Chapter 3

docx

School

Eastern Gateway Community College *

*We aren’t endorsed by this school

Course

132

Subject

Computer Science

Date

Dec 6, 2023

Type

docx

Pages

18

Uploaded by DeaconGullMaster901

Report
3.1.8 1 – downed router connection - Connect the laptop's COM/USB port to the router's console port using a rollover cable. 2 – 3 - 4 – non-volatile configuration memory has not been setup - No configuration file has been saved to NVRAM. 5 – Secure router – Keep the router in a locked room AND Set a password and use the login command.
6 - 7 – Boots into default settings - The router configuration register is set to bypass startup configuration. 8 – Configuration register runs during POST – How the router boots up 9 – Save changes for boot - copy run start
10 - 3.2.7 Lab Questions Q1What is the IOS version? Your answer: Correct answer: 12.4 Q2How much NVRAM (non-volatile RAM) is available on the router? Your answer: Correct answer: 191 KB Q3How much DRAM does the router have? Your answer: Correct answer: 256 MB Q4How many serial interfaces does the router have? Your answer:
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
Correct answer: 4 Complete this lab as follows: 1. Select Router to open the CLI. 2. Press Enter to get started. 3. At the prompt, type enable and press Enter to go to privileged mode. 4. Type show version and press Enter . 5. In the top right corner, select Answer Questions . 6. Answer the questions. 3.2.12 1 – Router# - Privileged EXEC 2 – Commands in history buffer – show history 3 – Size of config files – show flash 4 – Use NVRAM – 0x2102 5 – save configuration file in NVRAM to a TFTP - copy start tftp 6 – 7 – backup IOS image to TFTP - copy flash tftp 8 – commands available in current mode - ? 9 – Same command repeatedly – Press the Up Arrow Key
10 – Remove contents of NVRAM - erase nvram 3.3.5 1 – Add VoIP – Unified Communication 2 – Security feature, Routers UDI - show license udi 3 – Enable security feature, reload command - license install usbflash1:FTX1788948P_201304123432565291.lic 4 – 5 – MPLS support enable - ipbasek9 6 – Feature set that is enabled – show version AND show license 7 – Evaluate prior to purchase - license boot module c2900 technology-package uck9 8 –
9 – Install license on a cisco device - Privileged exec mode 10 – show following info in table – show license feature 3.4.3 Complete this lab as follows: 1. Configure the hostname and the interface descriptions on the switch. a. Select Branch 1 in the diagram. b. Press Enter to get started. c. At the > prompt, type enable and press Enter . d. At the # prompt, type configure terminal and press Enter . e. At the (config)# prompt, type hostname Branch1 and press Enter . f. At the Branch1(config)# prompt, type interface FastEthernet0/1 and press Enter . g. At the Branch1(config-if)# prompt, type description Wrk1 and press Enter . h. At the Branch1(config-if)# prompt, type interface FastEthernet0/2 and press Enter . i. At the Branch1(config-if)# prompt, type description Wrk2 and press Enter . j. At the Branch1(config-if)# prompt, type interface FastEthernet0/3 and press Enter . k. At the Branch1(config-if)# prompt, type description Wrk3 and press Enter .
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
l. At the Branch1(config-if)# prompt, type interface FastEthernet0/24 and press Enter . m. At the Branch1(config-if)# prompt, type description Default gateway and press Enter . n. At the Branch1(config-if)# prompt, type exit and press Enter . o. At the Branch1(config)# prompt, type exit and press Enter . p. At the Branch1# prompt, type c opy running-config startup-config and press Enter . q. Press Enter . 2. Configure the hostname and the interface descriptions on the router. a. Select SFO in the diagram. b. Press Enter to get started. c. At the > prompt, type enable and press Enter . d. At the # prompt, type configure terminal and press Enter . e. At the (config)# prompt, type hostname SFO and press Enter . f. At the SFO(config)# prompt, type interface FastEthernet0/0 and press Enter . g. At the SFO(config-if)# prompt, type description Link to branch office and press Enter . h. At the SFO(config-if)# prompt, type interface Serial0/1/0 and press Enter . i. At the SFO(config-if)# prompt, type description Link to main office and press Enter . j. At the SFO(config-if)# prompt, type interface Serial0/1/1 and press Enter . k. At the SFO(config-if)# prompt, type description Link to internet and press Enter . l. At the SFO(config-if)# prompt, type exit and press Enter . m. At the SFO(config)# prompt, type exit and press Enter . n. At the SFO# prompt, type copy running-config startup-config and press Enter . o. Press Enter . 3.4.6 In this lab, your task is to: Create the following banners with the appropriate punctuation in the banner text, but do not include a hard return in the banner except where noted: Banner Banner text Message of the day banner You have connected to the SFO router. Banner that displays before the login prompt (Place each sentence on a different line) Authorized personnel only. Unauthorized users will be vaporized immediately! Banner that displays after a successful login Beam me up Scotty!
Save your changes in the startup-config file. Complete this lab as follows: 1. Select SFO . 2. Press Enter to get started. 3. Type cisco for the password and press Enter . 4. At the SFO> prompt, type enable and press Enter . 5. At the SFO# prompt, type configure terminal and press Enter . 6. At the SFO(config)# prompt, type banner motd *You have connected to the SFO router.* and press Enter . 7. At the SFO(config)# prompt, type banner login &Authorized personnel only. and press Enter . 8. Type Unauthorized users will be vaporized immediately!& and press Enter . 9. At the SFO(config)# prompt, type banner exec (Beam me up Scotty!( and press Enter . 10. At the SFO(config)# prompt, type exit and press Enter . 11. Save your changes to the startup-config file as follows: a. At the SFO# prompt, type copy running-config startup-config and press Enter . b. Press Enter to begin building the configuration. 3.4.7 In this lab, your task is to modify the current configuration as follows: Change the banner that shows before the login prompt to: Please enter the administrator password: (do not include a hard return in the banner text) Delete the banner that displays after a successful login. Save your changes to the startup-config file. Complete this lab as follows: 1. Select SFO . 2. Press Enter to get started. 3. Type cisco for the password and press Enter . 4. At the SFO> prompt, type enable and press Enter . 5. At the SFO# prompt, type configure terminal and press Enter . 6. At the SFO(config)# prompt, type banner login *Please enter the administrator password:* and press Enter . * is the delimiting character that identifies the start and the end of the banner text. 7. At the SFO(config)# prompt, type no bann exec and press Enter .
8. Press Ctrl + Z . 9. Save your changes to the startup-config file. a. At the SFO# prompt, type copy running-config startup-config and press Enter . b. Press Enter to begin building the configuration. 3.4.8 1 – hostname LAS - Router(config)# hostname LAS 2 – configure description for eighth gigabit ethernet interface - RTR07(config)#int gi0/8 RTR07(config)#description WAN to Main Office 3 – Description to the first serial interface - int ser 0 description BOS to SFO 4 – troubleshooting a router at the console, output scrolls past faster than you can read – show log AND logging buffered 5 – configured from console by console - no logging console 6 – see logging message from IOS appear on the terminal – terminal monitor 7 – Banners add security - Banners provide a notice of intent, informing users that access is controlled or that activity may be logged. 8 – Banner order – motd, login, exec 9 – change second banner - banner login *Only administrator access is allowed* 10 – remove motd - no banner motd 3.5.3 In this lab, your task is to: Set the Branch1 password using the password command. Use the login command to require the password. If you configure the password but don't use the login command, login is allowed without the password. Configure the following passwords: Line Password Console 0 tp89jy5$
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
VTY 0 ak73#pt VTY 1–4 pj61@bb4 Make sure login is allowed on the console and the VTY lines with a password. Prevent access through the remaining VTY lines (5–15). To prevent login, use the login command but do not set a password. Save your changes to the startup-config file. Complete this lab as follows: 1. Select Branch1 . 2. Press Enter to get started. 3. At the Branch1> prompt, type enable and press Enter . 4. Type cisco as the password and press Enter . 5. At the Branch1# prompt, type config t and press Enter . 6. At the Branch1(config)# prompt, type line con 0 and press Enter . 7. At the Branch1(line)# prompt, type password tp89jy5$ and press Enter . 8. At the Branch1(line)# prompt, type login and press Enter . 9. At the Branch1(line)# prompt, type line vty 0 and press Enter . 10. At the Branch1(line)# prompt, type password ak73#pt and press Enter . 11. At the Branch1(line)# prompt, type login and press Enter . 12. At the Branch1(line)# prompt, type line vty 1 4 and press Enter . 13. At the Branch1(line)# prompt, type password pj61@bb4 and press Enter . 14. At the Branch1(line)# prompt, type login and press Enter . 15. At the Branch1(line)# prompt, type line vty 5 15 and press Enter . 16. At the Branch1(line)# prompt, type login and press Enter . 17. At the Branch1(line)# prompt, type exit and press Enter . 18. At the Branch1(config)# prompt, type exit and press Enter . 19. At the Router# prompt, type copy run start and press Enter . 20. Press Enter to begin building the configuration. 3.5.6 In this lab, your task is to: Set the enable secret to cisco . Set the enable password to cisco . When prompted, do not re-enter the password. Go to privileged mode. Type show run and view the configuration file. What is the enable password? Set the enable password to study . Go to privileged mode Switch to privileged mode using study for the password. Why doesn't this password work? Remove the enable secret password using no enable secret in global configuration mode.
Exit global configuration mode and re-enter privileged mode. Which password did you use to gain privileged access? Change the following passwords: o Enable password: 7y%pirt o Enable secret: opo63!m@ Save your changes to the startup-config file. Complete this lab as follows: 1. Select Branch 1 . 2. Configure the enable secret password. a. Press Enter to get started. b. At the prompt, type enable and press Enter to go to privileged mode. c. Type configure terminal and press Enter . d. Type enable secret cisco and press Enter . 3. In global configuration mode, type enable password cisco and press Enter to configure the enable password. As you can see, using the same password for the enable secret and the enable password is not recommended. 4. Type exit and press Enter to go to privileged mode. 5. Type show run and press Enter to view the configuration file. 6. Change the enable password. a. Type configure terminal and press Enter . b. Type enable password study and press Enter . 7. Go back to privileged mode. a. Type exit and press Enter . b. Type disable and press Enter . 8. Switch to user mode using study for the password. a. Type enable and press Enter to switch to exec mode. b. Type study and press Enter as the password. This password does not work because the enable secret password is set and required. 9. Remove the enable secret password. a. Type cisco and press Enter for the password. b. Type configure terminal and press Enter . c. Type no enable secret and press Enter . 10. Exit global configuration mode and re-enter privileged mode. a. Type exit and press Enter . b. Type disable and press Enter . c. Type enable and press Enter . d. Type study and press Enter for the password because the cisco password was removed. 11. Change the passwords. a. Type configure terminal and press Enter . b. Type enable password 7y%pirt and press Enter . c. Type enable secret opo63!m@ and press Enter . 12. Save your changes. a. Type exit and press Enter .
b. Type copy running-config startup-config and press Enter . c. Press Enter to begin building the configuration. 3.5.7 In this lab, your task is to configure the following policies: Use the show start command to view the current configuration. Notice that a password is currently set for VTY lines 1–4, and no password is set for VTY 0. Configure the router to require te%56t as the password to enter privileged exec mode. Make sure this password is encrypted. Require yuw#m as the console password. Require yaba8&y as the password for VTY line 0. Remove the password from VTY 1–4. Save your changes to the startup-config file. Complete this lab as follows: 1. Select SFO . 2. Press Enter to get started. 3. At the SFO> prompt, type enable and press Enter . 4. At the SFO> prompt, type show start and press Enter . 5. At the SFO# prompt, type configure terminal and press Enter . 6. At the SFO(config)# prompt, type enable secret te%56t and press Enter . 7. At the SFO(config)# prompt, type line con 0 and press Enter . 8. At the SFO(config-line)# prompt, type password yuw#m and press Enter . 9. At the SFO(config-line)# prompt, type login and press Enter . 10. At the SFO(config-line)# prompt, type line vty 0 and press Enter . 11. At the SFO(config-line)# prompt, type password yaba8&y and press Enter . 12. At the SFO(config-line)# prompt, type login and press Enter . 13. At the SFO(config-line)# prompt, type line vty 1 4 and press Enter . 14. At the SFO(config-line)# prompt, type no password and press Enter . 15. At the SFO(config-line)# prompt, type exit and press Enter . 16. At the SFO(config)# prompt, type exit and press Enter . 17. At the SFO# prompt, type copy run start and press Enter . 18. Press Enter to begin building the configuration. 3.5.11 1 – most important thing to do to prevent console access – Keep the router in a locked room 2 – prevent access from Telnet - For the VTY lines, add the login parameter and remove any passwords.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
3 - telnet session without being prompted for a password - In line configuration mode, add the login parameter. 4 – service password-encryption - Passwords are easily broken. 5 – telnet session – garage 6 – switch to privileged EXEC mode – enable secret 7 – password recovery process – ROMmon 8 – ignore startup config file - confreg 0x2142 9 – load the startup configuration upon boot - confreg 0x2102 10 – access the ROM monitor - Remove the external flash memory while the device is powered off and then boot. AND Use a break sequence during the boot process. 3.6.4 Enable CDP on the router and all interfaces Q1Which device is connected to the SFO Serial 0/1/0 interface? Your answer: LAX Correct answer: LAX Q2Which device is connected to the SFO Serial 0/1/0 interface? Your answer: None Correct answer: None Q3Which neighboring devices are shown? Your answer: None Correct answer: None Q4Where can you find the no cdp run entry? Your answer: In the line configuration sections Correct answer: In the interface subsections Q5Which additional details does the show cdp neighbors detail command show compared to the show cdp neighbor command? Your answer: Network address, enabled protocols, and software version Correct answer: Network address, enabled protocols, and software version Explanation In this lab, your task is to complete the following on the SFO switch: View CDP information learned from neighboring devices. Disable CDP on the Serial 0/1/0 interface and view the results. Disable CDP on a router to prevent the router from exchanging CDP packets and view the results. Find the new location of the no cdp run entry. Enable CDP on the Serial 0/1/0 interface and view the results. Answer the Questions.
Complete this lab as follows: 1. Select SFO . 2. Press Enter to get started. 3. At the SFO> prompt, type enable and press Enter . 4. View the CDP information learned from neighboring devices. a. At the SFO# prompt, type show cdp neighbor and press Enter . b. Answer Question 1. 5. Disable CDP on the Serial 0/1/0 interface and view the results. a. At the SFO# prompt, type configure terminal and press Enter . b. At the SFO(config)# prompt, type interface Serial 0/1/0 and press Enter . c. At the SFO(config-if)# prompt, type no cdp enable and press Enter . d. Press Ctrl + Z . e. At the SFO# prompt, type show cdp neighbor and press Enter . f. Answer Question 2. 6. Disable CDP on a router to prevent the router from exchanging CDP packets and view the results. a. At the SFO# prompt, type configure terminal and press Enter . b. At the SFO(config)# prompt, type no cdp run and press Enter . c. Press Ctrl + Z . d. At the SFO# prompt, type show cdp neighbor and press Enter . e. Answer Question 3. 7. Find the new location of the no cdp run entry. a. At the SFO# prompt, type show run and press Enter . b. Find the no cdp run entry. c. Answer Question 4. 8. Enale CDP on the Serial 0/1/0 interface and view the results. a. At the SFO# prompt, type configure terminal and press Enter . b. At the SFO(config)# prompt, type interface Serial 0/1/0 and press Enter . c. At the SFO(config-if)# prompt, type cdp enable and press Enter to enable CDP on the Serial 0/1/0 interface. d. At the SFO(config-if)# prompt, type exit and press Enter . e. At the SFO(config-if)# prompt, type cdp run and press Enter to enable CDP on the router. f. Press Ctrl + Z . g. At the SFO# prompt, type show cdp neighbors detail and press Enter to view the CDP information learned from neighboring devices. h. Answer Question 5. 3.6.5 Complete this lab as follows: 1. Configure the Branch 1 switch. a. Select Branch 1 .
b. Press Enter to get started. c. At the Branch1> prompt, type enable and press Enter . d. At the Branch1# prompt, type configure terminal and press Enter . e. At the Branch1(config)# prompt, type cdp timer 90 and press Enter . f. At the Branch1(config)# prompt, type cdp holdtime 250 and press Enter . g. At the Branch1# prompt, type exit and press Enter . h. At the Branch1# prompt, type copy running-config startup-config and press Enter . i. Press Enter to begin building the configuration. 2. Configure the SFO router. a. Select SFO . b. Press Enter to get started. c. At the SFO> prompt, type enable and press Enter . d. At the SFO# prompt, type configure terminal and press Enter . e. At the SFO(config)# prompt, type cdp timer 90 and press Enter . f. At the SFO(config)# prompt, type cdp holdtime 250 and press Enter . g. At the SFO(config)# prompt, type int serial0/1/1 and press Enter . h. At the SFO(config-if)# prompt, type no cdp enable and press Enter . i. At the SFO(config-if)# prompt, type exit and press Enter . j. At the SFO(config)# prompt, type exit and press Enter . k. At the SFO# prompt, type copy running-config startup-config and press Enter . l. Press Enter to begin building the configuration. 3.6.6 In this lab, your task is to configure the following CDP settings on the SFO router: Configure the router to use CDP to discover neighbor Cisco devices on FastEthernet0/0 and Serial0/1/0, but not Serial0/1/1. Reset the CDP holdtime and timer values to their default values. Enable CDP for the FastEthernet0/0 interface. Enable CDP for the Serial0/1/0 interface. Disable CDP for the Serial0/1/1 interface. Use the show cdp neighbor command to check your work and verify that everything works correctly. Save your changes to the startup-config file. Complete this lab as follows: 1. Select SFO . 2. Press Enter to get started. 3. At the SFO> prompt, type enable and press Enter . 4. At the SFO# prompt, type configure terminal and press Enter . 5. At the SFO(config)# prompt, type cdp run and press Enter . 6. Reset the CDP holdtime and timer values to their default values.
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help
a. At the SFO(config)# prompt, type cdp timer 60 and press Enter . b. At the SFO(config)# prompt, type cdp holdtime 180 and press Enter . 7. Enable CDP for the FastEthernet0/0 interface. a. At the SFO(config)# prompt, type int fa0/0 and press Enter . b. At the SFO(config-if)# prompt, type cdp enable and press Enter . 8. Enable CDP for the Serial0/1/0 interface. a. At the SFO(config-if)# prompt, type int s0/1/0 and press Enter . b. At the SFO(config-if)# prompt, type cdp enable and press Enter . 9. Disable CDP for the Serial0/1/1 interface. a. At the SFO(config-if)# prompt, type int s0/1/1 and press Enter . b. At the SFO(config-if)# prompt, type no cdp enable and press Enter . c. Press Ctrl + Z . 10. At the SFO(config-if)# prompt, type show cdp neighbor and press Enter to check your work. Notice that int s0/1/1 is no longer a neighbor because you removed it. 11. Save your changes to the startup-config file a. At the SFO# prompt, type copy running-config startup-config and press Enter . b. Press Enter to begin building the configuration. 3.6.7 Lab Questions Q1Which device is connected to the Memphis FastEthernet0/1 interface? Your answer: Miami Correct answer: Branch3 Q2Which device is connected to the Memphis Serial0/0/1 interface? Your answer: Correct answer: Miami Q3What is the IP address of the device connected to the Memphis Serial0/0/0 interface? Your answer: Correct answer: 172.16.224.2 Q4What is the IP address of the device connected to the Memphis FastEthernet0/0 interface? Your answer: Correct answer: 192.168.30.130 Q5Which remote port connects Branch3 to the Memphis router? Your answer: Correct answer: GigabitEthernet0/1 Q6Which remote port connects Miami to the Memphis router? Your answer: Correct answer: Serial0/0/0 Q7Which platform is running on the device connected to the S0/0/1 interface? Your answer: Correct answer: 1841 Explanation
1. Select Router . 2. Press Enter to get started. 3. At the Memphis> prompt, type enable and press Enter . 4. At the Memphis# proenmpt, type show cdp neighbors and press Enter . 5. At the Memphis# prompt, type show cdp neighbors detail and press Enter . 6. In the top right corner, select Answer Questions . 7. Answer the questions. 3.6.9 1 – 2 – send CDP packets every 30 seconds – cdp timer 30 3 - what IP address has been configured on the E0 interface on the New York router - Telnet to New York. From privileged mode, type show interface E0 .AND Telnet to Toronto. From privileged mode, type show cdp neighbors detail . 4 - prevent the Toronto router from sharing any information about itself with neighboring devices - Toronto(config)# no cdp run 5 - disable CDP on that interface, but you want to keep CDP enabled on the device - Router(config-if)# no cdp enable 6 - enables Cisco devices to discover non-Cisco devices – LLDP 7 - disables LLDP globally on a Cisco device - switch(config)# no lldp run
8 – true about LLDP - Configured on a per-interface basis. 9 - show all non-Cisco devices using LLDP - Router# show lldp neighbors 10 - default amount of time that a device will hold information about its neighbors using LLDP is 120 seconds - Router(config)# lldp holdtime [number of seconds]
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
  • Access to all documents
  • Unlimited textbook solutions
  • 24/7 expert homework help