Cisco Packet Tracer

2009/12/21

Outliney Cisco Packet Tracery Cisco Packet Tracery Cisco Packet Tracery Cisco Packet Tracery y y IPy SSHy Vlany DHCP IPv4y Access-list IPv4

2009/12/22

Cisco Packet Tracery Packet Tracer Cisco

y Packet Tracer

pc

pc rs232 router router

2009/12/23

Cisco Packet Tracer

2009/12/24

Cisco Packet Tracer

2009/12/25

Cisco Packet Tracer

2009/12/26

Cisco Packet Tracer

2009/12/27

Cisco Packet Tracer

2009/12/28

Cisco Packet Tracer

2009/12/29

Cisco Packet Tracer

2009/12/210

Cisco Packet Tracer

2009/12/211

Cisco Packet Tracer

2009/12/212

2009/12/213

2009/12/214

yyRoutery 2811y FastEthernet, 1 RS232 Porty yMultilayer Switchy 3560-24PSy 24 FastEthernet Ports, 2 GigabitEthernet Ports, 1 RS232 Porty PCy 1 FastEthernet Port, 1 RS232 Port,yLaptopy 1 FastEthernet Port, 1 RS232 Port ,

-IP

2009/12/215

y ssh/telnet/terminaly Router>en ()y Router#config t ()y Router(config)#int fa 0/0 ()y Router(config-if)#ip address 10.0.0.1 255.255.255.0 ()y Router(config-if)#no shuty Router(config-if)#exity Router(config)#do sh run (do

or)y Router#sh run ()

y

2009/12/216

y Ciscoyenable , en

y (running-config)yconfigure terminal, config t

y yinterface Ethernet (e) 0/1 (10 Mbps)yinterface FastEthernet (fa) 0/1 (100 Mbps)yinterface GigibitEthernet (gi) 0/1 (1000 Mbps)

2009/12/217

y yen, hostname Your Namey Router(config)# hostname Router1y Router1(config)#

y y?yTabydo

2009/12/218

y

y

y

Router#show running-configBuilding configuration...

Router#erase startup-configErasing the nvram filesystem will remove all configuration files!Continue? [confirm][enter][OK]Erase of nvram: complete

Router#copy running-config startup-configDestination filename [startup-config]? [press enter]Building configuration...[OK]

2009/12/219

y Router# show interface ()y Router# show ip interface (layer 3)

y doy Router(config)# do sh int fa 0/1y Router(config)# do show interface fa 0/1

y ()

2009/12/220

y Router(config)# int fa 0/0

y Router(config-if)# ip address 192.168.1.1 255.255.255.0

y Router(config-if)# no shutdown

y Router(config-if)# exit

y Router(config)#do sh int fa 0/0 ()

2009/12/221

y y enable password Your Password ()y enable secret Your Password ()y Router(config)#enable secret 123456y Router(config)#enable password 1234567

y Passwordy Router(config)#service password-encryptiony Router(config)#do sh run ()y Router(config)#no service password-encryption ()

y C3560G-24PSy ciscoy cisco

SSH / telnet

2009/12/222

y Router(config)#ip domain-name niu.edu.twy Router(config)#crypto key generate rsa general-keys

modulus 1024y The name for the keys will be: Router.niu.edu.twy % The key modulus size is 1024 bitsy % Generating 1024 bit RSA keys, keys will be non-

exportable...[OK]y Router(config)#ip ssh authentication-retries 2y Router(config)#line vty 0 15y Router(config-line)#password r9743003y Router(config-line)#transport input ally Router(config-line)#no login ()

?

2009/12/223

y IDyy

y IDyTCP/IPy

y yyyID

2009/12/224

6 60

192.168.1.0

C

2009/12/225

2009/12/226

192.168.1.0Fa0/0 192.168.1.1/30 Fa0/0 192.168.1.2/30

Fa0/1 192.168.1.9/29

4 60

Fa0/1 192.168.1.65/26

Fa0/1 192.168.1.15/29Fa0/1 192.168.1.127/26

IPv4 DHCP

2009/12/227

y Route(config)#ip dhcp pool Adminy Route(dhcp-config)#network 192.168.2.0

255.255.255.0y Route(dhcp-config)#default-router 192.168.2.1y Route(dhcp-config)#dns-server 192.168.2.1

(IPinterface)y Route(dhcp-config)#exity Route(config)#ip dhcp excluded-address 192.168.2.1

192.168.2.10 ((rangeip))y Route(config)#do sh run (DHCP)y Route(config)#do sh ip dhcp binding (bi) (

DHCP pool)

VLAN

2009/12/228

y VLANy Route(config)# vlan 2 (vlan)y Route(config)# name xxxx ()

y VLANy Route(config)# no vlan 2

y VLANy Route(config)# do sh vlan

VLAN

2009/12/229

y vlany Route(config)#int fa 0/1y Route(config-if)# switchport mode accessy Route(config-if)# switchport access vlan 3

y vlany Route(config)#int fa 0/1y Route(config-if)# switchport mode trunk

access-list

2009/12/230

y y IP standard access listy IP standard access list (expanded range)

y y Router(config)#access-list 10 deny 172.16.10.0 0.0.0.255y Router(config)#access-list 10 deny 172.16.10.0 0.0.3.255y (172.16.16.0 ~ 172.16.19.0)

y int fa 0/1Router(config-if)# ip access-group 10 out

access-list

2009/12/231

y y IP extended access listy IP extended access list (expanded range)

y 172.16.30.2tcpRouter(config)#access-list 110 deny tcp any host 172.16.30.2y 172.16.30.2tcp port 23 (telnet)Router(config)#access-list 110 deny tcp any host 172.16.30.2 eq 23logy int fa 0/1Router(config-if)# ip access-group 110 in

IPv6 Forwarding

2009/12/232

y IPv6 ()y Router(config)# ipv6 unicast-routingy y Router(config-if)# int fa 0/1y ipv6y Router(config-if)#ipv6 enabley Router(config-if)# ipv6 address 2001:db8:3c4d:1::/64

eui-64

IPv6 DHCP

2009/12/233

y Router(config)# ipv6 dhcp pool testy Router(config-dhcp)#domain-name niu.edu.twy Router(config-dhcp)#prefix-delegation pool test

lifetime 3600 3600

y Router(config)#int fa 0/1y Router(config-if)#ipv6 dhcp server test

Cisco Packet Tracer OutlineCisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer Cisco Packet Tracer -IPSSH / telnet?CIPv4 DHCP VLAN VLAN access-list access-list IPv6 Forwarding IPv6 DHCP