Archive for May, 2009

Telnet, part of the TCP/IP protocol suite, is a virtual terminal protocol that allows you to make connections to remote devices, gather information, and run programs.

After your routers and switches are configured, you can use the Telnet program to reconfigure and/or check up on your routers and switches without using a console cable. You run the Telnet program by typing telnet from any command prompt (DOS or Cisco). You need to have VTY passwords set on the routers for this to work.

Remember, you can’t use CDP to gather information about routers and switches that aren’t directly connected to your device. But you can use the Telnet application to connect to your neighbor devices, and then run CDP on those remote devices to get information on them. You can issue the telnet command from any router prompt like this:

RouterA#telnet 172.16.10.2
Trying 172.16.10.2 … Open
Password required, but none set
[Connection to 172.16.10.2 closed by foreign host]
RouterA#

As you can see, I didn’t set my passwords—how embarrassing! Remember that the VTY ports on a router are configured as login, meaning that we have to either set the VTY passwords or use the no login command.

There are five passwords used to secure your Cisco routers: console, auxiliary, telnet (VTY), enable password, and enable secret. Just as you learned earlier in the chapter, the first two passwords are used to set your enable password that’s used to secure privileged mode. This will prompt a user for a password when the enable command is used. The other three are used to configure a password when user mode is accessed either through the console port, through the auxiliary port, or via Telnet.

Enable Passwords

You can set the enable passwords from global configuration mode like this:

Router(config)#enable ?
last-resort Define enable action if no TACACS servers respond
password Assign the privileged level password
secret Assign the privileged level secret
use-tacacs Use TACACS to check enable passwords

The following points describe the enable password parameters:

Last-resort Allows you to still enter the router if you set up authentication through a TACACS server and it’s not available. But it isn’t used if the TACACS server is working.

Password Sets the enable password on older, pre-10.3 systems, and isn’t ever used if an enable secret is set.

Secret Is the newer, encrypted password that overrides the enable password if it’s set.

A banner is more than just a little cool—one very good reason for having a banner is to give any and all who dare attempt to telnet or dial into your internetwork a little security notice.

And you can create a banner to give anyone who shows up on the router exactly the information you want them to have. Make sure you’re familiar with these four available banner types: exec process creation banner, incoming terminal line banner, login banner, and message of the day banner (all illustrated in the code below):

Router(config)#banner ?
LINE c banner-text c, where ‘c’ is a delimiting character
exec Set EXEC process creation banner
incoming Set incoming terminal line banner
login Set login banner
motd Set Message of the Day banner

Message of the day (MOTD) is the most extensively used banner. It gives a message to every person dialing into or connecting to the router via Telnet or auxiliary port, or even through a console port as seen here:

Router(config)#banner motd ?
LINE c banner-text c, where ‘c’ is a delimiting character
Router(config)#banner motd #
Enter TEXT message. End with the character ‘#’.
$ Type your motd banner here.
#
Router(config)#^Z
Router#
00:25:12: %SYS-5-CONFIG_I: Configured from console by console

You can set the identity of the router with the hostname command. This is only locally significant, which means that it has no bearing on how the router performs name lookups or how the router works on the internetwork.

Router#config t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname RouterA
Todd(config)#hostname RouterB
Atlanta(config)#

Even though it’s pretty tempting to configure the hostname after your own name, it’s definitely a better idea to name the router something pertinent to the location.

This is because giving it a hostname that’s somehow relevant to where the device actually lives will make finding it a whole lot easier.

And it also helps you confirm that you are, indeed, configuring the right device.

Learn more about cisco router configuration on how to setting up router banners here.

A router typically goes through five steps when booting up:

1. The router loads and runs POST (located in ROM), testing its hardware components, including memory and interfaces.
2. The bootstrap program is loaded and executed.
3. The bootstrap program finds and loads an IOS image: Possible locations of the IOS image include flash, a TFTP server, or the Mini-IOS in ROM.
4. Once the IOS is loaded, the IOS attempts to find and load a configuration file, which is normally stored in NVRAM if the IOS cannot find a configuration file, it starts up the System Configuration Dialog.
5. After the configuration is loaded, you are presented with the CLI interface (remember that the first mode you are placed into is User EXEC mode.

If you are connected to the console port, you’ll see the following output as your router boots up:

System Bootstrap, Version 11.0(10c), SOFTWARE
Copyright (c) 1986-1996 by cisco Systems
2500 processor with 6144 Kbytes of main memory
F3: 5593060+79544+421160 at 0×3000060
Cisco Internetwork Operating System Software
IOS ™ 2500 Software (C2500-I-L), Version 12.0(5)
Copyright (c) 1986-1999 by cisco Systems, Inc.
Compiled Tue 15-Jun-99 19:49 by phanguye
Image text-base: 0×0302EC70, data-base: 0×00001000

Powers of 2 are important to understand and memorize for use with IP subnetting.

To review powers of 2, remember that when you see a number with another number to its upper right (called an exponent), this means you should multiply the number by itself as many times as the upper number specifies.

For example, 2 power of 3 is 2 × 2 × 2, which equals 8. Here’s a list of powers of 2 that you should commit to memory:

2 power of 1 = 2
2 power of 2 = 4
2 power of 3 = 8

2 power of 4 = 16
2 power of 5 = 32
2 power of 6 = 64
2 power of 7 = 128
2 power of 8 = 256
2 power of 9 = 512
2 power of 10 = 1,024
2 power of 11 = 2,048
2 power of 12 = 4,096
2 power of 13 = 8,192
2 power of 14 = 16,384

Before you get stressed out about knowing all these exponents, remember that it’s helpful to know them, but it’s not absolutely necessary. Here’s a little trick since you’re working with 2s: each successive power of 2 is double the previous one.

Networks come in a wide variety of types. The most common are LANs and WANs but there are many other types of networks, including metropolitan area networks (MANs) storage area networks (SANs) content networks (CNs) intranets and extranets VPNs and others.

Local Area Networks

Local area networks (LANs) are used to connect networking devices that are in a very close geographic area, such as a floor of a building, a building itself or a campus environment. In a LAN you’ll find PCs file servers hubs bridges switches routers multilayer switches voice gateways, firewalls, and other devices.

The media types used in LANs include Ethernet, Fast Ethernet (FE), Gigabit Ethernet (GE), Token Ring, and FDDI. Today, most networks use some form of Ethernet.

Wide Area Networks

Wide area networks (WANs) are used to connect LANs together. Typically, WANs are used when the LANs that must be connected are separated by a large distance. Whereas a corporation provides its own infrastructure for a LAN, WANs are leased from carrier networks, such as telephone companies.

Four basic types of connections, or circuits, are used in WAN services: circuit-switched, cell-switched, packet-switched, and dedicated connections.

Understanding the Configuration Register Bits

The 16 bits of the configuration register are read from 15 to 0, from left to right. The default configuration setting on Cisco routers is 0×2102. This means that bits 13, 8, and 1 are on, as shown in Table as below. Notice that each set of 4 bits is read in binary with a value of 8, 4, 2, 1:

config-register

Below table is lists of software configuration bit meanings. Notice that bit 6 can be used to ignore the NVRAM contents. This bit is used for password recovery.

Bit
Hex
Description
0–3 0×0000–0×000F Boot field (see Table 9.4).
6 0×0040 Ignore NVRAM contents.
7 0×0080 OEM bit enabled.
8 0×101 Break disabled.
10 0×0400 IP broadcast with all zeros.
5, 11–12 0×0800–0×1000 Console line speed.
13 0×2000 Boot default ROM software if network boot fails.
14 0×4000 IP broadcasts do not have net numbers.
15 0×8000 Enable diagnostic messages and ignore NVRAM
contents.

The boot field, which consists of bits 0–3 in the configuration register, controls the router boot sequence. Table as below describes the boot field bits.

CCIE Routing and Switching Revised

Cisco announced revised certification requirements for CCIE Routing & Switching (CCIE R&S), the expert level certification for network engineers. The new certification standards reflect the job skills employers look for at the expert level. To support the certification changes, the Cisco 360 Learning Program for CCIE R&S is also being updated with new lessons on MPLS and Troubleshooting, additions to the instructor-led workshops, lab exercises for self-paced practice, and new performance assessments. Read More

Cisco Live! 2009 = San Francisco, California June 27- July 2, 2009

The US Cisco Live! is back. This year, the 20th anniversary of Networkers will be held at the Moscone Center in San Francisco, California. The expanded Cisco Live event continues the Networkers tradition with the Cisco Live programs: IT Management, Developer Services and a new Service Providers program. As always Learning@Cisco will be there to support you! This year we offer 25+ Techtorials and Sessions, Onsite testing, the Certifications Lounge and for our CCIE certification holders, the VIP CCIE party. We will also be offering the CCIE Routing and Switching Mobile Lab on June 27 and 28 (the first two days of the event) at our San Jose lab site. 20 seats are available! Don’t miss this opportunity to visit the “City by the Bay” while you engage in education, training, insights, and networking. Register Now

After the interface status messages appear and you press Enter, the Router> prompt will appear. This is called user exec mode (user mode) and it’s mostly used to view statistics, but it’s also a stepping-stone to logging into privileged mode.

You can only view and change the configuration of a Cisco router in privileged exec mode (privileged mode), which you get into with the enable command.

Router>
Router>enable
Router#

You now end up with a Router# prompt, which indicates that you’re in privileged mode, where you can both view and change the router’s configuration.

You can go back from privileged mode into user mode by using the disable command, as seen here:

Router#disable
Router>

At this point, you can type logout to exit the console:

Router>logout
Router con0 is now available
Press RETURN to get started.

Or you could just type logout or exit from the privileged-mode prompt to log out:

Router>en
Router#logout
Router con0 is now available
Press RETURN to get started.

This is steps to logging in to your cisco router after these you need to learn  how to use the commands to config your router follow your jobs or your network diagrams linking, hope this is help you fix out in begin.