CCNA4 Skill Lab with Step by Step Configuration

CCNA4 Skill Lab - Nov 09

CONFIGURATION (Step by Step)

Step 1 Configure basic router settings Router>enable Router#config t Router(config)#hostname R0 R0(config)# no ip domain-lookup R0(config)#enable secret cisco R0(config)# banner motd & ******************************** !!! AUTHORIZED ACCESS ONLY !!! ******************************** & R0(config-line)#line con 0 R0(config-line)#logging synchronous R0(config-line)#password cisco R0(config-line)#login R0(config-line)#line vty 0 4 R0(config-line)#logging synchronous R0(config-line)#password cisco

R0(config-line)#login R0(config-line)#exit R0(config)#service password-encryption R0(config)#int fa0/0 R0(config-if)#ip address 200.1.1.1 255.255.255.0 R0(config-if)#no shut R0(config-if)#int s0/0/1 R0(config-if)#ip address 192.168.1.1 255.255.255.252 R0(config-if)#clock rate 64000 R0(config-if)#no shut R0(config-if)#exit R0(config)#username R2 password cisco R0(config)#int s0/0/0 R0(config-if)#ip address 192.168.1.5 255.255.255.252 R0(config-if)#clock rate 64000 R0(config-if)#encapsulation ppp R0(config-if)#ppp authentication chap R0(config-if)#no shut R0(config)#router rip R0(config-router)#version 2 R0(config-router)#passive-interface Fa0/0 R0(config-router)#network 200.1.1.0 R0(config-router)#network 192.168.1.0 R0(config-router)#network 192.168.1.4 R0(config-router)#no auto-summary =========================== Router>enable Router#config t Router(config)#hostname R2 R2(config)# no ip domain-lookup R2(config)#enable secret cisco R2(config)# banner motd & ******************************** !!!AUTHORIZED ACCESS ONLY!!! ******************************** & R2(config-line)#line con 0 R2(config-line)#logging synchronous R2(config-line)#password cisco R2(config-line)#login R2(config-line)#line vty 0 4 R2(config-line)#logging synchronous R2(config-line)#password cisco R2(config-line)#login R2(config-line)#exit R2(config)#service password-encryption R2(config)#int fa0/0 R2(config-if)#ip address 1.0.0.129 255.255.255.128 R2(config-if)#no shut R2(config-if)#exit R2(config)#username R0 password cisco

R2(config)#int s0/0/0 R2(config-if)#ip address 192.168.1.6 255.255.255.252 R2(config-if)#encapsulation ppp R2(config-if)#ppp authentication chap R2(config-if)#no shut R2(config-if)#int s0/0/1 R2(config-if)#ip address 192.168.1.10 255.255.255.252 R2(config-if)#encapsulation frame-relay R2(config-if)#no frame-relay inverse-arp R2(config-if)#frame-relay map ip 192.168.1.9 401 broadcast R2(config-if)#no shut R2(config)#router rip R2(config-router)#version 2 R2(config-router)#network 1.0.0.128 R2(config-router)#network 192.168.1.4 R2(config-router)#network 192.168.1.8 R2(config-router)#passive-interface Fa0/0 R2(config-router)#no auto-summary R2(config-router)#exit =========================== Router>enable Router#config t Router(config)#hostname R1 R1(config)# no ip domain-lookup R1(config)#enable secret cisco R1(config)# banner motd & ******************************** !!!AUTHORIZED ACCESS ONLY!!! ******************************** & R1(config-line)#line con 0 R1(config-line)#logging synchronous R1(config-line)#password cisco R1(config-line)#login R1(config-line)#line vty 0 4 R1(config-line)#logging synchronous R1(config-line)#password cisco R1(config-line)#login R1(config-line)#exit R1(config)#service password-encryption R1(config)#int fa0/0 R1(config-if)#ip address 1.0.0.2 255.255.255.128 R1(config-if)#no shut R1(config-if)#int s0/0/1 R1(config-if)#ip address 192.168.1.2 255.255.255.252 R1(config-if)#no shut R1(config-if)#int s0/0/0 R1(config-if)#ip address 192.168.1.9 255.255.255.252 R1(config-if)#encapsulation frame-relay R1(config-if)#no frame-relay inverse-arp R1(config-if)#frame-relay map ip 192.168.1.10 104 broadcast

R1(config-if)#no shut R1(config-if)#exit R1(config)#router rip R1(config-router)#version 2 R1(config-router)#network 1.0.0.0 R1(config-router)#network 192.168.1.0 R1(config-router)#network 192.168.1.8 R1(config-router)#passive-interface Fa0/0 R1(config-router)#no auto-summary R1(config-router)#exit =============== R0(config)#ip route 0.0.0.0 0.0.0.0 fa0/0 R0(config)#router rip R0(config-router)#version 2 R0(config-router)#default-information originate ############################################################## Step 2 Configure Access Control Lists (ACL) R2(config)#access-list 101 deny icmp host 1.0.0.130 host 1.0.0.1 echo R2(config)#access-list 101 permit icmp any any echo-reply R2(config)#access-list 101 permit ip any any R2(config)#int fa0/0 R2(config-if)#ip access-group 101 in R0(config)#access-list 102 deny tcp any host 1.0.0.1 eq 20 R0(config)#access-list 102 deny tcp any host 1.0.0.1 eq 21 R0(config)#access-list 102 deny tcp any host 1.0.0.1 eq 23 R0(config)#access-list 102 deny tcp any host 1.0.0.1 eq 80 R0(config)#access-list 102 permit ip any any R0(config)#int fa0/0 R0(config-if)#ip access-group 102 in

########################################################### Step 3 Implement NAT with overload R2(config)#access-list 1 permit 1.0.0.128 0.0.0.127 R2(config)#ip nat inside source list 1 interface serial 0/0/1 overload R2(config)#int fa0/0 R2(config-if)#ip nat inside R2(config-if)#int s0/0/1 R2(config-if)#ip nat outside R2(config-if)#int s0/0/0 R2(config-if)#ip nat outside