1. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 1/11 IP Forwarding With Cisco Routers Lab Exercises

2. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 2/11 Cisco File System äBoot - startup the router äIOS - Internetworking Operating System –keep it in Flash or boot from TFTP Server äConfiguration files –running config - in Memory –each configuration line is active immediately –start-up config äCommand –show startup-config –show running-config –show version

3. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 3/11 initial configuration äSetup dialog äIf a new router, setup is running automatically äcisco_prompt# setup äSetup will create a new start-up config äip routing yes; but “no” to all routing protocols (especially RIP!)

4. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 4/11 Exercise 1 Login into the router äConnect console cable to the Serial Port Serial connection PC to cisco router console port –Console % minicom [-s] [/dev/ttyS0] or % cu -l /dev/ttyS0 -s 9600 äpower on router, watch the loading messages äLogin –Console or Telnet from UNIX Password: cisco name> enable Password: cisco –Leave the session: exit

5. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 5/11 Configure Interface äConfigure Ethernet interface with setup –IP address –Netmask (0 - 0, 1 - 128, 6 - 254) –“ip routing” yes; but “no” to all routing protocols –Setup command (interactive) –#configure terminal –cisco(config)#interface eth o –cisco(config)#ip address n.n.n.n mask m.m.m.m äconfigure e0 for row ethernet with Next IP address example: Network 130.65.241.16/29 IP address 130.65.241.19

6. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 6/11 Exercise 2 configure ethernet interface äConfigure Ethernet Interface router>enable router#conf t router(config)#int eth 0 router(config-if)#ip addr 130.65.241.xx 255.255.255.xx router(config-if)#no shut router(config-if)#^z router#sho int eth 0 äCheck: –telnet to the router from one of the 1E PCs in the row.

7. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 7/11 Exercise 3 Check the Status äCheck –ping n.n.n.n –traceroute n.n.n.n äShow –Interface: # show interface [eth/serial] 0 –ARP # sho arp –Configuration write terminal show conf (running config)or show running-config show startup-config (boot configuration) –Save configuration # write [mem]

8. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 8/11 Exercise 4 (1/2) configure static routes äconfigure the router with static routes  to create static routes, use the “ ip route ” command: ip route n.n.n.n m.m.m.m nexthop (g.g.g.g or device) äe.g.: router#conf t router(config)#ip route 130.65.241.0 255.255.255.240 130.65.241.129

9. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 9/11 Exercise 4 (2/2) configure static routes änow add a static default route äthe default route is represented by net prefix 0.0.0.0 and netmask 0.0.0.0, e.g. ip route 0.0.0.0 0.0.0.0 130.65.241.142 äuse ping and traceroute to test router# ping target-ip-addr router# trace target-ip-addr

10. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 10/11 Exercise 5 (1/2) configure passwords äthere are (at least) 6 passwords to be set: console login password, 4 vty passwords, and the enable password äset the console password router(config)#line con 0 router(config-line)#password mysecret äset the vty passwords router(config-line)#line vty 0 4 router(config-line)#password mysecret router(config-line)#exit äset the enable password router(config)#enable password mysecret router(config)#^Z

11. Host-based Internetworking, Tuesday, 15 June ´99 INET ‘99 Network Training Workshop 11/11 Exercise 5 (2/2) configure passwords äexamine the config, note that the passwords are in plaintext # show conf... enable password mysecret... line con 0 password mysecret... line vty 0 4 password mysecret login äencrypt the passwords, then examine the config again router(config)#service password-encryption router(config)#^Z router#sho conf