按实验一步一步，倒是很容易的，也理解罗~~
START-CONFIG粗配置文件如下：
r1#show run Building configuration... Current configuration : 2488 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname r1 ! boot-start-marker boot-end-marker ! enable secret 5 $1$yaUF$LuWRdlvi7MsKTYgG79trK/ ! no aaa new-model memory-size iomem 5 ip cef ! ! ! ! ip domain name mydomain.com ip ssh version 2 ! multilink bundle-name authenticated ! ! crypto pki trustpoint TP-self-signed-998521732 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-998521732 revocation-check none rsakeypair TP-self-signed-998521732 ! ! crypto pki certificate chain TP-self-signed-998521732 certificate self-signed 01 30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030 30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 39393835 32313733 32301E17 0D303230 33303130 30303532 355A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F 532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3939 38353231 37333230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100 E47399C7 0C9FAA60 A3D4E36A 2EF4A102 01828CC1 018C01A0 201A6AF2 4477A214 0017D6E4 CB563D03 E9747DC8 7C3EFC40 A9069343 98ECB04B 4C1E4B97 422ED39A 6DA0990A 1ED7AE3D 93D0C62C 3C1C5453 4BC27F86 4BE9B194 F7A74AB1 7A2FDF3B C4DD563C 0E1CCFC7 0CC677E9 09F84138 CD6B0699 7116E699 66809FAD 3BD10445 02030100 01A36F30 6D300F06 03551D13 0101FF04 05300301 01FF301A 0603551D 11041330 11820F72 312E6D79 646F6D61 696E2E63 6F6D301F 0603551D 23041830 16801466 DADD04A8 4FF1A26A E9BC0D21 4A47E6F9 7E2CCC30 1D060355 1D0E0416 041466DA DD04A84F F1A26AE9 BC0D214A 47E6F97E 2CCC300D 06092A86 4886F70D 01010405 00038181 00B37B1C EA986A04 9EA557A8 306BE068 64837B1F 4B645592 002ECD95 0FE5F5B0 4179211B B257A4FC ADDC2064 033806E1 C368D032 F68359F3 495DD1A9 2CE3738B 0C351C78 6854CA36 9E949FF6 CCFEAE53 4702C89D 11723318 B97185B2 7E393108 4FDCEEBD 25AEF0F0 3E310071 7B0EBCF4 8AC6CE4A AAE8DB19 1E62B1F7 F6C2D5D0 C4 quit ! ! username https privilege 15 password 0 https username ssh privilege 15 password 0 ssh ! ! ! ! ! ! interface FastEthernet0/0 ip address 192.168.0.1 255.255.255.0 speed 100 full-duplex ! interface FastEthernet0/1 no ip address shutdown duplex auto speed auto ! ! ! ip http server ip http secure-server ! ! ! ! ! ! control-plane ! ! ! line con 0 exec-timeout 5 30 logging synchronous line aux 0 line vty 0 4 exec-timeout 0 0 password cisco login local ! ! end
相关实例图：
