3 Configuring a Router
CCNA 1 version 3.0
Overview
Students completing this module should be able to: Name a router Set passwords Examine show commands Configure a serial interface Configure an Ethernet interface Execute changes to a router Save changes to a router Configure an interface description Configure a message-of-the-day banner Configure host tables Understand the importance of backups and documentation
end exit
Router(config)# router protocol Router(config-router)# (commands) Router(config-router)# exit Router(config)# exit Router# Router(config)# interface type port Router(config-if)# (commands) Router(config-if)# end (or Control-Z) Router#
WARNING service password-encryption uses a Cisco Level 7 encryption which is very easy to decrypt. For the GetPass! software www.boson.com However, the enable secret <password> uses a stronger encryption method and cannot be easily hacked.
More later!
Lab 12-2: Configuring Router Passwords. Page 247
Console password
conpass
VTY 0 4 password
vtypass
Auxiliary
auxpass
What is wrong here? The administrator has either done a shutdown on the interface or has forgotten to do a no shutdown.
Real world
DTE Cable
DCE Cable
How can you tell which end is the DTE and which end is the DCE? Look at the label on the cable. Look at the connecter between the two cables - The DTE cable will always be male and the DCE cable will always be female.
RouterA#show controllers serial 0 HD unit 0, idb = 0xECA4C, driver structure at 0xF1EC8 buffer size 1524 HD unit 0, V.35 DTE cable cpb = 0x62, eda = 0x403C, cda = 0x4050 RX ring with 16 entries at 0x624000 00 bd_ptr=0x4000 pak=0x0F5704 ds=0x62FFB8 status=80 pak_size=22 This is one of few commands where there must be a space between the interface type and the port. RouterB#show controllers serial 0 buffer size 1524 HD unit 0, V.35 DCE cable, clockrate 64000 cpb = 0x62, eda = 0x408C, cda = 0x40A0 RX ring with 16 entries at 0x624000 00 bd_ptr=0x4000 pak=0x0F2F04 ds=0x627908 status=80 pak_size=22
How can you tell which end is the DTE and which end is the DCE? Use the show controllers command! It will also tell you the type of cable, in our labs we will be using a V.35 cable.
Interface descriptions
RouterB#show inter e 0 Serial0 is up, line protocol is up Hardware is HD64570 Description: Engineering LAN, Bldg. 18 Internet address is 10.1.1.1/24
Interface descriptions
Gateway(config)#inter e 0 Gateway(config-if)#description LAN interface for Marketing Gateway(config-if)#end Gateway# Gateway#show run Building configuration... <text omitted> ! interface Ethernet0 description LAN interface for Marketing no ip address no ip directed-broadcast shutdown <text omitted> Gateway#show interface ethernet 0 Ethernet0 is administratively down, line protocol is down Hardware is Lance, address is 0000.0c34.9ebb (bia 0000.0c34.9ebb) Description: LAN interface for Marketing MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 252/255, load 1/255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 <text omitted> Gateway#copy run start Dont forget this or next time router Destination filename [startup-config]? reboots these changes will be lost! Building configuration... Gateway#
startup-config
IOS
The running-config
The configuration file contains global, process, and interface information that directly affects the operation of the router and its interface ports. All changes to the router are made to the running-config file and take affect immediately on the router (with just a couple of exceptions).
During bootup
running-config
RAM
startup-config
Changes to the router are automatically put in the running-config file. If the router loses power or reboots, everything in RAM is lost including the runningconfig file. To make sure the changes to the routers configuration remain saved, you must copy the running-config from RAM into the startup-config into NVRAM:
Router# copy
running-config
startup-config
The startup-config file now identical to running-config and the router will also have these changes if the router reboots.
show startup-config
These commands can only be done in privilege mode because they display password information.
Lab 12-6: Making configuration Changes, Page 262 Lab 12-7: Configuring Interface Descriptions, Page 266
Login banners and Configuring messageof-the-day (MOTD) Lab 12-8: Configuring Message of the Day, Page 269
Router(config)#hostname Gateway Gateway(config)# MOTD Gateway(config)#banner motd # Enter TEXT message. End with the character '#'. Warning! Stay away! # Gateway(config)#end Gateway#exit Press RETURN to get started. Warning! Stay away! User Access Verification Password: Gateway#show run Building configuration... <text omitted> ! hostname Gateway ! <text omitted> ! banner motd ^C Warning! Stay away! ^C
Router# ping 172.16.32.1 Router# ping Auckland Router# telnet 192.168.53.1 Router# telnet Beirut Router# traceroute 192.168.89.1 Router# traceroute Capetown
This does not make the router a DNS (Domain Name Server). This command does not turn your router into a DNS server. This command does not effect packets entering your router to be
routed. This only affects the IOS commands entered at the router prompt. Multiple ip addresses can be entered in case one interface is down. It is usually a good idea to use the same list of names on all your router configs.
Router(config)# ip domain-lookup Router#wreh Translating "wreh"...domain server (255.255.255.255) (Takes a few seconds) Translating "wreh"...domain server (255.255.255.255) (Takes a few seconds) Router(config)# no ip domain-lookup Router#wreh Translating "wreh" % Unknown command or computer name, or unable to find computer address
If you are not using the services of a DNS server, it is best to disable this process. DNS (Domain Name Service) is enabled by default with a server address of
255.255.255.255, which is a local broadcast. If enabled, with no DNS server on the network, may cause a slight, but irritable delay when making typing mistakes. Lab 12-9: Configuring Host Tables, Page 271
The TFTP host can be any system that has TFTP software loaded and
operating and able to receive files from the TCP/IP network.
startup-config
IOS
copy flash tftp copy tftp flash
When using Windows, the TFTP server software must be running. The copy can be performed from the console port or from a telnet session. The telnet session can be performed on the same computer where the TFTP
server is running (or to a different computer).
Summary (1/2)
The router has several modes: User EXEC mode Privileged EXEC mode Global configuration mode Other configuration modes The command-line interface may be used to make changes to the configuration: Setting the hostname Setting passwords Configuring interfaces Modifying configurations Showing configurations
Summary (2/2)
An understanding of the following key points should have been achieved: Configuration standards are key elements in the success of any organization maintaining an efficient network. Interface descriptions can include important information to help network administrators understand and troubleshoot their networks. Login banners and messages-of-the-day provide users with information upon login to the router. Host name resolutions translate names to IP addresses to allow the router to quickly convert names to addresses. Configuration backup and documentation is extremely important to keep a network operating smoothly.