CCNA-Manual-200-125 final.pdf

LAB MANUAL (Version 1.0) CCNA ROUTING & SWITCHING (200-125)

From the Desk of Engr. Ahmed Saeed Join Us on Facebook Facebook (My (My Cisco Center Group) Group) My Cisco Center (MCC) Block 6 PECHS Near Near Farhan Farhan Hotel 92-321-2418349

1

`

Copy Right

CCNA LAB MANUAL 200-125 Copyright @My Cisco Center Published By

My Cisco Center, PECHS Block 6 Near Farhan hotel, Shahrah-e-Faisal Karachi. Warning and Disclaimer,

This manual is designed to provide information about CCNA (200-125). Every effort has been made to make this manual as complete and accurate as possible, but no warranty of fitness is implied. The information is provided on as basis and MCC shall have neither liability nor responsibility to any person or entity with respect to any loss or damage Arising from the information contained in this manual. Authors

Engr. Fakhr Uddin Akbari (Network Engineer)

My Cisco Center Engr. Riaz Gul (Network Engineer) My Cisco Center Reviewed and Approved By Engr. Ahmed Saeed Lead Cisco Trainer My Cisco Center (MCC) [email protected] 92-321-2418349 Join us on Facebook (My Cisco Center Group) https://www.facebook.com/groups/pixcttc/ OR Visit us on our website www.myciscocenter.com


2

`

Copy Right

CCNA LAB MANUAL 200-125 Copyright @My Cisco Center Published By

My Cisco Center, PECHS Block 6 Near Farhan hotel, Shahrah-e-Faisal Karachi. Warning and Disclaimer,

This manual is designed to provide information about CCNA (200-125). Every effort has been made to make this manual as complete and accurate as possible, but no warranty of fitness is implied. The information is provided on as basis and MCC shall have neither liability nor responsibility to any person or entity with respect to any loss or damage Arising from the information contained in this manual. Authors

Engr. Fakhr Uddin Akbari (Network Engineer)

My Cisco Center Engr. Riaz Gul (Network Engineer) My Cisco Center Reviewed and Approved By Engr. Ahmed Saeed Lead Cisco Trainer My Cisco Center (MCC) [email protected] 92-321-2418349 Join us on Facebook (My Cisco Center Group) https://www.facebook.com/groups/pixcttc/ OR Visit us on our website www.myciscocenter.com


2

`

TABLE OF CONTENTS

Basic Configurations of Internetwork Operating System (IOS) Configuring Telnet and SSH on Cisco Routers Cisco Routers Password Recovery Implementing Virtual Local Area Networks (VLANs) Implementing VLAN Trunking Protocol Version 2 (VTP) Implementing Port Based Security on Cisco Switches Implementing IEEE (802.1d) STP and (802.1w) RSTP Implementing Link Aggregation (Ether-Channel) Implementing Inter-Vlan Routing using Router on a Stick Configuring Static Route on Cisco Routers Configuring Routing Information Protocol Version 2 Implementing Enhance Interior Gateway Routing Protocol (EIGRP) Implementing Open Shortest Path First (OSPF) Version 2 Implementing IPv6 on Cisco Routers Configuring IPV6 Stateless Auto Configuration From the Desk of Engr. Ahmed Saeed Join Us on Facebook Facebook (My (My Cisco Center Group) Group) My Cisco Center (MCC) Block 6 PECHS Near Near Farhan Farhan Hotel 92-321-2418349

3

`

Implementing RIPng on Cisco Routers Implementing Open Shortest Path First (OSPF) Version 3 Implementing EIGRP for IPV6 Networks Configuring DHCP on Cisco Routers Implementing Standard and Extended Access Control List (ACL) Implementing Network Address Translation (Static, Dynamic and PAT) Implementing Hot standby Routing Protocol (HSRP) Implementation of WAN Encapsulation TFTP Server FTP Configuring Syslog Server PPP Multilink GRE Tunnel

From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

4

`

Basic Configurations of Internetwork Operating System (IOS) OBJECTIVE:

    

Basic configurations of a Cisco Switch/Router .

Accessing Console of the Switch/Router Modes of CLI How to Set Hostname and Configure Console Password How to Set Privilege level password How to Set User Authentication in Switch

TOPOLOGY

  

MCC-PC1 is directly connected to switch with IP address 10.0.0.1 MCC-PC2 is directly connected to switch with IP address 10.0.0.2 In order to configure the Switch/Router, accessing the console


5

`

 

RJ-45 to DB-9 adapter is used on the PC (COM port) to the device console Port through a rollover cable. Hyper Terminal is used to access the Command Line Interface (CLI) of the Device.

I n packet tracer:


6

`

Once you click OK, you will have Switch/Router Console. Switch console:

Modes of CLI : Switch>

User-exec mode

Switch#

Privilege mode

Switch(config)#

Global Configuration mode


`

H ow to switch in i n diff di ffe er ent mod mode es:

Switch> enable Switch# config terminal Switch (config)# NOTE: To return

to the previous mode use “Exit” command in the current mode .

H ow to Set Ho H ostnam stname and and Confi g ure ur e Console Console Passwo Passwor d:

Switch(config)# hostname MY_CISCO_CENTER MY_CISCO_CENTER (config)#line console 0 MY_CISCO_CENTER (config-line)#password cisco123 MY_CISCO_CENTER (config-line)#login H ow to Set Pr i vile vil ege leve level passwo passworr d: !!! Clear Text Password not encrypted(less priority) MY_CISCO_CENTER (config)# enable password ccna123 !!! Encrypted password (more Priority) MY_CISCO_CENTER (config)# enable secret cttc123

V er i fy the Passwo Passwor d:

MY_CISCO_CENTER (config)#exit MY_CISCO_CENTER #exit MY_CISCO_CENTER console 0 is now available Press RETURN to get started. User Access Verification !!! TYPE HERE LINE CONSOLE Password Password: MY_CISCO_CENTER >enable !!! TYPE HERE Privilege Level Password Password:


8

`

Verification:

H ow to Set User A uthenticat uthenticatii on i n Switc Swi tch: h:

MY_CISCO_CENTER #config terminal MY_CISCO_CENTER (config)#line console 0 MY_CISCO_CENTER (config-line)# login MY_CISCO_CENTER (config-line)#exit MY_CISCO_CENTER (config)#username MCC password cisco123 MY_CISCO_CENTER (config)#exit MY_CISCO_CENTER #exit Verify the Authentication


9

`

Configuring Telnet and SSH on Cisco Routers

OBJECTIVE:

Configuring the Cisco Router/Switch for remote access. TOPOLOGY

H ow to Set T elnet passwo passworr d:

MY_CISCO_CENTER(config)#line vty 0 15 MY_CISCO_CENTER (config-line)#password cisco MY_CISCO_CENTER (config-line)#login MY_CISCO_CENTER (config-line)#exit H ow to E nable nable T he D evice vi ce to E stablish stablish Te T elnet/ lnet/SS SSH H Session: Sessi on:

MY_CISCO_CENTER (config)#interface vlan 1 MY_CISCO_CENTER (config-if)#ip address 192.168.1.1 255.255.255.0 MY_CISCO_CENTER (config-if)#no shutdown

NOTE: 



Telnet is not recommended to access a device remotely, but you can use in a LAB environment. For telnet, you must set the privileged password on router/switch. If not set, you will not be able to access the device.

T o acce access ss a De D evice vi ce using usi ng Telnet, fr f r om com command pr pr ompt ompt typ type e:

C:\>telnet 192.168.1.1 Configu Co nfiguri ri ng SSH

MY_CISCO_CENTER (config)#username ahmed password cisco123 MY_CISCO_CENTER (config)#ip domain-name MY-CISCO-CENTER MY_CISCO_CENTER (config)#crypto key generate rsa


10

`

The name for the keys will be: MY-CISCO-CENTER.net Choose the size of the key modulus in the range of 360 to 2048 for your General Purpose Keys. Choosing a key modulus greater than 512 may take a few minutes. How many bits in the modulus [512]: 512 % Generating 512 bit RSA keys … [OK] MY_CISCO_CENTER (config)#line vty 0 15 MY_CISCO_CENTER (config-line)#login local MY_CISCO_CENTER (config-line)#transport input ssh

For SSH you need utilities like Secure CRT or putty to remotely access the device.


11

`

Cisco Routers Password Recovery OBJECTIVE:

To recover the console and enable password for Routers/Switches.

Confi gur ation on Router

MCC-R1>enable MCC-R1#config t MCC-R1 (config)#line console 0 MCC-R1 (config-line)Password cisco MCC-R1 (config-line)#Login MCCR1 (config-line)#Exit MCC-R1#copy running-config startup-config < To save the configurations)

After these configurations, restart the router, while router restarts press the Ctrl+Break or Ctrl+C key to enter into ROM Monitor Mode.


12

`

I n ROM Monitor M ode:

Rommon 1 > confreg 0x2142 Rommon 2 > reset

Once the Router/Switch is restarted, it will ignore the startup configurations in NVRAM. Now you can configure the following commands, for setting a new password.

Router#copy startup-config running-config Router(config)#enable password cisco Router(config)#config-register 0x2102 Router#copy running-config startup-config

Restart the router, enter new configured password, to access the router.


13

`

Implementing Virtual Local Area Networks (VLANs)

OBJECTIVE:

To configure VLANs and Verify the configurations. TOPOLOGY

Step: 1 to Cr eate VLAN s

MY_CISCO_CENTER#config terminal MY_CISCO_CENTER (config)#vlan 10 MY_CISCO_CENTER (config-vlan)#name HR MY_CISCO_CENTER (config-vlan)#exit MY_CISCO_CENTER (config)#vlan 20 MY_CISCO_CENTER (config-vlan)#name IT MY_CISCO_CENTER (config-vlan)#exit Veri fy VL ANs

MY_CISCO_CENTER #show vlan brief VLAN Name Status Ports ---- -------------------------------- --------- ------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4 Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig0/1, Gig0/2 10 HR active 20 IT active


14

`

Step 2: Port Membership

MY_CISCO_CENTER (config)#interface fa0/2 MY_CISCO_CENTER (config-if)#switchport mode access MY_CISCO_CENTER (config-if)#switchport access vlan 10 MY_CISCO_CENTER (config-if)#exit MY_CISCO_CENTER (config)#interface fa0/3 MY_CISCO_CENTER (config-if)#switchport mode access MY_CISCO_CENTER (config-if)#switchport access vlan 20 Switch# show vlan brief VLAN Name Status Ports ---- -------------------------------- --------- -------------------------------

10 20

HR IT

active active

1

default

active

Fa0/1, Fa0/5, Fa0/6, Fa0/7, Fa0/8 Fa0/9, Fa0/10, Fa0/11, Fa0/12 Fa0/13, Fa0/14, Fa0/15, Fa0/16 Fa0/17, Fa0/18, Fa0/19, Fa0/20 Fa0/21, Fa0/22, Fa0/23, Fa0/24 Gig0/1, Gig0/2 Fa0/2 Fa0/3

NOTE: This is a Local VLAN, for End to End VLANs, you need to configure Trunk Port between Switches. A trunk port carries traffic for multiple VLANs. Same configuration on both switches.

Trunk Port Configuration: Interface fa switchport mode trunk


15

`

Implementing VLAN Trunking Protocol Version 2 (VTP) OBJECTIVE: Configuring and verifying VTP Version 2 on Cisco Switches

Configuring MCC-Switch-1: Switch(config)#hostname MCC-Switch-1 MCC-Switch-1(config)#exit MCC-Switch-1#show vtp status


16

`

MCC-Switch-1#configure terminal MCC-Switch-1(config)#vtp domain MCC.COM Changing VTP domain name from NULL to MCC.COM MCC-Switch-1(config)#vlan 10 MCC-Switch-1(config-vlan)#name MCC-HR MCC-Switch-1(config-vlan)#exit MCC-Switch-1(config)#vtp password mcc123 MCC-Switch-1(config)#exit MCC-Switch-1#show vtp status

Note:   

VTP Password and domain name should be same on all Cisco switches If you want to set revision number to zero set VTP mode to transparent Best practice is to set VTP mode transparent then connect a new switch to your network.


1

`

Implementing Port Based Security on Switches

OBJECTIVE:

Configure port security and verify the configurations. TOPOLOGY

Switch Configurations MY_CISCO_CENTER(config)#interface range fa0/1-2 MY_CISCO_CENTER(config-if)#switchport mode access MY_CISCO_CENTER(config-if)#switchport port-security MY_CISCO_CENTER(config-if)#switchport port-security mac-address sticky MY_CISCO_CENTER(config-if)#switchport port-security maximum 1 MY_CISCO_CENTER(config-if)#switchport port-security violation shutdown MY_CISCO_CENTER(config-if)#exit

NOTE: You can also use manual MAC address entry instead of sticky option.


18

`

Verify Port-Securi ty MAC Address:

MY_CISCO_CENTER#show port-security Secure

Port MaxSecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) --------------------------------------------------------------------------------------------------------------Fa0/1 1 1 0 Shutdown Fa0/2 1 1 0 Shutdown ---------------------------------------------------------------------------------------------------------------

Verify Port-Security I nterface F astEnthernet F a0/1:

MY_CISCO_CENTER #show port-security interface f0/1 Port Security: Port Status: Violation Mode: Aging Time: Aging Type: Secure Static Address Aging: Maximum MAC Addresses: Total MAC Addresses: Configured MAC Addresses: Sticky MAC Addresses: Last Source Address:Vlan : Security Violation Count:

  

Enabled Secure-up Shutdown 0 mins Absolute Disabled 1 1 0 1 0010.1110.9B5E:1 0

Max Addresses value depends upon the model of the device. Manual MAC address can be entered in port-security instead on using sticky command. Violation modes can be set to protect, restrict or shutdown


19

`

What happens i f violation occurr ed?

When a new PC is attached to the port on which port-security is enabled then Switch will take an action which is set in the violation mode.

Verify when violation is occurr ed:

MCC-SW1#show port-security Secure Port Ma SecureAddr CurrentAddr SecurityViolation Security Action (Count) (Count) (Count) -------------------------------------------------------------------------------------------------------------Fa0/1 1 1 1 Shutdown Fa0/2 1 1 1 Shutdown --------------------------------------------------------------------------------------------------------------

NOTE:

When a port is shutdown, you need to manually shutdown the port, then again no shut, otherwise port will remain in error disabled mode.


20

`

Implementing IEEE (802.1d) STP and (802.1w) RSTP

OBJECTIVE:

To implement STP, RSTP and manually make a bridge as root bridge. TOPOLOGY

Verify Root Bridge on MCC-SW1:

MCC-SW1#show spanning-tree VLAN0001 Spanning tree enabled protocol ieee Root ID Priority 32769 Address 0090.0C55.4360 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32769 (priority 32768 sys-id-ext 1) Address 0090.0C55.4360


21

`

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20 Interface Role Sts Cost Prio.Nbr Type ------------- ---- --- --------- -------- ------------------------------------------------------P2p Fa0/1 19 128.1 Desg FWD P2p Desg FWD Fa0/2 19 128.2

 

 

In the output shown above, the parameters defined in Root ID corresponds to the Root Bridge information. While Bridge ID, is Local Switch information.

As this bridge is the root bridge, having Lowest MAC address, with default priority. Default Priority is 32768, and all switch ports are members of VLAN 1, so the priority becomes 32768+Ext. VLAN ID which in this case is 1 (32768+1=32769).

Run the same command on other switches and verify the Root Bridge. E nabling R STP:

MCC-SW1(config)#spanning-tree mode rapid-pvst MCC1#show spanning-tree VLAN0001 Spanning tree enabled protocol rstp Root ID

Priority 32769 Address 0090.0C55.4360 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID

Priority 32769 (priority 32768 sys-id-ext 1) Address 0090.0C55.4360 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20


22

`

Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- --------------------------------------------------------------Fa0/1 19 128.1 P2p Desg FWD P2p Fa0/2 19 128.2 Desg FWD

Configuri ng MC C2 as the Root Bri dge for VLAN 1: 



As you know, Lowest Bridge/Switch ID, Switch will become the Root Bridge, and Bridge ID is the combination or Bridge Priority and MAC address.

By default Bridge Priority is same, and you cannot change the MAC address. In order to manually make a switch as Root Bridge we can only change its Priority. Priority of a Switch is changed in increments of 4096. MCC2(config)#spanning-tree vlan 1 priority 4096

Veri fy MCC-SW2 as Root Bri dge for VL AN 1:

MCC-SW2#show spanning-tree VLAN0001 Spanning tree enabled protocol rstp Priority 4097 Root ID Address 0090.2127.15AC This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Bridge ID

Priority 4096 ( priority 4096 sys-id-ext 1) Address 0090.2127.15AC Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 20

Interface Role Sts Cost Prio.Nbr Type ---------------- ---- --- --------- -------- --------------------------------------------------------------P2p Desg FWD Fa0/2 19 128.1 Fa0/3 19 128.2 P2p Desg FWD


23

`

E nabling Port fast feature on all switches:

CONCEPT:

By enabling portfast feature on all the switches, switches will disable the STP process on all non-trunk ports. It will cause to take less time to change the state to up on all non-trucking ports. To verify this feature, connect a PC to the switch and the port will be up within 5 seconds. But the problem arises when a Switch is plug in, to a STP disabled port, it can create switching loops. The solution to this problem is BPDU Guard, which will not listen Bridge Protocol Data Units (exchange of parameters between switches), no switching loops will be created on Access Ports.

MCC-SW1(config)#spanning-tree portfast default MCC-SW1(config)# spanning-tree bpduguard enable


24

`

Implementing Link Aggregation (Ether-Channel)

OBJECTIVE:

To implement Layer 2 Ether- Channel and verify the configurations TOPOLOGY

Configuri ng MC C-SW1:

MCC-SW1(config)#interface range fa0/1 - 2 MCC-SW1 (config-if-range)#channel-protocol pagp MCC-SW1 (config-if-range)#channel group 1 mode desirable MCC-SW1 (config-if-range)#exit MCC-SW1 (config)#interface port-channel 1 MCC-SW1 (config-if)#switchport mode trunk Configuri ng MC C-SW2:

MCC-SW2(config)#interface range fa0/1 - 2 MCC-SW2 (config-if-range)#channel-protocol pagp MCC-SW2 (config-if-range)#channel group 1 mode desirable MCC-SW2 (config-if-range)#exit MCC-SW2 (config)#interface port-channel 1 MCC-SW2 (config-if)#switchport mode trunk


25

`

Verify E therchannel: MCC-SW1#show etherchannel summary

Flags:

D - down P - in port-channel I - stand-alone s - suspended H - Hot-standby (LACP only) R - Layer3 S - Layer2 U - in use f - failed to allocate aggregator u - unsuitable for bundling w - waiting to be aggregated d - default port

Number of channel-groups in use: 1 Number of aggregators: 1 Group Port-channel Protocol Ports -------------------------------------------------------------------------------------------------1

Po1(SU)

PAgP


Fa0/1(P) Fa0/2(P)

26

`

Implementing Inter-Vlan Routing using Router on a Stick OBJECTIVE:

To configure and verify Inter-Vlan routing, using router on stick TOPOLOGY

VLAN s Cr eation: MCC1(config)#vlan 10 MCC1(config-vlan)#name HR MCC1(config-vlan)#exit MCC1(config)#vlan 20 MCC1(config-vlan)#name IT MCC1(config-vlan)#exit Port Assignment: MCC1(config)#interface fa0/1 MCC1(config-if)#switchport mode access MCC1(config-if)#switchport access vlan 10 MCC1(config-if)#exit MCC1(config)#interface fa0/2 MCC1(config-if)#switchport mode access MCC1(config-if)#switchport access vlan 20 MCC1(config-if)#exit


2

`

Trunk Port For Router On a Stick (The port connecting the Router)

MCC1(config)#interface gigabitEthernet 0/1 MCC1(config-if)#switchport mode trunk

Router Configurations:

MCC-R1(config)#interface fa0/0 MCC-R1(config)#interface gigabitEthernet 0/0 MCC-R1(config-if)#no shutdown

Creating sub-interface for VLAN 10 on router:

MCC-R1(config)#interface gigabitEthernet 0/0.10 MCC-R1(config-subif)#encapsulation dot1Q 10 MCC-R1(config-subif)#ip address 10.0.0.1 255.0.0.0 MCC-R1(config-subif)#exit

Creating sub-interface for VLAN 20 on router:

MCC-R1(config)#interface gigabitEthernet 0/0.20 MCC-R1(config-subif)#encapsulation dot1Q 20 MCC-R1(config-subif)#ip address 11.0.0.1 255.0.0.0 MCC-R1(config-subif)#exit PC0 Configurations


28

`

PC1 Configurations:

Veri fy I nter-V LAN routing, Ping PC1 from PC0


29

`

Configuring Static Route on Cisco Routers OBJECTIVE:

To configure and verify static routing. TOPOLOGY

MCC -R 2 Configurations: MCC-R2 (config)#interface serial 0/0 MCC-R2 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R2 (config-if)#clock rate 64000 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa2/0 MCC-R2 (config-if)#ip address 10.0.0.1 255.0.0.0 MCC-R2 (config-if)#no shutdown

MCC 3 Configurations:

MCC-R3 (config)#interface serial 2/0 MCC-R3 (config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R3 (config-if)#no shutdown MCC-R3 (config)#interface fa0/0 MCC-R3 (config-if)#ip address 172.16.100.1 255.255.0.0 MCC-R3 (config-if)#no shutdown From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

30

`

Static Routing:

Adding static route on MCC-R2 for network 172.16.100.0 MCC-R2(config)#ip route 172.16.0.0 255.255.0.0 200.150.160.2

Adding static route on MCC-R3 for network 10.0.0.0 MCC-R3(config)#ip route 10.0.0.0 255.0.0.0 200.150.160.1 NOTE: When configuring the static route on router R1 we used the local interface of the router R1 i.e. s0/1/0, whereas, when configuring router R2 we use the next hop address as Forwarding router's address. Verify Routing

MCC-R2#show ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set C 10.0.0.0/8 is directly connected, FastEthernet2/0 S 172.16.0.0/16 [1/0] via 200.150.160.2 200.150.160.0/30 is subnetted, 1 subnets C 200.150.160.0 is directly connected, Serial0/0


31

`

Similarly on MCC-R3

MCC-R3#show ip route Codes: C - connected, S - static , I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set S 10.0.0.0/8 [1/0] via 200.150.160.1 C 172.16.0.0/16 is directly connected, FastEthernet0/0 200.150.160.0/30 is subnetted, 1 subnets C 200.150.160.0 is directly connected, Serial2/0 Verify the ping from PC0 to PC1


32

`

Configuring Routing Information Protocol Version 2 OBJECTIVE:

To configure and verify RIP V2 routing. TOPOLOGY

Mcc-r1 configurations: MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip address 10.10.10.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface serial 3/0 MCC-R1(config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config)#router rip MCC-R1(config-router)#version 2 MCC-R1(config-router)#network 200.150.160.0 MCC-R1(config-router)#network 10.10.10.0

Mcc-r2 configurations: MCC-R2(config)#interface serial 3/0 MCC-R2(config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#clock rate 64000


33

`

MCC-R2(config-if)#exit MCC-R2(config)#interface serial 2/0 MCC-R2(config-if)#ip address 150.160.39.1 255.255.255.252 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#clock rate 64000 MCC-R2(config)#router rip MCC-R2(config-router)#version 2 MCC-R2(config-router)#network 200.150.160.0 MCC-R2(config-router)#network 150.160.39.0 MCC-R2(config-router)#exit MCC-R2(config)#exit

Mcc-r3 configurations: MCC-R3(config)#interface serial 2/0 MCC-R3(config-if)#ip address 150.160.39.2 255.255.255.252 MCC-R3(config-if)#no shutdown MCC-R3(config)#interface fa0/0 MCC-R3(config-if)#ip address 172.16.100.1 255.255.255.0 MCC-R3(config-if)#no shutdown MCC-R3(config)#router rip MCC-R3(config-router)#version 2 MCC-R3(config-router)#network 172.16.100.0 MCC-R3(config-router)#network 150.160.39 .0 MCC-R3(config-router)#exit MCC-R3(config)#exit

Verify Routing Table on MCC-R1


34

`

Verify end to end connectivity, ping MCC-PC2 from MCC-PC


35

`

Implementing Enhanced Interior Gateway Routing Protocol (EIGRP) TOPOLOGY:

MCC-R3

MCC-R2

MCC -R 2 Configurations:

MCC-R2 (config)#interface serial 0/0 MCC-R2 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R2 (config-if)#clock rate 64000 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa2/0 MCC-R2 (config-if)#ip address 10.0.0.1 255.0.0.0 MCC-R2 (config-if)#no shutdown

MCC 3 Configurations:

MCC-R3 (config)#interface serial 2/0 MCC-R3 (config-if)#ip address 200.150.160.2 255.255.255.252


36

`

MCC-R3 (config-if)#no shutdown MCC-R3 (config)#interface fa0/0 MCC-R3 (config-if)#ip address 172.16.100.1 255.255.0.0 MCC-R3 (config-if)#no shutdown

Adding networks for E I GRP on Router MC C-R2:

MCC-R2(config)#router eigrp 10 MCC-R2 (config-router)#network 10.0.0.0 MCC-R2 (config-router)#network 200.150.160.0 MCC-R2 (config-router)#no auto-summary MCC-R2 (config-router)#exit

Adding networks for E I GRP on Router MC C-R3:

MCC-R3 (config)#router eigrp 10 MCC-R3 (config-router)#network 172.16.100.0 MCC-R3 (config-router)#network 200.150.160.0 MCC-R3 (config-router)#no auto-summary MCC-R3 (config-router)#exit

Verify R outes on MCC -R 2 MCC-R2#show ip route

Gateway of last resort is not set C D C

10.0.0.0/8 is directly connected, FastEthernet2/0 172.16.0.0/16 [90/2172416] via 200.150.160.2, 00:00:25, Serial0/0 200.150.160.0/30 is subnetted, 1 subnets 200.150.160.0 is directly connected, Serial0/0


3

`

Verify Routes on MCC-R 3 MCC-R3#show ip route Gateway of last resort is not set

D C

C

10.0.0.0/8 [90/20514560] via 200.150.160.1, 00:02:09, Serial2/0 172.16.0.0/16 is directly connected, FastEthernet0/0 200.150.160.0/30 is subnetted, 1 subnets 200.150.160.0 is directly connected, Serial2/0

To Verify Neighbor Relationship, by viewing Neighbor Table: Neighbor Table on MCC-R2 MCC-R2#show ip eigrp neighbors IP-EIGRP neighbors for process 10 H Address Interface

0

200.150.160.2 Se0/0

Hold Uptime SRTT RTO (sec) (ms) Cnt 10 00:03:17 40 1000

Q 0

Seq Num 15

Neighbor Table on MCC-R3

IP-EIGRP neighbors for process 10 H Address Interface 0

200.150.160.1 Se2/0

Hold Uptime SRTT RTO Q (sec) (ms) Cnt 13 00:09:27 40 1000 0

Seq Num 7

NOTE: To verify the currently enabled routing protocols, use the following command: R1#show ip protocols

To view all the routes that has been calculated by EIGRP, use the following command : R1#show ip eigrp topology.


38

`

Implementing Open Shortest Path First (OSPF) Version2 TOPOLOGY

MCC-R1

MCC-R0

MCC-R2

Configuri ng MCC-R 0

MCC-R0(config)#interface fa0/0 MCC-R0(config-if)#ip address 10.0.0.1 255.0.0.0 MCC-R0(config-if)#no shutdown MCC-R0(config)#interface serial 2/0 MCC-R0(config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R0(config-if)#no shutdown MCC-R0(config-if)#clock rate 64000 Configuring M cc-R1 MCC-R1(config)#interface serial 2/0 MCC-R1(config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface serial 3/0 MCC-R1(config-if)#ip address 139.60.37.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config-if)#clock rate 64000 From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

39

`

Configu Co nfiguri ri ng MCC-R MC C-R 2 MCC-R2(config)#interface serial 2/0 MCC-R2(config-if)#ip address 139.60.37.2 255.255.255.252 MCC-R2(config-if)#no shutdown

MCC-R2(config)#interface fa0/0 MCC-R2(config-if)#ip address 172.16.0.1 255.255.0.0 MCC-R2(config-if)#no shutdown Configu Co nfiguri ri ng MCC-R MC C-R 1 The Area Border Router

MCC-R1(config)#router ospf 10 MCC-R1(config-router)#network 200.150.160.0 0.0.0.3 area 0 MCC-R1(config-router)#network 139.60.37.0 0.0.0.3 area 1 Configu Co nfiguri ri ng MCC-R MC C-R 0 The BACKBONE Area Router

MCC-R0(config)#router ospf 100 MCC-R0(config-router)#network 10.0.0.0 0.255.255.255 area 0 MCC-R0(config-router)#network 200.150.160.0 0.0.0.3 area 0 Configu Co nfiguri ri ng MCC-R MC C-R 2 Regular Area Router, Internal Router

MCC-R2(config)#router ospf 50 MCC-R2(config-router)#network 139.60.37.0 0.0.0.3 area 1 MCC-R2(config-router)#network 172.16.0.0 0.0.255.255 area 1 V er i fy Rout Routes on on AB R : MCC-R1#show ip route

Gateway of last resort is not set

O

C O C

10.0.0.0/8 [110/65] via 200.150.160.1, 00:12:21, Serial2/0 139.60.0.0/30 is subnetted, 1 subnets 139.60.37.0 is directly connected, Serial3/0 172.16.0.0/16 [110/65] via 139.60.37.2, 00:03:03, Serial3/0 200.150.160.0/30 is subnetted, 1 subnets 200.150.160.0 is directly connected, Serial2/0


40

`

V er i fy R oute utes on MCCMC C-R R 0 (B ackbo ckbone R oute uter )

MCC-R0#show ip route Gateway of last resort is not set

C

10.0.0.0/8 is directly connected, FastEthernet0/0 139.60.0.0/30 is subnetted, 1 subnets O 139.60.37.0 [110/128] via 200.150.160.2, 00:19:03, Serial2/0 0IA 172.16.0.0/16 [110/129] via 200.150.160.2, 00:09:42, Serial2/0 200.150.160.0/30 is subnetted, 1 subnets C 200.150.160.0 is directly connected, Serial2/0 V er i fy Ro R oute utes on on MCCMC C-R R 2 (I nte nter nal nal Ro R oute uter )

MCC-R2#show ip route Gateway of last resort is not set O 10.0.0.0/8 [110/129] via 139.60.37.1, 00:17:38, Serial2/0 139.60.0.0/30 is subnetted, 1 subnets C 139.60.37.0 is directly connected, Serial2/0 C 172.16.0.0/16 is directly connected, FastEthernet0/0 200.150.160.0/30 is subnetted, 1 subnets O IA 200.150.160.0 [110/128] via 139.60.37.1, 00:17:38, Serial2/0 V er i fy end end to to end end connect connectii vity vi ty

Ping from PC0 to PC1

Note: More com commands nds to veri fy OSPF : MCC-R1#show ip ospf neighbor MCC-R1#show ip ospf database MCC-R1#show ip protocols MCC-R1#show ip ospf interface From the Desk of Engr. Ahmed Saeed Join Us on Facebook Facebook (My (My Cisco Center Group) Group) My Cisco Center (MCC) Block 6 PECHS Near Near Farhan Farhan Hotel 92-321-2418349

41

`

Implementing IPV6 on Cisco Routers TOPOLOGY

MCC M CC -R 1 Confi Configur gura ation

MCC-R1(config)#ipv6 unicast-routing MCC-R1(config)#interface serial 1/0 MCC-R1(config-if)#ipv6 address 2001:abad:beef:1::1/64 MCC-R1(config-if)#no shutdown MCC M CC -R 2 Confi Configur gura ation

MCC-R2(config)#ipv6 unicast-routing MCC-R2(config)#interface serial 1/ 0 MCC-R2(config-if)#ipv6 address 2001:abad:beef:1::2/64 MCC-R2(config-if)#no shutdown Verify Configurations

MCC-R1# show ipv6 interface


42

`

MCC-R2# show ipv6 interface

Verify IPv6 communication between R2 and R1 using ping:


43

`

Configuring IPV6 Stateless Auto Configuration OBJECTIVE:

To configure State less auto IPv6 configurations on Cisco Routers TOPOLOGY

Mcc-r1 configurations:

MCC-R1(config)#ipv6 unicast-routing MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 MCC-R1(config-if)#ipv6 address prefix 2001:abad:5001:1::/64 MCC-R1(config-if)#no shutdown Mcc-r2 configurations:

MCC-R2(config)#ipv6 unicast-routing MCC-R2(config)#interface fa0/0 MCC-R2(config-if)#ipv6 address autoconfig MCC-R2(config-if)#no shutdown


44

`


MCC-R3(config)#ipv6 unicast-routing MCC-R3(config)#interface fa0/ 0 MCC-R3(config-if)#ipv6 address autoconfig MCC-R3(config-if)#no shutdown Verify configurations:


45

`

Implementing Ripng on Cisco Routers OBJECTIVE:

To configure and verify RIPng on Cisco Routers TOPOLOGY

In this configuration example, routers R1 and R2 are connected via Serial interface and Loopback addresses are configured to generate networks. All the interfaces are configured with the IPv6 addresses BACKGROUND:

Mcc-r1 configurations: MCC-R1(config)#interface serial 1/0 MCC-R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 MCC-R1(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R1(config-if)#no shutdown MCC-R1(config-if)#exit MCC-R1(config)#interface loopback 10 MCC-R1(config-if)#ipv6 address 1:1:1:1::1/64 MCC-R1(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R1(config-if)#no shutdown MCC-R1(config)#interface loopback 15 MCC-R1(config-if)#ipv6 address 1:1:1:2::1/64 MCC-R1(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R1(config-if)#no shutdown

Mcc-r2 configurations: MCC-R2(config)#IPV6 unicast-routing MCC-R2(config)#interface serial 1/0 MCC-R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 MCC-R2(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R2(config-if)#no shutdown MCC-R2(config)#interface loopback 0 MCC-R2(config-if)#ipv6 address 2:2:2:2::1/64 MCC-R2(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R2(config-if)#no shutdown MCC-R2(config)#interface loopback 1


46

`

MCC-R2(config-if)#ipv6 address 2:2:2:1::1/ 64 MCC-R2(config-if)#ipv6 rip MY-CISCO-CENTER enable MCC-R2(config-if)#no shutdown

Verify Configurations And Connectivity To view the ipv6 routing Table

Verify information about the current IPv6 RIP process


4

`

Verify the details of entries in current rip routing instance.

Verify the reachability between the routers R1 and R2, use the ping command


48

`

Implementing Open Shortest Path First (OSPF) Version 3 OBJECTIVE:

To configure and Verify OSPF Version 3 on Cisco Routers

TOPOLOGY

Configuration On Mcc-R 1

MCC-R1 (config)#ipv6 unicast-routing MCC-R1 (config)#interface fastEthernet 0/0 MCC-R1 (config-if)#ipv6 address 2001:abad:5001:1::1/64 MCC-R1 (config-if)#no shutdown MCC-R1 (config-if)#ipv6 ospf 1 area 0 MCC-R1 (config-if)#exit MCC-R1 (config)#interface loopback 10 MCC-R1 (config-if)#ipv6 address 1:1:1:1::1/64 MCC-R1 (config-if)#ipv6 ospf 1 area 0 MCC-R1 (config-if)#no shutdown MCC-R1 (config-if)#exit MCC-R1 (config)#interface loopback 20 MCC-R1 (config-if)#ipv6 address 1:1:1:2:: 1/64 MCC-R1 (config-if)#ipv6 ospf 1 area 0 MCC-R1 (config-if)#no shutdown MCC-R1 (config-if)#e MCC-R1 (config-if)#exit MCC-R1 (config)#ipv6 router ospf 1 MCC-R1 (config-rtr)#router-id 1.1.1.1


49

`

Configurations On Mcc-R 2

MCC-R2(config)#ipv6 unicast-routing MCC-R2(config)#interface fa0/0 MCC-R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#ipv6 ospf 1 area 0 MCC-R2(config-if)#exit MCC-R2(config)#interface loopback 0 MCC-R2(config-if)#ipv6 address 2:2:2:2::1/64 MCC-R2(config-if)#ipv6 ospf 1 area 0 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#exit MCC-R2(config)#interface loopback 1 MCC-R2(config-if)#ipv6 address 2:2:2:1::1/64 MCC-R2(config-if)#ipv6 ospf 1 area 0 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#exit MCC-R2(config)#ipv6 router ospf 1 MCC-R2(config-rtr)#router-id 2.2.2.2

Configure R1′s Loopback 10, 20 and R2’s Loopback 0, 1 interface to participate in OSPF Area 0 and ensure that R1 & R2 advertises Lo0 as a /64 subnet and not a host route (/128).

NOTE: Loopback interfaces have their own OSPF network type in which case OSPF advertises a host route to the loopback interface and not the configure subnet mask. To change OSPF to advertise the subnet assigned to the loopback interface you’ll need to change the network type to point-to-point as shown below

MCC -R 1

MCC-R1(config)#interface loopback 10 MCC-R1(config-if)#ipv6 ospf 1 area 0 MCC-R1(config-if)#ipv6 ospf network point-to-point From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

50

`

MCC-R1(config)#interface loopback 20 MCC-R1(config-if)#ipv6 ospf 1 area 0 MCC-R1(config-if)#ipv6 ospf network point-to-point

MCC -R 2

MCC-R2(config)#interface loopback 0 MCC-R2(config-if)#ipv6 ospf 1 area 0 MCC-R2(config-if)#ipv6 ospf network point-to-point MCC-R2(config-if)#exit MCC-R2(config)#interface loopback 1 MCC-R2(config-if)#ipv6 ospf 1 area 0 MCC-R2(config-if)#ipv6 ospf network point-to-point

Verify R1′s Loopback0 network is in the IPv6 routing table of R2: MCC-R1#show ipv6 route ospf


51

`

Verify R1′s Loopback10 network has IPv6 connectivity to R2′s Loopback0 network using PING:


52

`

Implementing EIGRP for IPV6 Networks OBJECTIVE:

To configure and verify EIGRP for IPV6 TOPOLOGY


MCC-R1(config)#ipv6 unicast-routing MCC-R1(config)#interface serial 1/0 MCC-R1(config-if)#ipv6 address 2001:abad:5001:1::1/64 MCC-R1(config-if)#no shutdown MCC-R1(config)#ipv6 router eigrp 100 MCC-R1(config-rtr)#eigrp router-id 1.1.1.1 MCC-R1(config-rtr)#exit MCC-R1(config)#interface loopback 10 MCC-R1(config-if)#ipv6 address 1:1:1:1::1/64 MCC-R1(config-if)#no shutdown MCC-R1(config-if)# ipv6 eigrp 100 MCC-R1(config-if)#exit MCC-R1(config)#interface loopback 20 MCC-R1(config-if)#ipv6 address 1:1:1:2::1/64 MCC-R1(config-if)#no shutdown MCC-R1(config-if)#ipv6 eigrp 100 MCC-R1(config-if)#exit


53

`


MCC-R2(config)#ipv6 unicast-routing MCC-R2(config)#interface serial 1/0 MCC-R2(config-if)#ipv6 address 2001:abad:5001:1::2/64 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#ipv6 eigrp 100 MCC-R2(config)#ipv6 router eigrp 100 MCC-R2(config-rtr)#eigrp router-id 2.2.2.2 MCC-R2(config-rtr)#exit MCC-R2(config)#interface loopback 0 MCC-R2(config-if)#ipv6 address 2:2:2:2::1/64 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#ipv6 eigrp 100 MCC-R2(config-if)#exit MCC-R2(config)#int MCC-R2(config)#interface loopback 1 MCC-R2(config-if)#ipv6 address 2:2:2:1::1/ 64 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#ipv6 eigrp 100


54

`

Verify R1′s Loopback0 network is in the IPv6 routing table of R2: R1#show ipv6 route eigrp

Check connectivity


55

`

Configuring DHCP on Cisco Routers OBJECTIVE:

To Configure Cisco Routers as a DHCP Server and Verify the services.

TOPOLOGY

Configurations On Mcc-Dhcp-Server MCC-DHCP-SERVER(config)#ip dhcp pool MCC-DHCP-POOL1 MCC-DHCP-SERVER(dhcp-config)#network 192.168.1.0 255.255.255.0 MCC-DHCP-SERVER(dhcp-config)#default-router 192.168.1.1 MCC-DHCP-SERVER(dhcp-config)#exit MCC-DHCP-SERVER(config)#ip dhcp excluded-address 192.168.1.10


56

`

NOTE: You can exclude the range of addresses which should not be assigned to host machines, or reserved addresses for Web Servers, DNS Servers etc. You can also configure Multiple DHCP pools for VLANs on a single DHCP Server.

Verify the DH CP Server Configurations:


5

`

Address Leases on DH CP Server: MCC-DHCP-SERVER # show ip dhcp binding


58

`

Implementing Standard and Extended Access Control List (ACL) OBJECTIVE:

To implement standard and extended access control lists to limit the access. TOPOLOGY

Mcc-r1 configurations: MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface fa1/0 MCC-R1(config-if)#ip address 172.16.100.1 255.255.255. 0 MCC-R1(config-if)#exit


59

`

Ping from MC C-PC1 to MCC-PC2

Now restrict the MCC-PC1 to communicate with MCC-PC using standard ACL. MCC-R1(config)#access-list 50 deny host 192.168.1.2 MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip access-group 50 in MCC-R1(config-if)#exit


60

`

Now check the connectivity from MCC-PC1 to MCC-PC2


61

`

EXTENDED ACL TOPOLOGY

 

The task is to permit MCC-PC1 on LAN 1 only WEB access to MYCISCOCENTER Webserver. Block MCC-PC1 from accessing the MYCISCOCENTER Webserver through WWW.

Configuration On Mcc-R 1 MCC-R1(config)#interface fa0/0 MCC-R1 (config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#interface fa1/0 MCC-R1 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#router eigrp 10 MCC-R1 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R1 (config-router)#network 192.168.1.0 0.0.0.255 MCC-R1 (config-router)#no auto-summary MCC-R1 (config-router)#exit MCC-R1 (config)#access-list 100 permit tcp host 192.168.1.2 host 172.16.100.50 eq 80 MCC-R1 (config)#access-list 100 deny tcp host 192.168.1.3 host 172.16.100.50 eq 80

MCC-R1 (config)#access-list 100 permit ip any any From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

62

`

MCC-R1 (config)#interface fa0/ 0 MCC-R1 (config-if)#ip access-group 100 in

Mcc-r2 configurations: MCC-R2 (config)#interface fa0/0 MCC-R2 (config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa1/0 MCC-R2 (config-if)#ip address 172.16.100.1 255.255.255.0 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#exit MCC-R2 (config)#router eigrp 10 MCC-R2 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R2 (config-router)#network 172.16.100.0 0.0.0.255 MCC-R2 (config-router)#no auto-summary MCC-R2 (config)#exit

Verification:

Accessing the Web Server from MCC-PC1


63

`

Accessing Web Server from MCC-PC2


64

`

Implementing Network Address Translation (Static, Dynamic and PAT) OBJECTIVE:

To configure and Verify Static, Dynamic and PAT. TOPOLOGY

Mcc-r1 configurations: MCC-R1 (config)#interface fa0/0 MCC-R1 (config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#interface fa1/0 MCC-R1 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#router eigrp 10 MCC-R1 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R1 (config-router)#network 192.168.1.0 0.0.0.255 MCC-R1 (config-router)#no auto-summary MCC-R1 (config-router)#exit


65

`

Mcc-r2 configurations: MCC-R2 (config)#interface fa0/0 MCC-R2 (config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa1/0 MCC-R2 (config-if)#ip address 172.16.100.1 255.255.255.0 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#exit MCC-R2 (config)#router eigrp 10 MCC-R2 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R2 (config-router)#network 172.16.100.0 0.0.0.255 MCC-R2 (config-router)#no auto-summary MCC-R2 (config)#exit

CONFIGURING STATIC NAT FOR MCC-PC1 WITH PUBLIC IP 200.150.160.1 MCC-R1(config)#ip nat inside source static 192.168.1.2 200.150.160.1 MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip nat inside MCC-R1(config-if)#exit MCC-R1(config)#interface fa1/0 MCC-R1(config-if)#ip nat outside Verify, B y Using Command MCC-R1#show

ip nat translation


66

`

DYNAMIC NAT TOPOLOGY

Mcc-r1 configurations: MCC-R1 (config)#interface fa0/0 MCC-R1 (config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#interface fa1/0 MCC-R1 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#router eigrp 10 MCC-R1 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R1 (config-router)#network 192.168.1.0 0.0.0.255 MCC-R1 (config-router)#no auto-summary MCC-R1 (config-router)#exit

Mcc-r2 configurations: From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

6

`

MCC-R2 (config)#interface fa0/0 MCC-R2 (config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa1/0 MCC-R2 (config-if)#ip address 172.16.100.1 255.255.255.0 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#exit

Configuring Dynamic NAT for MCC-PC1 and MCC-PC2 with IP addresses 180.139.60.2 180.139.60.3.

MCC-R1(config)#ip nat pool DYNAMIC-NAT 180.139.60.2 180.139.60.3 netmask 255.255.255.0 MCC-R1(config)#access-list 10 permit any MCC-R1(config)#ip nat inside source list 10 pool DYNAMIC-NAT MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip nat inside MCC-R1(config)#interface fa1/0 MCC-R1(config-if)#ip nat outside

V E R I F Y :


68

`

PAT TOPOLOGY

Mcc-r1 configurations: MCC-R1 (config)#interface fa0/0 MCC-R1 (config-if)#ip address 192.168.1.1 255.255.255 .0 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#interface fa1/0 MCC-R1 (config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1 (config-if)#no shutdown MCC-R1 (config)#router eigrp 10 MCC-R1 (config-router)#network 200.150.160.0 0.0.0.3 MCC-R1 (config-router)#network 192.168.1.0 0.0.0.255 MCC-R1 (config-router)#no auto-summary MCC-R1 (config-router)#exit


MCC-R2 (config)#interface fa0/ 0 MCC-R2 (config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2 (config-if)#no shutdown MCC-R2 (config)#interface fa1/0 MCC-R2 (config-if)#ip address 172.16.100.1 255.255.255.0 From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

69

`

MCC-R2 (config-if)#no shutdown MCC-R2 (config)#exit

Configuring Port Address Translation with public IP addresses 200.150.160.1. MCC-R1(config)#ip nat pool PAT 200.150.160.1 200.150.160.1 netmask 255.255.255.252 MCC-R1(config)#access-list 10 permit any MCC-R1(config)#ip nat inside source list 10 pool PAT overload MCC-R1(config)# interface fa0/0 MCC-R1(config-if)# ip nat inside MCC-R1(config)# interface fa1/0 MCC-R1(config-if)# ip nat outside

VERIFICATION:


70

`

Implementing Hot Standby Routing Protocol(HSRP) TOPOLOGY


71

`

Configuring MCC -R1 (WAN R outer) MCC-R1(config)#interface serial 2/0 MCC-R1(config-if)#ip address 10.10.10.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config-if)#clock rate 64000 MCC-R1(config)#interface serial 3/0 MCC-R1(config-if)#ip address 172.16.100.1 255.255.255.252 MCC-R1(config-if)#clock rate 64000 MCC-R1(config)#interface loopback 0 MCC-R1(config-if)#ip address 200.150.160.1 255.255.255 .0

MCC-R1(config)#router eigrp 10 MCC-R1(config-router)#network 200.150.160.0 0.0.0.3 MCC-R1(config-router)#network 172.16.100.0 0.0.0.3 MCC-R1(config-router)#no auto-summary MCC-R1(config-router)#exit Configuring MCC-R 2 (H SRP G roup 1 Router) MCC-R2(config)#interface serial 2/0 MCC-R2(config-if)#ip address 172.16.100.2 255.255.255.252 MCC-R2(config-if)#no shutdown MCC-R2(config)#interface gigabitEthernet 6/0 MCC-R2(config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R2(config-if)#no shutdown MCC-R2(config)#router eigrp 10 MCC-R2(config-router)#network 172.16.100.0 0.0.0.3 MCC-R2(config-router)#network 192.168.1.0 0.0.0.255 MCC-R2(config-router)#no auto-summary Configuring MCC-R 3 (H SRP G roup 1 Router) MCC-R3(config)#interface serial 2/0 MCC-R3(config-if)#ip address 10.10.10.2 255.255.255.252 MCC-R3(config-if)#no shutdown MCC-R3(config)#interface gigabitEthernet 6/0 MCC-R3(config-if)#ip address 192.168.1.2 MCC-R3(config-if)#no shutdown MCC-R3(config)#router eigrp 10 MCC-R3(config-router)#network 10.10.10.0 0.0.0.3 MCC-R3(config-router)#network 192.168.1.0 0.0.0.255 MCC-R3(config-router)#no auto-summary CONF I GURI NG H SRP ON MCC-R2 From the Desk of Engr. Ahmed Saeed Join Us on Facebook (My Cisco Center Group) My Cisco Center (MCC) Block 6 PECHS Near Farhan Hotel 92-321-2418349

72

`

MCC-R2(config)#interface GigabitEthernet 6/0 MCC-R2(config-if)#standby 1 ip 192.168.1.100 MCC-R2(config-if)#standby 1 priority 110 MCC-R2(config-if)#standby 1 preempt MCC-R2(config-if)#standby 1 track serial 2/0 CONF I GURI NG H SRP ON MCC-R3 MCC-R3(config)#interface GigabitEthernet 6/0 MCC-R3(config-if)#standby 1 ip 192.168.1.100 MCC-R3(config-if)#standby 1 priority 95 MCC-R2(config-if)#standby 1 preempt Verify the configurations:

MCC-R2#show standby


73

`

Similarly on MCC -R3 MCC-R3#show standby


74

`

Implementing Wan Encapsulation OBJECTIVE:

To configure PPP WAN Encapsulation. TOPOLOGY


MCC-R1(config)#username MCC-R1 password cisco MCC-R1(config)#interface serial 1/ 0 MCC-R1(config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config-if)#clock rate 64000 MCC-R1(config-if)#encapsulation ppp MCC-R1(config-if)#ppp authentication chap pap MCC-R1(config)#username MCC-R2 password cisco (Other side Router parameters) MCC-R1(config)#exit Configurations On Mcc-R 2

MCC-R2(config)#username MCC-R2 password cisco MCC-R2(config)#interface serial 1/0 MCC-R2(config-if)#ip address 200.150.160.2 255.255.255.252 MCC-R2(config-if)#no shutdown MCC-R2(config-if)#encapsulation ppp MCC-R2(config-if)#ppp authentication chap pap MCC-R2(config)#username MCC-R1 password cisco (Other side Router parameters) MCC-R2(config)#exit


75

`

Verify point-to-point connectivity: R1#ping 192.168.1.2


76

`

TFTP SERVER OBJECTIVE: System

IOS and Running-Configuration to a remote TFTP server . TOPOLOGY

Configuring the Router in order to save these configurations and then copy to TFTP Server MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip address 10.10.10.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface serial 3/0 MCC-R1(config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config)#router rip MCC-R1(config-router)#version 2 MCC-R1(config-router)#network 200.150.160.0 MCC-R1(config-router)#network 10.10.10.

MCC-TFTP-SERVER (BEFORE COPYING FILES)


7

`

You can see, currently there are no files present on TFTP server. Which files you want to copy to TFTP server, first you should know their names.

As you can see the IOS image with extension of .bin is present, I will copy this IOS to TFTP Server, then starup-config.

To copy files to TF TP Server MCC-R1#copy flash: tftp: Source filename []? pt1000-i-mz.122-28.bin Address or name of remote host []? 10.10.10.10 Destination filename [pt1000-i-mz.122-28.bin]?

Writing pt1000-i-mz.12228.bin....!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! ! [OK - 5571584 bytes]

5571584 bytes copied in 3.162 secs (403737 bytes/sec)


78

`

Now verify the I OS on TF TP Server.

COPYI NG STARTUP-CONF I G MCC-R1#copy startup-config tftp: Address or name of remote host []? 10.10.10.10 Destination filename [MCC-R1-confg]? MCC-R1_startup-config Writing startup-config...!! [OK - 778 bytes]

778 bytes copied in 0.001 secs (778000 bytes/sec)


79

`

MCC-R1#

VERIFICATION :

You can see both, Router IOS and Starup-config has been copied to secure location, TFTP Server. NOTE: By following the same procedure, you can copy files from TFTP Server to the device.


80

`

FTP SERVER OBJECTIVE: System

IOS and Running-Configuration to a remote FTP server . TOPOLOGY

MCC-R1(config)#interface fa0/0 MCC-R1(config-if)#ip address 10.10.10.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface serial 3/0 MCC-R1(config-if)#ip address 200.150.160.1 255.255.255.252 MCC-R1(config-if)#no shutdown MCC-R1(config)#router rip MCC-R1(config-router)#version 2 MCC-R1(config-router)#network 200.150.160.0 MCC-R1(config-router)#network 10.10.10.

For FTP you need to create a user on FTP server. These credentials will be used to copy to files to FTP Server, this username and password is also configured on Router as it is. MCC-R1(config)#ip ftp username MCCFTP MCC-R1(config)#ip ftp password cisco123


81

`

Copy I OS: MCC-R1#copy flash: ftp : Source filename []? pt1000-i-mz.122-28.bin Address or name of remote host []? 10.10.10.10 Destination filename [pt1000-i-mz.122-28.bin]? Writing pt1000-i-mz.122-28.bin... [OK - 5571584 bytes] 5571584 bytes copied in 10.754 secs (518000 bytes/sec)

Copy startup-config MCC-R1#copy startup-config ftp : Address or name of remote host []? 10.10.10.10 Destination filename [MCC-R1-confg]? MCC-R1-Configurations Writing startup-config... [OK - 846 bytes] 846 bytes copied in 0.039 secs (21000 bytes/sec)


82

`

Verify on FTP Server:

NOTE: By following the same procedure, you can copy files from TFTP Server to the device.


83

`

Configuring SYSLOG Server

OBJECTIVE: To

Implement Syslog Server TOPOLOGY

:

MCC-R1(config)#INterface fa0/0 MCC-R1(config-if)#ip address 192.168.1.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#interface fa1/0 MCC-R1(config-if)#ip address 172.16.100.1 255.255.255.0 MCC-R1(config-if)#no shutdown MCC-R1(config)#logging on MCC-R1(config)#service timestamps debug datetime msec MCC-R1(config)#logging host 172.16.100.100 MCC-R1(config)#logging trap debugging

Now perform some tasks on router, they will be reported to syslog server.


84

`

Verification:


85

`

PPP MULTILINK LAB

CONFIGURATION ON R4:


86

CONFIGURATION ON R5:


8

Verification of PPP Multilink on R4 & R5 :


88


89

GRE TUNNEL

CONFIGURATION OF GRE ON R1 & R2


90


CCNA-Manual-200-125 final.pdf

Recommend Documents