Id. 01 router (computing)

Post on 23-Jan-2017

320 views 0 download

transcript

Akre Technical CollegeDept. of Information Technology

2nd stage

Subject: Internet Technology (Pr) Date: 11/11/2015

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

Router (computing)

Mr. Saleem & Mr. Rzgar

2

Router has operating system – IOS – Internetworking Operating System and it's extension is (.bin)

Router types : 1- Fixed port : cannot add Interface

2- Modular : can add interface ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

3

Router internal components: CPU, RAM, FLASH, ROM, BUSES, NVRAM, INTERFACES, POWER SUPPLY.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

4

Router external components :Two Fast Ethernet ports ( connecting to switch and router) Console port ( connecting to router for configuration , router connector is RJ-45 and PC connector is DB-9). Auxiliary port ( connect to FAX modem, router connector is RJ-45 and PC connector is DB-25 power switch , power connection .to connect to router from Console port you must have a program ( Hyper terminal ( XP) , SecureCRT ,TeraTerm )

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

5 ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

6 ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

7

Router internal configuration :RAM: random access memory: temp config file, ARP cashe, Packet buffering NVRAM: non volatile RAM: storing backup copy of config file Flash: Saving os image (command based) IOS comprised

ROM: read only memory: Power-On Self-Test (POST), bootstrap program

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

8

Router startup sequence :Step1 = checking the hardware ---- POST --- bootstrap program that check the functionality of hardware (ROM) Step2 = Find the ios --- flash, TFTP, ROM

Step3 = Load it .………Step4 = Find the configuration file NVRAM, TFTP

Step5 = Load it .……… Step6 = setup mode ------ creating the config file

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

9 ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

10

Router Modes 1 -setup mode

2 -User execute mode Router>

3 -Privilege execute mode Router #

Router>enable // login privilege mode4 -Global configuration mode

(#Router(config Router#configuration terminal or config t

5 -Interface configuration Router(config-if)#

Router(config)#interface fastethernet 0/0

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

11

Router configuration must be saved into NVRAM.Router configuration is on running – config file and to save it into NVRAM you must copy it to startup-config file Copy run start Or Copy running – config startup-config

Some Router show command Show version

show flash show interface

Show startup-config or show start Show history

show ip interface brief

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

12

Change Router Name and setup Router user mode passwordRouter>enaRouter#config tRouter(config)#hostname IT RouterITRouter(config)#enable password 123 ------1ITRouter(config)#^ZITRouter#copy run startTo remove ena password

ITRouter(config)#no enable password copy run start T Router#

ITRouter#config tITRouter(config)#enable secret 1234 ---------------- 2ITRouter(config)#copy run start

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

13

Setup Router console password IT Router#

ITRouter#config tITRouter(config)#line console 0ITRouter(config-line)#password 333ITRouter(config-line)#loginITRouter(config-line)#^ZITRouter#copy run start

Destination filename [startup-config] ?IT Router#

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

14

Setup BannerITRouter#config t

ITRouter(config)#banner MOTD #IT Router#ITRouter(config)#^ZIT Router#ITRouter#copy run start

Destination filename [startup-config] ?IT Router#

Sets the local time on the RouterITRouter#clock set 20:05:00 11 december 2014ITRouter#copy run start

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

15

Setup Router Interface IP AddressITRouter(config)#interface fastethernet 0/0ITRouter(config-if)#ip address 192.168.1.1 255.255.255.0ITRouter(config-if)#no shutITRouter(config-if)#no shutdown

ITRouter(config-if)#%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

ITRouter(config-if)#^ZIT Router#

ITRouter#copy run startDestination filename [startup-config] ?IT Router#

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

16

Assigning a Local Host Name to an IP AddressITRouter#config tEnter configuration commands, one per line. End with CNTL/Z.

ITRouter(config)#ip host Akre 192.168.1.1ITRouter(config)#^Z

ITRouter#ITRouter#copy run start

Destination filename [startup-config] ?Building configuration...

[OK]ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

17

Setup telnet passwordITRouter#config t

ITRouter(config)#line vty 0? <1-15 >Last Line number

<cr>ITRouter(config)#line vty 0 4ITRouter(config-line)#password 12345ITRouter(config-line)#loginITRouter(config-line)#^Z

IT Router#%SYS-5-CONFIG_I: Configured from console by console

ITRouter#copy run startDestination filename [startup-config] ?Building configuration...

[OK]ITRouter#RT1#

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

18

Encryption all Router passwordITRouter#config tITRouter(config)#service password-encryptionITRouter(config)#^ZITRouter#copy run start

ITRouter#Router(config)#do show running-configExecutes the privileged-level show running-configcommand while in global configuration mode.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

19

Recovering router passwordsThe Cisco IOS provides a mechanism to recover passwords, in case you lost them or you do not remember them.

You need to have physical access to the router to connect to its console port.

The key point of the password recovery process is to boot up the Cisco router ignoring its current startup configuration, which contains the current passwords. To boot up the Cisco router ignoring its current startup configuration you need to change the value in the configuration register. You can set bit 6 in the configuration register to instruct the bootstrap programto avoid reading the startup configuration from NVRAM. By doing this, you boot up the router as if it had no startup configuration — as if the router were new, coming out of the box.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

20

Password recovery processFollow these steps to recover passwords on a Cisco router:

1 .Change the configuration register to 0x2142.2 .Reboot the router.

3 .Upon reboot, exit from setup mode.The router ignores the startup configuration in NVRAM, so it automaticallystarts in setup mode. You need to exit setup mode because yourrouter is already set up. You just want to reset the passwords in the currentstartup configuration, not to reset the whole configuration.

4 .Enable privileged EXEC mode.5 .Load the startup configuration manually from NVRAM to RAM.

6 .Enable global configuration mode.7 .Change the passwords.

8 .Save the running configuration over the startup configuration in NVRAM.9 .Change the configuration register back to the default value of 0x2102.

10 .Reboot the router.ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

21

#The normal router configuration register value is 0x2102 and its size is 2 bytes (16 bits ).

The router configuration register value that let router to ignore its startup-configuration file is 0x2142

#to change router configuration register value to 0x2142 you must boot router from Rommon by ( ctrl + Break )

#Config register calculator application

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

22 ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

23

Rommon 1> ? Show commands that are using in Rommonrommon 2 > confreg 0x2142rommon 3 > resetnoRouter>enaRouter#copy start run

Destination filename [running-config] ?ITRouter#

ITRouter#config tITRouter(config)#no enaITRouter(config)#no enable passITRouter(config)#no enable password // to remove enable password

ITRouter(config)#ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

24

Router(config)#no ena

Router(config)#no enable secret //to remove enable secret password Router(config)#exit Router#

Router#config t ITRouter(config)#line console 0ITRouter(config-line)#no passITRouter(config-line)#no password //to remove console password ITRouter(config-line)#exitITRouter(config)#line vty 0 4ITRouter(config-line)#no pass

ITRouter(config-line)#no password /to remove telnet password ITRouter(config-line)#exit

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

25

ITRouter(config)#config-register 0x2102ITRouter(config)#do copy run start

Destination filename [startup-config] ?ITRouter(config)# exit Router#reload

There is not any passwords and Enjoy------------------

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

26

Creating DHCP on Router interfaceRouter(config)#ip dhcp pool net1Router(dhcp-config)#network 192.168.1.0 255.255.255.0Router(dhcp-config)#defRouter(dhcp-config)#default-router 192.168.1.1Router(dhcp-config)#dnsRouter(dhcp-config)#dns-server 192.168.1.10Router(dhcp-config)#^ZRouter#Router# copy run start

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

27

Define DNS server to RouterRouter#config tRouter(config)#ip nameRouter(config)#ip name-server 192.168.1.10Router(config)#^ZRouter#copy run start

[OK]Router#ping pc1

Akre(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.10 //to exlude ip address or dhcp should not asign this range to client

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

28

Router interface obtain ip from dhcp serverRouter(config)#interface fastethernet 0/1

or Router(config)# int fa 0/1Router(config-if)#no shutRouter(config-if)#ip

Router(config-if)#ip addRouter(config-if)#ip address dhcpRouter(config-if)#^ZRouter#copy run start

Destination filename [startup-config] ?Building configuration...

[OK]Router#

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

29

Router IOS or Start file backup and restoreCopy flash tftp // to copy a file from flash to tftp serverLike ios file, this to backup ios to tftp server

Copy tftp flash // to restore a file from tftp serverCopy start tftp // to copy or backup start file to tftp serverCopy tftp start // to restore start file from tftp serverAkre#delete flash // to delete a file from flash Delete filename []?c2800nm-advipservicesk9-mz.124-15.T1.bin

IOS file name Akre#erase start // to remove satrt file

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

30

Router(config-if)#clock rate? Are you meaning in LAB environment?, if so, you can do it, but if you are meaning on a real connection then you should set the exact clock rate supplied by your ISP.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

31

A network route is a data transmission path through one or more networks between two end nodes.

More than one route can exist between two end nodes. The main purpose of a router is to find the best route to reach a destination node.

network routes types: ✦Static routes ✦Default routes ✦Dynamic routes

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

32

Static routesYou define static routes manually on a router. Static routes are best suited for small networks, such as LANs, where routes rarely change. If routes change, you need to update your routes to reflect the new data transmission paths.Configuring static routes:

Router(config)# ip route network-address subnet-mask {ip-address | exit-interface }

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

33

Dissecting static route syntaxip route - Static route commandNetwork address – Destination network address Subnet mask - Subnet mask of destination networkIP address - Serial 0/0/0 interface IP address on R2, which is the "next-hop" to this network

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

34

General Role of the RouterConnections of a Router for WAN

-A router has a DB-60 port that can support 5 different cabling standards

Connections of a Router for Ethernet-2 types of connectors can be used: Straight through and Cross-over Straight through used to connect:

-Switch-to-Router, Switch-to-PC, Router-to-Server, Hub-to-PC, Hub-to-Server

Cross-over used to connect: -Switch-to-Switch, PC-to-PC, Switch-to-Hub, Hub-to-Hub, Router-to-Router

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

35

Examining Router Interfaces-Show IP router command – used to view routing table-Show Interfaces command – used to show status of an interface-Show IP Interface brief command – used to show a portion of the interface information-Show running-config command – used to show configuration file in RAM

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

36

InterfacesConfiguring an Ethernet interface

-By default all serial and Ethernet interfaces are down -To enable an interface use the No Shutdown command

Configuring a Serial interface-Enter interface configuration mode

-Enter in the ip address and subnet mask-Enter in the no shutdown command

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

37

-Physically connecting a WAN Interface .-A WAN Physical Layer connection has sides:

Data Circuit-terminating Equipment (DCE) – This is the service provider. CSU/DSU is a DCE device. Data Terminal Equipment (DTE) – Typically the router is the DTE device.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC

38

Configuring serial links in a lab environmentOne side of a serial connection must be considered a DCEThis requires placing a clocking signal – use the clock rate command.Example:

-R1(config)#interface serial 0/0-R1(config-if)#clockrate 64000

Serial Interfaces require a clock signal to control the timing of the communications.

ID. 01 IT-ATC.blogspot.com :: fb.com/ATC.Information.Technology :: fb.com/groups/IT.ATC