Cisco CCNA 2 Cheat Sheet

Transcription

1 Czyszczenie switcha i zapis konfiguracji Switch> enable Switch# show flash Switch# delete vlan.dat Switch# erase startup-config Switch# reload Switch# copy running-config startup-config Weryfikacja ustawień Switch> enable Switch# show running-config Switch# show startup-config Switch# show interface vlan1 Switch# show ip interface vlan1 Switch# show interfaces trunk Switch# show interface f0/1 switchport Switch# show port-security interface f0/5 Switch# show port-security address Switch# show version ( include ) Switch# show vlan Switch# show vlan brief Cisco CCNA 2 Cheat Sheet Switch# show mac address-table <PC MAC> Switch# show mac address-table dynamic Switch# clear mac address-table dynamic Switch# show flash Switch# dir flash: Switch# show ip ssh Switch# show ip http server status Router# show ip route Router# show ip ospf Router# show ip ospf neighbor Router# show ipv6 ospf neighbor Router# show ip ospf interface brief Router# show ip protocols Router# show ip interface brief Router# show ipv6 protocols Router# show ipv6 rip Test1 Router# show access-list 1

2 Router# show ip nat translations Router# show ip nat statistics Podstawowa konfiguracja Switch> enable Switch# configure terminal Switch(config)# hostname S1 S1(config)# service password-encryption S1(config)# security passwords min-length 5 S1(config)# enable secret class S1(config)# no ip domain-lookup S1(config)# no ip http server S1(config)# banner motd # Unauthorized access is strictly prohibited. # S1# configure terminal S1(config)# vlan 99 S1(config-vlan)# exit S1(config)# interface vlan99 S1(config-if)# ip address S1(config-if)# no shutdown S1(config)# interface range f0/1 24, g0/1 2 S1(config-if-range)# switchport access vlan 99 S1(config-if-range)# exit S1(config)# ip default gateway S1(config)# line con 0 S1(config-line)# password cisco S1(config-line)# exec-timeout 5 0 S1(config-line)# login S1(config-line)# logging synchronous S1(config-line)# exit S1(config)# line vty 0 15 S1(config-line)# password cisco S1(config-line)# exec-timeout 5 0 S1(config-line)# login S1(config-line)# logging synchronous S1(config-line)# exit S1(config)# mac address-table static BE.6C89 vlan 99 interface fastethernet 0/6 S1(config)# exit S1# SSH

3 S1(config)# ip domain-name CCNA-Lab.com S1(config)# username admin privilege 15 secret sshadmin S1(config)# line vty 0 4 S1(config-line)# transport input ssh S1(config-line)# login local S1(config-line)# exit S1(config)# crypto key generate rsa modulus 1024 S1(config)# ip ssh time-out 75 S1(config)# ip ssh authentication-retries 2 S1(config)# end VLAN switch S1(config)# vlan 99 S1(config-vlan)# name Management S1(config-vlan)# exit S1(config)# no vlan 30 S1(config)# interface vlan 99 S1(config-if)# ip address S1(config-if)# no shutdown S1(config-if)# end S1(config)# interface vlan 1 S1(config-if)# ipv6 address autoconfig S1(config-if)# end Interfejs switch S1(config)# interface f0/5 S1(config-if)# mac address aaaa.bbbb.cccc S1(config-if)# switchport mode access S1(config-if)# switchport access vlan 99 S1(config-if)# shutdown S1(config-if)# switchport port-security mac-address XXXX.XXXX.XXXX S1(config-if)# switchport port-security mac-address sticky S1(config-if)# switchport port-security maximum 3 S1(config-if)# switchport port-security violation? S1(config-if)# no shutdown S1(config-if)# exit S1(config)# Trunk mode switch S1(config-if)# switchport mode dynamic desirable (DTP mode) LUB S1(config-if)# switchport mode trunk (manualnie) S1(config-if)# switchport trunk native vlan 99 S1(config-if)# switchport trunk allowed vlan 10,99 S1(config-if)# switchport nonegotiate (wył DTP mode) Interfejs router R1# configure terminal

4 R1(config)# interface fastethernet 0/1 R1(config-if)# description Connection to Hell R1(config-if)# ip address R1(config)# IPv6 router R1(config)# ipv6 unicast routing R1(config-if)# ipv6 address 2001:db8:acad:a::1/64 eui-64 R1(config-if)# ipv6 address fe80::1 link-local R1(config)# interface seria 0/0/1 R1(config-if)# ipv6 address FC00::1/ Q router.1 R1(config-subif)# encapsulation dot1q 1 R1(config-subif)# ip address R1(config-subif)# exit Routing statyczny ipv4 R1(config)# ip route f0/1 R1(config)# ip route R1(config)# ip route [ip/int] Routing statyczny ipv6 R1(config)# ipv6 route 2001:db8:acad:a::/64 serial 0/0/0 R1(config)# ipv6 route 2001:db8:acad:b::/64 FC00::2 R1(config)# ipv6 route ::/0 [ip/int] Routing RIPv2 R1(config)# router rip R1(config-router)# version 2 R1(config-router)# passive-interface g0/1 (wyłącza rozgłaszanie na interfejsie) R1(config-router)# network R1(config-router)# network R1(config-router)# default-information originate (rozsyla info o statycznej trasie domyślnej -> najpierw trzeba stworzyć) Routing RIPng R1(config-if)# ipv6 rip Test1 enable R1(config-if)# interface s0/0/0 R1(config-if)# ipv6 rip Test1 enable R1(config-if)# ipv6 rip Test1 default-information originate (najpierw trzeba stworzyć domyślną trasę) Routing OSPFv2 R1(config)# router ospf 1

5 R1(config-router)# network area 0 R1(config-router)# passive-interface g0/0 R1(config-router)# auto-cost reference-bandwidth R1(config)# interface s0/0/0 R1(config-if)# bandwidth 128 (na obu końcach) LUB R1(config-if)# ip ospf cost 1565 R1(config-router)# passive-interface default ZMIANA ID ROUTERA LOOPBACK INT. R1(config)# interface lo0 R1(config-if)# ip address R1(config-if)# end ZMIANA ID ROUTERA RĘCZNIE R1(config)# router ospf 1 R1(config-router)# router-id R1(config-router)# end R1(config)# clear ip ospf process Routing OSPFv3 (IPv6) R1(config)# ipv6 router ospf 1 R1(config-router)# router-id R1(config-router)# passive-interface g0/0 R1(config-router)# passive-interface default R1(config)# interface g0/0 R1(config-if)# ipv6 ospf 1 area 0 Numerowana ACL R1(config)# access-list 1 remark Allow R3 LANs Access R1(config)# access-list 1 permit R1(config)# access-list 1 permit host R1(config)# access-list 1 deny any (zawsze na końcu) R1(config)# ip access-group 1 out Nazywana ACL R1(config-std-nacl)# ip access-list standard BRANCH R1(config-std-nacl)# permit host R1(config-std-nacl)# permit R1(config-std-nacl)# deny any R1(config-std-nacl)# exit R1(config-if)# ip access-group BRANCH out MODYFIKACJA ACL R1(config)# ip access-list standart BRANCH R1(config-std-nacl)# 30 permit R1(config-std-nacl)# end

6 ACL DLA VTY R1(config)# line vty 0 15 R1(config-line)# access-class ADMIN-MGT in R1(config-line)# exit Rozszerzona numerowana ACL R1(config)# access-list 100 remark Allow WWW & SSH R1(config)# access-list 100 permit tcp host host eq 22 R1(config)# access-list 100 permit tcp any any eq 80 MODYFIKACJA R1(config)# ip access list extended 100 R1(config-ext-nacl)# 30 permit ip R1(config-ext-nacl)# end Rozszerzona nazywana ACL R1(config)# ip access-list extended WWW-POLICY R1(config-ext-nacl)# permit tcp host R1(config-ext-nacl)# permit tcp eq 80 MODYFIKACJA R1(config)# ip access-list extended WWW-POLICY R1(config-ext-nacl)# 30 permit ip R1(config-ext-nacl)# end ACL IPv6 R1(config)# ipv6 access-list RESTRICT-VTY R1(config-ipv6-acl)# permit tcp 2001:db8:acad:a::/64 any R1(config-ipv6-acl)# permit tcp any any eq 22 R1(config-ipv6-acl)# line vty 0 4 R1(config-line)# ipv6 access-class RESTRICT-VTY in R1(config-line)# end R1(config)# ipv6 access-list RESTRICTED-LAN R1(config-ipv6-acl)# remark Block Telnet from outside R1(config-ipv6-acl)# deny tcp any 2001:db8:acad:a::/64 eq telnet R1(config-ipv6-acl)# permit ipv6 any any R1(config-ipv6-acl)# end R1(config-if)# ipv6 traffic-filter RESTRICTED-LAN out R1(config-if)# end R1# clear ipv6 access-list RESTRICTED-LAN MODYFIKACJA R1(config)# ipv6 access-list RESTRICTED-LAN R1(config-ipv6-acl)# permit tcp 2001:db8:acad:b::/64 host 2001:db8 acad:a::a eq 23 sequence 15 DHCP IPv4 router R2(config)# ip dhcp excluded-address R2(config)# ip dhcp pool R1G0

7 R2(dhcp-config)# network R2(dhcp-config)# default-router R2(dhcp-config)# dns-server R2(dhcp-config)# domain-name ccna-lab.com R2(dhcp-config)# lease 2 (days) R2(dhcp-config)# exit R1(config)# interface g0/0 R1(config-if)# ip helper-address DHCP IPv4 switch S1(config)# sdm prefer lanbase-routing S1(config)# exit S1# reload S1(config)# ip dhcp excluded-address S1(config)# ip dhcp pool DHCP1 S1(dhcp-config)# network S1(dhcp-config)# default-router S1(dhcp-config)# dns-server S1(dhcp-config)# lease 3 S1(dhcp-config)# exit ROUTING ON SWITCH S1(config)# ip routing S1(config)# ip route DHCP IPv6 R1(config)# ipv6 dhcp pool IPV6POOL-A R1(config-dhcpv6)# domain-name ccna-dhcpv6.com R1(config-dhcpv6)# dns-server 2001:db8:acad:a::abcd R1(config-dhcpv6)# exit R1(config-if)# ipv6 dhcp server IPV6POOL-A R1(config-If)# ipv6 nd other-config-flag R1(config-if)# end MODYFIKACJA NA STATEFULL R1(config)# ipv6 dhcp pool IPV6POOL-A R1(config-dhcpv6)# address prefix 2001:db8:acad:a::/64 R1(config-dhcpv6)# end R1(config-if)# shutdown R1(config-if)# ipv6 nd managed-config-flag R1(config-if)# end Statyczny NAT R1(config)# ip nat inside source static

8 R1(config-if)# ip nat inside R1(config)# interface s0/0/1 R1(config-if)# ip nat outside Dynamiczny NAT R1(config)# access-list 1 permit R1(config)# ip nat pool public_access netmask R1(config)# ip nat inside source list 1 pool public_access Przeciążenie puli NAT R1(config)# access-list 1 permit R1(config)# ip nat pool public_access netmask R1(config)# ip nat inside source list 1 pool public_access overload PAT R1(config)# access-list 1 permit R1(config)# ip nat inside source list 1 interface serial 0/0/1 overload Inne router R1# clock set 15:00:00 13 Oct 2016 R1(config-if) clock rate (DCE) R1(config)# ip http server R1(config)# ip http secure-server R1(config)# ip http authentication local