Date post: | 09-Apr-2018 |
Category: |
Documents |
Upload: | sumansanjiv |
View: | 216 times |
Download: | 0 times |
of 52
8/7/2019 ConfiguringARouter
1/52
Ch.3 Configuring a Router
CCNA 1 version 3.0
Rick Graziani
Cabrillo College
8/7/2019 ConfiguringARouter
2/52
Rick Graziani [email protected] 2
Overview
Students completing this module should be able to:
Name a router Set passwords Examine show commands
Configure a serial interface Configure an Ethernet interface Execute changes to a router Save changes to a router
Configure an interface description Configure a message-of-the-day banner Configure host tables Understand the importance of backups and documentation
8/7/2019 ConfiguringARouter
3/52
Rick Graziani [email protected] 3
CLI command modes
Router#configure terminal
Router(config)#
8/7/2019 ConfiguringARouter
4/52
Rick Graziani [email protected] 4
Configuring a router name
Router#config t
Router(config)#hostname Tokyo
Tokyo(config)#
Mistake
Should be
8/7/2019 ConfiguringARouter
5/52
Rick Graziani [email protected] 5
Configuring router passwords
Not recommended, clear text
Router(config)#enable secret
Use this command instead, password is encryped
Encrypts the passwordsabove, but
8/7/2019 ConfiguringARouter
6/52
Rick Graziani [email protected] 6
WARNING
service password-encryption uses a Cisco Level 7encryption which is very easy to decrypt.
For the GetPass! software www.boson.com However, the enable secret uses a stronger
encryption method and cannot be easily hacked.
service password-encryption command
8/7/2019 ConfiguringARouter
7/52
Rick Graziani [email protected] 7
Doesnt work for enable secret!
More later!
enable secret command
8/7/2019 ConfiguringARouter
8/52
Rick Graziani [email protected] 8
exit
end
Using exit, endand Control-Z
8/7/2019 ConfiguringARouter
9/52
Rick Graziani [email protected] 9
Router>ena
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#?
Configure commands:
aaa Authentication, Authorization and Acc..
access-list Add an access list entry
alias Create command alias
appletalk Appletalk global configuration commands
arap Appletalk Remote Access Protocol
arp Set a static ARP entry
Router(config)#exit
00:03:20: %SYS-5-CONFIG_I: Configured from console by con
Router#
Router(config)#interface interfaceRouter(config-if)#exit
Router(config)#router routing-protocol
Router(config-router)#exit
Router(config)#exit
Router#
Message each time you exit global
configuration mode
Must be in privileged mode
Using exit, endand Control-Z
8/7/2019 ConfiguringARouter
10/52
Rick Graziani [email protected] 10
Router# conf t (abbreviated)
Router(config)# router protocol
Router(config-router)# (commands)
Router(config-router)# exit
Router(config)# exit
Router#
Router(config)# interface type port
Router(config-if)# (commands)Router(config-if)# end (or Control-Z)
Router#
Using exit, endand Control-Z
8/7/2019 ConfiguringARouter
11/52
Rick Graziani [email protected] 11
Examining the show commands
show interfaces Displays all the statistics for all the interfaces on therouter. To view the statistics for a specific interface, enter the showinterfaces command followed by the specific interface and port number.
show controllers serial Displays information-specific to the interfacehardware
show clock Shows the time set in the router show hosts Displays a cached list of host names and addresses
show users Displays all users who are connected to the router show history Displays a history of commands that have been entered show flash Displays information about flash memory and what IOS files
are stored there
show version Displays information about the router and the IOS that isrunning in RAM
show ARP Displays the ARP table of the router show protocol Displays the global and interface specific status of any
configured Layer 3 protocols
show startup-configuration Displays the saved configuration locatedin NVRAM
show running-configuration Displays the configuration currentlyrunning in RAM
8/7/2019 ConfiguringARouter
12/52
Rick Graziani [email protected] 12
Router>show interface ethernet 0Ethernet0 is administratively down, line protocol is down , using hub 0
Hardware is Lance, address is 0010.7b3a.cf84 (bia 0010.7b3a.cf84)
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255/255, load 1/255
Encapsulation ARPA, loopback not set, keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Last input never, output 01:05:35, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 input packets with dribble condition detected
63 packets output, 11676 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Router>
StatusMAC Address
Routing
metric
information
(later)
Data link
encapsulation
(Ethernet-II)
ARP cache entries timer
show interfaces command
8/7/2019 ConfiguringARouter
13/52
Rick Graziani [email protected] 13
Where is the MAC Address?
Router>show interface serial 0
Serial0 is administratively down, line protocol is down
Hardware is HD64570
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation HDLC, loopback not set, keepalive set (10 sec)
Last input never, output never, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifoOutput queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
28 packets output, 9576 bytes, 0 underruns
0 output errors, 0 collisions, 17 interface resets
0 output buffer failures, 0 output buffers swapped out
0 carrier transitions
DCD=down DSR=down DTR=down RTS=down CTS=down
Router>
8/7/2019 ConfiguringARouter
14/52
Rick Graziani [email protected] 14
Examining the show commands
We will log into a router a examine some of the showcommands.
8/7/2019 ConfiguringARouter
15/52
Rick Graziani [email protected] 15
Configuring a serial interface
Router(config)#interface serial 0/0
Router(config-if)#ip address
Configuring an IP Address on an interface
8/7/2019 ConfiguringARouter
16/52
Rick Graziani [email protected] 16
show ip interface command
A serial interface will not show up and up unless bothends are properly configured (mostly) and a the no
shutdown command is used. If one routers configuration looks okay, check the other
routers configuration.
Router# show ip interface brief
Interface IP-Address OK? Method Status Protocol
Ethernet0 131.108.1.11 YES manual up up
Serial0 198.135.2.49 YES manual administratively down down
What is wrong here? The administrator has either done a
shutdown on the interface or has forgotten to do a no shutdown.
8/7/2019 ConfiguringARouter
17/52
Rick Graziani [email protected] 17
Lab
Real world
On serial links that are directly interconnected, as in a lab environment,one side must be considered a DCE and provide a clocking signal.
The clock is enabled and speed is specified with the clock ratecommand.
Router(config)#interface serial 0/0
Router(config-if)#clock rate 56000
Router(config-if)#no shutdown
Configuring a serial interface
8/7/2019 ConfiguringARouter
18/52
Rick Graziani [email protected] 18
RouterB(config)#inter serial 1
RouterB(config-if)#clock rate ?
Speed (bits per second)
12002400
4800
9600
19200
38400
56000
64000
2000000
4000000
Choose clockrate from list above
RouterB(config-if)#clock rate 64000
RouterB(config-if)#
RouterBDCE cable
RouterADTE cable
Configuring a serial interface
8/7/2019 ConfiguringARouter
19/52
Rick Graziani [email protected] 19
How can you tell which end is the DTE and which end is the DCE?
Look at the label on the cable.
Look at the connecter between the two cables - The DTE cable will
always be male and the DCE cable will always be female.
DTE Cable DCE Cable
Configuring a serial interface
8/7/2019 ConfiguringARouter
20/52
Rick Graziani [email protected] 20
RouterA#show controllers serial 0
HD unit 0, idb = 0xECA4C, driver structure at 0xF1EC8
buffer size 1524 HD unit 0, V.35 DTE cable
cpb = 0x62, eda = 0x403C, cda = 0x4050
RX ring with 16 entries at 0x62400000 bd_ptr=0x4000 pak=0x0F5704 ds=0x62FFB8 status=80 pak_size=22
RouterB#show controllers serial 0
buffer size 1524 HD unit 0, V.35 DCE cable, clockrate 64000
cpb = 0x62, eda = 0x408C, cda = 0x40A0RX ring with 16 entries at 0x624000
00 bd_ptr=0x4000 pak=0x0F2F04 ds=0x627908 status=80 pak_size=22
RouterBDCE cable
RouterADTE cable
How can you tell which end is the DTE and which end is the DCE?
Use the show controllers command!
It will also tell you the type of cable, in our labs we will be using a V.35
cable.
This is one of few commands where there must be a space between the interface type and the port.
Configuring a serial interface
8/7/2019 ConfiguringARouter
21/52
Rick Graziani [email protected] 21
Please be very careful when connecting the male and femaleV.35 cables together AND when connecting the serial cable to
the router!
They only connect ONE WAY! Be sure the two ends match! Dont force it!
This end up!
(The wider end is up.)
Configuring a serial interface
8/7/2019 ConfiguringARouter
22/52
Rick Graziani [email protected] 22
running-config
IOS (running)
startup-config IOS
ios (partial)Bootup program
Executing adds, moves, and changes
8/7/2019 ConfiguringARouter
23/52
Rick Graziani [email protected] 23
Router#show startup-config
%% Non-volatile configuration memory is not present
Router#show running-config
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptimeservice timestamps log uptime
no service password-encryption
!
hostname Router
!
ip subnet-zero
!
!interface Ethernet0
no ip address
no ip directed-broadcast
shutdown
!
interface Serial0
no ip address
no ip directed-broadcast
shutdown
No startup-configfile in NVRAM
Default running-configfile, created in RAM
Executing adds, moves, and changes
8/7/2019 ConfiguringARouter
24/52
Rick Graziani [email protected] 24
The running-config
The configuration file contains global, process, and interface information that directly affects theoperation of the router and its interface ports.
All changes to the router are made to the running-config file and take affect immediately on therouter (with just a couple of exceptions).
IP address
Routing Protocols
Routers Name
etc.
Router#show running-config
Building configuration...Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router!
ip subnet-zero
!
interface Ethernet0
no ip address
no ip directed-broadcast
shutdown
Executing adds, moves, and changes
8/7/2019 ConfiguringARouter
25/52
Rick Graziani [email protected] 25
startup-config
RAMrunning-config
During bootup
Changes to the router are automatically put in the running-config file. If the router loses power or reboots, everything in RAM is lost including the running-
config file.
To make sure the changes to the routers configuration remain saved, you must copythe running-config from RAM into the startup-config into NVRAM:
Router# copy running-config startup-config
Router# copy running-config startup-config
copy running-config startup-config
8/7/2019 ConfiguringARouter
26/52
Rick Graziani [email protected] 26
Router#copy running-config startup-configDestination filename [startup-config]?
Building configuration...
Router#show startup-config
!
version 12.0
service timestamps debug uptimeservice timestamps log uptime
no service password-encryption
!
hostname Router
!
!
ip subnet-zero
!
interface Ethernet0
no ip address
no ip directed-broadcast
shutdown
!
The startup-config file now
identical to running-config
and the router will also havethese changes if the router
reboots.
copy running-config startup-config
8/7/2019 ConfiguringARouter
27/52
Rick Graziani [email protected] 27
Router# copy running-config startup-config
Or
Router# copy running startup
OR
Router# copy run start
OR
Any usage of the command or parameters, so that they are still uniquely recognizable.
WARNING Using an incorrect configuration file name could overwrite the routers IOS in flash, as the router believes
you are trying to copy a blank file into flash.
Router#copy running-config start-up
**** NOTICE ****
Flash load helper v1.0
This process will accept the copy options and then terminate
the current system image to use the ROM based image for the copy.Routing functionality will not be available during that time.
If you are logged in via telnet, this connection will terminate.
Users with console access can see the results of the copy operation.
---- ******** ----
Proceed? [confirm]^C
%Copy cancelled by user request.
Router#
Incorrect file name!
Press C
copy running-config startup-config
8/7/2019 ConfiguringARouter
28/52
Rick Graziani [email protected] 28
Router# copy running-config startup-config
Or
Router# copy running startup
OR
Router# copy run start
OR
Any usage of the command or parameters, so that they are still uniquely recognizable.
WARNING
This is also incorrect, and will overwrite the startup-config with a blank file.
Router#copy runningconfig startup-config
Destination filename [startup-config]?
?Bad filename
Router#
Incorrect file name!
Press C
copy running-config startup-config
8/7/2019 ConfiguringARouter
29/52
Rick Graziani [email protected] 29
show startup-config
show running-config
These commands can only be done in privilege mode
because they display password information.
1
Displaying the config files
8/7/2019 ConfiguringARouter
30/52
Rick Graziani [email protected] 30
Executing adds, moves, and changes
8/7/2019 ConfiguringARouter
31/52
Rick Graziani [email protected] 31
Configuring Interfaces
Router(config-if)#exit
Router(config)#interface serial 0Router(config-if)#ip add 172.16.10.1 255.255.255.0
Router(config-if)#clock rate 64000 (only if DCE)
Router(config-if)#no shutdown
8/7/2019 ConfiguringARouter
32/52
Rick Graziani [email protected] 32
Finishing the Configuration
8/7/2019 ConfiguringARouter
33/52
Rick Graziani [email protected] 33
Importance of configuration standards
In order to manage a network, there must be a centralizedsupport standard.
Configuration, security, performance, and other issuesmust be adequately addressed for the network to function
smoothly. Creating standards for network consistency helps reduce
network complexity, the amount of unplanned downtime,and exposure to events that may have an impact onnetwork performance.
8/7/2019 ConfiguringARouter
34/52
Rick Graziani [email protected] 34
Interface descriptions
RouterB#show inter e 0
Serial0 is up, line protocol is up
Hardware is HD64570
Description: Engineering LAN, Bldg. 18
Internet address is 10.1.1.1/24
8/7/2019 ConfiguringARouter
35/52
Rick Graziani [email protected] 35
Gateway(config)#inter e 0
Gateway(config-if)#description LAN interface for MarketingGateway(config-if)#end
Gateway#
Gateway#show run
Building configuration...
!
interface Ethernet0
description LAN interface for Marketingno ip address
no ip directed-broadcast
shutdown
Gateway#show interface ethernet 0
Ethernet0 is administratively down, line protocol is down
Hardware is Lance, address is 0000.0c34.9ebb (bia 0000.0c34.9ebb)
Description: LAN interface for Marketing
MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 252/255, load 1/255
Encapsulation ARPA, loopback not set, keepalive set (10 sec)
ARP type: ARPA, ARP Timeout 04:00:00
Gateway#copy run start
Destination filename [startup-config]?
Building configuration...
Gateway#
Dont forget this or next time router
reboots these changes will be lost!
Interface descriptions
8/7/2019 ConfiguringARouter
36/52
Rick Graziani [email protected] 36
Configuring interface description
8/7/2019 ConfiguringARouter
37/52
Rick Graziani [email protected] 37
Login banners and Configuring message-
of-the-day (MOTD)
Wording is not
the same, but
you get the idea.
8/7/2019 ConfiguringARouter
38/52
Rick Graziani [email protected] 38
Router(config)#hostname Gateway
Gateway(config)#Gateway(config)#banner motd #
Enter TEXT message. End with the character '#'.
Warning!
Stay away! #
Gateway(config)#end
Gateway#exit
Press RETURN to get started.
Warning!
Stay away!
User Access Verification
Password:
Gateway#show run
Building configuration...
!
hostname Gateway
!
!
banner motd ^C
Warning!
Stay away! ^C
Delimiter always shows as ^C
MOTD (Message Of The Day)
Prompt changes
Login banners and Configuring message-
of-the-day (MOTD)
8/7/2019 ConfiguringARouter
39/52
Rick Graziani [email protected] 39
Host name resolution
Router#ping 172.16.32.1
Router#ping Auckland
Router# telnet 192.168.53.1
Router# telnet Beirut
Router# traceroute 192.168.89.1
Router# traceroute Capetown
The Cisco IOS software maintains a cache of host name-to-address mappingsfor use by EXEC commands.
This cache speeds up the process of converting names to addresses. Host names, unlike DNS names, are significant only on the router on which
they are configured. (DNS is also an option later)
8/7/2019 ConfiguringARouter
40/52
Rick Graziani [email protected] 40
Host name resolution
This does not make the router a DNS (Domain Name Server). This command does not turn your router into a DNS server. This command does not effect packets entering your router to be
routed.
This only affects the IOS commands entered at the router prompt.
Multiple ip addresses can be entered in case one interface is down. It is usually a good idea to use the same list of names on all your routerconfigs.
Router(config)# ip host SantaCruz 172.16.32.1 192.168.53.1
ConfiguringMultiple IP Addresses
8/7/2019 ConfiguringARouter
41/52
Rick Graziani [email protected] 41
Configuring host tables
8/7/2019 ConfiguringARouter
42/52
Rick Graziani [email protected] 42
If you are not using the services of a DNS server, it is best to disable this process. DNS (Domain Name Service) is enabled by default with a server address of
255.255.255.255, which is a local broadcast.
If enabled, with no DNS server on the network, may cause a slight, but irritable
delay when making typing mistakes.
Router(config)# ip domain-lookupRouter#wreh
Translating "wreh"...domain server (255.255.255.255) (Takes a few seconds)
Translating "wreh"...domain server (255.255.255.255) (Takes a few seconds)
Router(config)# no ip domain-lookup
Router#wreh
Translating "wreh"
% Unknown command or computer name, or unable to find computer address
8/7/2019 ConfiguringARouter
43/52
Rick Graziani [email protected] 43
Configuration backup and documentation
Configuration files should be stored as backup files in theevent of a problem.
Configuration files can be stored on a network server, on aTFTP server, or on a disk stored in a safe place.
8/7/2019 ConfiguringARouter
44/52
Rick Graziani [email protected] 44
Copying, editing, and pasting configurations
A TFTP server will allow image and configuration uploads anddownloads over the network. The TFTP server can be another router, or it can be a host system.
8/7/2019 ConfiguringARouter
45/52
Rick Graziani [email protected] 45
The TFTP host can be any system that has TFTP software loaded andoperating and able to receive files from the TCP/IP network.
Copying, editing, and pasting configurations
8/7/2019 ConfiguringARouter
46/52
Rick Graziani [email protected] 46
RAMIOS (running)
running-config startup-config IOS
copy startup-config tftp
copy tftp startup-config
copy running-config tftp
copy tftp running-config
copy flash tftpcopy tftp flash
Copying, editing, and pasting configurations
8/7/2019 ConfiguringARouter
47/52
Rick Graziani [email protected] 47
Copying, editing, and pasting configurations
Troubleshooting: Be sure you can ping the TFTP server.
8/7/2019 ConfiguringARouter
48/52
Rick Graziani [email protected] 48
When using Windows, the TFTP server software must be running. The copy can be performed from the console port or from a telnet session. The telnet session can be performed on the same computer where the TFTP
server is running (or to a different computer).
Router# copy flash tftp
TFTP Software and Servers
8/7/2019 ConfiguringARouter
49/52
Rick Graziani [email protected] 49
TFTP software either comes free with the OS (Linux/Unix) or can bedownloaded for free.
TFTP Software and Servers
8/7/2019 ConfiguringARouter
50/52
Rick Graziani [email protected] 50
Just double click on the shortcut
Remember, TFTP is Trivial FTP: No authentication
No login
No choice for directory
Uses UDP and verified via a TFTP checksum (not TCP ACKs)
Cisco TFTP Server.lnk
TFTP Software and Servers
8/7/2019 ConfiguringARouter
51/52
Rick Graziani [email protected] 51
Summary (1/2)
The router has several modes: User EXEC mode Privileged EXEC mode Global configuration mode
Other configuration modesThe command-line interface may be used to make changes
to the configuration:
Setting the hostname
Setting passwords Configuring interfaces Modifying configurations Showing configurations
8/7/2019 ConfiguringARouter
52/52
Summary (2/2)
An understanding of the following key points should havebeen achieved:
Configuration standards are key elements in the success ofany organization maintaining an efficient network.
Interface descriptions can include important information tohelp network administrators understand and troubleshoot
their networks.
Login banners and messages-of-the-day provide userswith information upon login to the router.
Host name resolutions translate names to IP addresses toallow the router to quickly convert names to addresses.
Configuration backup and documentation is extremelyimportant to keep a network operating smoothly.