Boson 6

89 Boson NetSim for CCNA Lab Manual
NETSIM FOR CCNA LAB MANUAL

Stand-Alone Labs
Stand-Alone Labs
Lab 1: Connecting to a Router
Objective: Become familiar with the Cisco Router.
Lab Equipment: Router 1 from the eRouters menu
Rler lle lal las lrisle1 lca1ir, lle Rctler l Wir1cW Will cer, ar1 lle le\l |ress Erler lc Slarl" Will aear.
Click inside the Router 1 window, and press the ENTER key to get started. You are now connected to
Router 1 and are at the user mode prompt. The prompt is broken into two parts: the host name and the
mode. Router is Router 1s host name, and the > prompt indicates user mode.
Press Enter to get Started
Router>
Next, type the enable command to get to the privileged mode prompt.
Router>enable
Router#
To return to user mode, simply type disable. From user mode, type logout or exit to exit the router.
Router#disable
Router>
Router>exit
Router con0 is now available
Press RETURN to get started
Lab 2: Introduction to the Basic User Interface
Objective: Become familiar with the command-line interface (CLI), user and privileged mode, and basic help
and show commands.
Press the ENTER key to get to the router prompt.
Router>
The interface is now in user mode. At the user mode prompt, type the command that is used to view all
the commands available in user mode.
Router>?
Type the command used to enter privileged mode.
Router>enable
Router#
Type the command that will allow you to view the available commands in privileged mode.
Router#?
1.
2.
3.
4.
1.
2.
3.
4.
Stand-Alone Labs
Type the command that will allow you to see all of the show commands.
Router#show ?
!,e lle ccrrar1 llal Will allcW ,ct lc see lle aclie, cr rtrrir, ccrltralicr.
Router#show running-cong
At the MORE prompt, press the SPACEBAR key to view the next page of information.
SPACEBAR
Finally, type one of the commands that will log you out of the router.
Router#exit
OR
Router#disable
Lab 3: Introduction to the Basic Show Commands
Objective: Become familiar with the basic show commands.
Press ENTER to get to the router prompt.
Router>
Enter privileged mode.
Router>enable
Router#
Disla, lle aclie ccrltralicr ir rercr,. !le ctrrerll, aclie ccrltralicr scril rtrrir cr lle
router is referred to as the rarr|rg-oor|g in the routers command-line interface (CLI). Note that privi-
lee1 rc1e is retire1 ir cr1er lc access lle rtrrir ccrltralicr. !le rtrrir ccrltralicr scril
is not automatically saved on a Cisco router and will be lost in the event of power failure. The running
ccrltralicr rtsl le rartall, sae1 Will lle copy command (discussed in a later lab).
Disla, lasl rercr,. llasl rercr, is a secial |ir1 c rercr, llal ccrlairs lle ceralir s,sler
irae lle(s) cr lle rctler. Urli|e retlar rctler rercr,, lasl rercr, ccrlirtes lc rairlair lle lle
image even after power is lost.
Router#show ash
By default, the routers CLI maintains in memory the last 10 commands entered. The show history com-
mand displays simultaneously all of the past commands still in router memory.
Router#show history
Press the CTRL+P key combination to retrieve the previous command you typed.
Press the DOWN ARROW key or press the CTRL+N key combination to see the next command in the his-
tory buffer.
Use the show protocols command to view the status of the current Layer 3 routed protocols running on
your router.
Router#show protocols
5.
6.
7.
8.
1.
2.
3.
4.
5.
6.
7.
8.
Stand-Alone Labs
The show version command is used to obtain critical information, such as router platform type, operat-
ir s,sler reisicr, ceralir s,sler lasl lccl lire ar1 lle lccalicr, arctrl c rercr,, rtrler c
irleraces, ar1 ccrltralicr reisler.
Router#show version
Use the show clock command to view the routers clock.
Router#show clock
The show hosts command displays a cached list of hosts and all of their interfaces IP addresses.
Router#show hosts
Use the show users command to view a list of all users who are connected to the router.
Router#show users
The show interfaces command displays detailed information about each interface.
Router#show interfaces
The show protocols ccrrar1 1isla,s lle lclal ar1 irlerace-secilc slalts c ar,
Layer 3 protocols.
Router#show protocols
Lab 4: CDP
Objective: Learn how the Cisco Discovery Protocol (CDP) functions and what is required for Cisco devices to be
discovered.
Lab Equipment: Router 1 and Router 4 from the eRouters menu
Or Rctler l, erler lclal ccrltralicr rc1e.
Router>enable
Router#conf t
Router(cong)#
Change the host name to R1.
Router(cong)#hostname R1
R1(cong)#
Connect to Router 4, and change the host name to R4.
Router>enable
Router#conf t
R4(cong)#
Return to R1, and enable the serial 0 interface. By default, all interfaces are shut down (disabled).
R1(cong)#interface serial 0
R1(cong-if)#no shutdown
Now, enable the serial 0 interface on R4.
9.
10.
11.
12.
13.
14.
1.
2.
3.
4.
5.
Stand-Alone Labs
Enable the Ethernet 0 interface on R1.
R1(cong)#interface Ethernet 0
OD| allcWs 1eices lc slare lasic ccrltralicr ircrralicr ar1 Will cerale Willctl ar, rclcccl-
secilc ircrralicr leir ccrltre1. OD|, Wlicl is eralle1 l, 1eatll cr all irleraces, is a Dala lir|
protocol that operates at Layer 2 of the OSI model. This is important to understand because CDP is not
routable; it can only travel to directly connected devices.
On R1, type the command that displays the status of all interfaces that are running CDP.
R1(cong-if)#exit
R1(cong)#exit
R1#show cdp interface
The sample output below shows that both interfaces are up and sending CDP packets:
Serial0 is up, line protocol is up
Encapsulation HDLC
Sending CDP packets every 60 seconds
Holdtime is 180 seconds
<output omitted>
R1#
Now that the router has interfaces that are broadcasting and receiving CDP updates, you can use CDP
lc lr1 ctl alctl 1irecll, ccrrecle1 reillcrs.
On R1, type the command that provides information about directly connected neighbors.
R1#show cdp neighbors
Below is some sample output:
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Interface Holdtime Capability Platform Port ID
R4 Serial 0 148 R 1700 Serial 0
R1#
!le lrsl 1eice cr lle 1irecll, ccrrecle1 reillcrs lisl cr Rl is R1 ia lle serial J lir|. Rl is recei-
ir OD| t1ales rcr R1, lle t1ales lell Rl lc relair lle ircrralicr cr a secile1 arctrl c lire.
At the time this command was entered, there were 148 seconds left in the hold time for R1s update. If
that time expires before another update is received, R1s information will be removed from the table. R4
is a 1000 series router, as indicated in the Platform ccltrr. !le lral ccltrr, Port ID, indicates the
port on the other device from which the updates are being sent.
On R1, type the command that provides more detailed information about directly connected neighbors.
R1#show cdp neighbor detail
6.
7.
8.
9.
Stand-Alone Labs
Device ID: R4
Entry address(es):
Platform: cisco 2501, Capabilities: Router
Interface: Serial0, Port ID (outgoing port): Serial0
Holdtime : 162 sec
Version:
Cisco Internetwork Operating System Software
Software, Version 12.0(16), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Fri 02-Mar-01 17:34 by dchih
The show cdp neighbor detail command shows devices one at a time. It is used to display Network layer
address information. The command also displays IOS version information. Notice that the devices are
lisle1 ir cr1er. l ,ct Warle1 lc lr1 ctl ircrralicr alctl a 1eice trller 1cWr lle lisl, ,ct Wctl1 ree1
to scroll down using the SPACEBAR.
Or Rl, l,e lle ccrrar1 lc rci1e ircrralicr alctl lle secilc 1eice R1.
R1#show cdp entry R4
Device ID: R4
Entry address(es):
Platform: cisco 1000, Capabilities: Router
Interface: Serial0, Port ID (outgoing port): Serial0
Holdtime : 148 sec
Version:
Cisco Internetwork Operating System Software
Software, Version 12.0(16), RELEASE SOFTWARE (fc2)
Copyright (c) 1986-2001 by cisco Systems, Inc.
Compiled Fri 02-Mar-01 17:34 by dchih
R1#
The show cdp entry command provides the same information as the show cdp neighbor detail com-
rar1, ltl il allcWs a sirle 1eice lc le secile1. Also, notice that this is one of the only case-sensitive
commands that exist.
On R1, type the command that shows how often CDP updates are being sent and how long a recipient
should retain the update.
R1#show cdp
10.
11.
Stand-Alone Labs
Global CDP information:
Sending a holdtime value of 180 seconds
Sending CDPv2 advertisements is enabled
On R1, adjust the number of seconds between CDP updates to 45.
R1#conf t
R1(cong)#cdp timer 45
Besides the update interval, the holdtime value may also be adjusted. This value tells the recipient of
the update how long to retain the CDP information in the update. It is also a global parameter.
On R1, type the command to adjust the holddown timer to 60 seconds.
R1#conf t
R1(cong)#cdp holdtime 60
On R1, type the command that will allow you to verify that the changes have been made.
R1#show cdp
R1#sh cdp
Global CDP information:
Sending a holdtime value of 60 seconds
Sending CDPv2 advertisements is enabled
R1#
If there are no other directly connected Cisco devices on the network, or if you want to conserve band-
width, you can disable CDP.
On R1, type the command that disables CDP for the entire router.
R1#conf t
R1(cong)#no cdp run
Al lires, ,ct ra, Wisl lc 1isalle OD| cr a secilc irlerace cr sectril, reascrs, cr sirl, lecatse lle
interface has very low bandwidth.
On R1, type the command that turns CDP back on for the entire router.
R1#conf t
R1(cong)#cdp run
Or Rl, 1isalle OD| cr crl, lle secilc irlerace Ellerrel J.
R1(cong)#interface Ethernet 0
R1(cong-if)#no cdp enable
On R1, verify that Ethernet 0 is no longer sending CDP updates. (If the Ethernet 0 interface does not
show up as an entry in the output, you can conclude that it is not sending CDP updates.)
12.
13.
14.
15.
16.
17.
Stand-Alone Labs
Below is sample output from the command:
Serial0 is up, line protocol is up
Encapsulation HDLC
Holdtime is 60 seconds
Lab 5: Extended Basics
Objective: \ieW ar1 ccrltre scre lasic areas c lle rctler.
Press ENTER to get to the router prompt.
Router>
Enter the command that is used to view all the commands available in user mode.
Router>?
Enter privileged mode. This is the mode that gives you complete control of the router.
Router>enable
Router#
View the commands available in privileged mode.
Router#?
Erler lle ccrrar1 llal rci1es access lc lclal ccrltralicr rc1e.
Router#cong terminal
Router(cong)#
!le rctler's lcsl rare is tse1 cr lccal i1erlilcalicr. Rler ,ct lc cr lc lle rctler, ,ct see ils lcsl
name in front of the prompt (either the > or the # prompt). The host name can be used to identify the
location or function of the router. Set the routers host name to Krang.
Router(cong)#hostname Krang
Krang(cong)#
The enable password controls access to privileged mode. This is a very important password because,
Wler il is ccrltre1, crl, llcse Wlc |rcW lle assWcr1 car ra|e ccrltralicr clares ir riilee1
mode. Set the enable password to boson.
Krang(cong)#enable password boson
Test the password. Exit the router, and try to enter privileged mode. Notice that you have to provide the
password in order to enter privileged mode. Now, type the conf term command and proceed with the
instructions in the next step.
Krang(cong)#exit
Krang#exit
Krang>enable
Password:
Krang#cong term
Krang(cong)#
1.
2.
3.
4.
5.
6.
7.
8.
Stand-Alone Labs
!le crl, rcller Will lle eralle assWcr1 is llal il aears ir lair le\l ir lle rctler's ccrltra-
licr lle. l ,ct ree1 lc cllair assislarce ir lrctlleslcclir a rcller, ,ct ra, ira1erlerll, ccrrc-
mise the security of your system by revealing the password. Set the enable secret password to cisco.
Krang(cong)#enable secret cisco
Now, test this password by logging out of the router and then typing enable at the user mode prompt.
The enable secret password overrides the enable password. If you have set both passwords, you must
tse lle eralle secrel assWcr1 lc erler riilee1 rc1e. !le eralle assWcr1 is slill ccrltre1 ltl is
now deactivated.
Krang(cong)#exit
Krang#exit
Krang>enable
Password:
Krang#
Lab 6: Banner MOTD
Objective: Ocrltre a larrer Messae c lle Da, (MO!D). !le MO!D is 1isla,e1 Wler a tser lcs cr lc lle rctler.
The banner can also be used to display information about the router itself or to display a security message.
Connect to Router 1, and enter privileged mode.
Router>
Router>enable
Router#
Erler ccrltralicr rc1e.
Router#cong t
Router(cong)#
Type the command to enter the banner message, and press ENTER. After you type banner motd, enter a
1elirilir claracler sc lle rctler |rcWs Wler ,ct are lrisle1 erlerir le\l cr lle larrer. !le easiesl
one to use is the letter Z.
Router(cong)#banner motd z
Enter the text followed by the z to nish
Now, all text that you type, until you type the letter Z, will be stored as the banner. Type the text You do
not have permission to be here. This router eats hackers for lunch! z, and press ENTER. This will set the
banner.
You do not have permission to be here. This router eats hackers for lunch! z
!c ieW lle larrer, e\il ccrltralicr rc1e, ar1 ller e\il lle rctler. |ress EN!ER lc 1isla, lle larrer.
Router(cong#)exit
Router#exit
Router>exit
Press RETURN to get started.
You do not have permission to be here. This router eats hackers for lunch!
9.
10.
1.
2.
3.
4.
5.
Stand-Alone Labs
Lab 7: Copy Command
Objective: Beccre ariliar Will lle rctler ccrltralicr ar1 lle copy commands available in the Cisco IOS.
Connect to Router 1, and enter privileged mode.
Router>enable
Router#
Disla, lle aclie ccrltralicr ir rercr,. !le ctrrerll, aclie ccrltralicr scril rtrrir cr lle
router is referred to as the rarr|rg-oor|g in the routers command-line interface (CLI). Note that
riilee1 rc1e is retire1 lc 1isla, lle aclie ccrltralicr. !le rtrrir ccrltralicr scril is rcl
automatically saved on a Cisco router and will be lost in the event of power failure. The running con-
ltralicr rtsl le rartall, sae1 Will lle copy command.
!r, lc 1isla, lle ccrltralicr slcre1 ir N\RAM (|rcWr as lle startap-oor|g). You have not saved the
ccrltralicr, sc llere is rcl cre lc slcW.
Router#show startup-cong
Oc, lle ctrrerl aclie ccrltralicr lc N\RAM. !le ctrrerl aclie ccrltralicr is ir RAM, il slctl1 le
sae1 sc llal lle rctler Will slill lccl t Will lle ccrltralicr ir lle eerl c a cWer ctlae.
Router#copy running-cong startup-cong
NcW, slcW lle ccrltralicr slcre1 ir N\RAM.
l ,ct 1eci1e llal ,ct Wctl1 li|e lc ccrltre lle rctler rcr scralcl, ,ct car erase lle slarlt ccrlt-
ralicr ar1 relca1 lle rctler. !lis Will eralle ,ct lc ccrlelel, 1elele all ccrltralicrs cr lle rctler
sc llal ,ct car slarl rcr scralcl. !,e lle ccrrar1 llal Will 1elele lle ccrltralicr lle ir N\RAM.
Rler rcrle1, ccrlrr llal ,ct 1c Warl lc erase lle N\RAM lle s,sler l, ressir lle \ |e,.
Router#erase startup-cong
NcW, l,e lle ccrrar1 lc relca1 lle rctler, ar1 ress lle \ |e, Wler rcrle1 lc ccrlrr lle relca1.
Router#reload
Aler lle rctler relccls, lcc| al lle slarlt ccrltralicr lle aair. Becatse ,ct 1i1 rcl sae il lecre
you reloaded, there is nothing there.
Router>enable
Now, change the host name of the router to Boson.
Router#cong terminal
Router(cong)#hostname Boson
Boson(cong)#exit
Boson#
Sae ,ctr rctler ccrltralicr, ar1 relca1 lle rctler. Aair, ress lle \ |e, Wler rcrle1 lc ccrlrr
the reload.
Boson#copy run start
Boson#reload
1.
2.
3.
4.
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
After the router reloads, the host name of Boson appears in the prompt. If you run the show startup-
oor|g command, nothing appears.
Boson>enable
Boson#show startup-cong
|ab 8: Irtro4aot|or to Irterfaoe 0or|garat|or
Objective: Learn to enable interfaces on a router, and learn what is required for the interface to be up.
Or Rctler l, erler lclal ccrltralicr rc1e.
Router>enable
Router#conf t
Router(cong)#
Router(cong)#hostname Router1
!,e lle ccrrar1 lc erler irlerace ccrltralicr rc1e cr Ellerrel J.
Router1(cong)#interface Ethernet 0
Router1(cong-if)#
Disla, all lle ccrrar1s aailalle ir irlerace ccrltralicr rc1e l, l,ir ?.
Router1(cong-if)#?
The shutdown command shuts down the selected interface. You can often achieve the opposite of a com-
mand by typing no in front of it. Execute the command on Router 1 Ethernet 0 to enable the interface.
Router1(cong-if)#no shutdown
Add a description for this interface.
Router1(cong-if)#description Ethernet interface on Router 1
To view the interface description, exit back to privileged mode, and run the show interface command.
You should see the description under Ethernet 0.
Router1(cong-if)#end
Router1#show interface
Connect to Router 2, and assign it a host name of Router2.
Router#conf t
Now, access the Ethernet 0 interface, and enable the interface.
Now that the interfaces on both sides of the Ethernet connection are enabled, they should be able to
see one another through CDP. Use the show cdp neighbor command on Router2 to view all directly
connected Cisco routers.
Router2#show cdp neighbor
11.
1.
2.
3.
4.
5.
6.
7.
8.
9.
Stand-Alone Labs
Lab 9: Introduction to IP
Objective: Ocrltre Rctlers l, Z, ar1 1 Will lrlerrel |rclcccl (l|) a11resses, ar1 ir lelWeer ller lc lesl
connectivity.
Lab Equipment: Router 1, Router 2, and Router 4 from the eRouters menu
T0.T.T.2 /24 T0.T.T.T /24
T72.T6.T0.T
/24
T72.T6.T0.2
/24
RouLer 2 RouLer T
RouLer 4
Router>enable
Router#conf t
Router1(cong)#
Erler irlerace ccrltralicr rc1e cr lle Ellerrel J irlerace.
Router1(cong)#interface ethernet 0
Router1(cong-if)#
Type the command that will set the IP address on the Ethernet 0 interface to 10.1.1.1 255.255.255.0,
and enable the interface.
Router1(cong-if)#ip address 10.1.1.1 255.255.255.0
Set the IP address on the serial 0 interface of Router1 to 172.16.10.1 255.255.255.0, and enable the
interface.
Router1(cong)#interface serial 0
Router1(cong-if)#no shut
Router>enable
Router#conf t
Router2(cong)#
1.
2.
3.
4.
5.
Stand-Alone Labs
Set the IP address for the Ethernet 0 interface to 10.1.1.2 255.255.255.0, and enable the interface.
Router>enable
Router#conf t
Ocrltre ar l| a11ress c l!Z.lC.lJ.Z Z55.Z55.Z55.J cr lle serial J irlerace, ar1 eralle lle irlerace.
From Router1, try to ping Router2s Ethernet interface.
Router1#ping 10.1.1.2
Try to ping Router4s serial 0 interface.
Verify that the lines and protocols are up for all of Router1s interfaces.
Router1#show ip interface brief
Disla, Rctlerl's rtrrir ccrltralicr, ar1 eri, llal lle l| a11resses aear.
Router1#show running-cong
Display detailed IP information about each interface on Router1.
Router1#show ip interface
Lab 10: ARP
Objective: Ocrltre Rctlers l ar1 Z Will l| a11resses, ar1 ir lelWeer ller lc lesl ccrrecliil,. !ler, ieW
the entries stored in the Address Resolution Protocol (ARP) table.
Connect to Router 1, and type the command to view the ARP table.
Router>enable
Router#show arp
Assign an IP address of 10.1.1.1 255.255.255.0 to the Ethernet 0 interface of Router 1.
Router#conf terminal
Router(cong)#interface Ethernet 0
Router(cong-if)#ip address 10.1.1.1 255.255.255.0
Router(cong-if)# no shutdown
Router(cong-if)#exit
View the ARP table again.
Router(cong)#exit
Router#show arp
6.
7.
8.
9.
10.
11.
12.
13.
1.
2.
3.
Stand-Alone Labs
NcW, ccrrecl lc Rctler Z, ar1 ccrltre ils Ellerrel J irlerace Will ar l| a11ress c lJ.l.l.Z /Z1.
Router#conf terminal
Router(cong)#interface Ethernet 0
Router(cong-if)#ip address 10.1.1.2 255.255.255.0
Router(cong-if)# no shutdown
Router(cong-if)#exit
A connection should now exist between the Router 1 and Router 2 Ethernet interfaces. To ensure that
the connection is functional, ping the IP address of Router 1s Ethernet 0 IP address from Router 2.
Router(cong)#exit
Router# ping 10.1.1.1
View the ARP table on Router 2, and notice the entry.
Router#show arp
Now, clear the ARP table.
Router#clear arp
View the ARP table one last time, and notice what entries are there.
Router#show arp
Lab 11: Creating a Host Table
Objective: Become familiar with the routers host table. Host tables can be used to set names for commonly
used IP addresses, which helps with troubleshooting.
Connect to Router 1, and set the host name to California.
Router>enable
Router#cong t
Router(cong)#hostname California
California(cong)#
Ocrltre ar l| a11ress c l95.1Z.JC.lJ Z55.Z55.Z55.Z1J cr lle Ellerrel J irlerace, le stre lc eralle
the interface.
California(cong)#interface ethernet 0
California(cong-if)#ip address 195.42.36.10 255.255.255.240
California(cong-if)#no shutdown
Connect to Router 2, and set the host name to Tampa.
Router>enable
Router#cong t
Router(cong)#hostname Tampa
Tampa(cong)#
Ocrltre ar l| a11ress c l95.1Z.JC.lZ Z55.Z55.Z55.Z1J cr lle Ellerrel J irlerace, le stre lc eralle
the interface.
Tampa(cong)#interface ethernet 0
4.
5.
6.
7.
8.
1.
2.
3.
4.
Stand-Alone Labs
Tampa(cong-if)#ip address 195.42.36.12 255.255.255.240
Tampa(cong-if)#no shutdown
Tampa(cong-if)#exit
Exit interface mode. You do not want to have to type Californias Ethernet 0 IP address every time you try
to ping it from Tampa, so set a host table entry for California using the IP address 195.42.36.10.
Tampa(cong)#ip host California 195.42.36.10
Tampa(cong#)exit
Now you should be able to ping Californias Ethernet 0 IP address from Tampa just by typing ping Cali-
fornia.
Tampa#ping California
Use the show hosts command to verify that the entry is stored in the routers host table.
Tampa#show hosts
Lab 12: Static Routes
Objective: Ocrltre Rctlers l, Z, ar1 1 Will l| a11resses, ar1 ller a11 slalic rctles cr all rctlers.
Goals:
Set the host name, and bring up the interfaces.
Ping the directly connected interfaces.
Ocrltre slalic rctles cr lle lcclc,.
Verify that you can ping all routers.
Ocrltre Rctlers l, Z, ar1 1 lc lle secilcalicrs ctllire1 ir lle lalle ar1 1iarar lelcW.
Device Router 1 Router 2 Router 4
Host Name Router1 Router2 Router4
Ethernet 0 10.1.1.1 /24 10.1.1.2 /24
Serial 0 12.5.10.1/24 12.5.10.2 /24
5.
6.
7.
1.
Stand-Alone Labs
T0.T.T.2 /24 T0.T.T.T /24
T2.5.T0.T
/24
T2.5.T0.2
/24
RouLer 2 RouLer T
RouLer 4
On each router, verify that you can ping the directly connected neighbors.
Now you need to establish static routes on each router to any location that is not directly connected.
Router1 is directly connected to both Router2 and Router4, so it will not need any static routes.
Or Rctler1, erler lclal ccrltralicr rc1e, ar1 llir| alctl Wlal lle slalic rctle ccrrar1 slctl1
be. You know that you currently cannot reach Router2 because it is not directly connected. Off of
Router4s serial interface is network 12.5.10.0, which is connected to Router1. Router1 is also connect-
ed to network 10.1.1.0, which you would also like to access. In this case, you will need a static route
for network 10.1.1.0. On Router4, what command should you use to establish a static route to network
10.1.1.0?
Router4#conf term
Router4(cong)#ip route 10.1.1.0 255.255.255.0 12.5.10.1
You established a route to network 10.1.1.0. Now, whenever a packet of information leaves Router4
1eslire1 cr relWcr| lJ.l.l.J, il Will lrsl le serl lc l| a11ress lZ.5.lJ.l cr Rctlerl.
Now, try to ping Router1s serial 0 interface, Router1s Ethernet 0 interface, and Router2s Ethernet 0 interface.
Consider why the ping to 10.1.1.2 (Router2s Ethernet 0 interface) was unsuccessful. A packet leaves
Router4s serial 0 interface destined for 10.1.1.2. Because the destination address is on the 10.1.1.0
relWcr| ar1 lle slalic rctle cr Rctler1 slitlales llal lralc 1eslire1 cr llal relWcr| slctl1 lrsl le
2.
3.
4.
Stand-Alone Labs
sent to 12.5.10.1, the packet will travel to 12.5.10.1. When the packet reaches Router1, the router sends
the packet out the interface that is directly connected to the 10.1.1.0 network. Router2 picks up that
ac|el cr ils Ellerrel J irlerace ar1 allerls lc ser1 a rescrse ac|el lc ccrlrr receil. RctlerZ
examines the source IP address of the received packet, which is 12.5.10.2 (Router4s serial 0 interface).
Router2 does not have a route to network 12.5.10.0, so it drops the packet. This is why the ping was not
successful.
Just to make sure the static route on Router4 worked, view the routing table to see if the static route has
been added there.
Router4#show ip route
!c eralle Rctler1 lc ir lJ.l.l.Z, ccrrecl lc RctlerZ ar1 ccrltre a slalic rctle lac| lc Rctler1's
network. Type the command that will set a static route on Router2 for the network 12.5.10.0.
Router2#cong term
Router2(cong)#ip route 12.5.10.0 255.255.255.0 10.1.1.1
Router2(cong)#exit
Ocrseterll,, ar, 1ala serl lc relWcr| lZ.5.lJ.J Will c lc lJ.l.l.l lrsl.
Connect to Router4 again, and make sure you can ping Router1s serial 0 interface, Router1s Ethernet 0
interface, and Router2s Ethernet 0 interface.
Examine the routing table on Router2.
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
U - per-user static route
Gateway of last resort is not set
C 10.1.1.0/24 is directly connected, 10.1.1.2
S 12.5.10.0/24 [1/0] via 10.1.1.1
In the S 12.5.10.0/24 [1/0] via 10.1.1.1 line of output, the S denotes the static route. Next, the destina-
tion network and its subnet information (12.5.10.0/24) are displayed. The [1/0] represents the adminis-
trative distance, which is 1 by default, and the metric (hop count in this case), which is 0. The word via
signals the next hop address the packet should be sent to, which in this case is 10.1.1.1.
5.
6.
7.
8.
Stand-Alone Labs
Lab 13: RIP
Objective: Ocrltre Rctlers l, Z, ar1 1 Will l| a11resses ar1 lle Rctlir lrcrralicr |rclcccl (Rl|).
Goals:
Set the host name and bring up the interfaces.
Ocrltre Rl|.
Select the directly connected networks.
Display the routing table.
Display the RIP protocol information.
Ethernet 0 10.1.1.1 /24 10.1.1.2 /24
Serial 0 172.16.10.1 /24 172.16.10.2 /24
T0.T.T.2 /24 T0.T.T.T /24
T72.T6.T0.T
/24
T72.T6.T0.2
/24
RouLer 2 RouLer T
RouLer 4
On each router, verify that you can ping the directly connected neighbors.
1.
2.
Stand-Alone Labs
Add RIP to Router1.
Router1#
Router1#congure terminal
Router1(cong)#router rip
Router1(cong-router)#
Add the network(s) to which Router1 is directly connected.
Router1(cong-router)#network 10.0.0.0
Add RIP to Router2.
Router2#
Router2#cong terminal
Router2(cong)# router rip
Add RIP to Router4.
Router4#
Router4(cong)# router rip
Now, RIP should be running on all three routers. See if you can ping between routers that are not directly
connected. For instance, from Router2 you should now be able to ping Router4s serial 0 interface.
Connect to Router4, and ping Router2s Ethernet 0 interface.
l ,ct car ir lcll 1eices, ller ,ct lae ccrrecll, ccrltre1 rctlir. l lle irs Were rcl stccesstl,
trace back through the steps.
Now, issue the command to display the routing table on Router4.
lirall,, 1isla, secilc l| rctlir rclcccl ircrralicr cr Rctler1.
Router4#show ip protocol
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
Stand-Alone Labs
Lab 14: Troubleshooting RIP
Objective: Ocrltre l| a11resses cr Rctlers l, Z, ar1 1 Will Rctlir lrcrralicr |rclcccl (Rl|) as lle rctlir
protocol. Then, observe routing activity using the debug ip rip command, and examine routes using the show ip
route command.
Ocrltre Rctlers l, Z, ar1 1 lc lle secilcalicrs ctllire1 ir lle lalle lelcW.
Ethernet 0 192.168.1.1 /24 192.168.1.2 /24
Serial 0 192.168.2.1 /24 192.168.2.2 /24
Use lle rcer relWcr| slalererls lc ccrltre Rl| cr all rctlers.
Router1#conf t
Router1(cong-router)#exit
Router1(cong)#exit
Router1#
Router2#cong t
Router2(cong)#exit
Router2#
Router4#cong t
Router4(cong)#exit
Router4#
Use the show ip route ccrrar1 lc ccrlrr llal lle rctles are leir receie1 cr all rctlers.
1.
2.
3.
Stand-Alone Labs
Once the routers have received the routes, execute the debug ip rip command at the privileged mode
prompt on Router1.
Router1#debug ip rip
Observe the output on Router1s terminal screen. (The output could take up to 60 seconds to appear.)
To turn off the debug command, use the no keyword in front of the command (i.e., no debug ip rip).
Router1#no debug ip rip
View the routing table entries on Router2 and Router4. Notice the administrative distances and metrics
for these routes.
Make sure you can ping all devices on the network from every other device. If all pings do not succeed,
ller ,ct Will ree1 lc lrctlleslccl lle rctler ccrltralicrs lc erstre ,ct ccrltre1 all sellirs
correctly.
Lab 15: IGRP
Objective: Ocrltre Rctlers l, Z, ar1 1 Will l| a11resses ar1 lrlericr OaleWa, Rctlir |rclcccl (lOR|).
Goals:
Ocrltre lOR|.
Display the IGRP protocol information.
4.
5.
6.
7.
Stand-Alone Labs
Ethernet 0 10.1.1.1 /24 10.1.1.2 /24
Serial 0 172.16.10.1 /24 172.16.10.2 /24
T0.T.T.2 /24 T0.T.T.T /24
T72.T6.T0.T
/24
T72.T6.T0.2
/24
RouLer 2 RouLer T
RouLer 4
Aler ,ct lae ccrltre1 lle ccrrecl l| a11ress cr eacl irlerace, eri, llal eacl rctler car ir ils
directly connected neighbors.
Access lclal ccrltralicr rc1e cr Rctlerl, ar1 erler lle ccrrar1 lc ccrltre lOR| as lle rctlir
protocol on Router1; use the autonomous system number 100.
Router1(cong)#router igrp 100
1.
2.
3.
4.
Stand-Alone Labs
NcW, erler lclal ccrltralicr rc1e cr RctlerZ, ar1 a11 lOR|. Rererler lc tse lle sare atlcrcrcts
system number.
NcW, erler lclal ccrltralicr rc1e cr Rctler1, ar1 a11 lOR|. Rererler lc tse lle sare atlcrcrcts
system number.
IGRP should now be running on all three routers. See if pings are successful between routers that are
not directly connected. From Router2, you should now be able to ping Router4s serial 0 interface. From
Router4, you should be able to ping Router2s Ethernet 0 interface.
l ,ct car ir lcll 1eices, ller ,ct lae ccrrecll, ccrltre1 rctlir. l lle irs Were rcl stccesstl,
trace back through the steps.
Now, display the routing table on Router4.
lirall,, 1isla, secilc l| rctlir rclcccl ircrralicr cr Rctler1.
Router4#show ip protocol
Lab 16: PPP with CHAP Authentication
Objective: Understand how Point-to-Point Protocol (PPP) encapsulation works and how to secure the connection
with Challenge Handshake Authentication Protocol (CHAP).
Erler lclal ccrltralicr rc1e cr Rctler l, ar1 clare lle lcsl rare lc R1.
Router>enable
Router#conf t
R1(cong)#
The enable secret password will be used along with the host name to access the other router. Set R1s
enable secret password to sameone.
5.
6.
7.
8.
9.
10.
11.
1.
2.
Stand-Alone Labs
R1(cong)#enable secret sameone
Or Rl, ccrltre a tser rare c R4 with the password myboson.
R1(cong)#username R4 password myboson
Assign an IP address of 10.1.1.1 255.255.255.0 to R1s serial 0 interface.
R1(cong-if)#ip address 10.1.1.1 255.255.255.0
On R1, set the encapsulation for the serial 0 interface to PPP.
R1(cong-if)#encapsulation ppp
Next, set PPP authentication to CHAP on the serial 0 interface.
R1(cong-if)#ppp authentication chap
Now, make sure the serial 0 interface is enabled.
R1(cong-if)#exit
R1(cong)#
Ocrrecl lc Rctler 1, ar1 ccrltre a lcsl rare c R4.
Router>enable
Router#cong t
R4(cong)#
Set an enable secret password of myboson on R4.
R4(cong)#enable secret myboson
Add a user name of R1 with a password of sameone.
R4(cong)#username R1 password sameone
Assign an IP address of 10.1.1.2 255.255.255.0 to the serial 0 interface on R4, and then enable the
interface.
Ocrltre lle serial J ||| atllerlicalicr lc ONA| cr R1.
R4(cong-if)#ppp authentication chap
Enable PPP encapsulation on the serial 0 interface of R4. Now, watch the interface state change to up.
R4(cong-if)#encapsulation ppp
R4(cong-if)#exit
R4(cong)#exit
R4#
!c eri, llal lle ccrltralicr is ccrrecl, ir Rctlerl's serial J irlerace rcr Rctler1.
R4#ping 10.1.1.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
Stand-Alone Labs
Lab 17: Connectivity Tests with Traceroute
Objective: Learn how to use the traceroute command. This command is used to map the IP addresses that a
packet travels through to get from one device to another.
Ocrltre Rctlers l, Z, ar1 1 lc lle secilcalicrs ctllire1 ir lle lalle lelcW.
Ethernet 0 192.168.1.1 /24 192.168.1.2 /24
Serial 0 192.168.2.1 /24 192.168.2.2 /24
T92.T68.T.2 /24 T92.T68.T.T /24
T92.T68.2.T
/24
T92.T68.2.2
/24
RouLer 2 RouLer T
RouLer 4
Aler ,ct lae ccrltre1 lle rcer l| a11resses, eralle Rl| rctlir acrcss all llree rctlers. Ma|e stre
you use the proper network statements.
Router1#conf t
Router1(cong)#exit
Router1#
Router2#cong t
1.
2.
Stand-Alone Labs
Router2(cong)#exit
Router2#
Router4#cong t
Router4(cong)#exit
Router4#
From Router1, ping the directly connected routers and their interfaces, which are Router2 Ethernet 0
and Router4 serial 0.
Because RIP routing is enabled, you should be able to ping non-directly connected routers. Connect to
Router2, and ping Router4s serial 0 interface.
The goal behind the traceroute command is to help you troubleshoot and determine the path a packet
is taking to reach a destination device. In this example, there are three routers and only one path to any
destination. Trace the route from Router2 to Router4s serial 0 interface.
Router2#traceroute 192.168.2.2
Observe the output from the traceroute command. It lists Router1s Ethernet 0 IP address and then the
destination IP address. This means that the packet leaves Router2s Ethernet 0 interface and passes
through Router1s Ethernet 0 interface before reaching Router4s serial 0 interface.
|ab J8: Sa|rg Roater 0or|garat|ors
Objective: learr lcW lc lac| t a rctler's ccrltralicr ir case lle ccrltralicr is acci1erlall, 1elele1 cr lle
router fails.
Lab Equipment: Router 4 from the eRouters menu and PC 1 from the eStations menu
Connect to Router 4, and change the host name to Tampa.
Router>enable
Router#conf t
Router(cong)#hostname Tampa
Tampa(cong)#
Assign the IP address of 24.37.2.1 255.255.255.0 to the Ethernet 0 interface, and then enable the
interface.
Tampa(cong)#interface ethernet 0
3.
4.
5.
6.
1.
2.
Stand-Alone Labs
Connect to PC 1 by selecting it from the eStations menu. Type the command that will allow you to
ccrltre |O l's l| a11ress ar1 1eatll aleWa,. Sel lle l| a11ress lc Z1.J!.Z.Z5Z Will a stlrel ras|
of 255.255.255.0. Set the default gateway to Tampas Ethernet 0 IP address (24.37.2.1).
C:> winipcfg
From PC 1, ping Tampas Ethernet 0 interface to make sure connectivity exists to the default gateway.
C:> ping 24.37.2.1
Ocrrecl lc !ara aair, e\il irlerace ccrltralicr rc1e, ar1 ller e\il lclal ccrltralicr rc1e.
Oc, lle rtrrir ccrltralicr lc lle !l!| serer cr |O l.
Tampa(cong-if)#exit
Tampa(cong)#exit
Tampa# copy running-cong tftp
When prompted for the address or name of the TFTP server, provide PC 1s IP address (24.37.2.252),
ress EN!ER, ar1 ller rci1e lle rare c lle ccrltralicr lle llal Will le slcre1 cr |O l. Nare lle
ccrltralicr lle !ara_ccrl.
24.37.2.252
Tampa_cong
After you press ENTER, the router will take a few seconds to establish the connection; then you will see it
cc, lle ccrltralicr lle ar1 lell ,ct lcW lcr il lcc|.
Next, connect back to PC 1 and type the s|ow tftp-oor|gs ccrrar1 ir cr1er lc 1isla, lle ccrltra-
tions that are stored on the TFTP server. (Note: This command does not work on real PCs, just in the
NetSim program.)
C:>show tftp-congs
l ,ct see lle ccrltralicr ir lle lisl, ,ct lae stccesstll, ccrlele1 lle lal.
Note: lal l9 ltil1s cr llis lal's ccrltralicr. !c ccrlele lal l9, lease ccrlirte Will lle irslrtc-
tions for Lab 19 in this lab. If you load another lab from the Lab Navigator, your changes will be lost and
Lab 19 will not work properly.
|ab J9: |oa4|rg Roater 0or|garat|ors
Objective: Beccre ariliar Will lle rccess c lca1ir rctler ccrltralicrs.
Lab Equipment: Router 4 from the eRouters menu (Tampa from Lab 18)
Prerequisite: \ct rtsl lae jtsl ccrlele1 lal l&: Sair Rctler Ocrltralicrs ir cr1er lc ccrlele llis lal
successfully.
NcW llal lle ccrltralicr is slcre1 cr lle !l!| serer, clare lle lcsl rare c lle rctler. !lis Will
rce llal lle ccrltralicr Was ccie1 rcr lle !l!| serer. lc cr lc !ara, ar1 erler lclal ccrlt-
ration mode.
Tampa#cong t
Tampa(cong)#
3.
4.
5.
6.
7.
1.
Stand-Alone Labs
Change the host name to Bad_Router.
Tampa(cong)#hostname Bad_Router
Oc, lle ccrltralicr ,ct slcre1 cr lle !l!| serer irlc lle rtrrir ccrltralicr cr Ba1_Rctler.
Bad_Router(cong)#exit
Bad_Router#copy tftp running-cong
When the router prompts you for a name or an IP address, enter the IP address of the TFTP server.
Address or name of remote host []?24.37.2.252
Erler lle rare c lle ccrltralicr lle llal slctl1 le cllaire1 rcr lle !l!| serer.
Source lename []?Tampa_cong
!le rctler Will 1cWrlca1 lle ccrltralicr ar1 lca1 il irlc lle rtrrir ccrltralicr. AlerWar1, lle
lcsl rare Will le reslcre1 lc Wlal il Was Wler lle ccrltralicr Was sae1.
Tampa#
|ab Z9: 0op|rg ar4 Past|rg 0or|garat|ors
Objective: learr lc sae, relca1, ar1 asle rc1ile1 ccrltralicrs rcr Willir lle Sirtlalcr.
Lab Equipment: Router1 from the eRouters menu
Cisco Routers use a command-line parsing routine. Each time you press a carriage return, the router parses that
command and executes the code that is required to carry out the command. The Simulator works the same way.
When you are working with the Simulator, you can easily switch between devices using the menus across the top
of the main window. The Simulator offers some built-in saving and loading options.
Set the host name of Router 1 to Router1.
Router>enable
Select the Save Single Device Cong clicr rcr lle lile rert. !le rcrar Will as| cr a lle
name; use Router1, and click Save. Sae lle lles lc a ccrerierl lccalicr llal ,ct Will rererler eas-
ily.
Aler ,ct lae sae1 lle lle, e\il lle Sirtlalcr, ar1 ller slarl il aair. Relca1 Slar1-Alcre lal ZJ
from the Lab Navigator.
Select the |oa4 S|rg|e 0e|oe 0or|g (oerwr|te) option from the File rert. Selecl lle Rctlerl.rlr lle
that you just saved, and click Open.
!le rcrar Will ller cer lle lle ar1 e\ectle all lle ccrrar1s llal Were reictsl, sae1 cr lle
1eice. Orce il is lrisle1, ,ct Will rclice llal lle lcsl rare las leer reslcre1.
Two other options under the File menu offer similar functionality: the Sae Ma|t| 0e|oes 0or|gs op-
tion and the |oa4 Ma|t| 0e|oes 0or|gs option. These two options respectively will save and load the
ccrltralicrs cr all lle 1eices.
Sae1 lles car le e1ile1 easil,. Miririte lle rcrar, ar1 1ctlle-clic| lle Rctlerl.rlr lle llal ,ct
just saved to your computer. When the operating system asks you which program you would like to use
lc cer lle lle, selecl Micrcscl Nclea1.
2.
3.
4.
5.
6.
1.
2.
3.
4.
5.
6.
7.
Stand-Alone Labs
Nclea1 Will latrcl Will Rctlerl's rtrrir ccrltralicr 1isla,e1. \ct Will see lle hostname command a
few lines down. Change this line from hostname Router1 to hostname Miami. Save your changes.
Now, repeat step 4, and observe the host name change.
l ,ct lae creale1 a ccrltralicr llal ,ct Warl lc asle irlc lle rctlers, lle rcrar cers a lccl lc
allow you to do this.
First, make sure Router1 is open. Select the Paste Rea| Roater 0or|gs option from the File menu. This
Will cer a Wir1cW llal Will allcW ,ct lc asle ccrltralicr lles ,ct Wctl1 li|e lc lae e\ectle1 cr
Router1. In the empty text box, type the following:
hostname Router1
interface Ethernet 0
ip address 1.1.1.1 255.255.255.0
no shutdown
exit
exit
After you have typed the commands above, click the OK button. The router will quickly execute the com-
mands. Notice that the host name of the router will change back to Router1.
Execute the show ip interface brief command on Router1 to see that the IP address has been set for
Ethernet 0.
Lab 21: ISDN
Objective: Learn how to set up Integrated Services Digital Network (ISDN) on Cisco routers.
Router>enable
Router#conf t
Router>enable
Router#conf t
Now, set up the connection between Router1 and Router2 using the BRI ports. Assign the BRI 0 interface
of Router1 an IP address of 42.34.10.1 with a 255.255.255.0 subnet mask, enable the interface, and
ller e\il irlerace ccrltralicr rc1e.
Router1(cong)#interface BRI0
Router1(cong-if)#exit
Router1(cong)#
8.
9.
10.
11.
12.
13.
1.
2.
3.
Stand-Alone Labs
Now, connect to Router2, and assign its BRI 0 interface an IP address of 42.34.10.121 with a
Z55.Z55.Z55.J stlrel ras|. Eralle lle irlerace, ar1 ller e\il irlerace ccrltralicr rc1e.
Router2(cong)#interface BRI0
Router2(cong)#
Reltrr lc Rctlerl, ar1 slarl lc ccrltre lSDN. lirsl, seci, lle lSDN sWilcl l,e llal Will le tse1. l
,ct tse lle Sirtlalcr 1eatlls, lle sWilcl l,e is lasic-ri. !lere are lWc 1iererl Wa,s lc ccrltre
the type of ISDN switch type the router should use. You can specify the command globally for all BRI
irleraces cr lle rctler, cr ,ct car ra|e lle sWilcl l,e irlerace-secilc. lr llis irslarce, erler lle
switch type globally on your router.
Router1(cong)#isdn switch-type basic-ni
Ocrltre scre secilc ircrralicr cr llis BRl irlerace. lirsl, assir il lle lSDN S|lD (Serice |rclle
l1erliler). Sel lle S|lD cr lle BRl irlerace c Rctlerl l, tsir lle isdn spid1 command. A SPID is
a rtrler stlie1 l, lle lS| lc i1erli, lle lire ccrltralicr c lle BRl serice. Eacl S|lD cirls lc
lire selt ar1 ccrltralicr ircrralicr cr lle lS|'s lSDN sWilcl. l ,ct tse lle 1eatlls cr lle lSDN
switch, the SPID for Router1 will be 32177820010100.
Router1(cong)#interface bri 0
Router1(cong-if)#isdn spid1 32177820010100
NcW llal ,ct lae ccrltre1 lle sWilcl l,e ar1 S|lD, la,er l ccrrecliil, slctl1 e\isl. la,er l
connectivity occurs between the ISDN switch and the router. To verify that Layer 1 connectivity exists,
use the show isdn status command at the privileged mode prompt. Make sure that the Layer 2 state is
Multiple_Frame_Established.
Router1(cong)#exit
Router1#show isdn status
NcW, ccrltre lle rtrler llal Will ree1 lc le 1iale1 cr lle lSDN sWilcl lc eslallisl a la,er J ccrrec-
tion; this is called the dialer string. Set the dialer string on Router1s BRI 0 interface. If you are using
lle 1eatll ccrltralicr, tse !!&ZJJl.
Router1#cong t
Router1(cong-if)#dialer string 7782001
Because ISDN costs money when the connection is up, the connection should only be active when it is
being used. You can use dialer groups and dialer lists to accomplish this. A dialer list either permits or
1eries lralc. Seci, a 1ialer lisl c protocol ip permit, ccrseterll,, all l| lralc Will le errille1. !c
set up a dialer list, use the dialer-list ccrrar1 ir lclal ccrltralicr rc1e.
Router1(cong)#dialer-list 1 protocol ip permit
The dialer list must be associated with an interface. Add the dialer list to the ISDN BRI 0 interface by
using the dialer-group 1 command.
4.
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
Router1(cong-if)#dialer-group 1
Now that you have set up ISDN on Router1, you need to perform the same steps for Router2, but with
scre slill rc1ilcalicrs. Ocrrecl lc RctlerZ, ar1 seci, lle lSDN sWilcl l,e llal ,ct Will le tsir.
l ,ct tse lle Sirtlalcr 1eatlls, lle sWilcl l,e is lasic-ri. Seci, lle sWilcl l,e ir lclal ccrltra-
tion mode on the router.
Router2(cong)#isdn switch-type basic-ni
Next, provide the SPID for this interface. If you use the Simulator defaults for the ISDN switch, the SPID
for Router 2 will be 32177820020100.
Router2(cong-if)#isdn spid1 32177820020100
Now that you have set up the switch type and SPID, Layer 1 connectivity should be established. To verify
that Layer 1 connectivity exists, use the show isdn status command at the privileged mode prompt.
Make sure that the Layer 2 state is Multiple_Frame_Established.
Router2(cong)#exit
NcW, ccrltre lle 1ialer slrir llal ,ct Will ree1 lc 1ial cr lle lSDN sWilcl ir cr1er lc eslallisl a la,er
J ccrreclicr. Sel lle 1ialer slrir cr RctlerZ's BRl J irlerace. l ,ct are tsir lle 1eatll ccrltra-
tion, use 7782002.
Router2#cong t
Router2(cong-if)#dialer string 7782002
Ocrltre lle 1ialer lisl rare1 protocol ip permit cr RctlerZ lc erril all l| lralc.
Router2(cong)#dialer-list 1 protocol ip permit
Use the dialer-group 1 command to add the dialer list to the ISDN BRI 0 interface.
Router2(cong-if)#dialer-group 1
NcW llal lcll rctlers are ccrltre1 cr lSDN, see i ,ct car ir lle rctler cr lle cller si1e c lle ccr-
nection. From Router2, ping Router1s BRI 0 interface (IP address 42.34.10.1).
Router2(cong)#exit
If the ping is successful, ISDN is working. Verify this by issuing the show isdn status command on
Router2.
Examine the Layer 3 settings; there should be one active Layer 3 call. You should also see that the SPID
is valid in Layer 2. This information is useful for troubleshooting.
lirall,, ieW lle ccrltralicr clares ,ct lae ra1e l, 1isla,ir lle rtrrir ccrltralicr.
11.
12.
13.
14.
15.
16.
17.
18.
19.
Stand-Alone Labs
Lab 22: Introduction to the Switch
Objective: View some basic areas of a Cisco Catalyst 1900 switch.
Lab Equipment: Switch 1 from the eSwitches menu
Connect to Switch 1. You should see the user mode prompt.
>
Enter the command to display the IOS version of the switch.
>show version
What version of the IOS is running? ____________________________
What is the model number of the switch? ________________________
What is the Base Ethernet Address of the switch? __________________
Display the interfaces of the switch.
>show interfaces
How many of the interfaces are 10 Mbps? _______________________
How many ports are 100 Mbps Fast Ethernet? ____________________
Enter the command to view the MAC address table.
>show mac-address-table
How many dynamic entries have been learned? ___________________
Disla, lle rtrrir ccrltralicr.
>show running-cong
Lab 23: Introduction to Basic Switch Commands
Objective: Beccre ariliar Will lle lasic ccrltralicr c lle Oiscc Oalal,sl l9lZ sWilcl.
Lab Equipment: Switch 1 from the eSwitches menu
Connect to Switch 1. You should see the user mode prompt.
>
Display the list of commands available at this prompt.
>?
Now, enter privileged mode.
>enable
#
Display the available commands in privileged mode.
#?
1.
2.
3.
4.
5.
1.
2.
3.
4.
Stand-Alone Labs
Erler ccrltralicr rc1e.
#cong terminal
(cong)#
!le lcsl rare is tse1 cr lccal i1erlilcalicr. Rler ,ct lc cr lc lle sWilcl, ,ct see lle lcsl rare ir
rcrl c lle rcrl (i a lcsl rare las leer ccrltre1). !le lcsl rare car le tse1 lc i1erli, lle
location or function of the switch. Set the switchs host name to Boson.
(cong)#hostname Boson
Boson(cong)#
The enable password controls access to privileged mode. This is a very important password because, when
il is ccrltre1, crl, llcse Wlc |rcW lle assWcr1 car ra|e ccrltralicr clares ir riilee1 rc1e.
There is a difference in the syntax used to set the password for a router and the syntax used to set the
password for a switch. On the 1900 series switch, levels need to be set when a password is declared.
The different levels allow different sets of people to enter different commands on the switch. The pass-
word levels range from 1 to 15. Level 1 allows the user to log in to the router and use very basic show
commands. Level 15 allows the user to do anything. The levels in between can be customized by the
network administrator to allow certain commands.
On Switch1, set the enable password to Krang.
Boson(cong)#enable password level 15 Krang
!esl lle assWcr1 l, lrsl e\ilir lle sWilcl ar1 ller lr,ir lc erler riilee1 rc1e. Nclice llal ,ct
have to provide the enable password in order to get into privileged mode. Now, type conf term and pro-
ceed with the lab instructions in the next step.
Boson(cong)#exit
Boson#exit
Boson>enable
Password:
Boson#conf term
Boson(cong)#
!le crl, rcller Will lle eralle assWcr1 is llal il aears ir lair le\l ir lle sWilcl's ccrltralicr
lle. l ,ct ree1 lc cllair assislarce Wlile lrctlleslcclir a rcller, ,ct ra, ira1erlerll, ccrrcrise
the security of your system by revealing the password. Set the enable secret password to cisco. Do not
forget to use the level commands.
Boson(cong)#enable secret level 15 cisco
You can now test this password by logging out of the switch and then trying to access privileged mode. The
enable secret password overrides the enable password. If you have set both passwords, the enable secret
password is the password you should use to enter privileged mode. The enable password is now deactivated.
Boson(cong)#exit
Boson#exit
Boson>enable
Password:
Boson#
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
Lab 24: Frame Relay
Objective: Learn to establish a Frame Relay connection.
Ocrrecl lc Rctler l, ar1 ccrltre lle lcsl rare lc R1.
Router>enable
Router#conf t
R1(cong)#
Assign an IP address of 10.1.1.1 255.255.255.0 to the serial 0 interface, and enable the interface.
R1(cong-if)#no shut
Now, connect to Router 2 and change the host name to R2.
Router>en
Router#cong t
R2(cong)#
Assign an IP address of 10.1.1.2 255.255.255.0 to the serial 0 interface, and enable the interface.
R2(cong-if)#no shut
On R1, set the encapsulation for the serial 0 interface to Frame Relay. Notice that the interface is still down.
R1(cong-if)#encapsulation frame-relay
Ne\l, sel lle lrare Rela, irlerace 1ala-lir| ccrreclicr i1erliler (DlOl) cr lle ccrreclicr rcr Rl lc
R2. Because the default Frame Relay network is being used, the DLCI will be 102.
R1(cong-if)#frame-relay interface-dlci 102
On R2, set the encapsulation for the serial 0 interface to Frame Relay. Notice that the serial 0 interface
is still down.
R2(cong-if)#encapsulation frame-relay
Now, set the Frame Relay interface DLCI for the connection from R2 to R1. Because the default Frame
Relay network is being used, the DLCI will be 201.
R2(cong-if)#frame-relay interface-dlci 201
You should have seen the output from the router saying that the DLCI changed to the active state. This
means you have established a connection from R1 through the Frame Relay switch to R2.
lrcr RZ, eri, llal lle ccrltralicr is ccrrecl l, lrsl lr,ir lc ir lle serial J l| a11ress cr Rl.
R2(cong-if)#exit
R2(cong)#exit
R2#ping 10.1.1.1
1.
2.
3.
4.
5.
6.
7.
8.
9.
Stand-Alone Labs
Next, use the Frame Relay show commands to prove that the connection is active. The show frame-relay
lmi ccrrar1 1isla,s lle lccal Maraererl lrlerace (lMl) lralc llal las leer e\clare1 lelWeer
the router and the Frame Relay switch.
R2#show frame-relay lmi
The s|ow frae-re|a traf|o command displays the global Frame Relay statistics since the last reload
of the router.
R2#show frame-relay trafc
The show frame-relay map command displays the mappings of the Layer 2 DLCI to the Layer 3 IP address.
R2#show frame-relay map
The show frame-relay PVC command displays all of the permanent virtual circuit (PVC) mappings for
lle rctler. !lese rairs are crl, lccall, sirilcarl lelWeer lle rctler ar1 lle lrare Rela, sWilcl.
R2#show frame-relay pvc
Lab 25: Frame Relay Hub-and-Spoke Topology
Objective: learr lc ccrltre a ltl-ar1-sc|e lcclc,.
Lab Equipment: Router 1, Router 2, Router 3, and Router 4 from the eRouters menu
\ctr ccrar,'s ccrcrale clce is ir Dallas, ar1 ils sales clces are ir Sar lrarciscc, NeW \cr|, ar1 !ara. \ct
Warl lc irlererl a ltl-ar1-sc|e lcclc, ir Wlicl all c lle sales clces ccrrecl lc lle ccrcrale clce lc
ser1 all 1ala, irclt1ir ccrrtricalicrs lelWeer sales clces.
S
a
r
_|rarc|s
c
o
!apa
N
e
w_York
0a||as
T72.T6.T.2
DL0I 20T
T72.T6.2.2
DL0I 30T
T72.T6.2.T
DL0I T03
T72.T6.T.T
DL0I T02
T72.T6.3.T
DL0I T04
T72.T6.3.2
DL0I 40T
First, assign the host names of Dallas, San_Francisco, New_York, and Tampa to Router 1, Router
2, Router 3, and Router 4, respectively.
NcW, erler irlerace ccrltralicr rc1e cr lle serial J irlerace cr Dallas, ar1 sel lle ercastlalicr
type to Frame Relay. Be sure to enable the interface.
Dallas(cong)#interface serial 0
Dallas(cong-if)#encapsulation frame-relay
Dallas(cong-if)#no shutdown
10.
11.
12.
13.
1.
2.
Stand-Alone Labs
Ne\l, creale a stlirlerace cr lle ccrreclicr rcr Dallas lc lle Sar lrarciscc sales clce.
Dallas(cong-if)#exit
Dallas(cong)#interface serial 0.100 point-to-point
Dallas(cong-subif)#
Assir lle stlirlerace lle DlOl rtrler cr lle ccrreclicr rcr Dallas lc Sar_lrarciscc, ar1 ccrl-
ure the subinterface with the appropriate IP address. Remember to enable the subinterface.
Dallas(cong-subif)#frame-relay interface-dlci 102
Dallas(cong-subif)#ip address 172.16.1.1 255.255.255.0
Dallas(cong-subif)#no shutdown
Oreale a stlirlerace cr lle ccrreclicr rcr Dallas lc lle sales clce ir NeW \cr|.
Dallas(cong-subif)#exit
Dallas(cong-subif)#
A11 lle ccrrecl DlOl cr lle ccrreclicr rcr Dallas lc NeW_\cr|, ar1 ccrltre lle arcriale l| a1-
dress for the subinterface. Remember to enable the subinterface.
Oreale a stlirlerace cr lle ccrreclicr rcr Dallas lc lle sales clce ir !ara.
Dallas(cong-subif)#
A11 lle ccrrecl DlOl cr lle Dallas lc !ara ccrreclicr, ar1 ccrltre lle arcriale l| a11ress cr
the subinterface. Remember to enable the subinterface.
Access the serial 0 interface on San_Francisco, set the encapsulation to Frame Relay, and enable the inter-
face.
San_Francisco(cong)#interface serial 0
San_Francisco(cong-if)#encapsulation frame-relay
San_Francisco(cong-if)#no shutdown
Because subinterfaces are not necessary for single connections, add the appropriate DLCI value.
San_Francisco(cong-if)#frame-relay interface-dlci 201
Set the IP address for this interface, and enable the interface.
San_Francisco(cong-if)#ip address 172.16.1.2 255.255.255.0
San_Francisco(cong-if)# no shutdown
Access the serial 0 interface on New_York, and set the encapsulation to Frame Relay.
New_York(cong)#interface serial 0
New_York(cong-if)#encapsulation frame-relay
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
Stand-Alone Labs
Add the appropriate DLCI value.
New_York(cong-if)#frame-relay interface-dlci 301
Set the IP address for this interface, and enable the interface.
New_York(cong-if)#ip address 172.16.2.2 255.255.255.0
New_York(cong-if)#no shutdown
Access the serial 0 interface on Tampa, and set the encapsulation to Frame Relay
Tampa(cong)#interface serial 0
Tampa(cong-if)#encapsulation frame-relay
Add the appropriate DLCI value.
Tampa(cong-if)#frame-relay interface-dlci 401
Ocrltre lle l| a11ress cr llis irlerace, ar1 eralle lle irlerace.
NcW, all irleraces slctl1 le t ar1 t. !c ccrlrr llis, ccrrecl lc Dallas ar1 lr, lc ir eacl c lle
llree sales clces.
Dallas(cong)#exit
Dallas#ping 172.16.1.2
Lab 26: Frame Relay Full Mesh Topology
Objective: learr lc ccrltre a tll resl lcclc,.
Lab Equipment: Router 1, Router 2, Router 3, and Router 4 from the eRouters menu
Aair, lle ccrar,'s ccrcrale clce is ir Dallas ar1 ils sales clces are ir Sar lrarciscc, NeW \cr|, ar1
!ara. !le sales clces slctl1 le alle lc access all ccrar, resctrces. \ct Warl lc eslallisl a tll resl
lcclc, ir Wlicl a cirl-lc-cirl lrare Rela, ccrreclicr lir|s lle ccrcrale clce lc eacl sales clce ar1 lir|s
eacl sales clce lc eer, cller sales clce.
The difference between the Frame Relay hub-and-spoke topology and the full mesh topology is that, with a full
resl lcclc,, eer, sales clce las a 1irecl ccrreclicr lc eer, cller sales clce ar1 lle ccrcrale clce. !lis
is a very redundant topology so, if one of the connections fails, data can still be transferred to every site by using
a different path.
13.
14.
15.
16.
17.
18.
Stand-Alone Labs
S
a
r
_|rarc|s
c
o
!apa
N
e
w_York
0a||as
T72.T6.T.2
DL0I 20T
T72.T6.2.2
DL0I 30T
T72.T6.2.T
DL0I T03
T72.T6.6.T
DL0I 204
T72.T6.6.2
DL0I 402
T72.T6.T.T
DL0I T02
T72.T6.3.T
DL0I T04
T72.T6.4.2
DL0I 302
T72.T6.5.T
DL0I 304
T72.T6.3.2
DL0I 40T
T72.T6.4.T
DL0I 203
T72.T6.5.2
DL0I 403
First, assign the host names of Dallas, San_Francisco, New_York, and Tampa to Router 1, Router
2, Router 3, and Router 4, respectively.
NcW, erler irlerace ccrltralicr rc1e cr lle serial J irlerace cr Dallas, ar1 sel lle ercastlalicr
type to Frame Relay. Be sure to enable the interface.
Dallas(cong)#interface serial 0
Dallas(cong-if)#encapsulation frame-relay
Dallas(cong-if)#no shutdown
Ne\l, creale a stlirlerace cr lle ccrreclicr lelWeer Dallas ar1 lle Sar lrarciscc sales clce.
Dallas(cong)#
Dallas(cong-subif)#
Assir lle stlirlerace lle DlOl rtrler cr lle ccrreclicr rcr Dallas lc Sar_lrarciscc, ar1 ccrl-
ure the subinterface with the appropriate IP address. Remember to enable the subinterface.
Oreale a stlirlerace cr lle ccrreclicr rcr Dallas lc lle sales clce ir NeW \cr|.
Dallas(cong-subif)#
A11 lle ccrrecl DlOl cr lle ccrreclicr rcr Dallas lc NeW_\cr|, ar1 ccrltre lle arcriale l| a1-
1.
2.
3.
4.
5.
6.
Stand-Alone Labs
Oreale a stlirlerace cr lle ccrreclicr rcr Dallas lc lle sales clce ir !ara.
Dallas(cong-subif)#
A11 lle ccrrecl DlOl cr lle ccrreclicr rcr Dallas lc !ara, ar1 ccrltre lle arcriale l| a11ress
for the subinterface. Remember to enable the subinterface.
Access the serial 0 interface of San_Francisco, set the encapsulation to Frame Relay, and enable the
interface.
San_Francisco(cong)#interface serial 0
San_Francisco(cong-if)#encapsulation frame-relay
San_Francisco(cong-if)#no shutdown
Oreale lle lrsl stlirlerace cr lle ccrreclicr rcr Sar_lrarciscc lc lle ccrcrale clce ir Dallas.
San_Francisco(cong-if)#interface serial 0.100 point-to-point
San_Francisco(cong-subif)#
A11 lle ccrrecl DlOl cr lle ccrreclicr rcr Sar_lrarciscc lc Dallas, ar1 ccrltre lle arcriale l|
address for the subinterface. Remember to enable the subinterface.
San_Francisco(cong-subif)#frame-relay interface-dlci 201
San_Francisco(cong-subif)#ip address 172.16.1.2 255.255.255.0
San_Francisco(cong-subif)#no shutdown
Create a subinterface for the connection from San_Francisco to New_York.
San_Francisco(cong-subif)#exit
San_Francisco(cong)#interface serial 0.200 point-to-point
A11 lle ccrrecl DlOl alte cr lle ccrreclicr rcr Sar_lrarciscc lc NeW_\cr|, ar1 ccrltre lle
appropriate IP address for the subinterface. Remember to enable the subinterface.
Create the subinterface for the connection from San_Francisco to Tampa.
San_Francisco(cong)#interface serial 0.300 point-to-point
A11 lle ccrrecl DlOl alte cr lle Sar_lrarciscc lc !ara ccrreclicr, ar1 ccrltre lle arcriale l|
7.
8.
9.
10.
11.
12.
13.
14.
15.
Stand-Alone Labs
Access the serial 0 interface of New_York, set the encapsulation to Frame Relay, and enable the
interface.
New_York(cong)#interface serial 0
New_York(cong-if)#encapsulation frame-relay
New_York(cong-if)#no shutdown
Oreale lle lrsl stlirlerace cr lle ccrreclicr rcr NeW_\cr| lc lle ccrcrale clce ir Dallas.
New_York(cong-if)#exit
New_York(cong)#interface serial 0.100 point-to-point
A11 lle ccrrecl DlOl alte cr lle ccrreclicr rcr NeW_\cr| lc Dallas, ar1 ccrltre lle arcriale l|
New_York(cong-subif)#frame-relay interface-dlci 301
New_York(cong-subif)#ip address 172.16.2.2 255.255.255.0
New_York(cong-subif)#no shutdown
Create the subinterface for the connection from New_York to San_Francisco.
New_York(cong-subif)#exit
A11 lle ccrrecl DlOl alte cr lle ccrreclicr rcr NeW_\cr| lc Sar_lrarciscc, ar1 ccrltre lle a-
propriate IP address for the subinterface. Remember to enable the subinterface.
Create the subinterface for the connection from New_York to Tampa.
New_York(cong-subif)#exit
A11 lle ccrrecl DlOl alte cr lle NeW_\cr| lc !ara ccrreclicr, ar1 ccrltre lle arcriale l| a1-
Access the serial 0 interface on Tampa, set the encapsulation to Frame Relay, and enable the interface.
Tampa(cong)#interface serial 0
Tampa(cong-if)#encapsulation frame-relay
Oreale lle lrsl stlirlerace cr lle ccrreclicr rcr !ara lc lle ccrcrale clce ir Dallas.
Tampa(cong-subif)#exit
Tampa(cong-if)#interface serial 0.100 point-to-point
A11 lle ccrrecl DlOl alte cr lle !ara lc Dallas ccrreclicr, ar1 ccrltre lle arcriale l| a11ress
for the subinterface. Remember to enable the subinterface.
Tampa(cong-subif)#frame-relay interface-dlci 401
Tampa(cong-subif)#ip address 172.16.3.2 255.255.255.0
Tampa(cong-subif)#no shutdown
16.
17.
18.
19.
20.
21.
22.
23.
24.
25.
Stand-Alone Labs
Create the subinterface for the connection from Tampa to San_Francisco.
Tampa(cong)#interface serial 0.200 point-to-point
A11 lle ccrrecl DlOl alte cr lle !ara lc Sar_lrarciscc ccrreclicr, ar1 ccrltre lle arcriale l|
Tampa(cong-if)#frame-relay interface-dlci 402
Create the subinterface for the connection from Tampa to New_York.
Tampa(cong)#interface serial 0.300 point-to-point
A11 lle ccrrecl DlOl alte cr lle !ara lc NeW_\cr| ccrreclicr, ar1 ccrltre lle arcriale l| a1-
Tampa(cong-subif)#frame-relay interface-dlci 403
NcW, all irleraces slctl1 le t ar1 t. !c lesl lle ccrltralicr, ccrrecl lc Dallas ar1 lr, lc ir eacl
c lle llree sales clces.
Dallas(cong)#exit
Ocrrecl lc Sar_lrarciscc, ar1 lr, lc ir lle cller llree clces.
San_Francisco(cong)#exit
San_Francisco#ping 172.16.1.1
Lab 27: Standard Access Lists
Objective: Oair e\erierce ccrltrir slar1ar1 access lisls.
l ,ct eel ccrl1erl alctl ccrltrir l| a11resses ar1 Rl|, eslallisl lle ccrltralicr ir lle lalle lelcW, ar1
then continue with step 10.
26.
27.
28.
29.
30.
31.
Stand-Alone Labs
Enable RIP on E0 and S0 on E0 on S0
Ethernet 0
24.17.2.1
255.255.255.240
24.17.2.2
255.255.255.240
Serial 0
24.17.2.17
255.255.255.240
24.17.2.18
255.255.255.240
Connect to Router 1, assign it a host name of Router1, and set the IP address on the Ethernet 0
interface to 24.17.2.1 255.255.255.240. Set the IP address on the serial 0 interface to 24.17.2.17
255.255.255.240. Remember to enable both interfaces.
Router>
Router#
Router#cong t
Router1(cong)#interface ethernet0
Router1(cong)#interface serial0
Router1(cong)#exit
Connect to Router 2, assign it a host name of Router2, and set the IP address on the Ethernet 0 inter-
face to 24.17.2.2 255.255.255.240. Remember to enable the interface.
Router>
Router>enable
Router#cong t
Router1(cong)#exit
From Router2, ping Router1s Ethernet 0 interface to ensure a connection exists.
Connect to Router 4, assign it a host name of Router4, and set the IP address on the serial 0 interface
to 24.17.2.18 255.255.255.240. Then, ping Router1s serial 0 interface.
1.
2.
3.
4.
Stand-Alone Labs
Router>
Router>enable
Router#cong t
Router4(cong)#exit
NcW llal l| a11resses lae leer ccrltre1 cr all irleraces, ,ct ree1 lc irlererl a rctlir rclcccl
to facilitate communication between Router2 and Router4. Enable Routing Information Protocol (RIP) on
Router1, and add the network for Ethernet 0 and serial 0.
Router1#cong t
Router1(cong)#exit
On Router2, enable RIP and add the network for Ethernet 0.
Router2#conf t
Router2(cong)#exit
On Router4, enable RIP and add the network for serial 0.
Router4#conf t
Router4(cong)#exit
Verify that you can ping Router2s Ethernet 0 interface from Router4.
NcW, ccrltre a slar1ar1 access lisl lc llcc| Rctler1 rcr leir alle lc ir RctlerZ. \ct slctl1 ccr-
ltre llis access lisl cr RctlerZ. lirsl, ccrrecl lc RctlerZ ar1 erler lclal ccrltralicr rc1e.
Router2#conf t
Router2(cong)#
Create access list 1 to block the single IP address 24.17.2.18. Here are three ways to accomplish this:
Router2(cong)#access-list 1 deny host 24.17.2.18
OR
Router2(cong)#access-list 1 deny 24.17.2.18 0.0.0.0
OR
Router2(cong)#access-list 1 deny 24.17.2.18
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
Next, issue the access-list 1 permit any command.
Router2(cong)#access-list 1 permit any
Now you need to apply the access list to the Ethernet 0 interface. You must specify the direction of traf-
lc lcW tcr Wlicl lle access lisl slctl1 al,. !le in arareler ccrltres lle access lisl lc al, lc
packets coming in from the network and traveling to the router. The out arareler ccrltres lle ac-
cess list to apply to packets traveling from the router out the interface to the network. In this scenario,
you should use the in parameter.
Router2(cong-if)#ip access-group 1 in
Note: This completes the Standard Access Lists lab. Please continue on to Lab 28: Verify Standard Ac-
cess Lists without accessing the Lab Navigator.
Lab 28: Verify Standard Access Lists
Objective: \eri, llal lle slar1ar1 access lisl creale1 ir lle reicts lal is ccrltre1 ccrrecll,.
Prerequisite: You must have just completed Lab 27: Standard Access Lists in order to complete this lab
successfully.
First, see if you can still ping Router2 from Router4. Connect to Router4, and try to ping Router2s Eth-
ernet 0 interface (24.17.2.2).
Router>enable
If you see UUUUU, indicating that the ping was not successful, then your access list is working cor-
rectly.
NcW, ccrrecl lc RctlerZ ar1 ieW lle rtrrir ccrltralicr ir cr1er lc eri, llal lle access lisl is rtr-
ning on the interfaces.
Router>enable
You can also view which access lists are applied to the interfaces by using the show ip interface
command.
The show access-lists command will display which access lists have been created on the router. It will
also tell you which lines have been used and how many packets have been either permitted or denied.
Router2#show access-lists
Note: Continue on to Lab 29: Extended Access Lists without accessing the Lab Navigator. This will save
,ct lle lrctlle c ccrltrir lle sare l| a11resses aair.
11.
12.
1.
2.
3.
4.
5.
Stand-Alone Labs
Lab 29: Extended Access Lists
Objective: Oair e\erierce ccrltrir e\ler1e1 access lisls.
If you have just completed Lab 28: Verifying Standard Access Lists, then all you need to do is execute the
no ip access-group 1 in command on the Ethernet 0 interface of Router2, and then start this lab at step
10.
Router2>enable
Router2#conf t
Router2(cong-if)#no ip access-group 1 in
Note: l ,ct lae rcl ccrlele1 lal Z&: \eri,ir Slar1ar1 Access lisls ar1 ,ct eel ccrl1erl alctl ccrltr-
ir l| a11resses ar1 Rl|, eslallisl lle ccrltralicr ir lle lalle lelcW ar1 ller ccrlirte Will sle lJ.
Enable RIP on E0 and S0 on E0 on S0
Ethernet 0
24.17.2.1
255.255.255.240
24.17.2.2
255.255.255.240
Serial 0
24.17.2.17
255.255.255.240
24.17.2.18
255.255.255.240
Connect to Router 1, assign it a host name of Router1, and set the IP address on the Ethernet 0
interface to 24.17.2.1 255.255.255.240. Set the IP address on the serial 0 interface to 24.17.2.17
255.255.255.240. Remember to enable both interfaces.
Router>
Router>enable
Router#conf t
Router1(cong)#exit
1.
2.
Stand-Alone Labs
Connect to Router 2, assign it a host name of Router2, and set the IP address on the Ethernet 0 inter-
face to 24.17.2.2 255.255.255.240. Remember to enable the interface.
Router>
Router>enable
Router#cong t
Router2(cong)#exit
Ping Router1s Ethernet 0 interface to ensure that a connection exists.
Connect to Router 4, assign it a host name of Router4, and set the IP address on the serial 0 interface
to 24.17.2.18 255.255.255.240. Then, ping Router1s serial 0 interface.
Router>
Router>enable
Router#conf t
Router4(cong)#exit
Now you need to implement a routing protocol to facilitate communication between Router2 and
Router4. Enable Routing Information Protocol (RIP) on Router1, and add the network for Ethernet 0 and
serial 0.
Router1#cong t
Router1(cong)#exit
On Router2, enable RIP and add the network for Ethernet 0.
Router2#conf t
Router2(cong)#exit
On Router4, enable RIP and add the network for serial 0.
Router4#conf t
3.
4.
5.
6.
7.
8.
Stand-Alone Labs
Router4(cong)#exit
Verify that you can ping Router2s Ethernet 0 interface from Router4.
!le e\ler1e1 access lisls ,ct creale slctl1 acccrlisl lWc llirs. lirsl, allcW crl, !elrel lralc rcr
lle stlrel c c Rctlerl's serial J irlerace lc ccre irlc Rctlerl. Ne\l, allcW ar, lralc rcr Rctlerl's
Ellerrel J stlrel lc lrael ar,Wlere. Ocrrecl lc Rctlerl, ar1 erler lclal ccrltralicr rc1e.
Router1#conf t
Router1(cong)#
!c allcW crl, !elrel lralc rcr lle Z1.l!.Z.lC stlrel, creale access lisl lJl. Use lle log keyword to
display output to the router every time this line on the access list is invoked.
Router1(cong)#access-list 101 permit tcp 24.17.2.16 0.0.0.15 any eq telnet log
!c erril all lralc rcr lle Z1.l!.Z.J stlrel, creale access lisl lJZ, ar1 tse lle log keyword.
Router1(cong)#access-list 102 permit ip 24.17.2.0 0.0.0.15 any log
NcW, al, llese access lisls lc lle irleraces. lirsl, erler irlerace ccrltralicr rc1e cr lle serial J
interface of Router1, and apply access list 101 inbound.
For Ethernet 0 on Router1, apply access list 102 inbound.
Note: !c ra|e stre lle access lisls are ccrltre1 ccrrecll,, ccrlirte cr lc lal JJ: \eri, E\ler1e1 Ac-
cess Lists without accessing the Lab Navigator.
Lab 30: Verify Extended Access Lists
Objective: \eri, llal lle e\ler1e1 access lisls creale1 ir lal Z9 are ccrltre1 ccrrecll,.
Prerequisite: You must have just completed Lab 29: Extended Access Lists in order to complete this lab successfully.
Test whether the extended access lists created in Lab 29 are working properly. Connect to Router4, and
lr, lc ir Rctlerl's serial J irlerace. l lle access lisls are ccrltre1 ccrrecll,, ,ct slctl1 rcl le alle
to ping the serial interface.
Router4>enable
NcW llal ,ct lae erile1 llal lle access lisls are llcc|ir irs lc Rctlerl rcr lle stlrel c c
Rctlerl's serial J irlerace, eri, llal !elrel lralc rcr llal stlrel is allcWe1 lc reacl Rctlerl. Ocr-
9.
10.
11.
12.
13.
14.
1.
2.
Stand-Alone Labs
nect to Router1, enable Telnet access, and then set the password to boson.
Router1(cong)#
Router1(cong)#line vty 0 4
Router1(cong-line)#login
Router1(cong-line)#password boson
Router1(cong-line)#exit
Connect to Router4 again, and try to telnet into Router1s serial 0 interface.
Router4#telnet 24.17.2.17
If Telnet access is permitted, you should see the host name in the router prompt change to Router1.
Now, press the CTRL+SHIFT+6 key combination followed by the X key to return to Router4. Then, type
disconnect 1 to close the connection to Router1.
Press CTRL+SHIFT+6, then press X
Router4#disconnect 1
Connect to Router2, and see if you can ping Router4s serial 0 interface.
Router2>enable
Consider why the ping is unsuccessful. The packet starts at Router2, travels through Router1, and reaches
Router 4. Once it arrives at Router4, it is repackaged and sent back to Router1. When Router4 repackages
the packet, the packets source IP address becomes the destination IP address, and the destination IP
address becomes the source IP address. When the packet encounters the access list on Router1s serial 0
interface, it is blocked because the packets source IP address is Router4s serial 0 address.
See if you can ping Router1s Ethernet 0 interface from Router2.
Now, try to telnet into Router1s Ethernet 0 interface from Router2. If Telnet access is permitted, you should
see the host name in the router prompt change to Router1. Press the CTRL+SHIFT+6 key combination fol-
lowed by the X key to return to Router4. Then, type disconnect 1 to close the connection to Router1.
!c eri, llal lle access lisls are ccrltre1 cr lle irleraces, 1isla, lle rtrrir ccrltralicr.
You can also view which access lists are applied to the interfaces by using the show IP interface command.
The show access-lists command displays which access lists have been created on a router. The output
of this command also tells you which lines of the access list have been used and how many packets
have been permitted or denied.
Router1#show access-lists
3.
4.
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
Lab 31: Named Access Lists
Objective: Oreale a rare1 access lisl llal Will 1er, all ir lralc rcr |O l lc Rctler l, ltl Will eralle all ac-
cess from Router 4 to Router 1. For this lab, the access list must be added on Router 1.
Lab Equipment: Router 1 and Router 4 from the eRouters menu and PC 1 from the eStations menu
Eslallisl lle ccrltralicrs ctllire1 ir lle lalle lelcW. Use lle winipcfg command on PC 1 to
ccrltre lle l| a11ress.
Device Router 1 Router 4 PC 1
Host Name Router1 Router4 PC 1
Ethernet 0 192.168.1.17 /28 192.168.1.18 /28
Serial 0 192.168.1.1 /28 192.168.1.2 /28
Default Gateway 192.168.1.17
Ocrltre Rl| cr lle lWc rctlers. Be stre lc tse lle rcer relWcr| slalererls.
Use the show ip route command on each router to make sure that the routes have been received.
Verify that you can ping Router1 from PC 1.
C:>ping 192.168.1.1
Oreale ar access lisl llal reerls ir lralc criiralir rcr |O l ar1 1eslire1 cr Rctlerl rcr
reaching Router1. Typically, this access list could be placed on either Router4 or Router1. It often makes
more sense to place the access list on the router closest to the source as possible; this helps keep un-
recessar, lralc c lle lac|lcre. lcr llis e\arle, lcWeer, lle access lisl Will le lace1 cr Rctlerl
cr irlctr1 lralc.
Router1(cong)#ip access-list extended deny_ping
Router1(cong-ext-acl)#deny icmp host 192.168.1.18 192.168.1.1 0.0.0.0 log
Router1(cong-ext-acl)#permit ip any any log
!le lrsl slalererl alce 1elres lle access lisl as e\ler1e1. !le seccr1 lire 1eries ar, lOM| lralc
with a source IP address of 192.168.1.18 that is destined for 192.168.1.1; the wildcard mask of 0.0.0.0
in this line means that the IP address must be matched exactly. Notice how the host command is used
cr lle lrsl arl c lle access lisl ar1 lle Wil1car1 ras| c 0.0.0.0 is used for the second part of the ac-
1.
2.
3.
4.
5.
Stand-Alone Labs
cess list. The host command and the wildcard mask of 0.0.0.0 both do the same thing. The log keyword
allows you to double-check your work.
Ne\l, al, lle access lisl lc irlctr1 lralc cr lle serial J irlerace c Rctlerl.
Router1(cong-ext-acl)#exit
Router1(cong-if)#ip access-group deny_ping in
Now, connect to PC 1 and send a test ping to Router1. Is the ping successful? Connect to Router4, and
send a test ping to the serial 0 interface of Router1.
C:>ping 192.168.1.1
Ocrrecl lc Rctlerl aair, ,ct slctl1 see lWc searale lc ressaes. !le lrsl cre is 1er,ir lle ir
from PC 1, and the second is allowing the ping from Router4.
Lab 32: Advanced Extended Access Lists
Objective: Ocrltre e\ler1e1 access lisls lc lller ctl relWcr|-lc-relWcr| lralc, lcsl-lc-lcsl lralc, ar1
relWcr|-lc-lcsl lralc.
Lab Equipment: Router 1 and Router 2 from the eRouters menu and PC 1, PC 2, PC 3, PC 4, and PC 5 from the
eStations menu
Eslallisl lle ccrltralicrs ctllire1 ir lle lalles lelcW.
Device Router 1 Router 2
Host Name Router1 Router2
FA0/0 192.168.3.1 /24 192.168.1.129 /25
FA0/1 192.168.1.1 /25
Serial 0 192.168.2.1 /24 192.168.2.2 /24
Host IP Address Subnet Mask Default Gateway
PC 1 192.168.3.2 255.255.255.0 192.168.3.1
PC 2 192.168.1.130 255.255.255.128 192.168.1.129
PC 3 192.168.1.131 255.255.255.128 192.168.1.129
PC 4 192.168.1.2 255.255.255.128 192.168.1.1
PC 5 192.168.1.3 255.255.255.128 192.168.1.1
Ocrltre Rl| cr lle lWc rctlers. Be stre lc tse lle rcer relWcr| slalererls.
6.
7.
8.
1.
2.
Stand-Alone Labs
Router1#conf t
Router2#conf t
Use the show ip route command on each router to make sure that the routes have been received.
Verify that you can ping PC 1 from PC 2.
C:>ping 192.168.3.2
Network-to-Network Access List
E\arire lle relWcr| 1iarar lelcW. !le lrsl access lisl ,ct creale slctl1 allcW crl, lralc rcr lle
Administration network (PC 4 and PC 5) destined for PC 1 on the Corporate HQ network. To accomplish
llis, tse ar e\ler1e1 access lisl. Becatse ,ct are allcWir all lralc, ,ct slctl1 tse l| as lle rclcccl.
The access list should look something like the following:
Router1(cong)#access-list 100 permit ip 192.168.1.0 0.0.0.127 192.168.3.0
0.0.0.255 log
Router1(cong)#access-list 100 permit ip 192.168.2.0 0.0.0.0 any
!lis access lisl is er, sirle lecatse ,ct are crl, allcWir lWc l,es c lralc ar1 1er,ir all cller
lralc. Becatse llere is ar irlicil 1er, al lle er1 c all access lisls, ,ct crl, ree1 a permit statement
for the pings and a permit statement for the RIP broadcasts.
3.
4.
5.
Stand-Alone Labs
P0T
P02
P03
P04
P05
RouLer T SwLch T RouLer 2
SwLch 2
NeLwork Users
0orporaLe H0s
AdmnsLraLon
SwLch 3
NcW ,ct ree1 lc al, lle access lisl lc lle irlerace. Becatse lle lralc is ccrir rcr RctlerZ ar1
going to Router1, you should place the access list on Router1s serial 0 interface. The access list will
clec| all irlctr1 lralc.
Router1#conf t
To test the access list, try to ping PC 1 from PC 2, PC 3, PC 4, and PC 5. PC 2 and PC 3 should not be
able to ping PC 1, but PC 4 and PC 5 should. If this access list works, continue on to the next step
C:>ping 192.168.3.2
Host-to-Host Access List
lr llis crlicr c lle lal, ,ct Will llcc| ar ir1ii1tal |O rcr accessir lle cerlral lle serer. |O Z is leir
tse1 l, a reW erlc,ee Wlcr ,ct 1c rcl Warl lc lae access lc lle lle serer (|O 5) cr JJ 1a,s. !c acccr-
plish this, you decide to implement an access list on Router2 that will block access to PC 5 only from PC 2. In
this instance, you are setting the access list manually. The list must be manually removed after 30 days.
For lab scenario purposes, you should use the log keyword. This will show logging output on the screen
of Router2 when the access list is invoked. For this part of the lab, the log will show up on the screen
only when you deny access from PC 2.
Router2(cong)#access-list 101 deny ip host 192.168.1.130 192.168.1.3 0.0.0.0 log
Router2(cong)#access-list 101 permit ip any any
6.
7.
8.
Stand-Alone Labs
Apply the access list to Router2s Fast Ethernet 0/0 interface.
Router2#conf t
Router2(cong)#interface FastEthernet 0/0
Connect to PC 2, and verify that you cannot ping PC 5. Connect to PC 3, and verify that you can ping PC 5.
C:>ping 192.168.1.3
Finally, connect to Router2, and verify that the log statements displayed on the console match the
corresponding pings sent from the PCs.
Network-to-Host Access List
Before you create this access list, remove the preceding access lists from Router1 and Router2.
Router2(cong)#interface FastEthernet 0/0
Oreale ar e\ler1e1 access lisl llal llcc|s all lralc lc |O l rcr lle NelWcr| Users area ir lle lcclc,.
The access list should look something like the following:
Router2(cong)#access-list 102 deny ip 192.168.1.128 0.0.0.127 host 192.168.3.2 log
Router2(cong)#access-list 102 permit ip any any
Al, llis access lisl lc ctllctr1 lralc cr lle serial J irlerace c RctlerZ.
Router2(cong-if)#ip access-group 102 out
To test this access list, try to ping PC 1 from PC 2 or PC 3. The pings should fail. You can also view the
lc lle cr RctlerZ.
C:>ping 192.168.3.2
Lab 33: Telnet
Objective: Learn to establish a Telnet session between two routers.
Note: The Simulator has limited Telnet support beyond the commands shown within this lab.
Connect to Router 1, and set the host name to Router1. Then, access the Telnet lines. Each line in a
router represents an active Telnet session that the router can support. Routers in the Simulator support
le !elrel lires, sc tse lle line vty 0 4 command.
Router>enable
Router#conf t
Router1(cong)#line vty 0 4
Router1(cong-line)#
9.
10.
11.
12.
13.
14.
15.
1.
Stand-Alone Labs
Ocrltre lle rctler lc retire lle tse c a lcir assWcr1.
Router1(cong-line)#login
Ocrltre boson as the password that will be used to establish a Telnet session.
Router1(cong-line)#password boson
Now, assign the IP address of 34.25.67.18 255.255.255.224 to Router1s Ethernet 0 interface, and en-
able the interface.
Router1(cong-line)#exit
Next, connect to Router 2, set its host name to Router2, and then access its Ethernet 0 interface.
Router>en
Router#conf t
Router2(cong-if)#
Assign the IP address 34.25.67.2 255.255.255.224 to Router2s Ethernet 0 interface, and enable the inter-
face.
From Router2, telnet into Router1s Ethernet 0 interface.
You will be prompted for a password. Type the boson password, and press ENTER. You will see a dialog
box informing you that NetSim provides limited support for Telnet. Notice that the router host name
changes from Router2 to Router1, which indicates that you have established a Telnet session to
Router1. Now, press the CTRL+SHIFT+6 key combination, then immediately press the X key. Notice that
the host name changes back to Router2.
Password:
Router1#
Router2#
Type the show sessions command to view all active Telnet sessions. To resume a Telnet session, specify
the number of the session you would like to resume. In this case, there is only one Telnet session, so
type the resume 1 command.
Router2#show sessions
Router2#resume 1
Router1#
Because you have telneted into Router1 again, the host name has changed to Router1 again. Press the
CTRL+SHIFT+6 key combination followed by the X key to return to Router2.
Router1#
2.
3.
4.
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
CTRL+SHIFT+6 followed by X
Router2#
To disconnect the session, type the disconnect 1 command.
Lab 34: VLANs
Objective: Beccre ariliar Will lle lerells c \lANs cr a lAN Wlile tsir a Oiscc Oalal,sl l9JJ series sWilcl.
Lab Equipment: Router 1 from the eRouters menu, Switch 1 from the eSwitches menu, and PC 1 and PC 2 from
the eStations menu
lr llis lal, ,ct are cir lc ccrltre a rctler ar1 a sWilcl lc stcrl \lANs. lirsl, ,ct Will sel t |O l ar1 |O
2 so that they can ping each other through the switch. You will then change the VLANs on the switch and observe
llal lle |Os car rc lcrer ir eacl cller cr lle rctler. Ne\l, ,ct Will clare lle ccrltralicr cr lle sWilcl sc
llal lle |Os are cr lle sare \lAN, lle, Will ller le alle lc ir eacl cller aair. \ct Will ccrltre lle relWcr|
lc lle secilcalicrs slcWr ir lle 1iarar lelcW.
P0T
P02
24.T7.2.3
24.T7.2.4
RouLer T SwLch T
24.T7.2.T
Fa 0/0 Fa 0/26
E 0/T
E 0/2
Connect to Router 1, assign it a host name of Router1, ar1 ccrltre lle l| a11ress c Z1.l!.Z.l
255.255.255.0 on the Fast Ethernet 0/0 interface.
Router>enable
Router#
Router#conf t
Router1(cong)#interface Fast0/0
Router1(cong-if)#ip add 24.17.2.1 255.255.255.0
Connect to PC 1, and set the IP address to 24.17.2.3 255.255.255.0 with a default gateway of 24.17.2.1.
C:>winipcfg
11.
1.
2.
Stand-Alone Labs
Connect to PC 2, and set the IP address to 24.17.2.4 255.255.255.0 with a default gateway of 24.17.2.1.
C:>winipcfg
You should now be able to ping Router1 and PC 1 from PC 2.
C:>ping 24.17.2.1
C:>ping 24.17.2.3
Now, connect to Switch 1 and set up the VLANs. The switch automatically has VLAN 1 set up on all
ports. In this case, you need to set up a separate VLAN for the PCs. Start by creating VLAN 22.
>enable
#cong t
(cong)#vlan 22 name pcs
Now you need to assign the ports to the new VLAN. Start by assigning port 1 for PC 1 to VLAN 22.
(cong)#int e0/1
(cong-if)#vlan-membership static 22
Connect to PC 2 again, and try to ping Router1 and PC 1.
C:>ping 24.17.2.1
C:>ping 24.17.2.3
Consider the result. You were able to ping from PC 2 to Router1, but not from PC 2 to PC 1. Why? On the
switch, you set VLAN 22 to only cover port 1. That means ports 2 through 12 and the two Fast Ethernet
ports were still on VLAN 1. So, when the ping packets came into the switch from PC 2, they were tagged
with VLAN 1 and could only travel out of ports tagged with VLAN 1. (Although there are exceptions to this
rule, they will not be covered in this lab manual.) Consequently, the ping packets could not go out port 1 to
PC 1.
Ocrrecl lc lle sWilcl aair ar1 ccrltre crl Z, Wlicl is Wlere |O Z is ccrrecle1, lc le irclt1e1 ir \lAN
22.
(cong-if)#exit
(cong)#int e0/2
Connect to PC 2 once again, and repeat the pings to Router1 and PC 1.
C:>ping 24.17.2.1
C:>ping 24.17.2.3
What did you notice that was different? You should have been able to ping PC 1 but not Router 1. When
the ping packets came in, they were tagged with VLAN 22. Consequently, the packets could only travel
out port 1 to PC 1. This is what you wanted to accomplish.
Connect to the switch again, and view the VLAN port assignments by using the show VLAN and show
VLAN-membership commands.
(cong-if)#end
#show vlan
#show vlan-membership
3.
4.
5.
6.
7.
8.
9.
10.
Stand-Alone Labs
On the switch, assign FastEthernet 0/26 to VLAN 22. This will allow you to ping all devices.
#conf t
(cong)#interface FastEthernet 0/26
Send test pings from Router1 to PC 1 and PC 2, and from PC 1 and PC 2 to Router1.
C:>ping 24.17.2.1
C:>ping 24.17.2.1
Lab 35: VTP
Objective: Ocrltre \lANs cr Oiscc Oalal,sl Z95J sWilcles.
Lab Equipment: Switch 3 and Switch 4 from the eSwitches menu
Goals:
Assign VLANs to multiple ports.
Ocrltre \lAN !rtr|ir |rclcccl (\!|) lc eslallisl a serer ar1 clierl ccrreclicr.
Create a trunk line between the two switches to carry the VLANs.
!esl lle ccrltralicr.
Start by assigning host names and IP addresses to Switch 3 and Switch 4 according to the table below.
Device Switch 3 Switch 4
Host Name Switch3 Switch4
IP Address (VLAN1) 10.1.1.1 10.1.1.2
Subnet Mask 255.255.255.0 255.255.255.0
Switch3#conf t
Switch3(cong)#interface vlan1
Switch3(cong-if)#ip address 10.1.1.1 255.255.255.0
Switch3(cong-if)#no shutdown
Switch3(cong-if)#end
Switch3#
Switch4#conf t
Switch4(cong)#interface vlan1
Switch4(cong-if)#ip address 10.1.1.2 255.255.255.0
Switch4(cong-if)#no shutdown
11.
12.
1.
Stand-Alone Labs
Switch4#
Verify that the switches are connected to each other by pinging Switch3 from Switch4.
Switch4#ping 10.1.1.1
Add VLAN 8 and VLAN 14 to Switch3, assign ports 2 through 5 to VLAN 8, and assign ports 6 through 10
to VLAN 14.
Switch3#vlan database
Switch3(vlan)#vlan 8
Switch3(vlan)#vlan 14
Switch3(vlan)#exit
Switch3#conf t
Switch3(cong)#interface range fast0/2 5
Switch3(cong-range)#switchport access vlan 8
Switch3(cong-range)#exit
Switch3(cong)#interface range fast 0/6 10
Switch3(cong-range)#switchport access vlan 14
Switch3(cong-range)#exit
Switch3(cong)#exit
Switch3#
Use the show vlan ccrrar1 cr SWilclJ lc eri, llal ,ctr ccrltralicrs are ccrrecl.
Switch3#show vlan
B, 1eatll, a Oalal,sl sWilcl is ccrltre1 as a \!| serer. Ocrltre SWilclJ as a \!| serer, ar1 ccr-
ltre SWilcl1 as a \!| clierl. Alsc, clare lle \!| 1crair lc Boson and add a VTP password of rules.
Switch3(vlan)#vtp server
Switch3(vlan)#vtp domain Boson
Switch3(vlan)#vtp password rules
Switch3(vlan)#exit
Switch3#
Switch4(vlan)#vtp client
Switch4(vlan)#vtp domain Boson
Switch4(vlan)#vtp password rules
Switch4(vlan)#exit
Switch4#
Ne\l, creale lle lrtr| lir| llal Will lrarscrl lle \lAN ccrltralicrs rcr SWilclJ lc SWilcl1. !c
accomplish this, enable trunking on the port that links between the two switches. The encapsulation
method will be 802.1q because that is the only supported encapsulation for the 2950 switch.
Switch3# conf t
Switch3(cong)#interface fast 0/12
Switch3(cong-if)#switchport mode trunk
2.
3.
4.
5.
6.
Stand-Alone Labs
Switch4#conf t
Switch4(cong)#interface fast 0/12
Switch4(cong-if)#switchport mode trunk
Aler llis ccrltralicr, ,ct slctl1 le alle lc ieW lle \lANs rcr SWilclJ cr SWilcl1. !c eri, lle
\lAN ccrltralicrs, tse lle show vlan command on Switch4. Also, the show vtp status command will
1isla, scre \!|-secilc ircrralicr.
Switch4# show vlan
Switch4# show vtp status
|ab J: 0SP| S|rg|e Area 0or|garat|or ar4 !est|rg
Objective: Ocrltre Rctlers l, Z, ar1 1 Will l| a11resses ar1 lle Oer Slcrlesl |all lirsl (OS|l) Rctlir
Protocol.
Goals:
Ocrltre lle OS|l rctlir rclcccl.
Display the OSPF protocol information.
Ethernet 0 10.1.1.1 /24 10.1.1.2 /24
Serial 0 172.16.10.1 /16 172.16.10.2 /16
7.
1.
Stand-Alone Labs
T0.T.T.2 /24 T0.T.T.T /24
T72.T6.T0.T
/T6
T72.T6.T0.2
/T6
RouLer 2 RouLer T
RouLer 4
Verify that each router can ping its directly connected neighbors.
Add OSPF to Router1; use the Process ID number 100.
Router1#
Router1(cong)# router ospf 100
Router1(cong-router)#network 10.1.1.0 0.0.0.255 area 0
Now, add OSPF to Router2.
Router2#
Router2(cong)#router ospf 100
Now, add OSPF to Router4.
Router4#
Router4(cong)#router ospf 100
2.
3.
4.
5.
6.
7.
Stand-Alone Labs
OSPF should now be running on all three routers. Press CTRL+Z to exit to privileged mode, and see if you
can ping non-directly connected routers. From Router2, you should now be able to ping Router4s serial 0
interface.
Next, connect to Router4 and ping Router2s Ethernet 0 interface.
l ,ct car ir lcll 1eices, ller ,ct lae ccrrecll, ccrltre1 rctlir. l ,ct Were rcl stccesstl, lrace
back through the steps.
Now, display the routing table on Router2.
Disla, lle secilc l| rctlir rclcccl ircrralicr cr RctlerZ.
Router2#show ip protocols
Type the command that will display the OSPF database.
Router2#show ip ospf database
Type the command that will display all of the OSPF neighbors.
Router2#show ip ospf neighbor
Finally, type the command that will display all router interfaces that are running OSPF.
Router2#show ip ospf interface
8.
9.
10.
11.
12.
13.
14.
15.
Stand-Alone Labs

Boson 6

Încărcat de

Informații document

Descriere originală:

Drepturi de autor

Formate disponibile

Partajați acest document

Partajați sau inserați document

Opțiuni de partajare

Vi se pare util acest document?

Este necorespunzător acest conținut?

Drepturi de autor:

Formate disponibile

Boson 6

Încărcat de

Drepturi de autor:

Formate disponibile

89 Boson NetSim for CCNA Lab Manual

NETSIM FOR CCNA LAB MANUAL

S-ar putea să vă placă și