0% found this document useful (0 votes)
51 views16 pages

Basic Router Configuration Review

Uploaded by

Aldo Julius
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
51 views16 pages

Basic Router Configuration Review

Uploaded by

Aldo Julius
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Laporan Praktikum

ANTAR JARINGAN

No NIM Nama Prodi


1. 13322030 Ronaldo Julius Siregar D3TK

23 Januari 2024

Institut Teknologi Del


Jl. Sisingamangaraja, Sitoluama, Laguboti
Kabupaten Toba, Sumatera Utara
DAFTAR ISI

DAFTAR ISI .......................................................................................................................i


DAFTAR GAMBAR ........................................................................................................ ii
DAFTAR TABEL ............................................................................................................ iii
BAB 1. BASIC ROUTER CONFIGURATION REVIEW ............................................... 1
Packet Tracer - Basic Router Configuration Review ......................................................... 1
Part 1: Configure Devices and Verify Connectivity ...................................................... 1
Part 2: Display Router Information ................................................................................ 2
Part 1: Configure Devices and Verify Connectivity ...................................................... 2
Step 1: Configure the PC interfaces. .......................................................................... 2
Step 2: Configure the router. ...................................................................................... 3
Step 3: Verify network connectivity. ......................................................................... 6
Part 2: Display Router Information ................................................................................ 8
Step 1: Establish an SSH session to R2. .................................................................... 8
Step 2: Retrieve important hardware and software information. ............................... 8
Step 3: Display the running configuration. ................................................................ 9
Step 4: Display the routing table on the router. ....................................................... 10
Step 5: Display a summary list of the interfaces on the router. ............................... 11

i
DAFTAR GAMBAR
Gambar 1 Konfigurasi IP pada PC3 ......................................................................................................... 2
Gambar 2 Konfigurasi IP pada PC4 ......................................................................................................... 3
Gambar 3 Hasil satu set kunci kripto dengan modulus 1024 bit. ............................................................. 4
Gambar 4 Konfigurasi password .............................................................................................................. 4
Gambar 5 Penetapan kata sandi vty .......................................................................................................... 4
Gambar 6 Konfigurasi 4 antarmuka pada router ...................................................................................... 5
Gambar 7 Penyimpanan hasil konfigurasi ................................................................................................ 5
Gambar 8 Ping (pemanggilan) alamat IPv4 dan IPv6 untuk PC4. ........................................................... 6
Gambar 9 Ping alamat S0/1/1 R1 untuk IPv4 dan IPv6 Dari CLI pada R2.............................................. 6
Gambar 10 Ping alamat ISP dari PC3....................................................................................................... 7
Gambar 11 Ping ke alamat ISP untuk pengujian ...................................................................................... 7
Gambar 12 . Masuk sebagai SSHadmin dengan kata sandi 55Hadm!n. .................................................. 8
Gambar 13 Tampilan versi pada PC3 ....................................................................................................... 8
Gambar 14 Versi pada R2......................................................................................................................... 9
Gambar 15 Filter password ....................................................................................................................... 9
Gambar 16 Tampilan running-config ..................................................................................................... 10
Gambar 17 Tampilan IP Router .............................................................................................................. 10
Gambar 18 Tampilan IP antarmuka ........................................................................................................ 11
Gambar 19 Tampilan IPv6 yg di seting pada R2 .................................................................................... 11

ii
DAFTAR TABEL
Tabel 1 Addressing ................................................................................................................................... 1

iii
BAB 1. BASIC ROUTER CONFIGURATION
REVIEW

Packet Tracer - Basic Router Configuration Review

Device Interface IP Address / Prefix Default Gateway


R2 G0/0/0 [Link] /24 N/A
2001:db8:acad:4::1 /64
fe80::2:a
G0/0/1 [Link] /24
2001:db8:acad:5::1 /64
fe80::2:b
S0/1/0 [Link] /24
2001:db8:acad:3::2 /64
fe80::1:c
S0/1/1 [Link] /30
2001:db8:feed:224::1/64
fe80::1:d
PC1 NIC [Link] /24 [Link]
2001:db8:acad:1::10 /64 fe80::1:a
PC2 NIC [Link] /24 [Link]
2001:db8:acad:2::10 /64 fe80::1:b
PC3 NIC [Link] /24 [Link]
2001:db8:acad:4::10 /64 fe80::2:a
PC4 NIC [Link] /24 [Link]
2001:db8:acad:5::10 /64 fe80::2:b

Tabel 1 Addressing

Objectives
Part 1: Configure Devices and Verify Connectivity
• Assign static IPv4 and IPv6 addresses to the PC interfaces.
• Configure basic router settings.
• Configure the router for SSH.
• Verify network connectivity.
1
Part 2: Display Router Information
• Retrieve hardware and software information from the router.
• Interpret the startup configuration.
• Interpret the routing table.
• Verify the status of the interfaces.

Background / Scenario
This activity requires you to configure the R2 router using the settings from the Addressing Table
and the specifications listed. The R1 router and the devices connected to it have been configured.
This is a comprehensive review of previously covered IOS router commands. In Part 1, you will
complete basic configurations and interface settings on the router. In Part 2, you will use SSH to
connect to the router remotely and utilize the IOS commands to retrieve information from the device
to answer questions about the router. For review purposes, this lab provides the commands necessary
for specific router configurations.

Instructions
Part 1: Configure Devices and Verify Connectivity
Step 1: Configure the PC interfaces.
a. Configure the IPv4 and IPv6 addresses on PC3 as listed in the Addressing Table.

Gambar 1 Konfigurasi IP pada PC3

2
b. Configure the IPv4 and IPv6 addresses on PC4 as listed in the Addressing Table.

Gambar 2 Konfigurasi IP pada PC4

Step 2: Configure the router.


Open configuration window
a. On the R2 router, open a terminal. Move to privileged EXEC mode

b. Enter configuration mode.

c. Assign a device name of R2 to the router.

d. Configure c1sco1234 as the encrypted privileged EXEC mode password.

e. Set the domain name of the router to [Link].

f. Disable DNS lookup to prevent the router from attempting to translate incorrectly entered
commands as though they were host names.

g. Encrypt the plaintext passwords.

h. Configure the username SSHadmin with an encrypted password of 55Hadm!n.

3
i. Generate a set of crypto keys with a 1024 bit modulus.

Gambar 3 Hasil satu set kunci kripto dengan modulus 1024 bit.

j. Assign cisco as the console password, configure sessions to disconnect after six minutes of
inactivity, and enable login. To prevent console messages from interrupting commands, use the
logging synchronous command.

Gambar 4 Konfigurasi password

k. Assign cisco as the vty password, configure the vty lines to accept SSH connections only,
configure sessions to disconnect after six minutes of inactivity, and enable login using the local
database.

Gambar 5 Penetapan kata sandi vty

l. Create a banner that warns anyone accessing the device that unauthorized access is prohibited.
NOTE:
The banner motd must include the word WARNING to score correc

m. Enable IPv6 Routing.

n. Configure all four interfaces on the router with the IPv4 and IPv6 addressing information from
the addressing table above. Configure all four interfaces with descriptions. Activate all four
interfaces.

4
Gambar 6 Konfigurasi 4 antarmuka pada router

o. Save the running configuration to the startup configuration file.

Gambar 7 Penyimpanan hasil konfigurasi

Close configuration window

5
Step 3: Verify network connectivity.
a. Using the command line at PC3, ping the IPv4 and IPv6 addresses for PC4.

Gambar 8 Ping (pemanggilan) alamat IPv4 dan IPv6 untuk PC4.

Question:
Were the pings successful?
Answer:
Yes
b. From the CLI on R2 ping the S0/1/1 address of R1 for both IPv4 and IPv6. The addresses
assigned to the S0/1/1 interface on R1 are:
IPv4 address = [Link]
IPv6 address = 2001:db8:acad:3::1

Gambar 9 Ping alamat S0/1/1 R1 untuk IPv4 dan IPv6 Dari CLI pada R2.

6
Question:
Were the pings successful?
Answer:
Yes

From the command line of PC3 ping the ISP address [Link].

Gambar 10 Ping alamat ISP dari PC3

Question:
Were the pings successful?
Answer:
Ya, PC menggunakan gateway bawaan router untuk memajukan trafficnya.

From PC3 attempt to ping an address on the ISP for testing, [Link].

Gambar 11 Ping ke alamat ISP untuk pengujian

Question:
Were the pings successful?
Answer:
Tidak, routing tidak dikonfigurasi. Hanya internet local yang dapat diakses. Tidak ada route
bawaan yang diatur pada R2

c. From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv4 address and log in as
SSHadmin with the password 55Hadm!n.
C:\> ssh -l SSHadmin [Link]
Password: 55Hadm!n

7
Gambar 12 . Masuk sebagai SSHadmin dengan kata sandi 55Hadm!n.

Question:
Was remote access successful?
Answer:
Yes
Part 2: Display Router Information
In Part 2, you will use show commands from an SSH session to retrieve information from the router.
Step 1: Establish an SSH session to R2.
From the command line of PC3 open an SSH session to the R2 G0/0/0 IPv6 address and log in as
SSHadmin with the password 55Hadm!n.

Step 2: Retrieve important hardware and software information.


Open configuration window

a. Use the show version command to answer questions about the router.

Gambar 13 Tampilan versi pada PC3

8
Questions:
What is the name of the IOS image that the router is running?

How much non-volatile random-access memory (NVRAM) does the router have?

How much Flash memory does the router have?

b. The show commands often provide multiple screens of outputs. Filtering the output allows a
user to display certain sections of the output. To enable the filtering command, enter a pipe (|)
character after a show command, followed by a filtering parameter and a filtering expression.
You can match the output to the filtering statement by using the include keyword to display all
lines from the output that contain the filtering expression. Filter the show version command,
using show version | include register to answer the following question.

Gambar 14 Versi pada R2

Questions:
What is the boot process for the router on the next reload?
Answer:
Dapat beragam. Pada umumnya (0x2102), router akan menjalani boot normal, mengakses IOS
dari memori Flash, dan mengakses konfigurasi startup dari NVRAM jika tersedia. Jika config
yang terdaftar adalah 0x2142, maka router akan melewati pengaturan startup dan memulai
command-prompt mode pengguna. Jika boot awal gagal, router akan kembali ke mode
ROMMON.
Step 3: Display the running configuration.
a. Use the show running-config command on the router to answer the following questions filtering
for lines containing the word “password”.

Gambar 15 Filter password

Question:
How are passwords presented in the output?
Answer:
Password dienkripsi karena perintah servis enkripsi-password.

9
b. Use the show running-config | begin vty command.

Gambar 16 Tampilan running-config

Question:
What is the result of using this command?
Answer:
Pengguna menerima hasil konfigurasi berjalan yang dimulai dengan perintah yang termasuk
dalam instansi pertama yang membatasi ekspresi.
Note:
A more specific command would be show running-config | section vty; however, the current
version of Packet Tracer does not support the section filtering command.

Step 4: Display the routing table on the router.


Use the show ip route command on the router to answer the following questions.

Gambar 17 Tampilan IP Router

10
Question:
What code is used in the routing table to indicate a directly connected network?
Answer:
Kode C yang ditunjuk untuk langsung tersambung ke subnet. L menunjuk tampilan lokal. Kedua
jawaban sama benar.

Question:
How many route entries are coded with a C code in the routing table?
Answer:
4

Step 5: Display a summary list of the interfaces on the router.


a. Use the show ip interface brief command on the router to answer the following question.

Gambar 18 Tampilan IP antarmuka

Question
What command changed the status of the Gigabit Ethernet ports from administratively down to
up?
Answer:
no shutdown

Question:
What filtering command would you use to display only the interfaces with addresses assigned?
Answer:
show ip interface brief | exclude unassignednswers here.

b. Use the show ipv6 int brief command to verify IPv6 settings on R2.

Gambar 19 Tampilan IPv6 yg di seting pada R2

11
Question:
What is the meaning of the [up/up] part of the output?
Aswer:
Status [up/up\ mengartikan status Layer 1 dan Layer 2 dan tidak bergantung pada Layer 3
untuk status.

12

Common questions

Powered by AI

To ensure security and management efficiency, modify the router's running configuration by: a) Using secure passwords and enabling password encryption via 'service password-encryption'. b) Configuring access lists to control traffic. c) Setting up SSH access instead of Telnet for secure remote management. d) Applying session timeouts and login delays to prevent unauthorized long-active sessions. e) Using logging synchronous to prevent log messages from interrupting command inputs. These adjustments enhance router security and improve management protocols .

Crypto key pairs and secure access, such as SSH, play crucial roles in securing administrative access to the router by providing encrypted communication channels. To set them up, generate crypto keys using 'crypto key generate rsa' with a specified modulus size (e.g., 1024 bits), and configure SSH by setting domain names, user credentials, and vty lines to accept only SSH connections. These measures secure sensitive data against interception during remote management sessions .

The use of 'show' commands during an SSH session aids in router management and troubleshooting by enabling the retrieval of essential hardware and software details, viewing interface statuses, and checking routing tables. These commands help administrators to verify configurations, diagnose connectivity issues, and assess the operational state of the router remotely. For instance, 'show version' provides software versions and memory details, while 'show ip route' reveals routing table entries .

Enabling IPv6 routing allows a network to support IPv6 protocol, which offers a larger address space, improved security features, and better end-to-end connectivity compared to IPv4. An organization might choose to implement IPv6 to future-proof its network, ensuring scalability and meeting compliance requirements with emerging standards, as IPv6 becomes more crucial with the depletion of IPv4 addresses .

To set up and verify network connectivity for a router using both IPv4 and IPv6, follow these steps: 1) Assign static IPv4 and IPv6 addresses to the network interfaces as specified in the addressing table. 2) Configure the router's basic settings, including enabling IPv6 routing. 3) Establish secure shell (SSH) access by configuring SSH settings and creating login credentials. 4) Test connectivity using ICMP Echo Requests (ping) to verify IPv4 and IPv6 connectivity across network devices. Successful pings confirm that the network configuration is correct .

Misconfiguring DNS settings on a router can cause delays, as the router may attempt to translate commands that are not host names, leading to unwanted DNS lookups. This can be prevented by disabling unnecessary DNS lookups using the 'no ip domain-lookup' command. This command stops the router from treating mistyped commands as hostnames requiring DNS resolution .

To verify and troubleshoot IPv6 configurations on a router, ensure that IPv6 routing is enabled and that interfaces are correctly assigned with IPv6 addresses. Use the 'show ipv6 interface brief' command to review interface configurations and their operational states. This command shows whether interfaces are up and assigned with IPv6 addresses, which is crucial for diagnosing connectivity issues in IPv6-enabled networks .

To configure a router to encrypt plaintext passwords, use the command 'service password-encryption'. This command encrypts all plaintext passwords in the configuration file to protect them from being easily read when viewing the configuration. Encrypting passwords adds an extra layer of security by preventing unauthorized users from discovering the passwords through configuration files .

It is important to save a router's running configuration to the startup configuration to ensure that changes are retained even after a reboot. This protects against configuration loss during unexpected power cycles or shutdowns. The command 'copy running-config startup-config' is used to save the current running configuration to the non-volatile startup configuration memory .

Configuring descriptions on router interfaces is significant as it provides context to the interface’s role in the network, facilitating easier network management and documentation. To configure an interface description, enter the interface configuration mode using the 'interface' command, followed by 'description <text>', replacing <text> with the appropriate description. This practice aids in quickly identifying interfaces during troubleshooting and prevents configuration errors .

You might also like