search the web

Sunday, October 25, 2015

Configuring Frame-relay Point-To-Point

Configuring Frame-relay Point-To-Point


---------------------------------------
BB_Configuring Frame-relay switch
---------------------------------------
conf t
frame-relay switching
interface s1/1
no ip address
encapsulation frame-relay
frame-relay lmi-type cisco
frame-relay intf-type dce
clock rate 64000
frame-relay route 102 int s1/2 201
frame-relay route 103 int s1/3 301
no shut
exit

int s1/2
no ip address
encap frame-relay
frame-relay lmi-type cisco
frame-relay intf-type dce
clock rate 64000
frame-relay route 201 int s1/1 102
no shut
exit

int s1/3
no ip address
encap frame-relay
frame-relay lmi-type cisco
frame-relay intf-type dce
clock rate 64000
frame-relay route 301 int s1/1 103
no shut
exit

--------------------------------------------
R1
--------------------------------------------
conf t
int s0
encapsulation frame-relay
frame-relay lmi-type cisco
no ip address
exit
int s0.102 point-to-point
!this command enables sub interface on this router which is point to point.
ip address 192.168.2.1 255.255.255.0
no shut
frame-relay interface-dlci 102
exit
exit

interface s0.103 point-to-point
ip address 192.168.3.1 255.255.255.0
no shut
frame-relay interface-dlci 103
exit
exit

--------------------------------------------
R2
--------------------------------------------
conf t
int s0
no ip address
encap frame-relay
frame-relay lmi-type cisco
exit
int s0.201 point-to-point
ip address 192.168.2.2 255.255.255.0
no shut
frame-relay interface-dlci 201
exit
exit

-----------------------------------------------
R3
-----------------------------------------------
conf t
int s0/0
no ip add
encap frame-relay
frame-relay lmi-type cisco
exit
int s0/0.103 point-to-point
ip address 192.168.3.2 255.255.255.0
no shut
frame-relay interface-dlci 301
exit
exit

for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

Sunday, October 18, 2015

Configuring Multipoint Frame Relay Scenario

Configuring Multipoint Frame Relay Scenario


COnfiguring FRAME-RELAY Switch.
-------------------------------------------
BB(configuring BB as FR switch)
conf t
frame-relay switching
!we enable frame-relay switching

int s1/1
no ip address
encapsulation frame-relay
!enables frame-relay encapsulation on this interface
frame-relay lmi-type cisco
!enables the signaling lanuage as cisco on this interface
frame-relay intf-type dce
!tells the device that the interface type connected is dce
clock rate 64000

!now we are creating virtual circuit
frame-relay route 102 interface s1/2 201
!we create a virtual circuit 102 with a destination of interface s1/2 and destination dlci 201
frame-relay route 103 interface s1/3 301
exit
interface s1/2
encapsulation frame-relay
frame-relay lmi-type cisco
frame-relay intf-type dce
clock rate 64000
frame-relay route 201 int s1/1 102
no shut
exit

interface s1/3
encapsulation frame-relay
frame-relay lmi-type cisco
frame-relay intf type dce
clock rate 64000
frame-relay route 301 int s1/1 103
no shut
exit

----------------------------------------------------
R1
----------------------------------------------------
conf t
int s0
encapsulation frame-relay
frame-relay lmit-type cisco
ip address 192.168.1.1 255.255.255.0
no shut
frame-relay map 192.168.1.2 102 broadcast
!means that map the remote ip 192.168.1.2 with the local dlci 102 and also enable broadcast on it so that it forwards the broadcast or multicast traffic of the routing protcols
frame-relay map ip 192.168.1.3 103 broadcast
exit


--------------------------------------------------------
R2
--------------------------------------------------------
conf t
int s0
encapsulation frame-relay
frame-relay lmi-type cisco
ip address 192.168.1.2 255.255.255.0
frame-relay map 192.168.1.1 201 broadcast
frame-relay map 192.168.1.3 201 broadcast
!we mapped the ip address of 192.168.1.3 through 201 dlci which is local to us
no shut
exit

-------------------------------------------------------
R3
-------------------------------------------------------
conf t
int s0/0
encap frame-relay
frame-relay lmi-type cisco
ip address 192.168.1.3 255.255.255.0
frame-relay map ip 192.168.1.1 301 broadcast
frame-relay map ip 192.168.1.2 301 broadcast
exit
exit

show frame-relay map
!see the whether the mappings are active or inactive, shows details about mappings

show frame-relay lmi
!shows the details about frame-relay lmi, signaling statistics. check the messages sent and messages recieved, they must be equal to each other. Also check if there is lmi mismatch, check the timeouts.

SPLIT HORIZON PROBLEM
on router 1
conf t
int s0
no ip split-horizon eigrp 10
exit


for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

Sunday, October 11, 2015

How to configure EIGRP

Configuring EIGRP

----------------------------------------------------------------
R4
---------------------------------------------------------------
conf t
no router ospf 1

router eigrp 10
!This 10 is the autonomous system number, it must be same on all eigrp speaking routers.
!it is from 1 - 65535

network 192.168.4.0
!If we advertise network like the above command, it will advertise the network with default mask. but we can also advertise with wild card mask

network 192.168.4.0 0.0.0.255
network 192.168.5.0 0.0.0.255
exit

----------------------
BB
----------------------
conf t
no router ospf 1

router eigrp 10
network 192.168.0.0 0.0.255.255

!Through this command we have instructed EIGRP to enable EIGRP on all those interfaces which starts from 192.168 and dont care about the last 2 octet
exit

------------------------------------
R3
------------------------------------
conf t
no router ospf 1
router eigrp 10
network 192.168.3.0 0.0.0.255
network 192.168.5.0 0.0.0.255
exit

-----------------------------------------
R1
-----------------------------------------
conf t

interface loop 0
ip address 172.16.0.1 255.255.255.0
no shut
exit
interface loop 1
ip address 172.16.1.1 255.255.255.0
no shut
exit
interface loop 2
ip address 172.16.2.1 255.255.255.0
no shut
exit
interface loop 3
ip address 172.16.3.1 255.255.255.0
no shut
exit
interface loop 4
ip address 172.16.4.1 255.255.255.0
no shut
exit
interface loop 5
ip address 172.16.5.1 255.255.255.0
no shut
exit
interface loop 6
ip address 172.16.6.1 255.255.255.0
no shut
exit

interface loop 7
ip address 172.16.7.1 255.255.255.0
no shut
exit

no router ospf 1

router eigrp 10
network 192.168.1.0
network 172.16.0.0

!IF we advertise the networks like we did above, R1 will tell all the routers that all the networks of class B 172.16.0.0 is here with me.

!The command that we will apply is to instruct EIGRP not to auto-summarize. It is recommened to apply the no auto-summary on all the eigrp routers, because it is good to manually configure EIGRP rather than leaving it by default.

no auto-summary



! To summarize route towards the backbone we apply the summary address on the interface connected to backbone

R1
conf t
interface s0
ip summary-address eigrp 10 172.16.0.0 255.255.248.0
exit
exit

for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

Thursday, October 8, 2015

Configuring cisco switch as dhcp server

configuring cisco switch as dhcp server


conf t
ip dhcp pool internal
!This enables dhcp pool as internal

network 192.168.0.0 /24
!tells the network from which the switch will assign ip addresses.

default-router 192.168.0.1
!default router here means the default gateway

dns-server 4.2.2.2

domain-name networkers.af

lease 0 2
!enables lease for 2 days
exit

ip dhcp excluded-address 192.168.0.1 192.168.0.10
exit

service dhcp
!this command enables dhcp service

show ip dhcp binding
!shows dhcp ip to mac binding

for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

Monday, October 5, 2015

Cisco Discovery Protocol

Cisco Discovery Protocol

CDP or cisco discovery Protocol is the protocol used for gathering information about the cisco devices on the network.
CDP is cisco proprietary which means that it works on cisco devices only.
Enabling CDP on a cisco device enables its neighbors to gather information about that device. Each and every cisco switch or router sends cdp information also called CDP advertisement to the neighboring devices which contains the information about that device at each specific intervals. meaning the routers or switches are doing cdp advertisement after every 60 seconds by default. There are four main commands which are:

show cdp neighbor
show cdp entry
cdp run
cdp enable


BB Router
conf t
cdp run
no cdp run
This command enables or disables cdp globally.

int s1/1
cdp enable
no cdp enable
This command enables or disables the cdp on per interface bases.
exit
exit
show cdp neighbors
!shows the directly connected neighbors and all their information.
show cdp entry {DEVICE-ID}
!shows informatin about a specific device.

for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

Sunday, October 4, 2015

mac filtering



Mac filtering

Configuring ACL-access list

Configuring ACL on Cisco Routers.


1.Deny Any Traffic from 192.168.0.103 to R1
2.Deny telnet from 192.168.0.103 to R1
3.Block any traffic to networkers.af
4.permit only telnet traffic from 192.168.0.103 and deny all others
5.Apply reflexive ACL on R1 so that on the traffic can be allowed from R1.

1.Deny Any Traffic from 192.168.0.103 to R1
R1
conf t
access-list 1 deny 192.168.0.103 0.0.0.0
access-list 1 permit any
int e0
ip access-group 1 in
!This command applies access-list on interface e0 inbound
exit
--------------------------
Same example with NAmed ACL
---------------------------
conf t
ip access-list standard DENYHOST
deny 192.168.0.103 0.0.0.0
permit any
exit
int e0
ip access-group DENYHOST in
exit

2.Deny telnet from 192.168.0.103 to R1
conf t
no access-list 1
access-list 10 deny 192.168.0.103 0.0.0.0
line vty 0 4
access-class 10 in
!This command applies ACL 10 on line vty inbound

3.Block any traffic to networkers.af
R1
conf t
access-list 101 deny tcp any host 205.209.127.53 eq www
OR
access-list 101 deny tcp 192.168.0.0 0.0.255.255 host 205.209.127.53 eq www

4.permit only telnet traffic from 192.168.0.103 and deny all others
no access-list 101

access-list 100 permit tcp host 192.168.0.103 host 192.168.0.1 eq telnet
!This command permits only host 192.168.0.103 to the router 1 which has an ip 192.168.0.1. As we know there is a deny all at the end so all others will be automatically denied from doing telnet to the R1 VTY lines.

line vty 0 4
access-class 100 in
exit

show access-lists

---------------
NAMED ACL
--------------

conf t
ip access-list standard DENYHOST
deny 192.168.0.103 0.0.0.0
permit any
exit
int e0
ip access-group DENYHOST in
exit


when you do show access-list, you will some some numbers before the acl entry.
that number is called the sequence number and you can edit the acl with that
for example
ip access-list standard DENYHOST
no 20
15 permit any
by doing no 20, it will remove the acl entry number 20 and will add a new entry with the second command.


for initial configuration of Router, switch or AP visit link below
initial configuration of Router, Switch or AP

download and install cisco packet tracer