14.3.5 Packet Tracer - Basic Router Configuration Review Answers
Topology
14.3.5 Packet Tracer - Basic Router Configuration Review
Addressing Table
| Device | Interface | IP Address / Prefix | Default Gateway |
|---|---|---|---|
| R2 | G0/0/0 | 10.0.4.1 /24 | N/A |
| 2001:db8:acad:4::1 /64 | |||
| fe80::2:a | |||
| G0/0/1 | 10.0.5.1 /24 | ||
| 2001:db8:acad:5::1 /64 | |||
| fe80::2:b | |||
| S0/1/0 | 10.0.3.2 /24 | ||
| 2001:db8:acad:3::2 /64 | |||
| fe80::1:c | |||
| S0/1/1 | 209.165.200.225 /30 | ||
| 2001:db8:feed:224::1 /64 | |||
| fe80::1:d | |||
| PC1 | NIC | 10.0.1.10 /24 | 10.0.1.1 |
| 2001:db8:acad:1::10 /64 | fe80::1:a | ||
| PC2 | NIC | 10.0.2.10 /24 | 10.0.2.1 |
| 2001:db8:acad:2::10 /64 | fe80::1:b | ||
| PC3 | NIC | 10.0.4.10 /24 | 10.0.4.1 |
| 2001:db8:acad:4::10 /64 | fe80::2:a | ||
| PC4 | NIC | 10.0.5.10 /24 | 10.0.5.1 |
| 2001:db8:acad:5::10 /64 | fe80::2:b |
Objectives
Part 1: Configure Devices and Verify Connectivity
- Assign static IPv4 and IPv6 addresses to the PC interfaces.
- Configure basic router settings.
- Configure the router for SSH.
- Verify network connectivity.
Part 2: Display Router Information
- Retrieve hardware and software information from the router.
- Interpret the startup configuration.
- Interpret the routing table.
- Verify the status of the interfaces.
Background / Scenario
This activity requires you to configure the R2 router using the settings from the Addressing Table and the specifications listed. The R1 router and the devices connected to it have been configured. This is a comprehensive review of previously covered IOS router commands. In Part 1, you will complete basic configurations and interface settings on the router. In Part 2, you will use SSH to connect to the router remotely and utilize the IOS commands to retrieve information from the device to answer questions about the router. For review purposes, this lab provides the commands necessary for specific router configurations.
Instructions
Part 1: Configure Devices and Verify Connectivity
Step 1: Configure the PC interfaces.
a. Configure the IPv4 and IPv6 addresses on PC3 as listed in the Addressing Table.
b. Configure the IPv4 and IPv6 addresses on PC4 as listed in the Addressing Table.
Step 2: Configure the router.
a. On the R2 router, open a terminal. Move to privileged EXEC mode.
Router> enable
b. Enter configuration mode.
Router# configure terminal
c. Assign a device name of R2 to the router.
Router(config)# hostname R2
d. Configure c1sco1234 as the encrypted privileged EXEC mode password.
R2(config)# enable secret c1sco1234
e. Set the domain name of the router to ccna-lab.com.
R2(config)# ip domain-name ccna-lab.com
f. Disable DNS lookup to prevent the router from attempting to translate incorrectly entered commands as though they were host names.
R2(config)# no ip domain lookup
g. Encrypt the plaintext passwords.
R2(config)# service password-encryption
h. Configure the username SSHadmin with an encrypted password of 55Hadm!n.
R2(config)# username SSHadmin secret 55Hadm!n
i. Generate a set of crypto keys with a 1024 bit modulus.
R2(config)# crypto key generate rsa general-keys modulus 1024
j. Assign cisco as the console password, configure sessions to disconnect after six minutes of inactivity, and enable login. To prevent console messages from interrupting commands, use the logging synchronous command.
R2(config)# line console 0 R2(config-line)# password cisco R2(config-line)# logging synchronous R2(config-line)# exec-timeout 6 0 R2(config-line)# login
k. Assign cisco as the vty password, configure the vty lines to accept SSH connections only, configure sessions to disconnect after six minutes of inactivity, and enable login using the local database.
R2(config)# line vty 0 4 R2(config-line)# password cisco R2(config-line)# exec-timeout 6 0 R2(config-line)# transport input ssh R2(config-line)# login local
l. Create a banner that warns anyone accessing the device that unauthorized access is prohibited.
R2(config)# banner motd $ WARNING Authorized Users Only! $
m. Enable IPv6 Routing.
R2(config)# ipv6 unicast-routing
n. Configure all four interfaces on the router with the IPv4 and IPv6 addressing information from the addressing table above. Configure all four interfaces with descriptions. Activate all four interfaces.
R2(config)# interface gigabitethernet 0/0/0 R2(config-if)# description Connection to S3 R2(config-if)# ip address 10.0.4.1 255.255.255.0 R2(config-if)# ipv6 address fe80::2:a link-local R2(config-if)# ipv6 address 2001:db8:acad:4::1/64 R2(config-if)# no shutdown R2(config-if)# interface gigabitethernet 0/0/1 R2(config-if)# description Connection to S4 R2(config-if)# ip address 10.0.5.1 255.255.255.0 R2(config-if)# ipv6 address fe80::2:b link-local R2(config-if)# ipv6 address 2001:db8:acad:5::1/64 R2(config-if)# no shutdown R2(config-if)# interface serial 0/1/0 R2(config-if)# description Link to R1 R2(config-if)# ip address 10.0.3.2 255.255.255.0 R2(config-if)# ipv6 address fe80::1:c link-local R2(config-if)# ipv6 address 2001:db8:acad:3::2/64 R2(config-if)# no shutdown R2(config-if)# interface serial 0/1/1 R2(config-if)# description Link to Internet R2(config-if)# ip address 209.165.200.225 255.255.255.252 R2(config-if)# ipv6 address fe80::1:d link-local R2(config-if)# ipv6 address 2001:db8:feed:224::1/64 R2(config-if)# no shutdown
o. Save the running configuration to the startup configuration file.
R2# copy running-config startup-config
Step 3: Verify network connectivity.
a. Using the command line at PC3, ping the IPv4 and IPv6 addresses for PC4.
C:\> ping 10.0.5.10 C:\> ping 2001:db8:acad:5::10
Were the pings successful?
Yes
b. From the CLI on R2 ping the S0/1/1 address of R1 for both IPv4 and IPv6. The addresses assigned to the S0/1/1 interface on R1 are:
IPv4 address = 10.0.3.1
IPv6 address = 2001:db8:acad:3::1
R2# ping 10.0.3.1 R2# ping 2001:db8:acad:3::1
Were the pings successful?
Yes
From the command line of PC3 ping the ISP address 209.165.200.226.
C:\> ping 209.165.200.226
Were the pings successful?
Yes, the PC is using the default gateway router to forward the traffic.
From PC3 attempt to ping an address on the ISP for testing, 64.100.1.1.
C:\> ping 64.100.1.1
Were the pings successful?
No, routing has not been configured on the router, so only directly connected networks are accessible. No default route is set on router R2.
c. From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv4 address and log in as SSHadmin with the password 55Hadm!n.
C:\> ssh -l SSHadmin 10.0.4.1 Password:
Was remote access successful?
Yes
Part 2: Display Router Information
In Part 2, you will use show commands from an SSH session to retrieve information from the router.
Step 1: Establish an SSH session to R2.
From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv6 address and log in as SSHadmin with the password 55Hadm!n.
C:\> ssh -l SSHadmin 2001:db8:acad:4::1 Password:
Step 2: Retrieve important hardware and software information.
a. Use the show version command to answer questions about the router.
R2# show version
Cisco IOS XE Software, Version 03.16.05.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version Version 15.5 (3)S5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 19-Jan-17 11:24 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2017 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
Router uptime is 5 minutes, 26 seconds
Uptime for this control processor is 5 minutes, 26 seconds
System returned to ROM by power-on
System image file is "bootflash:/isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
appxk9
AdvUCSuiteK9 None None None
uck9
cme - srst
cube
Technology Package License Information:
------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
appxk9 None None None
uck9 None None None
securityk9 securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
cisco ISR4321/K9 (1RU) processor with 1687137K/6147K bytes of memory.
Processor board ID FLM2041W2HD
2 Gigabit Ethernet interfaces
2 Serial interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.
Configuration register is 0x2102What is the name of the IOS image that the router is running?
The image name is isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin.
How much non-volatile random-access memory (NVRAM) does the router have?
32768K bytes of NVRAM.
How much Flash memory does the router have?
3223551K bytes of flash memory.
b. The show commands often provide multiple screens of outputs. Filtering the output allows a user to display certain sections of the output. To enable the filtering command, enter a pipe (|) character after a show command, followed by a filtering parameter and a filtering expression. You can match the output to the filtering statement by using the include keyword to display all lines from the output that contain the filtering expression. Filter the show version command, using show version | include register to answer the following question.
R2# show version | include register
Configuration register is 0x2102What is the boot process for the router on the next reload?
Answers may vary. In most cases (0x2102), the router will undergo a normal boot, load the IOS from the Flash memory, and load the startup configuration from the NVRAM if present. If the config register is 0x2142, the router will bypass the startup config and begin at the user-mode command prompt. If the initial boot fails, the router goes into ROMMON mode.
Step 3: Display the running configuration.
a. Use the show running-config command on the router to answer the following questions filtering for lines containing the word “password”.
R2# show running-config | include password
service password-encryption
password 7 0822455D0A16
password 7 0822455D0A16How are passwords presented in the output?
Passwords are encrypted due to the service password-encryption command.
b. Use the show running-config | begin vty command.
R2# show running-config | begin vty
line vty 0 4
exec-timeout 6 0
password 7 0822455D0A16
login local
transport input ssh
!
!
!
endWhat is the result of using this command?
A user receives the running configuration output beginning with the line that includes the first instance of the filtering expression.
Note: A more specific command would be show running-config | section vty; however, the current version of Packet Tracer does not support the section filtering command.
Step 4: Display the routing table on the router.
Use the show ip route command on the router to answer the following questions.
R2# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
C 10.0.3.0/24 is directly connected, Serial0/1/0
L 10.0.3.2/32 is directly connected, Serial0/1/0
C 10.0.4.0/24 is directly connected, GigabitEthernet0/0/0
L 10.0.4.1/32 is directly connected, GigabitEthernet0/0/0
C 10.0.5.0/24 is directly connected, GigabitEthernet0/0/1
L 10.0.5.1/32 is directly connected, GigabitEthernet0/0/1
209.165.200.0/24 is variably subnetted, 2 subnets, 2 masks
C 209.165.200.224/30 is directly connected, Serial0/1/1
L 209.165.200.225/32 is directly connected, Serial0/1/1What code is used in the routing table to indicate a directly connected network?
The C designates a directly connected subnet. An L designates a local interface. Both answers are correct.
How many route entries are coded with a C code in the routing table?
4
Step 5: Display a summary list of the interfaces on the router.
a. Use the show ip interface brief command on the router to answer the following question.
R2# show ip interface brief Interface IP-Address OK? Method Status Protocol GigabitEthernet0/0/0 10.0.4.1 YES manual up up GigabitEthernet0/0/1 10.0.5.1 YES manual up up Serial0/1/0 10.0.3.2 YES manual up up Serial0/1/1 209.165.200.225 YES manual up up Vlan1 unassigned YES unset administratively down down
What command changed the status of the Gigabit Ethernet ports from administratively down to up?
no shutdown
What filtering command would you use to display only the interfaces with addresses assigned?
show ip interface brief | exclude unassigned
b. Use the show ipv6 interface brief command to verify IPv6 settings on R2.
R2# show ipv6 interface brief GigabitEthernet0/0/0 [up/up] FE80::2:A 2001:DB8:ACAD:4::1 GigabitEthernet0/0/1 [up/up] FE80::2:B 2001:DB8:ACAD:5::1 Serial0/1/0 [up/up] FE80::1:C 2001:DB8:ACAD:3::2 Serial0/1/1 [up/up] FE80::1:D 2001:DB8:FEED:224::1 Vlan1 [administratively down/down] Unassigned
What is the meaning of the [up/up] part of the output?
The [up/up] status reflects the Layer 1 and Layer 2 status of the interface and does not rely on Layer 3 for status.
Device Configs - Final
ROUTER R2
! ============================================================== !--- 14.3.5 Packet Tracer - Basic Router Configuration Review !--- ANSWER SCRIPT FOR ROUTER R2 !--- Usage: copy this whole file and paste it into the R2 terminal (start at the Router> prompt). Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless. ! ============================================================== enable configure terminal ! -------------------------------------------------------------- !--- Part 1: Configure Devices and Verify Connectivity. ! -------------------------------------------------------------- !--- c. Assign a device name of R2 to the router. hostname R2 !--- d. Configure c1sco1234 as the encrypted privileged EXEC mode password. enable secret c1sco1234 !--- e. Set the domain name of the router to ccna-lab.com. ip domain-name ccna-lab.com !--- f. Disable DNS lookup so mistyped commands are not translated as host names. no ip domain lookup !--- g. Encrypt the plaintext passwords. service password-encryption !--- h. Configure the username SSHadmin with an encrypted password of 55Hadm!n. username SSHadmin secret 55Hadm!n !--- i. Generate a set of crypto keys with a 1024 bit modulus (hostname and domain name are already set). crypto key generate rsa general-keys modulus 1024 !--- j. Console: password cisco, logging synchronous, 6-minute inactivity timeout, enable login. line console 0 password cisco logging synchronous exec-timeout 6 0 login exit !--- k. VTY: password cisco, 6-minute inactivity timeout, SSH connections only, login using the local database. line vty 0 4 password cisco exec-timeout 6 0 transport input ssh login local exit !--- l. Create a banner that warns that unauthorized access is prohibited. banner motd $ WARNING Authorized Users Only! $ !--- m. Enable IPv6 routing. ipv6 unicast-routing !--- n. G0/0/0: description, IPv4, IPv6 link-local and global addresses, activate. interface gigabitethernet 0/0/0 description Connection to S3 ip address 10.0.4.1 255.255.255.0 ipv6 address fe80::2:a link-local ipv6 address 2001:db8:acad:4::1/64 no shutdown exit !--- n. G0/0/1: description, IPv4, IPv6 link-local and global addresses, activate. interface gigabitethernet 0/0/1 description Connection to S4 ip address 10.0.5.1 255.255.255.0 ipv6 address fe80::2:b link-local ipv6 address 2001:db8:acad:5::1/64 no shutdown exit !--- n. S0/1/0: description, IPv4, IPv6 link-local and global addresses, activate. interface serial 0/1/0 description Link to R1 ip address 10.0.3.2 255.255.255.0 ipv6 address fe80::1:c link-local ipv6 address 2001:db8:acad:3::2/64 no shutdown exit !--- n. S0/1/1: description, IPv4, IPv6 link-local and global addresses, activate. interface serial 0/1/1 description Link to Internet ip address 209.165.200.225 255.255.255.252 ipv6 address fe80::1:d link-local ipv6 address 2001:db8:feed:224::1/64 no shutdown exit end ! -------------------------------------------------------------- !--- o. Save the running configuration to the startup configuration file. (Press Enter when prompted for the destination filename.) ! -------------------------------------------------------------- copy running-config startup-config ! ============================================================== !--- Verification: !--- show ip interface brief -> G0/0/0, G0/0/1, S0/1/0 and S0/1/1 up/up with their IPv4 addresses !--- show ipv6 interface brief -> the four interfaces [up/up] with their link-local and global addresses !--- ping 10.0.3.1 -> R1 (IPv4) replies !--- ping 2001:db8:acad:3::1 -> R1 (IPv6) replies !--- From PC3: ssh -l SSHadmin 10.0.4.1 (password 55Hadm!n) -> SSH login to R2 succeeds !--- Note: PC3 cannot reach 64.100.1.1 because R2 has no default route - this is the expected result. ! ==============================================================
