Module 9, Assignment 7 7.2.3 Control Router via Console (in Packet Tracer) 1. Prepare a Cisco 1841 Router (see figure 6-9). 2. Prepare a PC for administration. 3. Prepare a console cable and plug the serial end into the back of your PC (RS-232) and plug the RJ-45 end into console port on the router. My PC and Router: 7.2.4 Start the HyperTerminal Program Double click on the PC > Desktop > Terminal Keep default settings > Click OK 7.2.5 Basic Router Operation (using Packet Tracer) Show running configuration file 1. Hit n to escape the configuration dialog. 2. Enter the following commands: Router>enable, Router#show version Based on the results, please answer the following questions: Q 7.2.5a: What is the name of the flash IOS? C1841-advipservicek9-mz.124-15.T1.bin Q 7.2.5b: How many FastEthernet interfaces? 2 Q 7.2.5c: What is the amount of NVRAM? Q 7.2.5d: What is the amount of flash? 191K bytes 63488K bytes
7.2.6 Basic Security Configuration for the Privileged Mode Execute the following commands: Router>enable Router#conf t Router(config)#hostname AUS AUS(config)#enable password cisco AUS(config)#enable secret cisco1 AUS(config)# AUS#logout Q 7.2.6a Record commands and results. COMMAND RESULT DESCRIPTION enter Router> Now in user EXEC mode. enable Router# Now in privileged EXEC mode. conf t Enter configuration commands, one per line. End with CNTL/Z. Router(config)# Instructions for entering commands and ing when finished. Now in global configuration mode. hostname AUS AUS(config)# Still in global configuration mode, router has been renamed. enable password cisco AUS(config)# Password command has been accepted, router is ready to receive commands. enable secret cisco1 AUS(config)# Encrypted password command has been accepted, router is ready to receive commands. logout %SYS-5-CONFIG_I: Configured from console by console AUS# AUS con0 is now available Press RETURN to get started. Current configuration information. Exit global configuration mode. Now in privileged EXEC mode. Router is available to receive commands When RETURN is pressed, router with be in user EXEC mode (AUS>). Q 7.2.6b If both are configured (enable password and enable secret), which will serve as the password? Why? If enable password and enable secret are both configured, enable secret will serve as the password. Enable secret is stored using encryption and will override the enable password. Using an enable secret password is recommended because it is encrypted and more secure than the enable password. When you use an enable secret password, text is encrypted (unreadable) before it is written to the config.text file. When you use an enable password, the text is written as entered (readable) to the config.text file. Source: Cisco Systems, Inc. (2008-2010). Using command-line interface in Cisco software. Retrieved from http://www.cisco.com/en/us/docs/ios/preface/usingios.html#wp1012291
7.2.7 Basic Security Configuration for the Console Port (Local Control Port) Execute the following commands: AUS>enable Password: AUS#conf t AUS(config)#line console 0 AUS(config-line)#password cisco AUS(config-line)#login AUS(config-line)#exec-timeout 30 0 AUS(config-line)# AUS(config)# AUS#logout Hit enter and log into the user mode. Q 7.2.7a Record commands and the results. COMMAND RESULT DESCRIPTION enter Router> Now in user EXEC mode. enable Password Prompted to enter password. cisco1 conf t AUS# Enter configuration commands, one per line. End with CNTL/Z. AUS(config)# Password text did not appear in terminal window. Password accepted. Now in privileged EXEC mode. Instructions for entering commands and ing when finished. Now in global configuration mode. line console 0 AUS(config-line)# Now in line console configuration mode direct connection, via rollover cable, between PC and router console port. password cisco AUS(config-line)# Password for the console line has been accepted. Router is ready to receive commands. login AUS(config-line)# Upon login, user will now be prompted to enter a password. exec-timeout 30 0 AUS(config-line)# Timeout interval for password entry has been set to 30 seconds. AUS(config)# Exit line configuration mode. Now in global configuration mode. logout %SYS-5-CONFIG_I: Configured from console by console AUS# AUS con0 is now available Press RETURN to get Current configuration information. Exit global configuration mode. Now in privileged EXEC mode. Router is available to receive commands When RETURN is pressed, router with be in
enter started. User Access Verification Password: user EXEC mode (AUS>). User is prompted to enter password (cisco). % Password: timeout expired If password is not entered within 30 seconds, the time limit expires. Press RETURN to get started! When RETURN is pressed, user will be prompted to enter the password (cisco). cisco AUS> Password entered within the 30 second time limit. User is now in user EXEC mode. 7.2.8 Basic Security Configuration for the AUX Port (Remote Control Port) Execute the following commands: Password: AUS> AUS>enable Password: AUS#conf t AUS(config)#line vty 0 4 AUS(config-line)#password cisco AUS(config-line)#login AUS(config-line)#exec-timeout 30 0 AUS(config-line)#^Z AUS#logout Q 7.2.8a Record commands and the results. COMMAND RESULT DESCRIPTION enter User Access Verification Password: User is prompted to enter password (cisco). cisco AUS> Password has been entered. Now in user EXEC mode. enable conf t Password: AUS# Enter configuration commands, one per line. End with CNTL/Z. AUS(config)# User is prompted to enter password (enable secret cisco1). Password entered and accepted. Now in privileged EXEC mode. Instructions for entering commands and ing when finished. Now in global configuration mode. line vty 0 4 AUS(config-line)# Now in line configuration mode for virtualtype (vty) interfaces 0 4. Commands entered will apply to all five virtual interfaces. password cisco AUS(config-line)# Password for the virtual lines has been accepted. Router is ready to receive commands.
login AUS(config-line)# Upon login to virtual-type lines 0-4, user will now be prompted to enter a password. exec-timeout 30 0 AUS(config-line)# Timeout interval for vty password has been set to 30 seconds. CNTL-Z AUS# Now in privileged EXEC mode. logout %SYS-5-CONFIG_I: Configured from console by console AUS con0 is now available Press RETURN to get started. Current configuration information. Router is available to receive commands When RETURN is pressed, router with be in user EXEC mode (AUS>). Q 7.2.8b: Based on the commands, how many concurrent Telnet connections are allowed? Five (vty0, vty1, vty2, vty3, and vty4) 7.3 Routing Configuration The following packet tracer file was used to complete tasks: http://edtech2.boisestate.edu/hungj/edtech552/spring2010/lab/lab7/2010/7.3.zip The packet tracer file is to simulate the network environment in Figure 14-1 (textbook, p. 440)
7.3.1 Set up IP Addresses Execute the commands in example 14-1 (textbook, p. 440) Bugs was used to run Albuquerque configurations Albuquerque#conf t Albuquerque(config)#int fas0/0 Albuquerque(config-if)#ip address 10.1.1.251 255.255.255.0 Albuquerque(config-if)#no shutdown Albuquerque(config-if)# Albuquerque(config)#int serial 0/0 Albuquerque(config-if)#ip address 10.1.128.251 255.255.255.0 Albuquerque(config-if)#no shutdown Albuquerque(config-if)# Albuquerque(config)#int serial 0/1 Albuquerque(config-if)#ip address 10.1.130.251 255.255.255.0 Albuquerque(config-if)#clock rate 56000 <---- On DCE side only Albuquerque(config-if)#no shutdown Albuquerque(config-if)#^Z Albuquerque#show ip brief Results of show ip interface brief command on Albuquerque router: Albuquerque# %SYS-5-CONFIG_I: Configured from console by console show ip interface brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 10.1.1.251 YES manual up up FastEthernet0/1 unassigned YES unset administratively down down Serial0/0 10.1.128.251 YES manual down down Serial0/1 10.1.130.251 YES manual down down Albuquerque# Sam was used to run Yosemite configurations Yosemite#conf t Yosemite(config)#int fas0/0 Yosemite(config-if)#ip address 10.1.2.252 255.255.255.0 Yosemite(config-if)#no shutdown Yosemite(config-if)# Yosemite(config)#int serial 0/0 Yosemite(config-if)#ip address 10.1.128.252 255.255.255.0 Yosemite(config-if)#clock rate 56000 <-------- On DCE side only Yosemite(config-if)#no shutdown Yosemite(config-if)# Yosemite(config)#int serial 0/1 Yosemite(config-if)#ip address 10.1.129.252 255.255.255.0 Yosemite(config-if)#no shutdown Yosemite(config-if)#^Z Yosemite#show ip brief
Results of show ip interface brief command on Yosemite router: Yosemite#show ip interface brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 10.1.2.252 YES manual up up FastEthernet0/1 unassigned YES unset administratively down down Serial0/0 10.1.128.252 YES manual up up Serial0/1 10.1.129.252 YES manual down down Yosemite# Elmer was used to run Seville configurations Seville#conf t Seville(config)#int fas0/0 Seville(config-if)#ip address 10.1.3.253 255.255.255.0 Seville(config-if)#no shutdown Seville(config-if)# Seville(config)#int serial 0/0 Seville(config-if)#ip address 10.1.130.252 255.255.255.0 Seville(config-if)#no shutdown Seville(config-if)# Seville(config)#int serial 0/1 Seville(config-if)#ip address 10.1.129.253 255.255.255.0 Seville(config-if)#clock rate 56000 <----------- On DCE side only Seville(config-if)#no shutdown Seville(config-if)#^Z Seville#show ip brief Results of show ip interface brief command on Seville router: show ip interface brief Interface IP-Address OK? Method Status Protocol FastEthernet0/0 10.1.3.253 YES manual up up FastEthernet0/1 unassigned YES unset administratively down down Serial0/0 10.1.130.252 YES manual up up Serial0/1 10.1.129.253 YES manual up up Seville#
Q 7.3.1a Run show ip route on all three routers and record the results Albuquerque>show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 10.0.0.0/24 is subnetted, 3 subnets C 10.1.1.0 is directly connected, FastEthernet0/0 C 10.1.128.0 is directly connected, Serial0/0 C 10.1.130.0 is directly connected, Serial0/1 Albuquerque> Yosemite>show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 10.0.0.0/24 is subnetted, 3 subnets C 10.1.2.0 is directly connected, FastEthernet0/0 C 10.1.128.0 is directly connected, Serial0/0 C 10.1.129.0 is directly connected, Serial0/1 Yosemite> Seville>show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set 10.0.0.0/24 is subnetted, 3 subnets C 10.1.3.0 is directly connected, FastEthernet0/0 C 10.1.129.0 is directly connected, Serial0/1 C 10.1.130.0 is directly connected, Serial0/0 Seville> 7.3.2 Add Static Routes Execute the commands in example 14-3 (textbook, p.443). Q 7.3.2a Add static routes to Albuquerque, Yosemite, and Seville. Run show ip route and record the results.
Albuquerque configuration commands: COMMAND RESULT DESCRIPTION enter Albuquerque> Now in user EXEC mode. enable Albuquerque# Now in privileged EXEC mode. conf t ip route 10.1.2.0 255.255.255.0 10.1.128.252 ip route 10.1.3.0 255.255.255.0 10.1.130.252 Enter configuration commands, one per line. End with CNTL/Z. Albuquerque(config)# Albuquerque(config)# Albuquerque(config)# %SYS-5-CONFIG_I: Configured from console by console Albuquerque# Albuquerque con0 is now available Press RETURN to get started Instructions for entering commands and ing when finished. Now in global configuration mode. Static route from Albuquerque router to Sam (10.1.2.0) via Yosemite router serial interface S0/0/1 (10.1.128.252). Static route from Albuquerque router to Elmer (10.1.3.0) via Seville router serial interface S0/0/1 (10.1.130.252). Current configuration information. Exit global configuration mode. Now in privileged EXEC mode. Exit console connection. return Albuquerque> Now in user EXEC mode. show ip route (see below) Note: In textbook Example 14-3 and 7.3.4 below, the IP address listed for the Seville router serial connection to Albuquerque is 10.1.130.253. In the textbook, however, the network topology on page 440 shows the IP address the address to be 10.1.130.252. The IP Addresses I used for 7.3.2 are those from the network topology diagram (10.1.130.252 instead of 10.1.130.253) on page 440 in the textbook. Albuquerque show ip route results - Three connected routes, two static routes:
Yosemite configuration commands: COMMAND RESULT DESCRIPTION enter Yosemite> Now in user EXEC mode. enable Yosemite# Now in privileged EXEC mode. conf t ip route 10.1.1.0 255.255.255.0 10.1.128.251 ip route 10.1.3.0 255.255.255.0 10.1.129.253 Enter configuration commands, one per line. End with CNTL/Z. Yosemite(config)# Yosemite(config)# Yosemite(config)# %SYS-5-CONFIG_I: Configured from console by console Yosemite# Yosemite con0 is now available Press RETURN to get started. Instructions for entering commands and ing when finished. Now in global configuration mode. Static route from Yosemite router to Bugs (10.1.1.0) via Albuquerque router serial interface S0/0/1 (10.1.128.251). Static route from Yosemite router to Elmer (10.1.3.0) via Seville router serial interface S0/1/0 (10.1.129.253). Current configuration information. Exit global configuration mode. Now in privileged EXEC mode. Exit console connection. return Yosemite> Now in user EXEC mode. show ip route (see below) Yosemite show ip route results - Three connected routes, two static routes:
Seville configuration commands: COMMAND RESULT DESCRIPTION enter Seville> Now in user EXEC mode. enable Seville# Now in privileged EXEC mode. conf t ip route 10.1.1.0 255.255.255.0 10.1.130.251 ip route 10.1.2.0 255.255.255.0 10.1.129.252 Enter configuration commands, one per line. End with CNTL/Z. Seville(config)# Seville(config)# Seville(config)# %SYS-5-CONFIG_I: Configured from console by console Seville# Seville con0 is now available Press RETURN to get started. Instructions for entering commands and ing when finished. Now in global configuration mode. Static route from Seville router to Bugs (10.1.1.0) via Albuquerque router serial interface S0/1/0 (10.1.130.251). Static route from Seville router to Sam (10.1.2.0) via Yosemite router serial interface S0/1/0 (10.1.129.252). Current configuration information. Exit global configuration mode. Now in privileged EXEC mode. Exit console connection. return Seville> Now in user EXEC mode. show ip route (see below) Seville show ip route results - Three connected routes, two static routes:
7.3.3 Add Default Routes The following packet tracer file/topology was used for 7.3.3: http://edtech2.boisestate.edu/hungj/edtech552/spring2010/lab/lab7/2010/7.3.3.zip If 172.16.3.2 is the IP address of your ISP router, you can forward all packets toward 172.16.3.2 in order to connect to Internet. Execute the commands in example 14-5 (textbook, p. 447). COMMAND RESULT DESCRIPTION enter Albuguerque> Now in user EXEC mode. enable Albuguerque# Now in privileged EXEC mode. conf t ip route 0.0.0.0 0.0.0.0 172.16.3.2 Enter configuration commands, one per line. End with CNTL/Z. Albuguerque(config)# Albuguerque(config)# Albuquerque# %SYS-5-CONFIG_I: Configured from console by console Albuquerque con0 is now available Press RETURN to get started. Instructions for entering commands and ing when finished. Now in global configuration mode. Default route from Albuquerque router to unknown IP addresses (0.0.0.0 with 0.0.0.0 mask) via ISP router Serial0/0 (172.16.3.2). Exit global configuration mode. Now in privileged EXEC mode. Current configuration information. Exit console connection. return Albuquerque> Now in user EXEC mode. show ip route (see below) Q 7.3.3a: Run show ip route and record the results. Three connected routes indicated by code C. One static route indicated by code S. * next to S indicates that this is the default route if a path is not found in the routing table. 172.16.3.2 is also listed as gateway of last resort.
7.3.4 Remove Static Routes Execute the commands to remove static routes in Albuquerque Albuquerque#conf t Albuquerque(config)#no ip route 10.1.2.0 255.255.255.0 10.1.128.252 Albuquerque(config)#no ip route 10.1.3.0 255.255.255.0 10.1.130.253 Albuquerque(config)#^Z Albuquerque#show ip route Q 7.3.4a Remove static routes in Yosemite and Seville. Run show ip route and record results.
7.3.5 Implement Dynamic Routing with RIP Please change routers IP addresses based on the table below: Router Serial 0/0 Serial 0/1 FastEthernet0/0 Albuquerque 192.168.1.1/24 192.168.3.2/24 192.168.4.1/24 Yosemite 192.168.1.2/24 192.168.2.1/24 192.168.5.1/24 Seville 192.168.3.1/24 192.168.2.2/24 192.168.6.1/24 Execute the following commands: Albuquerque (config)#router rip Albuquerque (config-router)#version 2 Albuquerque (config-router)#network 192.168.1.0 Albuquerque (config-router)#network 192.168.3.0 Albuquerque (config-router)#network 192.168.4.0 Albuquerque (config-router)#^z Yosemite(config)#router rip Yosemite(config-router)#version 2 Yosemite(config-router)# network 192.168.1.0 Yosemite(config-router)# network 192.168.2.0 Yosemite(config-router)# network 192.168.5.0 Yosemite(config-router)#^Z Seville (config)#router rip Seville (config-router)#version 2 Seville (config-router)# network 192.168.3.0 Seville (config-router)# network 192.168.2.0 Seville (config-router)# network 192.168.6.0 Seville (config-router)#^z
Q 7.3.5a: Run show ip route on all routers and record the results. Susan Ferdon, EDTECH 552 SP11