poprawa egz(2).doc

(63 KB) Pobierz

Clear any existing configurations on the routers.

 

erase startup-config
reload

 

Step 1: Configure IP addresses on all links according to the addressing table.

R1

R1(config)#int s0/0/0

R1(config-if)#ip address 10.1.2.1 255.255.255.252

R1(config-if)#int fa0/1

R1(config-if)#ip address 172.16.1.254 255.255.255.0

R2:

R2(config)#int s0/0/1

R2(config-if)#ip address 10.1.2.2 255.255.255.252

R2(config-if)#int fa0/1

R2(config-if)#ip address 172.16.1.254 255.255.255.0

Step 1: Configure interfaces on R1, R2, and R3.

Configure the interfaces on the R1, R2, and R3 routers with the IP addresses from the addressing

table at the beginning of the lab. Be sure to include the clock rate on the serial DCE interfaces.

R1

!

interface FastEthernet0/1

ip address 192.168.10.1 255.255.255.0

no shutdown

!

interface Serial0/0/0

ip address 10.1.1.1 255.255.255.252

no shutdown

clock rate 64000

R2

!

interface Loopback0

ip address 209.165.200.225 255.255.255.224

!

!

interface Serial0/0/0

ip address 10.1.1.2 255.255.255.252

no shutdown

interface Serial0/0/1

ip address 10.2.2.1 255.255.255.252

clock rate 64000

no shutdown

R3

!

interface FastEthernet0/1

ip address 192.168.30.1 255.255.255.0

no shutdown

!

interface Serial0/0/1

ip address 10.2.2.2 255.255.255.252

no shutdown

Step 2: Verify IP addressing and interfaces.

R1#show ip interface brief

R2#show ip route

 

Configure the R1, R2, and R3 routers according to the following guidelines:

Configure the router hostname.

Disable DNS lookup.

Configure an EXEC mode password.

Configure a message-of-the-day banner.

Configure a password for console connections.

Configure synchronous logging.

Configure a password for vty connections.

enable

configure terminal

no ip domain-lookup

enable secret class

banner motd ^CUnauthorized access strictly prohibited and prosecuted

to the full extent of the law^C

!

!

line con 0

exec-timeout 0 0

logging synchronous

password cisco

login

!

line vty 0 4

password cisco

login

end

copy running-config starting-config

Local authentication:

    Router(config)#line con 0

    Router(config-line)#login

    Router(config)#line aux 0

    Router(config-line)#login

    Router(config)#line vty 0 4

    Router(config-line)#login local

 

HDLC encapsulation.

R2(config)#interface serial 0/0/0

R2(config-if)#encapsulation hdlc

R2(config-if)#

R2(config-if)#interface serial 0/0/1

R2(config-if)#encapsulation hdlc

R2(config-if)#

 

Usunąć ppp

R2(config)#interface serial 0/0/0

R2(config-if)#no encapsulation ppp

R2(config-if)#interface serial 0/0/1

R2(config-if)#no encapsulation ppp

Step 2: Configure PPP CHAP authentication on the serial link between R2 and R3.

R2(config)#username R3 password cisco

R2(config)#int s0/0/1

R2(config-if)#ppp authentication chap

R2(config-if)#

*Aug 23 18:06:00.935: %LINEPROTO-5-UPDOWN: Line protocol on Interface

Serial0/0/1, changed state to down

R2(config-if)#

*Aug 23 18:06:01.947: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.30.1 on

Serial0/0/1 from FULL to DOWN, Neighbor Down: Interface down or

detached

R2(config-if)#

R3(config)#username R2 password cisco

*Aug 23 18:07:13.074: %LINEPROTO-5-UPDOWN: Line protocol on Interface

Serial0/0/1, changed state to up

R3(config)#int s0/0/1

R3(config-if)#

*Aug 23 18:07:22.174: %OSPF-5-ADJCHG: Process 1, Nbr 209.165.200.225 on

Serial0/0/1 from LOADING to FULL, Loading Done

R3(config-if)#ppp authentication chap

R3(config-if)#

 

Aby zrozumięć

R2#debug ppp authentication

PPP authentication debugging is on

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#int s0/0/1

R2(config-if)#shutdown

R2(config-if)#

R2(config-if)#no shutdown

R3#debug ppp authentication

Step 1: Break PPP CHAP authentication.

On the serial link between R2 and R3, change the authentication protocol on interface serial 0/0/1

to PAP.

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#int s0/0/1

R2(config-if)#ppp authentication pap

R2(config-if)#^Z

R2#

*Aug 24 15:45:47.039: %SYS-5-CONFIG_I: Configured from console by

console

R2#copy run start

Destination filename [startup-config]?

Building configuration...

[OK]

R2#reload

Step 2: Restore PPP CHAP authentication on the serial link.

Notice that it is not necessary to reload the router for this change to take effect.

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#int s0/0/1

R2(config-if)#ppp authentication chap

R2(config-if)#

*Aug 24 15:50:00.419: %LINEPROTO-5-UPDOWN: Line protocol on Interface

Serial0/0/1, changed state to up

R2(config-if)#

*Aug 24 15:50:07.467: %OSPF-5-ADJCHG: Process 1, Nbr 192.168.30.1 on

Serial0/0/1 from LOADING to FULL, Loading Done

R2(config-if)#

Step 3: Intentionally Break PPP CHAP authentication by changing the password on R3.

R3#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R3(config)#username R2 password ciisco

R3(config)#^Z

R3#

*Aug 24 15:54:17.215: %SYS-5-CONFIG_I: Configured from console by

console

R3#copy run start

Destination filename [startup-config]?

Building configuration...

[OK]

R3#reload

R1#show interface serial0/0/0

 

Step 2: Return both serial interfaces on R2 to PPP encapsulation.

R2(config)#interface s0/0/0

R2(config-if)#encapsulation ppp

 

Task 5: Configure PPP Encapsulation on Serial Interfaces

Step 1: Configure PPP on the serial interfaces of all three routers.

R1

interface Serial0/0/0

encapsulation ppp

!

interface Serial0/0/1

encapsulation ppp

R2

interface Serial0/0/0

encapsulation ppp

!

interface Serial0/0/1

encapsulation ppp

R3

interface Serial0/0/0

encapsulation ppp

!

interface Serial0/0/1

encapsulation ppp

Step 2: Verify that all serial interfaces are using PPP encapsulation.

R1

R1#show interface serial0/0/0

 

Frame relay r1 I r2

….

R1(config-if)#frame-relay map ip 10.1.1.2 102 broadcast

R1(config-if)#no shutdown

 

 

R2(config)#interface serial 0/0/1

R2(config-if)#encapsulation frame-relay

R2(config-if)#no frame-relay inverse-arp

R2(config-if)#frame-relay map ip 10.1.1.1 201 broadcast

R2(config-if)#no shutdown

Verify the Configuration

You should now be able to ping from R1 to R2. It may take several seconds after bringing up the

interfaces for the PVC to become active. You can also see EIGRP routes for each router.

Step 1: Ping R1 and R2.

Ensure that you can ping router R2 from router R1.

R1#ping 10.1.1.2

Frame relay na środkowym 2

Step 1: Configure FR Switch as a Frame Relay switch and create a PVC between R1 and

R2.

This command enables Frame Relay switching globally on the router, allowing it to forward

frames based on the incoming DLCI rather than on an IP address basis:

FR-Switch(config)#frame-relay switching

Change the interface encapsulation type to Frame Relay. Like HDLC or PPP, Frame Relay is a

data link layer protocol that specifies the framing of Layer 2 traffic.

FR-Switch(config)#interface serial 0/0/0

FR-Switch(config)#clock rate 64000

FR-Switch(config-if)#encapsulation frame-relay

Changing the interface type to DCE tells the router to send LMI keepalives and allows Frame

Relay route statements to be applied. You cannot set up PVCs using the frame-relay route

command between two Frame Relay DTE interfaces.

FR-Switch(config-if)#frame-relay intf-type dce

Note: Frame Relay interface types do not need to match the underlying physical interface type. A

physical DTE serial interface can act as a Frame Relay DCE interface, and a physical DCE

interface can act as a logical Frame Relay DTE interface.

Configure the router to forward incoming traffic on interface serial 0/0/0 with DLCI 102 to serial

0/0/1 with an output DLCI of 201.

FR-Switch(config-if)#frame-relay route 102 interface serial 0/0/1 201

FR-Switch(config-if)#no shutdown

This configuration creates two PVCs: one from R1 to R2 (DLCI 102), and one from R2 to R1

(DLCI 201). You can verify the configuration using the show frame-relay pvc command.

FR-Switch(config-if)#interface serial 0/0/1

FR-Switch(config)#clock rate 64000

FR-Switch(config-if)#encapsulation frame-relay

FR-...

Zgłoś jeśli naruszono regulamin