Upload
amaba3d
View
47
Download
7
Tags:
Embed Size (px)
Citation preview
Zoom Technologies® 1
Name: ______________________ Faculty:_____________________ Batch: ______________________
Branch:_____________________
CCNA
Cisco Certified Network Associate Lab Guide
ZOOM Techn
ologie
s
Zoom Technologies® 2
Lab completion report
Name:_________________________ Batch:_________________________
LAB DATE Student Sig Lab Coordinator Sig Remarks
Initial
WAN Int
Static
RIP
EIGRP
OSPF
Access List
NAT
Frame
Relay
VLAN
VTP
Inter-VLAN
Port Security
Sign Of the Faculty _________________________ Imp Note: After completing the lab on every session take the sign
of the lab coordinator, course completion certificate will not be issued otherwise.
ZOOM Techn
ologie
s
Zoom Technologies® 3
ZOOM Techn
ologie
s
Zoom Technologies® 4
Lab 1 - INITIAL ROUTER CONFIGURATION
User mode:
Router >
Router > enable
Show commands:
Router # show running-config
Router # show startup-config
Router # show version
Router # show flash
Moving to Global configuration mode:
Router # configure terminal
Router(config) #
Assigning Hostname to Router
Rotuer(config)#Hostname Hyderabad
Assigning ip address to Ethernet interface:
Hyderabad (config) # interface Ethernet 0
Hyderabad (config-if) # ip address 192.168.1.1 255.255.255.0
Hyderabad (config-if) # no shut
Assigning Telnet password:
Hyderabad (config) # line vty 0 4
Hyderabad (config-line) #login
Hyderabad (config-line) #password zoom
Hyderabad (config-line) #exit
Hyderabad (config) #exit
Assigning console password:
Hyderabad (config) # line con 0
Hyderabad (config-line) # login
Hyderabad (config-line) # password ccna
Hyderabad (config-line) # exit
Hyderabad (config) # exit
Assigning Auxiliary password:
Hyderabad (config) # line aux 0
Hyderabad (config-line) # login
Hyderabad (config-line) # password cisco
Hyderabad (config-line) # exit
Hyderabad (config) # exit
Assigning enable password:
Hyderabad (config) # enable password cisco
ZOOM Techn
ologie
s
Zoom Technologies® 5
Hyderabad (config) # enable secret zoom
Checking the Changes in running-config
Hyderabad # show running-config
Hyderabad # show startup-config
Commands to save the configuration:
Hyderabad # copy running-config startup-config
( OR )
Hyderabad # write memory
( OR )
Hyderabad # wr
Checking the startup-config:
Hyderabad # show startup-config
Check the following if you have completed in the labs
1. Establish Telnet session to the Router
2. Configure hostname to router.
3. Configuring Ethernet interface of the Router
4. Password protection to the Telnet session
5. Password protection to the Console session
6. Password protection to the Auxiliary session
7. Setting up privilege mode Password.
8. Context sensitive help
9. Display the contents of Running-Configuration
10.Display the contents of Startup-configuration
11.Saving the Configuration
12.Establishing a console session to the Router
Important Note Please don’t forget to fill in the Lab Completion Report after the lab and take the signature of the lab coordinator as Course completion certificate will not be issued otherwise.
ZOOM Techn
ologie
s
Zoom Technologies® 6
Lab 2 - WAN INTERFACE CONFIGURATION:
ON CHE:
CHE# configure terminal
CHE(config)# interface serial 0
CHE(config-if)# ip address 172.16.0.1 255.255.0.0
CHE(config-if)# no shutdown
CHE(config-if)# encapsulation hdlc
CHE(config-if)# exit
CHE(config)# exit
ON HYD:
HYD # configure terminal
HYD (config) # interface serial 1
HYD(config-if)#ip address 172.16.0.2 255.255.0.0
HYD(config-if)#no shutdown
HYD(config-if)#clock rate 64000
HYD(config-if)#encapsulation hdlc
HYD(config-if)#^z
HYD# configure terminal
HYD(config) #interface serial 0
HYD(config-if)#ip address 172.17.0.1 255.255.0.0
HYD(config-if)#no shutdown
HYD(config-if)#encapsulation hdlc
HYD(config-if)#clock rate 64000
HYD(config-if)#^z
ON BAN:
BAN# configure terminal
BAN(config)#interface serial 1
BAN(config-if)#ip address 172.17.0.2 255.255.0.0
BAN(config-if)#no shutdown
BAN(config-if)#encapsulation hdlc
BAN(config-if)#^z
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 7
Fill the Blanks before Starting your configuration
Router Name:_________________
ROUTER # configure terminal
ROUTER (config) # interface serial _____
ROUTER (config-if) # ip address ___________________ ___________________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # exit
ROUTER (config) # interface serial _____
ROUTER (config-if) # ip address ___________________ ___________________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit ZOOM Techn
ologie
s
Zoom Technologies® 8
Show commands:
Serial interface troubleshooting
Router # show interfaces s 0
1. Serial 0 is up , line protocol is up (connectivity is fine)
2. Serial 0 is administratively down, line protocol is down
(No Shutdown has to be given on the local router serial interface)
3. Serial 0 is up, line protocol is down
(Encapsulation mismatch or clock rate has to be given on DCE)
4. Serial 0 is down, line protocol is down
(Serial interface on the remote router has to be configure)
Router # show controllers s 0
(To know whether the cable connected to the serial interface is DCE or DTE)
ZOOM Techn
ologie
s
Zoom Technologies® 9
Lab 3.1 - STATIC ROUTING
AREA 0 ON CHE :
CHE # config terminal
CHE(config) # ip routing CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2
ON HYD :
HYD # config terminal
HYD(config) # ip routing HYD(config) # ip route 192.168.1.0 255.255.255.0 172.16.0.1 HYD(config) # ip route 192.168.2.0 255.255.255.0 172.17.0.2
ON BAN:
BAN # config terminal BAN(config) # ip routing BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1
Show commands:
ROUTER # show ip route
Debug commands:
ROUTER # debug ip routing
ROUTER # debug ip packet
E0
192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 10
Fill the Blanks before Starting your configuration
Router Name:_________________
ROUTER # configure terminal
ROUTER(config) # interface serial 0
ROUTER(config-if) # ip address ___________ _____________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # exit
ROUTER(config) # interface serial 1
ROUTER(config-if) # ip address ___________ _____________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # ip route _________________ ___________________ _________
ROUTER(config) # ip route _________________ ___________________ _________ ZOOM Techn
ologie
s
Zoom Technologies® 11
Lab 3.2 - STATIC ROUTING
AREA 0 ON CHE :
CHE # config terminal CHE(config) # ip routing
CHE(config) # ip route 10.0.0.0 255.0.0.0 172.16.0.2 CHE(config) # ip route 192.168.2.0 255.255.255.0 172.16.0.2 CHE(config) # ip route 172.17.0.0 255.255.0.0
172.16.0.2
ON HYD :
HYD # config terminal HYD(config) # ip routing
HYD(config) # ip route 192.168.1.0 255.255.255.0 172.16.0.1 HYD(config) # ip route 192.168.2.0 255.255.255.0 172.17.0.2
ON BAN:
BAN # config terminal
BAN(config) # ip routing BAN(config) # ip route 10.0.0.0 255.0.0.0 172.17.0.1 BAN(config) # ip route 192.168.1.0 255.255.255.0 172.17.0.1 BAN(config) # ip route 172.16.0.0 255.255.0.0
172.17.0.1
Show commands:
ROUTER # show ip route
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 12
Lab 3.3: Default Routing
Router Name:_________________
ROUTER # configure terminal
ROUTER(config) # interface serial 0
ROUTER(config-if) # ip address _________________________
ROUTER(config-if) # no shutdown
ROUTER(config-if) # clock rate 64000
ROUTER(config-if) # encapsulation hdlc
ROUTER(config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # ip route 0.0.0.0 0.0.0.0 _____ ____
CHE E0 192.168.1.1
172.16.0.1
S0
ON CHE :
CHE # config terminal CHE(config) # ip routing CHE(config) # ip route 0.0.0.0 0.0.0.0 s0
Show commands:
ROUTER # show ip route
ZOOM Techn
ologie
s
Zoom Technologies® 13
1. Assign the IP address and make the serial interface
administratively up.
2. Understanding the importance of extended ping command.
3. Understanding the importance of debug IP packet command.
4. Understanding the routing table.
5. Adding a static route by defining the next hop address.
6. Adding a static route by defining the exit interface.
7. Adding a default route.
ZOOM Techn
ologie
s
Zoom Technologies® 14
Lab 4 - RIP:
AREA 0
ON CHE:
CHE#config terminal CHE(config)#ip routing CHE(config)#router rip CHE(config-router)# network 192.168.1.0 CHE(config-router) # network 172.16.0.0 CHE(config-router) #^z
CHE#
ON HYD :
HYD # config terminal HYD(config) # ip routing HYD(config) # router rip HYD(config-router) # network 10.0.0.0 0
HYD(config-router) # network 172.16.0.0 HYD(config-router) # network 172.17.0.0 HYD(config-router) # ^z HYD#
ON BAN:
BAN # config terminal
BAN(config) # ip routing BAN(config) # router rip BAN(config-router) # network 192.168.2.0 BAN(config-router) # network 172.17.0.0 BAN(config-router) # ^z BAN#
Show commands:
HYD # show ip route
HYD # show ip protocols
Debug commands:
HYD # debug ip rip
HYD# terminal monitor
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 15
Fill the Blanks before Starting your configuration
Router Name:_________________
ROUTER # configure terminal
ROUTER (config) # interface serial 0
ROUTER (config-if) # ip address ____________ ___________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # exit
ROUTER (config) # interface serial 1
ROUTER (config-if) # ip address ____________ ___________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # router rip
ROUTER(config-router) # network ________________
ROUTER(config-router) # network ________________
ROUTER(config-router) # network________________
ROUTER(config-router) # ^z
ROUTER#
ZOOM Techn
ologie
s
Zoom Technologies® 16
1. Enabling RIP Protocol process on the respective networks
2. Understanding the RIP protocol routes in the routing table
3. Understanding the RIP updates using debug IP RIP command
4. Check the A.D usage with RIP and Static
ZOOM Techn
ologie
s
Zoom Technologies® 17
Lab 5 - EIGRP
AREA 0
ON CHE:
CHE # config terminal
CHE(config) # ip routing
CHE(config) # router eigrp 10
CHE(config-router)# network 192.168.1.0
CHE(config-router)# network 172.16.0.0
CHE(config-router)# exit
CHE(config) # exit
ON HYD:
HYD # config terminal
HYD(config) # ip routing
HYD(config) # router eigrp 10
HYD(config-router)#network 10.0.0.0
HYD(config-router)#network 172.16.0.0
HYD(config-router)#network 172.17.0.0
HYD(config-router)#exit
HYD(config) # exit
ON BAN:
BAN # config terminal
BAN(config) # ip routing
BAN(config) # router eigrp 10
BAN(config-router)#network 192.168.2.0
BAN(config-router)#network 172.17.0.0
BAN(config-router)#exit
BAN(config)#exit
Show commands:
HYD # show ip route
HYD # show ip protocols
Show commands:
HYD # show ip eigrp topology [all]
HYD # show ip eigrp neighbor HYD # show ip eigrp neighbor details
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 18
Fill the Blanks before Starting your configuration
Router Name:_________________
ROUTER # configure terminal
ROUTER (config) # interface serial 0
ROUTER (config-if) # ip address ___________ ____________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # exit
ROUTER (config) # interface serial 1
ROUTER (config-if) # ip address ___________ ____________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # router eigrp _______
ROUTER(config-router) # network ________________
ROUTER(config-router) # network ________________
ROUTER(config-router) # network________________
ROUTER(config-router) # ^z
ROUTER#
ZOOM Techn
ologie
s
Zoom Technologies® 19
1. Configuration of EIGRP
2. Verify Neighbor table
3. Verify topology table (FD/AD)
4. Verify the routing table
ZOOM Techn
ologie
s
Zoom Technologies® 20
Lab 6 - OSPF
AREA 0
CHE
ON CHE:
CHE # config terminal CHE(config) # ip routing
CHE(config) # router ospf 5 CHE(config-router)#network 192.168.1.0 0.0.0.255 area 0 CHE(config-router)#network 172.16.0.0 0.0.255.255 area 0 CHE(config-router) #^z CHE#
ON HYD:
HYD # config terminal HYD(config) # ip routing
HYD(config) # router ospf 3 HYD(config-router)# network 10.0.0.0 0.255.255.255 area 0 HYD(config-router)# network 172.16.0.0 0.0.255.255 area 0 HYD(config-router)# network 172.17.0.0 0.0.255.255 area 0 HYD(config-router)# ^z
HYD #
ON BAN:
BAN # config terminal BAN(config) # ip routing
BAN(config) # router ospf 3 BAN(config-router)#network 192.168.2.0 0.0.0.255 area 0 BAN(config-router)#network 172.17.0.0 0.0.255.255 area 0 BAN(config-router)#^z BAN#
Show commands:
Router # show ip route
Router # show ip ospf database Router # show ip ospf neighbors
AREA 0
BAN
N
BAN
Debug commands:
Router # debug ip ospf adj
Router # debug ip ospf hello
Router # debug ip ospf packets Router # debug ip ospf events
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 21
Fill in the Blanks before starting your configuration
Router Name:_________________
ROUTER # configure terminal
ROUTER (config) # interface serial 0
ROUTER (config-if) # ip address ______________ _________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # exit
ROUTER (config) # interface serial 1
ROUTER (config-if) # ip address ______________ _________
ROUTER (config-if) # no shutdown
ROUTER (config-if) # encapsulation hdlc
ROUTER (config-if) # clock rate 64000
ROUTER (config-if) # exit
ROUTER(config) #
ROUTER(config) # ip routing
ROUTER(config) # router OSPF ____
ROUTER(config-router) # network _________ _______ area _____
ROUTER(config-router) # network _________ _______ area _____
ROUTER(config-router) # network _________ _______ area _____
ROUTER(config-router) # ^z
ROUTER#
ZOOM Techn
ologie
s
Zoom Technologies® 22
1. Configuration of OSPF
2. Automatic selection process of router-id
3. Debugging and understanding the functioning of hello packet
4. Debugging and understanding the adjacency formation
5. Verification of OSPF database
6. Verification of OSPF Neighbor table
7. Election of DR/BDR
ZOOM Techn
ologie
s
Zoom Technologies® 23
Lab 7 - STANDARD ACCESS-LIST:
SCENARIO 1:
Only 192.168.2.0 should communicate with
192.168.1.0
ON CHE:
CHE #config terminal
CHE (config) # access-list 1 permit
192.168.2.0 0.0.0.255
CHE (config) # int e0
CHE (config-if) # ip access-group 1 out
CHE (config-if) # exit
CHE (config) # exit
CHE # show ip access-list
Note: Use the command prompt of a PC try
to ping the filtered ip address
SCENARIO 2:
Configuration of an access-list on HYD that
administrative access through Telnet is
possible only from 10.0.0.10
ON HYD:
HYD #config terminal
HYD (config) # access-list 1 permit
10.0.0.10 0.0.0.0
HYD (config) # line vty 0 4
HYD (config-line) # ip access-class in
HYD (config-line) # exit
HYD (config) # exit
HYD # show ip access-list
SCENARIO 3:
Configuration of an standard access-list on
Bangalore Ethernet 0 in the outbound
direction denying 10.0.0.10
ON BAN:
BAN #config terminal
BAN (config) # access-list 1 deny 10.0.0.10
0.0.0.0
BAN (config)#access-list 1 permit any
BAN (config)#interface Ethernet 0
BAN (config-if) # ip access-group 1 out
BAN (config-if) # exit
BAN (config) # exit
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 24
SCENARIO :3
Configuration of an extended access-list BAN serial 1 in inbound direction.
Deny HTTP from Chen LAN to Bang LAN.
Permit all other service from any network.
On BAN:
BAN#configure terminal BAN (config)#access-list 111 deny tcp 192.168.1.0
0.0.0.255 192.168.2.0 0.0.0.255 eq 80
BAN (config)#access-list 111 permit ip any any BAN (config)#interface serial 1 BAN (config-if)#ip access-group 111 in BAN (config-if)^z BAN # sh ip access-list
SCENARIO :1
Configuration of an extended access-list HYD Ethernet 0 in outbound direction.
Allow only FTP service to be access from Bang
LAN
On HYD:
HYD#configure terminal HYD (config)#access-list 101 permit tcp 192.168.2.0
0.0.0.255 10.0.0.10 0.0.0.0 eq ftp
HYD (config)#interface ethernet 0 HYD (config-if)#ip access-group 101 out HYD (config-if)#exit HYD (config)#
HYD # sh ip access-list
SCENARIO :2 Configuration of an extended access-list CHESerial 0 in inbound direction
deny PING (Echo) from Bang LAN to Chen LAN permit all other services.
On CHE:
CHE#configure terminal
CHE (config)#access-list 110 deny icmp 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255 echo CHE (config)#access-list 110 permit ip any any CHE (config)#interface serial 0
CHE (config-if)#ip access-group 110 in CHE (config-if)^z CHE # sh ip access-list
Lab 8 - EXTENDED ACCESS-LIST:
`
E0 192.168.2.1/24
LAN - 192.168.1.0/24 LAN – 10.0.0.0/8
172.16.0.1/16 S0
172.17.0.1/16 S0
E0 192.168.1.1/24
HYD CHE
S1 172.16.0.2/16 S1
172.17.0.2/16 BAN
N
BAN
E0 10.0.0.1/8
LAN - 192.168.2.0/24
ZOOM Techn
ologie
s
Zoom Technologies® 25
1. Configure any routing protocol (e.g. RIP) & check the
communication
2. Configure Standard access-list on CHE Ethernet 0 in the out
bound direction, permitting only 192.168.2.0
3. Configure an access-list on HYD that administrative access
through Telnet is possible only from 10.0.0.10
4. Configure an access-list on BAN Ethernet 0 in the outbound direction, denying 10.0.0.10 host only
5. Configuration an access-list on CHE serial 0 in the inbound direction, deny ping request from 192.168.2.0 to
192.168.1.0 and permitting any other services.
6. Configuration of an extended access-list on HYD Ethernet 0 in the outbound direction permitting only FTP service from
the network 192.168.2.0 to 10.0.0.10
7. Configuration of an extended access-list on BAN serial 1 in
inbound direction denying HTTP from 192.168.1.0 to 192.168.2.0 and permitting other traffic from any network to 192.168.2.0 network.
ZOOM Techn
ologie
s
Zoom Technologies® 26
LAB 9: FRAME RELAY
S1.1
172.16.0.2/16
172.17.0.1/16
S1.2
S0.1
172.16.0.1/16 S0.2
172.19.0.1/16
S1.1
172.19.0.2/16
172.18.0.2/16
S1.2
S0.2
172.18.0.1/16
S0.1
172.17.0.2/16
DLCI
500 DLCI
400
DLCI
200 DLCI
700
DLCI
800
DLCI
600 DLCI
300
DLCI
100
BAN
CHE
AREA 0
BOM
<
GOA
ZOOM Techn
ologie
s
Zoom Technologies® 27
CONFIGURATION ON CHE:
CHE# CHE# config terminal
CHE(config)# interface serial 0 CHE(config-if)# no ip address CHE(config-if)# no shut CHE(config-if)# encapsulation frame-relay CHE(config-if)#frame-relay lmi-type cisco CHE(config-if)# exit
CHE(config)# interface serial 0.1 point-to-point
CHE(config-if)#ip address 172.16.0.1 255.255.0.0 CHE(config-if)#frame-relay interface-dlci 200 CHE(config-if-dlci)#exit CHE(config-if)#exit CHE(config)# interface serial 0.2 point-to-point CHE(config-if)#ip address 172.19.0.1 255.255.0.0
CHE(config-if)#frame-relay interface-dlci 700 CHE(config-if-dlci)#exit CHE(config-if)#exit CHE(config)#^z CHE#
Show commands:
ROUTER# show frame-relay pvc ROUTER# show frame-relay map ROUTER # show ip route
CONFIGURATION ON BAN:
BAN# BAN # config terminal BAN (config)# interface serial 1 BAN (config-if)# no ip address BAN (config-if)# no shut BAN (config-if)# encapsulation frame-relay
BAN (config-if)#frame-relay lmi-type cisco BAN (config-if)# exit BAN (config)# interface serial 1.1 point-to-point
BAN (config-if)#ip address 172.16.0.2 255.255.0.0 BAN (config-if)#frame-relay interface-dlci 100 BAN (config-if-dlci)#exit
BAN (config-if)#exit BAN (config)# interface serial 1.2 point-to-point BAN (config-if)#ip address 172.17.0.1 255.255.0.0 BAN (config-if)#frame-relay interface-dlci 300 BAN (config-if-dlci)#exit BAN (config-if)#exit BAN (config)#^z
BAN # CONFIGURATION ON BOM:
BOM# BOM # config terminal BOM(config)# interface serial 1 BOM(config-if)# no ip address BOM(config-if)# no shut BOM(config-if)# encapsulation frame-relay
BOM(config-if)#frame-relay lmi-type cisco BOM(config-if)# exit BOM(config)# interface serial 1.1 point-to-point
BOM(config-if)#ip address 172.19.0.2 255.255.0.0 BOM(config-if)#frame-relay interface-dlci 800 BOM(config-if-dlci)#exit
BOM(config-if)#exit BOM(config)# interface serial 1.2 point-to-point BOM(config-if)#ip address 172.18.0.2 255.255.0.0 BOM(config-if)#frame-relay interface-dlci 600 BOM(config-if-dlci)#exit BOM(config-if)#exit BOM(config)#^z
BOM#
CONFIGURATION ON GOA:
GOA# GOA # config terminal GOA(config)# interface serial 0 GOA(config-if)# no ip address GOA(config-if)# no shut GOA(config-if)# encapsulation frame-relay GOA(config-if)#frame-relay lmi-type cisco
GOA(config-if)# exit GOA(config)# interface serial 0.1 point-to-point
GOA(config-if)#ip address 172.17.0.2 255.255.0.0 GOA(config-if)#frame-relay interface-dlci 400 GOA(config-if-dlci)#exit GOA(config-if)#exit
GOA(config)# interface serial 0.2 point-to-point GOA(config-if)#ip address 172.18.0.1 255.255.0.0 GOA(config-if)#frame-relay interface-dlci 500 GOA(config-if-dlci)#exit GOA(config-if)#exit GOA(config)#^z GOA#
ZOOM Techn
ologie
s
Zoom Technologies® 28
1. Configuration of the frame-relay encapsulations
2. Observation of the status of PVCs
3. Verification of the frame relay map
4. Configure static routing on Frame relay and check communication
5. Verification of the routing tables
ROUTER#
ROUTER# config terminal
ROUTER(config)# interface serial ____
ROUTER(config-if)# no ip address
ROUTER(config-if)# no shut
ROUTER(config-if)# encapsulation frame-relay
ROUTER(config-if)#frame-relay lmi-type cisco
ROUTER(config-if)# exit
ROUTER(config)# interface serial ____.___ point-to-point
ROUTER(config-if)#ip address ____________ ____________
ROUTER(config-if)#frame-relay interface-dlci _____
ROUTER(config-if-dlci)#exit
ROUTER(config-if)#exit
ROUTER(config)# interface serial ___.____ point-to-point
ROUTER(config-if)#ip address ____________ ____________
ROUTER(config-if)#frame-relay interface-dlci _____
ROUTER(config-if-dlci)#exit
ROUTER(config-if)#exit
ROUTER(config)#^z
ROUTER# ZOOM Techn
ologie
s
Zoom Technologies® 29
Lab 10 - VLAN
ON 192.168.20.50
VLAN CREATION:
2950 # config terminal
2950(config) # vlan 10
2950(config-vlan) # name sales
2950(config) # vlan 20
2950(config-vlan) # name mkt
ASSIGNING MEMBERSHIP TO THE PORTS:
2950(config) # interface range fa0/1 -2
2950(config-if) # switchport mode access
2950(config-if) # switchport access vlan 10
2950(config-if) # exit
2950(config)#interface range fa0/4 - 5
2950(config)# switchport access vlan 20
TRUNKING:
2950 # config terminal
2950(config) #interface fa0/24
2950(config-if) # switchport mode trunk
2950(config-if) # switchport trunk allowed vlan all
2950(config-if) # exit
2950(config) # exit
ON 192.168.20.51
VLAN CREATION:
2950 # config terminal
2950(config) # vlan 10
2950(config-vlan) # name sales
2950(config) # vlan 20
2950(config-vlan) # name mkt
ASSIGNING MEMBERSHIP TO THE PORTS:
2950(config) # interface range fa0/13 - 14
2950(config-if) # switchport mode access
2950(config-if) # switchport access vlan 10
2950(config-if) # exit
2950(config)#interface range fa0/16 - 17
2950(config)# switchport access vlan 20
TRUNKING:
2950 # config terminal
2950(config) #interface fa0/24
2950(config-if) # switchport mode trunk
2950(config-if) # switchport trunk allowed vlan all
2950(config-if) # exit
2950(config) # exit
ZOOM Techn
ologie
s
Zoom Technologies® 30
Lab 11 - Inter-VLAN
switch# configure terminal
switch(config)#vlan 10
switch(config-vlan)# name Sales
switch(config-vlan)# exit
switch(config)# vlan 20
switch(config-vlan)# name Marketting
switch(config-vlan)# exit
switch(config)# interface range fa0/1 - 2
switch(config-if-range)# switchport mode access
switch(config-if-range)# switchport access vlan 10
switch(config-if-range)# exit
switch(config)# interface range fa0/5 - 6
switch(config-if-range)# switchport mode access
switch(config-if-range)# switchport access vlan 20
switch(config-if-range)# exit
switch(config)# interface fa0/10
switch(config-if)# switchport mode trunk
switch(config-if)# switchport trunk allowed vlan all switch(config-if)# exit
router#configure terminal
router(config)# interface ethernet 0
router(config-if)# no ip address
router(config-if)# no shutdown
router(config-if)# exit
router(config)# interface ethernet 0.1
router(config-if)# encapsulation dot1q 10
router(config-if)# ip address 192.168.1.1
255.255.255.0
router(config-if)# exit
router(config)# interface ethernet 0.2
router(config-if)# encapsulation dot1q 20
router(config-if)# ip address 192.168.2.1
255.255.255.0
router(config-if)# exit
router(config)# no ip routing router(config)# ip routing ZOOM Techn
ologie
s
Zoom Technologies® 31
1. Verification of MAC address table
2. Creation of VLAN
3. Assigning the hosts to a VLAN
4. Configure Trunking between switches
5. Created Sub-interfaces on Router
6. Changed sub-interface encapsulation to dot1q
7. Configuration of encapsulation for the trunk link
8. Inter-VLAN communication through an external router.
9. Understanding the concepts of VTP modes
Server mode
Client mode
Transparent mode
ZOOM Techn
ologie
s
Zoom Technologies® 32
Lab 12 - Port Security
Switch(config-if)#Switchport port-security
Switch(config-if)#Switchport port-security maximum <value>
Switch(config-if)#Switcport port-security mac-address <mac-address> Switch(config-if)#Switchport port-security violation{protect|restrict|shutdown}
ZOOM Techn
ologie
s
Zoom Technologies® 33
Lab 13 – NAT Configuration
Configuration of PAT
CHE# configure terminal
CHE(config)# interface s0
CHE(config-if)#ip address 202.1.0.18
255.255.255.248
CHE(config-if)#no shutdown
CHE(config-if)#encapsulation ppp
CHE(config-if)#ip nat outside
CHE(config-if)#exit
CHE(config)#interface Ethernet 0
CHE(config-if)#ip nat inside
CHE(config-if)#exit
CHE(config)#access-list 10 permit 192.168.1.0
0.0.0.255
CHE(config)#ip nat inside source list 10
interface serial 0 overload
CHE(config)#exit
CHE#
Configuration of Static NAT
CHE# configure terminal
CHE(config)# interface s0
CHE(config-if)#ip address 202.1.0.18
255.255.255.248
CHE(config-if)#no shutdown
CHE(config-if)#encapsulation ppp
CHE(config-if)#ip nat outside
CHE(config-if)#exit
CHE(config)#interface Ethernet 0
CHE(config-if)#ip nat inside
CHE(config-if)#exit
CHE(config)#ip nat inside source static 192.168.1.10 202.1.0.19
Show Commands
CHE# show ip nat translation
CHE# debug ip nat
ZOOM Techn
ologie
s
Zoom Technologies® 34
Check the following if you have completed the lab
1. Configure and verify Static Nat
2. Configure and verify Port Address Translation
3. Check the Nat table
4. Configure and verify PAT
5. Debugging of NAT
ZOOM Techn
ologie
s