Lab Manual. ISC 350 (Networks and Telecommunication) Information Technology Solutions. Prepared by: Eng. Altaf Al Farhan.

Transcription

1 Kuwait University Information Technology Solutions College of Computing Sciences and Engineering Department of Information Science Lab Manual ISC 350 (Networks and Telecommunication) Prepared by: Eng. Altaf Al Farhan Revised Spring

2 Contents Laboratory Hardware, Software / Tools Requirements:... 2 Laboratory Schedule... 3 Laboratory Policy... 3 Lab Evaluation... 4 Laboratory # 1 IP Addressing and Subnetting... 5 Laboratory # 2 Basic Cisco Router Commands... 8 Laboratory # 3 Extended Basics and Configuring Interfaces Laboratory # 4 IP Internet Protocol, ARP and Static Routes Laboratory # 5 Routing Information Protocol (RIP) and IGRP routing protocol Laboratory # 6 Configuring OSPF in a single area Laboratory # 7 PPP with CHAP Authentication, Connectivity Tests with Traceroute and Saving and Loading Router Configurations Laboratory # 8 Frame Relay Laboratory # 9 Standard Access Lists Laboratory # 10 Extended Access Lists Laboratory # 11 Basic Switch Commands and VLANs Laboratory # 12 ISDN (Integrated Services Digital Network) Laboratory # 13 Revision Appendix A Rules to fallow by Computer Lab Users Appendix B Certification CCSE ISC-350 P a g e 1

3 Laboratory Hardware, Software / Tools Requirements: The required hardware for teaching this course is having a PC for each student supported with a network connection for Internet access. A data show and a PC for the course instructor are also required. Windows XP or a later version must be installed. The lab tools are Boson NetSim for CCNP and BOSON Network Designer. CCSE ISC-350 P a g e 2

4 Laboratory Schedule s Lab Title Lab activity 1 IP Addressing and Subnetting 2 Basic Cisco Router Commands 3 Extended Basics and Configuring Interfaces Quiz 1 4 IP Internet Protocol, ARP and Static Routes 5 Routing Information Protocol (RIP) and IGRP routing protocol 6 Configuring OSPF in a single area Quiz 2 7 PPP with CHAP Authentication, Connectivity Tests with Traceroute and Saving and Loading Router Configurations 8 Frame Relay 9 Standard Access Lists Quiz 3 10 Extended Access Lists 11 Basic Switch Commands and VLANs 12 ISDN (Integrated Services Digital Network) Quiz 4 13 Revision Laboratory Policy Fallow the laboratory rules listed in appendix A To pass this course, the student must pass the lab-component of the course. Cheating in whatever form will result in F grade. Attendance will be checked at the beginning of each Lab. Absence for three (03) or more unexcused labs will result in an F grade in the Course. An official excuse must be shown in one week following return to classes. Cheating in Lab Work or Lab Final will result F grade in Lab. There will be no make-up for any Quiz/Exam/Lab. Hard work and dedication are necessary ingredients for success in this course. CCSE ISC-350 P a g e 3

5 Lab Evaluation Activity Weight Lab Exercises (4) 5% Lab Quizzes (4) 5% Lab Final 5% Total 15% CCSE ISC-350 P a g e 4

6 Laboratory # 1 IP Addressing and Subnetting Laboratory Objective: To familiarize with IPv4 addressing and IP address classes. To familiarize students with subnets' design and subnet masks. CCSE ISC-350 P a g e 5

7 Lab #1 IP Addressing and Subnetting 1. Laboratory Objective: To familiarize with IPv4 addressing and IP address classes. To familiarize students with subnets' design and subnet masks. 2. Laboratory Learning Outcomes: 3. Laboratory Exercises Exercise 1: You are required to divide a network address into four subnets. Given the IP address of the first subnet below, calculate the following: subnets 1. How many bits do you need to borrow? a) What is the total number of useable subnets? b) What is the total number of useable hosts per subnet? 2. What s your subnet mask? Magic No.? 3. Fill in the table below for the useable subnets. Subnet No. Subnet Address Host Range Broadcast Address CCSE ISC-350 P a g e 6

8 Exercise 2: Given an IP address of some host in the subnet that has the mask below, calculate the following: 1. How many bits are borrowed? a) What is the total number of useable subnets? b) What is the total number of useable hosts per subnet? 2. Magic No.? 3. Fill in the table below for the required subnet. Subnet Address Host Range Broadcast Address CCSE ISC-350 P a g e 7

9 Laboratory # 2 Basic Cisco Router Commands Laboratory Objective: After finishing this lab students will be able to: o Connecting to a Cisco Router. o Using basic Cisco Router Commands. o Using Show Command. o Discover Cisco devices using CDP command (Cisco Discovery Protocol). o Show and configure basic area of Cisco router. CCSE ISC-350 P a g e 8

10 Lab #2 Basic Cisco Router Commands 1. Laboratory Objective: After finishing this lab students will be able to: o Connecting to a Cisco Router. o Using basic Cisco Router Commands. o Using Show Command. o Discover Cisco devices using CDP command (Cisco Discovery Protocol). o Show and configure basic area of Cisco router. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. You can find its shortcut on your desktop. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-1 Connecting to a Router". CCSE ISC-350 P a g e 9

11 Click the button "Load Lab". Click "Yes" when the "Load Topology" dialogue box appears. CCSE ISC-350 P a g e 10

12 You should see the following screen after loading the lab. You can pick the router you would like to configure by clicking the arrow right to erouters button You view the Network Map by clicking on the button "NetMap" CCSE ISC-350 P a g e 11

13 CCSE ISC-350 P a g e 12

14 4. Laboratory Exercises 1. Connecting to a Cisco Router 1.1 The command prompt consist of two parts the host name and the mode, in the following Router is the hostname and > is the user mode: Router> 1.2 Get to the privileged command mode using command: enable Router> enable Router# 1.3 Get back to user mode using command: disable Router# disable Router> 1.4 Use Exit or logout from user mode to leave the router Router> exit 2. Using basic Cisco Router Commands 1.1 From the user mode type? to display a summary of all user mode commands. At the more prompt hit space-bar to display next page of the list. CCSE ISC-350 P a g e 13

15 Router>? 1.2 From the privileged mode type? to display a summary of all privileged mode commands. At the more prompt hit space-bar to display next page of the list. Router>enable Router#? 1.3 From the privileged mode type show? to display a list of all of the show commands. At the more prompt hit space-bar to display next page of the list. Router#show? 1.4 Use show running-config to display the active configuration Router#show running-config 1.5 From the privileged mode type config t or conf t to enter configuration mode from terminal. To exit configuration mode type end Router#conf t Router(config)# 1.6 To exit configuration mode type end or <CTL>+Z, and exit the router using exit CCSE ISC-350 P a g e 14

16 Router(config)# end Router#exit 3. Using Show Command 3.1 Show active configuration in memory using running-config. The active configuration is not saved automatically on the Cisco router. Router> Router>enable Router#show running-config 3.2 Show system image files on flash memory. Flash memory is a special memory that continues to maintain the file images even after power is lost. Router#show flash 3.3 Show the last 10 commands you have entered. The router Command Line Interface (CLI) maintains in memory history of the last 10 commands. Router#show history 3.4 Show the Previous/Next command you typed. Router# Press up arrow or <ctrl>+p for previous command CCSE ISC-350 P a g e 15

17 Press down arrow or <ctrl>+n for next command 3.5 Show the status of the current layer 3 routed protocols running on the router. Router# show protocols 3.6 Show the following critical information using the show version command: router platform type, operating system version, operating system last boot time, file location, amount of memory, number of interfaces, and configuration register. Router# show version 3.7 Show the router s clock. Router# show clock 3.8 Show all hosts in cached list of hosts and all of their IP addresses. Router# show hosts 3.9 Show all users connected to the router. Router# show users 3.10 Show detailed information about each interface. CCSE ISC-350 P a g e 16

18 Router# show interfaces 4. Discover Cisco devices using CDP command (Cisco Discovery Protocol) 4.1 Select Router1; then Enter global configuration mode Router> Router>enable Router#conf t Router(config)# 4.2 Change router s name to R1 Router(config)# hostname R1 R1(config)# 4.3 Select Router4 then change the name to R4 Router> Router>enable Router#conf t Router(config)# hostname R4 R4(config)# [Note: By default, all interfaces are shutdown, disabled] CCSE ISC-350 P a g e 17

19 4.4 Enable the Serial 0 interface on R1 R1(config)#interface Serial 0 R1(config-if)#no shutdown 4.5 Now enable the Serial 0 interface on R4 R4(config)#interface Serial 0 R4(config-if)#no shutdown 4.6 Enable the Ethernet 0 interface on R1 R1(config)#interface Ethernet 0 R1(config-if)#no shutdown [Note: CDP is enabled by default on all interfaces. CDP is a layer 2 protocol of the OSI model. This important to know because CDP is not routable.] 4.7 On R1, type the exit command to give the status of all interfaces to CDP R1(config-if)#exit R1(config)#exit R1#show cdp interface [The output will show that both interfaces are up, and sending CDP packates] CCSE ISC-350 P a g e 18

20 4.8 On R1, type the command to provide information about directly connected neighbors R1#show cdp neighbors 4.9 On R1, type the command to provide more detailed information about directly connected neighbors R1#show cdp neighbors detail 4.10 On R1, type the command to provide information about a specific device R4 R1#show cdp entry R On R1, type the command to see how often the CDP updates are being sent and how long a recipient is to hold on to the update. R1#show cdp 4.12 On R1, type the command to adjust the amount of seconds between CDP updates to 45 R1#conf t R1(config)#cdp timer On R1, type the command to adjust the holdtime timer to 60 seconds, and then verify the change CCSE ISC-350 P a g e 19

21 R1#conf t R1(config)#cdp holdtime 60 R1(config)#exit R1#show cdp 4.14 On R1, type the command to disable the CDP for the entire router R1#conf t R1(config)#no cdp run R1(config)#exit R1# 4.15 On R1, type the command to turn CDP back on for the entire router R1#conf t R1(config)#cdp run 4.15 On R1, type the command to disable CDP for only the specific interface Ethernet 0, and verify the Ethernet 0 is no longer sending CDP updates R1(config)#interface Ethernet 0 R1(config-if)#no cdp enable R1(config-if)#exit R1(config)#exit R1#show cdp interface CCSE ISC-350 P a g e 20

22 Laboratory # 3 Extended Basics and Configuring Interfaces Laboratory Objective: After finishing this lab students will be able to: o Set routers privileged mode password. o Show Cisco router running configuration and copy it to a file (NVRAM). o Erase and Reload router s configuration from scratch. o Enable interfaces on a router and what it takes for an interface to be up. o Enable interfaces on connected routers and show neighbors using CDP. o Examine interfaces summary of a router. o Configuring the interfaces. CCSE ISC-350 P a g e 21

23 Lab #3 Extended Basics and Configuring Interfaces 1. Laboratory Objective: After finishing this lab students will be able to: o Set routers privileged mode password. o Show Cisco router running configuration and copy it to a file (NVRAM). o Erase and Reload router s configuration from scratch. o Enable interfaces on a router and what it takes for an interface to be up. o Enable interfaces on connected routers and show neighbors using CDP. o Examine interfaces summary of a router. o Configuring the interfaces. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-5 Extended Basics". 4. Laboratory Exercises 1. Set routers privileged mode password 1.1 Select Router 1, enter privileged mode then configuration mode and set the routers Host Name to CFW. Router> Router>enable Router#conf t Router(config)#hostname CFW CFW(config)# 1.2 Set a password isc for the privileged, then tests your password by exiting the router and entering the privileged mode. CCSE ISC-350 P a g e 22

24 CFW (config)#enable password isc CFW (config)#exit CFW #exit CFW > CFW >enable Password : isc CFW #conf t CFW (config)# 1.3 Passwords set using enable password command appears as plain text in the routers configuration file. That may compromise the security of your system. To set encrypted password that overrides the plain password use the enable secret command, use cisco as your encrypted password, then test it. CFW (config)#enable secret cisco CFW (config)#exit CFW #exit CFW > CFW >enable Password : isc Password : cisco (not accepted) (accepted) CFW #conf t CFW (config)# CCSE ISC-350 P a g e 23

25 2. Show Cisco router running configuration and copy it to a file (NVRAM) 2.1 Show the active configuration (running-configuration) of the router. The active configuration exist in the routers memory, it is not saved on file. To save it on file use the copy command. CFW #show running-config [Configuration is displayed] 2.2 Show the configuration stored in NVRAM, it is the startup configuration CFW #show startup-config [NO Configuration is displayed, configuration has not been saved] 2.3 Copy the active configuration from RAM to NVRAM (NVRAM retain its content even during power frailer), then show configuration on NVRAM. CFW #copy running-config startup-config Building Configuration: OK CFW #show startup-config [Configuration is displayed] 3. Erase and Reload router s configuration from scratch 3.1 Now every time the router is started (even in case of power failure) it will load it s saved startup-config from NVRAM to RAM as its running-config. Suppose that we would like to start configuring the router from scratch, we need to erase the startup-config from the NVRAM first then reload the router. This will let us delete ALL configurations from the router and start from scratch. CCSE ISC-350 P a g e 24

26 CFW #erase startup-config [press Enter to confirm erasing] CFW #show startup-config [NO Configuration is displayed] 3.2 Now since we have erased the startup-config we can reload the router. The router will notice that you have a running-config it will ask if you would like to save it in NVRAM: your answer should be no. CFW #reload [answer No for saving configuration, ALL files are erased, start router from scratch] Router> 3.3 Now we would like to reload the router with saving the running-config. First let's change the host name then reload the router with answer yes for saving configuration. Router> Router>enable Router#conf t Router(config)#hostname Admin Admin(config)#end Admin #reload [answer Yes for saving configuration, running-config is saved for reloading config] Admin > CCSE ISC-350 P a g e 25

27 3.4 Notice that the configuration has been saved for reload but not saved to startup-config. Admin >enable Admin #show startup-config [NO Configuration is displayed] R2 R1 Router Serial Ethernet R4 4. Enable interfaces on a router and what it takes for an interface to be up 4.1 Select Router 1, enter privileged mode then configuration mode and set the routers Host Name to R1. Router> Router>enable CCSE ISC-350 P a g e 26

28 Router#conf t Router(config)#hostname R1 R1(config)# 4.2 We wish to configure the Ethernet interface. To do so, we must first enter the Ethernet interface configuration mode. Now, you can display all the commands for this mode by typing?. R1(config)#interface Ethernet 0 R1(config-if)#? [all command for this mode are displayed] 4.3 The interface is disabled by the command shutdown and enabled by the command no shutdown. Verify that the status of the interface using the show interface command R1(config-if)#shutdown R1(config-if)#no shutdown R1(config-if)#end R1#show interface Ethernet 0 [displays Ethernet 0 is up] 4.4 Add a description to the interface using description command. Verify the description is added to the interface. R1#conf t R1(config)#interface Ethernet 0 R1(config-if)#description Ethernet 0 interface on R1 CCSE ISC-350 P a g e 27

29 R1(config-if)#end R1# show interface Ethernet 0 [displays Ethernet 0 is up, and description line is added] 5. Enable interfaces on connected routers and show neighbors using CDP 5.1 Select Router 2, enter privileged mode then configuration mode and set the routers Host Name to R2. Enable Interface Ethernet 0 on R2. Router> Router>enable Router#conf t Router(config)#hostname R2 R2(config)#interface Ethernet 0 R2(config-if)#no shutdown R2(config-if)#end R2# show interface Ethernet 0 [displays Ethernet 0 is up] 5.2 Now that both Ethernet interfaces on the line between R1 and R2 are up, CDP could be used to see each other. R2# show cdp neighbors [shows that router R1 is connected via interface Ethernet 0] R1# show cdp neighbors CCSE ISC-350 P a g e 28

30 [shows that router R2 is connected via interface Ethernet 0] 5.3 Enable interface Serial 0 on R4 (after renaming hostname R4). Enable interface Serial 0 on R1. Show neighbors of R1. Show neighbors of R4. [select Router 4] Router> Router>enable Router#conf t Router(config)#hostname R4 R4(config)#interface Serial 0 R4(config-if)#no shutdown R4(config-if)#end R4# show interface Serial 0 [displays Serial 0 is up on R4] [select Router 1] R1#conf t R1(config)#interface Serial 0 R1(config-if)#no shutdown R1(config-if)#end R1# show interface Serial 0 [displays Serial 0 is up on R1] R1# show cdp neighbors CCSE ISC-350 P a g e 29

31 [shows that router R2 is connected via interface Ethernet 0] [and shows that router R4 is connected via interface Serial 0] 6. Examine interfaces summary of a router 6.1 Routers may have many types of interfaces such as Ethernet, Serial, FDDI, ISDN etc. The show interfaces produces output about each interface of the router. The command show interface Ethernet 0 displays output about Ethernet 0 R1#show interfaces [display output about interfaces of router R1] Ethernet 0 is Administratively down up down Line Protocol is down down down meaning The interface is turned off with shutdown command Cable is connected but keeps alives is not being received Cabling problem or no clock rate set on DCE or other router interface is shutdown up up Connected and receiving keep alives Table 1 Summary of status of connections 6.2 The command show ip interface brief displays brief status of all interfaces. R1#show ip interface brief [display brief output about interfaces of router R1] CCSE ISC-350 P a g e 30

32 7. Configuring the interfaces Controllers are part of the interface that makes the physical connection. For the serial interface we have DTE and DCE cables. The show controller lets you know if you are DTE or DCE. Kind of Cable attached to Serial Interface DTE DCE Meaning Data Terminating equipment Data-circuit terminating equipment Who provide clocking The other end Provide clocking This device must provide the clocking on the wire R1#show controller Serial 0 [displays the type of cable you have is DCE] 7.2 If your interface is DCE you must provide the clock rate. R1#conf t R1(config)#interface Serial 0 R1(config-if)#no shutdown [if the interface is not enabled yet] R1(config-if)#clock rate R1(config-if)#end 7.3 Use description command to add description to this interface. R1#conf t R1(config)#interface Serial 0 R1(config-if)#description Connection to the Engineering Hub CCSE ISC-350 P a g e 31

33 R1(config-if)#end [The following will show the changes made] R1#show running-config [or] R1#show controller [or] R1#show interfaces CCSE ISC-350 P a g e 32

34 Laboratory # 4 IP Internet Protocol, ARP and Static Routes Laboratory Objective: After finishing this lab students will be able to: o Configure routers with IP addresses and ping between them to test connectivity. o View and clear ARP routing table. o Create and view a host table. o Add static routes for all routers. CCSE ISC-350 P a g e 33

35 Lab #4 IP Internet Protocol, ARP and Static Routes 1. Laboratory Objective: After finishing this lab students will be able to: o Configure routers with IP addresses and ping between them to test connectivity. o View and clear ARP routing table. o Create and view a host table. o Add static routes for all routers. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-10 ARP". 4. Laboratory Exercises Ethernet 0 IP address Subnet mask Ethernet 0 IP address Subnet mask R2 R1 Serial 0 IP address Subnet mask Router Serial Ethernet Serial 0 IP address Subnet mask R4 CCSE ISC-350 P a g e 34

36 Configure routers with IP addresses and ping between them to test connectivity 1.1 Select Router 1, enter privileged mode then configuration mode and set the router's Host Name to R1. Router> Router>enable Router#conf t Router(config)#hostname R1 R1(config)# 1.2 We wish to configure the Ethernet 0 interface. To do so, we must first enter the Ethernet interface configuration mode. Now, set the IP address to and subnet mask to and enable the interface. R1(config)#interface Ethernet 0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#end R1# Configure Serial 0 interface, set the IP address to and subnet mask to and enable the interface. R1#conf t R1(config)#interface Serial 0 R1(config-if)#ip address R1(config-if)#no shutdown CCSE ISC-350 P a g e 35

37 R1(config-if)#end R1# 1.4 Select Router 2, enter privileged mode then configuration mode and set the router's Host Name to R2. Set interface Ethernet 0 IP address to Router> Router>enable Router#conf t Router(config)#hostname R2 R2(config)#interface Ethernet 0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#end R2# CCSE ISC-350 P a g e 36

38 1.5 Select Router 4, set the router's Host Name to R4 and set interface Serial 0 IP address to Router> Router>enable Router#conf t Router(config)#hostname R4 R4(config)#interface Serial 0 R4(config-if)#ip address R4(config-if)#no shutdown R4(config-if)#end R4# 1.6 Connect to R1 and check the connections to R2 and R4 using ping command R1#ping [displays 100% success rate] R1#ping [displays 100% success rate] R1#ping [failed ping] 1.7 Verify that the interfaces and protocol state are up, verify your running configuration, and view detailed IP information about each interface CCSE ISC-350 P a g e 37

39 R1#show ip interface brief [displays both interfaces Ethernet 0 and Serial 0 are up and have IP addresses] R1#show running-config [displays both interfaces Ethernet 0 and Serial 0 are up and have IP addresses] R1#show ip interface [displays both interfaces Ethernet 0 and Serial 0 are up and have IP addresses] CCSE ISC-350 P a g e 38

40 2. View and clear ARP routing table 2.1 Select Router 3 (a router that we have not connect to any device), enter privileged mode and view ARP table. Router> Router>enable Router#conf t Router(config)#hostname R3 R3(config)#exit R3# show arp [displays no entries] 2.2 Select R1 and view ARP table R1# show arp [displays two entries with ip addresses and the second entry is for R4 Ethernet 0 interface and has an Age] 2.3 Select R2 and view ARP table R2# show arp [displays two entries with ip addresses and the second entry is for R1 Ethernet 0 interface and has an Age ] 2.4 Clear the ARP table on R1, and view the ARP table CCSE ISC-350 P a g e 39

41 [select Router 1] R1#cl arp R1#sh arp [displays one entry for R1 Ethernet 0 interface only, No entry for R2 Ethernet 0 interface] 2.4 Ping Ethernet 0 on R2, and view the ARP table R1#ping R1#sh arp [displays two entries for R1 Ethernet 0 interface and for R2 Ethernet 0 interface] CCSE ISC-350 P a g e 40

42 3. Create and view a host table 3.1 Creating a host table helps troubleshooting and testing IP with ping command. Show host table on router R1. R1#show hosts [displays no entries because no table exists] 3.2 Enter configuration mode to create a host table entry. We want to insert an entry in the hosts table for R1 router. R1#conf t R1(config)#ip host R R1(config)#exit R1#show hosts [displays R1 host s table: one entry for router R1] 3.3 Insert another entry for R2 R1#conf t R1(config)#ip host R R1(config)#exit R1#show hosts [displays R1 host s table: two entries one for router R1 and another for R2] CCSE ISC-350 P a g e 41

43 Laboratory # 5 Routing Information Protocol (RIP) and IGRP routing protocol Laboratory Objective: After finishing this lab students will be able to: o Configure RIP routing protocol. o Configure IGRP routing protocol. CCSE ISC-350 P a g e 42

44 Lab #5 Routing Information Protocol (RIP) and IGRP routing protocol 1. Laboratory Objective: After finishing this lab students will be able to: o Configure RIP routing protocol. o Configure IGRP routing protocol. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-13 RIP". 4. Laboratory Exercises Exercise 1 1. Configure routers with IP addresses and RIP routing protocols / /24 Router 2 Router /24 Router Serial Ethernet /24 Router 4 CCSE ISC-350 P a g e 43

45 Interface Router 1 Router 2 Router 4 Ethernet 0 Serial Configure Router1, Router 2 and Router 4 to the IP addresses outlined in the above table. [ Configure Ethernet 0 on Router 1] Router> Router>enable Router#conf t Router(config)#hostname R1 R1(config)#interface Ethernet 0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#exit R1(config)# [ Configure Serial 0 on Router 1] R1(config)#interface Serial 0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#end R1# CCSE ISC-350 P a g e 44

46 [ Configure Ethernet 0 on Router 2] Router> Router>enable Router#conf t Router(config)#hostname R2 R2(config)#interface Ethernet 0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#end R2# [ Configure Serial 0 on Router 4] Router> Router>enable Router#conf t Router(config)#hostname R4 R4(config)#interface Serial 0 R4(config-if)#ip address R4(config-if)#no shutdown R4(config-if)#end R4# 1.2 Verify connections using ping command: CCSE ISC-350 P a g e 45

47 R1#ping [ dispalys success rate is 100 %, connection to R2] R1#ping [ dispalys success rate is 100 %, connection to R4 ] R2#ping [ dispalys success rate is 100 %, connection to R1] R4#ping [ dispalys success rate is 100 %, connection to R1 through Serial 0] R4#ping [ dispalys success rate is 0 %, R4 is not directly connected to Ethernet 0 R1 ] 1.3 Configure RIP as the routing protocol and add the network(s) that the router is directly connected to. Do that for R1, R2 and R4. [Select router R1] R1#conf t R1(config)#router rip R1(config-router)#network R1(config-router)#network R1(config-router)# CCSE ISC-350 P a g e 46

48 [Select router R2] R2#conf t R2(config)#router rip R2(config-router)#network R2(config-router)# [Select router R4] R4#conf t R4(config)#router rip R4(config-router)#network R4(config-router)# Now we have RIP routing configured, we should be able to ping non-directly connected routers. From R2 ping serial port of R4 and from R4 ping Ethernet 0 of R2. [Select router R2] R2(config-router)#exit R2#ping [Select router R4] R4(config-router)#exit R4#ping View the routing table on R4 [Select router R4] CCSE ISC-350 P a g e 47

49 R4#sh ip route [ dispalys that subnet is routed to ] R4#sh ip protocol [ From R2 show static route] R2#sh ip route [displays direct connection to network and static route to network via Ethernet 0 on R1] 2. Configure routers with IP addresses and IGRP routing protocols 2.1 Configure Router1, Router 2 and Router 4 to the IP addresses outlined in the below table. Interface Router 1 Router 2 Router 4 Ethernet 0 Serial After you have configured your IP address on each interface verify that you can ping your directly connected neighbors. 2.3 Now that we have our IP addressing setup correctly lets get into configuring IGRP as our routing protocol. First, we need to get into router configuration mode on Router Now enter the command to configure the router for IGRP. Use the autonomous system number 100. Router1(config)# Router1(config)#router igrp 100 CCSE ISC-350 P a g e 48

50 Router1(config-router)# 2.5 Add the network(s) that Router 1 is directly connected to. Router1(config-router)#network Router1(config-router)#network Now that you have Router 1 configured for IGRP, connect Router 2 and enter configuration mode. 2.7 Configure IGRP routing protocol on the router, remember to use the same Autonomous system #. Router2(config)# Router2(config)#router igrp 100 Router2(config-router)# 2.8 Add the network(s) that Router 2 is directly connected to. Router2(config-router)#network Now that you have Router 2 configured for IGRP, connect to Router 4 and enter the configuration mode Add IGRP routing protocol to the router, remember to use the same Autonomous system #. Router4(config)# Router4(config)#router igrp 100 Router4(config-router)# CCSE ISC-350 P a g e 49

51 2.11 Add the network(s) that Router 4 is directly connected to. Router4(config-router)#network Now we should have IGRP running on all three of our routers. Ping non-directly connected routers. From Router 2, you should be able to ping Router 4's Serial 0 interface with IP address Next let's connect to Router 4 and ping Router 2's Ethernet 0 interface with IP address If you can ping both devices, you are routing. Now let's view our routing table on our Router 4. Router4#show ip route 2.15 Let's view the specific IP routing protocol information on our router. Router1#show ip protocols CCSE ISC-350 P a g e 50

52 Exercise 2 Ethernet 0 IP address Subnet mask Ethernet 0 IP address Subnet mask Serial 1 IP address Subnet mask Serial 0 IP address Subnet mask R2 DCE Cabel is connected to serial 0 of R1. The clock rate is R1 Serial 0 IP address Subnet mask DCE Cabel is connected to serial 1 of R1. The clock rate is R4 Router Serial Serial 0 IP address Subnet mask Ethernet R3 Figure 1 1. Download the topology file exercise1.top from the Blackboard. 2. Configure all routers with IP addresses. Set the following IP addresses on interfaces of your routers, as shown in Figure 1. Interfaces Routers R1 R2 R3 R4 Ethernet 0 Serial 0 Serial CCSE ISC-350 P a g e 51

53 3. After configuring your IP addresses on each interface, verify that you can ping your directly connected neighbors. 4. Change the hostnames for Router 1, 2, 3 and 4 to be R1, R2, R3 and R4, respectively. 5. Create a host table for R1. It should contain 3 entries, one for each directly connected router. Show R1 host table. Ping the directly connected routers using the host table entries. 6. Enable routing on all routers. Each router should be able to ping every other router. You can use Static Routes, RIP or IGRP routing protocols. 7. Save the configuration file for each router. Submit your files to Blackboard as a compressed folder. CCSE ISC-350 P a g e 52

54 Laboratory # 6 Configuring OSPF in a single area Laboratory Objective: After finishing this lab students will be able to: o Configure OSPF routing protocol. o View the OSPF protocol information. CCSE ISC-350 P a g e 53

55 Lab #6 Configuring OSPF in a single area 5. Laboratory Objective: After finishing this lab students will be able to: o Configure OSPF routing protocol. o View the OSPF protocol information. 6. Laboratory Learning Outcomes: 7. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-37 OSPF Routes". 8. Laboratory Exercises 1. Configure routers with IP addresses E /24 E /24 Router2 Router1 S /24 Router Serial Ethernet S /24 Router4 CCSE ISC-350 P a g e 54

56 Interface Router1 Router2 Router4 Ethernet 0 Serial Configure Router1, Router 2 and Router 4 to the IP addresses outlined in the above table and change the hostname of each router. 1.2 After you have configured your IP address on each interface, verify that you can ping your directly connected neighbors. That means when you are on Router1, you should be able to ping Router2's Ethernet 0 interface and Router4's Serial 0 interface. 1.3 Now that we have our IP address setup correctly, let's get into configuring OSPF as our routing protocol. This is very easy to do; first we need to get into router configuration mode on Router1. Then enter the command to configure the router for OSPF, use the process ID number 100. Add the networks that Router1 is directly connected to. Router1(config)#router ospf 100 Router1(config-router)#network area 0 Router1(config-router)#network area 0 Now that you have Router1 configured for OSPF, connect to Router2 and add OSPF routing protocol to the router. Add the network that Router2 is directly connected to. Router2(config)#router ospf 100 CCSE ISC-350 P a g e 55

57 Router2(config-router)#network area 0 Now connect to Router4 and add the OSPF routing protocol to the router. Add the Router4 is directly connected to. network that Router4(config)#router ospf 100 Router4(config-router)#network area 0 Now we should have OSPF running on all three of our routers. Ping non-directly connected routers. From Router2 you should be able to ping Router4's Serial 0 interface and from Router4 you should be able to ping Router2's Ethernet 0 interface. If you can ping both devices, CONGRATULATIONS you are routing. If you were yourself back through the steps. not successful, trace Now, let's view our routing table on Router2. Router2#show ip route Let's view the specific routing information on Router1. Router1#show ip ospf database To display all of the OSPF neighbors Router1#show ip ospf neighbor To display all interfaces of the router that are running OSPF Router1#show ip ospf interface CCSE ISC-350 P a g e 56

58 Laboratory # 7 PPP with CHAP Authentication, Connectivity Tests with Traceroute and Saving and Loading Router Configurations Laboratory Objective: After finishing this lab students will be able to: o Understand how PPP encapsulation works and how to secure the connection with CHAP authentication. o Use the trace route command to test connectivity. o Backup and load router configuration. CCSE ISC-350 P a g e 57

59 Lab #7 PPP with CHAP Authentication, Connectivity Tests with Traceroute and Saving and Loading Router Configurations 1. Laboratory Objective: After finishing this lab students will be able to: o Understand how PPP encapsulation works and how to secure the connection with CHAP authentication. o Use the trace route command to test connectivity. o Backup and load router configuration. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-16 PPP with CHAP Authentication". 4. Laboratory Exercises 1. PPP with CHAP Authentication 1.1. Select Router 1 and change the hostname to R On R1, set a username for R4 with password cfw Router(config)#username R4 password cfw 1.3. On R1 assign an IP address of to the Serial 0 interface On R1 set the encapsulation for the serial interface to PPP. R1(config-if)#encapsulation ppp 1.5. On R1 set PPP authentication to CHAP on the serial interface. R1(config-if)#ppp authentication chap 1.6. Now make sure the Serial 0 interface is enabled. R1(config-if)#no shutdown 1.7. Select Router 4 and change the hostname to R4. CCSE ISC-350 P a g e 58

60 1.8. Now we need to add a username for R1 with password cfw. R4(config)#username R1 password cfw 1.9. Now enable the Serial 0 interface on R4 and assign an IP address of The last step is to enable PPP Encapsulation on the Serial 0 interface. Now watch the state change to up! R4(config-if)#encapsulation ppp We need to set the Serial 0 PPP authentication to CHAP on R4. R4(config-if)#ppp authentication chap To verify the configuration is correct ping R1 Serial 0 from R4. 2. Connectivity Tests with Traceroute / /24 Router 2 Router /24 Router Serial Ethernet /24 Router Establish the configurations outlined in the table below: Interface Router 1 Router 2 Router 4 CCSE ISC-350 P a g e 59

61 Ethernet / /24 Serial / / After you have established the proper ip addresses, enable rip routing across all three routers and make sure you use the proper network statements Now that we have RIP routing enabled across all three routers, test by issuing some ping commands From Router 1 ping directly connected Routers and their interfaces, which are Router 2 Ethernet 0 and Router 4 Serial Since we have rip routing enabled we should be able to ping non-directly connected routers. Connect to Router 2 and ping Router 4's Serial 0 interface The goal behind trace route command is to help you troubleshoot and determine the path a packet is taking to get to a destination device. In this example, we have three routers and only one path to the destination. View the output of the command by tracing the route from Router 2 to Router 4's Serial 0 interface. Router2#traceroute Observe the output from the trace route command. It lists Router 1's Ethernet 0 and then the destination ip address we are tracing to. This means that it first leaves Router 2's Ethernet 0 goes through Router 1's Ethernet 0 before reaching Router 4's Serial Saving and Loading Router Configurations CCSE ISC-350 P a g e 60

62 /24 ` Switch /24 Router Connect to Router 4 and change the hostname to ISC Assign the IP address of to Ethernet 0 and enable the interface Connect to PC1 and type the command to configure PC 1's IP address and default gateway. Set the IP address to with a subnet mask of Set the default gateway to Router 4's Ethernet 0 IP address ( ). C:>winipcfg 3.4. Ping the connection to make sure you have correct connectivity. C:>ping Connect back to Router 4 and copy the running-configuration to the tftp server on PC 1. Enter the IP address of the tftp server ( ) and the name of the configuration file (router-config) that will store on the tftp server. ISC#copy running-config tftp 3.6. Next connect back to PC 1 and type the command that will show the configurations that are stored on the tftp server. If you see the configuration in the list you are finished. C:>show tftp-configs CCSE ISC-350 P a g e 61

63 3.7. Now that you have your configuration stored on the tftp server, we want to change the hostname of our Router. This will prove to us that the configuration was copied from the TFTP server. Change the hostname of ISC to department Now we want to copy the configuration we stored on the TFTP server into our running configuration. department#copy tftp running-config 3.9. When the router prompts us for the IP address enter the IP address of the TFTP server ( ). Now you will need to enter the name of the configuration file to grab from the TFTP server (router-config) Now the router will download the configuration and load it into the running-config. Afterwards the hostname is restored to what it was when we saved the configuration. CCSE ISC-350 P a g e 62

64 Laboratory # 8 Frame Relay Laboratory Objective: After finishing this lab students will be able to: o Understand how to establish a Frame Relay connection. CCSE ISC-350 P a g e 63

65 Lab #8 Frame Relay 1. Laboratory Objective: After finishing this lab students will be able to: o Understand how to establish a Frame Relay connection. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-25 Frame Relay". 4. Laboratory Exercises 1. Introduction to Frame Relay 1.1. On Router 1, change the hostname to R1, assign an IP address of /24 to the Serial 0 interface and enable the interface Now connect to Router 2 and change the hostname to R2, assign an IP address of /24 to the Serial 0 interface and enable the interface On R1, set the encapsulation for the Serial interface to Frame-Relay. Notice how both interfaces are still down. We need to setup the frame relay information on both interfaces so that the interfaces come up. R1(config-if)#encapsulation frame-relay 1.4. Next set the frame relay interface DLCI for the connection from R1 to R2. Since we are using the default frame network the DLCI will be 102. R1(config-if)#frame-relay interface-dlci On R2, set the encapsulation for the Serial interface to Frame-Relay. Notice how both interfaces are still down. We need to setup the Frame-Relay interface DLCI for this interface so the connection can go up. R2(config-if)#encapsulation frame-relay CCSE ISC-350 P a g e 64

66 1.6. Now set the Frame-Relay interface DLCI for the connection from R2 to R1. Since we are using the default frame network the DLCI will be 201. R2(config-if)#frame-relay interface-dlci Verify that you have your configuration setup correctly by first trying to ping the Serial 0 ip address on R1. R2#ping Next we will be using the frame relay show commands for the proof that our connection is active The first command is show frame-relay lmi. This command shows the LMI traffic that has been exchanged from our Router and the Frame-Relay switch. R2#show frame-relay lmi The next command is show frame-relay map. This command shows the mappings of the layer 2 DLCI to the layer 3 IP address. R2#show frame-relay map The command show frame-relay pvc will display all of the Permanent Virtual Circuit (PVC) mappings for the router. These mappings are only locally significant between the router and the frame-relay switch. R2#show frame-relay pvc 2. Frame Relay Hub and Spoke Topology A corporate office at Shwaikh is connected to sales offices in Hawalli, Sharq and Ahmadi. All of the sales offices connect to the corporate office to send all of its data. We will configure a Hub and Spoke (Star) topology for the following network: CCSE ISC-350 P a g e 65

67 Shwaikh DLCI DLCI DLCI DLCI DLCI 401 Hawalli DLCI 301 Ahmadi Sharq 2.1. On Router 1, change the hostname of Router 1 to Shwaikh and configure the Serial 0 interface. Set the encapsulation type to frame relay. Enable the interface. Shwaikh(config-if)#encapsulation frame-relay 2.2. Now we will create a sub interface for each of the connections to the Sales offices. Shwaikh(config)#interface serial 0.1 point-to-point 2.3. Next we will need to assign the DLCI number for our connection between Shwaikh and Hawalli and the IP address of Shwaikh(config-subif)#frame-relay interface-dlci 102 Shwaikh(config-subif)#ip address Next create a sub interface for the connection to the Sales office in Sharq. Add the DLCI for this connection and the IP address for our connection to Sharq. Shwaikh(config)#interface serial 0.2 point-to-point Shwaikh(config-subif)#frame-relay interface-dlci 103 CCSE ISC-350 P a g e 66

68 Shwaikh(config-subif)#ip address Next create the sub interface for the connection to the sales office in Ahmadi. Add the DLCI for this connection and the IP address for our connection to Ahmadi Next connect to Router 2. Change the hostname to Hawalli. Get into the Serial 0 interface and set the encapsulation to frame relay. Enable the interface Now since we only have one connection, we do not need to use sub interfaces, just add the DLCI value. Set the IP address for this interface. Hawalli(config-if)#frame-relay interface-dlci 201 Hawalli(config-if)#ip address Next connect to Router 3. Change the hostname to Sharq. Get into the Serial 0 interface and set the encapsulation to frame relay. Add the DLCI value. Set the IP address for this interface and enable the interface Next connect to Router 4. Change the hostname to Ahmadi. Get into the Serial 0 interface and set the encapsulation to frame relay. Add the DLCI value. Set the IP address for this interface and enable the interface Now we should have all interfaces up. To test, connect to Shwaikh and try to ping each of the three sales offices. Shwaikh#ping Shwaikh#ping Shwaikh#ping Frame Relay Full Mesh Topology The difference between frame relay hub and spoke topology and the full mesh topology is that now every sales office will have a direct connection to every other sales office along with the corporate office at Shwaikh. This is a very redundant topology so if one of the connections goes down, data can still be transferred to every site by using different path. CCSE ISC-350 P a g e 67

69 We will have a point-to-point frame relay connection to each sales office and from each sales office to every other sales office. Shwaikh DLCI DLCI DLCI DLCI DLCI DLCI DLCI 402 Hawalli DLCI DLCI 301 Ahmadi DLCI DLCI 302 Sharq DLCI On Router 1, change the hostname of Router 1 to Shwaikh and configure the Serial 0 interface. Set the encapsulation type to frame relay. Enable the interface Now we will create a sub interface for each of the connections to the sales offices (Hawalli, Sharq and Ahmadi). Assign the DLCI numbers for our connections and the IP addresses, as shown in the figure above Next connect to Router 2. Change the hostname to Hawalli. Get into the Serial 0 interface and set the encapsulation to frame relay. Enable the interface Now we will create a sub interface for each of the connections to the sales offices (Sharq and Ahmadi) and corporate office at Shwaikh. Assign the DLCI numbers for our connections and the IP addresses, as shown in the figure above Next connect to Router 3. Change the hostname to Sharq. Get into the Serial 0 interface and set the encapsulation to frame relay. Enable the interface. CCSE ISC-350 P a g e 68

70 3.6. Now we will create a sub interface for each of the connections to the sales offices (Hawalli and Ahmadi) and corporate office at Shwaikh. Assign the DLCI numbers for our connections and the IP addresses, as shown in the figure above Next connect to Router 4. Change the hostname to Ahmadi. Get into the Serial 0 interface and set the encapsulation to frame relay. Enable the interface Now we will create a sub interface for each of the connections to the sales offices (Hawalli and Sharq) and corporate office at Shwaikh. Assign the DLCI numbers for our connections and the IP addresses, as shown in the figure above Now we should have all interfaces up. To test connect to router Shwaikh and try to ping each of the three sales offices Connect to router Hawalli and try to ping the other three offices. CCSE ISC-350 P a g e 69

71 Laboratory # 9 Standard Access Lists Laboratory Objective: After finishing this lab students will be able to: o Configure standard access lists. CCSE ISC-350 P a g e 70

72 Lab #9 Standard Access Lists 1. Laboratory Objective: After finishing this lab students will be able to: o Configure standard access lists. 2. Laboratory Learning Outcomes: 3. Laboratory Instructions Run Boson NetSim for CCNP. From the Lab Navigator window, click on the button "Stand Alone Labs". Then double click on "Lab-28 Standard Access List". 4. Laboratory Exercises 1. Simple Standard Access Lists Ethernet Ethernet Router 2 Router 1 Serial Router Serial Serial Ethernet Router 4 CCSE ISC-350 P a g e 71

73 3.11. Configure IP addresses as shown in the figure. Enable RIP on Router1, Router2 and Router4. Verify that all routers can ping each other Our Standard Access List will block Router4 from being able to ping Router2. We will configure this access list on Router2. Connect to Router2 and enter configuration mode Create an access-list 1 that blocks only the single IP address followed by the command access-list 1 permit any. We have listed three ways to accomplish this: Router2(config)#access-list 1 deny host Router2(config)#access-list 1 permit any OR Router2(config)#access-list 1 deny Router2(config)#access-list 1 permit any OR Router2(config)#access-list 1 deny Router2(config)#access-list 1 permit any After you have created the access-list, you need to apply it to the Ethernet 0 interface. What direction would you apply the access-list in? "in" means packets coming from the network and going to the router and "out" means packets going from the router out the interface to the network. For our example, we would use the command ip access-group 1 in. Router2(config)#interface ethernet 0 Router2(config-if)#ip access-group 1 in To verify our Standard Access List, connect to Router4 and try to ping Router2's Ethernet 0 interface ( ) If you get "UUUUU" then you have your access-list working correctly. CCSE ISC-350 P a g e 72