14.3.5 Packet Tracer - Basic Router Configuration Review (Instructor Version)
14.3.5 Packet Tracer - Basic Router Configuration Review
Addressing Table
| Device | Interface | IP Address / Prefix | Default Gateway |
|---|---|---|---|
| R2 | G0/0/0 | 10.0.4.1 /24 | N/A |
| 2001:db8:acad:4::1 /64 | |||
| fe80::2:a | |||
| G0/0/1 | 10.0.5.1 /24 | ||
| 2001:db8:acad:5::1 /64 | |||
| fe80::2:b | |||
| S0/1/0 | 10.0.3.2 /24 | ||
| 2001:db8:acad:3::2 /64 | |||
| fe80::1:c | |||
| S0/1/1 | 209.165.200.225 /30 | ||
| 2001:db8:feed:224::1/64 | |||
| fe80::1:d | |||
| PC1 | NIC | 10.0.1.10 /24 | 10.0.1.1 |
| 2001:db8:acad:1::10 /64 | fe80::1:a | ||
| PC2 | NIC | 10.0.2.10 /24 | 10.0.2.1 |
| 2001:db8:acad:2::10 /64 | fe80::1:b | ||
| PC3 | NIC | 10.0.4.10 /24 | 10.0.4.1 |
| 2001:db8:acad:4::10 /64 | fe80::2:a | ||
| PC4 | NIC | 10.0.5.10 /24 | 10.0.5.1 |
| 2001:db8:acad:5::10 /64 | fe80::2:b |
Objectives
Part 1: Configure Devices and Verify Connectivity
- Assign static IPv4 and IPv6 addresses to the PC interfaces.
- Configure basic router settings.
- Configure the router for SSH.
- Verify network connectivity.
Part 2: Display Router Information
- Retrieve hardware and software information from the router.
- Interpret the startup configuration.
- Interpret the routing table.
- Verify the status of the interfaces.
Background / Scenario
This activity requires you to configure the R2 router using the settings from the Addressing Table and the specifications listed. The R1 router and the devices connected to it have been configured. This is a comprehensive review of previously covered IOS router commands. In Part 1, you will complete basic configurations and interface settings on the router. In Part 2, you will use SSH to connect to the router remotely and utilize the IOS commands to retrieve information from the device to answer questions about the router. For review purposes, this lab provides the commands necessary for specific router configurations.
Instructions
Part 1: Configure Devices and Verify Connectivity
Step 1: Configure the PC interfaces.
a. Configure the IPv4 and IPv6 addresses on PC3 as listed in the Addressing Table.
b. Configure the IPv4 and IPv6 addresses on PC4 as listed in the Addressing Table.
Step 2: Configure the router.
a. On the R2 router, open a terminal. Move to privileged EXEC mode.
Router> enableb. Enter configuration mode.
Router# configure terminalc. Assign a device name of R2 to the router.
Router(config)# hostname R2d. Configure c1sco1234 as the encrypted privileged EXEC mode password.
R2(config)#enable secret c1sco1234e. Set the domain name of the router to ccna-lab.com.
R2(config)# ip domain-name ccna-lab.comf. Disable DNS lookup to prevent the router from attempting to translate incorrectly entered commands as though they were host names.
R2(config)# no ip domain lookupg. Encrypt the plaintext passwords.
R2(config)# service password-encryptionh. Configure the username SSHadmin with an encrypted password of 55Hadm!n.
R2(config)# username SSHadmin secret 55Hadm!ni. Generate a set of crypto keys with a 1024 bit modulus.
R2(config)# crypto key generate rsa modulus 1024j. Assign cisco as the console password, configure sessions to disconnect after six minutes of inactivity, and enable login. To prevent console messages from interrupting commands, use the logging synchronous command.
R2(config)# line console 0 R2(config-line)# password cisco R2(config-line)# logging synchronous R2(config-line)# exec-timeout 6 0 R2(config-line)# login
k. Assign cisco as the vty password, configure the vty lines to accept SSH connections only, configure sessions to disconnect after six minutes of inactivity, and enable login using the local database.
R2(config)# line vty 0 4 R2(config-line)# password cisco R2(config-line)# exec-timeout 6 0 R2(config-line)# transport input ssh R2(config-line)# login local
l. Create a banner that warns anyone accessing the device that unauthorized access is prohibited.
R2(config)# banner motd $ WARNING Authorized Users Only! $m. Enable IPv6 Routing.
R2(config)# ipv6 unicast-routingn. Configure all four interfaces on the router with the IPv4 and IPv6 addressing information from the addressing table above. Configure all four interfaces with descriptions. Activate all four interfaces.
R2(config)# interface g0/0/0 R2(config-if)# description Connection to S3 R2(config-if)# ip address 10.0.4.1 255.255.255.0 R2(config-if)# ipv6 address fe80::2:a link-local R2(config-if)# ipv6 address 2001:db8:acad:4::1/64 R2(config-if)# no shutdown R2(config)# interface g0/0/1 R2(config-if)# description Connection to S4 R2(config-if)# ip address 10.0.5.1 255.255.255.0 R2(config-if)# ipv6 address fe80::2:b link-local R2(config-if)# ipv6 address 2001:db8:acad:5::1/64 R2(config-if)# no shutdown R2(config)# interface s0/1/0 R2(config-if)# description Link to R1 R2(config-if)# ip address 10.0.3.2 255.255.255.0 R2(config-if)# ipv6 address fe80::1:c link-local R2(config-if)# ipv6 address 2001:db8:acad:3::2/64 R2(config-if)# no shutdown R2(config-if)# interface s0/1/1 R2(config-if)# description Link to Internet R2(config-if)# ip address 209.165.200.225 255.255.255.252 R2(config-if)# ipv6 address fe80::1:d link-local R2(config-if)# ipv6 address 2001:db8:feed:224::1/64 R2(config-if)# no shutdown
o. Save the running configuration to the startup configuration file.
R2# copy running-config startup-configStep 3: Verify network connectivity.
a. Using the command line at PC3, ping the IPv4 and IPv6 addresses for PC4.
Were the pings successful?
Yes
b. From the CLI on R2 ping the S0/1/1 address of R1 for both IPv4 and IPv6. The addresses assigned to the S0/1/1 interface on R1 are:
IPv4 address = 10.0.3.1
IPv6 address = 2001:db8:acad:3::1
Were the pings successful?
Yes
From the command line of PC3 ping the ISP address 209.165.200.226.
Were the pings successful?
Yes, the PC is using the default gateway router to forward the traffic.
From PC3 attempt to ping an address on the ISP for testing, 64.100.1.1.
Were the pings successful?
No, routing has not been configured on the router so only local connected networks are accessible. No default route is set on router R2.
c. From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv4 address and log in as SSHadmin with the password 55Hadm!n.
C:\> ssh -l SSHadmin 10.0.4.1 Password:
Was remote access successful?
Yes
Part 2: Display Router Information
In Part 2, you will use show commands from an SSH session to retrieve information from the router.
Step 1: Establish an SSH session to R2.
From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv6 address and log in as SSHadmin with the password 55Hadm!n.
Step 2: Retrieve important hardware and software information.
a. Use the show version command to answer questions about the router.
R2# show version
Cisco IOS XE Software, Version 03.16.05.S - Extended Support Release
Cisco IOS Software, ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version Version 15.5 (3)S5, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2017 by Cisco Systems, Inc.
Compiled Thu 19-Jan-17 11:24 by mcpre
Cisco IOS-XE software, Copyright (c) 2005-2017 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.
ROM: IOS-XE ROMMON
Router uptime is 8 hours, 27 minutes, 40 seconds
Uptime for this control processor is 8 hours, 27 minutes, 40 seconds
System returned to ROM by power-on
System image file is "bootflash:/isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin"
Last reload reason: PowerOn
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.
A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html
If you require further assistance please contact us by sending email to
[email protected].
Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
appxk9
AdvUCSuiteK9 None None None
uck9
cme - srst
cube
Technology Package License Information:
------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
appxk9 None None None
uck9 None None None
securityk9 securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
cisco ISR4321/K9 (1RU) processor with 1687137K/6147K bytes of memory.
Processor board ID FLM2041W2HD
2 Gigabit Ethernet interfaces
2 Serial interfaces
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
3223551K bytes of flash memory at bootflash:.
Configuration register is 0x2102
What is the name of the IOS image that the router is running?
Image version isr4300-universalk9.03.16.05.S.155-3.S5-ext.SPA.bin.
How much non-volatile random-access memory (NVRAM) does the router have?
32768K bytes of NVRAM.
How much Flash memory does the router have?
3223551K bytes of flash memory.
b. The show commands often provide multiple screens of outputs. Filtering the output allows a user to display certain sections of the output. To enable the filtering command, enter a pipe (|) character after a show command, followed by a filtering parameter and a filtering expression. You can match the output to the filtering statement by using the include keyword to display all lines from the output that contain the filtering expression. Filter the show version command, using show version | include register to answer the following question.
R2# show version | include register Configuration register is 0x2102
What is the boot process for the router on the next reload?
Answers may vary. In most cases (0x2102), the router will undergo a normal boot, load the IOS from the Flash memory, and load the startup configuration from the NVRAM if present. If the config register is 0x2142, the router will bypass the startup config and begin at the user-mode command prompt. If the initial boot fails, the router goes into ROMMON mode.
Step 3: Display the running configuration.
a. Use the show running-config command on the router to answer the following questions filtering for lines containing the word “password”.
R2# show running-config | include password
service password-encryption
password 7 0822455D0A16
password 7 0822455D0A16
How are passwords presented in the output?
Passwords are encrypted due to the service password-encryption command.
b. Use the show running-config | begin vty command.
R2# show running-config | begin vty
line vty 0 4
exec-timeout 6 0
password 7 0822455D0A16
login local
transport input ssh
What is the result of using this command?
A user receives the running configuration output beginning with the line that includes the first instance of the filtering expression.
Note: A more specific command would be show running-config | section vty; however, the current version of Packet Tracer does not support the section filtering command.
Step 4: Display the routing table on the router.
Use the show ip route command on the router to answer the following questions.
R2# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
10.0.0.0/8 is variably subnetted, 6 subnets, 2 masks
C 10.0.3.0/24 is directly connected, Serial0/1/0
L 10.0.3.2/32 is directly connected, Serial0/1/0
C 10.0.4.0/24 is directly connected, GigabitEthernet0/0/0
L 10.0.4.1/32 is directly connected, GigabitEthernet0/0/0
C 10.0.5.0/24 is directly connected, GigabitEthernet0/0/1
L 10.0.5.1/32 is directly connected, GigabitEthernet0/0/1
209.165.200.0/24 is variably subnetted, 2 subnets, 2 masks
C 209.165.200.224/30 is directly connected, Serial0/1/1
L 209.165.200.225/32 is directly connected, Serial0/1/1Questions:
What code is used in the routing table to indicate a directly connected network?
The C designates a directly connected subnet. An L designates a local interface. Both answers are correct.
How many route entries are coded with a C code in the routing table?
4
Step 5: Display a summary list of the interfaces on the router.
a. Use the show ip interface brief command on the router to answer the following question.
R2# show ip interface brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0/0 10.0.4.1 YES manual up up
GigabitEthernet0/0/1 10.0.5.1 YES manual up up
Serial0/1/0 10.0.3.2 YES manual up up
Serial0/1/1 209.165.200.225 YES manual up up
Vlan1 unassigned YES unset administratively down down
What command changed the status of the Gigabit Ethernet ports from administratively down to up?
no shutdown
What filtering command would you use to display only the interfaces with addresses assigned?
show ip interface brief | exclude unassigned
b. Use the show ipv6 int brief command to verify IPv6 settings on R2.
R2# show ipv6 interface brief
GigabitEthernet0/0/0 [up/up]
FE80::2:A
2001:DB8:ACAD:4::1
GigabitEthernet0/0/1 [up/up]
FE80::2:B
2001:DB8:ACAD:5::1
Serial0/1/0 [up/up]
FE80::1:C
2001:DB8:ACAD:3::2
Serial0/1/1 [up/up]
FE80::1:D
2001:DB8:FEED:224::1
Vlan1 [administratively down/down]
Unassigned
What is the meaning of the [up/up] part of the output?
The [up/up] status reflects the Layer 1 and Layer 2 status of the interface and does not rely on Layer 3 for status.
Device Configs - Final
Router R2
! ==============================================================
!--- 14.3.5 Packet Tracer - Basic Router Configuration Review
!--- ANSWER SCRIPT FOR ROUTER R2
!--- Usage: from the console on R2, enter privileged EXEC mode with "enable", then paste this whole file. Every line beginning with "!" is a comment; IOS ignores it, so pasting a comment by accident is harmless. R1 and its attached devices are already configured (per the Background) - this script builds R2 from scratch per the Instructions' 15 numbered steps.
!--- CRITICAL FIX: the source Answer Scripts section completely omits "crypto key generate rsa" (Instructions Step 9). Without it, SSH cannot function at all - and the entire second half of this lab (Part 1 Step 3.3's SSH login, and all of Part 2) depends on SSH working. This is added back below, in the modulus-inline form so it doesn't stop for an interactive prompt.
! ==============================================================
enable
configure terminal
! --------------------------------------------------------------
!--- Steps 3-8: Identity, domain, and local credentials
! --------------------------------------------------------------
hostname R2
enable secret c1sco1234
ip domain-name ccna-lab.com
no ip domain-lookup
service password-encryption
username SSHadmin secret 55Hadm!n
! --------------------------------------------------------------
!--- Step 9: Generate the RSA keypair SSH depends on
! --------------------------------------------------------------
!--- Hostname and domain name must both already be set (done above) - IOS derives the key pair's name from "hostname.domain-name" and refuses to generate keys otherwise. "modulus 1024" avoids the interactive "How many bits..." prompt that the bare "crypto key generate rsa" command would otherwise stop and wait for.
crypto key generate rsa modulus 1024
! --------------------------------------------------------------
!--- Step 10: Console line
! --------------------------------------------------------------
line console 0
password cisco
exec-timeout 6 0
logging synchronous
login
! --------------------------------------------------------------
!--- Step 11: VTY lines - SSH only, local database login
! --------------------------------------------------------------
line vty 0 4
password cisco
exec-timeout 6 0
transport input ssh
login local
! --------------------------------------------------------------
!--- Step 12: Login banner
! --------------------------------------------------------------
banner motd $ WARNING Authorized Users Only! $
! --------------------------------------------------------------
!--- Step 13: Enable IPv6 routing
! --------------------------------------------------------------
ipv6 unicast-routing
! --------------------------------------------------------------
!--- Step 14: Configure all four interfaces (IPv4, IPv6 global + link-local, description, activate)
! --------------------------------------------------------------
!--- Descriptions use the Instructions' own literal wording ("Connection to S3"/"Connection to S4") - the source Answer Scripts substituted "Link to LAN 3"/"Link to LAN 4" instead, which may not match if a grader checks the description text exactly.
interface GigabitEthernet0/0/0
description Connection to S3
ip address 10.0.4.1 255.255.255.0
ipv6 address fe80::2:a link-local
ipv6 address 2001:db8:acad:4::1/64
no shutdown
interface GigabitEthernet0/0/1
description Connection to S4
ip address 10.0.5.1 255.255.255.0
ipv6 address fe80::2:b link-local
ipv6 address 2001:db8:acad:5::1/64
no shutdown
interface Serial0/1/0
description Link to R1
ip address 10.0.3.2 255.255.255.0
ipv6 address fe80::1:c link-local
ipv6 address 2001:db8:acad:3::2/64
no shutdown
interface Serial0/1/1
description Link to Internet
ip address 209.165.200.225 255.255.255.252
ipv6 address fe80::1:d link-local
ipv6 address 2001:db8:feed:224::1/64
no shutdown
end
! --------------------------------------------------------------
!--- Step 15: Save the running configuration (explicitly required by the Instructions, but missing from the source Answer Scripts)
! --------------------------------------------------------------
copy running-config startup-config
! ==============================================================
!--- Verification:
!--- R2# show ip interface brief -> all four interfaces up/up
!--- R2# show ipv6 interface brief -> all four interfaces [up/up] with the correct link-local + global addresses
!--- From PC3, ping PC4 (both IPv4 and IPv6) -> success
!--- From R2, ping R1's S0/1/1... actually S0/1/0 far end (10.0.3.1 / 2001:db8:acad:3::1) -> success
!--- From PC3, ssh -l SSHadmin 10.0.4.1, password 55Hadm!n -> login succeeds (this is exactly what step 9's fix enables)
! ==============================================================
