Router pod documentation

Transcription

1 Router pod documentation Note: DO NOT USE COPY RUNNING STARTUP, as this may reset the privileged password. If you change the privileged password, and save the configuration, please tell your lecturer as soon as possible. Router 1 Serial link S0: S1: Serial link S0: S0: Router 2 Router 3 E0: E0: Ethernet link Figure 1: Network Pod configuration FA0/1 FA0/2 FA0/3 R1: E0 R2: E0 R3: E0 Please note that the pods may vary with their associated ports, so you may have to substitute FA0 for FA0/0 or E0. Also S0 may be replaced with S0/0, and S1 with S0/1. The pods have the following setup: Ethernet Serial ISDN/T1 Pod A Router 1 FA0/1 S0/0, S0/1, S0/2 Router 2 FA0/0 S0/0, S0/1 BRI0/0 Router 3 FA0/0 S0/0, S0/1 BRI0/0 Pod B Router 1 FA0 S0, S1, S2 Router 2 FA0 S0, S1 BRI0 Router 3 FA0 S0, S1 BRI0 Pod C Router 1 FA0 S0, S1, D2 Router 2 FA0 S0, S1 BRI0 Router 3 FA0 S0, S2 BRI0 Pod D Router 1 F0/0 S0/0, S0/1, S0/2 Router 2 FA0/0 S0/0, S0/1 BRI0 Router 3 FA0/0 S0/0, S0/1 Author: Bill Buchanan 1

2 Accessing the routers The pods can be booked via the WWW page: Note, the routers are accessed by: Pod A Router 1: telnet :2001 Router 2: telnet :2002 Router 3: telnet :2003 Switch: telnet :2004 Pod B Router 1: telnet :2005 Router 2: telnet :2006 Router 3: telnet :2007 Switch: telnet :2008 Pod C Router 1: telnet :2009 Router 2: telnet :2010 Router 3: telnet :2011 Switch: telnet :2012 Pod D Router 1: telnet :2013 Router 2: telnet :2014 Router 3: telnet :2015 Switch: telnet :2016 For example, if you are using HyperTerminal, create the following settings: Author: Bill Buchanan 2

3 PIX firewall pods The PIX firewall pods are arranged as in Figure 2. Note: DO NOT USE COPY RUNNING STARTUP, as this may reset the privileged password. If you change the privileged password, and save the configuration, please tell your lecturer as soon as possible. outside Router 2 e0 e0 [outside] PIX e2 [inf2] e1 [inside] Host Router 1 e0 inside Figure 2: Network Pod configuration These are access by: PIX Pod A Router 1: telnet :2015 Router 2: telnet :2016 PIX: telnet :2014 Host: PIX Pod B Router 1: telnet :2007 Router 2: telnet :2008 PIX: telnet :2013 Host: Author: Bill Buchanan 3

4 Switch pods The switch pods are arranged as in Figure 3. Note: DO NOT USE COPY RUNNING STARTUP, as this may reset the privileged password. If you change the privileged password, and save the configuration, please tell your lecturer as soon as possible. Switch FA0/1 FA0/2 FA0/3 FA0/4 FA0/1 FA0/2 FA0/1 FA0/2 Switch FA0/11 FA0/11 Host 1 Host 2 Switch These are access by: Figure 3: Network Pod configuration Switch Pod A Switch 1: telnet :2001 Switch 2: telnet :2002 Switch 3: telnet :2003 Host 1: Host 2: Switch Pod B Switch 1: telnet :2004 Switch 2: telnet :2005 Switch 3: telnet :2006 Host 1: Host 2: Switch Pod C Switch 1: telnet :2001 Switch 2: telnet :2002 Switch 3: telnet :2003 Host 1: Host 2: Switch Pod D Switch 1: telnet :2004 Switch 2: telnet :2005 Switch 3: telnet :2006 Host 1: Host 2: Author: Bill Buchanan 4

5 Frame Relay/ISDN pods The frame relay/isdn pods are arranged as in Figure 4. Note: DO NOT USE COPY RUNNING STARTUP, as this may reset the privileged password. If you change the privileged password, and save the configuration, please tell your lecturer as soon as possible. AT THE PRESENT ONLY PODS A and B ISDN, but all have Frame Relay. Router 1 S0/0: S0/1: Serial link S0/2: Serial link FA0/1 FA0/2 FA0/3 R1: E0 R2: E0 R3: E0 Frame Relay Router 2 S0/0: BRI0: S0/1: S0/1: E0: Ethernet link E0: S0/0: BRI0: Router 3 ISDN Figure 4: Network Pod configuration Please note that the pods may vary with their associated ports, so you may have to substitute FA0 for FA0/0 or E0. Also S0 may be replaced with S0/0, and S1 with S0/1. The pods have the following set-up (To be updated): Ethernet Serial ISDN/T1 Pod A Router 1 FA0/1 S0/0, S0/1, S0/2 Router 2 FA0/0 S0/0, S0/1 BRI0/0 Router 3 FA0/0 S0/0, S0/1 BRI0/0 Pod B Router 1 FA0 S0, S1, S2 Router 2 FA0 S0, S1 BRI0 Router 3 FA0 S0, S1 BRI0 Pod C Router 1 FA0 S0, S1, D2 Router 2 FA0 S0, S1 BRI0 Router 3 FA0 S0, S2 BRI0 Pod D Router 1 F0/0 S0/0, S0/1, S0/2 Router 2 FA0/0 S0/0, S0/1 BRI0/0 Router 3 FA0/0 S0/0, S0/1 BRI0/0 Author: Bill Buchanan 5

6 The ISDN number of the devices are: Pod A: Router 2: Router 3: Pod B: Router 2: Router 3: Accessing the routers The pods can be booked via the WWW page: Note, the routers are accessed by: Pod A Router 1: telnet :2001 Router 2: telnet :2002 Router 3: telnet :2003 Switch: telnet :2004 Pod B Router 1: telnet :2005 Router 2: telnet :2006 Router 3: telnet :2007 Switch: telnet :2008 Pod C Router 1: telnet :2009 Router 2: telnet :2010 Router 3: telnet :2011 Switch: telnet :2012 Pod D Router 1: telnet :2013 Router 2: telnet :2014 Router 3: telnet :2015 Switch: telnet :2016 Author: Bill Buchanan 6

7 Wireless The Cisco Aironet pod is arranged as in Figure 5. Note: DO NOT USE COPY RUNNING STARTUP, as this may reset the privileged password. If you change the privileged password, and save the configuration, please tell your lecturer as soon as possible. Router 1 WAP 1 Figure 5: Wireless Access Point pod Wireless Pod A WAP Port: Port: 2008 Author: Bill Buchanan 7

8 Power recycle Power outlet managers have been set up as follows: outlet 1-8 (1) Pod A Router 1: (2) Pod A Router 2: (3) Pod A Router 3: (4) Pod B Router 1: (5) Pod B Router 2: (6) Pod B Router 3: (7) Pod C Router 1: (8) Pod C Router 2: outlet 1-4 and 8 (1) Pod C Router 3: (2) Pod D Router 1: (3) Pod D Router 2: (4) Pod D Router 3: (8) Aironet: outlet 1-6 (1) PIX Pod A Router 1: (2) PIX Pod A Router 2: (3) PIX Pod A PIX: (4) PIX Pod B Router 1: (5) PIX Pod B Router 2: (6) PIX Pod B PIX: Student login: P/w: student cisco Author: Bill Buchanan 8

9 Appendix One of the quickest ways to program each router is to generate a text file with the required commands, and then paste this into the router console window: For example for the network in Figure 6, In this case the programming of the three devices is given overleaf. Router 1 S0/0: S0/1: S0: S0: Router 2 Router 3 FA0: FA0: FA0/1 FA0/2 FA0/3 R1: E0 R2: E0 R3: E0 Figure 6: Router pod example Author: Bill Buchanan 9

10 enable config t interface s0/0 ip address clock rate no shutdown interface s0/1 ip address clock rate no shutdown router rip network network line vty 0 4 password hello login Router 2 is: enable config t interface s0/0 ip address clock rate no shutdown interface fa0/0 ip address no shutdown router rip network network line vty 0 4 password hello login and router 3 is: enable config t interface s0 ip address clock rate no shutdown interface fa0 ip address no shutdown router rip network network line vty 0 4 password hello login Author: Bill Buchanan 10

11 PIX Example Figure 7 shows an example of a PIX setup. outside Router 2 e0 [ /24] e0 [ /24] PIX e1 [ /16] Router 1 e2 [ ] e0 [ /16] Host inside Figure 7: PIX pod example The outline configuration of Router 2 is ( :2016): enable config t hostname outsider int e0 ip address no shut router rip network ip default-gateway line vty 0 4 login password fred The outline configuration of Router 1 is ( :2015): enable config t hostname insider int e0 ip address no shut router rip network ip default-gateway ip route line vty 0 4 Author: Bill Buchanan 11

12 login password fred and the PIX is ( :2014): enable config t hostname mypix interface ethernet0 auto interface ethernet1 auto interface ethernet2 auto nameif ethernet0 outside security0 nameif ethernet1 inside security100 nameif ethernet2 dmz security50 hostname pixfirewall ip address outside ip address inside ip address dmz global (outside) nat (inside) Now go to Router1 (the inside router), and telnet from there to Router 2: insider#telnet Trying Open User Access Verification Password: outsider> Next go to Router 2 (the outside router), and try and telnet into Router 1: outsider#telnet Trying Which shows that the traffic from inside to outside is allowed, but outside to inside is barred. Now enable the WWW server on Router 2: outsider#config t Enter configuration commands, one per line. End with CNTL/Z. outsider(config)#ip http server outsider(config)# Next, to prove that traffic from inside the network can access the outside network, go to Router 1 (inside), and access the WWW server on Router 2: insider#telnet www Trying , Open get index.html content-type: http/html HTTP/ Bad Request Author: Bill Buchanan 12

13 Date: Sun, 07 Mar :58:59 UTC Content-type: text/html Expires: Thu, 16 Feb :00:00 GMT <H1>400 Bad Request</H1> Now, locate the host which is on the DMZ connection, and determine its IP address, such as: pixfirewall# ping NO response received ms NO response received ms NO response received ms pixfirewall# ping NO response received ms NO response received ms NO response received ms pixfirewall# ping NO response received ms NO response received ms NO response received ms pixfirewall# ping response received -- 0ms response received -- 0ms response received -- 0ms Now, and this is not advisable from a security point-of-view, we shall allow everything from outside to access the inside network: pixfirewall# config t pixfirewall(config)# access-list a2 permit ip any any pixfirewall(config)# access-group a2 in interface outside pixfirewall(config)# Now go back to Router 2 (inside) and try and telnet, and now it should be possible to telnet into Router 1: outsider#telnet Trying outsider#telnet Trying Open User Access Verification Password: Explain why Router 2 is accessible using ? Author: Bill Buchanan 13

14 Finally erase the configuration on the PIX: pixfirewall# write erase Erase PIX configuration in flash memory? [confirm] pixfirewall# reload Proceed with reload? [confirm] Author: Bill Buchanan 14

15 Author: Bill Buchanan 15