ccna dis2 - chapter 5 – configuring network devices_ppt [compatibility mode]

8/3/2019 CCNA Dis2 - Chapter 5 Configuring Network Devices_ppt [Compatibility Mode]

1/150

1

Chapter 5 Configuring Network Devices


2/150

2Hc vin cng ngh thng tin Bach Khoa - Website: www.bkacad.com

Objectives

Configure a router with an initial configuration Use Cisco SDM to configure a Cisco ISR with LAN

connectivity, Internet connectivity and NAT

Configure a Cisco router for LAN connectivity, Internet

connectivity and NAT using the Cisco IOS CLI of the CiscoIOS software.

Configure a WAN connection from a customer premise toan ISP

Describe, setup, and configure a stand-alone LAN switch
http://www.bkacad.com/http://www.bkacad.com/


3/150

3

ISR - Integrated Services Routers

The Cisco Integrated Services Router (ISR) is one of the most popular seriesof networking devices designed to support growing business needs.

The ISR combines features such as routing and switching functions, security,voice, LAN and WAN connectivity into a single device.

This makes the ISR ideal for small to medium-sized businesses and for ISPmanaged customers.


4/150




5/150




6/150




7/150




8/150

8

System Power LED (SYS-PWR) Indicates power is received and that the internal power supply is functional.

LED is solid green.

System Activity (SYS ACT)

A blinking LED indicates the system is actively transferring packets.

Hc vin cng ngh thng tin Bach Khoa - Website: www.bkacad.com



9/150

9

High-speed WAN Interface Card (HWIC) Slots: These ports provide serial connectivity over a wide-area network.Compact Flash Module:

This removable module is used to store the operating software for the ISR.Single Slot USB Port:

The USB Flash feature allows users to store images and configurations andboot directly via USB Flash memory.




10/150

10

Fast Ethernet Ports: These ports provide 10/100 Mbps connectivity for local area networks.Console Port:

This port is used to configure the switch via a directly connected host.Auxiliary Port:

This port is used to configure the switch via a modem.Four Port Ethernet Switch: These ports allow you to connect multiple devices on a local area network.




11/150

11

Cisco IOS Sofware




12/150

12

Cisco IOS Software The Cisco Internetwork Operating System (IOS) software provides features

that enable a Cisco device to send and receive network traffic using a wired orwireless network.

The entry-level Cisco IOS software image is called the IP Base image. TheCisco IOS IP Base software supports small to medium-sized businesses and

supports routing between networks

Other Cisco IOS software images add services to the IP Base image. Forexample, to use advanced security features, install the Advanced Securityimage. This gives the added functionality necessary to configure advancedsecurity capabilities, private networking and firewalls.

There are many different IOS images available, as well as different versions ofeach image. These images are designed to operate on specific models ofrouters, switches and ISRs.




13/150

13

Physical Setup of the ISR

Items shipped with a new Cisco 1841 ISR include: A RJ45-to-DB9 console cable A DB-9-to-DB-25 modem adapter A power cord Product registration card, called the Cisco.com card

Regulatory Compliance and Safety Information for Cisco 1841 Routers Router and Security Device Manager (SDM) Quick Start Guide Cisco 1800 Series Integrated Services Routers (Modular) Quick Start Guide



14/150




15/150

15

To install a new Cisco 1841 ISR requires special tools and equipment, whichmost ISPs and technician labs usually have available. Additional specificequipment required depends on the model of the device and any optionalequipment ordered.




16/150

16

Before beginning any equipment installation, be sure to read the Quick Startguide and other documentation that is included with the device.




17/150




18/150




19/150




20/150




21/150




22/150




23/150

23

In-band and Out-band Router Configuration

There are two possible methods to connect a PC to a network device forconfiguration and monitoring tasks: in-band and out-of-band management.



24/150

24

Out-of-band Management Out-of-band management requires a computer to be directly connected to the

console port or auxiliary port (AUX) of the network device being configured.

This type of connection does not require the local network connections on thedevice to be active.

Technicians use out-of-band management to initially configure a network

device. Out-of-band management is also useful when the network connectivity is notfunctioning correctly and the device cannot be reached over the network

In-band Management Use in-band management to monitor and make configuration changes to a

network device over a network connection.

In order for a computer to connect to the device and perform in-bandmanagement tasks, at least one network interface on the device must beconnected to the network and operational.

Two TCP/IP protocols can be used to access a Cisco device for in-bandmanagement: Telnet and HTTP


In-band and Out-band Router Configuration


25/150

25

Cisco ISO Programs

The Cisco IOS command line interface (CLI) is a text-based program thatenables the entering and executing of Cisco IOS commands to configure,monitor, and maintain Cisco devices



26/150

26

In addition to the Cisco IOS CLI, other tools are available to assist inconfiguring a Cisco router or ISR. Cisco Router and Security Device Manager(SDM) is a graphical user interface (GUI) device management tool. Unlike CLI,SDM can be used only for in-band management tasks.

SDM Express simplifies initial router configuration. It uses a step-by-stepapproach to create a basic router configuration quickly and easily


Cisco ISO Programs


27/150

27

Use the full SDM package to perform more advanceconfigurations such as:

Configure additional LAN and WAN connections Create firewalls Configure VPN connections

Perform security tasksSDM supports a wide range of Cisco IOS software releases

and is available free of charge on many Cisco routers.SDM is pre-installed on the flash memory of the Cisco1800 Series ISR.

Cisco ISO Programs



28/150

28

Cisco ISO Programs



29/150

29

Cisco ISO Programs



30/150

30

Cisco ISO Programs



31/150

31

Device Configuration Files



32/150

32

Running Configuration File The term running configuration refers to the current configuration running on

the device. It contains the commands used to determine how the deviceoperates on the network.

The running configuration is stored within the device working memory (RAM)that does not keep information when the power is turned off.

Startup Configuration File The startup configuration file is the saved configuration file that sets the

configuration properties of the device each time the device is powered on.

This file is stored in nonvolatile random access memory (NVRAM). NVRAM isused to store files that will be saved, even if power to the device is turned off.




33/150

33

When a Cisco router is first powered on, it loads the IOS to working memory.Next, the startup configuration file is copied from NVRAM to RAM. Thisbecomes the initial running configuration.

Changes to the running configuration are not automatically saved to the startupconfiguration file. It is necessary to manually copy the running configuration tothe startup configuration file if changes are to be saved when the device is

powered off. Cisco CLI uses the command copy running-config startup-config to save therouter's running configuration to the startup configuration.




34/150




35/150

35

Document Your Router Configuration

Planning the router installation and upgrade is a critical step in minimizinginterruptions to employees Planning enables exploration of options on paper, when it is easy and

inexpensive to correct errors.

During those planning sessions, the technician determines: The configuration of the router to meet customer needs

Software programs that rely on the network that may be affected by theupgrade

The technician works with the client's IT personnel to decide which routerconfiguration to use and to develop the procedure that verifies the routerconfiguration.


36/150

36

A configuration checklist is a useful tool for ensuring that everything isconfigured correctly on new router installations. Technicians also use thechecklist when troubleshooting previously configured routers. The configurationchecklist provides a list of the most commonly configured components.




37/150

37

Date and Work Order Used to record the date that the configuration checklist

Used to record a number used to track the contract work

ISP Contract The name and telephone number of the ISP representation if any questions or

concerns arise

Customer The name of company or customer

Customer Contract The name and telephone number of the person at the customer site

responsible for the project

Router Manufacturer and Model

The router manufacturer and model number Router serial number Configured Basic Parameters

Check here to confirm that basic router parameters are configured

Cisco SDM can be used to configure basic parameters, if supported by thedevice




38/150

38

Configured Global Parameters Check here to confirm that the global parameters are configured Including: host name of the router, a privilege mode password, and

disabling the router from recognizing typing mistakes as commands

Configured Fast Ethernet LAN Interfaces Check here to confirm that the Fast Ethernet LAN Interfaces have been

configured

Configured WAN Interfaces Check here to confirm that the WAN interfaces have been configured Configured Command-Line Access to the Router

Check here to confirm that the parameters used to control Cisco IOS CLIaccess to the router have been configured

This includes: the interval of time that the EXEC command interpreter waitsuntil user input is detected

Configured Static Routes Check here to confirm that the static routes are configured An ISP may use a separate sheet to detail each static route configured Static routes are manually configured on the router and must be changed

manually if new routes are required




39/150

39

Configured Dynamic Routing Protocols Check here to confirm that the dynamic routing protocols are configured

In dynamic routing, the network protocol adjusts the path automatically,based on network traffic or topology. Changes in dynamic routes areshared with other routers in the network

Configured Security Features

Check here to confirm that security features on the router are configured

The Cisco SDM configuration tool makes it easy to configure the basicsecurity features

To configure security features using the Cisco IOS CLI requires an in-depthknowledge of the Cisco IOS security commands

Roll over each checklist item to learn more




40/150

40

Configure an ISR with SDM

Cisco SDM express Cisco SDM Express is a tool bundled within the Cisco Router and Security

Device Manager that makes it easy to create a basic router configuration.

SDM Express uses eight configuration steps to assist in creating a basicrouter configuration:

Overview

Basic Configuration

LAN IP Address

DHCP

Internet (WAN)

Firewall

Security Settings Summary

Refer 5.2.1.1



41/150

41

Configure an ISR with SDM



42/150

42

SDM Express



43/150

43

Basic Configuration Host Name

The name of the router

Domain Name

The domain name for the organization. (An example of a domain nameis cisco.com, but domain names can end with a different suffix, such as.org or .net.)

SDM Username and Password

The username and password used to access SDM Express toconfigure and monitor the router (password must be at least 6characters long)

Enable Secret Password The password that controls user access to the router, which affects the

ability to make configuration changes using CLI using Telnet or theconsole ports (password must be at least 6 characters long)

SDM Express



44/150

44

SDM Express



45/150

45

IP Address Field The IP address for the LAN interface in dotted-decimal format Address can be a private IP address if the device is installed in a network

that uses Network Address Translation (NAT) or Port Address Translation(PAT)

Subnet Mask Field The subnet mask for the network

Identifies the network portion of the IP

Subnet Bits Field Number of bits used to define the network portion of the IP

Can be used instead of the subnet mask

Wireless Parameters Fields

Use to specify the SSID of the wireless network Appear if the router has a wireless interface and Yes was clicked in theWireless Interface Configuration window

SDM Express



46/150

46

SDM Express



47/150

47

DHCPThe Dynamic Host Configuration Protocol (DHCP) is a simple way to assignIP addresses to host devices. DHCP dynamically allocates an IP addressto a network host when the host is powered on, and reclaims the addresswhen the host is powered off

Enable DHCP server on the LAN interface Checkbox When checked, it enables the router to assign private IP addresses to

devices on the LAN. IP addresses are leased to hosts for a period of one day. Starting IP Address Field

The lowest address in the IP address range, based by default, on theIP address and subnet mask entered for the LAN interface

Can be changed to a different starting IP address, if necessary, butshould be the same network or subnet as a configured LAN interface

Ending IP Address Field The highest valid address in the IP address range, based by default,on the IP address and subnet mask assigned to the LAN interface

Can be changed to decrease the pool size Must be in the same network as the IP address in the starting IP

address field

SDM Express



48/150

48

DHCP (continue) Domain Name Field

The domain name for the organization.

This name is given to the hosts as part of the DHCP configuration.

Primary Domain Name Server Field

The IP address of the primary DNS server Used to resolve URLs and names on the network

Secondary Domain Name Server Field

The IP address of a secondary DNS, if available

Used if the primary DNS server does not respond

Use these DNS values for DHCP clients checkbox

If checked, enables the DHCP server to assign DHCP clients with theconfigured DNS settings

Available if a DHCP server has been enabled on the LAN interface

SDM Express



49/150

49

SDM Express



50/150

50

Configure a Serial WAN Connection

Configuring an Internet (WAN) Connection Routers can also be connected via a serial connection, which connect

networks that are separated by large geographic distances.

These WAN network interconnections require that the serial connection bemade through a telecommunications service provider, or TSP.

Serial connections are usually lower-speed links

Serial Encapsulation The protocol encapsulation must be the same at both ends of a serial

connection

Encapsulation types include:

High-Level Data Link Control (HDLC)

Frame Relay

Point-to-Point Protocol (PPP)



51/150

51




52/150

52




53/150

53




54/150

54




55/150

55

Address Type List Static IP Address

Available with Frame Relay, PPP, and HDLC encapsulation types.

Enter the IP address and subnet mask to configure a static IP address.

IP Unnumbered

Available with Frame Relay, PPP, and HDLC encapsulation types. Sets the serial interface address to match the IP address one of the

router's other functional interfaces.

IP Negotiated

The router obtains an IP address automatically through PPP

Select Easy IP (IP Negotiated).

The router will obtain an IP address automatically through PPP




56/150

56




57/150

57

Cisco SDM and SDM Express

SDM supports many of the same features that SDM Express supports;however, SDM has a more advanced GUI interface, with more configurationoptions available.



58/150

58

Configure Dynamic NAT Using SDM

Dynamic NAT enables the hosts on the internal local network to share theregistered IP address assigned to the WAN interface. In this manner, hostswith internal private addresses can have access to the Internet.



59/150

59




60/150

60




61/150

61




62/150

62




63/150

63

Command Line Interface Modes

The Cisco IOS supports two levels of access to the command-line interface:user EXEC access and privileged EXEC access.



64/150

64




65/150

65




66/150

66

Cisco help




67/150

67




68/150

68




69/150

69




70/150

70




71/150

71

Use Show commands

The Cisco IOS CLI enables a user to display relevant information about theconfiguration and operation of the device. To obtain this information, showcommands are used.

Some of the more popular show commands are: show running-config

show interfaces

show arp show ip route

show users

show version



72/150

72

Use Show commands



73/150


74/150

74

Basic Configuration


75/150

75

Basic Configuration



76/150

76

Basic Configuration



77/150

77

Configure an Interface

In order for a router to direct traffic from one network to another, the interfaceson the router are configured to participate in each of the networks.

There are many different types of interfaces available. Serial and Ethernetinterfaces are the most common. Local network connections use Ethernetinterfaces.

WAN connections require the use of a serial connection through a TSP. Theyrequire a clock signal to control the timing of the communications, this is knownas a clock rate.

Data Communications Equipment (DCE) devices such as a modem, orCSU/DSU, provides the clock rate. By default, Cisco routers are DTE devices,or Data Terminal equipment. This means that they accept the clock rate fromthe DCE device.

Router can be configured as DCE devices, if necessary



78/150

78




79/150

79

The steps to configure an interface include: 1. Specify the type of interface and the interface port number 2. Specify a description of the interface

3. Configure the interface IP address and subnet mask

4. Set the clock rate, if configuring a serial interface as a DCE

5. Enable the interface




80/150

80

Configure a default Route

The default route is used by the router only if the router does not knowwhere to send a packet.


C C S


81/150

81

Configure DHCP Services


C fi DHCP S i


82/150

82



C fi DHCP S i


83/150

83



C fi DHCP S i


84/150

84



C fi DHCP S i


85/150

85



C fi DHCP S i


86/150

86



C fi DHCP S i


87/150

87



C fi DHCP S i


88/150

88



Config re Static NAT sing Cisco CLI


89/150

89

Configure Static NAT using Cisco CLI




90/150

90





91/150

91





92/150

92





93/150

93





94/150

94





95/150

95





96/150

96



Back up a Cisco Router Configuring to a TFTP Server


97/150

97


Once a router is configured, the running configuration should be saved to thestartup configuration file. It is also a good idea to save the configuration file inanother location, such as a network server. If the NVRAM fails or becomes corruptand the router cannot load the startup configuration file, another copy is available.

Configuration files can be saved to a network server using the TFTP protocol




98/150

98


Hc vi

n cng ngh

thng tin Bach Khoa - Website: www.bkacad.com

Standalone Switches


99/150

99

Standalone Switches

A switch is a device that is able to direct a stream of messages coming in oneport, out of another port based on the destination MAC address within theframe.

A switch cannot route traffic between two different local networks. In the context of the OSI model, a switch performs the Layer 2, known as the

data-link layer function.

This type of switch is a fixed-configuration, standalone device, and does not

use modules or flash card slots. The physical configuration can not change. They are designed to provide 10/100 Fast Ethernet and 10/100/1000 GigabitEthernet connectivity to desktop computers.

Hc vi

n cng ngh


Standalone Switches


100/150

100

Standalone Switches

Hc vi

n cng ngh


Standalone Switches


101/150

101

Standalone Switches

Hc vi

n cng ngh


Standalone Switches


102/150

102

Standalone Switches


Standalone Switches


103/150

103

Standalone Switches


Standalone Switches


104/150

104

Standalone Switches


Standalone Switches


105/150

105

Standalone Switches


Standalone Switches


106/150

106

Standalone Switches


Standalone Switches


107/150

107

Standalone Switches


Standalone Switches


108/150

108

Standalone Switches


Standalone Switches


109/150

109

Standalone Switches


Standalone Switches


110/150

110

Standalone Switches


Standalone Switches


111/150

111

Each switch port can operate in either half-duplex or full-duplex mode

When a port is in half-duplex mode, at any given time, it can either send orreceive data but not both

When a port is in full-duplex mode, it can simultaneously send and receivedata, doubling the throughput.

Both the port and the connected device must be set to the same duplex mode.

Switch ports can have the speed and duplex set manually or can use autonegotiation. If the switch is in autonegotiation mode and the connected device does not

support it, the switch will:

Use the speed of the other device (10, 100, 1000)

Default to half-duplex mode

Standalone Switches


Standalone Switches


112/150

112

Sta da o e S tc es


Standalone Switches


113/150

113

Cisco IOS switch software


Power up the Cisco 2960 Switch


114/150

114

p




115/150

115

p




116/150

116

p


Initial Switch Configuration


117/150

117

g

There are multiple options available to configure and manage a Cisco LANswitch. These options include:

Cisco IOS Command Line Interface (CLI)

Cisco Network Assistant

Cisco Device Manager

CiscoView Management Software

SNMP Network Management Products




118/150

118

g




119/150

119

g




120/150

120

g




121/150




122/150




123/150

123

To configure the IP address assigned to the management interface on VLAN 1


Connect the LAN Switch to the Router


124/150

124

To connect the switch to a router, use a straight-through cables. LED lights on

the switch and router indicate that the connection is successful. Check connnection

1. Check the IP address configuration

Use the show running-configuration command to verify that the IPaddress of the management interface on the switch VLAN 1, and the IPaddress of the directly connected router interface are on the same localnetwork.

2. Use the ping command to test the connection.

Switches provide a feature called port security. It is possible to limit the numberof addresses that can be learned on an interface.


Connect the LAN Switch to the Router


125/150


Cisco Discovery Protocol (CDP)


126/150

126

Cisco Discovery Protocol (CDP) is an information-gathering tool used on a

switch, ISR or router to share information with other directly connected Ciscodevices.

By default, CDP begins running when the device boots up. It then sendsperiodic messages, known as CDP advertisements, onto its directly connectednetwork

CDP operates at Layer 2 only and can be used on many different types of localnetworks, including Ethernet and serial networks.

Because it is a Layer 2 protocol, it can be used to determine the status of adirectly connected link when no IP address has been configured, or if the IPaddress is incorrect.

Two Cisco devices that are directly connected on the same local network arereferred to as being neighbors.

Information gathered by CDP includes: Device identifiers - configured host name Address list - Layer 3 address, if configured Port identifier - directly connected port, for example: serial 0/0/0 Capabilities list - function or functions provided by the device Platform - hardware platform of the device, for example Cisco 1841




127/150




128/150


Install the CPE


129/150

129

Network devices installed at the customer location are called customer premise

equipment (CPE). Before any equipment is installed at the customer site, the devices are

configured and tested at the ISP site.

Once the router is known to be configured correctly, all network cables, powercables, management cables, manufacturer documentation, manufacturersoftware, configuration documentation and the special tools needed for router

installation are assembled. An inventory checklist is used to verify that all necessary equipment needed to

install the router is present.


Install the CPE


130/150

130

The installation of a new router can be disruptive for a business.

Need a plan. This plan ensures that the customer will experience a minimum ofdisruption in service while the new equipment is installed.

When installing customer equipment, it is important to complete the job in aprofessional manner. This means that all network cables are labeled andfastened together or run through proper cable management equipment. Excesslengths of cable should be coiled and secured out of the way.

Update the documentation to include the current configuration for the router,and update the network diagrams to show the location of the equipment andcables that are installed.


Install the CPE


131/150

131

After the router is successfully installed and tested, the network technician

completes the installation checklist When the customer representative is satisfied that the router has been

correctly installed and is operational, they sign and date the checklist.Sometimes there is a formal acceptance document that is in addition to thechecklist. This procedure is often called the sign-off phase. It is critical that thecustomer representative signs off on the job because then the ISP can bill the

customer for the work.


Install the CPE


132/150

132

Installation Documentation When customer equipment is configured and installed on the customer

premise, it is important to document the entire process.

Documentation includes all aspects of how the equipment is configured,diagrams of how the equipment is installed, and checklists to validate thecorrect installation.

If a new configuration is needed, compare the documentation with theprevious router configuration to determine if and how the new configurationhas changed.

Start documenting the work during the installation of the router. All cablesand equipment should be correctly labeled and indicated on a diagram tosimplify future identification.

Follow an installation and verification checklist when installing a router.

Leave a copy of the final documentation with the customer.


Install the CPE


133/150


Install the CPE


134/150



135/150

Install the CPE


136/150

136

Professional Image

Many IT jobs require site visits to customer premises on a regular basis toinstall and troubleshoot equipment. A professional knows how to make the customer feel at ease and confident

in the technician's skills.

Dress for Success On the first visit to a customer location, it is important for the technician to

make a good first impression. The way the technicians are dressed and

their personal grooming is the first thing the customer notices. If thetechnician makes a bad first impression, it may be difficult to change thatimpression and gain the customer's confidence. Many employers provide auniform or have a dress code for their on-site technicians.

Language and Attitude The language and attitude of the technician reflect on the organization that

the technician represents. A customer may be anxious or concerned abouthow the new equipment will operate. When speaking with a customer, be

polite and respectful, and answer all customer questions. If additionalinformation is required, be sure to write down the customer inquiry andfollow up on it as soon as possible.



137/150

Workplace Safety


138/150

138

Ladders

High or Dangerous Locations Electrical Equipment Awkward Spaces Heavy Equipment


Customer Connections over a WAN


139/150

139

New equipment at the customer site must be connected back to the

ISP to provide Internet services.

Wide Area Networks (WAN) When a company or organization has locations that are separated by large

geographical distances, it may be necessary to use the telecommunications serviceprovider (TSP) to interconnect the LANs at the different locations.

These networks that connect LANs in geographically separated locations are

referred to as Wide Area Networks (WANs).

WAN connections come in a variety of different types. WAN connections vary in thetype of connector used, in bandwidth and in cost.




140/150

140

There are three types of serial WAN connections.

Point-to-Point A point-to-point WAN connection is a predefined communications path

from the customer premises through a telecommunications serviceprovider (TSP) network.

Point-to-point lines are usually leased from a TSP. (called leased lines)

Point-to-point connections are typically the most expensive of the WANconnection types and are priced based on bandwidth required and distancebetween the two connected points.




141/150

141

Circuit Switched A circuit switched connection functions similarly to the way a phone call is

made over a telephone network

An example of a circuit switched WAN connection is an ISDN or dial-upconnection.



142/150

Chose a WAN Connection


143/150


Chose a WAN Connection


144/150

144

There are many things to consider when planning a WAN upgrade.

Existing Infrastructure Included in the proposal is an explanation of existing infrastructure.

Customer Requirements This section of the proposal describes why a WAN upgrade is necessary

for the business.

WAN Options A list of all of the available WAN choices with the corresponding bandwidth,

cost, and other features that are applicable for the business is included inthe proposal.

Present the Plan

When the WAN upgrade proposal is completed, expect to present it to thebusiness decision makers


Configure a Cisco Router using SSH


145/150

145

Telnet A Telnet client can be used over an IP network connection to connect to a

device in-band for the purpose of monitoring and administering it

Telnet is not a secure protocol

Secure Shell (SSH) It is a protocol that functions similarly to Telnet. SSH protects all

authentication and transmitted data using encryption.


Configure WAN Connections


146/150




147/150




148/150


Summary


149/150

149

The key components on a Cisco 1841 ISR Methods to connect a PC to a network device for

configuration and monitoring tasks. (in-band and out-of-band)

Cisco Router and Security Device Manager (SDM)

Cisco IOS command line interface (CLI) Configure SSH The key components of a Cisco Catalyst 2960 Series

Switch

CPE WAN



150/150

ccna dis2 - chapter 5 – configuring network devices_ppt [compatibility mode]

Documents