1. © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.1 Configuring Network Devices Working at a Small-to-Medium Business or ISP – Chapter 5

2. 2 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Objectives  Configure a router with an initial configuration.  Use Cisco SDM to configure a Cisco ISR with LAN connectivity, Internet connectivity and NAT.  Configure a Cisco router for LAN connectivity, Internet connectivity and NAT using the Cisco IOS CLI.  Configure a WAN connection from customer premises to an ISP.  Describe, setup and configure a standalone LAN switch.

3. 3 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration  ISR combines routing, LAN switching, security, voice, and WAN connectivity features

4. 4 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration  Cisco IOS software modules are called images  IP Base image: entry-level Cisco IOS  Images are specific to models of devices

5. 5 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Cisco IOS Software  http://www.cisco.com/public/sw-center/sw-ios.shtml http://www.cisco.com/public/sw-center/sw-ios.shtml  What do you notice about the categories underneath the Products and Downloads section and the capabilities of the Cisco's ISRs?  Any similarities?  Why does Microsoft offer so many different versions of their software?  How is this similar to the different images offered by the Cisco IOS?  How is it different?

6. 6 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public The Bootup Process  Startup Configuration File The startup configuration file is the saved configuration file that sets the properties of the device each time the device is powered up. This file is stored in non-volatile RAM (NVRAM), meaning that it is saved even when power to the device is turned off. When the startup configuration file is loaded into RAM, the file becomes the initial running configuration.

7. 7 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public The Bootup Process  Running Configuration File  The term running configuration refers to the current configuration running in RAM on the device. This file contains the commands used to determine how the device operates on the network.  The running configuration file is stored in the working memory of the device. Changes to the configuration and various device parameters can be made when the file is in working memory.  copy running-config startup-config

8. 8 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration  Tools and equipment required for setup:

9. 9 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration Three-stage bootup process:  Power-on self test (POST)  Locate and load Cisco IOS  Locate startup configuration file or enter setup mode

10. 10 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration Verifying and troubleshooting bootup process:  View output from the show version command  Use dir flash: and boot flash: in ROMmon mode  View boot system commands

11. 11 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public What does the command ‘show version’ return?”  http://articles.techrepublic.com.com/5100-10878_11- 6026475.html http://articles.techrepublic.com.com/5100-10878_11- 6026475.html  The version of the IOS operating system  The version of the ROM bootstrap  The version of the boot loader  How someone last powered on the device (In addition to powering on in the usual manner, you can also power on a device with a system reset (i.e., warm reboot) or by a system panic.) …

12. 12 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration  Out-of-band management for initial configuration  In-band management over a network connection

13. 13 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial ISR Router Configuration  Command Line Interface (CLI): text-based program  Security Device Manager (SDM): web-based GUI

14. 14 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Using Cisco SDM Express and SDM  Follow best practices for installing a new device to ensure correct functions

15. 15 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Using Cisco SDM Express and SDM Eight SDM Express configuration screens:  Overview  Basic configuration  LAN IP address  DHCP  Internet (WAN)  Firewall  Security settings  Summary

16. 16 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Using Cisco SDM Express and SDM  Use Basic NAT Wizard to configure dynamic NAT with PAT

17. 17 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  CLI command modes: two levels of access

18. 18 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Configuration modes can alter the operation of the device

19. 19 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI Help features:  Command completion  Error indicators  Command history  Arrow and function keys

20. 20 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Show commands display configuration and operation information

21. 21 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Use Cisco IOS CLI to perform an initial router configuration

22. 22 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Configure serial and Ethernet interfaces on a router

23. 23 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Configure a default route for the Cisco router

24. 24 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Configure a Cisco router to function as a DHCP server

25. 25 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Router1# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router1(config)# ip dhcp pool MyVlan1 Router1(dhcp-config)# network 172.25.1.0 255.255.255.0 Router1(dhcp-config)# default-router 172.25.1.1 172.25.1.3 Router1(dhcp-config)# domain-name MyDomain.com Router1(dhcp-config)# dns-server 172.25.1.1 10.1.2.3 Router1(dhcp-config)# netbios-name-server 172.25.1.1 Router1(dhcp-config)# netbios-node-type h-node Router1(dhcp-config)# option 66 ip 10.1.1.1 Router1(dhcp-config)# option 33 ip 192.0.2.1 172.25.1.3 Router1(dhcp-config)# option 31 hex 01 Router1(dhcp-config)# lease 2 Router1(dhcp-config)# exit Router1(config)# end Router1# These option codes are defined in RFC 2132. Option 66 identifies a TFTP server Option 33 specifies static routes Option 31 tells the client to use ICMP Router Discovery Protocol (IRDP). Complete DHCP Example

26. 26 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Configure static NAT on a Cisco router to enable Internet access for an internal server

27. 27 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Complete Dynamic NAT Example Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# access-list 15 permit 192.168.0.0 0.0.255.255 Router(config)# ip nat pool MyPOOL 172.16.1.100 172.16.1.150 netmask 255.255.255.0 Router(config)# ip nat inside source list 15 pool MyPOOL Router(config)# interface FastEthernet 0/0 Router(config-if)# ip address 192.168.1.1 255.255.255.0 Router(config-if)# ip nat inside Router(config-if)# exit Router(config)# interface Ethernet1/0 Router(config-if)# ip address 172.16.1.2 255.255.255.0 Router(config-if)# ip nat outside Router(config-if)# exit Router(config)# end Router# The first internal device that makes an outbound connection will get the first address in the range, 172.16.1.100, the next one will get the next address, 172.16.1.101, and so forth

28. 28 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Complete Dynamic NAT Example Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)# access-list 15 permit 192.168.0.0 0.0.255.255 Router(config)# ip nat pool MyPOOL 172.16.1.100 172.16.1.150 netmask 255.255.255.0 Router(config)# ip nat inside source list 15 pool MyPOOL Router(config)# interface FastEthernet 0/0 Router(config-if)# ip address 192.168.1.1 255.255.255.0 Router(config-if)# ip nat inside Router(config-if)# exit Router(config)# interface FastEthernet 0/1 Router(config-if)# ip address 192.168.2.1 255.255.255.0 Router(config-if)# ip nat inside Router(config-if)# exit Router(config)# interface Ethernet1/0 Router(config-if)# ip address 172.16.1.2 255.255.255.0 Router(config-if)# ip nat outside Router(config-if)# exit Router(config)# end Router# The first internal device that makes an outbound connection will get the first address in the range, 172.16.1.100, the next one will get the next address, 172.16.1.101, and so forth

29. 29 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Back up and restore configuration files using a TFTP server

30. 30 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Configuring a Router Using IOS CLI  Capture and save configuration file output from a terminal session

31. 31 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP  Configuration checklists ensure that all configuration requirements are met

32. 32 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP  Use inventory and configuration checklists and an installation plan to ensure successful installation

33. 33 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP  Documentation includes diagrams, checklists, and activity logs

34. 34 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP Types of customer connections over a WAN:  Point-to-point  Circuit-switched  Packet-switched

35. 35 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP  Bandwidth and cost influence WAN choices

36. 36 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Connecting the CPE to the ISP  Clock rate and serial encapsulation are needed when configuring serial WAN connections

37. 37 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial Cisco 2960 Switch Configuration  Fixed-configuration, standalone devices  Configured using GUI or CLI

38. 38 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial Cisco 2960 Switch Configuration  Check switch components  Connect cables to the switch  Power up the switch and observe POST

39. 39 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial Cisco 2960 Switch Configuration  Switch settings can be configured using the Cisco IOS CLI  Assign an IP address to the default management virtual local area network, VLAN1

40. 40 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial Cisco 2960 Switch Configuration  Connect the stand-alone LAN switch to the router and verify connectivity  Configure port security to prevent unauthorized use  Shut down unused ports

41. 41 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Initial Cisco 2960 Switch Configuration  Cisco Discovery Protocol (CDP) gathers information about directly-connected Cisco network devices  Two Cisco devices directly connected on the same local network are called neighbors

42. 42 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public Summary  The Integrated Services Router (ISR) is a good choice for small to medium businesses and ISP-managed customers.  ISRs can be initially configured using SDM or the router IOS CLI.  When using the CLI, “show” commands verify configuration elements.  An installation plan can minimize disruption to a network when new devices are being added.  Documentation is necessary, both when configuring and when installing network devices.  Switches are assigned IP addresses by configuring them on the management interface, VLAN 1.

43. 43 © 2007 Cisco Systems, Inc. All rights reserved.Cisco Public