CCNA LAB : Single Area OSPF Configuration with MD5 Authentication

Configuring MD5 Authentication

Router(config-if)#ip ospf message-digest-key key-id md5 key

Router(config-if)# ip ospf authentication [message-digest | null]

Router(config-router)#area area-id authentication [message-digest]

key-id --> An identifier in the range from 1 to 255

key --> Alphanumeric password of up to 16 bytes

RTA ROUTER

Router>enable

Router#configure terminal

Router(config)#hostname RTA

RTA(config)#interface loopback 0

RTA(config-if)#ip address 2.2.2.2 255.255.255.0

RTA(config-if)#exit

RTA(config)#interface serial 0/0

RTA(config-if)#ip address 192.168.1.1 255.255.255.252

RTA(config-if)#ip ospf message-digest-key 1 md5 thewayofccie

RTA(config-if)# ip ospf authentication message-digest

RTA(config-if)#clock rate 64000

RTA(config-if)#no shutdown

RTA(config-if)#exit

RTA(config)#interface fastethernet 0/0

RTA(config-if)#ip address 192.168.10.1 255.255.255.0

RTA(config-if)#no shutdown

RTA(config-if)#exit

RTA(config)#router ospf 65

RTA(config-router)#network 192.168.1.0 0.0.0.255 area 0

RTA(config-router)#network 192.168.10.0 0.0.0.255 area 0

RTA (config-router)#network 2.2.2.0 0.0.0.255 area 0

RTA(config-router)#area 0 authentication message-digest

RTA(config-router)#exit

RTA(config)#exit

RTA#copy running-config startup-config

RTB ROUTER

Router>enable

Router#configure terminal

Router(config)#hostname RTB

RTB (config)#interface loopback 0

RTB (config-if)#ip address 3.3.3.3 255.255.255.0

RTB (config-if)#exit

RTB (config)#interface serial0/0

RTB (config-if)#ip address 192.168.1.2 255.255.255.252

RTB (config-if)#ip ospf message-digest-key 1 md5 thewayofccie

RTB(config-if)# ip ospf authentication message-digest

RTB (config-if)#no shutdown

RTB(config-if)#exit

RTB(config)#interface fastethernet 0/0

RTB (config-if)#ip address 192.168.20.1 255.255.255.0

RTB (config-if)#no shutdown

RTB (config)#router ospf 65

RTB (config-router)#network 192.168.1.0 0.0.0.255 area 0

RTB (config-router)#network 192.168.20.0 0.0.0.255 area 0

RTB (config-router)#network 3.3.3.0 0.0.0.255 area 0

RTB(config-router)#area 0 authentication message-digest

RTB (config-router)#exit

RTB (config)#exit

RTB #copy running-config startup-config

CCNA LAB:FRAME RELAY HUB AND SPOKES WİTH POINT-TO-POINT SUBINTERFACE

istanbul Router
router>enable
router#configure terminal
router(config)#hostname istanbul
istanbul(config)#interface fastethernet 0/0
istanbul(config-if)#ip address 172.16.10.1 255.255.255.0
istanbul(config-if)#no shutdown
istanbul(config-if)exit
istanbul(config)#interface serial 0/0
istanbul(config-if)#no ip address
istanbul(config-if)#encapsulation frame-relay
istanbul(config-if)#no shutdown
istanbul(config-if)#exit
istanbul(config)#interface serial 0/0.102 point-to-point
istanbul(configsubif)# description link to izmir router
istanbul(config-subif)#ip address 192.168.1.1 255.255.255.0
istanbul(config-subif)#frame-relay interface-dlci 102
istanbul(config-subif)#interface serial 0/0.103
istanbul(configsubif)#description link to ankara router
istanbul(config-subif)#ip address 192.168.2.1 255.255.255.0
istanbul(config-subif)#frame-relay interface-dlci 103
istanbul(config-subif)#exit
istanbul(config-if)#exit
istanbul(config)#router eigrp 65
istanbul(config-router)#network 172.16.10.0
istanbul(config-router)#network 192.168.1.0
istanbul(config-router)#network 192.168.2.0
istanbul(config-router)#no auto-summary
istanbul(config-router)#exit
istanbul(config)#exit
istanbul#copy running-config startup-config

izmir Router
router>enable
router#configure terminal
router(config)#hostname izmir
izmir(config)#interface fastethernet 0/0
izmir(config-if)#ip address 172.16.20.1 255.255.255.0
izmir(config-if)#no shutdown
izmir(config-if)#interface serial 0/0
izmir(config-if)#encapsulation frame-relay
izmir(config-if)#no ip address
izmir(config-if)#no shutdown
izmir(config-if)#exit
izmir(config)#interface serial 0/0.201 point-to-point
izmir(configsub-if)#description link to istanbul router
izmir(config-sub-if)#ip address 192.168.1.2 255.255.255.0
izmir(config-sub-if)#frame-relay interface-dlci 201
izmir(config-sub-if)#exit
izmir(config-if)#exit
izmir(config)#router eigrp 65
izmir(config-router)#network 172.16.20.0
izmir(config-router)#network 192.168.1.0
izmir(config-router)#no auto-summary
izmir(config-router)#exit
izmir(config)#exit
izmir#copy running-config startup-config

Ankara Router
router>enable
router#configure terminal
router(config)#hostname ankara
ankara(config)#interface fastethernet 0/0
ankara(config-if)#ip address 172.16.30.1 255.255.255.0
ankara(config-if)#no shutdown
ankara(config-if)#interface serial 0/0
ankara(config-if)#encapsulation frame-relay
ankara(config-if)#no ip address
ankara(config-if)#no shutdown
ankara(config-if)#exit
ankara(config)#int s0/0.301 point-to-point
ankara(config-subif)#description link to istanbul router
ankara(config-subif)#ip address 192.168.2.2 255.255.255.0
ankara(config-subif)#frame-relay interface-dlci 301
ankara(config-subif)#exit
ankara(config-if)#exit
ankara(config)#router eigrp 65
ankara(config-router)#network 172.16.30.0
ankara(config-router)#network 192.168.2.0
ankara(config-router)#no auto-summary
ankara(config-router)#exit
ankara(config)#exit
ankara#copy running-config startup-config

CCNA LAB : PPP CONFIGURATION

RTA ROUTER

Router>enable
Router#configure terminal
Router(config)#hostname RTA
RTA (config)#interface fastethernet 0/0
RTA (config-if)#ip address 192.168.20.1 255.255.255.0
RTA (config-if)#no shutdown
RTA (config-if)#exit
RTA (config)#username RTB password thewayofccie
RTA (config-if)#interface serial 0/0
RTA (config-if)#description Link to RTB
RTA (config-if)#ip address 192.168.10.1 255.255.255.252
RTA (config-if)#clock rate 64000
RTA (config-if) #encapsulation ppp
RTA (config-if)#ppp authentication chap
RTA (config-if)#no shutdown
RTA (config-if)#exit
RTA (config)#exit
RTA #copy running-config startup-config
RTA #

RTB ROUTER
Router>enable
Router#configure terminal
Router(config)#hostname RTB
RTB (config)#interface fastethernet 0/0
RTB (config-if)#ip address 192.168.30.1 255.255.255.0
RTB (config-if)#no shutdown
RTB (config-if)#exit
RTB (config)#username RTA password thewayofccie
RTB (config-if)#interface serial 0/0
RTB (config-if)#description Link to RTA
RTB config-if)#ip address 192.168.10.2 255.255.255.252
RTB (config-if) #encapsulation ppp
RTB (config-if)#ppp authentication chap
RTB (config-if)#no shutdown
RTB (config-if)#exit
RTB (config)#exit
RTB #copy running-config startup-config
RTB#

CCNA LAB: INTER-VLAN EXAMPLE

ISP ROUTER

Router>enable

Router>#configure terminal

Router(config)#hostname ISP

ISP(config)#interface loopback 0

ISP(config-if)#ip address 192.133.1.1 255.255.255.0

ISP(config-if)#interface serial 0/0

ISP(config-if)#ip address 192.168.1.2 255.255.255.252

ISP(config-if)#clock rate 64000

ISP(config-if)#no shutdown

ISP(config-if)#exit

ISP(config-if)#router eigrp 65

ISP(config-router)#network 192.168.1.0

ISP(config-router)#network 192.133.1.0

ISP(config-router)#no auto-summary

ISP(config-router)#exit

ISP(config)#exit

ISP#copy running-config startup-config

ISP#

 

RTA Router

Router>enable

Router>#configure terminal

Router(config)#hostname RTA

RTA (config)#interface fastethernet 0/0

RTA (config-if)#duplex full

RTA (config-if)#no shutdown

RTA (config-if)#interface fastethernet 0/0.1

RTA (config-subif)#encapsulation dot1q 1 native

RTA (config-subif)#ip address 172.16.1.1 255.255.255.0

RTA (config-subif)#interface fastethernet 0/0.10

RTA (config-subif)#encapsulation dot1q 10

RTA (config-subif)#ip address 172.16.10.1 255.255.255.0

RTA (config-subif)#interface fastethernet 0/0.20

RTA (config-subif)#encapsulation dot1q 20

RTA (config-subif)#ip address 172.16.20.1 255.255.255.0

RTA (config-subif)#interface fastethernet 0/0.30

RTA (config-subif)#encapsulation dot1q 30

RTA (config-subif)#ip add 172.16.30.1 255.255.255.0

RTA (config-subif)#exit

RTA (config-if)#exit

RTA (config)#router eigrp 65

RTA (config-router)#network 172.16.1.0

RTA (config-router)#network 172.16.10.0

RTA (config-router)#network 172.16.20.0

RTA (config-router)#network 172.16.30.0

RTA (config-router)#no auto-summary

RTA (config-router)#exit

RTA (config)#exit

RTA #copy running-config startup-config

RTA #

 

 

Catalyst 2960 Switch

Switch>enable

Switch#configure terminal

Switch(config)#hostname Cat2960

Cat2960(config)#vlan 10

Cat2960(config-vlan)#name Sales

Cat2960(config-vlan)#exit

Cat2960(config)#vlan 20

Cat2960(config-vlan)#name Engineering

Cat2960(config-vlan)#vlan 30

Cat2960(config-vlan)#name Marketing

Cat2960(config-vlan)#exit

Cat2960(config)#interface fastethernet 0/1

Cat2960(config-if)#switchport mode trunk

Cat2960(config-if)#exit

Cat2960(config)#interface vlan 1

Cat2960(config-if)#ip address 172.16.1.2 255.255.255.0

Cat2960(config-if)#no shutdown

Cat2960(config-if)#exit

Cat2960(config)#ip default-gateway 172.16.1.1

Cat2960(config)#interface range fastethernet 0/2 – 5

Cat2960(config-if-range)#switchport mode access

Cat2960(config-if-range)#switchport access vlan 10

Cat2960(config-if-range)#interface range fastethernet 0/6 – 9

Cat2960(config-if-range)#switchport mode access

Cat2960(config-if-range)#switchport access vlan 20

Cat2960(config-if-range)#interface range fastethernet 0/10 - 12

Cat2960(config-if-range)#switchport mode access

Cat2960(config-if-range)#switchport access vlan 30

Cat2960(config-if-range)#exit

Cat2960(config)#exit

Cat2960#copy running-config startup-config

Cat2960#

 

Inter-VLAN Routing

Inter-VLAN Routing
VLANs define separate broadcast domains and must be separate IP subnets. The only way to get traffic from one VLAN to another is to route between them Inter-Vlan Routing . Inter-VLAN communication occurs between broadcast domain via a Layer 3 device such as router.
All VLANs can be transported across a trunk link to be distributed by the neighbor device. With inter-VLAN routing functions, the router must know how to reach all VLANs being interconnected.
Each VLAN must have a separate connection on the router, and we must enable 802.1Q trunking on those connections. We had need at least a fastethernet port on the router.
To support 802.1Q trunking, we must subdivide the physical fastethernet interface of the router. A sub-interface is a virtual interface that is spawned from the physical interface.

We can configure it to run 802.1Q, build a subinterface for each VLAN. We can give those sub-interfaces IP addresses in the appropriate subnets for each VLAN, and let the router route between the VLANs whose traffic is coming up that trunk link. A frame destined for VLAN 20 could come up the trunk link from VLAN 10 to the Router's VLAN 10 sub-interface, get routed to VLAN 20, and leave that same port from the VLAN 20 sub-interface. The hosts in each VLAN will use the sub-interface configured for their VLAN as their default gateway.

The configuration between a router and a core switch is sometimes referred to as a router on a stick. Following Figure illustrates a router attached to a core switch.

VTP

VLAN Trunking Protocol (VTP)

VTP is a Layer 2 protocol that takes care of the steps of creating and naming VLANs on all switches in the system. VTP works by establishing a single switch as being in charge of the VLAN information for a domain. In this case, a domain is simply a group of switches that all have the same VTP domain name. This simply puts all the switches into a common administrative group.

There are three types of switches in a VTP domains:

Server

· Vtp server creates, modifies, and deletes VLANs at the CLI.

· when we configure switch to VTP server mode switch generates VTP advertisements and forwards advertisements from other switches in the same management domain.

· Saves configuration in NVRAM

Client

· Vtp Client mode Cannot create, modify, or delete VLANs at the CLI.

· In vtp client mode switchs originate periodic VTP advertisements and synchronize their databases with other switches in the domain.

· Does not save in NVRAM

Transparent

· VTP transparent creates, modifies, and deletes VLANs for the VLAN database on the local switch only.

· In this mode switchs does not update its VLAN database with information received from VTP servers in the same management domain

· Switchs forwards VTP advertisements received from VTP servers in the same VTP domain.

· Saves configuration in NVRAM

VTP Configuration

switch2960(config)#vtp mode [server client transparent}

switch2960(config)#vtp domain vtp_domain_name

switch2960(config)#vtp password vtp_password

Important note:The VTP domain name and password must match on all switches for VLAN information to be propagated from the Server mode switch.

VTP Verification and Troubleshooting

switch2960#show vtp status

VLAN Trunking

VLAN Trunking

A switch-to-switch link must be set up as a trunk link in order for the VLAN system to work properly. A trunk link is a special connection, the key difference between an ordinary connection (an Access port) and a Trunk port is that although an Access port is only in one VLAN at a time, a Trunk port has the job of carrying traffic for all VLANs from one switch to another. Any time you connect a switch to another switch, you want to make it a trunk.

There are two methods of identifying VLANs over trunk links are:

 ISL :

The Inter-Switch Link (ISL) protocol is a Cisco-proprietary Layer 2 protocol. ISL operates by re-encapsulating host frames as they are received by the switch port. The ISL encapsulation adds a 26-byte header and a 4-byte trailer to the original host frame.

802.1Q

The IEEE-standard 802.1Q trunk encapsulation has the advantage of being an industry standard, so inter-vendor operation is much less of a problem .This protocol does not re-encapsulate the original frame, but instead inserts a 4-byte tag into the original header.

Important Note : Switch-to-Switch trunk links always require the use of a crossover cable, never a straight-through cable.

Configuring a Trunk Link

Switch1(config-if)#switchport mode {dynamic {auto | desirable} | trunk}

Switch1(config-if)#switchport trunk encapsulation {isl | dot1q | negotiate}

 

Access:The port is a user port in a single VLAN.

Trunk:The port negotiates trunking with the port on the other end of the link.

Non-negotiate:The port is a trunk and does not do DTP negotiation with the other side of the link.

Dynamic Desirable:Actively negotiates trunking with the other side of the link. It becomes a trunk if the port on the other switch is set to trunk, dynamic desirable, or dynamic auto mode.

Dynamic Auto:Passively waits to be contacted by the other switch. It becomes a trunk if the other end is set to trunk or dynamic desirable mode.