Copyright. CTTC Professional Development Program. CCNA Lab Manual ( ) CTTC. Published By

Transcription

1

2 2 Copyright CTTC Professional Development Program. CCNA Lab Manual ( ) Published By CTTC 45-M, Block-6 P.E.C.H.S Karachi Pakistan. All rights reserved. No part of this manual may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording and information storage or retrieval system without written permission from the publisher, except for the inclusion of quotation in a review. Warning and Disclaimer This manual is designed to provide information about CCNA ( ). Every effort Has been made to make this manual as complete and accurate as possible, but no warranty of fitness is implied. The information is provided on as basis and CTTC shall have neither liability nor responsibility to any person or entity with respect to any loss or damage Arising from the information contained in this manual. Authors Mr. Muddasar Sharif (Network Engineer) Mr. Tharpal Das (Associate Network Engineer) Reviewed By Mr. Ahmed Saeed (Head of Department-Cisco Division)

3 3 Table of Contents Topics page# Basic Network Using CISCO Switch 6 Accessing Console of the Switch/Router 7 Modes of CLI 8 How to Set Hostname and Configure Console Password 9 How to Set Privilege level password 10 How to Set User Authentication in Switch 10 Password Recovery 12 How to Set Telnet password 13 How to Enable the Device to Establish Telnet/SSH Session 13 Configuring SSH 13 SWITHCING VLAN Configuration 15 Port security 17 Rapid Spanning Tree Protocol (RSTP) 20 Ether channel Configuration 23 Inter VLAN Routing (IVR) ROUTING Static Routing 27 Enhanced Interior Gateway Routing Protocol (EIGRP) 30 Open Shortest Path First (OSPF) 33 First Hop Redundancy Protocols Hot Standby Router Protocol (HSRP) 36 Virtual Router Redundancy Protocol(VRRP) 40 Gateway Load balancing Protocol (GLBP) 43 IPV6 How to Configure IPv6 on CISCO Router 47 Configuring IPv6 Auto configures 49 Configure RIP ng on Router 51 Configuring OSPF V3 55 Configuring EIGRP 59

4 4 WAN Encapsulation 62 Frame Relay 64 Configuring DHCP 68 ACCESS LIST & N.A.T Standard Acl 71 Extended Acl 74 Static Nat 76 Dynamic Nat 78 Pat TROUBLESHOOTING OF EIGRP 81 SYSLOG 83

5 5 LAB: Basic Network Using CISCO Switch OBJECTIVE: To configure a cisco switch with basic configuration Accessing Console of the Switch/Router Accessing Console of the Switch/Router Modes of CLI How to Set Hostname and Configure Console Password How to Set Privilege level password How to Set User Authentication in Switch How to Set Telnet password How to Enable The Device to Establish Telnet/SSH Session Configuring SSH

6 6 Topology PC-1 is directly connected to switch with ip address PC-2 is directly connected to switch with ip address Switch being the intermediate device provide the communication path to both PC s. Note: Both the PC s must be on the same network. Accessing Console of the Switch/Router

7 7 RJ-45 to DB-9 adapter is used on the PC (COM port) to the device console Port through a roll-over cable. Hyper Terminal is used to access the Command Line Interface (CLI) of the Device. (Start --Menu Programs Accessories Communications--Hyper Terminal) Switch Console Modes of CLI: User-exec mode Switch> Privilege mode Switch# Global Configuration mode Switch(config)# How to switch in different modes: Switch> enable Switch# config terminal Switch(config)# Note: To return to the previous mode use Exit command in the current mode.

8 8 How to Set Hostname and Configure Console Password: Switch(config)# hostname CISCO CISCO(config)#line console 0 CISCO(config-line)#password cisco123 CISCO(config-line)#login How to Set Privilege level password:!!! Clear Text Password not encrypted(less priority) CISCO(config)#enable password ccna123!!! Encrypted password (more Priority) CISCO(config)#enable secret cttc123 Verify the Password CISCO(config)#exit CISCO#exit CISCO con0 is now available Press RETURN to get started. User Access Verification!!! TYPE HERE LINE CONSOLE Password Password: CISCO>enable!!! TYPE HERE Privilege Level Password Password:

9 9 How to Set User Authentication in Switch CISCO#config terminal CISCO(config)#line console 0 CISCO(config-line)# login local CISCO(config-line)#exit CISCO(config)#username cttc password ccna123

10 10 Verify the Authentication CISCO(config)#exit CISCO#exit Verify the User Status CISCO#show users Line User Host(s) Idle Location * 0 con 0 cttc idle 00:00:00

11 11 Password Recovery Configuration on Router Router>enable Router#config t Router(config)#line console 0 Router(config-line)Password cisco Router(config-line)#Login Router(config-line)#Exit For password recovery power cycle the router and press ctrl+break. After we enter the rommon mode type: Rommon 1 > confreg 0x2142 Rommon 2 > reset

12 12 How to Set Telnet password: CISCO(config)#line vty 0 15 CISCO(config-line)#password cisco CISCO(config-line)#login CISCO(config-line)#exit How to Enable The Device to Establish Telnet/SSH Session: CISCO(config)#interface vlan 1 CISCO(config-if)#ip address CISCO(config-if)#no shutdown Note: VLAN 1 IP address is used to establish the telnet session. Go to command prompt and use telnet command to make a telnet session with the device. C:\>telnet Configuring SSH: CISCO(config)#username taha password abc123 CISCO(config)#ip domain-name cttc.net CISCO(config)#crypto key generate rsa The name for the keys will be: CISCO.cttc.net Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose Keys. Choosing a key modulus greater than 512 may take a few minutes. How many bits in the modulus [512]: 512 % Generating 512 bit RSA keys...[ok] CISCO(config)#line vty 0 15 CISCO(config-line)#login local CISCO(config-line)#transport input ssh

13 13 Note: VLAN 1 must be configured as show in TELNET section. Putty software iscommonly used to establish SSH session. Verify Command s: CISCO(config)#show line vty 0 15 Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int 1 VTY /0-2 VTY /0-3 VTY /0-4 VTY /0-5 VTY /0-6 VTY /0-7 VTY /0-8 VTY /0-9 VTY /0-10 VTY /0-11 VTY /0-12 VTY /0-13 VTY /0-14 VTY /0-15 VTY /0-16 VTY /0!!! * show that one VTY Session is active:

14 14 LAB: VLAN Configuration Objective: To Create and Configure VLAN CISCO#config terminal CISCO(config)#vlan 10 CISCO(config-vlan)#name HR CISCO(config-vlan)#exit CISCO(config)#vlan 20 CISCO(config-vlan)#name Sales CISCO(config-vlan)#exit Verify VLANs CISCO#show vlan brief VLAN Name Status Ports default active Fa0/1, Fa0/2, Fa0/3, Fa0/4 Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gi0/1, Gi0/2 10 HR active 20 Sales active 1002 fddi-default act/unsup 1003 token-ring-default act/unsup 1004 fddinet-default act/unsup 1005 trnet-default act/unsup Note: All ports of the switch are member of VLAN 1 by default. How to Assign Ports to Different VLANs: CISCO(config)#interface fa0/1 CISCO(config-if)#switchport mode access CISCO(config-if)#switchport access vlan 10 CISCO(config-if)#exit CISCO(config)#interface fa0/2 CISCO(config-if)#switchport mode access CISCO(config-if)#switchport access vlan 20

15 15 Verify Ports in VLANS CISCO#show vlan brief VLAN Name Status Ports default active Fa0/3, Fa0/4, Fa0/5, Fa0/6 Fa0/7, Fa0/8, Fa0/9, Fa0/10 Fa0/11, Fa0/12, Fa0/13, Fa0/14 Fa0/15, Fa0/16, Fa0/17, Fa0/18 Fa0/19, Fa0/20, Fa0/21, Fa0/22 Fa0/23, Fa0/24, Gi0/1, Gi0/2 10 HR active Fa0/1 20 Sales active Fa0/2

16 16 LAB:PORT SECURITY OBJECTIVE: TO IMPLEMENT BASIC PORT SECURITY FEATURES ON INTERFACE CISCO(config)#interface fa0/1 CISCO(config-if)#switchport mode access CISCO(config-if)#switchport port-security CISCO(config-if)#switchport port-security mac-address sticky CISCO(config-if)#switchport port-security maximum 1 CISCO(config-if)#switchport port-security violation shutdown CISCO(config-if)#exit CISCO(config)#interface fa0/2 CISCO(config-if)#switchport mode access CISCO(config-if)#switchport port-security CISCO(config-if)#switchport port-security mac-address sticky CISCO(config-if)#switchport port-security maximum 1 CISCO(config-if)#switchport port-security violation shutdown

17 17 Verify Port-Security MAC Address: CISCO#show port-security address Secure Mac Address Table Vlan Mac Address Type Ports Remaining Age (mins) E.07CB SecureSticky FastEthernet0/ BD.4810 SecureSticky FastEthernet0/ Total Addresses in System (excluding one mac per port) : 0 Max Addresses limit in System (excluding one mac per port) : 1024 Verify Port-Security Interface FastEnthernet Fa0/1: CISCO#show port-security interface f0/1 Port Security : Enabled Port Status : Secure-up Violation Mode : Shutdown Aging Time : 0 mins Aging Type : Absolute SecureStatic Address Aging : Disabled Maximum MAC Addresses : 1 Total MAC Addresses : 1 Configured MAC Addresses : 0 Sticky MAC Addresses : 1 Last Source Address:Vlan : E.07CB:1 Security Violation Count : 0 Note: Max Addresses value depends upon the model of the device. Manual MAC address can be entered in port-security instead on using sticky command. Violation modes can be set to protect, restrict or shutdown. What happens if violation occurred: When a new PC is attached to the port on which port-security is enabled then Switch will take an action which is set in the violation mode.

18 18 Verify when violation is occurred: CISCO#show port-security Secure Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) Fa0/ Shutdown Fa0/ Shutdown

19 19 LAB: Rapid Spanning Tree Protocol (RSTP) OBJECTIVE: To Implement STP, It s Improvement RSTP and To Configure Root Bridges for Different VLANS. Verify Root Bridge on Switch-1: Switch-1#show spanning-tree VLAN0001 Spanning tree enabled protocol ieee Root ID Priority Address EE.8B7E This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority (priority sys-id-ext 1) Address EE.8B7E Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20 Interface Role Sts Cost Prio Nbr Type Fa0/1 Desg FWD P2p Fa0/2 Desg FWD P2p Note: If the switch is Root Bridge, it will display the message This bridge is the root. Root ID Address and Bridge ID Address will be same in case of Root Bridge. Default priority is VLAN ID (System Extension ID) is added to the default priority. VLAN 1 is the default VLAN so the priority for VLAN 1 is ( ).

20 20 Enabling RSTP: Switch-1(config)#spanning-tree mode rapid-pvst Note: The above command will be issued on all the switches of the network. Verify RSTP: Switch-1#show spanning-tree VLAN0001 Spanning tree enabled protocol rstp Root ID Priority Address EE.8B7E This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority (priority sys-id-ext 1) Address EE.8B7E Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20 Changing Switch-2 to Root Bridge: Switch-2(config)#spanning-tree vlan 1 priority 4096 Note: Priority must be in the multiple To change the root bridge, you can also use the following command: Switch-2(config)#spanning-tree vlan 1 root primary Verify Switch-2 as Root Bridge: Switch-2#show spanning-tree VLAN0001 Spanning tree enabled protocol rstp Root ID Priority Address 000C.CF21.CBC1 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority (priority sys-id-ext 1) Address 000C.CF21.CBC1 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20

21 21 Enabling Portfast feature on all switches: Switch-1(config)#spanning-tree portfast default Note: Above command will be issued to all the switches in the network. By enabling portfast feature on all the switches, will disable the STP process on all non-trunk ports. It will cause to take less time to change the state to up on all non-trunking ports. To verify this feature, connect a PC to the switch and the port will be up within 5 seconds.

22 22 Etherchannel Configuration: Configuring Switch-1: Switch-1(config)#interface range fa0/1-2 Switch-1(config-if-range)#channel-group 1 mode on Switch-1(config-if-range)#exit Switch-1(config)#interface port-channel 1 Switch-1(config-if)#switchport mode trunk Configuring Switch-2: Switch-2(config)#interface range fa0/1-2 Switch-2(config-if-range)#channel-group 1 mode on Switch-2(config-if-range)#exit Switch-2(config)#interface port-channel 1 Switch-2(config-if)#switchport mode trunk Verify Etherchannel: Switch-1#show etherchannel summary <Output omitted> Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports Po1(SU) - Fa0/1(P) Fa0/2(P)

23 23 LAB:InterVLAN Routing (IVR): Objective: To Create Vlans &to show Routing B/W the Vlans Configuring Switch: Switch(config)#vlan 10 Switch(config-vlan)#name HR Switch(config-vlan)#vlan 20 Switch(config-vlan)#name Sales Switch(config-vlan)#exit Switch(config)#interface fa0/1 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 10 Switch(config-if)#exit Switch(config)#interface fa0/2 Switch(config-if)#switchport mode access Switch(config-if)#switchport access vlan 20 Switch(config-if)#exit Switch(config)#interface fa0/3 Switch(config-if)#switchport mode trunk

24 24 Configuring Router: Router(config)#interface fa0/0 Router(config-if)#no shutdown Router(config-if)#exit Creating sub-interface for VLAN 10 on router: Router(config)#interface fa0/0.10 Router(config-subif)#encapsulation dot1q 10 Router(config-subif)#ip address Router(config-subif)#exit Creating sub-interface for VLAN 20 on router: Router(config)#interface fa0/0.20 Router(config-subif)#encapsulation dot1q 20 Router(config-subif)#ip address Router(config-subif)#exit Configuring IP on PC:

25 25 Verify InterVLAN Routing:

26 26 LAB: Static Routing: Objective: To Implement Stating Routing in IPversion 4 Configuring R1: R1(config)#interface fa0/0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface s0/1/0 R1(config-if)#ip address R1(config-if)#clock rate R1(config-if)#no shutdown R2(config-if)#exit Note: Interface Serial0/1/0 of Router R1 is a DCE end, so clock rate must be given to this. Configuring R2: R2(config)#interface fa0/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface s0/1/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit Adding static route on R1 for network : R1(config)#ip route s0/1/0 Adding static route on R2 for network : R2(config)#ip route

27 27 Note: When configuring the static route on router R1 we used the local interface of the router R1 i.e s0/1/0, whereas, when configuring router R2 we use the next hop address as Forwarding router's address. Verify the routes on Router R1: R1#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/ /24 is subnetted, 1 subnets S is directly connected, Serial0/1/ /30 is subnetted, 1 subnets C is directly connected, Serial0/1/0 Verify the routes on Router R2: R2#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets S [1/0] via /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/ /30 is subnetted, 1 subnets C is directly connected, Serial0/1/0

28 28 Verifying the ping reply from PC-2 to PC-1:

29 29 LAB: Enhanced Interior Gateway Routing Protocol (EIGRP): Objective: To Implement EIGRP in IP version 4 Configuring R1: R1(config)#interface fa0/0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface s0/1/0 R1(config-if)#ip address R1(config-if)#clock rate R1(config-if)#no shutdown R2(config-if)#exit Note: Interface Serial0/1/0 of Router R1 is a DCE end, so clock rate must be given to this. Configuring R2: R2(config)#interface fa0/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface s0/1/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit

30 30 Adding networks for EIGRP on Router R1: R1(config)#router eigrp 100 R1(config-router)#network R1(config-router)#network R1(config-router)#no auto-summary R1(config-router)#exit Note: All directly connected networks will be issued in the router eigrp mode. Autonomous System number must be same on all the routers in the network. Adding networks for EIGRP on Router R2: R1(config)#router eigrp 100 R1(config-router)#network R1(config-router)#network R1(config-router)#no auto-summary R1(config-router)#exit Verify the routes on Router R1: R1#show ip route Gateway of last resort is not set C D C /24 is subnetted, 1 subnets is directly connected, FastEthernet0/ /24 is subnetted, 1 subnets [90/ ] via , 00:00:16, Serial0/1/ /30 is subnetted, 1 subnets is directly connected, Serial0/1/0 Verify the routes on Router R2: R2#sh ip route Gateway of last resort is not set D C C /24 is subnetted, 1 subnets [90/ ] via , 00:00:05, Serial0/1/ /24 is subnetted, 1 subnets is directly connected, FastEthernet0/ /30 is subnetted, 1 subnets is directly connected, Serial0/1/0

31 31 Verifying neighbors for R1: R1#sh ip eigrp neighbors IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq (sec) (ms) Cnt Num Se0/1/0 11 0:02: Verifying neighbors for R2: R2#sh ip eigrp neighbors R2#sh ip eigrp neighbors IP-EIGRP neighbors for process 100 H Address Interface Hold Uptime SRTT RTO Q Seq Num (sec) (ms) Cnt Se0/1/ :03: Note: To verify the currently enabled routing protocols, use the following command: R1#show ip protocols To view all the routes that has been calculated by EIGRP, use the following command: R1#show ip eigrp topology.

32 32 LAB: Open Shortest Path First (OSPF): Objective: To Implement OSPF in IP version 4 Configuring R1: R1(config)#interface fa0/0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#exit R1(config)#interface s0/1/0 R1(config-if)#ip address R1(config-if)#clock rate R1(config-if)#no shutdown R2(config-if)#exit Note: Interface Serial0/1/0 of Router R1 is a DCE end, so clock rate must be given to this. Configuring R2: R2(config)#interface fa0/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit R2(config)#interface s0/1/0 R2(config-if)#ip address R2(config-if)#no shutdown R2(config-if)#exit

33 33 Configuring Central Router (ABR): ABR(config)#int s0/1/0 ABR(config-if)#ip add ABR(config-if)#ip address ABR(config-if)#no shutdown ABR(config-if)#exit ABR(config)#int s0/1/1 ABR(config-if)#ip address ABR(config-if)#clock rate ABR(config-if)#no shutdown ABR(config-if)#exit Adding networks for OSPF on Router R1 as Area 0 (Backbone Area): R1(config)#router ospf 10 R1(config-router)#network area 0 R1(config-router)#network area 0 R1(config-router)#exit Adding networks for OSPF on Router R2 as Area 1 (Regular Area): R2(config)#router ospf 20 R2(config-router)#network area 1 R2(config-router)#network area 1 R2(config-router)#exit Adding networks for OSPF on Router ABR as Area 0 and Area 1: ABR(config)#router ospf 50 ABR(config-router)#network area 0 ABR(config-router)#network area 1 ABR(config-router)#exit Verify the routes on Router R1: R1#show ip route Gateway of last resort is not set /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/ /24 is subnetted, 1 subnets O IA [110/129] via , 00:09:19, Serial0/1/ /30 is subnetted, 1 subnets C is directly connected, Serial0/1/ /30 is subnetted, 1 subnets O IA [110/128] via , 00:09:19, Serial0/1/0

34 34 Verify the routes on Router R2: R2#show ip route: Gateway of last resort is not set /24 is subnetted, 1 subnets O IA [110/129] via , 00:11:48, Serial0/1/ /24 is subnetted, 1 subnets C is directly connected, FastEthernet0/ /30 is subnetted, 1 subnets O IA [110/128] via , 00:11:48, Serial0/1/ /30 is subnetted, 1 subnets C is directly connected, Serial0/1/0 Verify the routes on Router ABR: ABR#show ip route: Gateway of last resort is not set O O C C /24 is subnetted, 1 subnets [110/65] via , 00:13:30, Serial0/1/ /24 is subnetted, 1 subnets [110/65] via , 00:13:11, Serial0/1/ /30 is subnetted, 1 subnets is directly connected, Serial0/1/ /30 is subnetted, 1 subnets is directly connected, Serial0/1/1 Note: More commands to verify OSPF: R1#show ip ospf neighbor R1#show ip ospf database

35 35 LAB: Hot Standby Router Protocol (HSRP): Objective: How to show Redundancy by using HSRP Configuring WAN-RT: WAN-RT(config)#interface Loopback0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/1 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#router rip WAN-RT(config-router)#version 2 WAN-RT(config-router)#network WAN-RT(config-router)#network WAN-RT(config-router)#no auto-summary WAN-RT(config-router)#exit

36 36 Configuring Master-RT: Master-RT(config)#interface FastEthernet0/0 Master-RT(config-if)#ip address Master-RT(config-if)#standby 1 ip Master-RT(config-if)#standby 1 priority 110 Master-RT(config-if)#standby 1 preempt Master-RT(config-if)#standby 1 track FastEthernet0/1 Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config-if) Master-RT(config )#interface FastEthernet0/1 Master-RT(config-if)#ip address Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config)#router rip Master-RT(config-router)#version 2 Master-RT(config-router)#network Master-RT(config-router)#network Master-RT(config-router)#no auto-summary Configuring Backup-RT: Backup-RT(config)#interface FastEthernet0/0 Backup-RT(config-if)#ip address Backup-RT(config-if)#standby 1 ip Backup-RT(config-if)#standby 1 priority 95 Backup-RT(config-if)#standby 1 preempt Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#interface FastEthernet0/1 Backup-RT(config-if)#ip address Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#router rip Backup-RT(config-router)#version 2 Backup-RT(config-router)#network Backup-RT(config-router)#network Backup-RT(config-router)#no auto-summary

37 37 Verify Master-RT: Master-RT#show standby Note: When the network is perfectly up, Master-RT must be in Active State. If FastEthernet port of Master-RT gone down then Backup-RT will become active. Now check Backup-RT when the Fa0/1 of Master-RT is down

38 38 Verify Backup-RT when Fa0/1 of Master-RT is down: Backup-RT#show standby

39 39 LAB: Virtual Router Redundancy Protocol(VRRP) Objective: How to show Redundancy by using VRRP Configuring WAN-RT: WAN-RT(config)#interface Loopback0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/1 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#router rip WAN-RT(config-router)#version 2 WAN-RT(config-router)#network WAN-RT(config-router)#network WAN-RT(config-router)#no auto-summary WAN-RT(config-router)#exit

40 40 Configuring Master-RT: Master-RT(config)#interface FastEthernet0/0 Master-RT(config-if)#ip address Master-RT(config-if)#vrrp 1 ip Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config-if) Master-RT(config )#interface FastEthernet0/1 Master-RT(config-if)#ip address Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config)#router rip Master-RT(config-router)#version 2 Master-RT(config-router)#network Master-RT(config-router)#network Master-RT(config-router)#no auto-summary Configuring Backup-RT: Backup-RT(config)#interface FastEthernet0/0 Backup-RT(config-if)#ip address Backup-RT(config-if)#vrrp 1 ip Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#interface FastEthernet0/1 Backup-RT(config-if)#ip address Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#router rip Backup-RT(config-router)#version 2 Backup-RT(config-router)#network Backup-RT(config-router)#network Backup-RT(config-router)#no auto-summary

41 41 Verify Master-RT: Master-RT# show VRRP Note: When the network is perfectly up, Master-RT must be in Active State. If FastEthernet port of Master-RT gone down then Backup-RT will become active. Now check Backup-RT when the Fa0/1 of Master-RT is down Verify Backup-RT when Fa0/1 of Master-RT is down: Backup-RT#show VRRP

42 42 LAB: Gateway Load Balancing Protocol Objective: How to show Redundancy by using GLBP Configuring WAN-RT: WAN-RT(config)#interface Loopback0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/0 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#interface FastEthernet0/1 WAN-RT(config-if)#ip address WAN-RT(config-if)#no shutdown WAN-RT(config-if)#exit WAN-RT(config)#router rip WAN-RT(config-router)#version 2 WAN-RT(config-router)#network WAN-RT(config-router)#network WAN-RT(config-router)#no auto-summary WAN-RT(config-router)#exit

43 43 Configuring Master-RT: Master-RT(config)#interface FastEthernet0/0 Master-RT(config-if)#ip address Master-RT(config-if)#glbp 1 ip Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config-if) Master-RT(config )#interface FastEthernet0/1 Master-RT(config-if)#ip address Master-RT(config-if)#no shutdown Master-RT(config-if)#exit Master-RT(config)#router rip Master-RT(config-router)#version 2 Master-RT(config-router)#network Master-RT(config-router)#network Master-RT(config-router)#no auto-summary Configuring Backup-RT: Backup-RT(config)#interface FastEthernet0/0 Backup-RT(config-if)#ip address Backup-RT(config-if)#glbp 1 ip Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#interface FastEthernet0/1 Backup-RT(config-if)#ip address Backup-RT(config-if)#no shutdown Backup-RT(config-if)#exit Backup-RT(config)#router rip Backup-RT(config-router)#version 2 Backup-RT(config-router)#network Backup-RT(config-router)#network Backup-RT(config-router)#no auto-summary

44 44 Verify Master-RT: Master-RT# show GLBP

45 45 Verify Backup-RT when Fa0/1 of Master-RT is down: Backup-RT#show GLBP

46 46 LAB: How to Configure IPv6 on CISCO Router Objective: To Implement IP Version 6 on Routers Configure R1 s interface S1/0 with ipv6 address R1(config)#ipv6 unicast-routing R1(config)#interface serial 1/0 R1(config-if)#ipv6 address 2001:abad:beef:1::1/64 R1(config-if)#no shutdown R2(config)#ipv6 unicast-routing R2(config)#interface serial 1/0 R2(config-if)#ipv6 address 2001:abad:beef:1::2/64 R2(config-if)#no shutdown Verify IPv6 address: R1#show ipv6 interface

47 47 Verify IPv6 communication between R2 and R1 using ping:

48 48 LAB: Configuring IPv6 Auto configures Objective: To Show How Routers Acquire The Ipv6 Address Automatically Configuring R1#: R1(config)#ipv6 unicast-routing R1(config)#int fa0/0 R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 R1(config-if)#ipv6 nd prefix 2001:abad:5001:1::/64 R1(config-if)#no shutdown Configuring R2#: R2(config)#ipv6 unicast-routing R2(config)#int fa0/0 R2(config-if)#ipv6 address autoconfig R2(config-if)#no shutdown R2(config-if)#exit Configuring R3#: R3(config)#ipv6 unicast-routing R3(config)#int fa0/0 R3(config-if)#ipv6 address autoconfig R3(config-if)#no shutdown R3(config-if)#end

49 49 Verify Autoconfigure IPv6 on R2 s interface Fa0/0:

50 50 LAB: Configure RIPng on Router: Background: In this configuration example, routers R1 and R2 are connected via Serial interface and Loopback addresses are configured to generate networks. All the interfaces are configured with the IPv6 addresses. Configure on R1: R1(config)#ipv6 unicast-routing R1(config)#int s1/0 R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 R1(config-if)#ipv6 rip cttc enable R1(config-if)#no shutdown R1(config-if)#exit R1(config)#int Loopback 10 R1(config-if)#ipv6 address 1:1:1:1::1/64 R1(config-if)#ipv6 rip cttc enable R1(config-if)#no shutdown R1(config-if)#exit R1(config)#int Loopback 20 R1(config-if)#ipv6 address 1:1:1:2::1/64 R1(config-if)#ipv6 rip cttc enable R1(config-if)#no shutdown R1(config-if)#exit

51 51 Configure on R2: R2(config)#ipv6 unicast-routing R2(config)#int s1/0 R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 R2(config-if)#ipv6 rip cttc enable R2(config-if)#no shutdown R2(config-if)#exit R2(config)#int Loopback 0 R2(config-if)#ipv6 address 2:2:2:2::1/64 R2(config-if)#ipv6 rip cttc enable R2(config-if)#no shutdown R2(config-if)#exit R2(config)#int Loopback 1 R2(config-if)#ipv6 address 2:2:2:1::1/64 R2(config-if)#ipv6 rip cttc enable R2(config-if)#no shutdown R2(config-if)#exit Note: In the syntax cttc specified the Process, you can run multiple processes on a Route

52 52 Verify RIPng Routes: R1#show ipv6 route

53 53 Verify information about the current IPv6 RIP process Verify the reachability between the routers R1 and R2, use the ping command:

54 54 LAB: Configuring OSPF V.3.0 OBJECTIVE: TO IMPLEMENT OSPF ROUTING PROTOCOL IN IPV6 Configure R1: R1(confg)#ipv6 unicast-routing R1(config)#int s1/0 R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 R1(config-if)#no shutdown R1(config-if)#ipv6 ospf 1 area 0 R1(config-if)#exit R1(config)#int Loopback 10 R1(config-if)#ipv6 address 1:1:1:1::1/64 R1(config-if)#ipv6 ospf 1 area 0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#int Loopback 20 R1(config-if)#ipv6 address 1:1:1:2::1/64 R1(config-if)#ipv6 ospf 1 area 0 R1(config-if)#no shutdown R1(config-if)#exit R1(config)#ipv6 router ospf 1 R1(config-rtr)#router-id R1(config-if)#exit

55 55 Configuring R2: R2(confg)#ipv6 unicast-routing R2(config)#int s1/0 R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 R2(config-if)#no shutdown R2(config-if)#ipv6 ospf 1 area 0 R2(config-if)#exit R2(config)#int Loopback 0 R2(config-if)#ipv6 address 2:2:2:2::1/64 R2(config-if)#ipv6 ospf 1 area 0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#int Loopback 1 R2(config-if)#ipv6 address 2:2:2:1::1/64 R2(config-if)#ipv6 ospf 1 area 0 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#ipv6 router ospf 1 R2(config-rtr)#router-id R2(config-rtr)#exit Configure R1 s Loopback 10, 20 and R2 s Loopback 0, 1 interface to participate in OSPF Area 0 and ensure that R1 & R2 advertises Lo0 as a /64 subnet and not a host route (/128). Note: Loopback interfaces have their own OSPF network type in which case OSPF advertises a host route to the loopback interface and not the configure subnet mask. To change OSPF to advertise the subnet assigned to the loopback interface you ll need to change the network type to point-to-point as shown below: For R1: R1(config)#interface loopback 10 R1(config-if)#ipv6 ospf 1 area 0 R1(config-if)#ipv6 ospf network point-to-point R1(config-if)#exit R1(config)#interface loopback 20 R1(config-if)#ipv6 ospf 1 area 0 R1(config-if)#ipv6 ospf network point-to-point R1(config-if)#exit

56 56 For R2: R2(config)#interface loopback 0 R2(config-if)#ipv6 ospf 1 area 0 R2(config-if)#ipv6 ospf network point-to-point R2(config-if)#exit R2(config)#interface loopback 1 R2(config-if)#ipv6 ospf 1 area 0 R2(config-if)#ipv6 ospf network point-to-point R2(config-if)#exit Verify R1 s Loopback0 network is in the IPv6 routing table of R2: R1#show ipv6 route ospf

57 57 Verify R1 s Loopback10 network has IPv6 connectivity to R2 s Loopback0 network using PING:

58 58 LAB: Configuring EIGRP OBJECTIVE: TO Implement EIGRP in IPV6 Configure R1: R1(config)#ipv6 unicast-routing R1(config)#int s1/0 R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 R1(config-if)#no shutdown R1(config-if)#ipv6 eigrp 100 R1(config-if)#exit R1(config)#ipv6 router eigrp 100 R1(config-rtr)#eigrp router-id R1(config-rtr)#exit R1(config)#int Loopback 10 R1(config-if)#ipv6 address 1:1:1:1::1/64 R1(config-if)#no shutdown R1(config-if)#ipv6 eigrp 100 R1(config-rtr)#exit R1(config)#int loopback 20 R1(config-if)#ipv6 address 1:1:1:2::1/64 R1(config-if)#no shutdown R1(config-if)#ipv6 eigrp 100 R1(config-if)#exit

59 59 Configure R2: R2(config)#ipv6 unicast-routing R2(config)#int s1/0 R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 R2(config-if)#no shutdown R2(config-if)#ipv6 eigrp 100 R2(config-if)#exit R2(config)#ipv6 router eigrp 100 R2(config-rtr)#eigrp router-id R2(config-rtr)#exit R2(config)#int Loopback 0 R2(config-if)#ipv6 address 2:2:2:2::1/64 R2(config-if)#no shutdown R2(config-if)#ipv6 eigrp 100 R2(config-rtr)#exit R2(config)#int Loopback 1 R2(config-if)#ipv6 address 2:2:2:1::1/64 R2(config-if)#no shutdown R2(config-if)#ipv6 eigrp 100 R2(config-if)#exit

60 60 Verify R1 s Loopback0 network is in the IPv6 routing table of R2: R1#show ipv6 route eigrp:

61 61 LAB: WAN Encapsulation OBJECTIVE: To Implement authentication method and encapsulation used for WAN Configuring R1: R1(config)#int s0/3/0 R1(config-if)#ip address R1(config-if)#clock rate R1(config-if)#encapsulation ppp R1(config-if)#ppp authentication chap pap R1(config-if)#no shutdown R1(config-if)#exit R1(config)#username R2 password cisco Configuring R2: R2(config)#int s0/3/0 R2(config-if)#ip address R2(config-if)#encapsulation ppp R2(config-if)#ppp authentication chap pap R2(config-if)#no shutdown R2(config-if)#exit R2(config)#username R1 password cisco Note: Username R2 must be created on Router R1 and username R1 must be created on Router R2, where usernames R1 and R2 are the hostname of their respective Routers. Passwords on both the routers must be same.

62 62 Verify point-to-point connectivity: R1#ping

63 63 LAB:Frame Relay OBJECTIVE: To Show How Router Connects With Each Other Over Cloud Using Frame Relay Configuring R1: R1(config)#int s0/3/0 R1(config-if)#no shutdown R1(config-if)#encapsulation frame-relay R1(config-if)#exit R1(config)#interface s0/3/0.122 point-to-point R1(config-subif)#ip address R1(config-subif)#frame-relay interface-dlci 122 R1(config-subif)#exit R1(config)#interface s0/3/0.123 point-to-point R1(config-subif)#ip address R1(config-subif)#frame-relay interface-dlci 123 R1(config-subif)#exit R1(config)#router rip R1(config-router)#version 2 R1(config-router)#no auto-summary R1(config-router)#network R1(config-router)#network R1(config-router)#exit

64 64 Configuring R2: R2(config)#int s0/3/0 R2(config-if)#ip address R2(config-if)#encapsulation frame-relay R2(config-if)#frame-relay interface-dlci 221 R2(config-if)#no shutdown R2(config-if)#exit R2(config)#router rip R2(config-router)#version 2 R2(config-router)#no auto-summary R2(config-router)#network Configuring R3: R3(config)#int s0/3/0 R3(config-if)#ip address R3(config-if)#encapsulation frame-relay R3(config-if)#frame-relay interface-dlci 321 R3(config-if)#no shutdown R3(config-if)#exit R3(config)#router rip R3(config-router)#version 2 R3(config-router)#no auto-summary R3(config-router)#network R3(config-router)#exit

65 65 Configuring WAN Emulation Cloud: Note: Click on WAN cloud then click on Config tab. You will see all the interfaces on the left hand side. Now click on Serial0 button and add the DLCI value and Name as shown above and press Add button. Serial0 is linked to two DLCI value, therefore both the DLCI values must be added. Now repeat the same procedure for Serial1 and Serial2.

66 66 Configuring Frame Relay: Note: Now click on Frame Relay button and map the DLCI accordingly as shown above and press the Add button. You can now verify the connectivity by sending ping packets as follows. On Router R1: R1#ping R1#ping On Router R2: R2#ping On Router R3: R3#ping

67 67 LAB: Configuring DHCP on Cisco ROUTER OBJECTIVE: To Configure DHCP in Order To Show How a Client Can Be Assigned IP Address Automatically Configuring Router R1: R1(config)#interface fa0/0 R1(config-if)#ip address R1(config-if)#no shutdown R1(config-if)#exit Configuring the DHCP pool: R1(config)#ip dhcp pool cttc-pool R1(dhcp-config)#network R1(dhcp-config)#default-router R1(dhcp-config)#exit R1(config)#ip dhcp exclude-address R1(config)#end

68 68 Verify DHCP Binding: R1#show ip dhcp binding

69 69 Configuring PC:

70 70 LAB: Standard ACL OBJECTIVE: To Implement Standard ACL in Order To Show How It Does the Filtration Based On Source Address

71 71 Configuration on R1 Router>enable Router#configure t Router(config)#interface f0/0 Router(config-if)#ip address Router(config-if)#no shutdown Router(config)#interface f0/1 Router(config-if)#ip add Router(config-if)#ip address Router(config-if)#no sh Router(config-if)#no shutdown Router(config-if)#ex Ping from Pc0 to Pc 1 Router(config)#access-list 50 deny host Router(config)#int f0/0 Router(config-if)#ip access-group 50 in Router(config-if)#ex

72 72 Ping after applying Acl

73 73 LAB: Extended ACL OBJECTIVE: To show How Extended ACL Works by Filtration Based on Source and Destination Address

74 74 Configuration on R0 Router>enable Router#configure t Router(config)#interface f0/0 Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)#exit Router(config)#interface f0/1 Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)#ex Router(config)#access-list 100 permit tcp host host eq 80 Router(config)#access-list 100 deny tcp host host eq www Router(config)#access-list 100 permit ip any Router(config)#access-list 100 permit ip any any Router(config)#interface f0/0 Router(config-if)#ip access-group 100 out Router(config-if)#ex Router(config)#ip route f0/0 Configuration on R1 Router>enable Router#configure t Router(config)#interface f0/0 Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)#exit Router(config)#interface f0/1 Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)#ex Router(config)#ip route f0/0

75 75 LAB: Static NAT Objective: To Show Static Translation from Public Ip Address to Private Ip Address by Implementing Static Nat Configuration R0 Router#configure terminal Router(config)#ip nat inside source static Router(config)#interface f0/0 Router(config-if)#ip nat outside Router(config-if)#ex Router(config)#interface f0/1 Router(config-if)#ip nat inside Router(config-if)#ex

76 76 Ping from pc 1 to server 1 after that run the show command Router(config)#do sh ip nat translation Pro Inside global Inside local Outside local Outside global icmp : : : :1 icmp : : : :2 icmp : : : :3 icmp : : : :4 icmp : : : :5 icmp : : : :6 icmp : : : :7 icmp : : : :

77 77 LAB: Dynamic NAT Objective: To Show Dynamic Translation from Public Ip Address to Private Ip Address by Implementing Dynamic Nat Router(config)#ip nat pool abc netmask Router(config)#ip nat inside source list 10 pool abc Router(config)#access-list 10 permit Router(config)#interface f0/0 Router(config-if)#ip access-group 10 out Ping from Pc1 & from Pc2 but not from Pc3 Router# show ip nat translations Pro Inside global Inside local Outside local Outside global tcp : : : :80 tcp : : : :80

78 78 LAB: PAT Objective: To Show Translation from One Public Ip Address to Many Private Ip Address by Implementing Pat Configuration on R1 Router(config)#ip nat pool abc netmask Router(config)#ip nat inside source list 10 pool abc overload Router(config)#access-list 10 permit Router(config)#interface f0/1 Router(config-if)#ip nat inside Router(config-if)#ex Router(config)#interface f0/0 Router(config-if)#ip nat outside Router(config-if)#ex Router(config)#ip route f0/0

79 79 Ping and then check the router translation Router(config)#do sh ip nat translation Pro Inside global Inside local Outside local Outside global icmp : : : :5 icmp : : : :6 icmp : : : :7 icmp : : : :8

80 80 LAB:Trouble shooting of EIGRP Configuration on R1 Router>enable Router#configure terminal Router(config)# interface s0/3/0 Router(config-if)#ip address Router(config-if)#clock rate Router(config-if)#no shutdown Router(config-if)#exit Router(config)#interface loopback 0 Router(config-if)#ip address Router(config-if)#exit Router(config)#router eigrp 9 Router(config-router)#no auto-summary Router(config-router)#network Router(config-router)#network Router(config-router)#exit Configuration on R2 Router>enable Router#configure terminal Router(config)#interface s0/3/0 Router(config-if)#ip address Router(config-if)#no shutdown Router(config-if)#exit Router(config)#interface loopback 0 Router(config-if)#ip address Router(config-if)#exit Router(config)#router eigrp 100 Router(config-router)#network Router(config-router)#network Router(config-router)#no auto-summary Router(config-router)#exit

81 81 After perform routing there is no ping from Router 1 to loopback , Basically the reason is that, Router 1 have the A.S number is 10 and Router 2 have A.S no: 9, that s why there is no ping. Now I have to change the A.S no: of R2.

82 82 LAB:SYSLOG OBJECTIVE: To Implement Syslog and to Show The Output it Generates On the Syslog Server Configuration on Router Router>enable Router#conf t Router(config)#int fa0/0 Router(config-if)#ip address Router(config-if)#no shut Router(config-if)#exit Router(config)#int fa0/1 Router(config-if)#ip address Router(config-if)#no shut Router(config)#service timestamps log datetime msec Router(config)#logging host Router(config)#logging trap debugging Router(config)#end *Mar 01, 00:04:47.044: *Mar 01, 00:04:47.044: %SYS-5-CONFIG_I: Configured from console by console Enter configuration commands, one per line. End with CNTL/Z.

83 83 In order to generate the log do some configuration as below. Router(config)#router eigrp 10 Router(config-router)#exit Router(config)#int fa0/0 Router(config-if)#shutdown *Mar 01, 00:05:50.055: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down *Mar 01, 00:05:50.055: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down Router(config-if)#no shutdown Router(config-if)# *Mar 01, 00:05:52.055: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up *Mar 01, 00:05:52.055: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up Now click the server to see the syslog messages.

84 84