Docdownloader.com Professor Messer Cisco Ccent Ccna 100 105 Icnd1 Course Notes v101s1

r    .�    Pfssor    Pfssor

I�  Messer

James Jame s "Prof "Profess essor or Messe Me Messer sserr

!"#$%&&#" !"#$% !"#$%&&#" &&#" (%&&% (%&&%")& (%&&%")& ")& *+&,# *+&, *+&,# # **-./0**. **-./ **-./0**.1 **-./0** 0**.1 .1 1 2334235 23342 2334235 35 6*.72 *#8" *#8"&% &% .#9% .#9%&& Wrien by James “Professor” Messer Copyright Copyr ight © 2017 by Messer Studi Studios, os, LLC hp://www.ProfessorMesser.com All rights reserved. No part of this book may be reproduced or transmied in any form or by any means, means, electronic electr onic or mecha mechanical nical,, includ including ing photo photocopyin copying, g, recor recording, ding, or by any informaon informaon storag storage and retrieval system, without wrien permission from from the publisher. publisher. First Edion: March 2017 /":;%<:"= /":;% /":;%<:"= <:"= 1,=> 1,=>#?@%; 1,=># 1,=>#?@% #?@%;A%<% ?@%;A%<% ;A%<%>9& A%<%>9& >9& All product names and trademarks trademarks are the property property of their respecve owners, and are in no way associated associated or alia aliated ted with Messer Messer Stud Studios, ios, LLC. “Professor “Prof essor Messer Messer”” is a regist registered ered trademar trademark k of Messer Studi Studios os LLC. “Cisco”” and “IOS” are registered trademar “Cisco trademarks ks of Cisco Systems, Inc.

B:">+>A :>; 7+&,@:+<%" This book is designed to provide informaon about the Cisco CCENT/CCNA 100-105 ICND1 cercaon exam. However, there may be typographical and/or content errors. Therefore, Therefore, this book should serve serve only as a general general guide and not as the ulmate ulmate source of subject informaon. The author author shall have have no liability liabil ity or respon responsibilit sibility y to any person or enty regardi regarding ng any loss or dama damage ge incurred, incurred, or alleged to to have incurred, directly or indirectly indirectly,, by the informaon informaon contained in this book.

*#>9%>9& Introducon

+C

3D3 4 EC%"C+%?

2

The 100-105 Cisco ICND1 Exam Introducon to the Cisco CLI

2D3 4 .%9?#"= F8>;:<%>9:@& 1.1 - Introducon to Ethernet - The Ethernet Frame 1.1 - The OSI Model and TCP/IP Model 1.1 - Encapsulaon and decapsulaon 1.2 - Common Port Numbers 1.2 - TCP Header 1.2 - UDP Header 1.2 - TCP Communicaon 1.3 - Enterprise Infrastructure Components 1.4 - Network Architectures 1.5 - Network Topologies 1.6 - Network Cabling 1.7 - Troubleshoong Methodologies 1.8 - IPv4 Addressing 1.9 - IPv4 Address Types 1.10 - Private IPv4 Addressing 1.11 - IPv6 Addressing 1.12 - Conguring IPv6 Addressing 1.12 - Troubleshoong IPv6 Addressing 1.13 - IPv6 Neighbor Discovery Protocol 1.13 - IPv6 Addressing with DHCP and SLAAC 1.14 - IPv6 Address Types

GD3 4 H1. I?+9,J+>A F8>;:<%>9:@& 2.1 - LAN Swching Concepts 2.3 - Troubleshoong Cable and Interface Issues 2.4 - Introducon to VLANs 2.4 - Conguring VLANs 2.4 - Troubleshoong VLANs 2.5 - Conguring Interswitch Connecvity 2.5 - Troubleshoong Interswitch Connecvity 2.6 - Conguring CDP and LLDP 2.7 - Conguring Port Security 2.7 - Troubleshoong Port Security

3.0 - Roung Fundamentals Fundamentals 3.1 - Introducon to Roung 3.2 - Understanding Roung Tables 3.3 - Roung Metrics and Administrave Distances 3.4 - Router on a Sck and Layer 3 Switches 3.5 - Stac and Dynamic Roung 3.6 - IPv4 Stac Roung

1 1

2 1 2 ! ! ! " " "

5 # # $ $

9 10 11 11 12 13 14 14

2K 16 16 18 19 19 20 20 21 21 22

GL 24 25 26 27 28 29

3.6 - IPv6 Stac Roung 3.6 - TroubleshoongStac Roung 3.7 - An Overview of RIPv2 3.7 - Conguring RIPv2 3.7 - Oponal RIPv2 Features 3.7 - Troubleshoong RIPv2

LD3 4 6>$":&9"8,98"% 6>$":&9"8,98"% I%"C+,%& 4.1 - An Overview of DNS 4.2 - Troubleshoong DNS 4.3 - An Overview of DHCP 4.3 - Conguring DHCP 4.4 - Troubleshoong DHCP 4.5 - Conguring NTP 4.6 - An Overview of Access Lists 4.6 - Conguring Standard Numbered Access Lists 4.6 - Conguring Extended Numbered Access Lists 4.6 - Conguring Named Access Lists 4.6 - Troubleshoong Access Lists 4.7 - An Overview of Network Address Translaon 4.7 - Conguring Network Address Translaon 4.7 - Troubleshoong Network Address Translaon

5D3 4 6>$":&9"8,98"% (:+>9%>:>,%

5.1 - Conguring Syslog 5.2 - Conguraon Management 5.2 - Discovering Devices with CDP and LLDP 5.2 - Switch and Router Licensing 5.2 - Conguring Timezones 5.2 - Conguring Loopback Interfaces 5.3 - Inial Device Conguraon 5.4 - Conguring IOS Passwords 5.4 - Conguring Banners 5.4 - Device Hardening 5.5 - Upgrading and Recovering IOS 5.5 - IOS Password Recovery 5.5 - IOS File SystemManagement 5.6 - Troubleshoong with Ping 5.6 - Troubleshoong with Traceroute 5.6 - Logging at the Terminal

30 31 32 !! !"

35

MK !# !#

37 37 39 39 41 42 42 "! "" "#

47 49

53 50 51 51 52 53 53 54 54 55 55 56 58 59 60 60 60

Introduction

If you're in the Iomaon Tecology dusty, ten you kow that Csco cercaos ae some of the most accepted (and most diicut) cetfcatons to ear. Cisco certicatos rage om a fundamenta etwoing knowedge to te most advaced etworg tecooges today. Cisco certficaton exams test you o the specifcs o routers, switces ports protocos ad much moe 've created these Course Notes to help you throug te detais tat you eed to kow for te exam. Best of luc wth your studes! - Proesso Messe

The Cisco CCENT/CCNA Roung and Swtchng cerfcaon Eang the Csco Ceried Network Assocate Roug ad Switcng (CCNA R&S cetcaon equres ethe   the completo of two sepaateexams (te CND 100105 ad ICND2 20005 o the completo of a sgle combied exam (the 200125 THE INERCONNE INERCONNECING CING CISCO NEORK DEVICES 1 (CNDl) 100-105 EXAM ese ICND 0005 Course Notes ocus on the contet equed to pass the st haf o te CCNA R&S. assing te CND 100105 exam eans you te Csco Cetfed Enty Netwoing echncia CCENT) cetcaton so you ca ear some cedetas as you move away towads acievg you CCNA R&S cetfcaon. Heres the breakdown o eac tecology secton and te percetage of each topic o te 100105 exam: Secto .0  Network Fudamentals  20% Secto 2.0  LAN Switcing undametas  26% Secto 3.0  Routng undametas  25% Secto 4.0  astucture Sevices  5% Secto 5.0  astucte Mainteance  4%

How to use ths book Oce you're comortabe wt a of the sectos i te oica Cisco 0005 exam objectves you ca use   these otes as a cosoidated summay o the most mportat topcs. These Couse Notes folow the same   format ad numbering sceme as te ofica exam obectves so t shoud be easy to coss referece these otes wth al of you oter study materials.

© 2017 Messer Studis, LLC

Professo Messer's Cisco CCENT/CCNA CCENT/CCNA 100-105 ICNDl Course Course Notes Notes  vPage

http /wwPrfssoessecm /wwPrfssoessecm

p Pr  

Professor Messer's

Cisco CCENT/CCNA 100-105 ICNDl Course Notes

hp://www.PoessoMesercom

The 100-105 Cisco ICNDl Exam

• Exa t 90 nut • 45t 55qutn

100-105 Exam Objectves

• • • •

10 - NtrkFundantal(20%) 20 - AN Siting Fundanta (26%) 30  Rutng Fundantal (25%) 40  Infatutu Srvi (15%)

• Sring ragbtn 300 and ,000 nt • Pang  i givn at

• 50 - Infratrutu aintnan (4%)

  t bgnnng  t xa

Introducton to the Csco CU

a a g • ntrfa t OS tug a CU • ut at t ttng n t t dv • Cand in Inta • A iat rult in a n f abld txt ·I   • Sial ab t a nl nta • Pt - T ya intfa • Ar t ntrk    ,  . • Baud at  T d f t data (9600 baud) • Tlnt,SSH • Parity  Nn Serial cae to a consoe nterface • Data bit - 8 • Fr t utr • 9-in ia nnt r SB intrfa • St bit  1 • Fr t t  ut • Flntl  nn • 9in ria nnt,RJ45 nnt, SB ntra • Yu igt nd a SB t ria abl �  - ·   Confgurat Confgurat i • And a t  adatr Serial prt Po: Bud R:    d  ne • 960 •  EXEC d l  m  Bi Stopbt Flowct ct • Exut ad a a nralu 8 • N guan angald .   AAdva dva  Co Couan ua n O Ons ns • Pivilgd EXEC d K  • Enabl d • Inal gin  t u d •  " t nt vigd d • And  t lav How to connect

noe

1.1  Introducion to Ethernet  The Ethernet Frame  

Field

 

Byes

Descrp Descrpt ton

e

7

  enn one d zeo d o yncnon (000.)

F



 r   g     

Don A Ad



n  d f  do di

orc A Ade



en A ddre  e oc dece

Ety

2

i t data nai t ayad

Pod

  4 

Lr  nd hh 

CS



 C S CRCks  

Preamble © 27 Mesr Sdi  di os, LC

SFD estnao MAC

Souce C   Type

ayoad

Prfss Mss's Prfss Mss's s s ENT/NA 1-5 IND s Nos  Pg 

FCS htp /wv.P /wv.P fesessecm

- -  · ·



•



  .



 

   



Unlock the enre book at hp://www.profesormesse hp://www.profesormesse.com/icnd .com/icnd 1







  

 

  

  J   Jt   t   

•

t





-

.

1

�

•

.

.   •

,.

..





'

'

.



  

,

1

•

 '

.

·-

View every page: htp://www.professormesse.com/icndl

.7 - Troubleshootng Methodologies Fault isoaion and documentaon • Idenfy Idenfy where the problem migt be • And where where itit s not • Lmt Lmt the scop scopee and andsave sa ve tme tme • Randomguessesaren Randomg uessesaren 'tefc efcen entt • Docme Docmenta ntato ton n • We We dont dont do document cument enoug • Someone Someone may have done ths ths b before efore • Capture Capture yor nque local loc al persp perspectve ectve

Veify and monto • Does your proposed x work? • Test T est   aand nd con conrm  rm

• Some  xes xes     reqr reqre e ongongmonto ongong montorng rng • nterm ntermt tent ent sse ssess • Confrm Conf rmte te resolu re soluon on • May take take mnutes,  ours ours or day dayss • Don't Don't for forget get to docment • t wl wl save save yo yo

Resove or escaate • The clock clock s s tckin tcking g • And Andtme tme is almost aways aways drectl drectlyy relatabe tto o money • Yo're Yo're lookn lookng g for te root roo t cause • Address Address te root cause cau se and solve te sse sse • Wat a appens ppens if te root roo t cause cant b bee fond? fond? • Escalate Escalate to the next person/organ person/  organizat izaton onn n te lst • Yor organzaton organzaton may ave an escala onprocess on process • Balances Balances tme tme with with money

next tme

.8  1Pv4 Addessng  ·Is

Number Number of etos

Hosts pe eto

Delt S  n ntt Ms



24



4

2..

Q 8-9



6

,8  

6  

0

lOX (192-223)



8

0715

5

555555.

 (439

Not defn

Not e

Not e

Not ene

Not ne

Not

t

Nt

Nt

Not











Css

. Ladig . 8,ts

Nwk  8is

ea eang

Class A

Ox (1-26)

 B ass  Cass D (mu Icat)

 E (reseved) (reseved)

1 24

255

Class A

0

Ne tw  ork   (8) I    ____H    m ___  m  2( 244 ____ 255

0

0

11111111 11111111 00000000 00000000

 N  6               I  .__s    6  {6    N e w      ( 1 6  255

Class C

0

11111111 00000000 00000000 00000000

255

Class B

0

255

255

0

11111111 11111111 11111111 00000000

The constucton of an 1Pv4 subnet • Network Network address address • The rst P P addr address ess of a s sbnet bnet • Set all ost bits tto o O (0 deci decimal) mal)

• First usabe usabe hos hostt ad address dress • ne number number high higher er than thante te net network work address • Network broadcast broadcast addre address ss • he a ast st P address of a sbnet s bnet • Set all host bts tto o 1 (255 decim decimal) al) • Last sabe ost aaddres ddresss • ne nmber lower than te broadcast address

N   w w  r     (4      I  H    . N    _   © 07 MS MSudi,, LCLC Pf r' r' c c    ET/A-5 ET/A-5Dl Dl r   r  Pag 

hp    

See all of these great notes: hp://www.professormesse.com/icnd

'

-



 





1

  ,1 .  1

1

.

•





  





.





 

   

  -

.  

.

.

.



.

.

.

.

'



M

• 

�  � 

•

t

'.



+ 

 

 

.

.

.





1.14 -  1Pv6 Address Types {contnud} nk ocal •Commuicate o the oca subet • Evey 1Pv6 terace gets a  oca addess •fS0::/0 • f80 + 54 zero bits 64 bt teace ID • Eectvey becomesf80::/6  • Routers wo't orward these pacets • Everytg stays o the oca etwo •Used mosty or admstave purposes •Roug, Neigbo Dscovey Protocoetc.

Socted-node multcast address

• Evey devce ceates a Pv6 soicted-ode mucast addess •Commoy used  NOP •Uses FF02:::FF /0

•Wi=M

oictdoe

F02:00000000:0000:0000:0001:F****** • Locasubet • Based o te Pv6 uicast addess

Mtcast   • Commuicate to mupe devices simutaeousy • Witout commucag to eveyoe

ff :

• Commoy used o routg protocos •y routers ruig that potoco wi ste

ff8 :

• Mucast addresses sta with 111111 •FF00::/8

ff :

Prefx

Scop  o A eve o e o eo

 : te o  A deve t  t rgo o  A e  e m og

 : Go   IAA d ee o  A m oop

Modifed EU64

Atoconguraton

•Use the MAC addess to create a statc Pv6 addess • You just eed te 1Pv6 pex

• tateu autocoguato •DHCPv6 • P addess segs are detemed by the DCP sever

•Add addoa bts to te 4-bt MAC addess to create a EU64 addess • p the 7t bt ad add FF F

• tateess addess autocoguao (AC) •Use NP to deteme the subet prex •Use the moded EU64 to compete te addess • No server eeded

• Easy to cogue •Taes secods • Aways the same 1Pv6 address

• More Pv6 Addessigwit DCP ad AAC

• ee moe Cogurg 1Pv6 Addresses nycast  

•Cogue the same 1Pv6 aycast address o deret devces •oos ie ay othe ucast addess •Pacets set to a aycastaddess ae deiveed to the cosest iteace

# ipv6 address 2001:1:1:1:7/128 anycast

R 1 itc i  G/  up, Un c I  J • O, ·�   F ll ll  H(s) :17 Sb S !! V 88.   6 1

• Aouce te same route out o mutpe data ceters • Cets use te data ceter cosest to them •AycastDN

I



  2 :2 2 8A G2 : ::2 ::2   f ff& f  &  U  bytes C ro $g    o ry 0 s  e<    u   ' O   n  D   ND a   3  D dve ech m   pMe D dv a      u e   e 9  

_.,• I

� "

© 2017 Mr S dio dio, LC

P ' c ENT/A  -5 IDlu IDl u     ag ag 5

-

hp p wv. wv. of om

�- _.

-

·

�- -

   

.-

. 



 

�-



_



�





,.....

 ...•

•

2.5 - Confguring lnterswitch Connectvity 802.lQ trunking • Take a normal Ethernet frame Pream eamble

VN10-   � ·     VN20_

FD Desnon Desnon MAC

Souce 

Typ

od

FC

• Add a VLAN headerin the frame

Etherne Swich

a

FD Ds M

c MA

VN

Type

Payload

FC

• VAN IDs - 12 bits long,  4,094 VANs • "Normal range   through 005, "Extended range  006 throgh 4094 • 0 and 4095 are reserved VLAN numbers

Ethere Swch

VN0. V20 

• Before 802.lQ there was SL (InterSwitch nk) • SL s no longer sed; everyone now uses the 802lQ standard The natve VLN • Ths s dferent than the "default VLAN • The defat VAN s the VLAN assgned to an nterface by defaut

runk conguraon • Use #p   • Congures a trnk to se all known VLANs

• Each trunk has a nave VAN • The nave VAN doesn't add an 802lQ header

• Dynamc Trnking Protoco (DTP) • Atomacaly congres trunkng arameters • Dene the tye of trunk    •IEEE  802lQ S or negotate • Dene the admnstratve mode • Do not trunk always trunk or negotate a trunk   

• The nave VLAN connects swtches without a tag • Some devces wont tak  802lQ   • Just use the nave VAN ! • Natve VLAN should match between switches • You II get a message f the VLAN IDs dont match 1

  Tr commads

Swtchport modes •access

•Switch(cong-if)# sp    

• A nontrunked ort •trunk • A trunkort

•Switch(cong-if)# sp     •Switch(cong-if)# s    p   

•dynamic desirable • nitates and resonds to trnk negotaon messages •dynamic auto • Does not iniate but does resond to trnk negoaon messages

•Switch(cong-if)# s    p   

•#   •#   

2.5  Toubeshoong lnteswitch Connecvity Troubeshootng VLN configurations

• Check VLAN assgnments on the swtch • This s one of the most common ssues yoll nd • Check VLAN assgnments between swtches • This issue usally aears drng inita conguraton • Very the list of trunked VLANs • Create good documentaton • Check the dynamic trunk assgnments • Another intal confg gone wrong

Checking VLN assgnments • ist all VLANs and their associated interfaces Switch# s      Switch# s     • ist all interaces associated with a secfc VAN Switch# s         • View a secfc interface VLAN confgraton Switch# s     O/ p • View a ist of MAC addresses and theirVLAN assgnments Switch# s     

Dynamc trunking 

• oth swtches have to be congred with the right trunking mode• Dont confgure dynamc trunkng on one sde and statc on the other • Dont confgre both sides as dynamic auto • oull end u with an access ort wth no trunkng • ts not as "auto as you mght like © 2017 2017 ti  i , L L

f f '  E/-5 I  · g 

h w    

Read more about this book: hp://www.professormesse.com/icndl

.,

.

.



-

-

· .

  .

. �:•

.

3.6 - 1Pv4 Stac Roung Host and etwork oues • Sac oue ex ex hop ca be a IP addess o ieface Routerl(confg)#ip route 10.10.20.0 255.255.255.0 1010.50.2 Routerl(confg)#ip route 101020.0 255.2552550 s0/3/0 • Desao s based o he mos specfc oue • A masof mas of "all oes oes is he mos specic • Roue Roue o a specc P add addess/h ess/hos os • Use a mas of of255. 255.255. 255.255. 255.255 255 Routerlconfg)#ip route 10.10.20.3 255.255.255255 10.10.502 outer#shw ip roue aic

S S

10.000/8  varaby ubnetted, 9 ubnet, 2 mak 00200/24  drecty connected, Sera0/3/0 00202/32 [l/0] va 00402

Net hop P addess vs erae • Sacoue Sac oueo o ex  ex ho hop p IPadde IP addess ss • Foadig oue eeds eeds he L2 addess of he ex ho hop p P addess • ARP fo 10  10  5 0  , ee ee he 2 fame ad se sed d  o he esoed MAC MAC • Sacoue Sac oue o ex ex hop eface • Foadig oue assumes he he desao P add addess ess s decly coeced • ARP is se o he desao desao IP IP addess hough he ex hop hop eface eface • Po-opo Po-opo coec coecos os • Use ex hop hop eace eace o ex hop IP add addess ess • Mulpo Mulpo coec coecos  os • Use ex ex hop hop P add addess ess Routerlconfg)#ip route 1010.20.0 255.255.255.0 1010.502 Routerlconfg)#ip route 1010200 255255255.0 s0/3/0 Populang a stac rote

• Sacoue Sac oue h ex ex hop hop ie ieace ace • Ieface Ieface ha has s o be up/u up/up p • Sac Sa c oue oue hex h e x hop P addess • Mus hae hae a oue o he he IP addess addess • Wihou hese a oue does' does' appe appea a i he abe • Nee Nee sho shoss up • Foce a oue oue o appea appea h he pemae pemae eyod Routerlcong)#ip route 10.10.203 255255.255.255 S0/0/1 permanent • The eface o oue sll has o be aaiabe aaiabe • The paces paces aae e dopped dopped oheise Defat outes

• A oue oue he o ohe oue oue mac maches hes • he "gaea "gaeayof y of las las eso • A emoe sie may hae o oyy oe oue oue • Go ha ay ·> es ofhe of  he   od • Ca dama damaca caly ly smpy smpy he oug pocess • Wos  coju cojuco co  h al ohe oug mehods

©

7 Messr Stdio dios, LC LC

Router2#  w   Codes: L - loca  - cnnectd, S  satic,  - P M - mbil 8 - BG? D , X  extena I , p 2  SP NS type 1 N2-, OSF A· SS  eKtena E - SP etenal p 1 E - OSPF exeal te 2 E • EP   II,   I v-    v,      * - cndae efaut,  - pr-ser staic re  - O P - priodi dnlde sac ue

I Gtea  lst rert is 0 .00

to netrk 0 

  v ,  ,   0.2.0/2 s dety conncted, Ggabtthenet00 10..21/32 is dietly conncted Ggabitterne00 44   ,  10.2/32 i dietl     conncted, Sril0/3 000.00 [J i 10.   /wP  wP ofo e ecom com Professor Messe's Cisc o CCENT/CCA10 CCENT/CCA100 0-05 ICDl Course o  o tes· age 9 C    

There's a lot more right here: hp://www.professormesser.com/icnd

3. 7 - An Overview of RI Pv2 Dynamic routng protocols • isten for subnet nformaton from other routers • Sent from router to rouer

IGP (Interior Gateway Protoco) • Used wihin a snge auonomous system (AS) • No ntended to route between AS • hat's why theres Exerior Gateway Protocos (EGPs)

• Provide subne nformaon to oter routers • Te other rouers wa you know • Deermine he best path based on te gathered nformaon • Every roung protocol as its own way of dong tis • Wen nework changes occur, update the avaiabe roues • Dferentconvergence process for every dynamc roung prooco

• 1Pv4 dynamic routng  • OSPFv2 (Open Shortest Pa First • RIPv2 (Roung nformaon Protoco version 2) • EGRP (Enanced nerior Gateway RoutngProtoco) • 1Pv6 dynamicroung  • OSPFv3 • EGRP for Pv6 • RIPng (RP next generaton)

Whic routng protoco to use? • Wat exacty is a route? • s it based on he stae of the ink? • s it based on ow far away it s?

nk state routng protocols • nrmaton passed between routers s reaed to e curren connectvty • f i's up you can gettere. • f i's down you can.

• How does the prooco deermne he bes path? • Some formua is apped to te criera o create a metrc • Rank te roues from bes o wors

• Consider the speed of e nk • aster is aways beer rig?

• Recover aer a cange o he nework • Convergence me can vary widey between routng protocos

• Very scaabe • sed mostoften n arge networks

• Standard or proprieary protoco? • OSPF and RP are standards basc funcons of EGRP are standard (RFC 7868)

• OSPF S-S • Large scaabe roung proocos

Dstance-vector routng protocos • nformaon passed beween rouers contans roung tabes • Good for smaer neworks • Doesnt aways scae we to very arge neworks • How many ops" away is anoter nework? • e decidng  vector" s he dstance" • RIP RIPv2 BGP • suay automac - very te configuraton

Routerl#d b g ip   v  I n  s n  P: c 2 a  trom  172.62 n /3/ 9804  000   h 192.6830/24 via 00.0 n  hops

Sam .10

Routerl Routerl

u#  r et  n    #   2   2, n / 9800/4  000   h

Suet 726/4 Swltch3 Swltch3

bn 83

Teal'c .10

©  Mr di  di os, LL C

Pf ' c ENTNA -5 IND  N N  - Pg 

hp hp   w      

-

,'



�  





-

-

-

4.4 - Troubleshootng DHCP onrm you elay aget • If the DHCP s eve is't i   or P sbet, o eed anip helper-ddress •  te DHCP sever s oca, o ea s eqed • Roter-oa-stck • Separate sbets • Need a ip helper-ddress o eac sbteace • Use show ip iterfce • sef we o cat vew the cofgato

�outer2#shw ip interface g0/0 igabitEternet0/0 i up, line protocol i up (connected) Internet addre i 10.10.30.1/24 Broadcat addre i 255255255255 Addre determined by etup command MTU i 100 bte  Helper addre i 172.6.1.  Drecte   roacat orarng i diabed Outgoing acce lit i not et nbound acce lit i not et Proxy ARP i enabled Security level i default Split orizon i enabled CMP redirect are alay ent

No DHCP ddss ssd

DHCP ddss s ssd wh bd o

• Te DHCP ea aget ses the ea iteface IP addess as the sorce P addess • The DHCP seve copaes te etwok cogao to the ea P address • The sbet as sets te rage

• ts eas to iscogre a DHCP poo • So a cofgato optos • Yo a ot ave te rigt address forato

• DHCP ea teface ad DHCP poo etwor age st atc • Wtot a atc, a P addess is ot oeed

• coect DNS vaes • No ae resoto bt P woks

• If o have coectvit te ae the copaiso • Check te ip helper-ddress iterface • Copae it to the etwork cofgato i te poo

• coect deat gatewa assged • Cocates to devces o te oca sbet o

• TP addess is corect assged • VoIP poe doest dow oad acograo fe

t  lwys te wok • Cetrazed DHCP serves rel o a stable/vad etwo coecto • Yo cat get a P addess ess theres a ik • Use pig ad trceroute to vadate te coecto • The i betwee the DHCP ea terace ad the p heper-addess Bw h DHCP  d h ly

• DHCP is al abot boadcasts • 2.255255.255  "a oes broadcast • Rotersdo ot orward DHCP boadc ast pacets • O a ote broadcast packets

D ouehoog • Cor the ip helper-ddress terfaces ad P addesses • Oe wrog teface o address s fatal • DHCP poo etwork cofgato sod atc ea iterface P • Ceca poos IP addesses ad sbet ass • Check te etwok betwee DHCP sever IP address ad DHCP rea P addess • Coecvt s cca

• Mae sre te DHCP clet s a VLAN with a ip helper-ddress • Check oca AN betwee the DHCP rea • Boadcasts ae ve liitg aget ad te DHCP ciet • Basic coectvt is rered • Eas to be paced i te wrog VLAN

45 - Confguring NTP NTP (Nwok me Poool)

• Swtces, roters, ewals seves, workstatos  Eve devce as its ow cock • Scozg te cocks becoescrtca - Log les, atetcao forato, otage detais • Atoatc pdates - o fashg 12:00 ghts • Fexibe  o coto ow cocks are pdated • Ve accate  Accac s bette ta  ilisecod o a oca etwok © 2017 Messer Studis, LLC

Professor Messe's Cisco CCENT/CCA 100-05 ICDl Course otes  age 39

http/wwPrfssoessecm http /wwPrfssoessecm

4.6 - Confguring Standard Numbered Access Lsts

Standard numbered ACs

AC synt  syntax ax

• Standard Standard ACL • Souce Souce IP address addre ss is the only citeria

• Standad numbered ACs use use access list numbes between 1-99 o o 1300-1999 • The gap s reserved for other protocols (Apple (AppleTalk, Talk, DECnet IPX IPX etc.)

• Numbered Numbered AC • ACs ACs ae efeenced by number instead o a name

 g #      {1-99 I 1300-1999} permit I deny} source [source wildcard]

I any}

 g #     1 deny 10.10.1.77  g #     1 permit all

 CConfiging onfiging standad standa d numbeed ACLs

VewingALC configaton configat on nformation

• Choose route interace and directon       •R4#  • Put a standad ACL ACL nea the destnat destnaton on IP - peven pevents ts nadvert nadvertent ent dscards • Vew al ACs • Use the the Source Source IP addess  make sue to use tthe he corec corectt decton decton 4#        / •R4 • Ceate the the ACs ACs using using global global conguraon commands commands • Interace nformaton nf ormaton    shows shows wh whch ch • opdown matching  deault s to deny f nothng else matches ngong and outgong ACLs are associated wth the the interface • Add the ACL to the nteace ip aooess-grup 1 in ip aooessgrup 2 ut

• Prevent Prevent Sam rom accessng Jack's Jack's sever

Routr4(config)#aess-ls 1 deny 10.00 Rout(ong)Uaessls  prit a oog#   g0/0 (#p   aces-roup  

• Pck a locaon c losest to the desnaon

0Su.bne0t4  g

   n    7    6    0    g/  g4 Subnet3 \ m    ,  -  �  _1  /  .l   swi,ch2l     �   S      ·                        g       !           (     < 1-       i              O S2 HLadr ·2 Routerl gO/ O/ �g� .1   Rut3 Router  

Danfel

s  

t4

 

Jack

4.6  Co nfguring Extended Numbered Access Liss

Extended nmbeed access acce ss lists

• Simar to standard numbered ACLs • op-down irst-match logc ingess or egress iterng • Now youll have many more ilteng optons • Souce IP address desnaon P addess protocol

Extended nmbered 1Pv4 AC

!IP Heade

':�-------4b ys------------- Vrsio

T yp o Svic

Idti

Tm o -

tl Lgth

Flgs

Prol

rgm Ot

Hd Chksum •

P  P Addrss

stiio IP Addrss • Syntax Synta x is smilar to the standard number ACs Os d Pddig • Adds addtona matching eywods • Uses number number anges 00-199 and 2000-2699 • protoco protoco - ip tcp udp icmp access l ist 101 deny iomp any any • souce_p souce_pot dest_ip dest_pot access list 1 01 deny top 10.10.10.0 000255 10.10200 0.00255 eq 80

©Mo

 L C

Pf    'C CENTCNA 5ICNDC N  P

hnp

o m



 I

--

:



•



-   









•

                

e      

I, •



:















"

.



- 

1



-

 





'

"

 

















 





. 



4.7 - Confguring Network Address Translaon (contnued)  outerl#shw ip nat statistics Tota tranation: 3 (0 tatc, 3 dynamc, 3 extended) utide Interface: Sera0/3/0 Inde nterface: GgabitEternet0/ Hit: 68 Mie: 35 �xpred tranaton:  Dync appng:

Monitoring NAT NAT oveload/P

Router#sw ip nat ro nide goba cp 92.1.1.1:024 cp 92.1.1.1:025 cp 92111:027

translations

nide oca 1.10.20.51027 1.10.20.71027 110201:1027

Outide oca 04.2.9.63:8 4.2.9.63:8 042963:8

Outde goba 104.20.1963:80 104.20.1963:80 104201963:80

4.7  Troubleshootng Network Address Translaton     TToubleshootng oubleshootng best-pactces    • U ACL • Ck   •ip nat insideip nat outside • W  AC   NPA   •   AC       NA     •       • AC     NA  • NA     •            •  k    • A    k  Statc NA toubleshootng •    •      '    nsd ba addss IS snd

outer(cog)# g0/0 outer(cog  -f )#ip  inside outer(cogf)#interface s0/3/0 outer(cogif)# nat outside outerl(cog-if )#exit outer(cog)# nat inside source outer(cog)# outer(cog)#

Dynamc NA ACL •  AC      k  

• A ACL     NA 

Dynamc NA poo •  v   •  NA        

static 10.10.20.10 92.1.1.10

nat inide ource static 10.10.20.50 92.1.1.50 nat inside source static 10.10.2070 921170

outer(cong)# g0/0 Router(congf)# nat inside Router(cong-f)# s0/3/0 Router(cong-f)# nat outside Router(cong-f)# Router(cong)#sss 1 permit 10.10.20.0 0.0.0.255 Router(cong)# nat pool midway 94.1.1.1 94.1.1.2 netmask Router(cong)# nat inside source list  pool midway

255.255.255.0

outer(cong)# g0/0 outer(cong-if)# nat inside outer(cong-if)# s0/3/0 outer(cong-if)# nat outside outer(congif)# outer(cong)#sss 1 peit 10.10.20.0 0.0.0.255 outer(cong)# nat pool midway 94.1.1.1 94.1.1.2 netmask

• show Ck      outer(cong)# ip nat statistics

255.255.255.0

nat inside source list 1 pool midway

• Y'    N ' k NAT NAT   oveload / P toubleshootng • A    N •       v k • '   v  • Y     v qk © 2017 2017 Messer Messer Studis. Studis. LLC

outer(cong) interface g0 0 outer(cong-if)# nat inside outer(congif)# s0/3/0 outer(cong-if)# nat outside outer(cong-if)# outer(cong)#sss 1 permit outer(cong)# nat inside source

10.10.20.0 0.0.0.255 list  interface s0/3/0 overloa

-

   000   

http /wwPrfssoessecm /wwPrfssoessecm

-

-

-

-

5.3 - Inital Device Confguraton Boong 1OS •Performs a PT                  •Power n elf est • asic hardwae check

What o need •Hostname

• oots from RM • ootstrap program s copied into RAM

•Enable password •A less-sece version o  o    the enable secret passwod • Remove t afte configrng the device

•Enable secet passwod •Potects privleged privleged EXEC and congaon congaon modes

• ootstap boots an I image o RM Monito  (ROMMON} • ROMMON s used fo adminstratve and maintenance prposes •  loads the statup-cong le

•Vrtual terminal password •TT   e passwod sed sed when accessing te devce ove the network

• Loaded into RAM as running-confg   na ece congaon •No configuaton le? No problem.

•Confige Confige NMP management management (yes (yes or no) •Physcal nterface o management •Need P address and subnet mas

•ystem Confgaon Diaog (etup Mode) •Men-drven configuraton on a new devce •Yo don't have to use etp Mode •Confgre Confgre the dvevice toug e temal

54 - Confguring 10S Passwords Authentcatng to 10S devces •Most organzaons wil se an extenal AAA serve •Authentcaton, Authorzaon, Authorzaon, and and Accoun Accounng ng •No No passwods on te I devce

User mode and and privieged mode passwods •Console password • Protects connecons trogh te console port

•You migt want a backup login

•vty passwod •Potects connectons trogh te

•Just in case •Potentals Potentalsecrty ecrty concern •toe te passwords secuely

vta teletype port (telnet o ) •Enable passwod •Prompts wen enteng enable mode

Teletype lies •Inbound connecons ae made made over TY  TY    line lines    s •Many dieent TY lnes on an  device •CTY - Consoe Consoe inte  inteace ace    

•TY  Asynconos Asynconos seria interaces interaces •AUX  Auxiliary Auxiliary pot pot •VTY - Virtual teletype/vtal teminal teminal •View wit shw le     

• t no passwods configured no passwods ae reqred •A bad de dea a Atentatg to 10S deves • Most oganzaons wil use an externa AAA serve •Athencaton Atorizaton and Acconng •No passwords on the  devce

•You mght want a bacp login login •st n case •Potenal security concern •tore te passwods securey �ou t    er l  # cg    ina 

Confgurg es •Consoe password

•elnet/ passwod

• Enabe/Privlege Enabe/Privlegedd EXEC mode passwod © 2017 Mr Studio, LLC

�nter confguration comands, one per line. ouer(cong)# cns 0          ouer(cong-line#   sgc   ouer(congline# Rouer# mna  ner confguraion comands, one per line. ouer(cog)# vy O 4           ouer(congline#    ouer(congline#

End with CNTL/Z.

End wih N/

ouer# na  ner conguraion comands one per ne. End  N/. outer(confg#b sc chynn             

Pfess esse's sc ENT/NA -5 INDl se Nes  Page 54

http wom

See the enre book: hp://www.professormesse.com/icndl

-

" I





-

5.6 - Logging at the Terminal (contnued) teinal monitor • M h gs   SSH sss Houter4�1na   monitor   Router4# 000078: Mr 7 20:58:8303: %LIPROO-5UPOW: Lie protoco o Iterfce V2 chged stte to do 000079 ,r 7 20589,327 %LIEROTO5UDOW Lie protocol o Iterfce FstEtheret0/2 chged stte to do   Router4# 000080 ,r 7 2058:20,342 %LI3UPDO: terfce FstEtheret0/2 chged stte to do   Router4# 00008: ,r 7 20:58:28,562: %LIK3UPDO: terfce FstEtheret0/2 chged stte to p 000082 ,r 7 2058:29,569 %LIEROTO5UDOW Lie protocol o Iterfce FstEtheret0/2 chged stte to up   Router4# 000083 ,r 7 20:58:56.656: %LIROTO5UDOW: Lie protoco o Iterfce V2 chged stte to p   Router4#   loggg oter4#w Syslog loggig ebed (0 messges dropped 0 messges rteimited 0 shes 0 overrus  disbed terig disbled)

No Active Messge iscrimitor. No Ictive essge Discrimitor. Cosoe oggig: eve debggig 83 messges ogged  disbed lterig disbed Mitor loggig eve debggig 6 messges ogged xm disbed lterig disbled Loggig to: vty(6) Buer oggig eve debggig 83 messges ogged l disbed lterig disbled Exceptio Loggig size 4096 bytes Cout d timestmp oggig messges: disbed File oggig disabled Persistet oggig: disbed No ctive lter modes Trp oggig level iormtio 87 messge ies ogged Loggig SourceIterce:

VR me

og Buer (4096 bytes 8,37 %LK3UOWN: Iterce stEtheret0/3 chged stte to p

Severity leels

• Lggg vsc b dvduy c gud • Ech svc chv's w vbsy • gs  dspyd f h v d w ( sv) • Cs gs loin onole 7 0 • M gs 1 loin monitor 6 2 • I bu gs loin ere 4 3 • Sysg 4 loin tra 6

5

Dbuggg  • M OS  csss  • My df dbug ps • bg dbug w usdd  sucs • Mk su yu hv h vhd Roter4#o roe 



 



I  



 



 



W



N   

f

If    



 

• If yu' ccg v ssh, b su  bggg Roter4#teinal monitor © 2017 Messer Studis, LLC

Professor Messe's Cisco CCENT/CCA 100-05 ICDl Course otes  age 61

http/wwPrfssoessecm http /wwPrfssoessecm

Pfsr M�

Thank   yyou Thank ou for viewing this sample of my     ICND Course Notes. Good studies! hp://wwwprofessormessecom/icnd