ICND IOS CLI Study Guide (CCENT)

Size: px
Start display at page:

Download "ICND1-100-101 IOS CLI Study Guide (CCENT)"

Transcription

1 ICND IOS CLI Study Guide (CCENT) Hostname: 2. hostname SW1 SWITCH CONFIGURATION Mgmt IP: 2. interface vlan 1 3. ip address no shut Gateway: 2. ip default-gateway Local User/Pwd: 2. username shane password cisco Enable Secret Pwd: 2. enable secret cisco Console/VTY Logins: 2. lin con 0 OR lin vty 0 4 (range of virtual connections) 3. password cisco 4. login (OR login local to use a local username & pwd) Exec Timeout: 2. lin con 0 OR vty exec-timeout (10 mins & 10 secs) Service Pwd Encryption: 2. service password-encryption (encrypts "lin", "enable pwd", & local user pwds) Copy Run Start: 2. cop run start Hostname: 2. hostname R1 ROUTER CONFIGURATION Local User/Pwd: 2. username shane password cisco Enable Secret Pwd: 2. enable secret cisco Console/VTY Logins: 2. lin con 0 OR lin vty 0 4 (range of virtual connections) 3. password cisco 4. login (OR login local to use a local username & pwd) Exec Timeout: 2. lin con 0 OR vty exec-timeout (10 mins & 10 secs) Service Pwd Encryption: 2. service password-encryption (encrypts "lin", "enable pwd", & local user pwds) Interface IP Address: 2. int f0/0 3. ip address no shut 5. Loopback Address: a. int loopback 0 b. ip address Banner: 2. banner motd #Temp Maintenance msgs# 3. banner login #Perm Unauth Msg#

2 Configure VLANs: 2. vlan name Clients 4. int range f0/ switchport access vlan Repeat 2-5 for additional VLANs 7. show vlan brief Configure Trunking: 2. int f0/24 3. switchport trunk encapsulation dot1q 4. switchport mode trunk 5. switchport trunk allowed vlan 10,20 (or for Range or single VLAN #) 6. show interface f0/24 trunk 5. switchport trunk allowed vlan add # (add a VLAN if needed or forgot earlier) Enable/Configure Port Security: 2. int range f0/ switchport mode access 4. DYNAMIC: 5. STATIC: mac-address STICKY: mac-address sticky 7. LIMITATION: maximum 2 8. switchport port-security violation protect restrict 9. show port-security interface Shutdown Unused ports: 2. int range f1/0-1/5 3. shut Reassign Unused Ports: 2. int range f1/12-1/5 3. switchport access vlan 999 (optionally, 1st creat vlan, then sub vlan config give name unused) 4. banner exec #Msg displayed AFTER a user logs in# Configure Ethernet Interface: 1. See IP Address config above 2. show interface f0/0 Verify Configuration: 1. show cmds -> running-config, cdp neighbors detail, ip interface brief Configure Static Route: 2. ip route NOTE: IP Address in above cmd = remote Network, remote Network Mask, Next Hop Router IP 3. ip route (the Default route) 4. show ip route Configure OSPF: 2. router ospf 1 3. (optional) router-id network area 0 5. Repeat #4 for all Directly Connected Routes OR: b. int f0/0 c. ip ospf 1 area 0 d. repeat a-c for remaining Connected Interfaces 6. sho ip ospf neighbor AND/OR database ; show ip protocol 7. Configure on ALL Routers 8. For IPv6 b. ipv6 unicast-routing c. ipv6 router ospf 1 d. router-id e. pass-interface g0/0.10 (opt) f. int f0/0 g. ipv6 ospf 1 area 0 h. repeat f-g for other interfaces Configure a Passive Interface: 2. router ospf 1 3. passive-interface g0/ show ip ospf interface

3 Change Native VLAN: 2. int f0/24 (or, whatever int is trunk port) 3. switchport trunk native vlan 99 Configure Inter-VLAN Routing/ROAS: 2. int f0/0 3. no ip address 4. int f0/ ip address encapsulation dot1q native 7. no shut 8. int f0/ encapsulation dot1q ip address no shut 12. Repeat #2-#5 to add additional VLANs Configure SVI (Enable Routing on L3 Switch): 1. sdm prefer lanbase-routing 2. reload 3. conf t 4. ip routing 5. interface vlan 1 6. ip address no shut 8. vlan vlan 30 (repeat if needed) 10. interface vlan ip address cmd 12. no shut 13. repeat #10-12 for remaining VLANs Configure DHCP: 1. ip address dhcp (on an interface) 2. ip dhcp pool name 3. network /24 4. default-router EXIT, then conf t -> ip dhcp excluded-address #.#.#.# #.#.#.# Configure ACLs: 1. Numbered Standard (1-99; Source IP ONLY) a. access-list 1 permit host b. access-list 1 deny c. access-list 1 permit any d. int s0/1 e. ip access-group 1 out 2. Numbered Extended a. access-list 100 permit ip host b. access-list 100 deny tcp any

4 any (deny any traffic with a tcp header to any device ) c. access-list 100 permit udp any (deny all packets with a udp header from given Subnet to any destination device) d. access-list 100 deny tcp any host eq 23 (deny any packet with a tcp header from any source host to specific device on port 23) e. apply ACL on Interface in/out 3. Named Standard a. ip access-list standard somename b. permit c. deny d. permit any e. apply to appropriate Interface in or out 4. Named Extended a. ip access-list extended somename b. permit ip any eq www c. permit ip any any d. apply to appropriate Interface in or out Configure NAT: 1. STATIC: b. ip nat inside source static c. int f0/1 d. ip nat in e. int s0/0 f. ip nat out g. show ip nat translations 2. DYNAMIC: b. ip access-list standard 100 c. permit ip any d. ip nat pool PoolName netmask e. ip nat inside source list 100 pool PoolName f. int f0/0 g. ip nat in h. int s0/1 i. ip nat out 3. PAT: b. access-list 101 permit any

5 (repeat this step to add to list if needed) c. ip nat inside source list 101 interface S0/0/0 overload Configure NTP Client: 2. ntp server version 4 3. show ntp status OR associations Device Password Security: 2. enable secret cisco (Priv Exec Mode Pwd) 3. services password-encryption (encrypts enable, local user, & lin Pwds) Disable Telnet: 2. lin vty transport input ssh Enable SSH: 2. ip domain name shane.local 3. username shane password cisco 4. crypto key generate rsa generalkeys modulus ip ssh version 2 6. lin vty transport input ssh Configure ACL for Telnet/SSH Access: 1. access-list 20 permit lin vty access-class 20 in The above configurations assume you know the why behind them. This Guide is solely intended to remove all noise around the ICND1 Outline & provide a direct CLI How-to procedure for each of the listed tasks. Reference the ICND1 Study Guide for detailed explanations of each. Created by Shane Williford 19 October If you reference this Study Guide, please give credit to the author.

CCT vs. CCENT Skill Set Comparison

CCT vs. CCENT Skill Set Comparison Operation of IP Data Networks Recognize the purpose and functions of various network devices such as Routers, Switches, Bridges and Hubs Select the components required to meet a given network specification

More information

Basic Cisco Commands By Marcus Nielson (2014)

Basic Cisco Commands By Marcus Nielson (2014) Basic Cisco Commands By Marcus Nielson (2014) Configuring Basic Switch Settings (Switch Examples) Enter enable if the prompt has changed back to Switch>. Switch> enable Switch# Enter global configuration

More information

Cisco Certified Network Associate Version 2 ( )

Cisco Certified Network Associate Version 2 ( ) Cisco Certified Network Associate Version 2 (200-120) Exam Description: The 200-120 composite CCNA v2 exam is a 1-½ hour test with 50 60 questions. The 200-120 CCNA exam is the composite exam associated

More information

Cisco CCNA 2 Cheat Sheet

Cisco CCNA 2 Cheat Sheet Czyszczenie switcha i zapis konfiguracji Switch> enable Switch# show flash Switch# delete vlan.dat Switch# erase startup-config Switch# reload Switch# copy running-config startup-config Weryfikacja ustawień

More information

100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1)

100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1) 100-101: Interconnecting Cisco Networking Devices Part 1 v2.0 (ICND1) Course Overview This course provides students with the knowledge and skills to implement and support a small switched and routed network.

More information

Skills Assessment Student Training Exam

Skills Assessment Student Training Exam Skills Assessment Student Training Exam Topology Assessment Objectives Part 1: Initialize Devices (8 points, 5 minutes) Part 2: Configure Device Basic Settings (28 points, 30 minutes) Part 3: Configure

More information

Note: This case study utilizes Packet Tracer. Please see the Chapter 5 Packet Tracer file located in Supplemental Materials.

Note: This case study utilizes Packet Tracer. Please see the Chapter 5 Packet Tracer file located in Supplemental Materials. Note: This case study utilizes Packet Tracer. Please see the Chapter 5 Packet Tracer file located in Supplemental Materials. CHAPTER 5 OBJECTIVES Configure a router with an initial configuration. Use the

More information

Interconnecting Cisco Network Devices 1 Course, Class Outline

Interconnecting Cisco Network Devices 1 Course, Class Outline www.etidaho.com (208) 327-0768 Interconnecting Cisco Network Devices 1 Course, Class Outline 5 Days Interconnecting Cisco Networking Devices, Part 1 (ICND1) v2.0 is a five-day, instructorled training course

More information

Cisco Certified Network Associate Exam. Operation of IP Data Networks. LAN Switching Technologies. IP addressing (IPv4 / IPv6)

Cisco Certified Network Associate Exam. Operation of IP Data Networks. LAN Switching Technologies. IP addressing (IPv4 / IPv6) Cisco Certified Network Associate Exam Exam Number 200-120 CCNA Associated Certifications CCNA Routing and Switching Operation of IP Data Networks Operation of IP Data Networks Recognize the purpose and

More information

Interconnecting Cisco Networking Devices, Part 1 (ICND1) v3.0

Interconnecting Cisco Networking Devices, Part 1 (ICND1) v3.0 Interconnecting Cisco Networking Devices, Part 1 (ICND1) v3.0 COURSE OVERVIEW: Interconnecting Cisco Networking Devices, Part 1 (ICND1) v3.0 is a five-day, instructor-led training course that teaches learners

More information

Cisco - Configure the 1721 Router for VLANs Using a Switch Module (WIC-4ESW)

Cisco - Configure the 1721 Router for VLANs Using a Switch Module (WIC-4ESW) Page 1 of 20 Configure the 1721 Router for VLANs Using a Switch Module (WIC-4ESW) Document ID: 50036 Contents Introduction Prerequisites Requirements Components Used Network Diagram The Role of Switched

More information

INTERCONNECTING CISCO NETWORK DEVICES PART 1 V2.0 (ICND 1)

INTERCONNECTING CISCO NETWORK DEVICES PART 1 V2.0 (ICND 1) INTERCONNECTING CISCO NETWORK DEVICES PART 1 V2.0 (ICND 1) COURSE OVERVIEW: Interconnecting Cisco Networking Devices, Part 1 (ICND1) v2.0 is a five-day, instructor-led training course that teaches learners

More information

Inter-VLAN Routing Malin Bornhager Halmstad University

Inter-VLAN Routing Malin Bornhager Halmstad University Inter-VLAN Routing Malin Bornhager Halmstad University Session Number 2002, Svenska-CNAP Halmstad University 1 Objectives Inter-VLAN Routing Router-on-a-Stick Subinterface configuration Switch Security

More information

CHAPTER 1 Scaling IP Addresses

CHAPTER 1 Scaling IP Addresses CHAPTER 1 Scaling IP Addresses The Study Guide portion of this chapter uses a combination of matching, fill-in-the-blank, multiple-choice, and open-ended question exercises to test your knowledge of the

More information

8 steps to protect your Cisco router

8 steps to protect your Cisco router 8 steps to protect your Cisco router Daniel B. Cid daniel@underlinux.com.br Network security is a completely changing area; new devices like IDS (Intrusion Detection systems), IPS (Intrusion Prevention

More information

Lab 8.3.1.2 Configure Basic AP Security through IOS CLI

Lab 8.3.1.2 Configure Basic AP Security through IOS CLI Lab 8.3.1.2 Configure Basic AP Security through IOS CLI Estimated Time: 30 minutes Number of Team Members: Students will work in teams of two. Objective In this lab, the student will learn the following

More information

Topic 7 DHCP and NAT. Networking BAsics.

Topic 7 DHCP and NAT. Networking BAsics. Topic 7 DHCP and NAT Networking BAsics. 1 Dynamic Host Configuration Protocol (DHCP) IP address assignment Default Gateway assignment Network services discovery I just booted. What network is this? What

More information

CCNA is a well renowned international certification by Cisco Systems in the field of computer networking.

CCNA is a well renowned international certification by Cisco Systems in the field of computer networking. CCNA - Cisco Certified Network Associates [International Certification Exam Code 200-120 CCNA] What is CCNA? CCNA is a well renowned international certification by Cisco Systems in the field of computer

More information

Lab 7.4.1: Basic DHCP and NAT Configuration

Lab 7.4.1: Basic DHCP and NAT Configuration Topology Diagram Addressing Table Device Interface IP Address Subnet Mask S0/0/0 10.1.1.1 255.255.255.252 R1 Fa0/0 192.168.10.1 255.255.255.0 Fa0/1 192.168.11.1 255.255.255.0 S0/0/0 10.1.1.2 255.255.255.252

More information

Network Simulator Lab Study Plan

Network Simulator Lab Study Plan The CCNA 640-802 Network Simulator has 300 lab exercises, organized both by type (Skill Builder, Configuration Scenario, Troubleshooting Scenario, and Subnetting Exercise) and by major topic within each

More information

The Cisco IOS Firewall feature set is supported on the following platforms: Cisco 2600 series Cisco 3600 series

The Cisco IOS Firewall feature set is supported on the following platforms: Cisco 2600 series Cisco 3600 series Cisco IOS Firewall Feature Set Feature Summary The Cisco IOS Firewall feature set is available in Cisco IOS Release 12.0. This document includes information that is new in Cisco IOS Release 12.0(1)T, including

More information

Basic Wireless Configuration

Basic Wireless Configuration Basic Wireless Configuration Topology Diagram Learning Objectives Configure options in the Linksys Setup tab. Configure options in the Linksys Wireless tab. Configure options in the Linksys Administration

More information

Assigning the Switch IP Address and Default Gateway

Assigning the Switch IP Address and Default Gateway CHAPTER 4 Assigning the Switch IP Address and Default Gateway This chapter describes how to create the initial switch configuration (for example, assign the switch IP address and default gateway information)

More information

CCNA Exploration 4.0: ESwitching Basic Switching / Wireless PT Practice SBA. Switch S1 S1#sh ru Building configuration...

CCNA Exploration 4.0: ESwitching Basic Switching / Wireless PT Practice SBA. Switch S1 S1#sh ru Building configuration... CCNA Exploration 4.0: ESwitching Basic Switching / Wireless PT Practice SBA Switch S1 S1#sh ru Building configuration... Current configuration : 1639 bytes version 12.2 no service timestamps log datetime

More information

Configuring Network Address Translation (NAT)

Configuring Network Address Translation (NAT) Configuring Network Address Translation (NAT) Objective Configure a router to use Network Address Translation (NAT) to convert internal IP addresses, typically private addresses, into outside public addresses.

More information

Welcome to Todd Lammle s CCNA Bootcamp

Welcome to Todd Lammle s CCNA Bootcamp Welcome to Todd Lammle s CCNA Bootcamp Todd Lammle Cisco Authorized CCNA Bootcamps are now available, delivered by CCSI instructor, and popular Sybex author Todd Lammle. Todd Lammle CCNA Training Boot

More information

Brocade to Cisco Comparisons

Brocade to Cisco Comparisons 1 2 3 Console cables - The console cables are not interchangeable between Brocade and Cisco. Each vendor provides their console cable with each manageable unit it sells. Passwords - Neither Cisco or Brocade

More information

Device Interface IP Address Subnet Mask Default Gateway

Device Interface IP Address Subnet Mask Default Gateway Felix Rohrer Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 192.168.99.11 255.255.255.0 192.168.99.1 S2 VLAN 99 192.168.99.12 255.255.255.0 192.168.99.1

More information

Objectives. Access methods for CLI environment. Configuration files

Objectives. Access methods for CLI environment. Configuration files 2007 Cisco Systems, Inc. All rights reserved. Cisco Public Configuring and Testing Your Network Network Fundamentals Chapter 11 ITE PC v4.0 Chapter 1 1 Objectives Define the role of the Internetwork Operating

More information

WiNG 5.X How To. Policy Based Routing Cache Redirection. Part No. TME-05-2012-01 Rev. A

WiNG 5.X How To. Policy Based Routing Cache Redirection. Part No. TME-05-2012-01 Rev. A WiNG 5.X How To Policy Based Routing Cache Redirection Part No. TME-05-2012-01 Rev. A MOTOROLA, MOTO, MOTOROLA SOLUTIONS and the Stylized M Logo are trademarks or registered trademarks of Motorola Trademark

More information

TotalCloud Phone System

TotalCloud Phone System TotalCloud Phone System Cisco SF 302-08P PoE VLAN Configuration Guide Note: The below information and configuration is for deployment of the Cbeyond managed switch solution using the Cisco 302 8 port Power

More information

Configuring Server Load Balancing

Configuring Server Load Balancing CHAPTER 6 This chapter describes how to configure server load balancing (SLB) on the Cisco Application Control Engine (ACE) module. This chapter contains the following sections: Information About Server

More information

CHAPTER 6 Inter-VLAN Routing

CHAPTER 6 Inter-VLAN Routing CHAPTER 6 Inter-VLAN Routing Now that you have a network with many different VLANs, the next question is, How do you permit devices on separate VLANs to communicate? The exercises in this chapter review

More information

Configuring Network Address Translation

Configuring Network Address Translation CHAPTER5 Configuring Network Address Translation The information in this chapter applies to both the ACE module and the ACE appliance unless otherwise noted. This chapter contains the following major sections

More information

Worksheet 1 (Router Programming)

Worksheet 1 (Router Programming) Name: Worksheet 1 (Router Programming) Programme: The Cisco emulator (esim) can be used to program each of the routers in the topology given in Figure 1. Initially you will see that you have to program

More information

Interconnecting Cisco Networking Devices: Accelerated Course CCNAX v2.0; 5 Days, Instructor-led

Interconnecting Cisco Networking Devices: Accelerated Course CCNAX v2.0; 5 Days, Instructor-led Interconnecting Cisco Networking Devices: Accelerated Course CCNAX v2.0; 5 Days, Instructor-led Course Description Interconnecting Cisco Networking Devices: Accelerated (CCNAX) v2.0 is a 60-hour instructor-led

More information

"Charting the Course...

Charting the Course... Description "Charting the Course... Course Summary Interconnecting Cisco Networking Devices: Accelerated (CCNAX), is a course consisting of ICND1 and ICND2 content in its entirety, but with the content

More information

- The PIX OS Command-Line Interface -

- The PIX OS Command-Line Interface - 1 PIX OS Versions - The PIX OS Command-Line Interface - The operating system for Cisco PIX/ASA firewalls is known as the PIX OS. Because the PIX product line was acquired and not originally developed by

More information

Router Lab Reference Guide

Router Lab Reference Guide Router Lab Reference Guide 1 PURPOSE AND GOALS The routing lab allows testing different IP-related protocols and solutions in a close to live environment. You can learn how to configure Cisco routers and

More information

Lab 5.3.8 Configuring PAT with SDM and Static NAT using Cisco IOS Commands

Lab 5.3.8 Configuring PAT with SDM and Static NAT using Cisco IOS Commands Lab 5.3.8 Configuring PAT with SDM and Static NAT using Cisco IOS Commands Device Host Name Interface IP Address Subnet Mask R1 CustomerRouter Serial 0/0/0 (DTE) 209.165.200.225 255.255.255.224 Fast Ethernet

More information

PT Activity: Configure Cisco Routers for Syslog, NTP, and SSH Operations

PT Activity: Configure Cisco Routers for Syslog, NTP, and SSH Operations PT Activity: Configure Cisco Routers for Syslog, NTP, and SSH Operations Instructor Version Topology Diagram Addressing Table Device Interface IP Address Subnet Mask Default Gateway Switch Port R1 FA0/1

More information

642 523 Securing Networks with PIX and ASA

642 523 Securing Networks with PIX and ASA 642 523 Securing Networks with PIX and ASA Course Number: 642 523 Length: 1 Day(s) Course Overview This course is part of the training for the Cisco Certified Security Professional and the Cisco Firewall

More information

Configuring Static and Dynamic NAT Translation

Configuring Static and Dynamic NAT Translation This chapter contains the following sections: Network Address Translation Overview, page 1 Information About Static NAT, page 2 Dynamic NAT Overview, page 3 Timeout Mechanisms, page 4 NAT Inside and Outside

More information

Initial Configuration

Initial Configuration CHAPTER 5 This chapter provides instructions for performing the initial configuration of the router, and contains the following sections: Installing Cisco Router and Security Device Manager, page 5-1 Using

More information

CCNA Security. Chapter Two Securing Network Devices. 2009 Cisco Learning Institute.

CCNA Security. Chapter Two Securing Network Devices. 2009 Cisco Learning Institute. CCNA Security Chapter Two Securing Network Devices 1 The Edge Router What is the edge router? - The last router between the internal network and an untrusted network such as the Internet - Functions as

More information

Lab 2.5.1: Basic Switch Configuration

Lab 2.5.1: Basic Switch Configuration Topology Addressing Table Device Interface IP Address Subnet Mask Default Gateway PC1 NIC 172.17.99.21 255.255.255.0 172.17.99.11 PC2 NIC 172.17.99.32 255.255.255.0 172.17.99.11 S1 VLAN99 172.17.99.11

More information

Brest. Backup : copy flash:ppe_brest1 running-config

Brest. Backup : copy flash:ppe_brest1 running-config Brest Backup : copy flash:ppe_brest1 running-config Cisco SF300-08 Mise en place des services : - Serveurs : 10.3.50.0/24 VLAN 2 (port 1) - DSI : 10.3.51.0/24 VLAN 3 (port 2) - Direction : 10.3.52.0/24

More information

Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI

Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI Device Host Name Interface IP address Subnet mask R1 R1 Serial 0/0/0 (DCE) 172.17.0.1 255.255.0.0 FastEthernet 0/0 172.16.0.1 255.255.0.0

More information

Troubleshooting the Firewall Services Module

Troubleshooting the Firewall Services Module 25 CHAPTER This chapter describes how to troubleshoot the FWSM, and includes the following sections: Testing Your Configuration, page 25-1 Reloading the FWSM, page 25-6 Performing Password Recovery, page

More information

Virtual Fragmentation Reassembly

Virtual Fragmentation Reassembly Virtual Fragmentation Reassembly Currently, the Cisco IOS Firewall specifically context-based access control (CBAC) and the intrusion detection system (IDS) cannot identify the contents of the IP fragments

More information

How To Configure InterVLAN Routing on Layer 3 Switches

How To Configure InterVLAN Routing on Layer 3 Switches How To Configure InterVLAN Routing on Layer 3 Switches Document ID: 41860 Contents Introduction Prerequisites Requirements Components Used Conventions Configure InterVLAN Routing Task Step by Step Instructions

More information

Objectives. Router as a Computer. Router components and their functions. Router components and their functions

Objectives. Router as a Computer. Router components and their functions. Router components and their functions 2007 Cisco Systems, Inc. All rights reserved. Cisco Public Objectives Introduction to Routing and Packet Forwarding Routing Protocols and Concepts Chapter 1 Identify a router as a computer with an OS and

More information

Cisco Certified Network Associate (CCNA) 120 Hours / 12 Months / Self-Paced WIA Fee: $2035.00

Cisco Certified Network Associate (CCNA) 120 Hours / 12 Months / Self-Paced WIA Fee: $2035.00 Cisco Certified Network Associate (CCNA) 120 Hours / 12 Months / Self-Paced WIA Fee: $2035.00 This fee includes the following exams: Cisco Certified Network Associate (CCNA) 100-101 ICND1 and 200-101 ICND2

More information

Cisco Networking Professional-6Months Project Based Training

Cisco Networking Professional-6Months Project Based Training Cisco Networking Professional-6Months Project Based Training Core Topics Cisco Certified Networking Associate (CCNA) 1. ICND1 2. ICND2 Cisco Certified Networking Professional (CCNP) 1. CCNP-ROUTE 2. CCNP-SWITCH

More information

Chapter 11 Network Address Translation

Chapter 11 Network Address Translation Chapter 11 Network Address Translation You can configure an HP routing switch to perform standard Network Address Translation (NAT). NAT enables private IP networks that use nonregistered IP addresses

More information

Configure Cisco and Gnu/Linux for networking

Configure Cisco and Gnu/Linux for networking Configure Cisco and Gnu/Linux for networking Routing and Switching 1: Introduction to Networks Chapter 2 Copyleft 2013 Hacklab Cosenza (http://hlcs.it) Released under Creative Commons License 3.0 By-Sa

More information

Lab 9.1.1 Organizing CCENT Objectives by OSI Layer

Lab 9.1.1 Organizing CCENT Objectives by OSI Layer Lab 9.1.1 Organizing CCENT Objectives by OSI Layer Objectives Organize the CCENT objectives by which layer or layers they address. Background / Preparation In this lab, you associate the objectives of

More information

Geschreven door Administrator woensdag 13 februari 2013 17:37 - Laatst aangepast woensdag 13 februari 2013 18:05

Geschreven door Administrator woensdag 13 februari 2013 17:37 - Laatst aangepast woensdag 13 februari 2013 18:05 Nexus 1000V returns the control of networking back to network administrators so that there is a clear boundary between server administrators and network administrators. For small businesses, one administrator

More information

Router and Switch Configuration Basic and step by step configurations By Mohammad Zameer Ahmadzai

Router and Switch Configuration Basic and step by step configurations By Mohammad Zameer Ahmadzai Router and Switch Configuration Basic and step by step configurations By Mohammad Zameer Ahmadzai 2-17-15-ITCK NOC-MZ Ahmadzai 1 Basic Router Configuration The initial configuration of an IOS device involves

More information

Configuring Port Security

Configuring Port Security CHAPTER 62 This chapter describes how to configure the port security feature. For complete syntax and usage information for the commands used in this chapter, see the Cisco IOS Master List, at this URL:

More information

- Basic Router Security -

- Basic Router Security - 1 Enable Passwords - Basic Router Security - The enable password protects a router s Privileged mode. This password can be set or changed from Global Configuration mode: Router(config)# enable password

More information

Configuring a Leased Line

Configuring a Leased Line CHAPTER 4 Configuring a Leased Line The configuration in this chapter describes how to configure a Cisco 1700 router for IP and IPX over a synchronous serial line. Before You Begin The configuration in

More information

Configure ISDN Backup and VPN Connection

Configure ISDN Backup and VPN Connection Case Study 2 Configure ISDN Backup and VPN Connection Cisco Networking Academy Program CCNP 2: Remote Access v3.1 Objectives In this case study, the following concepts are covered: AAA authentication Multipoint

More information

Enabling Remote Access to the ACE

Enabling Remote Access to the ACE CHAPTER 2 This chapter describes how to configure remote access to the Cisco Application Control Engine (ACE) module by establishing a remote connection by using the Secure Shell (SSH) or Telnet protocols.

More information

Cisco How To Configure InterVLAN Routing on Layer 3 Switc

Cisco How To Configure InterVLAN Routing on Layer 3 Switc Cisco How To Configure InterVLAN Routing on Layer 3 Switc Table of Contents How To Configure InterVLAN Routing on Layer 3 Switches...1 Introduction...1 Before You Begin...1 Conventions...1 Prerequisites...1

More information

ISE TACACS+ Configuration Guide for Cisco NX-OS Based Network Devices. Secure Access How-to User Series

ISE TACACS+ Configuration Guide for Cisco NX-OS Based Network Devices. Secure Access How-to User Series ISE TACACS+ Configuration Guide for Cisco NX-OS Based Network Devices Secure Access How-to User Series Author: Technical Marketing, Policy and Access, Security Business Group, Cisco Systems Date: January

More information

Configuring Role-Based Access Control

Configuring Role-Based Access Control 5 CHAPTER This chapter describes how to configure role-based access control (RBAC) on the Cisco Application Control Engine (ACE) module. This chapter contains the following sections: Information About

More information

login timeout 30 access list ALL line 20 extended permit ip any any port 9053 interval 15 passdetect interval 30

login timeout 30 access list ALL line 20 extended permit ip any any port 9053 interval 15 passdetect interval 30 logging enable logging console 4 logging timestamp logging trap 5 logging buffered 4 logging device id hostname logging host 10.0.128.240 udp/514 format emblem logging host 10.0.143.24 udp/514 login timeout

More information

ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example

ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example Document ID: 113336 Contents Introduction Prerequisites Requirements Components Used Conventions Configure Network Diagram

More information

Experts in Networking. CCNA Cheat Sheet. This CCNA command cheat sheet covers both ICND parts 1 & 2 and covers the current CCNA exam (640-802).

Experts in Networking. CCNA Cheat Sheet. This CCNA command cheat sheet covers both ICND parts 1 & 2 and covers the current CCNA exam (640-802). CCNA Cheat Sheet This CCNA command cheat sheet covers both ICND parts 1 & 2 and covers the current CCNA exam (640-802). Whilst not an exhaustive IOS command list it covers the majority of commands found

More information

Lab Configuring Syslog and NTP (Instructor Version)

Lab Configuring Syslog and NTP (Instructor Version) (Instructor Version) Instructor Note: Red font color or Gray highlights indicate text that appears in the instructor copy only. Topology Addressing Table Objectives Device Interface IP Address Subnet Mask

More information

Lab 5.3.7 Configuring DHCP with SDM and the Cisco IOS CLI

Lab 5.3.7 Configuring DHCP with SDM and the Cisco IOS CLI Lab 5.3.7 Configuring DHCP with SDM and the Cisco IOS CLI Device Host Name Interface IP Address Subnet Mask R1 Customer Serial 0/0/1 (DTE) 209.165.200.225 255.255.255.224 Fast Ethernet 0/0 192.168.1.1

More information

What is VLAN Routing?

What is VLAN Routing? Application Note #38 February 2004 What is VLAN Routing? This Application Notes relates to the following Dell product(s): 6024 and 6024F 33xx Abstract Virtual LANs (VLANs) offer a method of dividing one

More information

Felix Rohrer. PT Activity 7.5.3: Troubleshooting Wireless WRT300N. Topology Diagram

Felix Rohrer. PT Activity 7.5.3: Troubleshooting Wireless WRT300N. Topology Diagram Felix Rohrer PT Activity 7.5.3: Troubleshooting Wireless WRT300N Topology Diagram All contents are Copyright 1992 2007 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information.

More information

CT5760 Controller and Catalyst 3850 Switch Configuration Example

CT5760 Controller and Catalyst 3850 Switch Configuration Example CT5760 Controller and Catalyst 3850 Switch Configuration Example Document ID: 116342 Contributed by Antoine KMEID and Serge Yasmine, Cisco TAC Engineers. Aug 13, 2013 Contents Introduction Prerequisites

More information

shortcut Tap into learning NOW! Visit www.informit.com/shortcuts for a complete list of Short Cuts. Your Short Cut to Knowledge

shortcut Tap into learning NOW! Visit www.informit.com/shortcuts for a complete list of Short Cuts. Your Short Cut to Knowledge shortcut Your Short Cut to Knowledge The following is an excerpt from a Short Cut published by one of the Pearson Education imprints. Short Cuts are short, concise, PDF documents designed specifically

More information

Chapter 3 Using Access Control Lists (ACLs)

Chapter 3 Using Access Control Lists (ACLs) Chapter 3 Using Access Control Lists (ACLs) Access control lists (ACLs) enable you to permit or deny packets based on source and destination IP address, IP protocol information, or TCP or UDP protocol

More information

ICND1 Lab Guide. 100-101 Interconnecting Cisco Networking Devices Part 1 Version 2.0. Labs powered by

ICND1 Lab Guide. 100-101 Interconnecting Cisco Networking Devices Part 1 Version 2.0. Labs powered by ICND1 Lab Guide 100-101 Interconnecting Cisco Networking Devices Part 1 Version 2.0 ii Interconnecting Cisco Networking Devices Part 1 100-101 Lab Guide LM20130929/BV2.01 iii 25 Century Blvd. Ste. 500

More information

LAB II: Securing The Data Path and Routing Infrastructure

LAB II: Securing The Data Path and Routing Infrastructure LAB II: Securing The Data Path and Routing Infrastructure 8. Create Packet Filters a. Create a packet filter which will deny packets that have obviously bogus IP source addresses but permit everything

More information

Security and Access Control Lists (ACLs)

Security and Access Control Lists (ACLs) Security and Access Control Lists (ACLs) Malin Bornhager Halmstad University Session Number 2002, Svenska-CNAP Halmstad University 1 Objectives Security Threats Access Control List Fundamentals Access

More information

GregSowell.com. Mikrotik Basics

GregSowell.com. Mikrotik Basics Mikrotik Basics Terms Used Layer X When I refer to something being at layer X I m referring to the OSI model. VLAN 802.1Q Layer 2 marking on traffic used to segment sets of traffic. VLAN tags are applied

More information

Configuring WAN Failover with a Cisco 881 Router and an AirLink ES440

Configuring WAN Failover with a Cisco 881 Router and an AirLink ES440 Configuring WAN Failover with a Cisco 881 Router and an AirLink ES440 When the AirLink ES440 is combined with a third-party router, the combined solution supports business continuity by providing primary

More information

Introduction about cisco company and its products (network devices) Tell about cisco offered courses and its salary benefits (ccna ccnp ccie )

Introduction about cisco company and its products (network devices) Tell about cisco offered courses and its salary benefits (ccna ccnp ccie ) CCNA Introduction about cisco company and its products (network devices) Tell about cisco offered courses and its salary benefits (ccna ccnp ccie ) Inform about ccna its basic course of networking Emergence

More information

Configuring with the Command-Line Interface

Configuring with the Command-Line Interface CHAPTER 3 This chapter describes how to use the Cisco IOS software command-line interface (CLI) to configure basic Cisco VG224 functionality This chapter presents the following major topics: Configuring

More information

Lab 10.2.4 Mitigate Layer 2 Attacks

Lab 10.2.4 Mitigate Layer 2 Attacks Lab 10.2.4 Mitigate Layer 2 Attacks Objective Scenario Topology In this lab, the students will complete the following tasks: Mitigate against CAM table overflow attack with appropriate Cisco IOS commands.

More information

PIX/ASA 7.x and above : Mail (SMTP) Server Access on Inside Network Configuration Example

PIX/ASA 7.x and above : Mail (SMTP) Server Access on Inside Network Configuration Example PIX/ASA 7.x and above : Mail (SMTP) Server Access on Inside Network Configuration Example Document ID: 70031 Contents Introduction Prerequisites Requirements Components Used Conventions Related Products

More information

Objectives. Background. Required Resources. CCNA Security

Objectives. Background. Required Resources. CCNA Security Chapter 8 Lab B, Configuring a Remote Access VPN Server and Client Topology IP Addressing Table Device Interface IP Address Subnet Mask Default Gateway Switch Port R1 FA0/1 192.168.1.1 255.255.255.0 N/A

More information

LAB Configuring NAT. Objective. Background/Preparation

LAB Configuring NAT. Objective. Background/Preparation LAB Configuring NAT Objective Configure a router to use network address translation (NAT) to convert internal IP addresses, typically private addresses, into outside public addresses. Configure static

More information

Cisco Configuring Commonly Used IP ACLs

Cisco Configuring Commonly Used IP ACLs Table of Contents Configuring Commonly Used IP ACLs...1 Introduction...1 Prerequisites...2 Hardware and Software Versions...3 Configuration Examples...3 Allow a Select Host to Access the Network...3 Allow

More information

CompTIA Network+ N Official Cert Guide Mapping Guide to CompTIA Network+ Simulator Labs

CompTIA Network+ N Official Cert Guide Mapping Guide to CompTIA Network+ Simulator Labs CompTIA Network+ N10 005 Official Cert Guide Mapping Guide to CompTIA Network+ Simulator Labs Domain 1.0: Network Concepts 1.1 Compare the layers of the OSI and TCP/IP Models TCP/IP Model Layer Matching

More information

Introduction to Routing and Packet Forwarding

Introduction to Routing and Packet Forwarding Introduction to Routing and Packet Forwarding Routing Protocols and Concepts 1 Router as a Computer Describe the basic purpose of a router -Computers that specialize in sending packets over the data network.

More information

Lab 3.5.1: Basic VLAN Configuration (Instructor Version)

Lab 3.5.1: Basic VLAN Configuration (Instructor Version) (Instructor Version) Topology Diagram Addressing Table Device (Hostname) Interface IP Address Subnet Mask Default Gateway S1 VLAN 99 172.17.99.11 255.255.255.0 N/A S2 VLAN 99 172.17.99.12 255.255.255.0

More information

Using LiveAction with Cisco Secure ACS (TACACS+ Server)

Using LiveAction with Cisco Secure ACS (TACACS+ Server) LiveAction Application Note Using LiveAction with Cisco Secure ACS (TACACS+ Server) September 2012 http://www.actionpacked.com Table of Contents 1. Introduction... 1 2. Cisco Router Configuration... 2

More information

Troubleshooting the Firewall Services Module

Troubleshooting the Firewall Services Module CHAPTER 25 This chapter describes how to troubleshoot the FWSM, and includes the following sections: Testing Your Configuration, page 25-1 Reloading the FWSM, page 25-6 Performing Password Recovery, page

More information

Savvius Insight Initial Configuration

Savvius Insight Initial Configuration The configuration utility on Savvius Insight lets you configure device, network, and time settings. Additionally, if you are forwarding your data from Savvius Insight to a Splunk server, You can configure

More information

WorldSkills Hong Kong Competition 2016. Test Project IT Network Systems Administration (Linux Module) English Version only 只 提 供 英 文 版 本

WorldSkills Hong Kong Competition 2016. Test Project IT Network Systems Administration (Linux Module) English Version only 只 提 供 英 文 版 本 WorldSkills Hong Kong Competition 2016 Test Project IT Network Systems Administration (Linux Module) English Version only 只 提 供 英 文 版 本 Table of Content INTRODUCTION 2 DESCRIPTION OF PROJECT AND TASKS

More information

Adding an Extended Access List

Adding an Extended Access List CHAPTER 11 This chapter describes how to configure extended access lists (also known as access control lists), and it includes the following topics: Information About Extended Access Lists, page 11-1 Licensing

More information

Table of Contents. Cisco Using the Cisco IOS Firewall to Allow Java Applets From Known Sites while Denying Others

Table of Contents. Cisco Using the Cisco IOS Firewall to Allow Java Applets From Known Sites while Denying Others Cisco IOS Firewall to Allow Java Applets From Known Sites w Table of Contents Using the Cisco IOS Firewall to Allow Java Applets From Known Sites while Denying Others...1 Introduction...1 To Deny Java

More information

Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI

Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI Lab 5.3.5 Configuring Basic Router Settings with the Cisco IOS CLI Device Host Name Interface IP Address Subnet Mask R1 R1 Serial 0/0/0 (DCE) 172.17.0.1 255.255.0.0 FastEthernet 0/0 172.16.0.1 255.255.0.0

More information

Configuring Network Address Translation (NAT)

Configuring Network Address Translation (NAT) 8 Configuring Network Address Translation (NAT) Contents Overview...................................................... 8-3 Translating Between an Inside and an Outside Network........... 8-3 Local and

More information