Introduction CCNA

Oct 30, 2025

Cisco Certified Network Associate

Cisco offer many types of exams

CCNA → cisco certified network associate

●​ Exam fees – 300$ + 18% GST = 354$
●​ Exam duration – 120 minutes
●​ Questions – 104 MCQ Question & 85% passing score

CCNP → cisco certified network professional

●​ Exam fees – 450$ + 18% GST
●​ Exam duration – 3.5Hr
 ●​ Questions – 130 MCQ Question & stimulation
●​ Passing 85% of score

CCIE → cisco certified internetworking expert

●​ Exam fees – 2.5lakh
●​ Exam duration – 8Hr
●​ Questions – fully practical perform giving task

Cisco Packet Tracer

Practice of all CCNA practicals require one software called cisco
packet tracer

How to download ?
Visit → go to here → then download windows installer → size of
software is 290 mb → then install like other software.
➢​Router to router connect with serial port
➢​Router to switch connect with fast ethernet port
➢​By default the router does not come with a serial port.
➢​Cisco packet tracer serial port –
➔​ WIC - 1T → 1 serial port
➔​ WIC - 2T → 2 serial port
➔​ NM-4A/S → 4 serial port
➔​ NM - 8 A\S → 8 serial port
Setup ip Router & Switch
Oct 31, 2025
 Setup ip address

In cisco packet tracer

➢​Router > this is user mode
➢​Router # this is privilege mode ( copy, save, delete, view task
perform this mode )
➢​Router (config) this is configuration mode

How to access all modes

➢​router >
Click to router → go to CLI mode → type no → then press
enter → then enter → you enter user mode router >

➢​ Router#
then type enable and press enter → you enter the privilege
mode Router#

➢​Router (config)#
then type configure _ terminal → you enter new mode called
configuration mode Router (config)#

➢​Router to router connect with serial port

➢​Router to switch connect with fast ethernet port
➢​By default the router does not come with a serial port.
➢​By default 2 fastethernet port is present in the router
How to provide ip on fastEthernet port ?
In Router (config)# → interface fastEthernet 0/0 ( 0/0 is variable )
Router(config-if)# → ip address [Link] [Link].0 (ip & sub is variable
)
Router(config-if)# → no shutdown & enter
Router(config-if)# → exit & enter
How to provide ip on serial port ?
If clock is present side of router then
In Router (config)# → interface serial 0/0 ( 0/0 is variable )
Router(config-ip)# → ip address [Link] [Link] ( ip & subnet is
variable)
Router(config-ip)# → clock rate 64000
Router(config-ip)# → bandwidth 64
Router(config-ip)# → no shutdown
Router(config-ip)# → exit

If clock is not present side of router then

In Router (config)# → interface serial 0/0 ( 0/0 is variable )
Router(config-ip)# → ip address [Link] [Link] ( ip & subnet is
variable)
Router(config-ip)# → no shutdown
Router(config-ip)# → exit
How to provide ip on pc ?
➢​First click to the pc
➢​Go to desktop then select ip configuration
➢​Enter ip address and default gateway ip
➢​Then cut the window
practice ip setup
1st step of ip address setup
Oct 31, 2025

2nd step of ip address setup

Nov 1, 2025
3rd step of ip address setup
Nov 3, 2025
basic commands of router
Nov 4, 2025

Basic commands of Router

➢​Ip on fastethernet
➢​Ip on serial port
➢​Change host name
➢​Password on privilege mode
➢​Password on telnet
➢​Password on Console port
➢​Encrypted all password
➢​See data of RAM
➢​See data of nvRAM
➢​Delete nvRAM data
➢​Copy RAM data to nvRAM
➢​See date and time
➢​Change date and time
 ➢​See history of command
➢​Change history size
➢​ See ip on ports
➢​Reboot the router

Change host name

In Router(config) mode → hostname bhopal (any name you give)

Password on privilege mode

In Router(config) mode → enable secret 123 (123 is variable)
Password on telnet

In Router(config) mode → line vty 0 4 → enter

Router(config) mode → password 1234 (1234 is variable ) & enter
Router(config) mode → login & enter
Router(config) mode → exit & enter
How to access router using telnet
Go to pc cmd → telnet [Link] (type router ip ) & enter

password on Console port

In Router(config) mode → line console 0 & enter
Router(config-line) → password 123 (123 is variable)
Router(config-line) → login & enter
Router(config-line) mode → exit & enter
All Encrypted password
Router(config) → service password-encryption & enter
See data of RAM
In Router# → show running-config

See data of NVRAM

In Router# → show startup-config
Delete NVRAM data
Router # → erase startup-config
Route # → reload & Enter
Copy RAM data to NVRAM
Method I
In Router# → copy running-config startup-config & enter
Router# → Yes /enter

Method II
In Router# → write

Method III
In Router# → wr
See date and time
In Router# → show clock & enter
Change data & time
In Router# → clock set 07:38:22 5 nov 2025 & enter

See history of command

In Router# → show history & Enter
By default previous 10 command show
Change history size
By default previous 10 commands show but you resize it of this
command

In Router# → terminal history size 5 ( 5 is variable )

See ip on ports
In Router# → show ip interface & enter
Reboot the router
In Router# → reload & enter
Router# → Yes/enter
DHCP On Router
Nov 5, 2025

DHCP On Router

DHCP (dynamic host configuration protocol )

DHCP is a protocol which provides automatic ip addresses on client
computers.

➢​DHCP protocol can provide automatic IP both IPv4 and IPv6.

➢​DHCP uses port number 67.
➢​For creating DHCP we have to create scope(range) for
automatic ip addresses.
➢​DHCP can also be configured on the router.
➢​We can also exclude some ip addresses from the scope of
DHCP if we want to reserve any ip address.
Setup DHCP on Router
First you setup router ip then apply this

In Router(config)# → ip dhcp pool abc ( abc is variable )

Router(dhcp-config)# → network [Link] [Link] ( ip and subnet is
variable )
Router(dhcp-config)# → default-router [Link] ( router ip is variable
)
Router(dhcp-config)# → dns-server [Link] ( router ip is variable )
Router(dhcp-config)# → exit & enter

Router(config)# → ip dhcp excluded-address [Link] [Link] (ip is

variable)
Router(config)# → exit & enter
Backup and restore router IOS
Nov 6, 2025

Backup and restore of router IOS

IOS (Internetwork Operating System)

Every router has an operating system which helps the router to
perform their tasks.

➢​The operating system of the router is known as IOS.

➢​The IOS is stored on flash memory.
➢​The IOS of cisco routers comes according to the model of
router.
➢​So it becomes very essential to safeguard the router IOS.
➢​The router IOS can be backup on a special server known as
TFTP ( Trivial File Transfer Protocol ) server.
 ➢​We have to configure the TFTP server for backup and restore
for IOS. Important for an interview.
➢​The router IOS has extension of .bin . Important for an interview.
➢​Rommon:1> this is troubleshooting mode

Backup router OS
➢​First configure router and setup ip
➢​Then setup IP on server
➢​Go to services → choose TFTP → first OFF and then ON the
server
In Router# → show flash: → enter → copy .bin extension file name
Router# → copy flash: tftp → enter → Past source file name →
enter ip of remote host server → enter → enter
Delete Router Operating System
In Router# → delete flash:enter IOS name → enter → enter
Like this → Router# → delete flash:[Link]

Router# → Reload → enter → yes → enter → enter

Restore Router OS from server

Rommon 1 > IP_ADDRESS=[Link] (Router ip )
Rommon 2 > IP_SUBNET_MASK=[Link]
Rommon 3 >DEFAULT_GATEWAY=[Link] (Server ip )
Rommon 4 > TFTP_SERVER=[Link] (Server ip )
Rommon 5 > TFTP_FILE=OS FILE NAME ENTER
Rommon 6 > TFTP_CHECKSUM=0
Rommon 6 > tftpdnld
Enter → Y → enter
Rommon 7 > Reset → enter

Remember no space in any word and _ this is not a space mark this
is used to define space in two words.
Recovery of router password
Nov 7, 2025

Recovery of router password

➢​First apply the password
➢​Then power OFF and ON the Router
➢​Then press Ctrl+Break/Pause button when router boot
➢​Rommon 1 > → confreg 0x2142
➢​Rommon 2 > → Reset & Enter
➢​Yes & Enter
➢​Go to Router(config)# window
➢​Apply all the passwords
➢​In Router# save all the process to NVRAM
➢​In Router(config)# → config - register 0x2102 & enter
➢​Exit and save all the process one again.
➢​router# → reload & enter
SSH Protocol On Router
Nov 8, 2025

SSH Protocol on router

SSH Protocol
SSH is a protocol which helps in remotely accessing the command
prompt of a PC for a router in a network.

➢​SSH is like telnet.

➢​SSH is use port number 22 for creating connections.
➢​SSH is more secure than telnet and it encrypts the network
connection between two devices.
➢​For using SSH we have to create a domain as well as a user
account.
Commands for SSH setup
➢​Router(config) → hostname Bhopal (bhopal is variable)

➢​Bhopal(config) → ip domain name mpnagar

➢​Bhopal(config) → crypto key generate rsa
➢​How many bits in the modulus [512]: 1024 & enter
➢​bhopal(config) → Enable secret 123
➢​bhopal(config) → username jetking password 1234
➢​Bhopal(config) → ip ssh version 2
➢​Bhopal(config) → line vty 0 15
➢​bhopal(config-line)# → transport input ssh
➢​bhopal(config-line)# → login local
➢​ bhopal(config-line)# → exit

Note :
➢​Mpnagar is domain name
➢​123 is console mode password
➢​Jetking is ssh username and 1234 is username password
➢​
Access the router using SSH
➢​Go to pc cmd
➢​Ssh -l jetking [Link] & enter ( jetking is username and [Link]
is router ip )
first test of CCNA
First test of CCNA

Nov 10, 2025

Static Routing
Nov 11, 2025

Router Routing

Routing
Routing is a process which occurs on a router. In the routing process
the router finds the best path for delivery of data packets from
source to destination.

Routing is of 3 types
1.​ Static routing
2.​ Dynamic routing
3.​ Default routing
Static routing
Static routing is a manual routing in which an administrator
manually enters the path for delivery of data packets from source to
destination.

Static routing is most reliable routing but it is used in smaller

organizations where manually ip addresses can be entered.

Static routing is most secure but it can not be used in bigger

organizations.
Command syntax of static routing
Router (config)# → ip route destination ip subnet mask next hope
address

Example →

Bhopal (config)# → ip route [Link] [Link] [Link]

​ ​ # → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]

This way go to all routers and configure them one by one.

Bina (config)# → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]

​ ​ ​ # → ip route [Link] [Link] [Link]

​ ​ # → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]

ujjain(config)# → ip route [Link] [Link] [Link]

# → ip route [Link] [Link] [Link]

​ ​ ​ # → ip route [Link] [Link] [Link]

​ ​ # → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]

indore(config)# → ip route [Link] [Link] [Link]

# → ip route [Link] [Link] [Link]
​ ​ # → ip route [Link] [Link] [Link]
Practice of static on 12 november 2025
Do not write this in your copies, this is only for understanding
purposes.

Router 0 → हम router 0 पर है तो हम हमारे पास जो ip है उनकी नेटवर्क id नहीं

डालनी है हमें उनको छोड़ कर सभी IPs डालनी है जो की हमारी topology में सभी
routers को हमने पहले ही दे चक
ु े हैं।

तो हम कुछ इस तरह से ip डालेंगे जैसा की picture में दिखाया गया है पहले हमे ip
route लिखना है , उसके बाद हम हमारी first destination ip डालेंगे जो की
उसके अगले router की ip होगी जो की हमारे पास नहीं है । जैसे की हमारे पास 1 , 2 ,
15 , 16 की ip board वाली image में दिख रही है उन IPs को छोड़ कर अगले router
में 17 की ip है , तो हम 17 की network id डाल दें गे। उसके बाद space दे कर हमें
उस network का subnet mask डालना है और फिर से space दे ना है और हम जिधर
से static routing कर रहे है उस router के तरफ हमारी जो ip पड़ रही है जैसे हमारे
पास [Link] की ip है तो इस से चलना है और जिस भी अगली ip पर हम पहुंचे वही
हमारी next hop ip address होगा जो की हमारा है [Link] बस यही हम डाल दें गे
subnet के बाद space दे कर।

इस तरह से ip route [Link] [Link] [Link]

ऐसा ही सभी ips डालना है जैसा फोटो में दिख रहा है ।

Route 1 → अब हम अगले router 1 पर है यह पर भी वैसा ही है जो हमारे पास नहीं है
IPs वाली route करनी है , लेकिन दोनों side से left और right दोनो से routing
करना है । सबसे पहले हम left side से routing करें गे।

तो left side पर हमारी next hop ip [Link] हो जाएगी और हमें left side पर
वह ip दे खनी है जो हमारे पास नहीं है , तो हमारे पास 1, 2, 15 की Ip नहीं है , तो हम
उन्हीं IPs को route कर दें गे जैसे की पिक्चर में दे ख सकते है ।

Router(config)#ip route [Link] [Link] [Link]

Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
इसके बाद हम right side से routing करें गे तो हमारी right तरफ से next hop ip
[Link] होगी। इस तरफ भी हम वही करें गे जो ip हमारे पास नहीं है उनकी network
ip route करें गे।

तो हम ने जो ip left side पर कर चक ु े है , उनको skip करके बची हुई ip को route

करना है । जैसे की 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 18 की ip हमें दे नी है ।

Router(config)#ip route [Link] [Link] [Link]

Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]

यही same method every router पर apply करना है ।

Router 2 on left side only one ip present so

Router(config)#ip route [Link] [Link] [Link]

Route 2 on right side

Router(config)#ip route [Link] [Link] [Link]

Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]

Router 3 → अब हम router 3 पर है , और router 3 पर left side में एक ही ip है

जो हमारे पास नहीं है ।

Router(config)#ip route [Link] [Link] [Link]

On the right side of router 3

Router(config)#ip route [Link] [Link] [Link]

Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]
Router(config)#ip route [Link] [Link] [Link]

यही method से हम सारे routers पर routing कर दें गे।

Dynamic Routing, RIP
Nov 13, 2025

Dynamic Routing
Dynamic routing is an automatic routing in which routing protocols
find the best path of delivery of data packets from source to
destination. Dynamic routing is made for bigger organizations.

Dynamic routing is of two types -

1.​ IRP – Interior routing protocol

2.​ ERP – Exterior routing protocol
ASMO/ASN – Autonomous System Number
The whole world is made and connected with a single network known
as the internet. It becomes very difficult to manage the whole
network from one place. So the internet is divided into small small
areas (networks) so that it can be administered easily . These small
networks are provided with unique numbers known as ASN number
or ASMO. The range of ASN numbers is 0 - 65535.

When routing takes place between the same AS number then it is

called interior routing and the protocols used for interior routing are
RIP, IGRP, EIGRP, OSPF and IS-IS.
 When routing takes place between different AS numbers then it is
called exterior routing and the protocols used for exterior routing
are BGP, EGP, BGMP.

AD - Administrative distance
AD is an integer which is provided to all the routing protocols to
show their reliability. The range of AD is 0 to 255. lower the AD more
reliable routing protocol.

Protocols AD
Directly connected 0

Static 1

EIGRP internal 90

IGRP – Interior Gateway Routing Protocol 100

OSPF – Open Shortest Path First 110

IS-IS – Intermediate System-to-Intermediate System 115

EIGRP external 170

BGP 220

BGMP 224

Unknown* 255
Metrics
Metrics are the values which are used by dynamic routing protocols
to find their best path.

1.​ Hops
2.​ Band​width
3.​ Latency
4.​ Load
5.​ Reliability
6.​ Cost

RIP – Routing information protocol

➢​RIP is a dynamic routing protocol.

➢​RIP is an interior routing protocol.
➢​RIP is a distance vector protocol. It updates its routing table
with the neighbor router in a fixed time.
➢​RIP use hop as a metric.
➢​RIP can route packets up to 50 hops.
➢​RIP routing is of two versions – RIP Version 1 , RIP version 2

RIP timers
RIP timers are the values by which RIP protocol tracks the various
routes connected.

RIP timers are 4 types –

 1.​ Update timer – 30sec
2.​ Holdown timer – 180sec
3.​ Invalid timer – 180sec
4.​ Flushdown timer – 240sec

Dynamic routing commands syntax

Router(config)# router rip
Router(config)# network (directly connected )
# network (directly connected )
# version 2
# exit

Example –
Router(config)# router rip
 # network [Link]
​ ​ # network [Link]
​ ​ # network [Link]
​ ​ # version 2
​ ​ # exit
EIGRP Dynamic Routing
Nov 14, 2025

EIGRP
➢​EIGRP is an dynamic routing protocol.
➢​EIGRP is an interior routing protocol.
➢​EIGRP is a proprietary of cisco.
➢​EIGRP supports CIDR, VLSM.
➢​EIGRP is an hybrid routing protocol.
➢​EIGRP sends hello packets at every five seconds.
➢​EIGRP creates 3 types of tables – routing table, topology table,
neighbourship table.
➢​EIGRP use AS numbers in its configuration.
➢​The range AS number is 0 to 65535.
➢​EIGRP use hops, bandwidth, delay, load as matrices.
➢​EIGRP use dual (diffusing update algorithm ) algorithm to find
the best path.
➢​The dual algorithm is also known as Dijkstra’s algorithm.
➢​The best path is known as the successor and the second best
path is known as feasible successor.
➢​EIGRP shows both features of distance vector and link state
protocol that by it is known as hybrid routing protocol.
➢​EIGRP provides auto summarization of the routers connected.
➢​EIGRP can route packets up to 255 hops.
➢​EIGRP use [Link] as a multicast ip.
Command syntax of EIGRP
Router ( config)# → router eigrp AS no.
​ ​ # → network ip of directly connected ip
​ ​ # → network ip of directly connected ip
# → no auto-summary
# → exit

Example –
bhopal( config)# → router eigrp 150 ( 150 is variable
# network [Link]
# network [Link]
# network [Link]
# no auto-summary
# exit
practice -2
Nov 15, 2025
OSPF dynamic routing
Nov 17, 2025

OSPF ( open short path first )

➢​OSPF is a dynamic routing protocol.
➢​OSPF is an interior routing protocol.
➢​OSPF is an open standard routing protocol.
➢​OSPF is an internet routing protocol.
➢​OSPF is not a proprietary of Cisco.
➢​OSPF also supports VLSM and CIDIR.
➢​OSPF sends a hello packet in 10 seconds.
➢​OSPF creates 3 types of tables – Routing table, neighbourship
table, Database table.
➢​OSPF uses process ID number in its configuration.
➢​The range of process ID is 0 to 65535.
➢​OSPF wild card mask in its configuration.
➢​OSPF can route the packet up to infinity hops.
➢​OSPF use the SPF ( shortest path first ) algorithm to find the
best path.
➢​OSPF divides its network into multiple areas.
➢​Area 0 is known as backbone area.
➢​OSPF use area number in its configuration.
➢​There are two types of routing in OSPF – 1. In the same area , 2.
In a different area.
➢​OSPF use cost as a matrix.
➢​OSPF use [Link] is a multicast ip.
➢​OSPF do elections to find DR ( designated router ) and BDR (
backup designated router ).
Command syntax of OSPF same area
Router( config )# → router ospf process ID
​ ​ ​ # → network ip wild card mask are no.
​ ​ ​ # → exit

Wild card mask → wild card mask shows how many host bit are
possible to ON

Example –
Bhopal (config)# → router ospf 120 (120 is variable)
​ ​ ​ # → network [Link] [Link] area 0
​ ​ ​ # → network [Link] [Link] area 0
​ ​ ​ # → network [Link] [Link] area 0
​ ​ ​ # → exit
Nov 18, 2025

Command syntax of OSPF different area

router (config) # → router ospf 200 (200 is variable)
​ ​ # → network [Link] [Link] area 0
# → network [Link] [Link] area 0
​ ​ # → network [Link] [Link] area 0
​ ​ # → router-id [Link] ( [Link] is variable )
BGP dynamic routing
Border gateway protocol
●​ BGP is a dynamic routing protocol.
●​ BGP is an exterior routing protocol.
●​ BGP is always applied on ASBR.
●​ BGP protocol is used for connecting two different AS numbers
with each other.
●​ The BGP protocol is always configured on the border router.
●​ The BGP protocol is used for connecting many networks with
each other.
●​ The AD of the BGP protocol is 220.
Command syntax of BGP
Gwalior(config)# → router bgp 100 ( 100 is variable )
​ ​ # neighbor [Link] remote-as 200 ( 20.0.02 & 200 is
variable)
​ ​ # neighbor [Link] remote-as 200 ( 20.0.02 & 200 is
variable)
​ ​ # network [Link]
​ ​ # network [Link]
# exit
ACL- Access control list
Nov 21, 2025

ACL – access control list

●​ ACL is a group of commands set to gather to filter the traffic
that enters and leaves the interface.
●​ ACL is a advanced security which is applied on routers to
protect the network.
●​ ACL contains statements.
●​ In a single ACL we can apply maximum of 16000 statements.
●​ The statement can be permitted or denied.
●​ By using ACL we can block PC, Network and protocol.
●​ Per interface, per direction, per protocol a single ACL is used.
●​ Wildcard mask is used in ACL configuration
Standard ACL
By using standard ACL we can block pc and network. The standard
ACL is always applied on the destination router and only the source
address is used.

Extended ACL
By using extended ACL we can block PC, network, protocol in
extended ACL both source and destination are used and it is always
applied on the source router.
 ●​ ACL is the most common security used in companies to protect
computers and networks.

Standard ACL practicals

1.​ Host(Pc) to Network block

[Link] cannot connect with [Link] network

Nov 21, 2025

Command syntax

➢​First provide ip to all PCs and router

➢​Do any routing
Indore(config)# → access-list 1 deny host [Link]
# → access-list 1 permit any
​ ​ # → interface fastethernet 0/1
​ ​ # → ip access-group 1 out
​ ​ # → exit

Note:
➢​[Link] → is destination pc/host ip
➢​1 → access number pic any 1 to 99
➢​0/1 → source network ip present port number
2.​Network to network block
Nov 22, 2025
Command syntax of network to network block

➢​First provide ip to all PCs and router

➢​Do any routing

indore(config)# → access-list 10 deny [Link] [Link]

indore(config)# → access-list 10 permit any
indore(config)# → interface fastethernet 0/1
indore(config-if)# → ip access-group 10 out
indore(config-if)# → exit

Note →
➢​[Link] → destination network ip
➢​[Link] → destination network ip wildmask
➢​0/1 → enter whose port number that source network ip pc
present.
➢​10 → ACL list number 1 to 99 pic anny number
Extended ACL practicals

1.​ PC to PC block
[Link] cannot connect with [Link]
Nov 22, 2025

Command syntax
All commands apply on source router

bhopal(config)# → access-list 110 deny ip host [Link] [Link]

[Link]
bhopal(config)# → access-list 110 permit ip any any
bhopal(config)# → interface fastethernet 0/1
bhopal(config-if)# → ip access-group 110 in
bhopal(config-if)# → exit

Note →
➢​[Link] → source pc ip
➢​[Link] → destination pc ip
➢​[Link] → PC wildmask
➢​0/1 → enter whose port number that source ip pc present.
➢​110 → ACL list number 101 to 199 pic anny number
Another pc [Link] can not connect with [Link]

bhopal(config)#access-list 120 deny ip host [Link] [Link] [Link]

bhopal(config)#access-list 120 permit ip any any
bhopal(config)#interface fastEthernet 0/0
bhopal(config-if)#ip access-group 120 in
bhopal(config-if)#exit

2.​PC to network block

Nov 24, 2025
Command syntax

➢​First provide ip of all ports

➢​Do any routing

bhopal(config)# → access-list 102 deny ip host [Link] [Link]

[Link]
bhopal(config)# → access-list 102 permit ip any any
bhopal(config)# → interface fastethernet 0/1
bhopal(config-if)# → ip access-group 102 in
bhopal(config-if)# → exit

Note :
➢​[Link] → source pc ip
➢​[Link] → destination network ip
➢​[Link] → destination network wildcard mask
➢​0/1 → source pc ip port number
➢​102 → ACL list number 101 to 199 pic anny number

3.​Network to network
Nov 25, 2025
Command syntax

➢​First provide ip of all ports

➢​Do any routing

bhopal(config)# → access-list 103 deny ip host [Link] [Link]

[Link] [Link]
bhopal(config)# → access-list 103 permit ip any any
bhopal(config)# → interface fastethernet 0/1
bhopal(config-if)# → ip access-group 103 in
bhopal(config-if)# → exit

Note :
➢​[Link] → source network ip
➢​[Link] → destination network ip
➢​[Link] → first one is source network wildcard mask
➢​[Link] → second is destination network wildcard mask
➢​0/1 → source network ip port number
➢​103 → ACL list number 101 to 199 pic anny number
4.​Network to host (PC) block
Nov 25, 2025

Command syntax

➢​First provide ip of all ports

➢​Do any routing

bhopal(config)# → access-list 105 deny ip host [Link] [Link]

[Link] [Link]
bhopal(config)# → access-list 105 permit ip any any
bhopal(config)# → interface fastethernet 0/1
bhopal(config-if)# → ip access-group 105 in
bhopal(config-if)# → exit

Note :
➢​[Link] → source network ip
➢​[Link] → destination host ip
➢​[Link] → is source network wildcard mask
➢​[Link] → is destination network wildcard mask
➢​0/1 → source network ip port number
➢​105 → ACL list number 101 to 199 pic anny number
 5.​Http Protocol block
[Link] and [Link] can not search web page
Nov 26, 2025

Command syntax

➢​First provide all pc and router ip

➢​Do any routing

Bhopal(config)# → access-list 150 deny tcp [Link] host [Link]

bhopal(config)# → access-list 150 deny tcp [Link] host [Link]
bhopal(config)# → access-list 150 permit ip any any
bhopal(config)# → interface fastethernet 0/0
bhopal(config-if)# → ip access-group 150 in
bhopal(config-if)# → exit

Note :
➢​[Link] → is source ip
➢​[Link] → destination server ip
➢​150 → extended ACL number choose 101 to 199 any
➢​0/0 → source ip present port number
Frame Relay
Nov 29, 2025

Frame Relay
➢​Frame relay is a WAN protocol which is used for connecting
multiple routers (networks) with each other in a WAN
environment.

➢​Frame relay protocol is used for connecting different cities with

each other in WAN.

➢​WAN protocol was introduced in 1984 by CCITTC (Consultative

Committee for International Telegraphy and Telephony).

➢​Frame relay is the cheapest WAN protocol which is used for

connecting devices with higher speed.

➢​Frame relay is providing speed of 44.3 Mbps speed.

➢​Frame relay has replaced x.25 protocol.

➢​Frame relay is a protocol which works on the data link layer of

an OSI model.

➢​Frame relay use DLCI ( data link connection identifier ) for

connecting different networks.

➢​A DLCI is a virtual path which is used for showing the

connection from one router to another.

➢​Frame relay used a special device called cloud for connecting

multiple routers with each other.

➢​Cloud is also known as frame relay switch.

➢​There are three types of companies which produce frame relay

switch–
1.​ Cisco
2.​ Q939A
3.​ ANSI
➔​Bhopal to Delhi DLCI – 102
➔​Delhi to bhopal DLCI – 201
➔​Bhopal to Agra DLCI – 103
 ➔​Agra to Bhopal DLCI – 301

Practical →
 ➢​Connect manual cable can not use automatic cable feature.
➢​Choose only serial DCE cable and connect all the routers and
cloud with each other.
➢​Then provide ip of all routers

Command syntax

Bhopal(config)# → interface serial 0/0

Bhopal(config-if)# → ip address [Link] [Link]
Bhopal(config-if)# → clock rate 64000
Bhopal(config-if)# → bandwidth 64
Bhopal(config-if)# → encapsulation frame-relay
Bhopal(config-if)# → frame-relay lmi-type cisco
Bhopal(config-if)# → frame-relay interface-dlci 102
Bhopal(config-if)# → frame-relay interface-dlci 103
Bhopal(config-if)# → frame-relay interface-dlci 104
Bhopal(config-if)# → no shutdown

Note ⤵️
➢​Lmi-type means which company router we are configure.
➢​Interface- DLCI means virtual path bhopal to delhi 102
➢​Bhopal to agra virtual path 103
➢​Bhopal to kanpur virtual path 104
Delhi(config)# → interface serial 0/0
Delhi(config-if)# → ip address [Link] [Link]
Delhi(config-if)# → encapsulation frame-relay
Delhi(config-if)# → frame-relay lmi-type cisco
Delhi(config-if)# → frame-relay interface-dlci 201
Delhi(config-if)# → no shutdown

Note ⤵️
➢​Interface -dlci means return path of delhi to bhopal is 201
Agra(config)# → interface serial 0/0
Agra(config-if)# → ip address [Link] [Link]
Agra(config-if)# → encapsulation frame-relay
Agra(config-if)# → frame-relay lmi-type cisco
Agra(config-if)# → frame-relay interface-dlci 301
Agra(config-if)# → no shutdown
kanpur(config)# → interface serial 0/0
kanpur(config-if)# → ip address [Link] [Link]
kanpur(config-if)# → encapsulation frame-relay
kanpur(config-if)# → frame-relay lmi-type cisco
kanpur(config-if)# → frame-relay interface-dlci 401
kanpur(config-if)# → no shutdown

Setup cloud relay 0

Go to cloud relay config then apply all of this 👇
Serial 0 → type in DLCI – 102
​ ​ Type in name → bhopal - delhi
​ ​ Click to add button

type in DLCI – 103

​ ​ Type in name → bhopal - agra
​ ​ Click to add button

​ ​ type in DLCI – 104

​ ​ Type in name → bhopal - kanpur
​ ​ Click to add button

Note ⤵️
➢​Choose serial 0 because serial 0 is source port number (which
port number bhopal link in cloud )
➢​ Add all DLCI (virtual path) in serial 0
Serial1 → Type in DLCI 201
​ ​ Type in name → delhi-bhopal
Note ⤵️
➢​DLCI 201 is a return address ( destination to source )

Serial2 → Type in DLCI 301

​ ​ Type in name → Agra-bhopal

Note ⤵️
➢​DLCI 301 is a return address ( destination to source )
Serial3 → Type in DLCI 401
​ ​ Type in name → Kanpur-bhopal

Note ⤵️
➢​DLCI 401 is a return address ( destination to source )

Then go frame relay option

Configure incoming and outgoing virtual path

Serial0 → bhopal-delhi <-> serial1 → delhi-bhopal

Serial0 → bhopal-agra <-> serial2 → agra-bhopal
Serial0 → kanpur-agra <-> serial3 → kanpur-bhopal
Frame relay practice

➢​First setup frame relay

➢​Then provide ip of all routers and PCs
➢​Do routing of all the routers.
bhopal(config)#interface serial 0/0
bhopal(config-if)#ip address [Link] [Link]
bhopal(config-if)#clock rate 64000
bhopal(config-if)#bandwidth 64
bhopal(config-if)#encapsulation frame-relay
bhopal(config-if)#frame-relay lmi-type cisco
bhopal(config-if)#frame-relay interface-dlci 102
bhopal(config-if)#frame-relay interface-dlci 103
bhopal(config-if)#frame-relay interface-dlci 104
bhopal(config-if)#no shutdown

delhi(config)#interface serial 0/0

delhi(config-if)#ip address [Link] [Link]
delhi(config-if)#encapsulation frame-relay
delhi(config-if)#frame-relay lmi-type cisco
delhi(config-if)#frame-relay interface-dlci 201
delhi(config-if)#no shutdown
Same as too other two routers kanpur and agra.
Hub and spoke frame relay
Dec 2, 2025

Hub and spoke frame relay

Step I
bhopal(config)# → interface serial 0/0
bhopal(config-if)# → encapsulation frame-relay
bhopal(config-if)# → frame-relay lmi-type cisco
bhopal(config-if)# → clock rate 64000
bhopal(config-if)# → bandwidth 64
bhopal(config-if)# → no shutdown

Step II
bhopal(config)# → interface serial 0/0.1 point-to-point
bhopal(config-subif)# → ip address [Link] [Link]
bhopal(config-subif)# → frame-relay interface-dlci 102
bhopal(config-subif)# → no shutdown
bhopal(config-subif)# → exit

bhopal(config)# → interface serial 0/0.2 point-to-point

bhopal(config-subif)# → ip address [Link] [Link]
bhopal(config-subif)# → frame-relay interface-dlci 103
bhopal(config-subif)# → no shutdown
bhopal(config-subif)# → exit

bhopal(config)# → interface serial 0/0.3 point-to-point

bhopal(config-subif)# → ip address [Link] [Link]
bhopal(config-subif)# → frame-relay interface-dlci 104
bhopal(config-subif)# → no shutdown
bhopal(config-subif)# → exit

Step III
bhopal(config)# → interface serial 0/0
bhopal(config-subif)# → no shutdown
bhopal(config-subif)# → exit

Then setup cloud relay and other connected routers to previous

method

Advanced practice of hub and spoke relay

Dec 3, 2025
NAT- network address translation
Dec 4, 2025

NAT – Network address translation

➢​NAT is a security which is used in the router to protect the

private ip address of the local network.

➢​NAT is always applied on the junction of private networks of

public and private networks.

➢​NAT hides the original ip of a private network and generates

fake ip so that it can be protected from the hackers of the
external network.

➢​NAT is of two types -

1.​ Static
 2.​ Dynamic

➢​Static NAT → In static NAT the administrator manually creates

fake ip for each computers of a private network.

Static NAT

●​ First provide ip of all routers and PCs

●​ Do any routing
●​ Apply NAT setting
Static NAT apply settings

bhopal(config)# → ip nat inside source static [Link] [Link]

bhopal(config)# → ip nat inside source static [Link] [Link]
bhopal(config)# → ip nat inside source static [Link] [Link]
bhopal(config)# → ip nat inside source static [Link] [Link]
bhopal(config)# →ip nat inside source static [Link] [Link]

bhopal(config)# → interface serial 0/0

bhopal(config)# →ip nat outside
bhopal(config)# → exit

bhopal(config)# → interface fastethernet 0/0

bhopal(config)# → ip nat inside
bhopal(config)# → exit

Note ⤵️
➢​[Link] is hide ip to public network
➢​[Link] is fake ip
➢​[Link] is another fake ip
➢​Serial 0/0 is source serial port number
➢​Fastethernet 0/0 is whose port number that the hide ip is
present.
How to verify NAT apply or not
Two methods are there to check NAT –

1.​ Router# → show nat translation

2.​ Router# → show ip nat statistics
Dec 5, 2025

Dynamic NAT
➢​Dynamic NAT is an automatic NAT in which a scope like DHCP
is created and a fake ip of the computer in a private network is
provided from scope.

➢​Dynamic NAT is an automatic type of address translation.

Dynamic NAT apply setting
➢​First provide ip of all routers and PCs.
➢​Do any routing
➢​Apply dynamic NAT setting

Dynamic NAT setting

bhopal(config)# → access-list 10 permit [Link] [Link]

bhopal(config)# → ip nat pool abc [Link] [Link] netmask
[Link]

bhopal(config)# → interface serial 0/0

bhopal(config-if)# → ip nat outside
bhopal(config-if)# → exit
bhopal(config)# → interface fastethernet 0/0
bhopal(config-if)# → ip nat inside source list 10 pool abc
bhopal(config)# → exit

Note ⤵️
➢​10 is access-list number
➢​[Link] is hide ip to public network
➢​[Link] is a wild card mask
➢​[Link] & [Link] is range of fake ip
➢​[Link] is subnet mask
➢​Serial 0/0 is source serial port number
➢​Fastethernet 0/0 is whose port number that the hide ip is
present.

How to verify NAT apply or not

Two methods are there to check NAT –
3.​ Router# → show nat translation
4.​ Router# → show ip nat statistics
PAT- Port address translation
Dec 5, 2025

PAT – Port Address Translation

➢​PAT is a technology which is in the family of NAT (network
address translation ).
➢​PAT generates the same fake ip for every computer of a private
network.
➢​PAT feature is also known as over load.
➢​The second advantage of a PAT feature is that it changes the
port number if multiple computers are working on the same
protocol to make the work unique.
 ➢​First provide ip of all routers and PCs
➢​Do any routing
➢​Apply PAT settings

PAT setting apply

bhopal(config)# → access-list 10 permit [Link] [Link]

bhopal(config)# → ip nat pool patpool [Link] [Link] netmask
[Link]

bhopal(config)# → interface serial 0/0

bhopal(config-if)# → ip nat outside
bhopal(config-if)# → exit

bhopal(config)# → interface fastethernet 0/0

bhopal(config-if)# → ip nat inside source list 10 pool patpool
overload
bhopal(config)# → exit

Note ⤵️
➢​10 is access-list number
➢​[Link] is hide ip to public network
➢​[Link] is a wild card mask
➢​[Link] & [Link] is range of fake ip
➢​[Link] is subnet mask
➢​Serial 0/0 is source serial port number
➢​Fastethernet 0/0 is whose port number that the hide ip is
present.
How to verify PAT apply or not

1.​ Router# → show ip nat statistics

Test II
Dec 6, 2025
Switching
Dec 8, 2025

Switching

➢​Switch is a network device used to connect multiple computers

with each other to create a local network.

➢​The process done by switching is known as the switching

process.

➢​Switch is of two types –

1.​ Fixed
2.​ Variable

➢​All the variable switches are known as catalyst switches.

➢​All the 2900 series switches are known as catalyst switches.

➢​All the commands of the router work on the catalyst switch.

➢​The Switch also have iOS which is stored in flash memory.

➢​The switch have console port by which we can take access to

the switch.

➢​The switch have mode button which helps in breaking

passwords.

➢​Catalyst switch is of two types –

1.​ Standard
2.​ Enterprise

➢​Switch comes in 2 memory sizes 8Mb and 16Mb.

Dec 8, 2025

➢​Switch creates a MAC table in the switching process.

➢​In switching process two technology are used –

1.​ CAM – content address memory
2.​ ASIC – application specific integrated circuit

➢​Catalyst switches are used in organization and in offices to

divide a single network into multiple departments.
VLAN ( Virtual local area network )
1.​ VLAN is technology which helps in dividing a single local area
network into multiple virtual local area networks.
2.​ VLAN technology is mostly used for creating departments in a
local network.
3.​ VLAN works by restricting the port communication.
4.​ VLAN stops the broadcasting and helps only departments'
computers to communicate with each other.
5.​ By default the whole switch is VLAN - 1.
VLANs Create command syntax
Switch(config)#vlan 2
Switch(config-vlan)#name placement-office
Switch(config-vlan)#exit

Switch(config)#vlan 3
Switch(config-vlan)#name help-desk
Switch(config-vlan)#exit

Switch(config)#vlan 4
Switch(config-vlan)#name admin
Switch(config-vlan)#exit

Switch(config)#vlan 5
Switch(config-vlan)#name lab
Switch(config-vlan)#exit
Note :
➢​2,3,4,5 is VLAN number
➢​Placment–office , help–desk, admin and lab is VLAN names

Add PCs into VLANs command syntax

Switch(config)#interface fastethernet 0/1

Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/2

Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit
Switch(config)#interface fastethernet 0/3
Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/4

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/5

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/6

Switch(config-if)#switchport access vlan 4
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/7

Switch(config-if)#switchport access vlan 4
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/8

Switch(config-if)#switchport access vlan 5
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/9

Switch(config-if)#switchport access vlan 5
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/10

Switch(config-if)#switchport access vlan 5
Switch(config-if)#exit
Note :
➢​0/1 , 0/2, 0/3, …. Is port numbers of PCs
➢​Vlan 2, Vlan 3, Vlan 4 …… is VLANs which is created by me in
previous tab
➢​In VLAN 2 PCS added 0/1, 0/2, 0/3 and continued to others
switch to switch connection
Dec 9, 2025

Inter-Switch configuration
Switch to switch connection
Dec 9, 2025

➢​First give ip of all PCs

 ➢​Then create VLANs and configure them

Switch 1 VLANs creation

Switch(config)#vlan 2
Switch(config-vlan)#name finance
Switch(config-vlan)#exit

Switch(config)#vlan 3
Switch(config-vlan)#name Sales
Switch(config-vlan)#exit

Note :
➢​2 is VLAN number
➢​Finance, sales is name of VLAN
Switch 1 PCs add in VLANs
Switch(config)#interface fastethernet 0/2
Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/3

Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/4

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/5

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/6

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Note :
➢​0/2, 0/3, 0/4 …. Is PCs port number
➢​Vlan 2, vlan 3 is whose VLANs we want to add PCs
Switch to switch connection configuration
Switch(config)#interface fastethernet 0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit

Note :
➢​0/1 is a directly connected source port number to next switch
Remember before the second switch configuration you have to
create the same VLAN number in the next switch .

For example you have created finance to VLAN 2 in switch 1 so the

same thing applies to switch 2 will be the same number VLAN 2
finance.
Switch 2 VLANs creation
Switch(config)#vlan 2
Switch(config-vlan)#name finance
Switch(config-vlan)#exit

Switch(config)#vlan 3
Switch(config-vlan)#name Sales
Switch(config-vlan)#exit

Switch(config)#vlan 4
Switch(config-vlan)#name marketing
Switch(config-vlan)#exit

Note :
➢​2,3,4 is VLAN number
➢​Finance, sales, marketing is name of VLAN
Switch 2 PCs add in VLANs
Switch(config)#interface fastethernet 0/3
Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/4

Switch(config-if)#switchport access vlan 3
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/5

Switch(config-if)#switchport access vlan 2
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/6

Switch(config-if)#switchport access vlan 4
Switch(config-if)#exit

Note :
➢​0/2, 0/3, 0/4 …. Is PCs port number
➢​Vlan 2, vlan 3 is whose VLANs we want to add PCs

Switch to switch connection configuration

Switch(config)#interface fastethernet 0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/2

Switch(config-if)#switchport mode trunk
Switch(config-if)#exit
Note :
➢​0/1, 0/2 is a directly connected source port number to next
switch

Switch 3 VLANs creation

Switch(config)#vlan 4
Switch(config-vlan)#name marketing
Switch(config-vlan)#exit

Switch(config)#vlan 5
Switch(config-vlan)#name administrator
Switch(config-vlan)#exit

Note :
➢​4, 5 is VLAN number
➢​Marketing, administrator is name of VLAN

Switch 3 PCs add in VLANs

Switch(config)#interface fastethernet 0/2
Switch(config-if)#switchport access vlan 4
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/3

Switch(config-if)#switchport access vlan 4
Switch(config-if)#exit
Switch(config)#interface fastethernet 0/4
Switch(config-if)#switchport access vlan 5
Switch(config-if)#exit

Switch(config)#interface fastethernet 0/5

Switch(config-if)#switchport access vlan 5
Switch(config-if)#exit

Note :
➢​0/2, 0/3, 0/4 …. Is PCs port number
➢​Vlan 4, vlan 5 is whose VLANs we want to add PCs
Switch to switch connection configuration
Switch(config)#interface fastethernet 0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit

Note :
➢​0/1 is a directly connected source port number to next switch
Inter VLAN Routing
Dec 10, 2025

Inter VLAN Routing

➔​Inter VLAN routing is the combination of VLAN and routing.

➔​When a router is added into multiple VLANs so that all the

VLANs can be connected to the external network it is called
inter VLAN routing.

➔​Inter VLAN routing helps all the VLANs to communicate with

each other whether they are of any range ip address.

➔​dot1Q protocol is used in inter VLAN routing.

➔​The standard used by inter VLAN is TSL.

➢​First create VLANs
➢​Add PCS into VLANs
➢​Give ip of all router and do routing
➢​Then apply command syntax section commands on the router
to divide one port into virtual ports so each port contains a
unique ip address.
Command syntax of switch

Vlan creation on switch0

Switch(config)#vlan 2
Switch(config-vlan)#name sales
Switch(config-vlan)#exit

Switch(config)#vlan 3
Switch(config-vlan)#name hr
Switch(config-vlan)#exit

Switch(config)#vlan 4
Switch(config-vlan)#name finance
Switch(config-vlan)#exit

PC add into VLANs on switch0

Switch(config)#interface fastethernet 0/2
Switch(config-if)#switchport access vlan 2
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/3

Switch(config-if)#switchport access vlan 2
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/4

Switch(config-if)#switchport access vlan 3
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/5

Switch(config-if)#switchport access vlan 3
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/6

Switch(config-if)#switchport access vlan 4
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/7

Switch(config-if)#switchport access vlan 4
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/8

Switch(config-if)#switchport access vlan 4
Switch(config-if)# exit

Switch(config)#interface fastethernet 0/1

Switch(config-if)#switchport mode trunk
Switch(config-if)# exit
Command syntax for router0

Router(config)#interface fastethernet 0/0.1

Router(config-subif)#encapsulation dot1Q 5
Router(config-subif)#ip address [Link] [Link]
Router(config-subif)#exit

Router(config)#interface fastethernet 0/0.2

Router(config-subif)#encapsulation dot1Q 10
Router(config-subif)#ip address [Link] [Link]
Router(config-subif)#exit

Router(config)#interface fastethernet 0/0.3

Router(config-subif)#encapsulation dot1Q 15
Router(config-subif)#ip address [Link] [Link]
Router(config-subif)#exit

Router(config)#interface fastethernet 0/0

Router(config-if)#no shutdown
Router(config-if)# Exit

Note:
➢​0/0.1, 0/0.2, 0/0.3 is a virtual port number of 0/0 port
➢​5, 10, 15 is VLANs number
➢​[Link] is a port ip address

DHCP setup in different VLANs

Router(config)#ip dhcp pool abc

Router(dhcp-config)#network [Link] [Link]
Router(dhcp-config)#default-router [Link]
Router(dhcp-config)#dns-server [Link]
Router(dhcp-config)#exit

Router(config)#ip dhcp pool abcd

Router(dhcp-config)#network [Link] [Link]
Router(dhcp-config)#default-router [Link]
Router(dhcp-config)#dns-server [Link]
Router(dhcp-config)#exit

Router(config)#ip dhcp pool abcde

Router(dhcp-config)#network [Link] [Link]
Router(dhcp-config)#default-router [Link]
Router(dhcp-config)#dns-server [Link]
Router(dhcp-config)#exit

Practice of inter VLANS

Dec 11, 2025
Test III
Switch Configuration
Dec 12, 2025

Switch configuration

Setup privilege mode password on switch

➢​ Switch(config)# → enable secret 123

Setup console mode password on switch

Switch(config)#line console 0
Switch(config-line)#password 1234
Switch(config-line)#login
Switch(config-line)#exit
Setup telnet on switch
Switch(config)#line vty 0 4
Switch(config-line)#password 1234
Switch(config-line)#login
Switch(config-line)#exit

How to access switch using telnet

➢​Go to connected pc
➢​Then go to cmd
➢​Then type – telnet [Link] & enter
➢​Note : [Link] is switch ip address

How to give ip on switch

Switch(config)#interface vlan 1
Switch(config-if)#ip address [Link] [Link]
Switch(config-if)#no shutdown
SSH setup on switch
Switch(config)#hostname bhopal
bhopal(config)#ip domain name mpnagar
bhopal(config)#crypto key generate rsa

How many bits in the modulus [512]: 1024

bhopal(config)#enable password 12345

bhopal(config)#username jetking password 1234

bhopal(config)#ip ssh version 2

bhopal(config)#line vty 0 15
bhopal(config-line)#transport input ssh
bhopal(config-line)#login local
bhopal(config-line)#exit

Note :
➢​Bhopal is random hostname set
➢​1024 is rsa bits we can set another also
➢​12345 is privilege mode password
➢​1234 is jetking username password

How to access –
Type in cmd – ssh -l username router ip
Like this – ssh -l jetking [Link]

Complete
d