Resume 13
Fahmi Ryas
17190208
Packet Tracert Activity
1) 2.1.4.6 Packet Tracert - Navigating the IOS
Objectives
Part 1 : Establish Basic Connections, Access the CLI, and Explore Help
Part 2 : Explore EXEC Modes
Part 3 : Set the clock
Background
In this activity you will practice skills, necessary for navigating the Cisco IOS, such as different user access modes, various configuration modes, and common command used on regular basis. You will also practice accessing the context sensitive help by configuring the clock command.
Part 1 Establish Basic Connection Access the CLI and Explore help
In this part 1 of this activity, you will connect a PC to a switch using a console connection and explore various comman modes and help features
Step 1 : Connect PC1 to S1 using a console cable
a. Click the connections icon in the lower left corner of the packet tracert window
b. Select the light blue Console cable by clicking it. The mouse pointer will change to what appears to be a connector with a cable dangling from it
c. Click PC1 a window displays an option for an RS-232 connection
d. Drag the other end of the console connection to the S1 switch and click the switch to access the connection list
e. Select the Console port to complete the connection
Step 2 : Establish a terminal session with S1
a. Click PC1 and then select the desktop tab
b. Click the terminal application icon. Verify that the port configuration default setting are correct
c. Click OK
d. The screen that appears may have several messages displayed somewhere on the screen there should be a press RETURN to get started! message press ENTER.
Step 3 : Explore the IOS help
a. The IOS can provide help for command depending on the level accessed. The prompt currently displayed is called user EXEC, and the device is waiting for command. The most basic form of help is to type a question mark (?) at the prompt to display a list of commands.
S1>?
This type of help is known as context sensitive help. It provides more information as the commands are expanded.
Part 2 : Explore EXEC Modes
In part 2 of this activity, you will switch to privileged EXEC Mode and issue additional commands.
Step 1 : Enter Privileged EXEC Modes
a. At the prompt, type the question mark (?)
S1?
b.Type en and press the Tab key
S1> en<Tab>
This is called command completion (or tab completion). When part of a command is typed.the Tab key can be used to complete the partial command. It the characters typed are enough to make the command unique, as in the case of the enable command, the remaining portion of the command is displayed.
c. Enter the enable command and press ENTER. How does the prompt change?
Answer : it now contains a#
d. When prompted, type the question mark (?)
S1#?
One command starts with the letter 'C' in user EXEC mode. How many commands are displayed now that privileged EXEC mode is active? (Hint : you could type C? to list just the commands beginning with 'C'.)
Answer : 5 command now begin with C
Step 2 : Enter Global Configuration mode
a. When in previleged EXEC mode, one of the commands starting with the letter 'C' is configure. Type either the full command or enough of the command to make it unique. Press the <Tab> key to issue the command and presss ENTER.
S1# configure
What is the message that is displayed?
Answer : Configuring from terminal, memory, or network [terminal]?
Press Enter to accept the default parameter that is enclosed in brackets [terminal]
b. This is called global configuration mode. This mode will be explored further in upcoming activities and labs. For now, return to previleged EXEC mode by typing end, exit, or Ctrl-Z.
S1(config)# exit
S1#
Part 3 : Set the Clock
Step 1 : Use the clock command
a. Use the clock command to further explore help and command syntax. Type show clock at the privileged EXEC prompt
S1# show clock
b. Context sensitive help and the clock command to set the time on the switch to current time. Enter the command clock snd press ENTER
S1# clock<ENTER>
c. The "% Incompleted command" message is returned by the IOS. This indicates that the clock command needs more parameters. Any time more information is needed help can be provided by typing a space after the command and the question mark (?)
S1# clock?
d. Set the clock using the clock set command. Procced through the command one step at a time
S1# clock set?
e. Based on the information requested by issuing the clock set? command, enter a time of 3:00 p.m, by using the 24 hour format of 15:00:00. Check to see if more parameter are needed.
S1# clock set 15:00:00?
The output returns a request for more information
<1-31> Day of the month
MONTH month of the year
f. Attempt to set the date to 01/31/2035 using the format requested. It may be necessary to request additional help using the context sensitive help to complete the process. When finished, issue the show clock command to display the clock setting. The resulting command output should display as :
S1# show clock
*15:0:4.869 UTC Tue Jan 31 2035
g. If you were not successful, try the following command to obtain the output above.
S1#clock set 15:00:00 31 Jan 2035
Step 2 : Explore additional command messages
a. The IOS provides various outputs for incorrect or incomplete commands. Continue to use the clock command to explore additional messages that may be encountered as you learn to use the IOS.
b. Issue the following command and record the messages :
S1# cl
S1# clock
S1# clock set 25:00:00
S1# clock set 15:00:00:32
2) 2.2.3.4 Packet Tracert - Configuring Initial Switch Settings
Objectives
Part 1 : Verify the default switch configuration
Part 3 : Configure a MOTD BannerPart 2 : Configure a Basic Switch Configuration
Part 4 : Save Configuration Files to NVRAM
Part 5 : Configure S2
Background
In this activity, you will perform basic switch configurations. You will secure access to the command line interface (CLI) and console ports using encrypted and plain text password. You will also learn how to configure messages for users logging into the switch. These banners are also used to warm unauthorized users that access is prohibited.
Part 1 : Verify the Default Switch Configuration
Step 1 : Enter privileged EXEC mode
You can access all switch commands from privileged EXEC mode. However, because many of privileged commands configure operating parameters,privileged access should be password protected to prevent unauthorized use.
The privileged EXEC command set includes those commands contained in user EXEC mode, as well as the configure command through which access to the remaining command modes are gained.
a. Click S1 and then theCLI tab Press Enter
b. Enter privileged EXEC mode by entering the enable command
Switch> enable
Switch#
Notice that the prompt changed in the configuration to reflect privileged EXEC mode
Step 2 : Examine the current switch configuration
a. Enter the show running-config command
Switch# show running-config
Part 2 : Create a basic Switch Configuration
Step 1 : Assign a name to a switch
To configure parameters on a switch, you may be required to move between various configuration modes. Notice how the prompt changes as you navigate through the switch.
Switch# configure terminal
Switch(config)# hostname S1
S1(config)# exit
S1#
Step 2 : Secure access to the console line
To secure access to the console line, access config line mode and set the console password to letmein
S1# configure terminal
Enter configuration commands, one oer line. End with CTRL-Z
S1(config)# line console 0
S1(config-line)# password letmein
S1(config-line)# login
S1(config-line)# exit
%SYS-5-CONFIG_I: Configured from console by console
S1#
Step 3 : Verify that console access is secured
Exit privileged mode to verify that the console port password is in effect
S1# exit
Switch con0 is now available
Press RETURN to get started
User Access Verification
Password :
S1>
Note : If the switch did not prompt you for a password, then you did not configure the login parameter in step 2.
Step 4 : Secure privileged mode access
Set the enable password c1$c0. This password protects access to privileged mode
Note : the 0 in c1$c0 is a zero, not a capital O. This password will not grade as correct until after you encrypt it in Step 8.
S1> enable
S1# configure terminal
S1(config)# enable password c1$c0
S1(config)# exit
%SYS-5-CONFIG_I: Configured from console by console
S1#
Step 5 : Verify that privileged mode access to secure
a. Enter the exit command again to log out of the switch
b. Press <Enter> and you will now be asked for a password
User Access Verification
Password :
c. The first password is the console password you configured for line con0. Enter this password to return to user EXEC mode
d. Enter the command to access privileged mode
e. Enter the second password you can configured in protect privileged EXEC mode
f. Verify your configurations by examining the contents of the running configuration file
S1# show running-config
Notice how the console and enable passwords are both in plain text. This could pose a security risk if someone is looking over your shoulder.
Step 6 : Configure an encrypted password to secure access to privileged mode
The enable password should be replaced with the newer encrypted secret password using the enable secret command. Set the enable secret password to itsasecret.
S1# config t
S1(config)# enable secret itsasecret
S1(config)# exit
S1#
Note : The enable secret password overrides the enables password. If both are configured on the switch, you must enter the enable secret password to enter privileged EXEC mode
Step 7 : Verify that
the enable secret password is added to the configuration file
a. Enter the show running-config command again to verify the
new enable secret password is configured
Note : You can abbreviate show running-config as
S1# show run
Step 8 : Encrypt the
enable and console passwords
As you noticed in Step 7, the enable secret password was
encrypted, but the enable and console passwords were still in plain text. We
will now encrypt these plain text passwords using the service password
encryption command.
S1# config t
S1(config)# service password-encryption
S1(config)# exit
Part 3 : Configure a
MOTD Banner
Step 1 : Configure a message of the day (MOTD) banner
The Cisco IOS command set include a feature that allow you
to configure message that anyone logging onto the switch sees. These messages
are called
Message of the day or MOTD banners. Enclose the banner text
in quotations or use a delimiter different from any character appearing in the
MOTD string
S1# config t
S1(config)# banner motd “This is a secure system. Authorized
Access Only!”
S1(config)# exit
%SYS-5-CONFIG_I: Configured from console by console
S1#
Part 4 : Save
Configuration Files to NVRAM
Step 1 : Verify that
the configuration is accurate using the show run command
Step 2 : Save the
configuration file
You have completed the basic configuration of the switch.
Now back up the running configuration file to NVRAM to ensure that the changes
made are not lost if the system is rebooted or loses power
S1# copy running-config startup-config
Destination filename [startup-config]?[Enter]
Building configuration
[OK]
Step 3 : Examine the
startup configuration file
Part 5 : Configure S2
You have completed the configuration on S1. You will now
configure S2. If you cannot remember the commands, refer to Parts 1 to 4 for
assistance
Configure S2 with the following parameters
a. Name davice S2
b. Protect access to the console using the letmein password
c. Configure an enable password of c1$c0 and an enable
secret password of itsasecret
d. Configure a message to those logging into the switch with
the following message
Authorized access only. Unauthorized access is prohibited
and violators will be prosecuted to the full extent of the law
e. Encrypt all plain text passwords
f. Ensure that the configuration is correct
g. Save the configuration file to avoid loss if the switch
is powered down.
3) 6.4.1.3 Packet
Tracert – Concifgure Initial Router Settings
Objectives
Part 1 : Verify the Default Router Configuration
Part 2 : Configure and Verify the Initial Router
Configuration
Part 3 : Save the Running Configuration File.
Background
In this activity, you will perform basic router
configurations. You will secure access to the CLI and console port using
encrypted amd plain text passwords. You will also configure messages for users
logging into the router. These banners also warn unauthorized users that access
is probihited. Finally, you will verify and save your running configuration.
Part 1 : Verify the
Default Router Configuration
Step 1 : Establish a
console connection to R1
a. Choose a console cable from the available connections
b. Click PCA and select RS 232
c. Click R1 and select console
d. Click PCA > Desktop tab > Terminal
e. Click OK and press ENTER. You are now able to configure
R1
Step 2 : Enter privileged
mode and examine the current configuration
You can access all the router commands from privileged EXEC
mode. However, because many of the privileged commands configure operating
parameters, privileged access should be password protect to prevent
unauthorized use.
a. Enter privileged EXEC mode by entering the enable
command.
Router>enable
Router#
Notice that the prompt changed in the configuration to
reflect privileged EXEC mode
b. Enter the show running-config command.
Router# show running-config
c. Display the current contents of NVRAM
Router# show startup-config
Startup-config is not present
Part 2 : Configure and Verify the Initial Router
Configuration
To configure parameters on a router, you may be required to
move between various configuration modes. Notice how the prompt changes as you
navigate through the router.
Step 1 : Configure the Initial Setting on R1
Note : If you have difficulty remembering the commands,
refer to the content for this topic. The commands are the same as you configured
on a switch
a. R1 as the hostname
b. Use the following password
1) console letmein
2) Privileged EXEC unencrypted cisco
3) Privileged EXEC encrypted itsasecret
c. Encrypt all plain text password
d. Message of the day. Unauthorized access is suictly prohibited
Step 2 : Verify the Initial Setting on R1
a. Verify the initial setting by viewing the configuration
for R1. What command do you use?
Answer : show running-config
b. Exit the current console session until you see the
following message
R1 con0 is now available
Press RETURN to get started
c. Press ENTER, you should see the following massage :
Unauthorized access is suictly prohibited
User Access Verification
Password :
If you are not prompted for a password, what console line
command did you forget to configure?
Answer :
R1(config-line)#login
d. Enter the passwprds necessary to return to privileged
EXEC mode
Part 3 : Save the Running Configuration File
Step 1 : Save the configuration file to NVRAM
a. You have configured the initial settings for R1. Now back
up the runing configuration file to NVRAM to ensure that the changes made are
not lost if the system is rebooted or loses power
b. Verify that all of the parameters configured are
recorded. If not, analyze the output and determine which commands were not done
or were entered incorrectly. You can also click check result in the instruction
window
Step 2 : Optional bonus : Save the startup coniguration file
to flash\
a. Examine the contents of flash usinhg the show flash
command
R1# show flash
b. Save the startup configuration file to flash using the
following commands
R1# copy startup-config flash
Destination file name [startup-config]
The router prompts to store the file in flash using the name
in brackets. If the answer is yes, then press ENTER, if not, type an
approproate name and press ENTER
c. Use the show flash command to verify the startup
configuration file is now stored in flash
4) 6.4.3.3 Packet Tracer – Connect a Router to a LAN
Background
In this activity, you will use various show commands to
display the current state of the router. You will then use the Addressing Table
to configure router Ethernet interface. Finally, you will use commands to
verify and test your configurations.
Note : The routers in
this activity are partially configured. Some of the configurations are not
covered in this course, but are provided to assist you in using verification
commands.
Part 1 : Display
Router Information
Step 1 : Display interface information on R1
Note : Click a device and then click the CLI tab to access
the command line directly. The console password is cisco. The privileged EXEC
password is class
Step 2 : Display a summary list of the interfaces on R1
Step 3 : Display the routing table on R1
Part 2 : Configure Router Interface
Step 1 : Configure the GigabitEthernet 0/0 interface on R1
a. Enter the following commands to address and activate the
GigabitEthernet 0/0 interface on R1
R1(config)# interface gigabitethernet 0/0
R1(config-if)#ip address 192.168.10.1 255.255.255.0
R1(config-if)#no shutdown
%LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state
to up
%LINEPROTO-5-UPDOWN: Line protocol on interface
GigabitEthernet0/0, changed state to up
b. It is good practice to configure a description for each
interface to help document the network information configure an interface
description indicating to which device it is connected
R1(config-if)# description LAN connection to S1
c. R1 should now be able to ping PC1
R1(config-if)# end
%SYS-5-CONFIG-I: Configured from console by console
R1# ping 192.168.10.10
Type escape sequence to abort
Sending 5, 100-byte ICMP Echos to 192.168.10.10, timeout is
2 seconds!!!!
Step 2 : Configure
the remaining Gigabit Ethernet Interface on R1 and R2
a. Use the information in the Addressing Table to finish the
interface configurations for R1 and R2. For each interface, do the following.
1) Enter the IP Address and activate the interface
2) Configure an appropriate description
b. Verify interface configurations
Step 3 : Back up the configurations to NVRAM
Save the configuration file on both router to NVRAM. What
command did you use?
Answer : copy run start
Part 3 : Verify the Configuration
Step 1 : Use verification commands to check your interface
configurations
a. Use the show ip inteface brief command on both R1 and R2
to quickly verify that the interface are configured with the correct IP Address
and active
b. Use the show ip route command on both R1 and R2 to view
the current routing tables
Step 2 : Test end-to-end connectivity across the network
You should no be able to ping from any PC to any other PC on
the network to addition, you should be able to ping the active interface on the
routers. For example, the following should test should be successful
- From the command line on PC1, ping PC4
- From the command line on R2, ping PC2
Note : For simplicity in this activity, the switches are not
configured, you will no be able to ping them.
Untuk mempelajari jaringan komputer lebih lanjut cek video di bawah ini :
