Configuration Cisco Router

Chap. 10 CCNA 1 V7 Introduction to Networks

Basic Router Configuration Steps

The following tasks should be completed when configuring initial settings on a router.

1. Configure the device name.

Router(config)# hostname hostname

2. Secure privileged EXEC mode.

Router(config)# enable secret password

3. Secure user EXEC mode.

Router(config)# line console 0

Router(config-line)# password password
Router(config-line)# login

4. Secure remote Telnet / SSH access.

Router(config-line)# line vty 0 4

Router(config-line)# password password
Router(config-line)# login
Router(config-line)# transport input {ssh | telnet}

5. Secure all passwords in the config file.

Router(config-line)# exit
Router(config)# service password-encryption

6. Provide legal notification.

Router(config)# banner motd delimiter message delimiter

7. Save the configuration.

Router(config)# end
Router# copy running-config startup-config
Basic Router Configuration Example
In this example, router R1 in the topology diagram will be configured with initial settings.

The figure shows a network topology diagram with two PCs, two switches, two routers, and an internet
cloud. From left to right PC 1 connects to a switch which connects to R1 which connects to R2 which
connects to a second switch, which connects to PC2. PC1 is on the 192.168.10.0/24 IPv4 network and
has IPv4 address 192.168.10.10. PC1 also connects to the 2001.db8:acad:10::/64 IPv6 network and
has IPv6 address 2001:db8:acad:10::10. Router R1 G0/0/0 interface is on the same network as PC1.
The IPv4 and IPv6 address of the G0/0/0 interface of R1 is 192.168.10.1 and 2001:db8:acad:10::1. The
IPv4 network connecting R1 and R2 is 209.165.200.224/30. The IPv6 network connecting R1 and R2 is
2001:db8:feed:224::/64. R1 connects to R2 over interface G0/0/1 which has IPv4 address 209.165.200.
225 and IPv6 address 2001:db8:feed:224::1. The IP addresses for R2 on the shared network with R1
are 209.165.200. 226 and 2001:db8:feed:224::2. PC2 and R2 are connected on IPv4 network
10.1.1.0/24 and IPv6 network 2001:db8:cafe:1::/64. PC1 has IPv4 address 10.1.1.10 and IPv6 address
2001:db8:cafe::10. R2 has IPv4 address 10.1.1.1 and IPv6 address 2001:db8:cafe::1.

.10::10192.168.10.0/24.1::1G0/0/0G0/0/1.225::1.226::2.1::1209.165.200.224/3010.1.1.0/24.10::102001
:db8:acad:10::/642001:db8:feed:224::/642001:db8:cafe:1::/64PC1PC2R1R2
Internet

To configure the device name for R1, use the following commands.

Router> enable

Router# configure terminal

Enter configuration commands, one per line.

End with CNTL/Z.

Router(config)# hostname R1

R1(config)#

Note: Notice how the router prompt now displays the router hostname.

All router access should be secured. Privileged EXEC mode provides the user with complete access to
the device and its configuration. Therefore, it is the most important mode to secure.

The following commands secure privileged EXEC mode and user EXEC mode, enable Telnet and SSH
remote access, and encrypt all plaintext (i.e., user EXEC and VTY line) passwords.
 R1(config)# enable secret class

R1(config)#

R1(config)# line console 0

R1(config-line)# password cisco

R1(config-line)# login

R1(config-line)# exit

R1(config)#

R1(config)# line vty 0 4

R1(config-line)# password cisco

R1(config-line)# login

R1(config-line)# transport input ssh telnet

R1(config-line)# exit

R1(config)#

R1(config)# service password-encryption

R1(config)#

The legal notification warns users that the device should only be accessed by permitted users. Legal
notification is configured as follows.

R1(config)# banner motd #

Enter TEXT message. End with a new line and the #

***********************************************

WARNING: Unauthorized access is prohibited!

***********************************************

R1(config)#

If the previous commands were configured and the router accidently lost power, all configured
commands would be lost. For this reason, it is important to save the configuration when changes are
implemented. The following command saves the configuration to NVRAM.

R1# copy running-config startup-config

Destination filename [startup-config]?

Building configuration...

[OK]
 R1#

Configure Router Interfaces

At this point, your routers have their basic configurations. The next step is to configure their interfaces.
This is because routers are not reachable by end devices until the interfaces are configured. There are
many different types of interfaces available on Cisco routers. For example, the Cisco ISR 4321 router is
equipped with two Gigabit Ethernet interfaces:

 GigabitEthernet 0/0/0 (G0/0/0)

 GigabitEthernet 0/0/1 (G0/0/1)

The task to configure a router interface is very similar to a management SVI on a switch. Specifically, it
includes issuing the following commands:

Router(config)# interface type-and-number

Router(config-if)# description description-text
Router(config-if)# ip address ipv4-address subnet-mask
Router(config-if)# ipv6 address ipv6-address/prefix-length
Router(config-if)# no shutdown

Note: When a router interface is enabled, information messages should be displayed confirming the
enabled link.

Although the description command is not required to enable an interface, it is good practice to use it. It
can be helpful in troubleshooting on production networks by providing information about the type of
network connected. For example, if the interface connects to an ISP or service carrier,
the description command would be helpful to enter the third-party connection and contact information.

Note: The description-text is limited to 240 characters.

Using the no shutdown command activates the interface and is similar to powering on the interface.
The interface must also be connected to another device, such as a switch or a router, for the physical
layer to be active.

Note: On inter-router connections where there is no Ethernet switch, both interconnecting interfaces
must be configured and enabled.

Configure Router Interfaces Example

In this example, the directly connected interfaces of R1 in the topology diagram will be enabled.

The diagram is a network topology showing the IPv4 and IPv6 addressing of the network devices. What
follows is a description of the topology from left to right. PC1 is connected to a switch connected to router
R1. The network IPv4 address is 192.168.10.0/24 and the IPv6 address is 2001:db8:acad:10::/64. PC1 has
an address of .10 and ::10. Interface G0/0/0 on R1 has an address of .1 and ::1. R1 interface G0/0/1 is then
connected to router R2 on IPv4 network 209.165.200.224/30 and IPv6 network 2001:db8:feed:224::/64.
Interface G0/0/1 on R1 has an address of .225 and ::1. The interface on R2 has an address of .226 and ::2.
R2 is then connected to a switch which is connected to PC2 on IPv4 network 10.1.1.0/24 and IPv6 network
2001:db8:cafe:1::/64. The R2 interface has an address of .1 and ::1. PC2 has an address of .10 and ::10. R2
also has a connection to the Internet cloud.

.10::10192.168.10.0/24.1::1G0/0/0G0/0/1.225::1.226::2.1::1209.165.200.224/3010.1.1.0/24.10::102001:db8:
acad:10::/642001:db8:feed:224::/642001:db8:cafe:1::/64PC1PC2R1R2
Internet
To configure the the interfaces on R1, use the following commands.

R1> enable

R1# configure terminal

Enter configuration commands, one per line.

End with CNTL/Z.

R1(config)# interface gigabitEthernet 0/0/0

R1(config-if)# description Link to LAN

R1(config-if)# ip address 192.168.10.1 255.255.255.0

R1(config-if)# ipv6 address 2001:db8:acad:10::1/64

R1(config-if)# no shutdown

R1(config-if)# exit

R1(config)#

*Aug 1 01:43:53.435: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed

state to down

*Aug 1 01:43:56.447: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/0, changed

state to up

*Aug 1 01:43:57.447: %LINEPROTO-5-UPDOWN: Line protocol on Interface

GigabitEthernet0/0/0, changed state to up

R1(config)#

R1(config)#

R1(config)# interface gigabitEthernet 0/0/1

R1(config-if)# description Link to R2

R1(config-if)# ip address 209.165.200.225 255.255.255.252

R1(config-if)# ipv6 address 2001:db8:feed:224::1/64

R1(config-if)# no shutdown

R1(config-if)# exit

R1(config)#

*Aug 1 01:46:29.170: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed

state to down

*Aug 1 01:46:32.171: %LINK-3-UPDOWN: Interface GigabitEthernet0/0/1, changed

state to up

*Aug 1 01:46:33.171: %LINEPROTO-5-UPDOWN: Line protocol on Interface

GigabitEthernet0/0/1, changed state to up

R1(config)#

Note: Notice the informational messages informing us that G0/0/0 and G0/0/1 are enabled.

Configuration Verification Commands

The table summarizes the more popular show commands used to verify interface configuration.

Table caption

Commands Description

The output displays all interfaces, their IP addresses, and their current status. The
show ip interface
brief configured and connected interfaces should display a Status of “up” and Protocol of
show ipv6 interface “up”. Anything else would indicate a problem with either the configuration or the
brief cabling.

show ip route Displays the contents of the IP routing tables stored in RAM.
show ipv6 route

Displays statistics for all interfaces on the device. However, this command will only
show interfaces display the IPv4 addressing information.

show ip interface Displays the IPv4 statistics for all interfaces on a router.

show ipv6 interface Displays the IPv6 statistics for all interfaces on a router.