MUC LUC Phan 1- TONG QUAN OST MODER ssscsnsscaccrensa CABLE LENH CISCO CAN BAN. CISCO DISCOVERY PROTOCOL... ‘TELNET CRACK PASSWORD... BACKUP VA RESTORE., Phan 2-DINH TUYEN STATIC ROUTE. DYNAMIC ROUTING PROTOCOL RIP....ccsesnntrninntiensennnne DYNAMIC ROUTING PROTOCOL IGRP. DYNAMIC ROUTING PROTOCOL EIGRD..... semen i DYNAMIC ROUTING PROTOCOL OSPE. Phan 3 - ACCESS-LIST STANDARD IP ACCESS-LIS’ EXTENDED IP ACCESS-LIST. PhE&n4—NAT —svssennnsessonnsnnn snmnnminnmnnmnnmnnnmnnnennnnnsn BE NAT Overload Dynamic NAT Static NAT Phan 5~ WAN Phan 6 - SWITCH SWITCH (BASIC CONFIGURE) VLANOSI MODEL: OSI Model 1a mt sy chudn héa cho nhiing chtfe ning Network. Lam cho tinh phe tap cia network tré nén don gidn hon, cho phép céc nha phat trién modul hoa viéc thiét ké, Phuong phap nay cho phép nhiéu nha phat trién lam viéc d6c 1p nhau 4€ tao ra nhGng chtic nang riéng biét ma van cé thé hda hop thanh m6t thé théng nh&t mét cach dé dang (plug-and-play). Mé hinh OSI ‘Application Gino dia ng ub ding, "Telnet HTre Presentation Chad hia dB ‘ASCIT JPEG Sesion Thigt Top, qua iy va KEL thc cic phn glao dich Operating systems sia cae Ung dung, Scheduling Transpo ‘Gung cp vide van ti dim bao va King dm blo TCP upp SPX Network Gung cBp vide din dia bY Balj dah twyn che oi dt iu Px Datalink ‘Tao frames tircde bis cla alia woRI Ding dia ehi MAC 023 Detect 16, nhumng khong sta 15 HDLC Physical Tin hiGu s6, xung diGn — ya va connectors, cable ETATIA v5 Protocol Data Unit (PDU) duge sit dung 2 ss 46 giao tip gitta cdc lop = eee, ik [e=eo a Encapsulation 18 phurong php aoe) eld header (phan dau) va trailer (phan duéi) ——— nei | I) ree hi data di chuy€n qua méi l6p. Phia thiGt bj nh@n, sé tién hanh gé tung uzmeee [par aston |) rome header ra khi qua mdi 1p (De- encapsulation) a Ma hinh OS * OSI Model 6 7 16p, dUtge chia lam 2 phn Application (5,6,7) va Data flow (1,234) ‘+ Encapsulation 18 qua trinh déng gét: défliGu khi dich chuyén qua céc 6p s& duge thém header va trailers| * Phia thi€t bi nin, sé tiéin hanh de-encapstulation, alin di Hub Bridge switch Router — hs apis gles ays Ss tp we Master com,CABLE: 1. Gap xoan 4 dai: ‘La cp thong tin chudn STP/UTP Cat-5, g6m c6 8 soi xodn véi nhau thanh tig adi m6t theo ma miu: Cam-Trang va Gam; Luc-Tréng va Luc; Duong-Trang va Duong; ‘Nau-Trang va Nau. Hai du cap n6i v6i Jack cam RJ-45. ‘Tuy theo chudn mau cUia 2 dau Jack RJ-45 ma ta phn biét thanh céc loai sau: Pie 2 Pairs Pair 2{Pair 1|Paie 4 AIA T5688 srr_Déi_Mau sée Chite ning ser _Déi_Miusde ___Chife ning 13 Trang La Phat 1 3 TrémgCam Phat 203 Phat 23 Cam Phat 302 Tréngcam Tha 3 2 Trdnghé = Tho 4 1 Duong Chur ding 41 Duong ura ding 5 1 Trng Duong — Chua ding 5 1 Trang Duong Chua ding 6 2 Cm Tho 62 Ls The 7 4 TrdngNau Chua ding 7 4 TrdngNan Chur ding 8 4 Naw Chur ding 8 4 Na Chur ding Cép thang (Straight-Through Cable): ‘Hai ddu stf dung chun T568B (ho&c T568A). So d6 n6i day cap thang nhu sau : Hub/Switch ServeriRouter Pin Label Label 1 RD+e———1 TD+ 2 RDBe——2 TD 3 TD+———+3_-RD+ 4 NC 4 NC 5 NC 5 NC 6 TD-——+6 RD 7 NC 7 NC 8 NC 8 NC Cp chéo (Crossover Cable): C6 mt dau sit dung chudn TS68A, mét dau str dung chudn TS568B., So d6 n6i day cép chéo nhu sau: Wires on cable ends are in same orderPin Label Pin Labet 1 ® 1 Rl 1 RD+ 8 + @ a 2 RD. 2 RD Aue ANeaLE 3 TD+ 3 TD+ Aah e gUNe212 4 NC 4 NC AA, AIA 5 NC 5 NC AVA? ZU 6 TD 1D- wyogeges PETE 88 nN a We Some wires on cable 8 NC 3 NC ends are crossed ‘Trudng hop sit dung (Céc thiét bi mang dug¢ chia lam hai nhém: ~ Nhém 1: Hub, Switch ~ _Nhém 2: Cac thiét bi cén lai (Router, Computer, ...) Khi du n6i hai thiét bj cing nhém: ding cp chéo (crossover) Khi du n6i hai thiét bi khae nhém: ding cép thang (straight-through) D6i v6i Switchs: Str dung crossover khi chi cd 2 bén du la X.2. Cap Serial La cép thdng tin (data cable) c6 2 ddu n6i v6i jack cm DB-60, mét du néi véi thi&t bj DCE, ddu cn lai n6i v6i thiét bj DTE, Str dung: N6i 2 cOng Serial cla 2 Router, hoac c6ng serial Router v6i t6ng dai 6, Frame-Relay. eo] Modem og) csu/DsU DTE DCE @ (am v.35 3. Cap console: hay con goi la cp Roll : Rolled-over Cable $0 d6 n6i day cép Console nhursau : Device with console py.45.to-RJ-45 te en _ e - (labeled TERMINAL) Cap console cé thé dug dm lai theo so dé sau:‘Lam quen v6i ché d6 dong lénh (CLI) va m6t s6 Iénh cla router Cisco Hung dan 1. Néicép © Bé dam bao an toan thiét bi trong khi thyc hanh, cn phai tat hoan toan nguén dién céc thiét bi trong khi néi cp. Ding cép Console néi céng COM1 cUa may PC (ding Terminal chuyén déi tty DB-9 sang RJ45) v6i cong Console cia Router. © Kiém wa lai day va jack cam dam bao da néi chac chan, 2, Bing nhp vo router Khdi déng Windows, vao HyperTerminal Start — Programs ~ Accessories — Communicatons ~ Hyper Terminal ‘At ten va céc thong s6 nhu hinh ‘Name: con: chon biéu tugng tity thich Connect using: COM1 Connection Description Erte a name and choote an ion ft the connate Nae: (Connect owert LLL TTTBay la dang co ban nhdt 48 c6 thé théng qua m6t méy tinh cu hinh céc thi€t bj cisco. Nhung céch thtfc nay rat bi déng, vi m6t méy tinh chi cdu hinh duge mét router. Trong thyc té phdng LAB, ta thuting déu n6i theo so d6 sau, dé cu hinh céc router gy * théng qua Terminal Server. Terminal Server cung cp tuy cp out-of- cresusiotehitenseanons | attain hi dng ede’ oy cp router théng qua cng console hay cng Host adsess: [182168 2254 aux. Temmial server 1a router 6 céc 7 Asynchronous port n6i tric tiép v6i console Ponmies, [ani port cUia cic thi&t bj router, switch, Connect To Correct using: [TCPAP (Wick) Router 2511 ‘gace eee R16 oSLENH CISCO CAN BAN: Giao din terminal khi vita khéi dng router Fa: 7712908+212808+595109 at xa000060 Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (i) of the Rights in Technical pata and Computer Software clause at DFARS sec. 252.227-7013. cisco systems, Ine. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Softuare TOS (tm) 2500 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright(c) 1986-2008 by cisco Systens, Inc. Compiled Thu 16-Mar-98 16:20 by ccai Tnage text-base: OxO303FG4C, data-base: @xo00e1099 cisco 2500 (68030) processor (revision D) with 4996K/2048K bytes of memory, Processor board 1D 63874635, with hardware revision 0¢000068 Bridging software. X.25 software, Version 3.0.0. 4 Ethernet/IEEE 802.3 interface(s) 2 Serial network interface(s) 32k bytes of non-volatile configuration menory. 192K bytes of processor board System flash (Read ONLY) System Configuration Dialog --- Would you Like to enter the initial configuration dialog? [yes/no] Would you Like to terminate autoinstall? [yes]: Bam Enter dé bat dau Press RETURN to get started! vao cu hinh router 9:01:01: KIP-5-WEBINST KILL: Terminating DNS process 00:01:07: XSYS-5-RESTART: System restarted -- Cisco Internetwork Operating Systen Software ToS (tm) 2500 Software (C2500-I-L), Version 12,1(1)T, RELEASE SOFTWARE (fc1) Copyright’ (c) 1986-2800 by cisco Systems, Tne. Compiled Thu 16-Mar-60 16:19 by ccai (99:01:07: KLINK-S-CHANGED: Interface Etherneto, changed state to administratively down (00:01:07: SLINK-5-CHANGED: Interface Serial1, changed state to administratively ‘down (99:01:08: KLINEPROTO-5-UPDOW: Line protocol on Interface Etherneta, changed state 0 down (09:01:08: KLINEPROTO-5-UPDOMN: Line protocol on Interface Serial1, changed state to ‘sown Router SLL TT TTTBam ? gi ROUEEHS? dé xem trg gitp tai mode nay c6 bao nhiéu Iénh tt cd Router>? Exec commands: access-enable Create a temporary Access-List entry access-profile Apply user-profile to interface clear Reset functions connect Open a terminal connection disable Turn off privileged commands disconnect. disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC help Description of the interactive help system Lock Lock the terminal Login Log in as a particular user Logout Exit from the EXEC rinto Request neighbor and version information from @ multicast router stat Show statistics after multiple multicast traceroutes merace Trace reverse multicast path from destination to source ame-connectiion Name an existing network connection pad Open a X.29 PAD connection ping Send echo messages Start IETF Point-to-Point Protocol (PPP) Resume an active network connection Vao Priviledge mode: Router>enable Router# DE quay lai user mode bang lénh disable Router>enable Router# Router#disable Router> DE thoat hn tré ra khOi ché d6 dong lénh Router cond is now available Press RETURN to get started Router>enable Router#logout Router con® is now available Press RETURN to get started10 Lénh giip 46 (?) rat hu dung, ban cé thé ding trong bat ky ché €6 nao, Router sé dua ra cc lénh duge phép sit dung va ¥ nghfa cUa lénh a6, Vi dy muén dénh lénh enable tai user mode dé vao Priviledge mode, nhung ban lai quén, khéng nh6 r5 lénh enable phai danh nhu thé nao, ban chi cin dénh e? Router>e? enable exit Router liét ké cho biét, ngay tai mode nay cé 2 1énh bat dau bang chif e 1a 1énh enable valénh exit. Bay gid, ban dénh vio : Router>en? enable Router li6t K€ cho bit chi cb 1 1énh t@i mode nay Ta Iénh enable, do vay tac thé danh tt 1énh enable = en cing duge. Routersen Router# + Nhurvy, du hdi duro dt lién ké vio lénh (khéng 06 khoding tréng) sé cho ta bi&t nhimg Iénh néo cé trong mode nay bat déu bang nhimg chér truéc ? Tai priviledg mode, vi dy ban mu6n xem tiép céc phan ctla lénh show, ban go : Router#show 7 access- expression List access expression access- lists List access lists accounting Accounting data for active sessions adjacency Adjacent nodes aliases Display alias commands arp ARP table asyne Information on terminal lines used as router ‘cops “cops information debugging State of each debugging option More~ traffic-shape traffic rate shaping configuration users Display information about terninal lines version System hardware and software status vtemplate Virtual Template interface information whoami Info on current tty line x25 X.25 information x29 X.29 information ap www masterico com,i router lit ké cho ta thy tt c nhiing sub-comand di theo sau 1énh show, tai day ban Jutu ¥/c6 sub-command Ia version, ding 46 xem tinh trang ctia hardware va software2 Router#S? *seshow send set setup show slip start-chat systat eb 4 lénh bat du bang chifs, nhung Iénh show duge uu tién (c6 du * ding trut6c lénh show), tic la chi c&n dénh vo la s, thi router van tr hi la ta dang c3n dénh lénh show. Nhung thong thuBng ta dénh tt la sh. Router#sh Router#show v? version vtemplate 7 €6 2 Iénh sub-conmand Router#show ve? version Router#show ve Router#show version Router#sh ver Cisco Internetwork Operating System Software TOS (tm) 2590 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2060 by cisco systems, Inc. Compiled Thu 16-Mar-96 16:18 by ccai Image text-base: Oxe303F64C, data-base: 0x0e001000 ROM: System Bootstrap, Version 11.0(10c), SOFTWARE BOOTFLASH: 3980 Bootstrap Software (IGS-BOOT-R), Version 11.0(18c), RELEASE SOFT WARE (fet) Router uptime is 55 minutes system returned to ROM by reload System image file is "flash:R1_Flash_New" cisco 2511 (68039) processor (revision M) with 2048K/2048K bytes of memory. Proceysor board 10 20475728, with hardware revision 69000060 Bridging software. X.25 software, Version 3.0.0. 4 Ethernet/IEEE 802.3 interface(s) 2 Serial network interface(s) 46 terminal line(s) 22k bytes of non-volatile configuration memory. 8192k bytes of processor board System flash (Read ONLY) =-More= Configuration register is @x2102 Router SLL TT TTT13, ‘Vao ché do Global-configuration-mode, ding 1Gnh configuration terminal [Rourteréconfig termin c6 thé danh tét 1a? conf t Router (config) ‘At tén cho router 1a R1 Router (config)#hostname RL Ri(config)# DAt banner cho Router Ri(config)#banner motd & chao mung cac ban den voi CCNA tai NHAT NGHE & Ra(config)#end Ri#logout Sau khi lam xong banner thi ban logout r6i vao lai router sé thay banner m6i khi két ndi ‘yao router Cac 1énh dat thong s6 cho line console : Ri>en Rivconf t Enter configuration commands, one per line. End with CNTL/Z. ra(config)#line console 0 rA(config-line)#loggin sync Z7ding dé ty dong xudng hang rA(config-line)#exec-timeout @.@ //ding dt théi gian timeout ra(config-Line)#end Rit Sau khi lm xong lénh loggin sync thi trén man hinh console khéng con hién tuong bi mat con trd. Lénh exec-timeout X Y 6 hai tham s6 X 1a phit, Y 1 gidy. Ding d€ dat théi gian ty’ khéa router néu khéng g6 phim nao bat ky. VGi thdi gian 0 0 c6 nghia 1a Khong bao gid timeout. (Chi nén ap dyng trén thiét bj phong LAB) DE vao mode interface : Risen Rivcont t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#interface ethernet @ 7/ignh tdt int €@ Ra(config-if )#exit ‘Dat dia chi IP cho interface ethernet 0 Rifcontig)#interface ethernet © Ri(config-if)#ip address 192.168.2.151 255.255.255.0 Ri(config-if)#no shutdown 7/88 up int e9 1én. Ra(config-if)#end Dat description cho interface : Rivcon? t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#int eo Ri(config-if)#description day 1a int noi vao mang lan Ri(config-if)#end Ri#sh int eo ‘Sau khi lam xong lénh description cho int e0, ban ding 1€nh sh int e0 dé kiém tra két qua. IEE TOM4 Rivsh int 68 Ethernet is up, line protocol is up Hardware is Lance, address is 6019. 7be8.5847 (bia 0010. 7be8.5847) Description: day 1a int noi vao mang lan Internet address is 192.168.2.151/24 NTU 1500 bytes, BW 10000 Kbit, DLY 1090 usec, reliability’ 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (19 Sec) ARP type: ARPA, ARP Timeout 0. Last input 90:00:61, output a 0 190:09, output hang never Lénh Sh ip int brief ding d@ kiém tra tt ca cdc ip address cUa cic interface trén router. ‘ish ip int brief Ierface IP-Addkess OK? Method Status Protocol EthernetD 192.1682.151 YES NVRAM wp wp Seriald unassigned YES NVRAM administratively down down, Serialt unassigned YES NVRAM administratively down down__ SLL TT TTT15 PASSWORD: ‘Thong thudng cé 5 loai password dé bdo mat cho m6t router Cisco. 1, Hai loai password dau tién 1a enable password, st dung dé vao ché a6 priviledge ‘mode, password nay sé yéu cu ban nh€p vao khi danh lénh enable ti user mode d& vao privilegde mode. 2, Ba loai cén lai d&t password cho céc ch€ d§ cho user mode khi truy cp qua cng console, cGng Aux, hay Telnet © 108 password c6 phén biét chit hoa hay chif thuding (case sensitive), va khong qué 25 ky tr. Céc ky tur nay 06 thé 1a chit hoa, chir thudng, con 86, cdc dau chéim cdu va khodng edch; tuy nhién ky ty du tién khdng dude 1a khodng céch. Password truy céip vio Priviledge Mode: = Password dang khéng ma héa khi lu tf (clear-text), Password secrect li password ki luu tr sé duigc ma hod dang MDS theo mac dinh, ta c6 thé kiém lai bang lénh show run, - Néu vila t6n tai password enable password va enable secrect thi enable password king ¢6 téc dung, Rivcon? t Ri(config)#enable password 456 Ri(config)#enalbe secrect 789 Ri(config)#end Rivshow run Building configuration current configuration: version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Ri ' enable secret 5 $1$nsvjSeErWsNTNwP. jmIckAVeqE. 1/789 G& duoc ma hoa enable password 456 77456 van giit nguyén ip subnet-zero interface Etherneto =-More-16 Password truy cp vao User Mode: © Dat password cho user mode bang 1énh line, xem xét cdc théng s6 theo sau bang ch dénh du ? sau 1énh line. Ri(config)#line ? <0-22> First Line number aux Auxiliary Line console Primary terminal line tty Terminal controller vty Virtual terminal ‘Aux dat password cho c6ng aux, thfOng ding khi cu hinh cho modem gan router, quay sO vao dé cu hinh router. Console dat password truGc khi vao user mode vty dat password dé telnet vao router. Néu khong d&t password, khdng thé thuc hién telnet vao router. Dé dat password user mode, cn xéc dinh line mu6n cu hinh va ding lénh login dé cho router biét dufa ra théng bao chtmg thu dai hdi nhap password. Cau 1énh login r&t quan trong, néu khéng c6 router sé kh6ng théng béo doi héi ching thy. 1. Bat password aux trén router : vao global config mode dénh lénh line aux 0. Chi ¥ ring chi dugc chon s6 0 vi chi ¢6 mét port aux. Ri(contig)#line aux 0 Ri(config-Line)#login Ri(config-line)#password passaux 2._DAt console password trén router; diing Iénh line console 0 Ri(config)#line console @ Ri (config-line)#login Ri(config-line)#password 123, 3._ Dat password telnet: diing lénh line vty 04 Ri(config)#line vty 0 4 Ri(config)#login Ri(config)#password telnet 4. Kiém tra lai tat ca bang lénh : show running-config, Ri(config) #2 Rigshow run Current configuration: version 12.1 service timestamps debug uptime service timestamps log uptine no service password-encryption hostname RA enable secret 5 S1SnsVjSeErWsNTNWP. jmIckAVBGE. enable password 456 LLL TTT7 ip subnet-zero ! interface Etherneto =-Hore— no ip address shutdown: interface Serialo no ip address shutdown no fair-queue interface Serial1 no ip address shutdown ip classless no ip http server ' line con @ password 123 login transport input none line 1 16 line aux © password passaux =-More—18 CAC LENH DUNG DE LUU TRU CAU HiNH CUA ROUTER: Riawrite Ris#Copy running startup Hai 1@nh trén ding 6 lu cu hinh tir RAM ctia router dén NVRAM ctia router. Nén thudng xuyén ding lénh nay trong qué trinh thao tac cu hinh router 48 trénh su c6 bat ng@ nhu mat dién d6t ngét. RivCopy Startup running ‘Lénh tén ding dé copy cau hinh tl’ NVRAM dén RAM, dimng trong muc dich recovery password sé dé cp trong phan sau. Luu y: cd 3 1énh déu thuc hién tai priviledge mode Dé thir lai céc password da dat dau tién logout ri vao lai router. Dé vo duge priviledge mode, cdc ban phai tri qua 214n kiém tra password. Password USER mode la 123 Password Priviledge mode 1a 789. Press RETURN to get started. user Access Verification Password: //danh vao 123 uu y ban sé khong thdy pass khi go Rien Password: //danh vao 789 uu y ban sé khong thdy pass khi go Rui TOM TAT: Cc 1énh co ban ding dé cu hinh router nhu sau: Router>en Router#conf t Enter configuration commands, one per line. End with CNTL/Z. Router (config)#hostname r™X” RYX"(config)#enable password 456 ReX"(config)#enable secret 789 R®x" (config)#banne motd & chao mung cac ban den voi CCNA tai NHATNGHE & REX" (config)#line console 6 Rx? (config-line)#loggin syn RX" (config-line)s#login RX" (config-line)ipassword 123 REX" (config-line)#exec-timeout 0 @ RPx" (config- Line) #exit REX" (config)#line vty @ 4 RX" (config-line)#login R®x" (config-line)#password telnet REX" (config-line)#exit ROX" (config)wint e 0 REX (config-if)#ip add 192.168.2,150+"x" 255.255.255.0 RMX" (config-if)adescription day ia int noi vao mang ian LLL TTT19 ReX"(config-if)#no shut R”X" (config-if )#end R°X"#sh ver Rext#sh run REX wr Building configuration... [0k] ROX"20 CAC LENH DE XOA CAU HINH ROUTER DE xda cu hinh router va dua router vé trang théi default, ta x6a NVRAM, c&u hinh thdng s6 register thinh 0X2102 r6i reload lai router. Ban thc hién viée nay méi khi cdn reset Iai router a thy hién bai lab méi. LUON THUC HIEN CAC CAU LENH NAY TRUGC MOI BUG! THUC HANH BE RESET ROUTER. RR'Sen R"X"#conf t R°X" (config)#config 0x2102 RYX"(config)#no boot system R®X" (config)#end ReX"aurite erase Erasing the nvram filesystem will remove all configuration files! Continue? [confirm] //bam phim enter [ok] Erase of nvram: complete ROX *Mar 1 00:05:46,743: KSYS-7-NV_BLOCK_INIT: Initialized the geometry of Avram R"X"#reload 77dung khéi dong Lai router Proceed with reload? [confirm] //b8m phim enter Cha _y: néu router cda ban xudt hién cau hoi yéu_ cau save c4u hinh router thi phai tra 16i NO 00:04:56: XSYS-5-RELOAD: Reload requested System Bootstrap, Version 11.0(10c)XBi, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) XSYS-4-CONFIG_NEWER: Configurations from version 12.1 may not be correctly understood Fa: 7873484+123620+586088 at 6x3000060 cisco 2620 (NPC860) processor (revision @xze9) with 45056k/4096K bytes of memory. Processor board ID JAD@S@S@IL1 (1384535827) M869 processor: part number ®, mask 49 Bridging software. X.25 software, Version 3.0.0. 1 FastEthernet/IEEE 802.3 interface(s) 2 Serial(sync/asyne) network interface(s) 32k bytes of non-volatile configuration memory. 16384K bytes of processor board System flash (Read/Write) -++ System Configuration Dialog --- Would you Like to enter the initial configuration dialog? [yes/no]: Would you like to terminate autoinstall? [yes] 7/sén phim enter Press RETURN to get started! Ti OMTa1 BALTAP CAC CAU LENH CAN BAN Trong lab nay yéu cu ban thuc hién true cdc cdu Iénh trong phan XOA CAU HiNH ROUTER trang 19. Han ché tham khdo tai liéu trong khi thu hién cdc 1énh co. A-Thyc hién cau hinh router v6i yéu cau nhu'sau : © B&ttén router cia ban la RouterX (X 1a s6 tht ty router cla ban dang két néi) Password priviledge khong ma héa la 456 Password priviledge ma héa la 789 Password console Ta 123 M&i khi két n6i vao router thi c6 cu théng béo : «CCNA NHAT_NGHE» ‘Thdi gian dé router ty Khéa la 5 phuit 30 gidy Céc cu thong béo ctia router tur déng xudng hing Password dé telnet vao router 1a « Telnet_RouterX » At dia chi cho interface ethenet 0 ctla router 1d 192.168.2.150+X ‘cau ghi nh cho int e0 1a « connect to LAN » Luu cu hinh vio NVRAM Reload va kiém tra lai cdc cu hinh vifa lam xong. Router cla ban phai kiém tra password 2 ln, ludn cé cau théng béo méi khi connect vao router, phai ping dugc céc router kde. B.Thyc hién tiép phéin sau néu cdn théi gian : * d6i password console thinh « 321 » * bd han password priviledge mode © hdng cho router tu logout (tu kh6a) © bO dia chi IP ADD cta Ether 0 d6ng thdi tt Ether 0 Sau kbi thc hién phan B thi router ctia ban chi cén 1 password duy nbait la « 321», khéng c6 dia chi IP ADD va khdng ttf logout.22 BAN THYC HIEN BAI THUC HANH TREN KHONG DUOC THAM KHAO BAT CU TAI LIEU NAO. CHI DUNG CAC LENH GIUP_ DO CUA I0S.CISCO DISCOVERY PROTOCOL: Cisco Discovery Protocol (CDP) la giao thttc riéng ca Cisco ding dé thu nhdp théng tin vé neighbor (lan; giéng). SU dung CDP, ban cé thé bi&t dugc théng tin phan cling, giao thife cla cae thiét bi ean ké, thdng tin nay héfu fch trong xtrly su eC hay kim sodt thiét j trong mang. Trong lab nay yéu cau ban thuc hién trur6c cdc cau Iénh trong phan XOA CAU HINH ROUTER trang 19, sau dé thuc hién tiép phn TOM TAT trangl?. ‘Trinh bay théng tin t6ng quat vé CDP cla Router R1: show cdp Rifshow dp Global COP information: ‘Sending CDP packets every 69 seconds Sending a holdtime value of 189 seconds Sending CDPv2 advertisements is enabled Rit ‘Khoding hi gian dinh ky ma m6t router gli céc packets dang CDP Gié tri hold time router nay gui di la 180 gidy. Vic qudng bé CDP version 2 duge cho phép. ‘Xem thong tin t6ng quat vé cdp cita céc thiét bi lin cn: show cdp neighbors Ri#show cdp neighbors Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge S - Switch, H - Host, I - IGMP, r - Repeater pevice 10 Local intrfee Holdtme capability platform port 20 sw1900002094FA530Eth © 179 19909 Router? Eth © 128 2539 =—«Eth @ Router16 Eth 179 R 2589 «Eth ra Eth @ 155, R 2629 «Fas a/9 Ra Eth @ 139 R 2529 Eth @ ‘Theo vi du nay, thi R1 biét durge hién c6 cdc router va Switch e6 16 : Router 2, Router 16, Router r4, Router R3, va $w1900, gid trj holdtime, loai platform cuia ting thiét bi nay, nhUing thiét bi nay n6i voi R1 bang c6ng gi cUia né (Port ID) va 1n6i vao interface Ethernet 0 cla RI Xem théng tin chi ti&t vé cdp ctia céc thiét bi lan cn: show edp neighbors detail Ri#show cdp neighbors detail Device 1D: swi9e9003094FA5300 Entry address(es): IP address: 192.168.2.252 Platform: cisco 1908, Capabilities: Trans-Bridge Switch Interface: Ethernet@, Port ID (outgoing port): 9 Holdtime : 169 sec Ti OMT23 version : v8.01, advertisement version: 1 Device ID: Router2 Entry address(es): IP address: 192.168.2.152 Platform: cisco 2590, Capabilities: Router Interface: Etherneto, Port ID (outgoing port): Ethernete Holdtime : 176 sec Version : Cisco Internetwork Operating System Software =-More— TOS (tm) 2500 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fe1) Copyright (c) 1986-2000 by cisco Systems, Inc. Compiled Thu 16-Mar-09 16:19 by ccai advertisement version: 2 Duplex: half Device ID: Router16 Entry address(es): IP address: 192.168.2.166 Platform: cisco 2500, Capabilities: Router Interface: Etherneto, Port 1D (outgoing port): Ethernete Holdtime : 158 sec version : Cisco Internetwork Operating System Software IOS (tm) 2580 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fe1) Copyright (c) 1986-2006 by cisco Systems, Inc. Compiled Thu 16-Mar-09 16:19 by ccai advertisement version: 2 Duplex: half =-More. ‘con nia) Bit chi ti€t hon v8 cdc thiét bj lan cn: dja chi IP , version24 L6nh turong dutong véi show cdp neighbors detail la show cdp entry * Rivshow cdp entry * Device 1D: swi9e9003094FA5389 Entry address(es): IP address: 192.168.2.252 Platform: cisco 1900, Capabilities: Trans-Bridge Switch Interface: Ethernet®, Port ID (outgoing port): 9 Holdtime : 169 sec Version : ve.o1 advertisement version: 1 Device ID: Router2 Entry address(es): IP address: 192.168.2.152 Platform: cisco 2508, Capabilities: Router Interface: Ethernets, Port ID (outgoing port): Etherneto Holdtime : 176 sec Version : Cisco Internetwork Operating System Software =-Wore TOS (tm) 2590 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2069 by cisco Systems, Inc. Compiled Thu 16-Mar-08 16:19 by cai. advertisement version: 2 Duplex: half Device ID: Router16 Entry address(es): IP address: 192.168.2.166 Platform: cisco 2500, Capabilitie: Interface: Ethernete, Port ID (outgoing port): Etherneto Holdtime : 158 sec Router Version : Cisco Internetwork Operating System Software TOS (tm) 2590 Software (C25@0-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2060 by cisco Systems, Inc. Compiled Thu 16-Mar-06 16:18 by ccai advertisement version: 2 P half swore (con nia) ap www masterico com,25 Xem thong tin traffic v6 cdp cla Router R1: Rivshow edp traffic COP counters + Total packets output: 177, Input: 818 Hdr syntax: 8, Chksum error: 8, Encaps faile No memory: 6, Invalid packet: 6, Fragmented: 6 COP version i advertisements output: 87, Input: 447 CoP version 2 advertisements output: 96, Input: 371 6 Lénh show cdp traffic hi€n thj luu lung tai interface gdm cd s6 goi CDP gdi hn va bj 16i. ‘Thong tin trang thai CDP trén port hay interface hién thi bang lénh show cdp interface (sh edp int) Ri#show edp interface Etherneto is up, line protocol is up Encapsulation’ ARPA Sending CDP packets every 69 seconds Holdtime is 180 seconds Serial® is administratively down, line protocol is down Encapsulation HDLC Sending CDP packets every 69 seconds Holdtime is 180 seconds Serial1 is administratively down, line protocol is down Encapsulation HDLC Sending CDP packets every 69 seconds Holdtime is 180 seconds ‘Tt CDP hoan toan trén router ding lénh: no edp run Rivcon? t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#no edp run Ri(config)#4Z Rifshow cdp. ©1:36:31: XSYS-5-CONFIG I: Configured from console by console inter Ravshow cdp int Ri#show cdp interface % COP is not enabled26 ‘Tt CDP trén timg interface ding 1énh: no cdp enable Rivshow dp % COP is not enabled Ruvtconf t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#edp run “/bit lai COP trén toan b6 router R1 Ri(config)#Az Risshow edp //kién tra lai, thdy R1 da bat lai cop Global COP information: ‘Sending CDP packets every 69 seconds Sending a holdtime value of 180 seconds Sending CoPv2 advertisements is enabled Ritshow cdp interface Ethernet is up, line protocol is up _// cic interface di chay CDP Encapsulation ARPA i Mutu J, hién tai E0 dang chay CDP Sending CDP packets every 60 seconds Holdtime is 186 seconds Serialo is administratively down, line protocol is down Encapsulation HDLC Sending CDP packets every 69 seconds Holdtime is 186 seconds Serial is administratively down, line protocol is down Encapsulation HDLC Sending CDP packets every 60 seconds Holdtime is 188 seconds Raviconf Enter configuration commands, one per line. End with CNTL/Z. Ra(config)#interface e0 Ri(config-if)#no cdp enable Ra(contig-if)#Z rae 01:37:56: XSYS-5-CONFIG_T: Configured from console by console Rae Ri#show cdp //Kiém lai, thdy CDP van chay trén RO Global CDP infornation: ‘sending CDP packets every 69 seconds Sending a holdtine value of 180 seconds Sending CDPv2 advertisements is enabled Ravishow cdp interface _ //mhumg interface e0 da bi tat cdp Serialé is administratively down, line protocol is down Encapsulation HDLC Sending CDP packets every 60 seconds Holdtime is 189 seconds Serial1 is administratively down, line protocol is down Encapsulation HDLC Sending COP packets every 60 seconds Holdtime is 180 seconds Nhu véy ta da tat cdp trén interface ethernet 0. Ti OMT27 ‘TELNET: Telnet 1a m6t giao thtte du cu6i do (virtual terminal) 1a mOt phn cia bO giao thie ‘TCP/IP. Telnet cho phép tao két ni véi thiét bi tix xa, thu nhdp thong tin va chay chuong trinh, Lab nay huéng dn ding 1énh telnet va céc 1énh lién quan trén router. ‘Trong lab nay yéu c&u ban thy hién true cdc cau I&nh trong phan XOA AU HINH ROUTER trang 19, sau dé thu hién tiép phan TOM TAT trang17. Dat password cho cic dudng VTY Ri(config)#Line vty 04 Ri(config-line)#login Ri(config-line)#password telnetpass Ri(config-line)#exit ‘At password cho Global mode Ri(config)#enable sec Ri(config)#enable secret 789 Cau hinh dia chi IP cho interface ethernet 0 Ri(config)#interface e@ Ri(config-if)#ip address 192.168.2.151 255.255.255.0 Ri(config-if)¥no shut Ri(config-it)4az Rut Riviping 192.168.2.153 Type escape sequence to abort. Sending 5, 196-byte ICMP Echos to 192.168.2.153, timeout is 2 seconds: Success rate is 169 percent (5/5), round-trip min/avg/max = 4/4/8 ms Router R3 da duc cu hinh dla chi IP cho e0 la: 192.168.2153 /24, bay gid, dUng tai Router R3, ta telnet vao router R1: Rautelnet 192. 168.2.151 Trying 192.168.2.151 user Access Ver ificat: Open Password: telnetpass Ri>en Password: 789 Rie Luu ¥: R3 sé khéng thé nao telnet vio duge R2, néu R2 cha duge cu hinh password vty va R3 sé nhan théng bao 16i nhu sau: R3#telnet 192,168.2.15228 Trying 192,168.2.152 ... Open Password required, but none set [Connection to 192.168.2.152 closed by foreign host] Bi #1 Virtual terminal (VY) lines cho phép viéc truy cp vao router thdng qua céc phign n6i két Telnet. VTY lines khdng n6i try tiép vao cdc interfaces nhut céch TTY néi vao asynchronous interface ma la céc két n6i ‘do’ vao router théng qua dia chi cia ethernet port (interface ethernet). Router tao nhting VTY lines mét cach lin d6ng, trong khi d6 TTY lines a chi n6i két vo nhting cng vat ly. Khi ng ding két ndi vao router bang VTY line, ngudi d6 dang két ndi vao mot Ong do trén interface Khi tir m6t router nay ma telnet vao m6t router khéc va mu6n thoat tr6 lai router tia minh, thi c6 2 dang: a, Thodt han. b. Tam thoat. a. Router R3 telnet vao Router R11 va thoat hn (chm dit hoan toan session): Rovtelnet 192.168.2.151 Trying 192.168.2.151 ... Open User Access Verification Password: Riven Password: Rivexit [connection to 192.168.2.151 closed by foreign host] b. Router R3 telnet vio Router R1 va tam thodt vé Router cia minh (wé lai R3, nhung van gia session v6i R1): Rg#telnet 192.168.2.151 Trying 192.168.2.151 ... Open user Access Verification Password: Password Password: Ri>en Password: Rut tai day nhén t6 hop phim ctrl+shift+6 cing luc, buong phim ra, r6i nhSn x Sit Sau khi tam thoat, ta c6 thé ding lénh sau 48 xem Router ca minh (R3) dang con gilt session v6i Router nao hay khéng, bang lénh sau: R3vishow sessions LLL TTT29 ‘Conn Host ‘Address Byte Idle Conn Name * 1192,168.2.151 192.168.2.151 0 2.192.168.2151 Bay gid, néu R3 mu6n quay tré lai session ma trUGc dé dang telnet vao R1, thi chi cén bam “1” r6i Enter + Enter (bm 1 r6i enter 2 In): “1” chinh 1a s6 thf ty’ cla session. RaAE (Enter) [Resuming connection 1 to 192.168.2.151 ... ] (Enter) Rui én nu tai R3, sau khi tam thoat session khdi R1, ma bay gi mun cham dt session Judn (khéng mu6n quay tr6 lai nda) = R3show ses R3H#show sessions Conn Host Address Byte Idle Conn Name “4 192.168.2.15 192.168.2.151. © 0 192.168.2.151 Rawdiisconnect 1 Closing connection to 192.168.2.151 [confirm] R3i/show session % No connections open R3it ‘Trong lic R3 dang telnet va R1, R1 muGn biét cé ai dang telnet vao minh. Rivshow users Line User Host (s) Idle Location * a cone idle 09:00:00 48 vty @ idle 09:09:16 192.168.2.153 Interface user Mode Idle Peer Address Rui Bay gid, néu R1 mun hiy lun session ma R3 dang telnet vao minh: Rivelear line 18 [confirm] [0k] Rishow user Line User Host(s) Idle Location + 8 con® idle 09:00:00 Interface user Node Idle Peer Address Ngay liic nay, bén man hinh Hyperterminal clia R3 sé xudt hién théng bao sau: | [Connection to 192.468.2.151 closed by foreign host} Rae30 TOM TA 1. Dé ngudi khac c6 thé telnet vao Router cia minh, Router cla minh phai dat password cho céc dung VIY: Line vty 0 4 Login Password telnetpass 2. Khitelnet vao Router khac, muGn thoat han (chm dit session) trd lai Router minh: Exit Logout Q 3. Khi telnet vao ngudi ta, mu6n tam thoat vé thi bém t6 hop phim: +X 4, MuGn biét Router minh cén dang gif session v6i router nao: ‘Show sessions 5. Mu6n hly session dang t6n tai cUa minh v6i Router khdc: Disconnect [56 tht ty’ session] 6. Mu6n biét ai dang telnet vao minh: ‘Show users 7. Mun hity session clia ngudi khéc dang telnet vao minh: Clear line (s6 thtr tu line) SLL TT TTT31 K PAS IRD: Trong lab nay yéu c&u ban thuc hign true cdc cdu Iénh trong phan XOA cAu Hin ROUTER trang 19, sau d6 thute hién tip phn TOM TAT trang!?7. 1. Tat— Bat router, nhdn t6 hop phim trong 30 gidy ddu ‘Dé khdi d6ng router vio rom monitor mode 2. Khi di vio dugc monitor mode, ta cu hinh énh gid tr! cho config-register 1a 02142 a bit thet 6 cé gid tla 1 thi router trong lan khoi dng ké sé khong load cu hinh trong nvram vao ram, do dé ta s® khéng bi hdi password 3. Kh6i d6ng lai router (trong ché d6 2142, khong load nvram), copy tan b6 cu hinh trong nvram vao ram. 4, Vio global config mode a8 no céc I9ai password, ho’c 46: Iai password theo ¥ minh, Sau d6 write lai cu hinh vao nvram. 5, vio céc interface di dude cu hinh dé go thém lénh NO SHUT. 6. Ding I6nh config-register dé d6i lai gi thuding tré lai trong ldn khot dng ké ip. 7. Sao luu lai cdu hinh vio NVRAM bang lénh WRITE va reload lai router. 12 0x2102 dé router sé khdi dOng binh 2500 processor with 16384 Kbytes of main menory Abort at @x19cFB9E (PC) >o/r 0x2142 >i system Bootstrap, Version 11.0(10c)xB1, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) Copyright (c) 1986-1997 by cisco Systems F3: 7873484+123020+586088 at 0x3000060, Restricted Rights Legend Use, duplication, or disclosure by the Government is subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (44) of the Rights in Technical Data and Computer Software clause at DFARS sec. 252.227-7613. cisco Systems, Inc. 170 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software32 IOS (tm) 2590 Software (C25@9-I-L), Version 12.1(12), RELEASE SOFTWARE (fe1) Copyright (c) 1986-2061 by cisco Systems, Inc. Compiled mon 26-Nov-01 21:28 by kellythw’ Image text-base: ©x63641C88, data-base: 0x9¢001000 cisco 2500 (68039) processor (revision &) with 16284K/20a8k bytes of memory. Processor board ID 91062694, with hardware revision @0090080 Bridging software. X.25 software, Version 3.0.0. 1 Token Ring/TEEE 802.5 interface(s) 2 Serial network interface(s) 32k bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read ONLY) System Configuration Dialog - Would you like to enter the initial configuration dialog? [yes/no]: n Press RETURN to get started! 06:02:15: XSYS-5-RESTART: System restarted -- Cisco Internetwork Operating System Software TOS (tm) 2590 Software (C2590-I-L), Version 12.1(12), RELEASE Router> Router> Router> Router> SOFTWARE (fc1) Copyright (c) 1986-2081 by cisco Systems, Inc. Compiled Mon 26-Nov-01 21:28 by kellythw Router> Router> Router>en Router#show run Building configuration... Current configuration : 376 bytes version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname Router //do boot véi 2142 nén khong c6 edu hinh 1 1 ip subnet-zero interface Seriale no ip address33 shutdown =-More— interface Serialt no ip address shutdown interface TokenRing® no ip address shutdown ip classless no ip http server line con @ line aux 6 line vty @ 4 End Router#copy startup-config running-config Destination filename [running-contig]? //bam phim enter 71 bytes copied in 4,16 secs (175 bytes/sec) Router# Ravshow run Building configuration. Current configuration : 721 bytes ' version 12.1 service timestamps debug uptime service timestamps log uptime no service password-encryption hostname R1 //08 66 lai cu hinh enable secret 5 $1SnsVjSeErWsNTNwP. jmJckAVeqe enable password 456 ip subnet-zero interface Ethernet 0 ip address 192.168.2.151 255.255.255.0 shutdown =-wore-- Rut Rivconf t Enter configuration commands, one per line. end with CNTL/Z. Ri(config)#no enable password Ri(config)#no enable secret Ri(contig)#line console 0 Ri(config-line)#no password Ri(config-line)wexit Ri(config)#int e @ Ri(config-if)#no shut Ri(config-if)#end Rutwr Building configuration... Ridshow ver Cisco Internetwork Operating System Software TOS (tm) 2560 Software (C2500-I-L), Version 12.1(12), RELEASE SOFTWARE34 (fe1) Copyright (c) 1986-2061 by cisco systems, Inc. Compiled Mon 26-Nov-01 21:28 by kellythw Image text-base: 0x63641C88, data-base: 0x90001000 ROM: System Bootstrap, Version 11.0(10c)xB1, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) BOOTLOR: 3600 Bootstrap Software (IGS-BOOT-R), Version 11.8(1@c)XB1, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) RG uptime is 4 minutes system returned to ROM by power-on System image file is "flash:/ré_flash" cisco 2500 (68039) processor (revision &) with 16284K/20a8k bytes of memory. Processor board ID 01062894, with hardware revision 60090000 Bridging software. X.25 software, Version 3.0.0. 1 Token Ring/IEEE 802.5 interface(s) 2 Serial network interface(s) 32k bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read ONLY) --More-- configuration register is ox21a2 Ruttconf t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#config-register 0x2102 Ri (config) exit Rivtshow ver cisco 2500 (68039) processor (revision &) with 16284K/20a8k bytes of memory. Processor board ID 01062894, with hardware revision 60090000 Bridging software. X.25 software, Version 3.0.0. 41 Token Ring/TEEE 802.5 interface(s) 2 Serial network interface(s) 32k bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read ONLY) --More-- Configuration register is ex2142 (will be 0x2102 at next reload) R6ireload system configuration has been modified. Save? [yes/no]: y Proceed with reload? [confirm] TOM TAT: 1, Bat, tat, Ctrl+break 2, >o/r ox2i42 >i 3. Router#copy start run 4, Router#conf t Router (config)#no enable pass Router (config)#no enable sec Router(contig)#line cons © Router (config-line)#no login Router (config-ine)#no pass Router (config-line)#exit 5 Router (config)#int e © Ti OMT35 Router (config-if)#no shut Router (config-if)#exit 6. Router(config)#conf 6x2162 Router (config)#end 7. Router#WRITE Router#reload * DGi vGi router 2600 vir 3600 thi d6i lai lénh: >0/r @x2142 thanh rommon 1>confreg 0x2142 >a thanh rommon 2>reset36 BACKUP VA RESTORE CAU HINH ROUTE! Trong lab nay yéu cau ban thy hién trudc cdc céu lénh trong phan XOA CAu HinH ROUTER trang 19, sau dé thutc hién tiép phn TOM TAT trangi?, BACKUP CAU HINH ROUTER: Dé backup dude cdu hinh router ta sé sao luu cdu hinh cUa router trong RAM dén bat ky m6t may tinh nao chay software TFTP. Dau tién, tao m6t folder C:\backup_config trén méy tinh cla ban, Khoi dGng chong trinh TFTP trén may ca ban lén, vio muc propertie cia TETP dé chon root directory la C:\backup_config, dng thoi xem va ghi han s6 ip add ctia TFTP server (192.168.2.X) Ti€p theo, vio hyper terminal ca router dé ping kiém tra két n6i dén TETP. ping 192.168.2.. ‘Type escape sequence to abort. Sending 5, 108-byte ICNP Echos to 192.168.2.”%", timeout is 2 seconds: ttt Success rate is 100 percent (5/5), round-trip min/avg/max = 28/31/32 ms foe Sau khi ping duge TFTP, tin hanh viéc backup cu hinh: r"X"#copy run tftp Address or name of remote host []? 192.168.2."%" Destination filename [router-confg]?R"X" backup_config //dat tén file 419 bytes copied in 9.308 secs (46 bytes/sec) Sau khi backup xong ta c6 thé xem trén C:\backup_config sé c6 1 file tén li R1_backup_config. Ta cé thé xem file nay bang wordpad. Backup thanh cng. RESTORE CAU HINH ROUTER: DE restore cu hinh trén router, truGc hét ta gid st router da m&t c&u hinh (khdng c6 cu hinh) ta ding lénh WRITE ERASE 4@ x6a NVRAM r6i ding lénh RELOAD dé khdi dng lai router (thy’e hién cdc cau 1énh trong phan XOA cAU HINH ROUTER trang 19) Furite erase Erasing the nvram filesystem will remove all configuration files! Continue? [confirm] //bam phim enter [0k] Erase of nvram: complete Rea °Mar 1 @0:05:46.743: XSYS-7-NV_BLOCK INIT: Initialized the geometry of nvram REX"#reload //dang khéi déng lai router Proceed with reload? [confirm] ‘7//oam phin enter router cila ban xudt hién cau ju_save cau hinh_ outer thi phai tra 1éi NO 00:04:56: XSYS-5-RELOAD: Reload requested system Bootstrap, Version 11.0(10c)XBi, PLATFORM SPECIFIC RELEASE SOFTWARE (fc1) ap www masterico com, Mm Mm Ma7 NSYS-4-CONFIG_NEWER: Configurations from version 12.1 may not be correctly understood. 7873d84+123026+586988 at 0x3000060 6868) processor (revision 6x200) with 45056K/4096K bytes of memory. Processor board ID JAD@SO3@IL1 (1984535827) ¥a68 processor: part number 6, mask 49 Bridging software. x.25 software, Version 3.0.0. 1 FastEthernet/IEEE 802.3 interface(s) 2 Serial(sync/async) network interface(s) 22k bytes of non-volatile configuration memory. 16384K bytes of processor board System flash (Read/Write) -++ System Configuration Dialog --- Would you like to enter the initial configuration dialog? [yes/no]: n Would you like to terminate autoinstall? [yes] 71am, phim enter Press RETURN to get started! Sau dé ta phai dt ti thigu la dia chi IP ctia router sao cho né cé kha nang ping duige TFTP server. Router>en Routericonf t Router (config)#int e 0 Router(config-if)#ip add 192.168.2."X" 255.255.2559 Router(config-if)#no sh Router (config- if vend Router# Routerdping 192.168.2."x" Type escape sequence to abort. Sending 5, 100-byte ICHP Echos to 192.168.2."X" timeout is 2 seconds: Success rate is 160 percent (5/5), round-trip min/avg/max = 28/91/32 ms Routers LUu ¥: “X” LAS6 THU TU CUA ROUTER BAN DANG KET NOT Tiép theo thyzc hin 1énh copy tftp run dé restore Routerscopy tftp run Address or name of remote host []? 192.168.2."x" Source filename []? R"X"_backup_config 7/t@n File lic backup Destination filename [running-config]? //bsm phim enter Accessing tftp://192.168.2.14/pc14_config. . Loading pci4 config from 192.168.2.1 (via Ethernet@): [ok - 442/4696 bytes] 442 bytes copied in 2.748 secs (221 bytes/sec) ROX /frestore thanh cong Laic nay router R1 da lay lai duge c&u hinh, dé sao luu c&u hinh vio NVRAM ding lénh WRITE. IEE TOM38 REX" #write Builaing configuration... [0k] 2 , ROX J/xET THOC BAT LAB BACKUP VA RESTORE CAU HINH ROUTER ap www masterico com,39 BACKUP VA RESTORE IOS: Trong lab nay yéu cu ban thie hin tru6c cdc cau Iénh trong phn XOA CAU HiNH ROUTER trang 19, sau dé thute hién tiép phan TOM TAT trang17. Backup 10S R'X"#sh Flash 77aung a8 kin tra ten File cla 10S system flash directory: File Length Name/status 4 7824848 rx_flash “//ghi nhan ten File dé cung cap trong qua [7824912 bytes used, 563696 available, 8388608 total] 8192k bytes of processor board System flash (Read ONLY) R'X"#copy flash tftp Source filename ? rXflash _//nhgp tén file di ghi nhan & tren Address or name of remote host []? 192.168.2."x" //nhap dia chi TFTP. Destination filename [rx_flash]?Rx Backup flash //nhap tén file backup ‘7e24848 bytes copied in 101.684 secs (77473 bytes/sec) RXTE ‘Sau khi backup xong, kiém tra trong root directory cla TFTP sé cé 1 file tén 1a ‘Rx Backup_flash, Backup thanh cong. RESTORE 10S [R°x"#copy tftp Flash Flash load helper v1.0 This process will accept the copy options and then terminate the current system image to use the ROM based image for the copy. Routing functionality will not be available during that time If you are logged in via telnet, this connection will terminate. users with console access can see the results of the copy operation. ee ee Proceed? [confirm] //oim enter a xée nhan Address or name of remote host []? 192.168.2."x" //nhap dla chi TFTP Source filename []? Rx_Backup_flash 7/#ile backup trén TFTP Destination filename [ri_flash]? rX_flashnew //tén 10S n6i Accessing tftp://192.168.2.”X"/Rx_Backup_flash. Erase flash: before copying? [confirn] //oSm enter xéc nhan NSYS-4-CONFIG NEWER: Configurations from version 12.1 may not be correctly understood SFLH: r1_flash from 192.168.2."X" to flash ... system flash directory: File Length Name/status 4 7824848 R1_New_flash [7824912 bytes used, 563696 available, 9388608 total] Accessing file 'r1_flash' on 192,168.2.1... Loading r1_flash from 192.168.2.1 (via Ethernet): ! [OK] Erasing device... eececeeeceeseeeeceeccececeeceece ...crased Loading ra flash from 192.168.2.1 (via Etherneto): f/tititittstifteettieteteeeette ee tieeee1f000 FP PEEP PEEOUTEEEEEEEEEE EEE TELEEEEELLLLL [ok - 7824848/a388608 bytes] tp www masteric com mm40 Verifying checksum... ok (9x8030) Flash copy took @:03:51 [hh:mm:ss] ‘MFLH: Re-booting system after download F3: 7712008+112808+595109 at 6x3000060 Restricted Rights Legend Use, duplication, or disclosure by the Government is Subject to restrictions as set forth in subparagraph (c) of the Commercial Computer Software - Restricted Rights clause at FAR sec. 52.227-19 and subparagraph (c) (1) (ii) of the Rights in Technical pata and Computer Software clause at DFARS sec. 252.227-7013 cisco systems, Inc. 179 West Tasman Drive San Jose, California 95134-1706 Cisco Internetwork Operating System Software IOS (tm) 2590 Software (C25@0-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2000 by cisco Systems, Inc. Compiled Thu 16-Mar-06 16:19 by ccai Image text-base: @xeae3F64C, data-base: 0x00001000 cisco 2511 (68039) processor (revision M) with 2048K/2648K bytes of memory. Processor board ID 20475723, with hardware revision 90090000 Bridging software. X.25 software, Version 3.0.0. 1 Ethernet/TEEE 802.3 interface(s) 2 Serial network interface(s) 46 terminal line(s) 32k bytes of non-volatile configuration memory. 8192K bytes of processor board System flash (Read ONLY) Press RETURN to get started! RYX">en R"X"#sh ver /eiém tra két qua Cisco Internetwork Operating System Software IOS (tm) 2590 Software (C2500-I-L), Version 12.1(1)T, RELEASE SOFTWARE (fc1) Copyright (c) 1986-2060 by cisco Systems, Inc. Compiled Thu 16-Mar-0@ 16:19 by ccai Image text-base: 0x@303F64C, data-base: ox0e001000 ROM: System Bootstrap, Version 11.0(10c), SOFTWARE BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 11.0(16c), RELEASE SOFTWARE (fi ra uptime is 0 minutes systen returned to ROM by reload System image file is "flash:Rx_flash_new" 11t@n 108 m6i cisco 2511 (68039) processor (revision M) with 2048K/2648K bytes of memory. Processor board ID 20475723, with hardware revision 90090000 Bridging software. X.25 software, Version 3.0.0. 1 Ethernet/IEEE 802.3 interface(s) 2 Serial network interface(s) 46 terminal line(s) 32k bytes of non-volatile configuration memory. LLL TTT41 8192k bytes of processor board System flash (Read ONLY) Configuration register is 6x2102STATIC ROUT! 80:172.16.0.1/16 DCE $1: 172.17.0.116 DCE 80:172.16.0.216 81:172.17.02116 Loop 4: 192.168.1.2/24 Loop 1: 192168.3.2/24 Loop 2: 192.168.2.2/24 Loop 2: 192.168.4.2/24 So d6 nGi day va dia chi IP Trong lab nay yéu cu ban thie hién truéc cdc cau lénh trong phan XOA CAU HINH ROUTER trang 19, sau a6 thu hién tiép phan TOM TAT trang17. Luu ¥ khi dat s6 IP_ ADD theo so’ d6, Han ché tham khdo tai liéu trong khi thy hién cdc lénh cil. Luu ¥ viée cau hinh s6 IP cla céc interface serial thifc hién gidng nhu viée cu hinh 86 IP cUia cdc interface Ethernet. Tuy nhién vi cc int serial ding trong viéc két ndi WAN. do d6 dé két ni céc int serial trong phong LAB ta diing cross cable. Vi vay mét trong hai dau cia dudng két ni sé déng vai tro gid lap thi€t bj DCE. d& xem va biét dugc dau ndo 1a DCE, hay ding 1énh: RA#sh controllers § @ HD unit @, idb = @x1027AC, driver structure at Ox108AF@ buffer size 1524 HD unit'@, V.35 DCE cable cpb = 0x21, eda = 0x4940, cda = 0x4800 RX ring with 16 entries at ox214800 90 4800 pak=Ox10C36C ds=Ox21ECCs statu en statu: e2 statu: 23, xda3C_pak=Ox19BC58 ds=0x21D804 status=89 pak_size=0 DOi v6i dau cable DCE céc ban phai ding thém lénh CLOCK RATE 64000 dé dat toc 38 clock cia dung két n6i. Lut § 1a 1€nh nay khéng thyc hién trong mdi truding thyc té. Cc int loopback ctia router R_B va R_C ding 4 gid lp cae network v6i muc dich the hin bai lab static route, Cu hinh 1P address cUla router R_A nhu sau: RAR RAfconf t R-A(config)#interface so R-A(config-if)#ip add 172.16.0.1 255.255.0.0 RA(config-if}#clock rate 64000 Hay 1a dau vce LLL TTT43 RA(config-if)#no shut RA(config-if)#exit R-A(config)interface si RA(config-if)#ip add 172.17.0.1 255.255.0.0 RA(config-if)#clock rate 64600 R_A(config-if)#no shut Cu hinh IP address cia router R_B nut sau: R BF R.BHconf t RB(config)#interface so R_B(config-if)#ip add 172.16.0.2 255.255.0.0 R-B(config-if)#no shut R_B(config-if)#exit R_B(config)#interface loop 1 //A@nh tao int Loopback RB(config-if)#ip add 192.168.1.2 255.255.255.9 R B(config-if)#exit RB(config)#interface Loop 2 RB(config-if)#ip add 192.168.2.2 255.255.255.9 R_B(config-if)#end Cau hinh ip address ctia router R_C turong tur router R_B. Véi cu hinh nhurtrén, céc router router R_B va R_C khOng thé lién lac duge véi nhaw vi Routing table ctia chiing khdng chtfa dy dui tat cd cdc network address, hién ching chi chifa cc NET_ID cia céc interface két n6i v6i ching ma théi. Tung tyr nhur vay, R_A kh6ng thé ping duc cdc int loopback cla R_B va R_C. Routing table cua R_A truGc khi cu hinh static route: RAR R Ash ip route Codes: C - connected, $ - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area N1 - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 ” OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - 18-18 inter area * . candidate default, U - per-user static route, o - ODR P = periodic downloaded static route Gateway of last resort is not set © 172.47.0.0/16 is directly connected, Serialt © 472.46.9,0/16 is directly connected, Seriale RAsping 192.168.1.2 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: Success rate is @ percent (0/5) Cc 1énh thy hién c&u hinh static route trén router RA: RASen RAiconf t Enter configuration commands, one per line. End with cNTL/Z. RA(config)#ip route 192.168.1.0 255.255.255.0 172.16.0.2 R-A(config)#ip route 192.168.2.0 255.255.255.0 172.16.0.2 RA(config)#ip route 192.168.3.0 255.255.255.0 172.17.0.244 RA(config)#ip route 192.168.4.0 255.255.255.0 172.17. R_A(config)#end RAE RA#sh ip route Codes: C - connected, $ - static, I ~ IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX’ EIGRP external, 0 - OSPF, IA’- OSPF inter area NL - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 ~ OSPF external type 2, E - EGP i - IS-IS, Li - 18-IS level-1, L2 - IS-IS level-2, ia - 1S-IS inter area * - candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set © 172,17.0.0/16 is directly connected, Seriali © 172116.0.0/16 is directly connected, Serialo S 192.168.1.0/24 [1/0] via 172.16.0.2 S 192.168.2.0/24 [1/0] via 172.16.0.2 S 192.168.3.0/24 [1/0] via 172.17.0.2 S 192.168.4.0/24 [1/0] via 172.17.0.2 RAR RAdping 192.168.1.2 ‘Type escape sequence to abort. Sending 5, 108-byte ICNP Echos to 192.168.1.2, timeout is 2 seconds: tt Success rate is 100 percent (5/5), round-trip min/avg/max = 28/31/32 ms RAE ‘Vay R_A di cé thé ping dude loop cla RB va R_C. Cho 4€n tai thdi diém nay R_B van khéng thé lién lac duge véi R_C, thue hién static route trén R_B nhu sau: RB>en RBiconf t Enter configuration commands, one per line. End with CNTL/Z. R_B(config)#ip route 172.17.9.0 255.255.0.0 172.16.0.1 R_B(config)#ip route 192.168.3.0 255.255.255.0 172.16.0.1 R_B(config)#ip route 192.168.4.0 255.255.255.0 172.16.0.1 R_B(config)#end R BF R Bish ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX'- EIGRP external, 0 ~ OSPF, IA’- OSPF inter area Na - OSPF NSSA external type 2, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 — OSPF external type 2, E - EGP i - IS-IS, Li ~ 18-I$ level-1, L2 - IS-IS level-2, ia - 1S-IS inter area * = candidate default, U - per-user static route, 0 - opr P - periodic downloaded static route Gateway of last resort is not set 472.46.0.0/16 is directly connected, Serialo 492.168.1.@/24 is directly connected, Loopback 1. 192.468.2.0/24 is directly connected, Loopback 2 172.17.0.0/16 [1/0] via 172.16.0.1 192.168.3.0/24 [1/0] via 172.16.0.1 192-168.4.0/24 [1/0] via 172.16.0.1 @aaace LLL TTT45 Ret RBping 192.168.4.2 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 192.168.4.2, timeout is 2 seconds: Success rate is 169 percent (5/5), round-trip min/avg/max = 28/31/32 ms RBe ‘Twong ty cho router R_C. Luu ¥: R_B chi ping durgc R_C sau khi thu hi€n cau hinh static route trén ca 3 router R_A, R_B va RC.46 (CAC LENH VE HOSTNAME va SH INTEREAC ‘Thong thung khi nh’p m6t chudi ky ty khong ging v6i céc céu Iénh ca IOS, router sé ty d6ng d6i chudi ky tu dé thanh s6 IP ADD. Do router KhOng biét dia chi cla name server cU thé nén né sé gui broadcast d€ ai tén. RAfabe Translating “abe"...domain server (255.255.255.255) Translating “abc"...domain server (255.255.255.255) (255.255.255.255)% Unknown command or computer name, or unable to find computer address Ta cé 1€nh ip name-server 46 dat dja chi name server cho router RAfconf t ra(config)#ip name-server 192.168.2.200 R_Afiwiia yahoo . com Translating "www.yahoo.com"...domain server (192.168.2.200) Translating “www.yahoo.com"...domain server (192.168.2.200) (292.168.2.200) Translating "www.yahoo.com" ...domain server (192.168.2.208) [0K] Trying www.yahoo.akadns.net (66.94.230.41)... Destination unreachable; gateway or host down Dé tat ché a6 tu dng chuyén tl tén sang s6 IP ta cé Jénh: RAfconf t R_A(config)#no_ip domain-lookup RAAping FL Translating "ra" % Unrecognized host or address, or protocol not running. RAfabe Translating "abe" Translating "abe" % Unknown conmand or computer name, or unable to find computer address Dé map static tén sang s6 IP ta c6 lénh: RLA#cont t RA(config)#ip host ri 192.168.2.2 RAdping ri Type escape sequence to abort. Sending 5, 100-byte ICNP Echos to 192.168.2.2, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms L6nh kiém tra cdc tén va s6 IP ctia router: RAash host Default domain is not set Name/address lookup uses static mappings Host Flags ‘Age Type Address(es) ra (perm, OK) @ IP 192.168.2.2 wer yahoo.com (temp, EX) @ IP 66.94.230.41 66.94.230.43 66.94.230.47 66.94.230.37 66.94.230.33 66.94.230,38 LLL TTT47 65.94.230.50 66.94.230.48 wiew yahoo. akadns.net ww. yahoo.com (temp, UN) 9 X.124 abe (temp, UN) abe (temp, UN) @ x.124 L@nh kiém tra trang thai cla INTERFACE: Khi thong bio c6 dang sau, ta c6 trudng hgp SO chuta c&u hinh, chua cé 1énh NO SHUT (Serialo is administratively down) RAfsh int 5 0 Serialo is administratively down, line protocol is down Hardware is HD64570 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (19 Sec) Khi cu hinh SO va dnh I6nh NO SHUT, ta c6 thé g&p mt trong ba trudng hgp sau: ‘* Serial1 is down, line protocol is down, c6 thé do cable khéng t6t, router n6i tryc tiép chufa cu hinh IP ADD va NO SHUT, thudng la do 16i tai l6p physical RAvsh int s 0 Seriale is down, line protocol is down Hardware is HD64570 Internet address is 172.16.0.1/16 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation HDLC, loopback not set Keepalive set (19 Sec) + Serialt is up, tine protocol is down, day 1a 16i tai 16p datalink, thung do hai du kétn6i ding hai kiéu encapsulation khéc nhau RAsh int s 6 Serialé is up, line protocol is down Hardware is’ HD64570 Internet address is 172.16.0.1/16 MTU 1500 bytes, BW 1544 Kbit, DLY 20060 usec, reliability’ 255/255, txload 1/255, rxload 1/255, Encapsulation HDLC, loopback not set * Seriall is up, line protocol is up, tung hgp nay 1A wudng hgp binh thudng, Khdng gp vain dé tai 16p 1 va 2, céc interface hoat déng t6t RAWsh int s 6 Seriale is up, line protocol is up Hardware is HD64570 Internet address is 172.16.0.1/16 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, reliability 255/255, txload 1/255, rxload 1/255, Encapsulation HDLC, loopback not set48 BALTAP STATIC ROUTE Thc hign c&u hinh static route trén céc router sau v6i cdc s6 IP a duge cho trong so a6. Loop 1: 10.256 7.1122 Loop 2: 10.255 2021/22 Loop 3: 10.255.130.1/22 80 :10.10..0.0/13 DCE $1: 10.21.0013 DCE $1:10.23.0.0/13, Loop 4: 10.255.18.2/20 Loop 1: 10.255.50.2/20 Loop 2: 10.255.172.2/21 Loop 2: 10.255.70.2/21 Loop 3: 10.255.34.2/21 Loop 3: 10.255.247.2/21 So d6 n6i day va dia chi IP Trong lab nay yéu cu ban thu hién true céc cau Iénh trong phan XOA CAU HINH ROUTER trang 19, sau dé thuc hién tiép phn TOM TAT trangi7. Luu khi.déts6 IP ADD theo so’d6. Han ché tham khdo tai liu trong khi thute hién cdc lénh ci. Yéucdu: + Cicrouting table trén m6i router phi c6 dU 11 subnet + TAtcd cac router du c6 thé ping dude ca dia chi ctla céc int loopback trén cic router con lai.49 DEFAULT ROUTE: Trong trung hgp bai tp trén ta nh&n thy céc router R_B va R_C chi ding duy nh&t mt dia chi next-hop dé routing, do 46 dé don gidn routing table ta cé thé ding default route. Dé cu hinh default route hi€u qua, chi nén cu hinh default route tai cc router c6 mt gateway ra ngoai, Cau lénh nbu sa Ren RLBHconf t Enter configuration commands, one per line. end with CNTL/Z. R_B(config)#no ip routing 7/t8t routing RB(config)#ip rouitng 7/bat_routing R_B(config)#ip route 0.0.0.0 0.6.0.0 10.10.0.0 R_B(config)#end RBE Turong tr cho router R_C. R.B#sh ip route Codes: C - connected, $ - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX’- EIGRP external, O - OSPF, IA’ - OSPF inter area N1 - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - 18-18 inter area * . candidate default, U - per-user static route, o - ODOR P - periodic downloaded static route Gateway of last resort is 10.10.0.9 to network 0.0.0.0 € 16.8.0.0/13 is directly connected, Serialo € — 10.255.16.0/28 is directly connected, Loopback 4 € 10.2551168.0/21 is directly connected, Loopback 2 € 10.255.32.0/21 is directly connected, Loopback 3 so. [1/0] via 10.10.0.0 R BF R Bping 10.255.50.2 Type escape sequence to abort. Sending 5, 196-byte ICMP Echos to 19.255.50.2, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 28/31/32 ms RBH50 DYNAMIC ROUTING PROTOCOL RII Loop 1:10.0.0.1/8 '$0:192.168.30.1/24 DCE '$0:192.168.10.1/24 DCE $0:192.168.10.2/24 |:192,168.30.2/24 'S1-192.168.20.1/24 DCE Loop 1:20.0.0.2/8 Loop 1:30.0.0.9/8 So d6 ni day va dia chi IP '$0:192.168.20.2/24 Trong lab nay yéu cu ban thutc hién trutéc cdc cau lénh trong phan XOA CAU HINH ROUTER trang 19, sau d6 thutc hién tiép phan TOM TAT trang17. Lutu y khi d&its6 IP_ ADD theo so’d6. Han ché tham khdo tai liu trong khi thute hién céc Iénh cb. Vic cu hinh IP address céc router nhur trong hinh tuong tunhu trong phan static route. ‘Sau day 1a céc bu6c thuc hién cdu hinh Dynamic routing protocol RIP Céu hinh tai RL: rafcont t Enter configuration conmands, one per line. end with cNTL/Z. 4 (config)#router rip 77bat chit nang routing RIP rA(config-router)#network 192.168.10.0 //routing trén int so ri(config-router)#metwork 192.168.38.0 V/routing tren int st rA(config-router)#network 18.0.0.0 //routing trén int loop 1 r1(config-router)#end rae (Cu hinh tai R2: r2icont t Enter configuration commands, one per line. End with CNTL/Z. r2(conf ig)# r2(config)#router rip r2(config-router)#network 20.0.0. ¥2(config-router)#network 192.168.10.0 r2(config-router)#network 192.168.30.0 r2(config-router )#end rat51 Tuong wy cho R3. Luu §: khi ding lénh Network 192.168.X.X thi chi nhp vao tham s6 default netID cla dia chi interface (default class A, B hodc C) Routing table ctla céc router: ra#sh ip route Codes: C - connected, § - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX'~ EIGRP external, O - OSPF, IA’ - OSPF inter area Ni - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, £2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - 18-18 inter area * . candidate default, U - per-user static route, o - ODR P = periodic downloaded static route Gateway of last resort is not set © 192.168.38.0/24 is directly connected, Serial R 20.0.0.0/8 [120/1] via 192.168.10.2, 60:00:07, Serial® C 192.168.10.0/24 is directly connected, Seriale R 492,168.20.0/24 [120/1] via 192.168.30.2, 02, Serialt [120/1] via 192.168.10-2, 00:00:07, Seriale C 40.0.0.0/8 is directly connected, Loopback1 R 30.0.0.0/8 [120/1] via 192.168.30.2, 00:00:62, Serial1 ras T2¥#sh ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B ~ BGP D - EIGRP, EX'- EIGRP external, 0 - OSPF, IA - OSPF inter area Ni - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP 4 - IS-IS, Li - IS-IS level-1, 2 - IS-IS level-2, ia - IS-IS inter area *'. candidate default, U - per-user static route, 0 - ODOR P - periodic downloaded static route Gateway of last resort is not set 192.168.30.0/24 [120/1] via 192.168.20.2, [120/1] via 192.168.10-1, [email protected]/8 is directly connected, Loopback 192.168.10.0/24 is directly connected, Seriale 192.168.20.0/24 is directly connected, Serial1 10.0.0.0/8 [1206/1] via 192.168.19.1, 00:69:14, Serialo 36.0.0.0/8 [120/1] via 192.168.20.2, 00:00:10, Serial1 2 ), Seriala 00:14, Serialo T3Hsh ip route Codes: - connected, $ - static, I - IGRP, R - RIP, M - mobile, B - BGP © - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area Ni - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, Li - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area * . candidate default, U - per-user static route, 0 - ODR P - periodic downloaded static route Gateway of last resort is not setg © 192.168.39.0/24 is directly connected, serial1 R 20.0.0.0/8 [120/1] via 192.168.20.1, 00:00:26, Seriale R 192.168.10.0/24 [1260/4] via 192.168.20.1, 00:00:20, Seriale [120/3} via 192.168.30.1, 00:00:19, Seriali © 192.168.20.0/24 is directly connected, Serial9 R 10.0.0.0/8 [120/1] via 192.168.30.1, 00:00:19, Serial1 © 30.8.0.0/8 is directly connected, Loopback rat Céc hang route duige in d&m trong hinh 14 céc route v6i nhiéu dudng di khée nhau va cling bang metric nén RIP ding ca 2 dung dé load balance. Néu khong cu hinh thém: thi default RIP cé kha ning load balance trén 4 durdng. Ngoai ra cdn c6 thé cu hinh cho RIP load balance tir 1 dén 6 dung (Cu hinh dat tham s6 load balance riacon? t Enter configuration commands, one per line. End with CNTL/Z. rA(config)#router rip rA(config-router)#maximum-paths ? //0%t than s6 loadbalance <1-6> Number of paths ‘Trong trudng hop khéng muén RIP gift update trén interface nao thi ding lénh passive- int ricont t Enter configuration commands, one per line. End with CNTL/Z. FA(config)#router rip rA(config-router )#passive-interface ? Ethernet IEEE 802.3 Loopback Loopback interface NuLL Null interface Serial Serial default Suppress routing updates on all interfaces rA(config-router)#passive-interface e @ //RIP sé khong gui update trén €0 rA(config)#exit rad Dimng 1nh sh ip protocol dé xem théng tin vé routing protocol trén router ri#sh ip protocols Routing Protocol is "rip" ‘Sending updates every 20 seconds, next due in 22 seconds Invalid after 180 seconds, hold down 180, flushed after 240 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Redistributing: rip Default version control: send version 1, receive any version Interface Send Recv Triggered RIP Key-chain Loopback, 1 12 Seriale 1 12 Serial1 1 12 Automatic network summarization is in effect Routing for Networks: 7/eae network dang duge routing 19.0.9.9 192.168.10.6 192,168.30. Passive Interface(s): //céc interface dang trong trang théi passive Etherneto Routing Information source: //eéc router da giti update cho Ri LLL TTT53 Gateway Distance Last Update 192.168.10.2 120 99:00:07 192.168.30.2 120 Distance: (default is 120) rae é thay Ai cic tham s6 vé thd’ gian diing lénh timer basic... Fidconf t Enter configuration commands, one per line. End with cNTL/Z. Fi(config)#router rip r1(config-router)#timers basic 69 200 200 200 rA(config-router )#4z rash ip pro Routing Protocol is "rip ‘Sending updates every 60 seconds, next due in 3 seconds Invalid after 209 seconds, hold down 200, flushed after 300 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Redistributing: rip Default version control: send version 1, receive any version Interface Send Recv Triggered RIP Key-chain Loopback 1 12 Seriald 1 142 Serial1 1 12 Automatic network summarization is in effect Routing for Networks: 1.0.0.0 192.168.10.0 192.168.30.0 Passive Interface(s): Etherneto Routing Information Sources: Gateway Distance Last Update 192.168.10.2 120 99:00:24 1192.168.30.2 120 Distance: (default is 120) Céc thong tin vé RIP update: raidebug ip rip RIP protocol debugging is on RIP: received vi update from 192.168.10.2 on Seriale 20.9.9.6 in 4 hops 3.9.0.0 in 2 hops 192.168.20. in 1 hops RIP: received vi update from 192.168.30.2 on Seriala 20.9.8.0 in 2 hops 39.9.0.0 in 1 hops 192,168.20. in 1 hops 0: 50:5: raf 60: 51:4 (20.0.0.1) 9:51:43: RIP: build update entries network 20.0.0.0 metric 2 network 30.0.0.9 metric 2 network 192.168.19.6 metric 1 network 1921168.20.0 metric 2 network 192.168.30.6 metric 1 RIP: sending v4 update to 255.255.255.255 via Serialo RIP: sending v1 update to 255.255.255.255 via Loopback1(192.168.30.1) 90:51:13: RIP: build update entries 90:51:13: network 10.0.9.9 metric 4 90:51:13: network 36.0.9.6 metric 2 network 192.168.30.0 metric 4 90:51:13: RIP: sending vi update to 255.255.255.255 via Serial1 (192.168.30.1) 90:51:13: RIP: build update entries network 16.0.9.8 metric 1 network 2.0.9.0 metric 2 network 192.168.10.0 metric 1 r13: 31: SLINK-3-UPDOWN: Interface Seriali, changed state to down ‘32: SLINEPROTO-5-UPDOWN: Line protocol on Interface Serial1, changed state to down rae 90:51:33 (20.0.0.1) RIP: sending vi flash update to 255.255.255.255 via Loopbacki RIP: build flash update entries network 36.0.9.8 metric 16 network 192.168.30.0 metric 16 RIP: sending vi flash update to 255.255.255.255 via Serialo (192.168.16.1) 90:51:33: RIP: build flash update entries network 3.0.9.8 metric 16 network 192.168.30.0 metric 16 RIP: received vi update fron 192.168.10.2 on Serialo 30.0.0. in 16 hops (inaccessible) 192.168.20.0 in 16 hops (inaccessible) 192.168.30.0 in 16 hops (inaccessible) Trong trudng hp c6 mét netID nao dé thay d6i trang thai tir UP sang DOWN thi RIP sé update v6i metric=16. LLL TTT55 DYNAMIC ROUTING PROTOCOL IGRP: IGRP c6 m6t s6 d&c dim khac so v6i RIP, tuy nhién viéc cu hinh va nguyén ly hoat ‘Ong ctia chting 1a gan gidng nhau, Biém khéc biét la cach tinh metric cla IGRP dua trén Bandwidth va delay cht khéng duc tinh b&ng hop count nh RIP. Bac diém nGa la IGRP 6 kha nang load balance unequal. So d6 va dia chi IP address duge cu hinh ging ahur RIP Loop 1:10.0.0.1/8 $0:192.168.10.1/24" DCE '$0:192.168.30.1/24 DCE $0:192.168.10.2/2 $1:192.168.30.2/24 '$1:192.168.20.1/24 DCE $0:192.168.20.2/24 Loop 1:20.0.0.2/8 Loop 1:30.0.0.9/8 ‘So d6 ni day va dia chi IP Trong lab nay yéu cau ban thu hién tute cdc céu lénh trong phan XOA CAU HiNH ROUTER trang 19, sau dé thut hién tip phan TOM TAT trang!7. Lut y khi d&t s6 IP_ ADD theo so'd6. Han ché tham khdo tai liéu trong khi thy hién cdc lénh cit. C&u hinh IGRP tai RL: Tilcontig)#router igrp 40 ri(config-router)#net 192.168.10.0 rA(config-router)#net 192.168.30.6 ra(contig-router)#net 10.0.0.0 r1(config-router)send ra Cdu hinh IGRP tai R2: r2(contig)#router igrp 10 r2(config-router)#net 192.168.10.0 r2(config-router)#net 192.168.20.0 r2(config-router)#net 20.0.0.0 r2(config-router}yend 2k56 Céu hinh IGRP tai R3: ¥3(config)#router igrp 10 r3(config-router )#net 192,168.20.0 r3(config-router)#net 192.168.30.0 r3(config-router inet 30.0.0.0 r3(config-router )#end 3 ‘Lun ¥: 86 AS trén cdc router phai gi6ng nhau. Routing table tai Ri: Tish ip route Codes: - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, 0 - OSPF, IA - OSPF inter area NL - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, 1 - IS-IS level-1, L2 - IS-IS level-2, ia - 1S-IS inter area * - candidate default, U - per-user static route, o - opr P - periodic downloaded static route Gateway of last resort is not set € — 192.168.30.0/24 is directly connected, Serialt I 20.6.0.0/8 [1906/8976] via 192.168.10.2, 09:00:56, Serialo © 192.168.19.9/24 is directly connected, serialo I 1921168.20.0/24 [106/10476] via 192.168.10.2, [100/10476] via 192.168.30.2, 10.0.0.0/8 is directly connected, Loopback1 30.0.0.0/8 [100/8976] via 192.168.30.2, 09:01:11, Serialt Serialo 01:11, Serialt Routing table tai R2: r2ish route Gateway of last resort is not set I 192.168.30.0/24 [100/10476] via 192.168.10.1, [100/10476] via 192.168.20.2, 20.0.0.0/8 is directly connected, Loopbacki 192.168.10.0/24 is directly connected, Serialo 192.468.20.0/24 is directly connected, Serial1 10.6.0.0/8 [106/8976] via 192.168.10.1, 00:00:52, Serialo 30.0.0.0/8 [100/8976] via 192.168.20.2, 09:01:20, Serial1 Routing table tai R3: rash ip route Gateway of last resort is not set © 192.168.39.9/24 is directly connected, Serial1 I 20.0.0.0/8 [100/8976] via 192.168.20.1, 00:01:10, Serialo I 192.168.10.0/24 [100/10476] via 192.168.20.1, 00:01:10, Serialo [200/30476] via 192.168.30.1, 00:00:57, Serial1 © 192.168.29.9/24 is directly connected, Seriale I 10.6.0.0/8 [106/8976] via 192.168.30.1, 09:00:57, Serial1 30.0.0.0/24 is subnetted, 1 subnets c 30.0.0.0 is directly connected, Loopback Xem ca 3 bang routing ta nhan xét thay IGRP load balance equal. Bay gid thay d6i tham s6 bandwidth va delay sé anh hung dén metric cla ca 3 router, LLL TTT57 ‘Thay d6i bandwidth va delay cla R1 Ticont t Enter configuration commands, one per line. End with CNTL/Z. Fi(config)#int s @ ra(config-if)#band 128 ra(config-if)#delay 2000 ra(config-if)#int s 1 rA(config-if)#band 64 ri(config-if)#delay 4009 r1(config-if)#end rad riicle ip route * //dung dé refresh routing table Tuong tu cho R2 va R3. Bang routing mi nh sau: Tivsh ip route Gateway of last resort is not set 192.168.30.0/24 is directly connected, Serialt 20.0.9.9/8 [100/80625] via 192.168.10.2, 00:0 192.168.10.9/24 is directly connected, Seriale 192.168.20.0/24 [100/84125] via 192.168.19.2, 90:00:15, Seriale 18.0.9.9/8 is directly connected, Loopbacki 30.0.0.0/8 [100/84625] via 192.168.10.2, at 5, Serialo 5, Serialo T2Hsh ip route Gateway of last resort is not set 192.168.30.0/24 [190/84125] via 192.168.20.2, 90:00:24, Serial1 20.0.9.9/8 is directly connected, Loopback 192.168.10.0/24 is directly connected, Seriale 192.168.20,0/24 is directly connected, Serialt 18.0.9.0/8 [190/80625] via 192.168.10.1, 90:00:25, Serialo 30.0.0.0/8 [100/4656] via 192.168.20.2, 09:00:24, Serial1 T3¥sh ip route Gateway of last resort is not set 192.168.30.0/24 is directly connected, Serialt 20.0.0.0/8 [100/82625] via 192.168.30.1, 00:00:30, Serialt 192.168.10.0/24 [190/82125] via 192.168.30.1, 90:00:30, Serial1 192.168.20,0/24 is directly connected, Seriale 10.0.0.0/8 [100/80625] via 192.168.20.1, 00:00:20, Serial1 36.0.9.0/24 is subnetted, 1 subnets ce 39.0.0. is directly Connected, Loopbackt Vay cd 3 bang routing déu khong cdn cdc duding load balance. Default IGRP chi load balance equal. MuGn IGRP load balance unequal phai dat tham s6 VARIANCE ‘Dat variance én R1: rifconf Enter configuration commands, one per line. End with CNTL/Z. r4(config)#router igrp 10 r4(config-router)#variance 128 r1(config-router )#end ratTurong tur cho R2 vai R3 Céc bang routing méi sau khi thém tham s6 VARIANCE nhu'sau: rivsh ip route Gateway of last resort is not set Honone 192.168.30.0/24 is directly connected, Serial1 20.0.0.0/8 [100/89625] via 192.168.10.2, 00:00:48, Serial® 192.168.19.9/24 is directly connected, Seriale 192.168.20.0/24 [100/84125] via 192.168.10.2, 00:00:48, Serialo 10.6.0.0/a is directly connected, Loopbacki 30-0.0.0/8 [106/84625] via 192.168.10.2, 00:00:48, Serialo [100/160750] via 192.168.30.2, o rat rah Ip route Gateway of last resort is not set 192.168.30.0/24 [100/84125] via 192.168.20.2, 00:00:37, Serial1 20.0.0.0/8 is directly connected, Loopbackt 192.168.10.0/24 is directly connected, Serialo 192.168.20.0/24 is directly connected, Serial1 10.6.0.0/8 [106/89625] via 192.168.10.1, 00:00:40, Seriale 30.0.0.0/8 [1008/4656] via 192.168.20.2, 09:00:37, Serial1 2 Tash ip route Gateway of last resort is not set © 192.168.30.0/24 is directly connected, Serial1 I -20.0.0.0/8 [100/82625] via 192.168.90.1, 00:00:46, Serial1 [190/160750] via 192.168.20.1, @ Seriale X 192.168.10.0/24 [106/82125] via 192.168.30.1, 00:00:46, Serial1 [100/162250] via 192.168.20.1, 60:01:00, Serialo © 192.168.29.9/24 is directly connected, serialo I 10.0.0.0/8 [100/89625] via 192.168.30.1, 00:09:46, Serialt 30.6.0.0/24 is subnetted, 1 subnets c 30.0.0.0 is directly connected, Loopbacki rat ‘Vy nhan thy routing table m6i cé metric 16n hon routing table ci vi giém bandwidth, tang delay. Béng thdi xudt hién céc dung load balance unequal (v6i metric khic nhau). Kiém tra cu hinh routing trén R1 riwsh ip protocol Routing Protocol is “igrp 16" ‘sending updates every 99 seconds, next due in 57 seconds Invalid after 270 seconds, hold down 280, flushed after 630 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Default networks flagged in outgoing updates Default networks accepted from incoming updates IGRP metric weight K1=1, K2=0, K3=1, K4=0, K5=0 IGRP maximum hopcount 16e IGRP maximum metric variance 1 Redistributing: igrp 10 Routing for Networks: 9.9.0.9 LLL TTT59 192.168.10.0 192.168.30.0 Routing Information Sources: Gateway Distance Last Update 192.168.10.2 100 99:00:33 192.168.30.2 100 Distance: (default is 109) inh update cla IGRP: a eC IGRP protocol debugging is on IGRP: received update from 192.168.30.2 on Serial network 192,168.20.0, metric 164250 (neighbor 160256) network 3.0.0.0, metric 160759 (neighbor 501) 02:49:11; IGRP: received update from 192.168.19.2 on Serialo network 192.168.30.9, metric 86125 (neighbor 84125) network 20.0.9.6, metric 86625 (neighbor 501) network 192.168.20.9, metric 84125 (neighbor 4156) network 30.0.9.0, metric 84625 (neighbor 4656) 2:49:42: network 192.168.30.9, metric=16025@ 9:4 network 19.0.0.6, metric=501 9:42: IGRP: sending update to 255.255.255.255 via Seriali (192.468.30.1) network 20.0.0.0, metric=80625 network 192.168.10.9, metric=80125 network 192.168.20.9, metric=84125 network 19.0.9.6, metric=501 : received update from 192.168.19.2 on Serialo network 192,188.30.8) metric 4204087208, (inaccessible) network metric 80625 (neighbor 561) network +8, metric 4294967295 (inaccessible) network 30 , metric 4294967295 (inaccessible) edition is now 19 : sending update to 255.255.255.255 via Loopback1 network 192.168.30.9, metric=160250 network 20.0.0., metric=80625 network 192,168.10.9, metric=80125 network 192.168.20.9, metric=4294967295 network 30.0.0.6, metric=160759 : sending update to 255.255.255.255 via Serialo network 192.168.30.9, metric=160250 network 192,168.20.0, metric=4294967295 network 19.0.0.6, metric=501 network 30.0.0.0, metric=160750 ino debug all All possible debugging has been turned off ras Khi c6 m6t netID nao d6 chuyén trang thai DOWN, IGRP update v6i metric 4294967295, 1a maximum metric cla IGRP.60 BAL TAP ROUTING PROTOCOL RIP VA IGRP Loop 1:172.16.16.2/20 Loop 2:172.16.32.2/20 Loop 3:172.16.48.2/20 S0:192,168.1.33/27" DCE $0:192,168.1,65/27 DCE $1:192.168.1.97/27 DCE $0:192,168.1.98/27 Loop 1:172.17.16.2/20 Loop 1:172.18,16.2/20 Loop 2:172.17.32.2/20 Loop 2:172.18.32.2/20 Loop 3:172.17.48.2/20 Loop 3:172.18.48.2/20 So d6 ni day va dia chi IP Trong lab nay yéu cu ban thy hién trur6c cdc cau Iénh trong phan XOA CAU HINH ROUTER trang 19, sau d6 thuc hién tip phn TOM TAT trang17. Luu ¥ khi d&t s6 IP_ ADD theo so’d6, Han ché tham khdo tai liu trong khi thyc hién cdc lénh ca. A. Cau Hinh Cac Router Trong So'D6 Bang RIP V6i Yéu Cau Sau: © T&tc céc router d6u ping duigc tt cd céc dia chi loopback cla cac router cn ic router R1, R2, R3 khdng c6 cc route loadbalance. + Thdi gian update la 60s 240s 240s 360s B. Cau Hinh Thém Céc Router Trong So' D6 Bang IGRP V6i Yéu Cau Sau: + Tat ca céc router déu ping duge tat ca céc dia chi loopback ctia cic router con lai, * Diéu chinh tham s6: bandwidth = 64K bps, delay = 20000 bandwidth = 128K bps, delay = 10000 bandwidth = 256K bps, delay = 8000 + C4uhinh sao cho cée router loadbalance unequal path C.¥éu Cu Thém Trong Trudng Hop Con Thdi Gian: + Giai thich tai sao tai router R1 khdng thay dugc céc subnet clia céc int LOOP trén cdc router khac (R2, R3). TuOng ty di v6i R2 va R3.61 Gidi thich tai sao hién tai m6i router dang chay 2 protocol RIP va IGRP nhung tai sao wén routing table chi cé cdc routes hoc dugc bang IGRP. ‘Thy hién cu hinh thém cho RIP sao cho t&t ca céc router déu ding RIP 48 routing, cht ¥ 1a khong tat IGRP. Phan tich hoat dng cla classfull routing protocol.62 DYNAMIC ROUTING PROTOCOL EIGRP: EIGRP 1a protocol du9c phat trién dya trén IGRP do d6 né 6 céc dc tinh ca IGRP 6 1a céch tinh metric va loadbalance unequal cing nhuf support multi protocol, Dim khéc biét la EIGRP hd tr VLSM va Ia loai classless routing protocol. Céc cau Iénh cu hinh EIGRP gidng véi IGRP, c6 m6t s6 khéc biét sé phan tich sau. 80:172.16.0.1/16 DCE 81.:172.17.0.116 DCE 80:172.16.0.216 Loop 1: 192, 168.1.65/28 Loop 1: 192.168.2.65/28 Loop 2: 192.168.1.81/28 Loop 2: 192.168.2.81/28 So d6 ni day va dia chi IP Trong lab nay yéu cu ban thu hién true céc cau Iénh trong ph’in XOA CAU HINH ROUTER trang 19, sau d6 thute hién tiép phan TOM TAT trang17. Lutu § khi d&its6 IP ADD theo so’d6. Han ché tham khdo tai liu trong khi thyte hién cdc I6nh ci. Cu hinh dja chi IP ADD clia céc int gi6ng trong so d6, cu hinh routing EIGRP can ban hur sau: Tai router R1: Rifconf t Enter configuration commands, one per line. End with CNTL/Z. Ri(config)#int s 0 Ri(config-if)#ip add 172.16.0.1 255.255.0.0 Ri(config-if)#no shut Ri(config-if)#clo ra 64000 Ri(config-if)#int s 1 Ri(config-if)#ip add 172.17.0.1 255.255.0.0 Ri(config-if)#clo ra 64000 Ri(config-if)#no shut Ra(config-if )# Ri(contig-if)#exit Ra(config)#router eigrp 10 R1(config-router)#network 172.16.0.6 r4(config-router)#network 172.17.0.0 ra(config-router)#no eigrp log-neighbor-warnings r1(config-router )#end feta LLL TTT63 Tai router R2: r2(config)#router eigrp 10 r2(config-router )#network 172.16.0.9 r2(config-router)#network 192.168.1.0 //chi dénh default netro r2(config-router )#end rai Tai router R3: 3(config)#router eigrp 10 r8(config-router )#network 172.17.0.0 r3(config-router)#network 192.168.2.0 //ebi dann default net1o ra(config- router }#end rai Routing table ctla céc router sau khi cSu hinh xong: Tish ip route Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX'- EIGRP external, O - OSPF, IA - OSPF inter area Ni - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, Li - IS-IS level-1, L2 - IS-IS level-2, ia - 1S-IS inter area *. candidate default, U - per-user static route, 0 - OOR P - periodic downloaded static route Gateway of last resort is not set 172.17.9.0/16 is directly connected, Serial1 172.16.9.0/16 is directly connected, Seriale 192.168.1.0/24 [96/2297856] via 172.16.0. 192.168.2.0/24 [96/2207856] via 172.17.0.2, 0 T2Hsh ip route Codes: C - connected, $ - static, I - TGRP, R - RIP, M ~ mobile, B ~ BGP D - EIGRP, EX’- EIGRP external, O - OSPF, IA’- OSPF inter area Ni - OSPF 'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i- IS-IS, Li - IS-IS level-1, L2 - IS-IS level-2, ia - 18-IS inter area * - candidate default, U - per-user static route, 0 - ODR P - periodic downloaded static route Gateway of last resort is not set 172.17.9.0/16 [90/2681856] via 172.16.0.1, 00:01:08, Seriale 172.16.9.0/16 is directly connected, Seriale 192.168.1.0/24 is variably subnetted, 3 subnets, 2 masks c 192.168.1.64/28 is directly connected, Loopbacki ¢ 192.168.1.80/28 is directly connected, Loopback? D 192.168.1.0/24 is a summary, 00:01:33, Nulle D r 192.168.2.0/24 [96/2809856] via 172.16.6.1, 00: ‘2uping 192.168.2.65 4, Serialo Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 192.168.2.65, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 60/68/64 ms r2qping 192.168.2.81 Type escape sequence to abort.64 Sending 5, 109-byte ICNP Echos to 192.168.2.81, timeout is 2 seconds: Success rate is 160 percent (5/5), round-trip min/avg/max = 56/62/84 ms rat Tash ip route Codes: € - connected, $ - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX’ EIGRP external, 0 - OSPF, IA’- OSPF inter area NL - OSPF'NSSA external type 1, N2 - OSPF NSSA external type 2 E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - I8-IS level-1, L2 - IS-IS level-2, ia - 1S-IS inter area >. candidate default, U - per-user static route, o - ODR P - periodic downloaded static route Gateway of last resort is not set © 172.17.0.0/16 is directly connected, Seriala D _ 172.36.0.0/16 [90/2681856] via 172.17.0.1, 00:00:22, Serial D 192.168.1.6/24 [99/2860856] via 172.17.9.1, 0:00:22, Serial 192.468.2.0/24 is variably subnetted, 3 subnets, 2 masks c 192.168.2.64/28 is directly connected, Loopback1 c 192.168.2.80/28 is directly connected, Loopback2 D 192.168.2.0/24 is a summary, 00:00:25, Nul1O r34ping 192.168.1.65 Type escape sequence to abort. Sending 5, 198-byte ICNP Echos to 192.168.1.65, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max = 56/57/64 ms r3#ping 192.168.1.81 Type escape sequence to abort. Sending 5, 100-byte ICNP Echos to 192.168.1.81, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max = 60/60/64 ms i ahéin xét thdy trén routing table cUia cc router R2 va R3 c6 céc hang route la summary vio Null0, dé a céc hang default summary cla EIGRP.trong sO 46 nay, v6i ché a6 default summary céc router vn routing binh thug. Kiém tra cau hinh routing trén R1 ravish ip protocol Routing Protocol is "eigrp 10" Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Default networks flagged in outgoing updates Default networks accepted from incoming updates EIGRP metric weight Ki=1, K2=0, K3=1, K4=6, K5=0 EIGRP maximum hopcount 160 EIGRP maximum metric variance 4 Redistributing: eigrp 10 Automatic network summarization is in effect Automatic address summarization: 172.17.9.0/16 for Serialo 172.16.9.0/16 for Serial1. Routing for Networks: 172.16.9.0 172.17.9.0 LLL TTT65 Routing Information Sources: Gateway Distance Last Update 172.16 .0.2 90 99:01:28 172.17.6.2 90 99:01:30 Distance; internal 96 external 170 Protocol EIGRP IU tr&thém hai loai bang khac v6i routing table li neighbor table va topology table. Tish ip eigrp neighbor IP-EIGRP neighbors for process 19 H Address Interface Hold Uptime SRTT RTO Q Seq Type cnt Num 4 172,16.0.2 seo 0 71 @ _172.17.0.2 Sei 3 Tish ip eigrp topology IP-EIGRP Topology Table for AS(10)/ID(172.17.0.1) code: P - Passive, A - Active, U - Update, Q - Query, R - Reply, r= Reply status P 192.168.1.0/24, 1 successors, FD is 2297856 via 172.16.0.2 (2297856/128256), Seriale P 192.168.2.0/24, 1 successors, FD is 2297856 via 172,17.0.2 (2297856/128256), Serialt P 172.16.0.0/16, 1 successors, FD is 2169856 via Connected, Seriale P 172.17.0.0/16, 1 successors, FD is 2169856 via Connected, Serial1$0:172.16.0.1/16 DCE $1:172.17.0.1116 DoE 80:172.16.0.2/16 811721700216 Loop 1: 192.168.1.65/28 Loop 1: 192.168.1.129/28 Loop 2: 192.168.1.81/28 Loop 2: 192.168 1.145/28 So d6 néi day va dia chi IP C&u hinh tung ty trong so dé trutéc, chi cé R3 thay déi. Cu hinh R3: r3(config)#router eigrp 10 ra(config-router)#net 172.17.0.0 ra(config-router)#net 192.168.1.0 3(config-router )i#end r3t Vi R2 va R3 déu auto-summary do d6 routing table ctla cc router nh sau: Tish ip route Gateway of last resort is not set ¢ 172.17.0.0/16 is directly connected, Serial © 172.16.6.0/16 is directly connected, Serialo D 192.168.1.0/24 [90/2297856] via 172.17.0.2, 00:00:04, Serial [90/2207856] via 172.16.0.2, 00:00:04, Serialo rae T2Hsh ip route Gateway of last resort is not set 172.17.0.0/16 [96/2681856] via 172.16.0.1, 00:06:25, Serialo 172.46.0.0/16 is directly connected, Serialo 192.168.1.0/24 is variably subnetted, 4 subnets, 3 masks c 192.168.1.64/28 is directly connected, Loopback1 G 192.168.1.80/28 is directly connected, Loopback? D 192.168.1.0/24 is a summary, 00:06:25, Nul1O 2H rash ip route Gateway of last resort is not set © 172.17..0/16 is directly connected, Serial SLL TT TTT67 D —472.16.0.0/16 [90/2681856] via 172.17.0.1, 00:07:48, Serial 192.168.1.0/24 is variably subnetted, 4 subnets, 3 masks D 192.168,1.0/24 is a summary, 00:07:47, Nullo c 192.168,1.128/28 is directly connected, Loopback1 c 192.168,1.144/28 is directly connected, Loopback? rae RI Khong thé ping dugc céc loop ctia R2 va R3 vi routing table cla R1 khng di thong tin d@ xac dinh next-hop-router cn thiét cho routing. R2 khong thé ping LOOP ctla R3 va ngugc lai vi tn routing table cla ching khéng c6 céc thang tin vé cdc NET-ID d6. r2#ping 192.168.1.129 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.129, timeout is 2 seconds: Success rate is 8 percent (0/5) rai Oi y6i so d6 va cach dat s6 IP nhu trén ta khong thé ding default summary dugc, do 6 tt auto-summary tai R2 va R3 r2iconf t r2(config)#router eigrp 10 r2(config-router)#no auto-summary r2(config-router )#end rot Tawcont T r3(config)#router eigrp 10 r3(config-router)#no auto- ra(config-router)#end rae Debug tai R1 sau khi tat auto-summary: ri#debug ip eigrp IP-EIGRP Route Events debugging is on rai 69:2: IP-EIGRP: Processing incoming UPDATE packet 09:23:02: IP-EIGRP: Int 192.168.1.128/28 M 2297856 - 1657856 640000 SM 128256 - 256 128009 09:23:02: IP-EIGRP: Int 192.168.1.144/28 M 2297856 - 1657856 640000 SM 128256 - 256 128009 IP-EIGRP: IP-EIGRP: IP-EIGRP: IP-EIGRP: IP-EIGRP: IP-EIGRP: Int 192.168.1.128/28 metric 2207856 - 1657856 640000 Int 192/168.1.144/28 metric 2297856 - 1657856 640000 192.168.1.128/28 - do advertise out Seriale Int 192.168.1.128/28 metric 2297856 - 1657856 649000 192.168.1.144/28 ~‘do advertise out Seriale Int 192.168.1.144/28 metric 2297856 - 1657856 640000 IP-EIGRP: Processing incoming UPDATE packet IP-EIGRP: Int 172.16,0.0/16 M 4294967205 - 1657856 4294967205 SM 4294967205 - 1657856 4294967295 89:23:02: IP-EIGRP: Int 192.168.1.64/28 M 4204967205 - 1657856 4294967205 SM 4294967295 - 1657856 4294967205 er IP-EIGRP: Int 192.168.1.80/28 M 4294967295 - 1657856 4294967295 ‘SM 4294967295 - 1657856 4294967295 69:23:02: IP-EIGRP: Processing incoming UPDATE packet 09:23:62: IP-EIGRP: Int 192.168.1.128/28 M 4294967295 - 165785668 4294967295 SM 4294967295 - 1657856 4294967295 90:23:02: IP-EIGRP: Int 192.168.1.144/28 M 4294967295 - 1657856 4294967205 SM 4204967205 - 1657856 4294967205 Routing table ctia céc router sau khi t&t auto-summary: rivsh ip route © 172.17.0.0/16 is directly connected, Serial C 172.36.0.0/36 is directly connected, Serialo 192.168.1.@/28 is subnetted, 4 subnets D 192.168.1.64 [96/2297856] via 172.16.0.2, 00:00:16, Serialo D 192.168.1.80 [96/2297856] via 172.16.0.2, 6, Serialo D 192.168.1.128 [90/2297856] via 172.17.0.2, 00:00:11, Serial1 D - 192.168.1.144 [96/2297856] via 172.17.0.2, 00:00:11, Serialt T2Hsh ip route 172.17.0.0/16 [96/2681856] via 172.16..1, 00:00:28, Serialo 172.16.0.0/16 is directly connected, Serial9 192.168.1.@/24 is variably subnetted, 4 subnets 192.168.1.64/28 is directly connected, Loopback1. 192.168.1.80/28 is directly connected, Loopback2 1921168.1.128/28 [98/2809856] via 172.16.0.1, 00:00:12, Serialo 192.168.1.144/28 [98/2809856] via 172.16.0.1, 69:00:12, Serialo jeeee co 2H Tash ip route © 172.17.0.0/16 is directly connected, Serial D _172.16.0.0/16 [90/2681856] via 172.17.0.1, 96:08:24, Serial 192-468.1.0/24 is variably subnetted, 4 subnets 192.168.1.64/28 [96/2809856] via 172.17.0.1, 00:00 192.168.1.80/28 [96/2809856] via 172.17.0.1, 0 192.168.1.128/28 is directly connected, Loopbacki 192.168.1.144/28 is directly connected, Loopback? 24, Serialt 4, Serial1 Zocce 3H ‘Sau khi tt auto-summary tai R2 va R3, cc router cé thé routing inh thudng. r2eping 192.168.1.129 ‘Type escape sequence to abort. Sending 5, 108-byte ICNP Echos to 192.168.1.129, timeout is 2 seconds: tt Success rate is 100 percent (5/5) 2H EIGRP cho phép ta tdt auto-summary va déng thi cho phép ta cu hinh summary manual. (Céu hinh summary manual tai R2 va R3: r2(config}#int s 0 r2(config-if)#ip summary-address eigrp 10 192.168.1.64 255.255.255.224 r2(config-if )#end rat Fa(config)#int = 1 r3(config-if)#ip summary-address eigrp 10 192.168.1.128 255.255.255.224 3(config-if)#end rst LLL TTT69 Debug @i RI sau Khi summary manual t@iR2 va RO: TP-EIGRP: Processing incoming UPDATE packet IP-EIGRP: Int 192.168.1.64/27 M 2297856 - 1657856 640000 SM 128256 - 256 128000 IP-EIGRP: Int 192.168.1.64/27 metric 2297856 - 1657856 646000 : IP-EIGRP: 192.168.1.64/27 - do advertise out Serial1 IP-EIGRP: Int 192.168.1.64/27 metric 2297856 - 1657856 640000 IP-EIGRP: Processing incoming UPDATE packet IP-EIGRP: Int 192.168.1.128/27 M 2297856 - 1657856 640000 SM 256 128000 ‘IP-EIGRP: IP-EIGRP: IP-EIGRP. Int 192.168.1.128/27 metric 2297856 - 1657856 649000 192.168.1.128/27 - do advertise out Serialo Int 192.168.1.128/27 metric 2207856 - 1657858 640000 Routing table cUia céc router sau khi summary manual tai R2 va R3: rivsh ip route © 172.17.0.6/36 4s directly connected, Serial € — 472116.0.6/16 is directly connected, Seriald 392:168.1.0/27 is subnetted, 2 subnets D 192.468,1.64 [90/2297856] via 172.16 D 192.168.1128 [90/2297856] via 172.17. rue 00:28, Serialo 00:05, Seriala r2Hsh ip route D172.17.0.0/26 [90/2681856] via 172.16.0.1, 00:00:38, Serialo © 172.16.9.8/16 is directly connected, Serialo 192.168.1.0/24 is variably subnetted, 4 subnets, 2 masks D 492.168.1.64/27 is a summary, 00:00:42, NullO c 192.168.1.64/28 is directly connected, Loopbacki c 492.168,1.80/28 is directly connected, Loopback: D 192.168.1.128/27 [90/2809856] via 172.16.0.1, 00:00:12, Seriale roe r3Hsh ip route ¢ 472.17.0.6/16 is directly connected, Serial1 D — 172.16.0.8/16 [90/2681856] via 172.17.0.1, 0:00:24, Serial1. 192.168.1.0/24 is variably subnetted, 4 subnets, 2 masks D 492.168.1.64/27 [90/2809856] via 172.17.0.1, 00:00:24, Seriali D 192.168.1.128/27 is a summary, 00:00:30, Nulle c 192.168.1.128/28 is directly connected, Loopback’ c 192.168,1.144/28 is directly connected, Loopback? Routing table trén céc router c6 s6 Iugng net-ID gidm dang ké néu hé théng lén va nhiéu subnet.BALTAP EIGRP: Loop 1: 192.168.1.17728 Loop 2: 192.168.1.3928 Loop 3: 192.168.1.50728 Loop 4: 192.168.1.195/28 Loop 5: 192.168.1.210/28 Loop 6: 192.168.1.226/28 80:172.16.0.116 DCE $1:172.17.0.116 DoE 80:172.16.0.2/16 Loop 1: 192.168.1.65/28 Loop 1: 192.168.1.129/28 Loop 2: 192.168.1.81/28 Loop 2: 192.168.1.145/28 Loop 3: 192 168.1.97/28 Loop 3: 182.168.1.166/28 Loop 4: 192.168.1.115/28 Loop 4: 192.168.1.177/28 So d6 nGi day va dia chi IP Trong lab nay yéu cau ban thyc hién tru6c cdc cdu Iénh trong phan XOA CAU HINH ROUTER trang 19, sau a6 thu hién tiép phan TOM TAT trang17. Luu ¥ khi dat s6 IP_ ADD theo so’'d6, Han ché tham khdo tai liéu trong khi thu hién cdc lénh cil. Cu Hinh Cac Router Trong So D6 Bang EIGRP V6i Yéu Cau Sau: * Tt céc router d6u ping dugc tt cd céc dia chi loopback cla cac router cn © C&uhinh summary sao cho routing table trén R1 va R2 gidm t6i mUec t6i thiéu (khéng nhiéu hon 8 routes) ma van c6 kha ning routing binh thu@ng. Khong dutgc ding default route * Routing table cla R1 khéng nhiéu hon 11 routes. SLL TT TTT7 DYNAMIC ROUTING PROTOCOL OSPF: OSPF 1a loai link state protocol, hé tg VLSM va cho phép cu hinh phan cp nhiéu area. Céc router ding OSPF kh6ng gift routing table cho céc router neighbor, chiing chi gut Link state table b&ng LSA va HELO packet 4 duy tri m6i lién hé gitta cdc router. Loop 4: 10.1.1.1/24 Loop 2: 10.1.2.1/24 Loop 3: 10.1.3.1/24 80 :10.12.0.1/24 DCE $1: 10.13.0.1/24 DCE 80 :10.12.0,2/24 $1:10.13.0.3/24 $1:10.23.0.2/24 DCE ‘$0 :10.23.0,3/24 Loop 1: 10.2.1.2/24 Loop 1: 10.3.1.3/24 Loop 2: 10.2.2.2/24 Loop 2: 10.3.2.3/24 Loop 3: 10.2.3.2/24 Loop 3: 10.3.3.9/24 SO d6 nGi day va dia chi IP rong lab nay yéu cu ban thuc hién ruc cdc cau Iénh trong phain XOA CAU HINH ROUTER trang 19, sau dé thutc hién tiép ph’in TOM TAT trang17. Lute y khi. dat s6 1P_ ADD theo so’d6, Han ché tham Kido tai liu trong khi the hién céc I6nh ci. Cu hinh dja chi IP ADD ctla céc int gi6ng trong so 46, cu hinh routing OSPF cin ban ‘nhu sau: Tai router R1: ri (config)#router ospf 160 rA(config-router)#net 10.12.0.1 rA(contig-router)#net 19.13 ra(contig-router)#net 10.1. rA(config-router)iinet 10.1. ri(config-router)#net 10.1. -1 0.0.0. 11 0.0.0. 10.6. Tai router R2: r2(config)#router ospf 260 r2(config-router)#net 19,23.0 r2(config-router)#net 10.12.0 0.255 area © 0.255 area 0 r2(config-router)#net 10.2.1. 9.255 area @ r2(config-router)inet 10.2. 18.255 area @ r2(config-router)#net 10.2. 18.255 area @n Tai router R3: r3(config)#router ospF 360 r3(config-router)#net 10.0. .255.255.255 area 0 Routing table cUia céc router sau khi cu hinh xong: Tish ip route Gateway of last resort is not set 10.0.0.0/8 is variably subnetted, 12 subnets, 2 masks c 10.12.0.0/24 is directly connected, Serialo ec 10.13.0.0/24 is directly connected, Serial1 0 1013.2.3/32 [110/65] via 10.13.0.3, 00:00:18, Serial ° 19.2.2.2/32 [116/65] via 19.12.0.2, 90:00:18, Seriale c 10.1.3.0/24 is directly connected, Loopbacks: ° 10.3.3.3/32 [110/65] via 10.13.0.3, 00:00:18, Serial1 ° 10.2.3.2/32 [110/65] via 10.12.9.2, 90:00:18, Seriale c 10.1.2.6/24 is directly connected, Loopback2 ¢ 10.1.1.0/24 is directly connected, Loopback ° 10.3.1.3/32 [110/65] via 10.13.0.3, 0:00:19, Serial ° 19.2.1.2/32 [110/65] via 10.12.0.2, 00:00:19, Seriale ° 10.23.9.0/24 [118/128] via 10.12.0.2, 09:69:19, Serialo [110/128] via 1011316.2, 00:00:19, Serial1 rat r2Hsh ip route Gateway of last resort is not set 10.0.0.0/8 is variably subnetted, 12 subnets, 2 masks 10.12.0.0/24 is directly connected, Serialo 10.13-0.9/24 [110/128] via 10.12.0.1, 00:60:22, Serialo [140/428] via 19.23.0.3, 00:00:22, Serialt 10.3.2.3/32 [110/65] via 19.23.0.3, 00:00:22, Serial 1011.2/1/32 [110/65] via 10.12.0.1, 90:00:22, Seriale 19.3.3.3/32 [110/65] via 19.23.0.3, 90:00:22, Serial 1 2 10.1.3.1/32 [110/65] via 10.12.0.1, 00:00:22, Seriale 49.2:1.6/24 is directly connected, Loopback 49.2.2.6/24 is directly connected, Loopback2 10.3.1.3/32 [110/65] via 10.23.0.3, 00:00:23, Serial1 4011/1.1/32 [110/65] via 10.12-0.1, 90:00:23, Seriale 40.2.8,6/24 is directly connected,’ Loopbacks 10.23.0.0/24 is directly connected, Serial1 3 aaccancoce 2H rash ip route Gateway of last resort is not set 10.8.6.0/8 is variably subnetted, 12 subnets, 2 masks oO 10.12.0.0/24 [110/128] via 10.13.0.1, 00:00:12, Serial1 [116/128] via 10.23.0.2, 00:00:12, Serial@ 40.18.0.0/24 is directly connected, Serialt 10.2.2,2/32 [110/65] via 10.23.0.2, 00:00:12, Serial@ 401112.1/32 [110/65] via 10.13.0.1, 90:00:12, Serial1 10.3.1.6/24 is directly connected, Loopback 40.2/8.2/32 [140/65] via 10.23.0.5, 90:00:12, Seriale 30.1.3.1/32 [110/65] via 10.13.0.1, 90:00:13, Seriala 49.3.8.6/24 is directly connected,’ Loopbacks 10.2.1.2/32 [110/65] via 10.23.0.2, 00:00:13, Seriale 10.1.1.1/32 [110/65] via 10.13.0.1, 00:00:13, Serial1 40.3.2,6/24 is directly connected,’ Loopback? 10.23.0.0/24 is directly connected, Serial9 jaacoaceaccn Khi kim tra routing protocol béing lénh sh ip pro: LLL TTT73 Yash ip pro Routing Protocol is “ospt 200" Sending updates every © seconds Invalid after © seconds, hold down 8, flushed after 0 Outgoing update filter list for all interfaces is Incoming update filter list for all interfaces is Redistributing: ospf 200 Routing for Networks: 10.2.1.2/32 10.2.2.2/32 10.2.8.2/32 10.12.0.2/32 10.23.0.2/32 Routing Information Sources: Gateway Distance Last Update 10.3.3.3 110 90:64:49 10.1.3.4 110 00:04:49 Distance: (default is 110) Router R2 kh6ng ndi tryc tiép v6i R3 nhung van ding cdc thong tin ti R3 dé routing. Céc router ding OSPF trao d6i théng tin vé link state V6i tt cd cc router khéc trong, cing routing domain. Bay 1a diém khéc biét so v6i distance vector protocol. Xem bang topology bang lénh: rivsh ip ospf data OSPF Router with ID (10.1.3.1) (Process ID 190) Router Link States (Area 6) Link 1D ‘ADV Router Age seqr Checksum Link count 19.1.3.1 16.1.3.1 4 exao990008 OxE4IE 7 19.2.3.2 10.2.3.2 96 exgo900008 OXFCE? 7 19.3.3.3 16.3.3.3 a5, @x80900005 Ox3FOC 7 Router R1 co cdc thong s6 vé link state ca tt cd cac router khac, mi router co mOt sO IP ding dé lam RouterID. RouterID dugc chon trén cac s6 IP clia cac Int LOOP véi sO IP 16n nh&t, néu khéng cé int LOOP thi ching chon s6 IP 16n nhat ctia cédc int physical. Xem bang neighbor bang lénh: rivsh ip ospf nei Neighbor ID Pri State Dead Time Address Interface 19.2.3.2 4 FULLY ~ 06:00:32 19.12.0.2 seriale 9.3.3.3 a FULL/ - 06:00:38 _10.13.0.3 Serial1 Xem céc thong tin OSPF trén tiing interface bang 1énh: Tish ip ospf int Loopback is up, line protocol is up Internet Address 19.1.1.1/24, Area © Process ID 100, Router ID 19.1.3.1, Network Type LOOPBACK, Cos Loopback interface is treated as a stub Host Loopback2 is up, line protocol is up Internet Address 10.1.2.1/24, Area 0 Process ID 100, Router ID 19.1.3.1, Network Type LOOPBACK, Cos Loopback interface is treated as a stub Host Loopback3 is up, line protocol is up Internet Address 19.1.3.1/24, Area ®74 Process ID 10, Router ID 10.2.3.1, Network Type LOOPBACK, Cost: 1 Loopback interface is treated asa’ stub Host Serial0 is up, line protocol is up Internet Address 19.12.0.1/24, Area @ Process ID 190, Router ID 10.1.3.1, Network Type POINT TO POINT, Cost: 64 Transmit Delay is 1 sec, State POINT TO_POINT, Timer intervals configured, Hello 10, Dead 40, Wait 49, Retransmit 5 Hello due in 00:00:05 Index 1/1, flood queue length @ Next @x9(0)/0x9(0) Last flood scan length is 1, maximum is 1 Last flood scan time is 6 msec, maximum is 0 msec Neighbor Count is 4, Adjacent neighbor count is 1 ‘Adjacent with neighbor 10.2.3.2 Suppress hello for @ neighbor(s) Seriali is up, line protocol is up Internet Address 19.13.0.1/24, Area @ Process 1D 190, Router ID 10.1.3.1, Network Type POINT_TO_POINT, Cost: 64 Transmit Delay is 1 sec, State POINT_TO_porNT, Timer intervals configured, Hello 10, Dead 49, Wait 49, Retransmit 5 Hello due in 00:00:63 Index 5/5, flood queue length @ Next. 0x0(8)/0x9(0) Last flood scan length is 1, maximum is 2 Last flood scan time is 6 msec, maximum is © msec Neighbor Count is 1, Adjacent neighbor count is 1 ‘Adjacent with neighbor 10.3.3.3 Suppress hello for © neighbor(s) * Process IP cla OSPF c6 thé duge dat tir 1-65535 va c6 gid tri local d6i v6i router. + Area IP cla OSPF duge dat ttr 0 d&n 2432, c6 thé d&t theo s6 thap phan hoac gidng nhu sé IP, trong dé Area 0 dugc goi la backbon Area, Céc router gtii hello packet dé duy tri m6i lign hé v6i céc router OSPF Khac, chiing git 10 gidy m6t lan trén int serial va ethernet. [riieb Ip ospf packet 7 OSPF packet debugging is on rov. v:2 t:1 1:48 rid:10.2.3.2 chk:€294 aut:0 auk: from Seriale rat 98:12:46: OSPF: rev. v:2 t:4 1:48 rid:19.3.3.3 ‘aid:0.0.0.0 chk:£292 aut:0 auk: from Serial1 rat 93:12:21: OSPF: rev. v:2 t:1 1:48 rid:10.2.9.2 aid:0.0.0.0 chk:E204 from Seriale rat 93:12:26: OSPF: rev. v:2 tr aid:0.0.0.9 chk:€292 19.3.3.3 from Serial rat 93:12:31: OSPF: rev. v:2 t:1 1:48 rid:10.2.3.2 ‘aid:0.0.0.0 chk:E294 aut: auk: from Seriale rat 93:12:36: OSPF: rev. v:2 t:1 1:48 rid:19.9.9.3 aid:0.0.0.0 chk:E202 aut: auk: from Serial1 Ti OMT75 PF TRONG MULT! D6i v6i cic mai trudng truyén théng multiaccess (ethernet hodc framerelay), cdc router 6 kha nding lign lac tric ti8p v6i céc router cdn lai do dé céc router khdng thé quan ly dU10c viée update. Trong trudng hop nay OSPF chon ra m6t router lim DR va mét lam BDR dé tao ra diém tap trung update, DR s@ phan phan ph6i lai cdc thong tin d6 dén céc router khiéc (DROther). Loop 1: 10.1.1.1/24 Loop 2: 10.1.2.1/24 Loop 3: 10.1.3.1/24 EO :10.10.X.1/24 Loop 4: 10.2.1.2/24 Loop 4: 10.3.1.3/24 Loop 2: 10.2.2.2/24 Loop 2: 10.3.2.3/24 Loop 3: 10.2.3.2/24 Loop 3: 10.3.3./24 So 46 ni day va dia chi IP Trong lab nay yéu cdu ban thye hién truéc cdc céu 1énh sau trén cd RI, R2 va RB: ri(config)#no ip routing ra(contig)#ip routing ri(config)#int so ra(config-if)#no ip add ri(config-if)#shut ra(config)#ine si r1(config-if)#no ip add ri(config-if)#shut ra(contigh#ine 0 rA(contig-if )#ip add 10.10."%".1 255.255.255.0 ra(contig-if)ano shut Tham s6 "x" 1a than s6 duoc gido vién cung c&p, duge dat khac nhau dé tranh trugng hop tring so IP ADD.("x” 1a sé nhom cua ban) Cu hinh tai RL: ri(config)#router_ospf 168 rA(config-router )énet 1.0.0.0 0.255.255.255 a @76 Céu hinh tai R2: R2(config router ospf 100 R2(config-router)#net 10.9.0.0 0.255.255.255 a 0 Cu hinh tai R3: R3(config yerouter ospF 100 R3(config-router)#met 10.9.0.0 0.255.255.255 a 0 Database tai R1: rash ip cospf data OSPF Router with ID (10.1.3.1) (Process 1D 108) Link 1D count 19.1.3. 19.2 A 13.2 10.3.3.3 Link 1D 10.10.1.3 Router Link States (Area 0) ADV Router Age seqe 10.1.3.1 m1 exae900003 oxBecr 10.2.3.2 a @x80000002 Ox3F37 10.3.3.3 58 ex80000002 OxcBoF Net Link States (Area 0) ADV Router Age Seqit Checksum 0.3.3.3 50 x8e000002 Ox7D5F checksum Link 4 4 4 ‘Trén R1 khOng chi cé cc router link state, ngoai ra cbn c6 Net link state do DR gt rivsh ip osp? nei Neighbor ID Pri State Dead Time Address Interface 10.3.3.3 4 FULL/OR 16.10.1.3 Etherneto 10.2.3.2 4 FULL/B0R 10.10.1.2 Etherneto r2ush ip ospt nei Neighbor ID Pri State Dead Time Address Interface 19.1.3.1 4 FULL/DROTHER 16.19.1.1 Etherneto 10.3.3.3 a FULL/OR 16.19.1.3 Etherneto ravah ip osp nei Neighbor ID Pri state Dead Time Address Interface 10.2.3.2 4 FULL/EDR 90:00:39 © 16.18.1.2 Etherneto 10.1.3.1 1__FULL/DROTHER 0 210.10... Etherneto ‘Trong so d6 cdu hinh tén ta nhan thay R3 la DR, R2 la BDR cén R1 la DROTHER. OSPF chon céc router kim DR hoe BDR dua trén céc router ID, v6i s6 IP cing 16n cing uutién, ap www masterico com,7 STANDARD ACCESS-LIS- Strandard access-list chi ¢6 thé 19c dé cho phép hodic cm céc packet dyfatrén dia chi source ctia packet 46. Viéc cu hinh access-list phai thyc hién hai giai doan: + Céu hinh tao access-lits = Apply access-lits vao interface Loop 4: 10.1.1.1/24 Loop 2: 10.1.2.1/24 Loop 3: 10.1.3.1/24 $0 :10.12.0.1/24 $1: 10.13.0.1/24 DCE $0 :10.12.0,2124 $1:10.13.0.3/24 $1 :10.23.0.2/24 DCE Loop 1: 10.2.1.2/24 Loop 2: 10.2.2.2/24 Loop 3: 10.23.2124 $0 :10.23.0.3/24 Loop 1: 10.3.1.3/24 Loop 2: 10.3.2.3/24 Loop 3: 10.3.3.3/24 chi IP Trong lab nay yéu c&u ban thy hién wrut6c cdc cau Iénh trong phn XOA CAU HIN ROUTER trang 19, sau d6 thute hién ti€p phan TOM TAT trangi7. Tutu ¢ khidts6 1P_ ADD theo so dé, Han ché tham khdo tai liéu trong khi thyc hin cdc lénh cit. So d6 néi day va Dé cdc router trong sO d6 cé kha nang routing, ta cdu hinh RIP. Dé dé thy hién, ta ding cfc cau 1énh saw: R’x" (contig)#router RIP R’x"(contig-router)#net 10.0.0.0 Rx" (contig-router }#end RXTE Kiém tra bang 1énh SH IP ROUTE. Cac routing table phai cé dU 12 Subnet. ‘Trong bai lab nay yéu cdu cn cé hai ngudi cing thu hién. + Goi RX 18 router hién tai cla ban dang két ni * Goi RY la router cia d6i tac. ‘Thu hién access-list nhu'sau: ‘© Cam khing cho dia chi LOOPI ctia RY lin lac v6i bat ky sO TP ndo cia RX + Tat cd cdc sO IP khéc phi lién lac binh thuéng. ‘Thue hién trén RX: R°X" (config)#access-list 1 deny host 10.Y.4.¥ RX" (config)#access-list 1 permit anya) RX" (config-if)#ip access-group 1 in RYX"(config)#int 5 1 Rvx"(config-if)#ip access-group 1 in RMX" (config-if)#end Sau khi Jim xong, ta thy hin 1énh PING tif RY, két qua thinh céng vi default lénh PING sé ding dia chi IP ADD cia OUTGOING interface dé lam dia chi SOURCE do 46 € kiém tra kt qua ctia access-list, ta ding Iénh PING véi extended command. Géic k6t qua du6i day dug thy hién trén cic router R_A va R_B. trong d6 X=1=R_A; Y=2-R_B ‘Ding lénh Ping v6i cdc théng s6 thém vao dia chi source dé kiém tra tht két qua: R_Beping Protocol [ip]: Target IP addres: Repeat count [5]: Datagram size [100]: Timeout in seconds [2]: Extended commands [n]: yes Source address or interface: 10.2.2.2 Type of service [8]: Set DF bit in IP header? [no]: validate reply data? [no]: Data pattern [@xABCD]: Loose, Strict, Record, Timestamp, Verbose{none]: ‘sweep’ range of sizes [n]: Type escape sequence to abort. Sending 5, 100-byte ICMP Echoes to 10.1.1.1, timeout is 2 seconds: Ht Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/32 ms REF 19.4.4.1 R_BHping Protocol [ip]: Target IP addres: Repeat count [5] Datagram size [168]: Timeout in seconds [2]: Extended commands [n]: yes Source address or interface: 10.2.1.2 Type of service [8]: Set DF bit in IP header? [no]: Validate reply data? [no]: Data pattern [@xABCD] : Loose, Strict, Record, Timestamp, Verbose[none]: ‘Sweep range of sizes [n]: ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echoes to 10.1.1.1, timeout is 2 seconds: v.u.U Success rate is @ percent (0/5) 19.4.4.4 Trong cing hic d6, debug tai R_A: mAb TMP: echo reply sent, sre 0.4.4.4, dst 10. TONP: echo reply sent, src 30.1.1-1, dst 19 TowP: echo reply sent, sre 10.1.2.1, dst 19. 2.2.2 2.2.2 2.212 LLL TTT79 echo reply Sent, sre 0.1.1.1, dst 10.2.2 echo reply sent, sre 19.1.1:2, dst 10.2.2 ‘dst (10.1.1.1) administratively prohibited unreachable sent to 10.2.1.2 dst (1.1.1.1) administratively prohibited unreachable sent to 20.2.2.2 dst (1.1.1.1) administratively prohibited unreachable sent to 10.2.1.2 DUNG STANDARD ACCESS-LIST BE CAM TELNET: Standard access-list khéng diing d filter port do d6 d€ chéin telnet vao router, ta phai dimg access-list va apply én line TY. Thutc hién hai bai lab: ‘Trong 2 bai lab nay yéu cu cd c6 hai ngudi cing thy hién, © Goi RX 1A router hin tai ctia ban dang két n6i. © GOIRY 18 router ctla di tic. A. ‘Thue hin access-list nhut sa © Cam khéng cho dia chi LOOP? cla RY telnet vao RX + Tét cd cac s6 IP khac phi lién lac binh thu@ng. Thie hién trén RX: RX" (config)#access-1ist 18 deny host 10.¥.2.¥ R”X"(config)#access-list 16 permit any RYX"(config)#line vty 6 4 RX" (config-Line)#acces: RYX" (config-Line)#end lass 10 in c Ciing nhu trutdng hop trén, ta phdi ding cau lénh ip telnet source-interface loop 2 tai RLY 8 chi dinh source cho router RY telnet: LOOP2 cla RY khéng thé telnet vio RX: RBHcont t R_B(config)#ip telnet source-interface loop 2 RB(contig)#%z RB#i0.1.2.4 Trying 1.1.2.1... % Connection refused by remote host Rpt Ding cu 1énh ip telnet source-interface loop 1 tai RY dé chi dinh source cho router RY telnet, LOOP! ctia RY telnet vao RX binh thutng R Bacon? t RB(config)#ip telnet source-interface loop 1 R_B(config)#Az R.B#10.1.2.1 ‘Trying 10.1.2.4 ... open Raq [connection to 19.1.2.1 closed by foreign host] R_BHconf t* Chi cho duy nh&t dia chi LOOP3 ctla RY telnet vao RX * c&m tat cd cac 36 IP khdc telnet vao router RX + Tat ca céc 86 IP khéc phai lin lac binh thuding ‘Thyc hién wén RX: RX" (config)#access-List 20 permit host 10.Y.3.Y R"Xx"(config)#line vty 0 4 RX" (config-line)#access-class 20 in RX" (config-line)¥end Cc két qua du6i day du¢c thy hién trén céc router R_A va R_B. trong d6 X: Y=2-R_B A; Kim tra gi6ng trong trung hgp A, Ding cau lénh ip telnet source-interface loop 3 tai RLY dé chi dinh source cho router RY telnet, LOOP3 cila RY telnet vo RX binh thuOng: R_B(config)#ip telnet source-interface loop 3 R_B(config)#*Z RB#10.1.2.1 Trying 10.1.2.1 RAS RAG Open [Connection to 19.1.2.1 closed by foreign host] Ree Ding cau lénh ip telnet source-interface loop 1 tai T_Y a€ chi dinh source cho router RY telnet, LOOP! ctia RY khdng thé telnet vao RX : B(config)#ip telnet source-interface loop 1 R_B(config)#AZ RBH10.2.2.1 Trying 16.1.2.1 ... % Connection refused by renote host Ree RBHiconf t R_B(config)#ip telnet source-interface loop 2 R_B(config)#AZ RBH10.2.2.1. Trying 10.1.2.1 ... % Connection refused by remote host Ree Céc cau lénh ding dé kiém tra cau hinh access-list: RAush access-list Standard IP access list 19 deny 10.2.2.2 permit any Standard IP access list 20 permit 10.2.3.2 RAlsh Line Tty Typ -Tx/Rx A Modem Roty AccO AccI Uses Noise overruns, LLL TTT81 =o cy > >_> OO 4 e/a Line a is currently invalid Line 2 is currently invalid Line 3 is currently invalid jot NX 9806/9680 = s = = @ 8 0/0 RA#sh ip int s Seriale is up, line protocol is up Internet address is 10.12.0.1/24 Broadcast address is 255.255.255.255 Address determined by setup command MTU is 1500 bytes Helper address is not set Directed broadcast forwarding is enabled Multicast reserved groups joined: 224.0.¢.9 Outgoing access list is not set82 EXTENDED ACCESS-LIS’ Extended access-list cho phép ta kiém tra va chin céc packet da trén dja chi source, source port, dia chi dich va port cia dich d&n, do d6 ta c6 thé chi dinh cm hodc cho phép d6i v6i ttng applycation, Ding lai so d6 s6 IP nhu trudng hgp standard access-list. Loop 4: 10.1.1.1/24 Loop 2: 10.1.2.1/24 Loop 3: 10.1.3.1/24 $1: 10.13.0.1/24 $0 :10.12.0.1/24 DCE DCE $0 :10.12.0,2/24 $1:10.13,0.3/24 $1 :10.23.0.2/24 SO :10.23.0.3/24 DCE Loop 1: 10.2.1.2/24 Loop 1: 10.3.1.3/24 Loop 2: 10.2.2.2/24 Loop 2: 10.3.2.3/24 Loop 3: 10.3.3.3/24 Loop 3: 10.2.3.2/24 So d6 nGi day va dia chi IP Trong lab nay yéu cu ban thu hién true céc cau Iénh trong phan XOA CAU HINH ROUTER trang 19, sau d6 thute hién iép phan TOM TAT trang17. Lutuy Khi d@ts6 IP. ADD theo so’d6, Han ché tham khdo tai liu trong khi thutc hign cdc 16nh ca. Dé cac router trong so d6 cé kha nang routing, ta cu hinh RIP. Bé dé thuc hién, ta dig céc cau lénh sau: RYX" (config)#router RIP RYX" (config-router)#net 10.9.0.0 YX" (config-router )#end RIK ‘Kiém tra bang lénh SH IP ROUTE. Cac routing table phai co dU 12 Subnet. Trong bai lab nay yéu cu cn c6 hai ngudi cing thy hién. + Goi RX [A router hién tai cia ban dang két nd. + GOI RY 18 router ctla d6i tac. A. Thutc hign access-list nhur sau: * Cam khéng cho dia chi LOOP2 ctia RY telnet vio LOOP2 va LOOP3 cla RX Tat ca cdc 6 IP khéc phai lién lac binh thudng.(déu telnet duge vio cdc sO ip con lai ca RX) Thuc hién wén RX: [ RX" (config)#access-list 100 deny TCP host 10.¥.2.¥ host 10.X.2.X eq 23 | SLL TT TTT83 WH" (confighfaccess-List 160 deny ToP host 16.V.2.V host 10-K.5.% 6q 23 R°x" (config}#access-list 160 permit IP any any Rx" (config)#int s 0 R°X" (config-if)#ip access-group 169 in Rex" (config)#int s 1 R°x" (config-if )#ip access-group 100 in R°x" (config- it) end Céc két qua dui diy duge thc hién trén cdc router R_A va R_B. trong 46, Y=2-R_B Ciing nhu céc truting hgp trén, ta phai ding cu I€nh ip telnet source-interface loop 2 46 chi dinh source cho router RY, R_Y khdng thé telnet vioLOOP2 va LOOP3 tia RX |R.B(config)#ip tel sour loop 2 ] R B(contig)#Az RB#i0.1.4.4 7/6uge phép telnet vao loop1 cua RA Trying 10.1.1.1 ... open Raq [Connection to 19.1.1.1 closed by foreign host] RBH10.1.2.1 ‘Trying 10.4.2.1 ... % Destination unreachable; gateway or host down RB#10.1.3.1 //khOng dugc telnet vao loop2 va loops cia RA Trying 10-1.3.1 ... % Destination unreachable; gateway or host down Ree ‘Thuc hién access-list nhut sa + Chicho duy nhat dja chi LOOP3 cla RY telnet vio LOOP1 cla RX + cm tat ca cac 36 IP khac telnet vao router LOOP1 ca RX + Tat cd céc s6 IP khac phi lién lac binh thu@ng. ‘Thu hién wen RX: RX" (config)faccess-list 110 permit TCP host 40.V.3.¥ host 10. R°x"(config)#access-list 110 deny TcP any host 10.X.1.X eq 23 R’X" (config)#access-list 140 permit IP any any R°X"(config)#int s 0 RYX"(config-if)#ip access-group 110 in R°X" (config)#int s 1 RYX"(config-if)#ip access-group 110 in RYX" (contig-if )#end Tak eq 25 Ciing nhu céc trung hgp trén, ta phai diing cau lénh ip telnet source-interface loop 3.48 chi dinh source cho router RY telnet, R_Y dUgc phép telnet vio loop! cla R_X: |R.B(config)#ip tel sour loop 3 ] R-B(config) AZ Ripe RBH10.1.1.1 Trying 10.4.1.4 ... open | RAG IEE TOM[Connection to 19.1.1. closed by foreign host] Ree Ding cau lénh ip telnet source-interface loop 1 dé chi dinh source cho router RY telnet, R_Y khdng thé telnet vio loop! cia R_X: R_B(config)#ip tel sour loop 4 R_B(contig)#AZ RBHO.1.1.4 Trying 10.3.3.1 ... % Destination unreachable; gateway or host down 7/ khong thé telnet vao loop 1 cla RA // RB#10.1.2.1 %SYS-5-CONFIG_I: Configured from console by console RBHI0.1.2.1 Trying 10.1.2.1 ... open //vn telnet binh thudng vao loop2 cia RA RAG [Connection to 19.1.2.1 closed by foreign host]a5 BALTAP ACCESS-LIS 80:10.120.0/13, $0 10.10,0.0/13 $1:10.23.0.0/13 Loop 1: 10.256.18.2/20 Loop 4: 10.258.7.1/22 Loop 1: 10.255 50.220 Loop 2: 10.255.172.2/21 Loop 2: 10.255:202.1/22 Loop 2: 10.255.70.2/21 Loop 3: 10.255.34.2121 Loop 3: 10.258.130.1/22 Loop 3: 10.255 247.2/21 So d6 nGi day va dia chi IP rong lab nay yéu cau ban thyc hién wru6e cde cdu Iénh trong phain XOA Au HINH ROUTER trang 19, sau dé thy hién ti€p phan TOM TAT trang17. Lutuy khi dat s6 IP_ ADD theo so’d6. Han ché tham khdo tai liéu trong Khi thufc hién céic I6nh ca, + TaiRA: Cdm khéng cho toan b6 Subnet Loop! cla R_B telnet vio Loop1 cla R_A Cm khong cho toan bd Subnet Loop ctia R_C lién lac v6i Loopl ctia R_A Cm khéng cho bat ky s6 IP nao khac véi NET 10.0.0.0 dugc lién lac véi R_A. Tat cd céc loai traffic trong toin hé thong déu hoat d6ng binh thuting. + TaiRB: ‘Cm khong cho toan b6 Subnet Loop2 cla R_A telnet vao Loop2 ca R_B ‘Cdm khéng cho toan bd Subnet Loop2 cla R_C lién lac v6i Loop2 cia R_B Cm khong cho bat ky s6 IP nao khdc v6i NET 10.0.0.0 dugc lién lac v6i R_B Tat c cic loai traffic trong ton hé thdng déu hoat dong binh thung. + TaiRC: (Cdm khéng cho toan b6 Subnet Loop3 cla R_A telnet vao Loop3 cla R_C Cm Khong cho toan bd Subnet Loop3 ctia R_C lién lac v6i Loop cia R_C Cam khéng cho bat ky s6 IP nao khdc véi NET 10.0.0.0 duge lién lac voi R_C ‘Tt c céc loai traffic trong toin hé th6ng déu hoat dng binh thutng. o Yéu cu chung: Lam duy nhat m6t name access-list t8n Access-list khng dai hon 3 hing .ai_tap_access_listNAT: DE cdc may PC trong mang LAN c6 thé lién lac véi céc may tinh khéc trén thé gidi, chting phai c6 mét s6 IP dé ding lam dia chi lién lac v6i bén ngoai. Piéu nay hau nhu khong thé thc hién dugc v6i IP V.4. Do dé cdc PC trong mang LAN duge dat 6 IP private, day Ii cdc s6 IP khdng hgp 16 trén Internet (khong thé routing bang cac s6 nay). Trén thyc t6, céc PC trong mang LAN sé lign lac ra internet bang hai céch: Proxy server, ho&c NAT. Ding Proxy sé gp nhiéu kh6 khan trong vic tong thich v6i cic application khéc nhau. Céch ding NAT dugc (tg dung rng rai hon vi uu diém tong thich v6i rt nhiéu Application. Trong chuOng trinh CCNA ta hoc cach thy hién hai loai NAT la Dynamic NAT va Static NAT. DCE Net from ISP: 203.162.Z.0/24 0 :192.168.2.2/24] E0 :192.168.2.3/24, So d6 nGi day va dia chi IP Trong lab nay yéu cu ban thyte hién trur6c cdc cau Iénh trong phn XOA CAU HINH ROUTER trang 19, sau d6 thutc hién tiép phéin TOM TAT trang17. Luuy khi d@its@ IP. ADD theo so’d6, Han ché tham khdo tai liéu trong khi thutc hién céc 16nh ci.”Z” Ia tham s6 do gido vién cung cp cho ban dé trénh trubng hop tring sO IP.("2" 1a sé nhom cua ban) Trong cdc vi dy va cdc céu lénh durgc thé hién trong phan nay du thyc hién vot tham sO “Z”=1, trong bai thue hank tai IGp hoc, “2” sé duge gido vién cung cdp cho thing nhém d@ tranh truréng hgp tring s6 IP ‘Trong so 46 nay, R_A gid lp lam ISP. R_A c6 ip add 210.10.Z.1 18 IP n6i tryc tip voi router khach hang 1a R_B con s6 65,5.z.1 1a s6 IP gid lap bat ky tén Internet. R_B la router khdch hang, cé m6t interface SO ni vi ISP cdn E0 thi néi vao mang LAN. R_C 1a router dU9¢ gid lp nhu la mt PC trong mang LAN, chi c6 int EO néi vao LAN va chia7 €6 dia chi private. Net from ISP 203.162.2.0/24 dugc gid lap la NET_ID ma ISP cung, cp cho khach hang. Sau khi cu hinh xong s6 ip add, cfc router phai hoat déng duge mh sau: + _R_Bping duge R_C va SO cla R_A Ropap 192.168.1.3 Type escape sequence to abort. Sending 5, 196-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds: Success rate is 169 percent (5/5), round-trip min/avg/max = 4/4/4 ms RBHp 210.10.1.2 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 210.16.1.1, timeout is 2 seconds: rn Success rate is 160 percent (5/5), round-trip min/avg/max = 28/31/32 ms + R_C khéng thé ping dude $0 cla R_B vi thiéu théng s6 trong bang routing, hién nhién kh6ng ping dugc $0 ctla R_A RCHp 210.10.1.2 Type escape sequence to abort. Sending 5, 106-byte ICMP Echos to 210.16.1.2, timeout is 2 seconds Success rate is @ percent (0/5) RC#p 210.10.1.1 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 210.16.1.1, timeout is 2 seconds: Success rate is 0 percent (0/5) +R Bkhong ping duge LOO 1 cia R_A cfing vil do tuong ty RBHp 6.5.1.1 Type escape sequence to abort. Sending 5, 100-byte ICHP Echos to 65.5.1.4, timeout is 2 seconds: cess rate is 0 percent (0/5) Cu hinh tiép theo tai RA, R_B va R_C dé céc router nay c6 kha nang routing binh thudng: + RC d&tdefault route vé R_B Rcecont t RC(config)#ip route + _R_B dat default route v8 R_A. RBHcont t R.B(config)#ip route 2. @. 0.0 210.10.1.1 + _R_A dt static route cho NET_ID 203.162.7.0/24 RAiconf t RA(config)#ip route 203.162.1.0 255.255.255.0 so Sau khi lam xong bu6e nay thi céc router hoat dng nhu sau:88 + _R_C ping duge $0 ctla R_B villic nay R_C c6 default gateway 18 R_B. RC#p 210.10.1.2 ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 219.10.1.2, timeout is 2 seconds: Success rate is 199 percent (5/5), round-trip min/avg/max = 4/4/4 ms + _R_B ping duge LOO 1 cla R_A. RB#p 65.5.4.4 ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 65.5.1.1, timeout is 2 seconds: THLE Success rate is 199 percent (5/5), round-trip min/avg/max = 28/31/32 ms * R_Akhdng thé ping duc E0 cla cd R_B ln R_C vi day la cc dia chi private address, 1a céc dja chi khéng nhin thy dugc béi Intemet. RAM 192,168.1.3 ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds: Success rate is @ percent (0/5) * H@ qua tat yéu la R_C khéng c6 kha nang lién lac v6i SO va LOO 1 cUa RLA Khong phai vi RC hoa R_B khéng routing dugc ma do R_A khéng biét dudng agi tra 10% cc packet a6. RCHp 210.10.4.4 ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 219.19.1.1, timeout is 2 seconds: Success rate is @ percent (0/5) RC#p 65.5.1.1 ‘Type escape sequence to abort. Sending 5, 106-byte ICMP Echos to 65.5.1.1, timeout is 2 seconds: Success rate is @ percent (0/5) CUNG LUC B6 R_A#debug ip icmp ICMP packet debugging is on echo reply sent, sre 210.10.1.1, dst 192.168.1.3 echo reply sent, src 210.10.1.1, dst echo reply sent, sro 210.10.1.4, dst echo reply sent, src 219.10.1.1, dst echo reply sent, sro 210.10.1.1, dst echo reply sent, src 65.5.1.1, dst echo reply sent, src 65.5.1.1, dst echo reply sent, sre 65.5.1.1, echo reply sent, src 65.5.1.1, dst : echo reply sent, src 65.5.1.1, dst SLL TT TTT89 Mu6n R_Clién lac duoc v6i cic s6 IP bén ngoai, thurc hign Dynamic NAT tai R_B. C6 thé thu hién theo hai céch: 1, PAT hod con ggi la Overloading: RB(config)#int s 0 R._Bconfig-if)#ip nat outside R_B(config-if)#int © 0 R B(config-if)#ip nat inside R_B(config-if )Hexit R_B(config)#access-list 1 per 192.168.1.9 0.0.0.255 R_B(config)#ip nat inside source list 1 int s® overload ‘Sau khi thy hién céc cau Jénh trén tai R_B, R_C di c6 kha ning lign lac v6i RA R.cHp 210.16.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 210.10.1.1, timeout is 2 seconds: Success rate is 169 percent (5/5), round-trip min/avg/max Rc#p 65.5.1.1 40/40/44 ms Type escape sequence to abort. Sending 5, 166-byte ICHP Echos to 65.5.1.1, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 40/40/40 ms Trong cing thdi_diém nay Rae ICNP: echo reply sent, sre 210.1.1.1, ICNP: echo reply sent, src 210.10.1.1, dst 210.10-1. ICMP: echo reply sent, src 216.10.1.1, dst 210.10.1.2 ICMP: echo reply sent, src 210.10.1.1, dst 210.10.1.2 ICMP: echo reply sent, src 216.10.1.1, dst 210.10.1.2 : ICMP: echo reply sent, sro 65.5.1,1, dst 220.20.1.2 ICMP? echo reply sent, src 65.5.1.1, dst 210-10.1.2 ICMP: echo reply sent, src 65.5.1.1, dst 210.10.1.2 ICMP? echo reply sent, src 65.5.1.1, dst 210.10.1.2 ICMP: echo reply sent, src 65.5.1.1, dst 210.10.1.2 Re#sh ip nat trans Pro Inside global Inside local Outside local outside global icmp 210.40.4.2:8777 192,168.1.3:8777 65.5.4.1i5777 65.5.4.1:8777 om 210.10.1-2:5778 102.168.1.3:5778 65.5.1.1:5778 65.5.1.1:5778 icmp 5779 192.168.1.3:5779 65.5.1.1:5779 icmp 5788 192.168.1.3:5780 65.5.1.1:5780 icmp (218781 192.168.113:5781 65.5.1.1:5781 emp ‘226551 192.168-1.3:6551 210.10.1,1:6551 icmp 210.10.1/2:6852 192,168.1.3:6552 210.10.1,1:6562 icmp 8553 192.168.1.3:6553 249.10.1.1:6553 icmp 6554 192.168:1.3:6554 219.10.1.1:6554 icmp 6555 192.168.1.3:6555 219.10.1.1:6555 2. Dynamic NAT ‘Trong trudng hOp t6ng quat hn, c6 thé cdu hinh NAT trén céc s6 IP ca ISP cung cdp cho khdch hang. Diéu nay cho phép m6 rOng thém kha nang hoat d6ng cla NAT. Trong 86 46 NET 203.162.Z.0/24 la cdc s6 IP do ISP cung cdp, ta cdu hinh NAT trén 10 s6 dau ‘tin (203. 162.2. 1-203.162.Z..10). thc hién céc lénh sau tai R_B: ([R.pecle ip nat trans * 190 RBrcont t R-8(config)#no ip nat inside source list 1 int s8 overload R_B(config)#ip nat pool abc 203.162.1.1 203.162.1.10 netmask 255.255.255.0 RB(config)#ip nat inside source 14st 1 pool abe overload Rcup 210.10.4.4 Type escape sequence to abort Sending 5, 106-byte ICMP Echos to 210.10.1.1, timeout is 2 seconds: Success rate is 190 percent (5/5), round-trip min/avg/max = 49/49/44 ms RC#p 65.5.1.1 Type escape sequence to abort Sending 5, 100-byte ICMP Echos to 65.5.1.1, timeout is 2 seconds: Success rate is 190 percent (5/5), round-trip min/avg/max = 49/49/40 ms RAE 01:56:01: ICMP: echo reply sent, sre 210.10.1.1, dst 203.162.1.1 ICMP: echo reply sent, src 210.10.1.1, dst 203.162.1.1 ICMP: echo reply sent, src 210.10.1.1, dst 203.162.1.4 ICMP: echo reply sent, src 210.10.1.1, dst 203.162.1.1 ICMP: echo reply sent, src 210.19.1.1, dst 203.162.1.1 echo reply sent, sre 65.5.1.1, dst 203.162.1.1 echo reply sent, src 65.5.1.1, dst 203.162.1.1 echo reply sent, src 65.5.1.1, dst 203.162.1.1 echo reply sent, src 65.5.1.1, dst 203.162.1.1 echo reply sent, src 65.5.1.1, dst 203.162.1.1 Bish ip nat trans Pro Inside global Inside local Qutside local outside global omp 203.462.4.1:4358 192.168.1.3:4358, 65.5.1,14358 icmp 203-162-1.1:4359 192.168.1.3:4359 : cmp 203.162:1.1:4360 192.168.1.3:4360 ai iomp 203:162/1.1:4361 192.168.1.3:4361 4: iomp 203:162:1.1:4362 _ 192.168.1.3:4362 4i cmp 203.162.1.2:9058 192.168.1.3:0058, ee icmp 203:162-1.1:9059 192.168.1-3:0059 ho: iomp 203.162.1.1:9060 192.168,1.3:9860 "10.1. icmp 203:162:1.1:9061 192.168.1.3:9861 "10.4. icmp 203.162.1.1:9062 _ 192.168,1.3:9862 "10.4. Trong truréng hop R_C duoc gia lap la mét WEB server, dé né duoc truy cp boi cdc PC Khéc trén Internet thi né phai c6 mt dja chi IP hop 16 (s6 IP ma ISP cung cap). Ta ding static NAT dé thu hién céng viéc nay: R_B#cont t R.B(config)#ino ip nat inside source list 1 pool abc overload R_B(config)#ip nat inside source static 192.168.1.3 203.162.1.100 R_B(config)#end RBewr R Béreload R_Biish ip nat tran Pro Inside global Inside local outside local outside global 203.162.1.106 192.168.1.3 Es ap www masterico com, mT mo1 Tai R_A va cdc IP bat ky trén Internet, ta 06 thé truy cap vao R_C bang sé 203.162.2100. R AHP 203.162.1.400 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 203.162.1.109, timeout is 2 seconds: HHI Success rate is 169 percent (5/5), round-trip min/avg/max = 36/37/48 ms RAitelnet 203.162.1.100 Trying 203.162.1.190 ... Open Rc>exit [Connection to 203.162.1.190 closed by foreign host] RAtconf t Enter configuration commands, one per line. RA(config)#ip telnet source-interface loo 1 R_A(config)#4z RAtelnet 203.162.1.100 Trying 203.162.1.190... Open End with CNTL/Z. Ro>exit [Connection to 203.162.1.199 closed by foreign host] Rat Tai R_C ta lai thdy R_A gli packet tryc tiép dn dia chi la 192.168.Z.3, Dé la do R_B da d6i s6 IP ca dich d€n tty $6 203.162.Z.100 thanh 192.168.Z.3 Rcideb ip packet TP packet debugging is on Jen 44, revd 3 44, Jen =218.10.1.1 (Etherneto), d=192.168.1.3 (Etherneto), 2-168.1.3 (local), d=210.10.4.4 (Ethernet), len 119.4.4 (Ethernet), "10111 (Etherneto), 2.268.1.3 (Ethernet), 168:1.3 (Etherneto), 113 (Etherneto), en len sending 40, revd 3 49, revd 3 40, revd 3 2. 2 (Etherneto), len 4 (Etherneto), len 4 (Etherneto), len 52, sending 48, sending 43, sending [168.4.9 (leeal), +168.4-3 (local), 8 0 0.19.14 (Ethernet), 2. 2. 2.468.4.3 (local), 36 2 4 3 Jen 44, Jen Jen len 52, 46, 43, 4a, revd 3 sending 49, revd 3 49, revd 3 40, revd 3 sending sending sending -5.4.4 (Ethernet), d=192.168.1.3 (Etherneto), 2.468.1.3 (local), d=65.8.1. (Ethernet), len 5.4.4 (Ethernet), d=192.168.1.3 (Ethernet), ‘1.4 (Etherneto), d=192.168.413 (Etherneto), 4 (Ethernet®), d=192.168.1.3 (Etherneto), 8.1/3 (local), 'd=65.5.1.1 (Ethernet), len 98.1.3 (local), d=65.5.1.2 (Etherneta), len 38.4.3 (local), d=65.5.1.1 (Ethernet), len 5.4.4 (Ethernet), o=192:168.1.3 01:15:45: 01:15:45: 5 5.1, 18 6 16 : K6t n6i t&t c cic router cla cdc nh6m khdc nhau lai thanh mt hé théng l6n, Tat cd céc router ca cic nhém d6i tén router nhUr sau: R_A_NZ, R_B_NZ, R_C_NZ. Z lis6 nhém cia ban. Cau hinh Dynamic Routing tai céc router R_A_NZ, hic nay tat c€ cac router du c6 kha ning lién lac v6i tt c céc router | ‘rong céc nhém khéc. Vi du: dé telnet vio R_C_NZ ctia nhém khéc, ta sé telnet vio sO 203.162.2.1009293 PPP: Usemame: RB, pass nhatnghe Usemame: RC, pass masteritco $1:192.168.2.1/24 80:192.168.1.1/24 DCE DCE so st 192. 168.1.2/24 192.168.2.2 (24 RB RC Usemame: RA, pass nhatnghe Usemame: RA, pass masteritco So d6 nGi day va dia chi IP ‘Trong lab nay yéu cau ban thute hién true cdc cau lénh trong phan XOA CAU HINH ROUTER trang 19, sau dé thu hién tip phan TOM TAT trang17. Luray khi dat s6 IP_ ADD theo so’d6, Han ché tham khao tai ligu trong khi thyc hién cdc Iénh ca. ‘rong bai LAB nay yéu cu hai router ciing thyc hién, céc k6t qua duge trich dn dU6i day duoc thu hién tai hai router RA va RB. Lam (Ong tu d6i véi RA va RC. DAt dia chi IP cho Router RA. RA(config)#INT SO RA(config-if)#ip add 192.168.1.1 255.255.255.0 RA(config-if)#clo ra 64900 RA(config-if)#no shut RA(config-if)#int s 1 RA(config-if)#ip add 192.168.2.1 255.255.255.0 RA(config-if)#clo ra 64900 RA(config-if)#no shut Dat dia chi IP cho Router RB RB(config)#int sO RB(config-if)#ip add 192.168.1.2 255.255.255.0 Ra(config-if)#no shut ‘Theo default, céc interface ctia Router Cisco sé déng géi theo HDLC94 [RAvsh int s 0 |serialo is up, line protocol is up Hardware is HD64570 Internet address is 192.168.1.1/24 MTU 1500 bytes, BW 1544 Kbit, DLY 20069 usec, rely 255/255, load 1/255 Encapsulation HOLC, loopback’ not set, keepalive set (19 sec) Last input 00:00:05, output 09:60:62, output hang never Last clearing of "show interface" counters never lRB#sh int so |serialé is up, line protocol is up Hardware is HD64570 Internet address is 192.168.1.2/24 MTU 1500 bytes, BW 1544 Kbit, DLY 20060 usec, rely 255/255, load 1/255 Encapsulation HDLC, loopback’ not set, keepalive set (10 sec) Last input 00:00:08, output 09:69:66, output hang never Last clearing of "show interface" counters never Input queue: 0/75/@ (size/max/drops); Total output drops: @ Queueing strategy: weighted fair Output queue: ©/64/0 (size/threshold/drops) Conversations 0/1 (active/max active) lRexp 192.168.1.2 iType escape sequence to abort. lsending 5, 190-byte ICMP Echoes to 192.168.1.1, timeout is 2 seconds: Isuccess rate is 199 percent (5/5), round-trip min/avg/max = 28/20/22 ms IRB ‘Théng thudng, dé tung thich hdan tan véi céc loai router khéc nhau, ngudt ta thug, chuy€n sang str dung PPP thay cho HDLC. RAcontig)#int 36 RA(config-if)#encapsulation ppp ‘Ngay sau khi vira chuyén sang str dung PPP cho interface sO cla RA, thi RA khéng thé lién lac duc RB, vi RB van dang duGc déng g6i la HDLC, ta c6 thé kiém tra bang cach. WRB ping thir RA: RBHping 192.168.1.4 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: Success rate is 9 percent (8/5) RAvsh int © 0 Serial is up, line protocol is down Hardware is’ HD64579 Internet address is 192.168.1.1/24 MTU 1589 bytes, BW 1844 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (19 sec) LCP ReQsent Closed: ipep, cdp Last input ©0:00:03, output 00:00:61, output hang never Last clearing of "show interface" counters never Ti OMT95 Input queue: 0/75/68 (size/max/drops); Total output drop: Queueing strategy: weighted fair Output queue: 0/64/9 (size/threshold/drops) Conversations @/2 (active/max active) Reserved Conversations @/@ (allocated/max allocated) 5 minute input rate © bits/sec, @ packets/sec 5 minute output rate @ bits/sec, @ packets/sec 34 packets input, 3197 bytes, @ no buffer Received 28 broadcasts, @ runts, 0 giants 1 input errors, 4 CRC, @ frame, @ overrun, @ ignored, 1 abort Bay gid, ta sé déng géi PPP cho interface s0 cla RB: Ra(config)#int s 0 R8(config-if)#encap ppp Rash int 60 Serialo is up, Line protocol is up Hardware 18/H064578 Internet address 1s 192.168.1.2/24 MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 Encapsulation PPP, loopback not set, keepalive set (10 sec) LcP Open Open: ipep, edp Last input’ 68:00:02, output 9:69:62, output hang never Last clearing of “show interface" counters never Input. queue! 6/75/8 (size/max/drops); Total output drops: © Queueing strategy: weighted fair Output queue: 0/64/90 (size/threshold/drops) Rap 102.168.1.2 Type escape sequence to abort. Sending 5, 190-byte ICMP Echoes to 192.168.1.2, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 56/57/60 ms Phuong php déng g6i PPP c6 nhiéu Iya chon thém cho c&u hinh, trong 46 06 ph&m Iya chon phuong thifc ching thy RA(config) #int sO RA(config-if)#ppp authentication chap RB(config)#int so RB(config-if)#ppp authentication chap Laic nay, RA va RB van chua lam viéc v6i nhau dude, vi chua c6 usemame va password dé chUing thu lan nhau: Kiém tra bang lénh debug ppp authentication RAW PPP Serialo: PPP Serialo PPP Serialo: PPP Serialo: RAW PPP Serialo: Send CHAP challenge id= PPP SerialO: CHAP challenge from RB PPP Serial0: USERNAME RB not found. Send CHAP challenge id=7 to remote CHAP challenge from RB USERNAME RB not found. Unable to authenticate for peer. to remote96 PPP Serial@: Unable to authenticate for peer. RA Tao usemame RB trén RA v6i password la: nhatnghe va tao username RA trén RB véi password nhainghe (password phai ging nhau 6 ca 2 bén la bat buéc). RAsconf t RAwusername RB password nhatnghe RBicon? t Reiusername RA password nhatnghe RA %LINK-3-UPDOWN: Interface Serial©, changed state to up PPP Serial@: Send CHAP challenge id=36 to remote PPP Serial@: CHAP challenge from RB PPP Serial@: CHAP response id=36 received from RB PPP Serial@: Send CHAP success id=36 to remote remote passed CHAP authentication. Passed CHAP authentication with remote. UPDOWN: Line protocol on Interface Serial9, changed state Ping kiém tra tht’ RAHping 192.168.1.2 Type escape sequence to abort. Sending 5, 100-byte ICNP Echos to 192.168.1.2, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max = 28/31/32 ms Dé tit kim bing thong, PPP cho phép tién hinh nén dif ligu tute kh truyén di, va idi nén dif liu khi nan dug. DE nén, ding lénh : compress stac C&u hinh compress cho RA, ping tht vai ln dén RB, sau d6 dig 1€nh show compress 48 xem théng ké vé vig nén, gidi nén, ta thay ti 16 Ia 0 vi do bén RB chuta khai bo compress: RA(config-if)#compress stac Rae 00:40:14: NSYS-5-CONFIG_I: Configured from console by console R1i3#ping 192.168.1.2 ‘Type escape sequence to abort. Sending 5, 108-byte ICNP Echos to 192.168.1.2, timeout is 2 seconds: tt Success rate is 160 percent (5/5), round-trip min/avg/max = 28/30/32 ms Ras#ping 192.168.1.2 ‘Type escape sequence to abort. Sending 5, 100-byte ICNP Echos to 192.168.1.2, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max Rig#ping 192.168.1.2 28/30/32 ms LLL TTT97 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 28/30/32 ms RAwsho compress Serialo Software compression enabled uncompressed bytes xmt/rev 0/0 1 min avg ratio xmt/rcv 9.090/0.008 5 min avg ratio xmt/rev 9.990/0.000 16 min avg ratio xmt/rcv 0.090/0.900 no bufs xmt @ no bufs rcv & resynos 0 Additional Stacker stats: Transmit bytes: Uncompressed @ Compressed = © Received bytes: Compressed = © Uncompressed = © Khai bao compress cho RB: RB(config)#int sO RB(config-if)#compress stac RB(config-if)¥shut RB(config-it)#no shut Revping 192.168.1.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.4, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 28/31/32 ms RBiiping 192.168.1.1 ‘Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: Success rate is 169 percent (5/5), round-trip min/avg/max = 28/31/32 ms RBvping 192.168.1.1 Type escape sequence to abort. Sending 5, 190-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: Success rate is 109 percent (5/5), round-trip min/avg/max = 28/31/32 ms RBisho compress Seriale Software compression enabled uncompressed bytes xmt/rev 3156/3176 1 min avg ratio xmt/rov 3.067/2.810 5 min avg ratio xmt/rcv 0.871/0.928 10 min avg ratio xmt/rcv 0.871/0.928 no bufs xmt @ no bufs rev & resynes 0 Additional Stacker Stats: Transmit bytes: Uncompressed © Compressed = 756 Received bytes: Compressed 814 Uncompressed = 0