Académique Documents
Professionnel Documents
Culture Documents
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-1
Objectives
Exploring the Functions of Routing p g g Understanding Binary Basics Constructing a Network Addressing Scheme Starting a Router C fi i a Ci Configuring Cisco R t Router Exploring the Packet Delivery Process Understanding Cisco Router Security Using the Cisco SDM Using a Cisco Router as a DHCP Server g Accessing Remote Devices
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-2
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-3
Routers
Routers have th f ll i components: R t h the following t CPU Motherboard RAM ROM Routers have network adapters to which IP addresses are assigned. Routers may have the following two kinds of ports: Console: For the attachment of a terminal used for management Network: Different LAN or WAN media ports p Routers forward packets based upon a routing table.
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-4
Router Functions
RouterX# show ip route
[ ] D 192.168.1.0/24 [90/25789217] via 10.1.1.1
R 192.168.2.0/24 [120/4] via 10.1.1.2 O 192 168 3 0/24 [110/229840] via 10 1 1 3 192.168.3.0/24 i 10.1.1.3
1. Lets other routers know about changes 2. 2 Determines where to forward packets
ICND1 v1.04-5
Path Determination
ICND1 v1.04-6
Routing Tables
ICND1 v1.04-7
ICND1 v1.04-8
Routing Metrics
ICND1 v1.04-9
Passes periodic copies of routing table to neighbor routes and accumulates distance vectors
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-10
After initial flood passes small event triggered link-state updates to all flood, event-triggered link state other routers
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-11
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-12
ICND1 v1.04-13
128 + 64 + 32 + 0 + 8 + 0 + 0 + 1 = 233
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-14
Powers of 2
ICND1 v1.04-15
35 35 35 35
2007 Cisco Systems, Inc. All rights reserved.
= 25 + 21 + 20 = (32 * 1) + (2 * 1) + (1 * 1) = 0 + 0 + 1 + 0 + 0 + 0 +1 + 1 = 00100011
ICND1 v1.04-16
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-18
Flat Topology
Problems
All devices share the same bandwidth. All devices share the same broadcast domain. It is difficult to apply a security policy.
ICND1 v1.04-19
Subnetworks
Smaller networks are easier to manage. Overall traffic is reduced. You can more easily apply network security policies.
ICND1 v1.04-20
ICND1 v1.04-21
ICND1 v1.04-22
ICND1 v1.04-23
ICND1 v1.04-24
ICND1 v1.04-25
ICND1 v1.04-26
ICND1 v1.04-27
Subnet masks, like IP addresses are represented in the dotted decimal masks addresses, format like 255.255.255.0
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-28
10.0.0.0 00001010.00000000.00000000.00000000 11111111.00000000.00000000.00000000 255.0.0.0 /8 172.16.0.0 172 16 0 0 10010001.10101000.00000000.00000000 11111111.11111111.00000000.00000000 255.255.0.0 255 255 0 0 /16 192.168.42.0 192 168 42 0 11000000.10101000.00101010.00000000 11111111.11111111.11111111.00000000 255.255.255.0 255 255 255 0 /24
ICND1 v1.04-29
ICND1 v1.04-30
ICND1 v1.04-31
ICND1 v1.04-32
ICND1 v1.04-33
ICND1 v1.04-34
ICND1 v1.04-35
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-36
ICND1 v1.04-37
ICND1 v1.04-39
Any interface listed with OK? value "NO" does not have a valid configuration
Protocol up up up down
ICND1 v1.04-40
Configuring global parameters: Enter host name [Router]:RouterX The enable secret is a password used to protect access to privileged EC and configuration modes. This password, after entered, becomes encrypted in the configuration configuration. Enter enable secret: Cisco1 The enable password is used when you do not specify an enable secret password, with some older software versions, and some boot images. Enter enable password: SanFran3 The virtual terminal password is used to protect access to the router over a network interface. Enter virtual terminal password: Sanj0se Configure SNMP Network Management? [no]:
ICND1 v1.04-41
Configure IP? [y ] g [yes]: Configure RIP routing? [yes]: no Configure CLNS? [no]: Configure bridging? [no]:
ICND1 v1.04-42
ICND1 v1.04-43
Cisco AutoSecure
Would you like to go through AutoSecure configuration? [yes]: no AutoSecure di l t S dialog can b started l t be t t d later using " t secure" C i "auto " CLI
ICND1 v1.04-44
ICND1 v1.04-46
RouterX>? Exec commands: access-enable access-profile clear connect disable disconnect enable exit help lat lock login logout -- More --
Create a temporary Access-List entry p y y Apply user-profile to interface Reset functions Open a terminal connection Turn off privileged commands p g Disconnect an existing network connection Turn on privileged commands Exit from the EXEC Description of the interactive help system Open a lat connection Lock the terminal Log in as a particular user Exit from the EXEC
You can abbreviate a command to the fewest characters that make a unique character string.
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-47
Create a temporary Access-List entry Apply user-profile to interface Create a temporary Access-List entry For manual emergency modes setting Change current directory Reset functions Manage the system clock g y Enter configuration mode Open a terminal connection Copy from one file to another Debugging functions (see also 'undebug') Delete a file List files on a filesystem Turn off privileged commands Disconnect an existing network connection Turn on privileged commands p g Erase a filesystem Exit from the EXEC Description of the interactive help system
You can complete a command string by entering the unique character string, then pressing the Tab key.
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-48
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-50
ICND1 v1.04-51
Saving Configurations
RouterX# RouterX#copy running-config startup-config Destination fil D ti ti filename [ t t [startup-config]? fi ]? Building configuration RourterX#
ICND1 v1.04-52
ICND1 v1.04-53
ICND1 v1.04-54
Configuring an Interface
RouterX(config)#interface type number RouterX(config-if)#
type i l d serial, ethernet, token ring, fddi h i includes i l h k i fddi, hssi, loopback, dialer, null, async, atm, bri, tunnel, and so on number is used to identify individual interfaces
RouterX(config)#interface type slot/port RouterX(config-if)#
ICND1 v1.04-55
string i a comment or a d i is description to h l you remember i i help b what is attached to this interface. The maximum number of characters for the string argument is 238.
ICND1 v1.04-56
RouterX#configure terminal RouterX(config)#interface serial 0 RouterX(config if)#shutdown RouterX(config-if)#shutdown %LINK-5-CHANGED: Interface Serial0, changed state to administratively down %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0, changed state to down
ICND1 v1.04-57
Configuring IP Addresses
Unique addressing allows communication between end stations b t d t ti Path choice is based on destination address
ICND1 v1.04-58
ICND1 v1.04-59
ICND1 v1.04-60
ICND1 v1.04-61
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-62
Layer 2 Addressing
ICND1 v1.04-63
Layer 3 Addressing
ICND1 v1.04-64
ICND1 v1.04-65
ICND1 v1.04-66
ICND1 v1.04-67
ICND1 v1.04-68
ICND1 v1.04-69
ICND1 v1.04-70
ICND1 v1.04-71
ICND1 v1.04-72
ICND1 v1.04-73
ICND1 v1.04-74
ICND1 v1.04-75
ICND1 v1.04-76
ICND1 v1.04-77
ICND1 v1.04-78
ICND1 v1.04-79
ICND1 v1.04-80
ICND1 v1.04-81
Address dd 172.69.233.229 172.69.233.218 172.69.233.19 172.69.233.309 172 69 233 309 172.19.168.11 172.19.168.254
Age(min) ( i ) 9
Hardware Addr d dd 0000.0c59.f892 0000.0c07.ac00 0000.0c63.1300 0000.0c36.6965 0000 0c36 6965 0000.0c63.1300 0000.0c36.6965
ICND1 v1.04-82
p g ping
Router# R t #
To diagnose basic network connectivity use the ping command connectivity, in user EXEC or privileged EXEC mode.
ICND1 v1.04-83
traceroute
Router# R t #
To discover the routes that packets will actually take when traveling to their destination address, use the traceroute command in user EXEC or privileged EXEC mode.
ICND1 v1.04-84
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-85
ICND1 v1.04-86
ICND1 v1.04-87
RouterX# banner login " Access for authorized users only. Please enter your username and password. "
ICND1 v1.04-88
ICND1 v1.04-89
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-90
ICND1 v1.04-91
ICND1 v1.04-92
Cisco SDM is supported on a number of Cisco router platforms and Cisco IOS Software releases. Always verify Cisco SDM router and Cisco IOS release support at www.cisco.com/go/sdm.
ICND1 v1.04-93
ICND1 v1.04-94
SDM Startup
ICND1 v1.04-95
Configuration Overview
ICND1 v1.04-96
ICND1 v1.04-97
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-98
Understanding DHCP
DHCP is built on a client-server model, as follows: The DHCP server hosts allocate network addresses and deliver configuration parameters. The term "client" refers to a host requesting initialization parameters from a DHCP server. DHCP supports these three mechanisms for IP address allocation: Automatic allocation; DHCP assigns a permanent IP address to a client. Dynamic allocation; DHCP assigns an IP address to a client for a limited period of time. Manual allocation; A client IP address is assigned by the network administrator, administrator and DHCP is used simply to convey the assigned address to the client. Dynamic allocation is the only that allows automatic reuse of an address that is no longer needed by the client to which it was assigned.
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-99
DHCP
ICND1 v1.04-100
ICND1 v1.04-101
ICND1 v1.04-102
Additional Tasks
ICND1 v1.04-103
DHCP Pool
ICND1 v1.04-104
ICND1 v1.04-105
ICND1 v1.04-106
ICND1 v1.04-107
ICND1 v1.04-108
Disabling DHCP:
use the no service dhcp command.
ICND1 v1.04-109
ICND1 v1.04-110
Verifying DHCP
ICND1 v1.04-111
Verifying DHCP
ICND1 v1.04-112
ICND1 v1.04-113
DHCP Relay
DHCP Problem
ICND1 v1.04-114
DHCP Relay
ICND1 v1.04-115
DHCP Relay
Broadcast
Broadcast
Helper address configuration that relays broadcasts to all servers on the segment. segment
RTA(config)#interface e0 RTA(config-if)#ip helper-address 172 24 1 255 RTA(config if)#ip helper address 172.24.1.255
But will RTA forward the broadcast?
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.04-116
Directed Broadcast
To allow all the nodes in the server farm to receive the broadcasts at Layer 2, e3 will need to be configured to forward directed broadcasts with the following command:
ICND1 v1.04-117
DHCP Relay
L3 L2 Helper address configuration Broadca that relays broadcasts to all servers on the Broadca segment. segment st st RTA(config)#interface e0
RTA(config if)#ip helper address RTA(config-if)#ip helper-address 172.24.1.255 RTA(config)#interface e3
2007 Cisco Systems, Inc. All rights reserved.
RTA(config-if)#ip directed-broadcast
ICND1 v1.04-118
www.netpro.com.vn
2007 Cisco Systems, Inc. All rights reserved. ICND1 v1.01-119
ICND1 v1.04-120
ICND1 v1.04-121
RouterB# show ssh Connection 0 Version 1.5 Encryption 3DES State Session Started Username guest
ICND1 v1.04-122
ICND1 v1.04-123
ICND1 v1.04-124
RouterX#ping 10.1.1.10 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 10.1.1.10, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5) round trip min/avg/max = 4/4/4 ms (5/5), round-trip RouterX#trace 192.168.101.101 Type escape sequence t abort. T to b t Tracing the route to 192.168.101.101 1 p1r1 (192.168.1.49) 20 msec 16 msec 16 msec 2 p1r2 (192 168 1 18) 48 msec * 44 msec 1 2 (192.168.1.18) RouterX
ICND1 v1.04-125
Module Summary
Cisco routers operate at Layer 3, and their function is path determination. Binary numbers are b Bi b based on th d the powers of 2 f 2. IP addressing: Dotted decimal representation of a binary string Identifies the network, subnet, and host Routers have a startup process where they test the hardware and load the operating system and configuration.
ICND1 v1.04-126
ICND1 v1.04-127
ICND1 v1.04-128
ICND1 v1.04-129