Professor Messer Cisco Ccent Ccna 100 105 Icnd1 Course Notes v101s1

r.� Pfssor I� Messer

James "Professor Messer

!"#$%&&#" (%&&%")& *+&,# **-./0**.1 2334235 6*.72 *#8"&% .#9%& Wrien by James “Professor” Messer Copyright © 2017 by Messer Studios, LLC hp://www.ProfessorMesser.com All rights reserved. No part of this book may be reproduced or transmied in any form or by any means, electronic or mechanical, including photocopying, recording, or by any informaon storage and retrieval system, without wrien permission from the publisher. First Edion: March 2017 /":;%<:"= 1,=>#?@%;A%<%>9& All product names and trademarks are the property of their respecve owners, and are in no way associated or aliated with Messer Studios, LLC. “Professor Messer” is a registered trademark of Messer Studios LLC. “Cisco” and “IOS” are registered trademarks of Cisco Systems, Inc.

B:">+>A :>; 7+&,@:+<%" This book is designed to provide informaon about the Cisco CCENT/CCNA 100-105 ICND1 cercaon exam. However, there may be typographical and/or content errors. Therefore, this book should serve only as a general guide and not as the ulmate source of subject informaon. The author shall have no liability or responsibility to any person or enty regarding any loss or damage incurred, or alleged to have incurred, directly or indirectly, by the informaon contained in this book.

*#>9%>9& Introducon

+C

3D3 4 EC%"C+%?

2

The 100-105 Cisco ICND1 Exam Introducon to the Cisco CLI

1 1

2D3 4 .%9?#"= F8>;:<%>9:@&

2

1.1 - Introducon to Ethernet - The Ethernet Frame 1.1 - The OSI Model and TCP/IP Model 1.1 - Encapsulaon and decapsulaon 1.2 - Common Port Numbers 1.2 - TCP Header 1.2 - UDP Header 1.2 - TCP Communicaon 1.3 - Enterprise Infrastructure Components 1.4 - Network Architectures 1.5 - Network Topologies 1.6 - Network Cabling 1.7 - Troubleshoong Methodologies 1.8 - IPv4 Addressing 1.9 - IPv4 Address Types 1.10 - Private IPv4 Addressing 1.11 - IPv6 Addressing 1.12 - Conguring IPv6 Addressing 1.12 - Troubleshoong IPv6 Addressing 1.13 - IPv6 Neighbor Discovery Protocol 1.13 - IPv6 Addressing with DHCP and SLAAC 1.14 - IPv6 Address Types

GD3 4 H1. I?+9,J+>A F8>;:<%>9:@& 2.1 - LAN Swching Concepts 2.3 - Troubleshoong Cable and Interface Issues 2.4 - Introducon to VLANs 2.4 - Conguring VLANs 2.4 - Troubleshoong VLANs 2.5 - Conguring Interswitch Connecvity 2.5 - Troubleshoong Interswitch Connecvity 2.6 - Conguring CDP and LLDP 2.7 - Conguring Port Security 2.7 - Troubleshoong Port Security

3.0 - Roung Fundamentals 3.1 - Introducon to Roung 3.2 - Understanding Roung Tables 3.3 - Roung Metrics and Administrave Distances 3.4 - Router on a Sck and Layer 3 Switches 3.5 - Stac and Dynamic Roung 3.6 - IPv4 Stac Roung

1 2 ! ! ! " " "

5 # # $ $

9 10 11 11 12 13 14 14

2K 16 16 18 19 19 20 20 21 21 22

GL 24 25 26 27 28 29

3.6 - IPv6 Stac Roung 3.6 - Troubleshoong Stac Roung 3.7 - An Overview of RIPv2 3.7 - Conguring RIPv2 3.7 - Oponal RIPv2 Features 3.7 - Troubleshoong RIPv2

LD3 4 6>$":&9"8,98"% I%"C+,%& 4.1 - An Overview of DNS 4.2 - Troubleshoong DNS 4.3 - An Overview of DHCP 4.3 - Conguring DHCP 4.4 - Troubleshoong DHCP 4.5 - Conguring NTP 4.6 - An Overview of Access Lists 4.6 - Conguring Standard Numbered Access Lists 4.6 - Conguring Extended Numbered Access Lists 4.6 - Conguring Named Access Lists 4.6 - Troubleshoong Access Lists 4.7 - An Overview of Network Address Translaon 4.7 - Conguring Network Address Translaon 4.7 - Troubleshoong Network Address Translaon

5D3 4 6>$":&9"8,98"% (:+>9%>:>,%

5.1 - Conguring Syslog 5.2 - Conguraon Management 5.2 - Discovering Devices with CDP and LLDP 5.2 - Switch and Router Licensing 5.2 - Conguring Timezones 5.2 - Conguring Loopback Interfaces 5.3 - Inial Device Conguraon 5.4 - Conguring IOS Passwords 5.4 - Conguring Banners 5.4 - Device Hardening 5.5 - Upgrading and Recovering IOS 5.5 - IOS Password Recovery 5.5 - IOS File System Management 5.6 - Troubleshoong with Ping 5.6 - Troubleshoong with Traceroute 5.6 - Logging at the Terminal

30 31 32 !! !"

35

MK !# !#

37 37 39 39 41 42 42 "! "" "#

47 49

53

50 51 51 52 53 53 54 54 55 55 56 58 59 60 60 60

Introduction

If you're in the Iomaon Tecology dusty, ten you kow that Csco cercaos ae some of the most accepted (and most diicut) cetfcatons to ear. Cisco certicatos rage om a fundamenta etwoing knowedge to te most advaced etworg tecooges today. Cisco certficaton exams test you o the specifcs o routers, switces ports protocos ad much moe 've created these Course Notes to help you throug te detais tat you eed to kow for te exam. Best of luc wth your studes! - Proesso Messe

The Cisco CCENT/CCNA Roung and Swtchng cerfcaon Eang the Csco Ceried Network Assocate Roug ad Switcng (CCNA R&S cetcaon equres ethe the completo of two sepaate exams (te CND 100105 ad ICND2 20005 o the completo of a sgle combied exam (the 200125 THE INERCONNECING CISCO NEORK DEVICES 1 (CNDl) 100-105 EXAM ese ICND 0005 Course Notes ocus on the contet equed to pass the st haf o te CCNA R&S. assing te CND 100105 exam eans you te Csco Cetfed Enty Netwoing echncia CCENT) cetcaton so you ca ear some cedetas as you move away towads acievg you CCNA R&S cetfcaon. Heres the breakdown o eac tecology secton and te percetage of each topic o te 100105 exam: Secto .0  Network Fudamentals  20% Secto 2.0  LAN Switcing undametas  26% Secto 3.0  Routng undametas  25% Secto 4.0  astucture Sevices  5% Secto 5.0  astucte Mainteance  4%

How to use ths book Oce you're comortabe wt a of the sectos i te oica Cisco 0005 exam objectves you ca use these otes as a cosoidated summay o the most mportat topcs. These Couse Notes folow the same format ad numbering sceme as te ofica exam obectves so t shoud be easy to coss referece these otes wth al of you oter study materials.

© 2017 Messer Studis, LLC

Professo Messer's Cisco CCENT/CCNA 100-105 ICNDl Course Notes  vPage

http /wwPrfssoessecm

p Pr

Professor Messer's

Cisco CCENT/CCNA 100-105 ICNDl Course Notes

hp:/ /www.PoessoMesercom

The 100-105 Cisco ICNDl Exam

• Exa t 90 nut • 45 t 55 qutn

100-105 Exam Objectves

• • • •

10 - Ntrk Fundantal (20%) 20 - AN Siting Fundanta (26%) 30  Rutng Fundantal (25%) 40  Infatutu Srvi (15%)

• Sring rag btn 300 and ,000 nt • Pang  i givn at

• 50 - Infratrutu aintnan (4%)

t bgnnng  t xa

Introducton to the Csco CU

a a g • ntrfa t OS tug a CU •  ut at t ttng n t t dv • Cand in Inta • A iat rult in a n f abld txt ·I • Sial ab t a nl nta • Pt - T ya intfa • Ar t ntrk , . • Baud at  T d f t data (9600 baud) • Tlnt, SSH • Parity  Nn Serial cae to a consoe nterface • Data bit - 8 • Fr t utr • 9-in ia nnt r SB intrfa • St bit  1 • Fr t t  ut • Fl ntl  nn • 9in ria nnt, RJ45 nnt, SB ntra • Yu igt nd a SB t ria abl � - · Confgurat i • And a t  adatr Serial prt Po: Bud R:    d  ne • 960 •  EXEC d lm Bi Stopbt Flow ct • Exut ad a a nral u 8 • N guan ang ald . Adva Couan Ons • Pivilgd EXEC d K  • Enabl d • Inal gin  t u d •  " t nt vigd d • And  t lav How to connect

noe

1.1  Introducion to Ethernet  The Ethernet Frame Field

Byes

Descrpton

e

7

enn one d zeo d o yncnon (000.)

F



 r   g      

Don A Ad



n  d f  do di

orc A Ade



en A ddre  e oc dece

Ety

2

i t data nai t ayad

Pod

4 

Lr  nd hh 

CS



 C S  CRC ks   

Preamble © 27Mesr Sdios, LC

SFD estnao MAC

Souce C

Type

ayoad

Prfss Mss's s ENT/NA 1-5 IND s Nos  Pg 

FCS htp /wv.Pfesessecm

-- · 

1

•



  .



 





Unlock the enre book at hp://www.profesormesse.com/icnd 1









 

  

 Jt

•

t





-

.

1

�

•

.

. •

,.

..





'

'

.



  

,

1 

•

 '

.

·-

View every page: htp://www.professormesse.com/icndl

.7 - Troubleshootng Methodologies Fault isoaion and documentaon • Idenfy where the problem migt be • And where it s not • Lmt the scop e and sa ve tme • Random g uesses aren 't efc ent • Docmentaton • We dont document enoug • Someone may have done ths b efore • Capture yor nque loc al perspectve

Veify and monto • Does your proposed x work? • Test and conrm

• Some xes reqr e ongong monto rng • ntermtent sse s • Conf rm te re soluon • May take mnutes,  ours or day s • Don't forget to docment • t wl save yo

Resove or escaate • The clock s tcking • And tme is almost aways drectl y relatabe t o money • Yo're lookng for te roo t cause • Address te root cau se and solve te  sse • Wat appens if te roo t cause cant b e fond? • Escalate to the next person/ organizaton n te lst • Yor organz aton may ave an escala on process • Balances tme with money

next tme

.8  1Pv4 Addessng C ss

. Ladig . 8,ts

Nwk  8is

eang

 ·Is

Number of etos

Hosts pe eto

Delt S  nt Ms

Class A

Ox (1-26)



24



4

2..

 B

Q 8-9



6

,8

6

0

ass 

lOX (192-223)



8

0715

5

555555.

 (439

Not defn

Not e

Not e

Not ene

Not ne

Cass D (muI cat)

 E (reseved)

1 24

255

Class A

t

Nt

Nt

Not









0

0

11111111 00000000 00000000 00000000

Network (8) I  ____Hm(24____ 255

Class B

0

Not



255

0

0

11111111 11111111 00000000 00000000

New( 16 I .__s{6  255

Class C

255

255

0

11111111 11111111 11111111 00000000

The constucton of an 1Pv4 subnet • Network address • The rst P addr ess of a s bnet • Set all ost bits t o O (0 deci mal)

• First usabe host address • ne number higher than te net work address • Network broadcast address • he ast P address of a s bnet • Set all host bts t o 1 (255 decim al) • Last sabe ost address • ne nmber lower than te broadcast address

.Nwr (4  _I  H  © 07 M Sudi, LC Pf r' c ET/A -5 Dl r  Pag 

hp 

See all of these great notes: hp://www.professormesse.com/icnd

' 1 i

-



 

 , 1 .  1

1





.

•









.



   

    

  -

.

.

.

.



.

.

.

.

'



M

• 

�

•

t

'.



+ 



 

.

.

.





1.14 - 1Pv6 Address Types {contnud} nk ocal • Commuicate o the oca subet • Evey 1Pv6 terace gets a  oca addess •fS0::/0 • f80 + 54 zero bits 64 bt teace ID • Eectvey becomesf8 0::/ 6  • Routers wo't orward these pacets • Everytg stays o the oca etwo •Used mosty or admstave purposes • Roug, Neigbo Dscovey Protoco etc.

Socted-node multcast address • Evey devce ceates a Pv6 soicted-ode mucast addess •Commoy used  NOP •Uses FF02:::FF /0

•Wi=M

oictdoe

F02:00000000:0000:0000:0001:F****** • Loca subet • Based o te Pv6 uicast addess

Mtcast • Commuicate to mupe devices simutaeousy • Witout commucag to eveyoe

ff   :

• Commoy used o routg protocos • y routers ruig that potoco wi ste

ff 8 :

Prefx

Scop  o  A eve o e o eo

 : te o  A deve t  t rgo o  A e  e m og

 : Go   IAA d

• Mucast addresses sta with 111111 •FF00::/8

ff :

ee o  A m oop

Modifed EU64

Atoconguraton

•Use the MAC addess to create a statc Pv6 addess • You just eed te 1Pv6 pex

• tateu autocoguato •DHCPv6 • P addess segs are detemed by the DCP sever

• Add addoa bts to te 4-bt MAC addess to create a EU64 addess • p the 7t bt ad add FF F

• tateess addess autocoguao (AC) •Use NP to deteme the subet prex •Use the moded EU64 to compete te addess • No server eeded

• Easy to cogue •Taes secods •Aways the same 1Pv6 address

• More Pv6 Addessig wit DCP ad AAC

• ee moe Cogurg 1Pv6 Addresses nycast

• Cogue the same 1Pv6 aycast address o deret devces • oos ie ay othe ucast addess • Pacets set to a aycast addess ae deiveed to the cosest iteace

# ipv6 address 2001:1:1:1:7/128 anycast

R 1 itc i  G/  up, Un c I  J • O, ·�   F ll  H(s) :1 7 Sb S !! V 88.   6 1

•Aouce te same route out o mutpe data ceters • Cets use te data ceter cosest to them • Aycast DN

I



  2 :2 8A G2 : ::2 ff& U  bytes C ro $g   o ry 0 s  e<    u   ' O   n  D   ND a   3  D dve ech m   pMe D dv a      u e   e 9  

_ .,• I

� "

© 2017 Mr S dio , LC

P ' c ENT/A -5 IDl u  ag 5

-

hp wv.ofom

�- _.

-

·

�- -





.-

. 



�-



_



�







,.....

 ...• •

2.5 - Confguring lnterswitch Connectvity 802.lQ trunking • Take a normal Ethernet frame Pream ble

VN10-�· VN20_

FD Desnon MAC

Souce 

Typ

od

FC

• Add a VLAN header in the frame

Etherne Swich

a

FD Ds M

c MA

VN

Type

Payload

FC

• VAN IDs - 12 bits long, 4,094 VANs • "Normal range   through 005, "Extended range  006 throgh 4094 • 0 and 4095 are reserved VLAN numbers

Ethere Swch

VN0. V20 

• Before 802.lQ there was SL (InterSwitch nk) • SL s no longer sed; everyone now uses the 802lQ standard The natve VLN • Ths s dferent than the "default VLAN • The defat VAN s the VLAN assgned to an nterface by defaut

runk conguraon • Use #p   • Congures a trnk to se all known VLANs

• Each trunk has a nave VAN • The nave VAN doesn't add an 802lQ header

• Dynamc Trnking Protoco (DTP) • Atomacaly congres trunkng arameters • Dene the tye of trunk • IEEE 802lQ S or negotate

• The nave VLAN connects swtches without a tag • Some devces wont tak 802lQ • Just use the nave VAN !

• Dene the admnstratve mode • Do not trunk always trunk or negotate a trunk

• Natve VLAN should match between switches • You II get a message f the VLAN IDs dont match 1

Swtchport modes • access

Tr commads

• A nontrunked ort • trunk • A trunk ort

•Switch(cong-if)#sp   •Switch(cong-if)#sp   

•Switch(cong-if)#sp  

•dynamic desirable • nitates and resonds to trnk negotaon messages •dynamic auto • Does not iniate but does resond to trnk negoaon messages

•Switch(cong-if)#sp   

•#   •#   

2.5  Toubeshoong lnteswitch Connecvity Troubeshootng VLN configurations

• Check VLAN assgnments on the swtch • This s one of the most common ssues yoll nd • Check VLAN assgnments between swtches • This issue usally aears drng inita conguraton • Very the list of trunked VLANs • Create good documentaton • Check the dynamic trunk assgnments • Another intal confg gone wrong

Checking VLN assgnments • ist all VLANs and their associated interfaces Switch#s   Switch#s  • ist all interaces associated with a secfc VAN Switch#s    • View a secfc interface VLAN confgraton Switch#s  O/ p • View a ist of MAC addresses and their VLAN assgnments Switch#s  

Dynamc trunking

• Dont confgure dynamc trunkng on one sde and • oth swtches have to be congred with the right trunking mode statc on the other • Dont confgre both sides as dynamic auto • oull end u with an access ort wth no trunkng • ts not as "auto as you mght like © 2017 ti, L

f '  E/ -5 I  · g 

h w 

Read more about this book: hp://www.professormesse.com/icndl

.,

.

.



-

-

· .

  .

. �:•

.

3.6 - 1Pv4 Stac Roung Host and etwork oues • Sac oue ex hop ca be a IP addess o ieface Routerl(confg)#ip route 10.10.20.0 255.255.255.0 1010.50.2 Routerl(confg)#ip route 101020.0 255.2552550 s0/3/0 • Desao s based o he mos specfc oue • A mas of "all oes is he mos specic • Roue o a specc P add ess/hos • Use a mas of 255. 255.255.255 Routerlconfg)#ip route 10.10.20.3 255.255.255255 10.10.502 outer#shw ip roue aic

S S

10.000/8  varaby ubnetted, 9 ubnet, 2 mak 00200/24  drecty connected, Sera0/3/0 00202/32 [l/0] va 00402

Net hop P addess vs erae • Sac oue o  ex hop IP addess • Foadig oue eeds he L2 addess of he ex hop P addess • ARP fo 10  10  5 0  , ee he 2 fame ad sed  o he esoed MAC • Sac oue o ex hop eface • Foadig oue assumes he desao P addess s decly coeced • ARP is se o he desao IP addess hough he ex hop eface • Po-opo coecos • Use ex hop eace o ex hop IP addess • Mulpo coecos • Use ex hop P addess Routerlconfg)#ip route 1010.20.0 255.255.255.0 1010.502 Routerlconfg)#ip route 1010200 255255255.0 s0/3/0 Populang a stac rote

• Sac oue h ex hop ieace • Ieface has o be up/up • Sac oue h e x hop P addess • Mus hae a oue o he IP addess • Wihou hese a oue does' appea i he abe • Nee shos up • Foce a oue o appea h he pemae eyod Routerlcong)#ip route 10.10.203 255255.255.255 S0/0/1 permanent • The eface o oue sll has o be aaiabe • The paces ae dopped oheise Defat outes

• A oue he o ohe oue maches • he "gaeay of las eso • A emoe sie may hae o y oe oue • Go ha ay ·> es of he od • Ca damacaly smp y he oug pocess • Wos  co juco h al ohe oug mehods

©

7 Messr Stdios, LC

Router2#w   Codes: L - loca  - cnnectd, S  satic,  - P M - mbil 8 - BG? D , X  extena I , p 2  SP NS type 1 N2 -, OSF A· SS  eKtena E - SP etenal p 1 E - OSPF exeal te 2 E • EP   II,   I v-    v,      * - cndae efaut,  - pr-ser staic re  - O P - priodi dnlde sac ue

I Gtea  lst rert is 0 .0 0

to netrk   0 

  v ,  ,   C 0.2.0/2 s dety conncted, Ggabtthenet00  10..21/32 is dietly conncted Ggabitterne00  44   ,  10.2/32 i dietl  conncted, Sril0/3  000.00 [J i 10.    /wPofoecom Professor Messe's Cisc o CCENT/CCA100-05 ICDl Course otes· age9

There's a lot more right here: hp://www.professormesser.com/icnd

3. 7 - An Overview of RI Pv2 Dynamic routng protocols • isten for subnet nformaton from other routers • Sent from router to rouer

IGP (Interior Gateway Protoco) • Used wihin a snge auonomous system (AS) • No ntended to route between AS • hat's why theres Exerior Gateway Protocos (EGPs)

• Provide subne nformaon to oter routers • Te other rouers wa you know • Deermine he best path based on te gathered nformaon • Every roung protocol as its own way of dong tis • Wen nework changes occur, update the avaiabe roues • Dferent convergence process for every dynamc roung prooco

• 1Pv4 dynamic routng • OSPFv2 (Open Shortest Pa First • RIPv2 (Roung nformaon Protoco version 2) • EGRP (Enanced nerior Gateway Routng Protoco) • 1Pv6 dynamic roung • OSPFv3 • EGRP for Pv6 • RIPng (RP next generaton)

Whic routng protoco to use? • Wat exacty is a route? • s it based on he stae of the ink? • s it based on ow far away it s?

nk state routng protocols • nrmaton passed between routers s reaed to e curren connectvty • f i's up you can get tere. • f i's down you can.

• How does the prooco deermne he bes path? • Some formua is apped to te criera o create a metrc • Rank te roues from bes o wors

• Consider the speed of e nk • aster is aways beer rig?

• Recover aer a cange o he nework • Convergence me can vary widey between routng protocos

• Very scaabe • sed most often n arge networks

• Standard or proprieary protoco? • OSPF and RP are standards basc funcons of EGRP are standard (RFC 7868)

• OSPF S-S • Large scaabe roung proocos

Dstance-vector routng protocos • nformaon passed beween rouers contans roung tabes • How many ops" away is anoter nework? • e decidng  vector" s he dstance"

• Good for smaer neworks • Doesnt aways scae we to very arge neworks • RIP RIPv2 BGP

• suay automac - very te configuraton

Routerl#dbg ip  v I n  s n  P: c 2 a trom 172.62 n /3/ 9804  000   h 192.6830/24 via 00.0 n  hops

Sam .10

Routerl

u#  r et  n    #   2   2, n / 9800/4  000   h

Suet 726/4 Swltch3

bn 83

Teal'c .10

©  Mr dios, LL C

Pf ' c ENTNA -5 IND N  - Pg 

hpw 

-

,'



�















-

-

-

4.4 - Troubleshootng DHCP onrm you elay aget • If the DHCP s eve is't i or P sbet, o eed anip helper-ddress •  te DHCP sever s oca, o ea s eqed • Roter-oa-stck • Separate sbets • Need a ip helper-ddress o eac sbteace • Use show ip iterfce • sef we o cat vew the cofgato

�outer2#shw ip interface g0/0 igabitEternet0/0 i up, line protocol i up (connected) Internet addre i 10.10.30.1/24 Broadcat addre i 255255255255 Addre determined by etup command MTU i 100 bte  Helper addre i 172.6.1.  Drecte roacat orarng i diabed Outgoing acce lit i not et nbound acce lit i not et Proxy ARP i enabled Security level i default Split orizon i enabled CMP redirect are alay ent

No DHCP ddss ssd

DHCP ddss s ssd wh bd o

• Te DHCP ea aget ses the ea iteface IP addess as the sorce P addess • The DHCP seve copaes te etwok cogao to the ea P address • The sbet as sets te rage

• ts eas to iscogre a DHCP poo • So a cofgato optos • Yo a ot ave te rigt address forato

• DHCP ea teface ad DHCP poo etwor age st atc • Wtot a atc, a P addess is ot oeed

• coect DNS va es • No ae resoto bt P woks

• If o have coectvit te ae the copaiso • Check te ip helper-ddress iterface • Copae it to the etwork cofgato i te poo

• coect deat gatewa assged • Cocates to devces o te oca sbet o

• TP addess is corect assged • VoIP poe doest dow oad a cograo fe

t  lwys te wok • Cetrazed DHCP serves rel o a stable/vad etwo coecto • Yo cat get a P addess ess theres a ik • Use pig ad trceroute to vadate te coecto • The i betwee the DHCP ea terace ad the p heper-addess Bw h DHCP  d h ly

• DHCP is al abot boadcasts • 2.255255.255  "a oes broadcast • Roters do ot orward DHCP boadc ast pacets • O a ote broadcast packets

D ouehoog • Cor the ip helper-ddress terfaces ad P addesses • Oe wrog teface o address s fatal • DHCP poo etwork cofgato sod atc ea iterface P • Cec a poos IP add esses ad sbet ass • Check te etwok betwee DHCP sever IP address ad DHCP rea P addess • Coecvt s cca

• Mae sre te DHCP clet s a VLAN with a ip helper-ddress • Check oca AN betwee the DHCP rea • Boadcasts ae ve liitg aget ad te DHCP ciet • Basic coectvt is rered • Eas to be paced i te wrog VLAN

45 - Confguring NTP NTP (Nwok me Poool)

• Swtces, roters, ewals seves, workstatos  Eve devce as its ow cock • Scozg te cocks becoes crtca - Log les, atetcao forato, otage detais • Atoatc pdates - o fashg 12:00 ghts • Fexibe  o coto ow cocks are pdated • Ve accate  Accac s bette ta  ilisecod o a oca etwok © 2017 Messer Studis, LLC

Professor Messe's Cisco CCENT/CCA 100-05 ICDl Course otes  age 39

http /wwPrfssoessecm

4.6 - Confguring Standard Numbered Access Lsts Standard numbered ACs AC syntax • Standard ACL • Souce IP addre ss is the only citeria

• Standad numbered ACs use access list numbes between 1-99 o 1300-1999 • The gap s reserved for other protocols (AppleTalk, DECnet IPX etc.)

• Numbered AC • ACs ae efeenced by number instead o a name

g # {1-99 I 1300-1999} permit I deny} source [sourcewildcard]

I any}

g # 1 deny 10.10.1.77 g # 1 permit all

Configing standa d numbeed ACLs

Vewing ALC configat on nformation

• Choose route interace and directon •R4#   • Put a standad AC L nea the destnat on IP - pevents nadvert ent dscards • Vew al ACs • Use the So urce IP addess  make sue to use t he corec t decto n •R4#   / • Ceate the ACs using global conguraon commands • Interace nformaton shows whch • opdown matching  deault s to deny f nothng else matches ngong and outgong ACLs are associated wth the interface • Add the ACL to the nteace ip aooess-grup 1 in ip aooessgrup 2 ut

• Prevent Sam rom accessng Jack's sever

Routr4(config)#aess-ls 1 deny 10.00 Rout(ong)Uaessls  prit a oog# g0/0 (#p aces-roup  

• Pck a locaon c losest to the des naon

0Su.bne0t4 g

g7/6gn04 Subnet3 \   , - �_ /1 .l m Sswi,ch2l � - S · g!  (  <1O-i 2 HLadr ·2 Routerl gO/�g� .1 Rut3 Router

Danfel

s

t4

Jack

4.6  Co nfguring Extended Numbered Access Liss Extended nmbeed acce ss lists !IP Heade • Simar to standard numbered ACLs • op-down irst-match logc ingess or egress iterng • Now youll have many more ilteng optons • Souce IP address desnaon P addess protocol

Extended nmbered 1Pv4 AC

':�-------4bys------------- Vrsio

Typ o Svic

Idti

Tm o  -

tl Lgth

Flgs

Prol

rgm Ot

Hd Chksum •

 P Addrss

stiio IP Addrss • Synta x is smilar to the standard number ACs Os d Pddig • Adds addtona matching eywods • Uses number anges 00-199 and 2000-2699 • protoco - ip tcp udp icmp access list 101 deny iomp any any • souce_p souce_pot dest_ip dest_pot access list 101 deny top 10.10.10.0 000255 10.10200 0.00255 eq 80

© M o

LC

Pf   'CCENTCNA  5 ICND C N  P

hnp

o m

 

I

-

--

:



•





- 









•



e

I, •



:















 







"

.



-  

1



-

 



'

"



 





 

 



. 







  



4.7 - Confguring Network Address Translaon (contnued) outerl#shw ip nat statistics Tota tranation: 3 (0 tatc, 3 dynamc, 3 extended) utide Interface: Sera0/3/0 Inde nterface: GgabitEternet0/ Hit: 68 Mie: 35 �xpred tranaton:  Dync appng:

Monitoring NAT oveload/P

Router#sw ip nat ro nide goba cp 92.1.1.1:024 cp 92.1.1.1:025 cp 92111:027

translations

nide oca 1.10.20.51027 1.10.20.71027 110201:1027

Outide oca 04.2.9.63:8 4.2.9.63:8 042963:8

Outde goba 104.20.1963:80 104.20.1963:80 104201963:80

4.7  Troubleshootng Network Address Translaton Toubleshootng best-pactces    • U ACL • Ck   •ip nat insideip nat outside • W  AC   NPA   •   AC       NA     •       • AC     NA  • NA     •               •  k    • A     k  Statc NA toubleshootng •    •      '    nsd ba addss IS snd

Dynamc NA ACL •  AC      k  

outer(cog)# g0/0 outer(cog-f )#ip  inside outer(cogf )#interface s0/3/0 outer(cogif)# nat outside outerl( cog-if )#exit

outer(cog)#

nat inside source static 10.10.20.10 92.1.1.10

outer(cog)# outer(cog)#

nat inide ource static 10.10.20.50 92.1.1.50 nat inside source static 10.10.2070 921170

outer(cong)# g0/0 Router(congf)# nat inside Router(cong-f)# s0/3/0 Router(cong-f)# nat outside Router(cong-f)# Router(cong)#sss 1 permit 10.10.20.0 0.0.0.255 Router(cong)# nat pool midway 94.1.1.1 94.1.1.2 netmask Router(cong)# nat inside source list  pool midway

• A ACL     NA 

255.255.255.0

Dynamc NA poo •    v   •  NA        

outer(cong)# g0/0 outer(cong-if)# nat inside outer(cong-if)# s0/3/0 outer(cong-if)# nat outside outer(congif)# outer(cong)#sss 1 peit 10.10.20.0 0.0.0.255 outer(cong)# nat pool midway 94.1.1.1 94.1.1.2 netmask

• Ck     

outer(cong)#

show ip nat statistics

255.255.255.0

nat inside source list 1 pool midway

• Y'    N ' k NAT oveload / P toubleshootng • A    N •       v k • '   v  • Y      v qk © 2017 Messer Studis. LLC

outer(cong) interface g0 0 outer(cong-if)# nat inside outer(congif)# s0/3/0 outer(cong-if)# nat outside outer(cong-if)# outer(cong)#sss 1 permit outer(cong)# nat inside source

- 10.10.20.0 0.0.0.255 list  interface s0/3/0 overloa

    000     

http /wwPrfssoessecm

-

-

-

-

5.3 - Inital Device Confguraton Boong 1OS •Performs a PT • Power n elf est • asic hardwae check

What o need • Hostname

• oots from RM • ootstrap program s copied into RAM

• Enable password •A less-sece version o the enable secret passwod • Remove t afte configrng the device

• Enable secet passwod •Potects privleged EXEC and congaon modes

• ootstap boots an I image o RM Monito (ROMMON} • ROMMON s used fo adminstratve and maintenance prposes •  loads the statup-cong le

•Vrtual terminal password •T e passwod sed when accessing te devce ove the network

• Loaded into RAM as running-confg na ece congaon •No configuaton le? No problem.

•Confige NMP management (yes or no) •Physcal nterface o management • Need P address and subnet mas

•ystem Confgaon Diaog (etup Mode) • Men-drven configuraton on a new devce •Yo don't have to use etp Mode •Confgre the dvevice toug e temal

54 - Confguring 10S Passwords Authentcatng to 10S devces •Most organzaons wil se an extenal AAA serve •Authentcaton, Authorzaon, and Accounng •No passwods on te I devce

User mode and privieged mode passwods •Console password • Protects connecons trogh te console port

•You migt want a backup login

•vty passwod •Potects connectons trogh te

•Just in case •Potental secrty concern •toe te passwords secuely

vta teletype port (telnet o ) • Enable passwod •Prompts wen enteng enable mode

Teletype lies •Inbound connecons ae made over TY lines •Many dieent TY lnes on an  device

•CTY - Consoe inteace •TY  Asynconos seria interaces •AUX  Auxiliary pot •VTY - Virtual teletype/vtal teminal •View wit shw le

• t no passwods configured no passwods ae reqred •A bad dea Atentatg to 10S deves • Most oganzaons wil use an externa AAA serve •Athencaton Atorizaton and Acconng •No passwords on the  devce

•You mght want a bacp login •st n case •Potenal security concern •tore te passwods securey �outerl#cg ina

Confgurg es •Consoe password

•elnet/ passwod

• Enabe/Privleged EXEC mode passwod © 2017 Mr Studio, LLC

�nter confguration comands, ouer(cong)# cns 0one per line. ouer(cong-line# sgc ouer(congline# Rouer# mna ner confguraion comands, one per line. ouer(cog)# vy O 4 ouer(congline#  ouer(congline# ouer# na ner conguraion comands one per ne. outer(confg#b sc chynn

Pfess esse's sc ENT/NA -5 INDl se Nes  Page 54

End with CNTL/Z.

End wih N/

End  N/. http wom

See the enre book: hp://www.professormesse.com/icndl

-

" I





-

5.6 - Logging at the Terminal (contnued) teinal monitor • M h gs   SSH sss Houter4�1na monitor Router4# 000078: Mr 7 20:58:8303: %LIPROO-5UPOW: Lie protoco o Iterfce V2 chged stte to do 000079 ,r 7 20589,327 %LIEROTO5UDOW Lie protocol o Iterfce FstEtheret0/2 chged stte to do Router4# 000080 ,r 7 2058:20,342 %LI3UPDO: terfce FstEtheret0/2 chged stte to do Router4# 00008: ,r 7 20:58:28,562: %LIK3UPDO: terfce FstEtheret0/2 chged stte to p 000082 ,r 7 2058:29,569 %LIEROTO5UDOW Lie protocol o Iterfce FstEtheret0/2 chged stte to up Router4# 000083 ,r 7 20:58:56.656: %LIROTO5UDOW: Lie protoco o Iterfce V2 chged stte to p Router4# loggg oter4#w Syslog loggig ebed (0 messges dropped 0 messges rteimited 0 shes 0 overrus  disbed terig disbled)

No Active Messge iscrimitor. No Ictive essge Discrimitor. Cosoe oggig: eve debggig 83 messges ogged  disbed lterig disbed Mitor loggig eve debggig 6 messges ogged xm disbed lterig disbled Loggig to: vty(6) Buer oggig eve debggig 83 messges ogged l disbed lterig disbled Exceptio Loggig size 4096 bytes Cout d timestmp oggig messges: disbed File oggig disabled Persistet oggig: disbed No ctive lter modes Trp oggig level iormtio 87 messge ies ogged Loggig SourceIterce:

VR me

og Buer (4096 bytes 8,37 %LK3UOWN: Iterce stEtheret0/3 chged stte to p

Severity leels

• Lggg vs c b dvduy c gud • Ech svc c hv 's w vbsy • gs  dspyd f h v d w ( sv) • Cs gs loin onole 7 0 • M gs 1 loin monitor 6 2 • I bu gs loin ere 4 3 • Sysg 4 loin tra 6

5



 



I  



 



 



W 



N   

Dbuggg  f • M OS  csss   • My df dbug ps • bg dbug w us dd  sucs • Mk su yu hv h vhd Roter4#o roe  • If yu' ccg v ssh, b su  b ggg Roter4#teinal monitor © 2017 Messer Studis, LLC

If    

Professor Messe's Cisco CCENT/CCA 100-05 ICDl Course otes  age 61

http /wwPrfssoessecm

Pfsr M�

Thank you for viewing this sample of my ICND Course Notes. Good studies! hp://wwwprofessormessecom/icnd