:21 by phanguye
Image text-base: 0x80008088, data-base: 0x80C524F8
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
Router uptime is 3 minutes
System returned to ROM by abort at PC 0x802D0B60
System image file is "flash:c2600-is-mz.120-7.T"
cisco 2611 (MPC860) processor (revision 0x202) 
with 26624K/6144K bytes of memory.
Processor board ID JAB031202NK (3878188963)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash partition 1 (Read/Write)
8192K bytes of processor board System flash partition 2 (Read/Write)
Configuration register is 0x2142
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#config-register 0x2102
Router(config)#^Z
00:03:20: %SYS-5-CONFIG_I: Configured from console by console
Router#show version
Cisco Internetwork Operating System Software
IOS (tm) C2600 Software (C2600-IS-M), Version 12.0(7)T, RELEASE SOFTWARE (fc2)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 07-Dec-99 02:21 by phanguye
Image text-base: 0x80008088, data-base: 0x80C524F8
ROM: System Bootstrap, Version 11.3(2)XA4, RELEASE SOFTWARE (fc1)
Router uptime is 3 minutes
System returned to ROM by abort at PC 0x802D0B60
System image file is "flash:c2600-is-mz.120-7.T"
cisco 2611 (MPC860) processor (revision 0x202) 
with 26624K/6144K bytes of memory.
Processor board ID JAB031202NK (3878188963)
M860 processor: part number 0, mask 49
Bridging software.
X.25 software, Version 3.0.0.
Basic Rate ISDN software, Version 1.1.
2 Ethernet/IEEE 802.3 interface(s)
2 Serial(sync/async) network interface(s)
1 ISDN Basic Rate interface(s)
32K bytes of non-volatile configuration memory.
8192K bytes of processor board System flash partition 1 (Read/Write)
8192K bytes of processor board System flash partition 2 (Read/Write)
Configuration register is 0x2142 (will be 0x2102 at next reload)

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(59)

個人分類：Cisco

▲top

6月 15 週二 201018:42
[Cisco] Configuration Register Values and their Meaning

WebPage：http://www.cisco.com/en/US/products/hw/routers/ps133/products_tech_note09186a008022493f.shtml

Configuration Register Setting
Router Behavior

0x102
Ignores break

9600 console baud

0x1202
1200 baud rate

0x2101
Boots into bootstrap

Ignores break

Boots into ROM if initial boot fails

9600 console baud rate

0x2102
Ignores break

Boots into ROM if initial boot fails

9600 console baud rate default value for most platforms

0x2120
Boots into ROMmon

19200 console speed

0x2122
Ignores break

Boots into ROM if initial boot fails

19200 console baud rate

0x2124
NetBoot

Ignores break

Boots into ROM if initial boot fails

19200 console speed

0x2142
Ignores break

Boots into ROM if initial boot fails

9600 console baud rate

Ignores the contents of Non-Volatile RAM (NVRAM) (ignores configuration)

0x2902
Ignores break

Boots into ROM if initial boot fails

4800 console baud rate

0x2922
Ignores break

Boots into ROM if initial boot fails

38400 console baud rate

0x3122
Ignores break

Boots into ROM if initial boot fails

57600 console baud rate

0x3902
Ignores break

Boots into ROM if initial boot fails

2400 console baud rate

0x3922
Ignores break

Boots into ROM if initial boot fails

115200 console baud rate

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(48)

個人分類：Cisco

▲top

12月 30 週二 200811:01
[Cisco] Cisco Command

===============================================================
Configure Cisco switch telnet login and password
---------------------------------------------------------------
line vty 0 15
password keepout
login
---------------------------------------------------------------
===============================================================
Configure console login password on Cisco switch
---------------------------------------------------------------
line console 0
password keepout
login
---------------------------------------------------------------
===============================================================
View the MAC address table on a Cisco switch
---------------------------------------------------------------
show mac-address-table
or
show mac-address-table dynamic
---------------------------------------------------------------
===============================================================
How to configure multiple Cisco switch ports at the same time
---------------------------------------------------------------
Switch(config)#interface range fastethernet0/1 - 20
Switch(config-if-range)#speed 100
Switch(config-if-range)#duplex full
or
Switch(config)#interface range fastethernet0/1 - 4 , fastethernet0/10 - 15
---------------------------------------------------------------
===============================================================
===============================================================

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(71)

個人分類：Cisco

▲top

12月 30 週二 200810:51
[Cisco] password recovery on a Cisco 2950 switch

This documents the procedure for performing a password recovery on a Cisco 2950 switch (and probably other models, as well).
1. Unplug the power cable
2. Hold down the mode button while replugging the power cable
3. Type flash_init over the console
4. Type load_helper
5. Type Dir flash :
//make sure to type the semi-colons
6. Type rename flash:config.txt flash:config.old
//the password is contained in the config.txt file
7. Type boot
//this reboots the system
8. Type n to skip the initial setup configuration
9. Type enable
//this takes you to the enable mode
10. Type rename flash:config.old flash:config.txt
11. Save config.txt to system
#copy flash:config.txt system:running-config
12. Enter config mode and change the password
# config t
# no enable secret
//this applies only if the enable secret password was created
13. Finally, write the changes to memory
# write memory

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(61)

個人分類：Cisco

▲top

12月 25 週四 200818:40
整合 Cisco VPN Concentrator & ACS & MS-AD

參考一下文章：
Dynamic VLAN Assignment with WLCs based on ACS to Active Directory Group Mapping Configuration Example
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00808c9bd1.shtml
Using Cisco Secure ACS for Windows with the VPN 3000 Concentrator - IPSec
http://supportwiki.cisco.com/ViewWiki/index.php/Using_Cisco_Secure_ACS_for_Windows_with_the_VPN_3000_Concentrator_-_IPSec

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(126)

個人分類：Cisco

▲top

10月 24 週五 200810:18
Example Configuring UniDirectional Link Detection

Enabling Aggressive UDLD on SW1 and SW2

SW1#config t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#interface range gigabitethernet 1/1 - 2
SW1(config-if-range)#udld enable
SW1(config-if-range)#udld aggressive
SW1(config-if-range)#end
SW2#config t
Enter configuration commands, one per line. End with CNTL/Z.
SW2(config)#interface range gigabitethernet 1/1 - 2
SW2(config-if-range)#udld enable
SW2(config-if-range)#udld aggressive
SW2(config-if-range)#end
SW2#

Output of show udld Command on SW1

SW1#show udld
Interface Gi1/1
---
Port enable administrative configuration setting: Enabled / in aggressive mode
Port enable operational state: Enabled / in aggressive mode
Current bidirectional state: Unknown
Current operational state: Advertisement
Message interval: 7
Time out interval: 5
No neighbor cache information stored
Interface Gi1/2
---
Port enable administrative configuration setting: Enabled / in aggressive mode
Port enable operational state: Enabled / in aggressive mode
Current bidirectional state: Bidirectional
Current operational state: Advertisement - Single neighbor detected
Message interval: 60
Time out interval: 5
Entry 1
---
Expiration time: 168
Device ID: 1
Current neighbor state: Bidirectional
Device name: SAD04281ARM
Port ID: Gi1/1
Neighbor echo 1 device: SAD050814BH
Neighbor echo 1 port: Gi1/2
Message interval: 5
CDP Device name: SW2

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(58)

個人分類：Cisco

▲top

10月 24 週五 200810:11
Example Creating the Channel Group and Trunk

Creating the Channel Group on SW1

SW1#config t
Enter configuration commands, one per line. End with CNTL/Z.
SW1(config)#interface range fastEthernet 10/11 - 14
SW1(config-if-range)#no ip address
SW1(config-if-range)#switchport
SW1(config-if-range)#switchport trunk encapsulation dot1q
SW1(config-if-range)#switchport mode trunk
SW1(config-if-range)#switchport mode dynamic desirable
SW1(config-if-range)#switchport trunk allowed vlan remove 2-400,403-1005
SW1(config-if-range)#channel-group 1 mode desirable
SW1(config-if-range)#no shutdown
SW1(config-if-range)#end
SW1#

Creating the Channel Group on SW2

SW2(config)#interface range fastEthernet 3/11 - 14
SW2(config-if-range)#no ip address
SW2(config-if-range)#switchport
SW2(config-if-range)#switchport trunk encapsulation dot1q
SW2(config-if-range)#switchport mode trunk
SW2(config-if-range)#switchport mode dynamic desirable
SW2(config-if-range)#switchport trunk allowed vlan remove 2-400,403-1005
SW2(config-if-range)#channel-group 1 mode desirable
Creating a port-channel interface Port-channel1
SW2(config-if-range)#no shutdown
SW2(config-if-range)#end
SW2#

Verifying the Configuration on SW2
SW2#show run interface fastEthernet 3/11
Building configuration...
Current configuration : 182 bytes
!
interface FastEthernet3/11
no ip address
switchport
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 1,401,402
channel-group 1 mode desirable
end

Output of the show interfaces port-channel and show interfaces trunk Commands on SW1
SW1#show interfaces port-channel 1
Port-channel1 is up, line protocol is up
Hardware is EtherChannel, address is 0009.1267.9ffa (bia 0009.1267.9ffa)
MTU 1500 bytes, BW 400000 Kbit, DLY 100 usec,
   reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Full-duplex, 100Mb/s
Members in this channel: Fa10/11 Fa10/12 Fa10/13 Fa10/14
!output truncated
SW1#show interfaces trunk
Port   Mode     Encapsulation Status    Native vlan
Po1    desirable 802.1q     trunking   1
Port   Vlans allowed on trunk
Po1    1,401-402
Port   Vlans allowed and active in management domain
Po1    1,401-402
Port   Vlans in spanning tree forwarding state and not pruned
Po1    1,401-402
SW1#

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(129)

個人分類：Cisco

▲top

10月 24 週五 200809:57
Example Configuring Ports 2/1-48 on SW4 for VLAN 140

SW4#config t
Enter configuration commands, one per line. End with CNTL/Z.
SW4(config)#interface range gigabitethernet 2/1 - 48
SW4(config-if-range)#switchport mode access
SW4(config-if-range)#switchport access vlan 140
SW4(config-if-range)#end
SW4#
SW4#show vlan
VLAN Name               Status Ports
---- -------------------------------- --------- -------------------------------
1 default             active
140 VLAN0140             active Gi2/1, Gi2/2, Gi2/3, Gi2/4
                        Gi2/5, Gi2/6, Gi2/7, Gi2/8
                        Gi2/9, Gi2/10, Gi2/11, Gi2/12
                        Gi2/13, Gi2/14, Gi2/15, Gi2/16
                        Gi2/17, Gi2/18, Gi2/19, Gi2/20
                        Gi2/21, Gi2/22, Gi2/23, Gi2/24
                        Gi2/25, Gi2/26, Gi2/27, Gi2/28
                        Gi2/29, Gi2/30, Gi2/31, Gi2/32
                        Gi2/33, Gi2/34, Gi2/35, Gi2/36
                        Gi2/37, Gi2/38, Gi2/39, Gi2/40
                        Gi2/41, Gi2/42, Gi2/43, Gi2/44
                        Gi2/45, Gi2/46, Gi2/47, Gi2/48
!output truncated

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(7)

個人分類：Cisco

▲top

10月 24 週五 200809:56
Example Verifying the Status of the VLAN130 Interface and sc0

RSM1#show interface vlan130
Vlan130 is up, line protocol is up
Hardware is Cat5k Virtual Ethernet, address is 0010.f6b3.4800 (bia 0010.f6b3.4800)
Internet address is 172.16.196.1/24
(output truncated)
RSM1#ping 172.16.196.5
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.16.196.5, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/23/112 ms

(繼續閱讀...)

里歐發表在痞客邦留言(0) 人氣(4)

個人分類：Cisco

▲top

12 »

里歐's 布拉格

生活543

MPLS QoS Example

[Cisco] Password Recovery Procedure for the Cisco Routers

Example of Password Recovery Procedure
WebPage : http://www.cisco.com/en/US/products/hw/routers/ps221/products_password_recovery09186a0080094773.shtml

[Cisco] Configuration Register Values and their Meaning

[Cisco] Cisco Command

[Cisco] password recovery on a Cisco 2950 switch

整合 Cisco VPN Concentrator & ACS & MS-AD

Example Configuring UniDirectional Link Detection

Example Creating the Channel Group and Trunk

Example Configuring Ports 2/1-48 on SW4 for VLAN 140

Example Verifying the Status of the VLAN130 Interface and sc0

自訂側欄

自訂側欄

個人資訊

熱門文章

文章分類

最新文章

最新留言

動態訂閱

文章精選

文章搜尋

誰來我家

參觀人氣

生活543

Example of Password Recovery Procedure WebPage : http://www.cisco.com/en/US/products/hw/routers/ps221/products_password_recovery09186a0080094773.shtml

自訂側欄

自訂側欄

個人資訊

熱門文章

文章分類

最新文章

最新留言

動態訂閱

文章精選

文章搜尋

誰來我家

參觀人氣

Example of Password Recovery Procedure
WebPage : http://www.cisco.com/en/US/products/hw/routers/ps221/products_password_recovery09186a0080094773.shtml