cisco2811设备配置手册

Cisco2811设备配置，早前配置的整理资料；根据客户需求配置的，好久没有搞路由交换设备了，由于当时供货商一时缺技术，整理下给自己做个备份。

——————————–

cisco con0 is now available

Press RETURN to get started.

———————————————————————–
Cisco Configuration Professional (Cisco CP) is installed on this device.
This feature requires the one-time use of the username “cisco” with the
password “cisco”. These default credentials have a privilege level of 15.

YOU MUST USE CISCO CP or the CISCO IOS CLI TO CHANGE THESE PUBLICLY-KNOWN
CREDENTIALS

Here are the Cisco IOS commands.

username <myuser> privilege 15 secret 0 <mypassword>
no username cisco

Replace <myuser> and <mypassword> with the username and password you want
to use.

IF YOU DO NOT CHANGE THE PUBLICLY-KNOWN CREDENTIALS, YOU WILL NOT BE ABLE
TO LOG INTO THE DEVICE AGAIN AFTER YOU HAVE LOGGED OFF.

For more information about Cisco CP please follow the instructions in the
QUICK START GUIDE for your router or go to http://www.cisco.com/go/ciscocp
———————————————————————–

% Password expiration warning.
———————————————————————–

Cisco Configuration Professional (Cisco CP) is installed on this device
and it provides the default username “cisco” for one-time use. If you have
already used the username “cisco” to login to the router and your IOS image
supports the “one-time” user option, then this username has already expired.
You will not be able to login to the router with this username after you exit
this session.

It is strongly suggested that you create a new username with a privilege level
of 15 using the following command.

username <myuser> privilege 15 secret 0 <mypassword>

Replace <myuser> and <mypassword> with the username and password you want to
use.

———————————————————————–

cisco>
cisco>
cisco>
cisco>en
Password:
Password:
cisco#
cisco#
cisco#
cisco#show runn
cisco#show running-config
Building configuration…

Current configuration : 4433 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname cisco
!
boot-start-marker
boot-end-marker
!
logging buffered 51200 warnings
enable secret 5 $1$CmQY$.VuwNArOx8wrB6/C2Sh7W.
enable password cisco
!
no aaa new-model
!
!
ip cef
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.99
ip dhcp excluded-address 192.168.1.201 192.168.1.254
!
ip dhcp pool f0/0
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
!
ip dhcp pool f0/1
dns-server 192.168.1.5 210.22.70.3
!
!
no ip domain lookup
ip domain name yourdomain.com
multilink bundle-name authenticated
!
!
!
archive
log config
hidekeys
!
!
!
!
!
interface FastEthernet0/0
description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-FE 0/0$
ip address 192.168.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1
ip address 220.248.102.82 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 220.248.102.81
!
!
ip http server
ip http access-class 23
ip http authentication local
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source static tcp 192.168.1.5 25 interface FastEthernet0/1 25
ip nat inside source static udp 192.168.1.5 25 interface FastEthernet0/1 25
ip nat inside source static udp 192.168.1.5 110 interface FastEthernet0/1 110
ip nat inside source static tcp 192.168.1.5 110 interface FastEthernet0/1 110
ip nat inside source static tcp 192.168.1.5 443 interface FastEthernet0/1 443
ip nat inside source static udp 192.168.1.5 443 interface FastEthernet0/1 443
ip nat inside source static udp 192.168.1.5 3389 interface FastEthernet0/1 3389
ip nat inside source static tcp 192.168.1.5 3389 interface FastEthernet0/1 3389
ip nat inside source static tcp 192.168.1.6 80 interface FastEthernet0/1 80
ip nat inside source static udp 192.168.1.6 80 interface FastEthernet0/1 80
ip nat inside source static udp 192.168.1.6 5300 interface FastEthernet0/1 5300
ip nat inside source static tcp 192.168.1.6 5300 interface FastEthernet0/1 5300
ip nat inside source static tcp 192.168.1.6 1433 interface FastEthernet0/1 1433
ip nat inside source static udp 192.168.1.6 1433 interface FastEthernet0/1 1433
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
!
control-plane
!
banner exec ^C
% Password expiration warning.
———————————————————————