Introduction to Cisco router configuration AFNOG 2001 Workshop

  • Slides: 24
Download presentation
Introduction to Cisco router configuration AFNOG 2001 Workshop 07 to 11 May 2001 Accra

Introduction to Cisco router configuration AFNOG 2001 Workshop 07 to 11 May 2001 Accra - GHANA By: Adiel AKPLOGAN CAFE Informatique S. A. - TOGO copyrigth © Juillet Adiel AKPLOGAN copyrigth © Juillet 2000 --2001 2000 E-mail: [email protected] net Web: http: //www. akplogan. net

Introduction l l Router are intelligent equipments used for packet forwarding and network interconnection.

Introduction l l Router are intelligent equipments used for packet forwarding and network interconnection. Description – – l l l 2 Front panel Back panel Need to process information and data For that purpose they run a real operating system IOS: Internetworking Operating System Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Router components l 3 Like a computer they are composed of: – Microprocessor to

Router components l 3 Like a computer they are composed of: – Microprocessor to run the IOS – RAM to store data, run programs and buffer data. – NVRAM to store instruction for performing the self test of the device. It also contain a subset of of the l'IOS. – Flash memory: like an NVRAM that can be erase and rewrite electronically (used like PC use disk storage). The copy of IOS the router run is store on it. – Network Interfaces: Primary for the router. Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

CISCO IOS l Accessing the router: – – l By the Console port Or

CISCO IOS l Accessing the router: – – l By the Console port Or from network Login to the router: – With a password stored in the config file. Password: – l Through access server (TACACS +, RADIUS) l TACACS (Terminal Access Controller Access Control System) l RADIUS (Remote Access Dial-In User Service) two mode user exec mode routeur-t 2> – privilege exec mode (enable/disable) Routeur-t 2# – 4 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

CISCO IOS l the command are automatically interpreted by the user interface. Routeur-t 2>show

CISCO IOS l the command are automatically interpreted by the user interface. Routeur-t 2>show version You can abbreviate the commands Routeur-t 2>sh ver – help available at any level E. g. : routeur>? – – – 5 Access command history trough direction key on your keyboard (up and down) –show history to see what is in the buffer Filter the output of command ex: routeur>sh ver |include exclude begin key Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

CISCO IOS l Editing feature on Cisco IOS – Cursor Movement: l l l

CISCO IOS l Editing feature on Cisco IOS – Cursor Movement: l l l Ctrl+A cursor to the beginning of the line Ctrl+E cursor to the end of the line Ctrl+B cursor to the beginning of the previous word Ctrl+K delete all characters from the cursor to the end of the command line Ctrl+U or X delete from the cursor to the beginning You can recall deletions and past them on the line of the cursor Ctrl+Y paste the most recent deletion at the cursor – Esc+Y recall the next buffer entry and pas at the cursor – l You can turn off terminal editing # terminal no editing 6 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Router configuration l Three possible method to configure a router: – Terminal (entering the

Router configuration l Three possible method to configure a router: – Terminal (entering the commands directly) – From memory (copy config. from RAM to NVRAM) – From network (copy configuration from an tftp server) l 7 For this track we will address mostly terminal configuration by accessing the routers through the console port Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Router configuration 8 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Router configuration 8 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Terminal configuration mode l Enter configuration mode from your Free. BSD machine connect to

Terminal configuration mode l Enter configuration mode from your Free. BSD machine connect to the router using the serial interface and configuration cable provide (to be connect to the console port) /etc/remote (to see the device configure to be used with "tip") you will see at the end, a line begin with cuaa 0 c… (you can change it to cisco) bash$ tip cuaa 0 c (or cisco) router>enable 9 routeur# Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Configuration (cont'd) l Read the router configuration routeur#show running-config l Summary of interfaces routeur#show

Configuration (cont'd) l Read the router configuration routeur#show running-config l Summary of interfaces routeur#show interface brief l The first thing we should do is to set the name of our router. routeur# configure terminal routeur(config)# hostname router-X (where X stand for you table letter) router-X(config)# – You may optionally want to add a banner router-X(config)#banner motd #AFNOG success# 10 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Interface configuration l Set the enable password: router-X(config)# enable password t 2@afnog l If

Interface configuration l Set the enable password: router-X(config)# enable password t [email protected] l If you see in your config file, you will see that the enable password is displayed in clear text -- that is not safe, you have to encrypt it. router-X(config)# service password-encryption router-X(config)# enable secret "your pswd"(MD 5 encryption) l To configure interface you should go to interface config menu router-X(config) interface ethernet 0 (or 0/x) router-X(config-if)# l Save your config router-X #copy running-config startup-config 11 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Manage configuration file l You can manipulate file in router. The most common manipulation

Manage configuration file l You can manipulate file in router. The most common manipulation is the copy. router-X#copy run star router-X#copy running-config tftp Copy the active config file to a tftp server on the network router-X#copy tftp running-config Copy the backup config file from tftp server to the active configuration file. l You can specify on your configuration file where you want the router to boot from router-X# boot system flash afnog. ios l 12 You can have many boot method set on your config file Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Configuration wizard l It is possible to configure Cisco router through an interactive configuration

Configuration wizard l It is possible to configure Cisco router through an interactive configuration mode. – Automatically start on router without config store on the NVRAM – From the command line interface router-X#setup 13 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

IOS Upgrade l The IOS reside in the router as a file stored in

IOS Upgrade l The IOS reside in the router as a file stored in flash memory. It is run directly from there (small routers), or from a copy put in the RAM at boot time. – For small router: l 14 Use of flash load helper utility: The flash load helper will reboot the router using the ROM-based IOS and copy the new IOS to flash. Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Basic security configuration l Some commands used to secure your router configuartion: GENERAL enable

Basic security configuration l Some commands used to secure your router configuartion: GENERAL enable secret service password-encription no service tcp-small-server no service udp-small-server no service finger no cdp runing no cdp enable logging no ip source-route access-list 15 no ip proxy-arp route 0. 0 null 0 255 INTERFACES no ip-direct-broadcast iacces-group list in LINES acces-class list in transport input login Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Securing your router login/acces l You can secure you router access by using authentification

Securing your router login/acces l You can secure you router access by using authentification server access login. l l TACACS+ (proprietary) RADIUS (tiers – Lucent, Merit…) – l 16 They are all available free on the network Secure access by packet filtering Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Authentication server setup l Installation – Download the binary source code l l –

Authentication server setup l Installation – Download the binary source code l l – l TACACS+ : ftp-eng. cisco. com/pub/tacacs RADIUS : www. freeradius. org Compile, Install and configure Enable authentication on the router – TACACS+ aaa aaa new-model authentication login default group tacac+ enable authentication enable default group tacac+ enable accounting exec start-stop group tacac+ ip tacacs source-interface 17 tacacs-server host 215. 20. 110. 1 port xx tacacs-server key trstech#01 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Authentication server setup l Activate authentication on the router – RADIUS aaa aaa new-model

Authentication server setup l Activate authentication on the router – RADIUS aaa aaa new-model authentication login default group radius enable authentication enable default group radius enable accounting exec start-stop group radius ip radius source-interface xxxx radius-server host 215. 20. 110. 1 auth-port 1812 acct-port 1813 radius-server key t [email protected] 18 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Using up access lists l The ACL – Access Control Lists l l IP

Using up access lists l The ACL – Access Control Lists l l IP (1 - 99) IP extend (100 – 199) Ingress Trafic A Egress Trafic X B 19 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Securing with access lists l Egress and Ingress filtering – IP access-list 4 permit

Securing with access lists l Egress and Ingress filtering – IP access-list 4 permit 208. 224. 122. 73 access-list 4 permit 216. 223. 158 – IP EXTEND access-list access-list access-list – 20 110 110 110 deny deny deny permit ip host 0. 0 any ip 10. 0 0. 255 any ip 172. 16. 0. 0 0. 15. 255 any ip 192. 168. 0. 0. 0. 255 any ip 205. 224. 122. 0 0. 0. 0. 255 any ip 127. 0. 0. 0. 255 any tcp any host 205. 224. 122. 3 eq telnet tcp any host 205. 224. 122. 3 eq www tcp any host 205. 224. 122. 3 eq finger tcp any host 205. 224. 122. 1 eq ftp ip any tcp any Apply it to interface ip access-group 110 in (serial Interface) access-class 4 in (vty) Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Manage router logs l Logs – – l Directly on the router To a

Manage router logs l Logs – – l Directly on the router To a remote server with syslogd (Unix) Logs formats Mm/dd/yyyy: hh/mm/ss: MLS-Mnemonic: description Oct 30 23: 21: 13. 827: %MLS-3 -LINK-3 -UPDOWN: Interface Async 75, changed state to down l 21 Message Log System (MLS) severity 0 – Emergency 3 – Error 6 – Informational 1 – Alert 4 – Warning 7 – Debugging 2 – Critical 5 – Notification Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Router logs l stup – Logging on the router set logging session [console] enable

Router logs l stup – Logging on the router set logging session [console] enable set logging timestamp set logging level all 5 set logging buffer size of the buffer that store logs – Logging on a unix server l On the server side – Verify that syslogd is unstalled and running – Add the line bellow to /etc/syslogd. conf user. debug /var/log/cisco. log – create the file cisco. log and give it the good right – restart syslogd l 22 On the router side set logging server ip_adresse Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Password recovery Password loss: l http: //www. cisco. com/warp/public/474/ l – – – 23

Password recovery Password loss: l http: //www. cisco. com/warp/public/474/ l – – – 23 – Save the current register configuration: it is usually 0 x 2102 or 0 x 102 Restart the router and press Break (Alt+break – depend on witch terminal you are using) within the 60 s after the boot process begin to stop the boot process from flash. ROMMON>confreg 0 x 2142 (boot from flash without loading configuration) Enter reset at the prompt > Answer no to the autoconfig question Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Password recovery (cont'd) Router>enable Router# config mem Router#sh run Router#config term Router(config)#enable secret

Password recovery (cont'd) Router>enable Router# config mem Router#sh run Router#config term Router(config)#enable secret "new passwd" Router(config)# config-register 0 x 2102 Router#wr mem Reboot the router 24 Adiel AKPLOGAN copyrigth © Juillet 2000 - 2001

Ateliers SIF AFNOG 2008 OSPF Eric Assi AFNOGAteliers SIF AFNOG 2008 OSPF Eric Assi AFNOG
Router Architectures First generation router Second generation routerRouter Architectures First generation router Second generation router
Router Apa itu router Router adalah sebuah alatRouter Apa itu router Router adalah sebuah alat
Router Architectures An overview of router architectures CiscoRouter Architectures An overview of router architectures Cisco
Router Components Configuration Router Components Configurations Topics PhysicalRouter Components Configuration Router Components Configurations Topics Physical
Router ICND Copyright 2002 Cisco Systems Inc CiscoRouter ICND Copyright 2002 Cisco Systems Inc Cisco
Cisco Device Hardening Disabling Unused Cisco Router NetworkCisco Device Hardening Disabling Unused Cisco Router Network
Introduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOGIntroduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOG
Introduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOGIntroduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOG
Introduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOGIntroduction aux routeurs CISCO Jean Robert HOUNTOMEY AFNOG
Introduction aux routeurs CISCO AFNOG VI MAPUTO 2005Introduction aux routeurs CISCO AFNOG VI MAPUTO 2005
Basic Router Configuration Honolulu Community College Cisco AcademyBasic Router Configuration Honolulu Community College Cisco Academy
Cisco Router Basic setting configuration information Routerwrite eraseCisco Router Basic setting configuration information Routerwrite erase
Cisco Router Configuration Basics Mark Tinka Nishal GoburdhanCisco Router Configuration Basics Mark Tinka Nishal Goburdhan
Cisco Router Configuration Basics Presented By Mark TinkaCisco Router Configuration Basics Presented By Mark Tinka
IPv 6 router configuration Overview Basic connectivity configurationIPv 6 router configuration Overview Basic connectivity configuration
Router Configuration Configuring interfaces Configuration categories n GlobalRouter Configuration Configuring interfaces Configuration categories n Global
Sieov akadmia CISCO Cisco Akadmia Cisco Networking AcademySieov akadmia CISCO Cisco Akadmia Cisco Networking Academy
IPv 6 Cisco Patrick Grossetete Cisco Systems CiscoIPv 6 Cisco Patrick Grossetete Cisco Systems Cisco
ELECTRON CONFIGURATION Electron Configuration Electron configuration is aELECTRON CONFIGURATION Electron Configuration Electron configuration is a
ELECTRON CONFIGURATION Electron Configuration Electron configuration is aELECTRON CONFIGURATION Electron Configuration Electron configuration is a
Voice over IP AFNOG 2001 Accra Ghana 12Voice over IP AFNOG 2001 Accra Ghana 12
Lecture 16 Router Design Topics router pipelines caseLecture 16 Router Design Topics router pipelines case
Instalasi dan Konfigurasi Router Teguh Prasetyo Mulyo RouterInstalasi dan Konfigurasi Router Teguh Prasetyo Mulyo Router
Configuring a Router Module 3 Semester 2 RouterConfiguring a Router Module 3 Semester 2 Router
Router Architectures An overview of router architectures CopyrightRouter Architectures An overview of router architectures Copyright
Configuring a Router 1 Router user interface TheConfiguring a Router 1 Router user interface The
Introducing Mikrotik Router Board and Router OS MikeIntroducing Mikrotik Router Board and Router OS Mike
Router OS Introduccin al sistema operativo Router OSRouter OS Introduccin al sistema operativo Router OS
Router OS Introduccin al sistema operativo Router OSRouter OS Introduccin al sistema operativo Router OS
IP Routing Static Routing The Router Router InterfaceIP Routing Static Routing The Router Router Interface
Corso IP Router e Network Cos un RouterCorso IP Router e Network Cos un Router
Routing ROUTING Routing Router A router is aRouting ROUTING Routing Router A router is a
Router Hostname Router Enable password asinpass interface EthernetRouter Hostname Router Enable password asinpass interface Ethernet
Router 1 Interface Ethernet 0 NVRAM Router shRouter 1 Interface Ethernet 0 NVRAM Router sh
IP Routing Principles 1 Router Application Router TransportIP Routing Principles 1 Router Application Router Transport
Internet Router History The first Internet Router nInternet Router History The first Internet Router n
EJEMPLOS ROUTER BLUETOOTH MDEM TARJETA DE RED ROUTEREJEMPLOS ROUTER BLUETOOTH MDEM TARJETA DE RED ROUTER
INSTALASI ROUTER PC MENGGUNAKAN MIKROTIK ROUTER Os InstallingINSTALASI ROUTER PC MENGGUNAKAN MIKROTIK ROUTER Os Installing
Mc Router Multicast within a Router for HighMc Router Multicast within a Router for High