YU CU

1. S dng Packet Tracer cu hnh bi Lab bn

2. t mt khu Console l Cisco, dch v Telnet,Enable Secret cho Center
Router,SW1,SW2 l class
3. S dng lnh service password-encryption m ha cc loi mt khu khng
c m ha
4. Cu hnh a ch IP nh m hnh bn
5. T cc PC th telnet n SW1,SW2,Router
6. Chuyn sang s dng SSH thay cho Telnet trn CenterRouter vi username: ttg ,
password:cisco
7. T cc PC th ssh n cc router

CC BC THC HIN:
1.S dng Packet Tracer cu hnh bi Lab bn :
Kt ni theo ng m hnh trn s dng Switch 2960 v router 2801
2. t mt khu Console l cisco, dch v Telnet,Enable Secret cho Center
Router,SW1,SW2 l class
-Center Router :
Router>enable
Router#configure terminal
Router(config)#hostname CenterRouter
-t mt khu cho cng console
CenterRouter(config)#line console 0
CenterRouter(config-line)#login
CenterRouter(config-line)#password cisco
CenterRouter(config-line)#exit
-t mt khu cho dch v Telnet
CenterRouter(config)#line vty 0 4
CenterRouter(config-line)#login
CenterRouter(config-line)#password class
CenterRouter(config-line)#exit
-t mt khu khi chuyn t mode User sang Privilege
CenterRouter(config)#enable secrect class
*Ch : t mt khu chuyn t mode User sang Privilege ta c th s dng
2 lnh l enable password v enable secrect nhng mt khu ca enable secrect
th c m ha trong cu hnh cn enable password th khng, ta c th kim tra
li iu ny bng cch cu hnh c nh c 2 lnh ny v kim tra li bng lnh
show running- configure
-SW1:
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW1

-t mt khu cho cng console

SW1(config)#line console 0
SW1(config-line)#login
SW1(config-line)#password cisco
SW1(config-line)#exit
-t mt khu cho dch v Telnet
SW1(config)#line vty 0 4
SW1(config-line)#login
SW1(config-line)#password class
SW1(config-line)#exit
-t mt khu khi chuyn t mode User sang Privilege
SW1(config)#enable secrect class
-SW2:
Switch>enable
Switch#configure terminal
Switch(config)#hostname SW2
-t mt khu cho cng console
SW2(config)#line console 0
SW2(config-line)#login
SW2(config-line)#password cisco
SW2(config-line)#exit
-t mt khu cho dch v Telnet
SW2(config)#line vty 0 4
SW2(config-line)#login
SW2(config-line)#password class
SW2(config-line)#exit
-t mt khu khi chuyn t mode User sang Privilege
SW2(config)#enable secrect class
3.S dng lnh service password-encryption m ha cc loi mt khu khng
c m ha :

-S dng lnh show running-configure xem li thng tin cc mt hin ti

- m ha cc mt khu khng c m ha mc nh, ta c th s dng lnh
service password-encryption chuyn sang Type-7 password. Ln lt trn
Center Router, SW1, SW2 di chuyn sang mode config v nhp lnh service
password-encryption
CenterRouter(configure)# service password-encryption
SW1(configure)# service password-encryption
SW2(configure)# service password-encryption
-S dng li lnh show running-configure v so snh tnh trng cc mt khu so
vi trc lc nh lnh
CenterRouter#show running-config
Building configuration...
Current configuration : 766 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname CenterRouter
!
!
!
enable secret 5 $1$mERr$hx5rVt7rPNoS4wqbXKX7m0
!
!
!
!
interface FastEthernet0/0

duplex auto
speed auto
!
interface FastEthernet0/1
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
ip classless
!
line con 0
password 7 0822404F1A0A
login
<output omit >
*Ch : Mt khu m ha bi service password-encryption vn c th b gii m
vi cng c Cain

4.Cu hnh a ch IP nh m hnh bn :

-CenterRouter:
CenterRouter(config)#interface fa0/1
CenterRouter (config-if)#ip address 192.168.1.1 255.255.255.0
CenterRouter (config-if)#no shutdown
CenterRouter (config)#interface fa0/0
CenterRouter (config-if)#ip address 192.168.2.1 255.255.255.0
CenterRouter (config-if)#no shutdown
-SW1:
SW1(config)#interface vlan 1
SW1(config-if)#ip address 192.168.1.5 255.255.255.0
SW1(config-if)#exit
SW1(config)#ip default-gateway 192.168.1.1
-SW2:

SW2(config)#interface vlan 1
SW2(config-if)#ip address 192.168.2.5 255.255.255.0
SW1(config-if)#exit
SW2(config)#ip default-gateway 192.168.2.1
5.T cc PC th telnet n SW1,SW2,Router :
-T PC1 tin hnh Telnet n CenterRouter bng cch vo Desktop Command
Prompt

+ PC1>telnet 192.168.1.1

-PC1 th telnet n SW2

+PC1>telnet 192.168.2.5

-Tng t t PC3 th Telnet n CenterRouter v SW2

6.Chuyn sang s dng SSH thay cho Telnet trn CenterRouter vi username: ttg ,
password:cisco:
*Ch : Cn phi i tn ca Router v trong phin SSH s dng hostname ca
Router v ip domain-name to ra kha m ha cho phin SSH
-To username v passworld cho CenterRouter dung chng thc trong phin
SSH
CenterRouter(config)#username ttg password cisco
- Cu hnh ip domain-name vi tn domain cng ty ca mnh
CenterRouter (config)#ip domain-name truongtan.edu.vn
-To ra kha (key) bng cch kt hp hostname v tn domain to ra key m
ha
CenterRouter (config)#crypto key generate rsa
CenterRouter (config)#line vty 0 4

- ng nhp bng username v password to ra trn

CenterRouter (config-line)#login local
-Chuyn qua ch chng thc ch s dng SSH thay cho telnet
CenterRouter (config-line)#transport input ssh
7.T cc PC th ssh n cc CenterRouter :
- th SSH t PC n CenterRouter trn cc PC cc bn s dng lnh sau :
PC1>ssh L vsic 192.168.1.1