CCNA : Intro to Cisco IOS - Part 2
0 likes110 views
The document provides a comprehensive guide on basic Cisco IOS configurations, including access modes, interface management, and remote access setup using Telnet and SSH. It details various commands and processes for configuring routers and interfaces as well as for backing up and restoring configurations. The document also compares Cisco IOS syntax with Mikrotik RouterOS for better understanding.
![Basic Configuration
● Secure Remote access Telnet/SSH (VTY Password)
○ ROUTER-ME(config)#
line vty 0 4
○ ROUTER-ME(config-line)#
password mypass
○ ROUTER-ME(config-line)#
login
○ ROUTER-ME(config-line)#
exit
○ ROUTER-ME(config)#
● Encrypt All Plaintext passwords
○ ROUTER-ME(config)#service password-encryption
○ ROUTER-ME(config)#
● Provide Legal Notification on Cisco IOS (MOTD)
○ ROUTER-ME(config)#banner motd "THIS IS MY ROUTER"
TEST THE CONFIGURATION :
Press RETURN to get started!
THIS IS MY ROUTER
User Access Verification
Password:
● Save the configuration
○ ROUTER-ME#copy running-config startup-config
○ Destination filename [startup-config]? PressEnter
○ Building configuration...
○ [OK]](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-8-320.jpg)
![Display Config
● Using do command for show config
○ ROUTER-ME(config)#do show ip interface brief
○ Interface IP-Address OK? Method Status
Protocol
○ GigabitEthernet0/0/0 192.168.10.1 YES manual up up
○ GigabitEthernet0/0/1 unassigned YES unset administratively down down
○ GigabitEthernet0/0/2 unassigned YES unset administratively down down
○ Vlan1 unassigned YES unset administratively down down
○ ROUTER-ME(config)#do copy running-config startup-config
○ Destination filename [startup-config]?
○ Building configuration...
○ [OK]
○ ROUTER-ME(config)#](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-12-320.jpg)
![Configure SSH Remote
● Configure domain router
● Configure username and password login
● Configure transport input ssh on line vty
● Generate Crypto key rsa 1024
○ ROUTER-ME(config)#ip domain-name taufik.net
○ ROUTER-ME(config)#username taufik secret taufikpass
○ ROUTER-ME(config)#line vty 0 4
○ ROUTER-ME(config-line)# transport input ssh
○ ROUTER-ME(config-line)# login local
○ ROUTER-ME(config-line)# exit
○ ROUTER-ME(config)#crypto key generate rsa
○ The name for the keys will be: ROUTER-ME.taufik.net
○ Choose the size of the key modulus in the range of 360 to 2048 for your
○ General Purpose Keys. Choosing a key modulus greater than 512 may take
○ a few minutes.
○ How many bits in the modulus [512]: 1024
○ % Generating 1024 bit RSA keys, keys will be non-exportable...[OK]
○ ROUTER-ME(config)#](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-16-320.jpg)
![Backup & Restore Config
● Backup configuration
● Make sure your router can connected to TFTP Server and enable TFTP Server.
● Setting Backup from router/switch.
ROUTER-ME#copy running-config tftp:
Address or name of remote host []? 192.168.50.2 <-IP Server TFTP
Destination filename [ROUTER-ME-confg]?<-PressEnter
Writing running-config....!!
[OK - 785 bytes]
785 bytes copied in 3.004 secs (261 bytes/sec)
ROUTER-ME#](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-17-320.jpg)
![Backup & Restore Config
● Reset configuration
○ ROUTER-ME#write erase
○ Erasing the nvram filesystem will remove all configuration files!
Continue? [confirm]
○ [OK]
○ Erase of nvram: complete
○ %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram
○ ROUTER-ME#reload
○ Proceed with reload? [confirm]](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-19-320.jpg)
![Backup & Restore Config
● Restore configuration
Router#copy tftp: running-config
Address or name of remote host []? 192.168.50.2 <-IPTFTPSERVER
Source filename []? ROUTER-ME-config <-SourceFileBackupName
Destination filename [running-config]? <-PressEnter
Accessing tftp://192.168.50.2/ROUTER-ME-config...
%Error opening tftp://192.168.50.2/ROUTER-ME-config (No such file or directory)
Router#copy tftp: running-config
Address or name of remote host []? 192.168.50.2
Source filename []? ROUTER-ME-confg
Destination filename [running-config]?
Accessing tftp://192.168.50.2/ROUTER-ME-confg...
Loading ROUTER-ME-confg from 192.168.50.2: !
[OK - 785 bytes]
785 bytes copied in 0 secs
ROUTER-ME#](https://image.slidesharecdn.com/ccnaintrotociscoios-211118073758/85/CCNA-Intro-to-Cisco-IOS-Part-2-20-320.jpg)
CCNA : Intro to Cisco IOS - Part 2
- 1. CCNA : Intro To Cisco IOS Lab Practice
- 2. Profile Nama : M. Taufik Nurhuda Pekerjaan : Guru TKJ, IT Support, Mikrotik Academy Trainer SMK Pelita Pesawaran Facebook : https://www.facebook.com/taufik.nurhuda.5/ LinkedIn : https://www.linkedin.com/in/taufik-nurhuda-5224b1180/ Website : www.taufiknurhuda.web.id
- 3. Topic Discussion ● Basic Mode ● How To Access IOS Cisco Router/Switch ● Configure Initial Setting on IOS Cisco Router/Switch ● Interface Configuration ● Display Config ● Edit/Remove Config ● Configure Telnet/SSH Remote ● Backup & Restore Config ● IOS vs Mikrotik Syntax
- 4. IOS Mode ● Setup ○ This mode appear when the NVRAM router/switch is empty or not have configuration. ● User Mode ○ For Monitoring Only (limited show, ping, traceroute) ○ Marked by : Router> ● Privileges Mode ○ There are several command for monitoring and troubleshooting (show, ping, copy, trace, erase) ○ Marked by : Router# ● Global Configuration Mode ○ For Configuration Cisco IOS router/switch ○ Marked by : Router(config)# ● Interface Mode ○ For interface / ip configuration ○ Marked by : Router(config-if)#
- 5. Configuration Access ● Using Console ○ Console Cable to USB/RJ45 ○ Remote console with Putty (Windows OS) and minicom -s (Linux OS) ● Remote Access (Need for IP Address) ○ Telnet ○ SSH
- 6. Basic Configuration ● IOS Login ○ User mode to Privileges mode Router> enable Router# ○ Privileges mode to Global config mode Router#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# ● Hostname ○ Router(config)# hostname ROUTER-ME ○ ROUTER-ME(config)# ● Disable DNS Lookup ○ ROUTER-ME(config)# no ip domain-lookup ○ ROUTER-ME(config)#
- 7. Basic Configuration ● Secure Privileges Mode ○ ROUTER-ME(config)#enable secret mypass ○ ROUTER-ME(config)#exit TEST THE CONFIGURATION : ○ ROUTER-ME>enable ○ Password: ->enter_the_password ○ ROUTER-ME# ● Secure Global Config Mode ○ ROUTER-ME(config)#line console 0 ○ ROUTER-ME(config-line)# password pass123 ○ ROUTER-ME(config-line)# login ○ ROUTER-ME(config-line)# TEST THE CONFIGURATION ○ User Access Verification ○ Password: ->enter the password ○ ROUTER-ME>
- 8. Basic Configuration ● Secure Remote access Telnet/SSH (VTY Password) ○ ROUTER-ME(config)# line vty 0 4 ○ ROUTER-ME(config-line)# password mypass ○ ROUTER-ME(config-line)# login ○ ROUTER-ME(config-line)# exit ○ ROUTER-ME(config)# ● Encrypt All Plaintext passwords ○ ROUTER-ME(config)#service password-encryption ○ ROUTER-ME(config)# ● Provide Legal Notification on Cisco IOS (MOTD) ○ ROUTER-ME(config)#banner motd "THIS IS MY ROUTER" TEST THE CONFIGURATION : Press RETURN to get started! THIS IS MY ROUTER User Access Verification Password: ● Save the configuration ○ ROUTER-ME#copy running-config startup-config ○ Destination filename [startup-config]? PressEnter ○ Building configuration... ○ [OK]
- 9. Interface Configuration ● IP configuration ○ ROUTER-ME(config)#interface gig0/0/0 ○ ROUTER-ME(config-if)#ip address 192.168.10.1 255.255.255.0 ● Interface description ○ ROUTER-ME(config-if)#description "Interface for LAN Networks" ● Enable Interface ○ ROUTER-ME(config-if)#no shutdown ○ ROUTER-ME(config-if)# ○ %LINK-5-CHANGED: Interface GigabitEthernet0/0/0, changed state to up ○ %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0/0, changed state to up ○ ROUTER-ME(config-if)# ● For Disable Interface use command : ○ ROUTER-ME(config-if)# shutdown
- 10. Display Config ● Show full configuration ○ ROUTER-ME#show running-config ○ Building configuration... ○ ○ Current configuration : 850 bytes ○ ! ○ version 16.6.4 ○ no service timestamps log datetime msec ○ no service timestamps debug datetime msec ○ service password-encryption ○ ! ○ hostname ROUTER-ME ○ ! ○ enable secret 5 $1$mERr$OP8FVb8wv5vae/zbiXUkx/ ○ ! ○ ip cef ○ no ipv6 cef ○ ! ○ spanning-tree mode pvst ! ○ interface GigabitEthernet0/0/0 ○ description "Interface for LAN Networks" ○ ip address 192.168.10.1 255.255.255.0 ○ duplex auto ○ speed auto ○ !
- 11. Display Config ● Show summary interface information ○ ROUTER-ME#show ip interface brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 192.168.10.1 YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME#
- 12. Display Config ● Using do command for show config ○ ROUTER-ME(config)#do show ip interface brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 192.168.10.1 YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME(config)#do copy running-config startup-config ○ Destination filename [startup-config]? ○ Building configuration... ○ [OK] ○ ROUTER-ME(config)#
- 13. Edit/Remove Config ● Edit IP address configuration ○ ROUTER-ME(config)#do show ip int brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 192.168.10.1 YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME(config)#int gig0/0/0 ○ ROUTER-ME(config-if)#ip add 192.168.20.1 255.255.255.0 ○ ROUTER-ME(config-if)#exit ○ ROUTER-ME(config)#do show ip int brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 192.168.20.1 YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME(config)#
- 14. Edit/Remove Config ● Remove IP Address configuration ○ ROUTER-ME(config)# do show ip int brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 192.168.20.1 YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME(config)# int gig0/0/0 ○ ROUTER-ME(config-if)# no ip add 192.168.20.1 255.255.255.0 ○ ROUTER-ME(config-if)# exit ○ ROUTER-ME(config)# do show ip int brief ○ Interface IP-Address OK? Method Status Protocol ○ GigabitEthernet0/0/0 unassigned YES manual up up ○ GigabitEthernet0/0/1 unassigned YES unset administratively down down ○ GigabitEthernet0/0/2 unassigned YES unset administratively down down ○ Vlan1 unassigned YES unset administratively down down ○ ROUTER-ME(config)#
- 15. Configure Telnet Remote ● For access Telnet/SSH you must configure privileges password using enable password or enable secret command first ● Configure VTY Password ● Test connect from client C:>telnet 192.168.10.1 Trying 192.168.10.1 ...OpenTHIS IS MY ROUTER User Access Verification Password: ->EnterVTYPassword ROUTER-ME>enable Password: ROUTER-ME#
- 16. Configure SSH Remote ● Configure domain router ● Configure username and password login ● Configure transport input ssh on line vty ● Generate Crypto key rsa 1024 ○ ROUTER-ME(config)#ip domain-name taufik.net ○ ROUTER-ME(config)#username taufik secret taufikpass ○ ROUTER-ME(config)#line vty 0 4 ○ ROUTER-ME(config-line)# transport input ssh ○ ROUTER-ME(config-line)# login local ○ ROUTER-ME(config-line)# exit ○ ROUTER-ME(config)#crypto key generate rsa ○ The name for the keys will be: ROUTER-ME.taufik.net ○ Choose the size of the key modulus in the range of 360 to 2048 for your ○ General Purpose Keys. Choosing a key modulus greater than 512 may take ○ a few minutes. ○ How many bits in the modulus [512]: 1024 ○ % Generating 1024 bit RSA keys, keys will be non-exportable...[OK] ○ ROUTER-ME(config)#
- 17. Backup & Restore Config ● Backup configuration ● Make sure your router can connected to TFTP Server and enable TFTP Server. ● Setting Backup from router/switch. ROUTER-ME#copy running-config tftp: Address or name of remote host []? 192.168.50.2 <-IP Server TFTP Destination filename [ROUTER-ME-confg]?<-PressEnter Writing running-config....!! [OK - 785 bytes] 785 bytes copied in 3.004 secs (261 bytes/sec) ROUTER-ME#
- 18. Cek Backup file from TFTP Server
- 19. Backup & Restore Config ● Reset configuration ○ ROUTER-ME#write erase ○ Erasing the nvram filesystem will remove all configuration files! Continue? [confirm] ○ [OK] ○ Erase of nvram: complete ○ %SYS-7-NV_BLOCK_INIT: Initialized the geometry of nvram ○ ROUTER-ME#reload ○ Proceed with reload? [confirm]
- 20. Backup & Restore Config ● Restore configuration Router#copy tftp: running-config Address or name of remote host []? 192.168.50.2 <-IPTFTPSERVER Source filename []? ROUTER-ME-config <-SourceFileBackupName Destination filename [running-config]? <-PressEnter Accessing tftp://192.168.50.2/ROUTER-ME-config... %Error opening tftp://192.168.50.2/ROUTER-ME-config (No such file or directory) Router#copy tftp: running-config Address or name of remote host []? 192.168.50.2 Source filename []? ROUTER-ME-confg Destination filename [running-config]? Accessing tftp://192.168.50.2/ROUTER-ME-confg... Loading ROUTER-ME-confg from 192.168.50.2: ! [OK - 785 bytes] 785 bytes copied in 0 secs ROUTER-ME#
- 21. Cisco IOS vs Mikrotik RouterOS Syntax ● Add ip address on interface ● Add route/Default Gateway
- 22. Cisco IOS vs Mikrotik RouterOS Syntax ● Reset Configuration
- 23. Cisco IOS vs Mikrotik RouterOS Remote Access ● Mikrotik ○ IP Address Based (winbox, Webfig, Telnet,SSH,FTP) ○ Mac Address (Neighbors) ● Cisco ○ IP Address (Telnet,SSH)
- 24. THANKS