Configuring Network Devices

1. Configuring Network Devices Working at a Small-to-Medium Business or ISP – Chapter 5

2. Objectives • Configure a router with an initial configuration. • Use Cisco SDM to configure a Cisco ISR with LAN connectivity, Internet connectivity and NAT. • Configure a Cisco router for LAN connectivity, Internet connectivity and NAT using the Cisco IOS CLI. • Configure a WAN connection from customer premises to an ISP. • Describe, setup and configure a standalone LAN switch.

3. 5.1.1 Initial ISR Router Configuration • ISR combines routing, LAN switching, security, voice, and WAN connectivity features

4. Initial ISR Router Configuration • Cisco IOS software modules are called images • IP Base image: entry-level Cisco IOS • Images are specific to models of devices

5. 5.1.2 Initial ISR Router Configuration • Tools and equipment required for setup: The larger end plugs into a PC’s comport and the regular size end plugs into the router’s console port

6. 5.1.2 Initial ISR Router Configuration • Tools and equipment required for setup:

7. 5.1.3 Initial ISR Router Configuration Three-stage bootup process: • Power-on self test (POST) • Locate and load Cisco IOS • Locate startup configuration file or enter setup mode

8. 5.1.3 Initial ISR Router Configuration • Copies the startup config file from NVRAM and copies it to RAM as the running config file • NVRAM (content remains when the power is turned off)

9. 5.1.3 Initial ISR Router Configuration Verifying and troubleshooting bootup process: • View output from the show version command • Use dir flash: and boot flash: in ROMmon mode • View boot system commands

10. 5.1.4 Initial ISR Router Configuration • Out-of-band management for initial configuration (you don’t need to have a live network connection) • In-band management over a network connection (you need a live network connection because you are going into the router by http

11. 5.1.4 Initial ISR Router Configuration • Command Line Interface (CLI): text-based program • Security Device Manager (SDM): web-based GUI

12. 5.2.1 Using Cisco SDM Express and SDM • Follow best practices for installing a new device to ensure correct functions

13. 5.2.1 Using Cisco SDM Express and SDM Eight SDM Express configuration screens: • Overview • Basic configuration • LAN IP address • DHCP • Internet (WAN) • Firewall • Security settings • Summary

14. 5.2.2 SDM Express configuration options • Host Name • Domain Name (for Organization) • Username and password • Enable secret password

15. 5.2.3 Configuring Wan Connections SERIAL CONNECTIONS—connect networks to ISPs or TSPs. They are usually slower connections • High-Level Data Link Control (HDLC) • Frame Relay • Point-to-Point Protocol (PPP)

16. 5.2.3 Configuring Wan Connections • Static IP address –the IP address and subnet mask is entered manually • IP unnumbered - Sets the serial interface address to match the IP address of one of the other functional interfaces of the router. • IP negotiated - The router obtains an IP address automatically through PPP. • Easy IP (IP Negotiated) - The router obtains an IP address automatically through PPP.

17. 5.2.4 Using Cisco SDM Express and SDM • Use Basic NAT Wizard to configure dynamic NAT with PAT

18. 5.3.1 Configuring a Router Using IOS CLI • CLI command modes: two levels of access • User Exec mode is the default mode and has a > as the prompt • Privileged Exec Mode is accessed by typing the word ENABLE (and the password if one is set). This will have the # prompt

19. 5.3.1 Configuring a Router Using IOS CLI • Configuration modes can alter the operation of the device

20. 5.3.2 Configuring a Router Using IOS CLI Help features: • Command completion • Error indicators • Command history • Arrow and function keys

21. 5.3.2 Configuring a Router Using IOS CLI • Show commands display configuration and operation information

22. 5.3.2 Configuring a Router Using IOS CLI • Show History will allow you to see previously entered commands • History Size command will change the number of displayed commands • Pressing tab key will complete partially entered commands

23. 5.3.4 Configuring a Router Using IOS CLI • Use Cisco IOS CLI to perform an initial router configuration • Such as the hostname command

24. 5.3.5 Configuring a Router Using IOS CLI • Configure serial and Ethernet interfaces on a router

25. 5.3.5 Configuring a Router Using IOS CLI • Serial interfaces need one side (DCE) to have a clock rate added • NO SHUTDOWN will enable the interface

26. 5.3.6 Configuring a Router Using IOS CLI • Configure a default route for the Cisco router

27. 5.3.7 Configuring a Router Using IOS CLI • Configure a Cisco router to function as a DHCP server

28. 5.3.8 Configuring a Router Using IOS CLI • Configure static NAT on a Cisco router to enable Internet access for an internal server

29. 5.3.9 Configuring a Router Using IOS CLI • Back up and restore configuration files using a TFTP server

30. 5.3.9 Configuring a Router Using IOS CLI • Capture and save configuration file output from a terminal session

31. 5.4.1 Connecting the CPE to the ISP • Configuration checklists ensure that all configuration requirements are met

32. 5.4.1 Connecting the CPE to the ISP • Use inventory and configuration checklists and an installation plan to ensure successful installation

33. 5.4.1 Connecting the CPE to the ISP • Documentation includes diagrams, checklists, and activity logs

34. 5.4.2 Connecting the CPE to the ISP Types of customer connections over a WAN: • Point-to-point • Circuit-switched • Packet-switched

35. 5.4.3 Connecting the CPE to the ISP • Bandwidth and cost influence WAN choices

36. 5.4.4 Connecting the CPE to the ISP • Clock rate and serial encapsulation are needed when configuring serial WAN connections • Clock rate is entered on the DCE side of the router

37. 5.5.1 Initial Cisco 2960 Switch Configuration • Fixed-configuration, standalone devices • Configured using GUI or CLI

38. 5.5.1 Standalone switches Half-duplex • Ports can be half-duplex • Can send OR receive at a point in time, but can’t do both simultaneously • Ports can be full duplex • They can send and receive at the same time • If switch and computer are set to different duplex mode you will have a duplex mismatch Full-duplex

39. 5.5.2 Initial Cisco 2960 Switch Configuration • Check switch components • Connect cables to the switch • Power up the switch and observe POST • If it fails post, the SYST LED turns amber

40. 5.5.3 Initial Cisco 2960 Switch Configuration • Switch settings can be configured using the Cisco IOS CLI • Assign an IP address to the default management virtual local area network, VLAN1 Know these commands

41. 5.5.4 Initial Cisco 2960 Switch Configuration • Connect the stand-alone LAN switch to the router and verify connectivity • Configure port security to prevent unauthorized use • Shut down unused ports

42. 5.5.5 Cisco Discovery Protocol • Cisco Discovery Protocol (CDP) gathers information about directly-connected Cisco network devices • Two Cisco devices directly connected on the same local network are called neighbors Know what info you can learn from these commands, such as: platform, capability, connected interfaces, hold time, and device ID

43. Summary • The Integrated Services Router (ISR) is a good choice for small to medium businesses and ISP-managed customers. • ISRs can be initially configured using SDM or the router IOS CLI. • When using the CLI, “show” commands verify configuration elements. • An installation plan can minimize disruption to a network when new devices are being added. • Documentation is necessary, both when configuring and when installing network devices. • Switches are assigned IP addresses by configuring them on the management interface, VLAN 1.