NAMA :

INSTITUSI :
 ThisdocumentisexclusivepropertyofCiscoSystems,Inc.Permissionisgrantedtoprintandcopy
thisdocumentaspartofanofficialCiscoNetworkingAcademyProgram.

CiscoIconsandSymbols

Router StraightthroughCable

Switch CrossoverCable

Hub Console(Rollover)

Workstation SerialCable

Cloud

CCNAInstructorLabManual 2
Lab1:EstablishingaConsoleConnectiontoaRouterorSwitch

Objective
CreateaconsoleconnectionfromaPCtoarouterandswitchusingthepropercable
ConfigureHyperTerminalonthePC
Observetherouterandswitchuserinterface
Background
ThislabwillfocusontheabilitytoconnectaPCtoarouteroraswitchinordertoestablisha
consolesessionandobservetheuserinterface.Aconsolesessionallowstheusertocheckor
changetheconfigurationoftheswitchorrouterandisthesimplestmethodofconnectingto
oneofthesedevices.
Thislabshouldbeperformedtwice,oncewitharouterandoncewithaswitchtoseethe
differencesbetweentheuserinterfaces.Startthislabwiththeequipmentturnedoffandwith
cablingdisconnected.Workinteamsoftwowithonefortherouterandonefortheswitch.The
followingresourceswillberequired:
WorkstationwithaserialinterfaceandHyperTerminalinstalled
Ethernet10BASETorFastEthernetswitch
CiscoRouter
Crossoverorconsolecableforconnectingtheworkstationtotherouterorswitch

Step1IdentifytheRouter/Switchconsoleconnectors
ExaminetherouterorswitchandlocatetheRJ45connectorlabeledConsole.

Step2Identifythecomputerserialinterface,whichisCOM1or2

CCNAInstructorLabManual 3
 Itshouldbea9or25pinmaleconnectorlabeledserialorCOM1.Itmayormaynotbe
identified.

Step3LocatetheRJ45toDB9adapter
OnesideoftheadapterconnectstothePCsserialinterfaceandtheothertotheRJ45rollover
cableconnector.IftheserialinterfaceonthePCordumbterminalisaDB25,anRJ45to
DB25adapterwillbeneeded.BothoftheseadapterstypicallycomewithaCiscorouteror
switch.

Step4Locateorbuildarollovercable
Usearollovercable.Ifnecessary,makeoneofadequatelengthtoconnecttherouteror
switchtoaworkstation.

Step5Connectthecablingcomponents
ConnecttherollovercabletotherouterorswitchconsoleportRJ45connector.Next,connect
theotherendoftherollovercabletotheRJ45toDB9orDB25adapter.Finally,attachthe
adaptertoaPCserialport,eitherDB9orDB25,dependingonthecomputer.

Step6StartthePCHyperTerminalprogram
CCNAInstructorLabManual 4
 a.Turnonthecomputer
b.FromtheWindowstaskbar,locatetheHyperTerminalprogram:

Start
Programs
Accessories
Communications
HyperTerminal

Step7NametheHyperTerminalSession
AttheConnectionDescriptionpopupenteranameintheconnectionNamefieldandselect
OK.

Step8Specifythecomputerconnectinginterface
AttheConnectTopopup,usethedropdownarrowintheConnectusing:fieldtoselect
COM1and
select[OK].
Note:DependingonwhichserialportwasusedonthePC,itmaybenecessarytosetthisto
COM2.

CCNAInstructorLabManual 5
Step9Specifytheinterfaceconnectionproperties
a. AttheCOM1Propertiespopupusethedropdownarrowstoselectthefollowing:
Bitspersecond=9600
DataBits=8
Parity=None
Stopbits=1
Flowcontrol=none

b. Thenselect[OK].

c. WhentheHyperTerminalsessionwindowcomesup,turnontherouterorswitch.Ifthe
routerorswitchisalreadyon,presstheEnterkey.Thereshouldbearesponsefromthe
routerorswitch.Ifthereis,thentheconnectionhasbeensuccessfullycompleted.

Step10Observetherouterorswitchuserinterface

CCNAInstructorLabManual 6
 a.Observetheuserinterface.
b.Ifthisisarouter,whatistheprompt?
c.Ifthisisaswitch,whatistheprompt?

Step11ClosetheSession
a.ToendtheconsolesessionfromaHyperTerminalsession,selectthefollowing:
File
Exit

b.WhentheHyperTerminaldisconnectwarningpopupappears,selectYes.

c.Thecomputerwillthenaskifthesessionistobesaved.SelectNo.

CCNAInstructorLabManual 7
Lab2:CommandLineFundamentals

Objective
Becomefamiliarwiththebasicroutercommands.
Becomefamiliarwiththebasicroutershowcommands,suchas:
a) show running-config (orshow run)isprobablythesinglemostvaluable
commandtohelpdeterminethecurrentstatusofarouter,becauseitdisplaysthe
activeconfigurationfilerunninginRAM.

b) show startup-config (orshow start)displaysthebackupconfigurationfilethat

isstoredinnonvolatileRAM(NVRAM).Thisisthefilethatwillbeusedtoconfigure
therouterwhenitisfirststartedorrebootedwiththereload command.Allthe
detailedrouterinterfacesettingsarecontainedinthisfile.
c) show flash isusedtoviewtheavailableflashmemoryandtheamountused.Flash
iswheretheCiscoInternetworkOperatingSystem(IOS)fileorimageisstored.

d) show arp displaystheroutersaddressresolutiontable.

e) show interfaces displaysstatisticsforallinterfacesconfiguredontherouter.
f) show protocols displaysglobalandinterfacespecificstatusofconfiguredLayer3
protocols,suchasIPandIPX.
Background/Preparation
HyperTerminalisasimpleWindowsbasedterminalemulationprogramthatcanbeusedto
connecttotheroutersconsoleport.APCwithHyperTerminalprovidesakeyboardand
monitorfortherouter.
ConnectingtotheconsoleportwitharollovercableandusingHyperTerminalisthemost
basicwaytoaccessarouterforcheckingorchangingitsconfiguration.
Setupanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsmaybeused.Possibleroutersinclude800,1600,1700,2500,2600routers,or
acombination.Theconfigurationoutputusedinthislabisproducedfroma1721seriesrouter.
Otherroutersmayproduceslightlydifferentoutput.
Thefollowingresourceswillberequired:
WorkstationwithaserialinterfaceandHyperTerminal
CiscoRouter
Rollover,orconsole,cableforconnectingtheworkstationtotherouter

CCNAInstructorLabManual 8
 Thefollowingstepsareintendedtobeexecutedoneachrouterunlessspecificallyinstructed
otherwise.

Step1StartHyperTerminal
a. StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsession
lab.
Step2Logintotherouter
a. Logintotherouter.Ifpromptedtoentertheinitialsetupmode,answerno.Ifpromptedfor
apassword,entercisco.

b. IfthepromptshowsRouterthisisthedefault.Somethingotherthanthatmayappearif
thisrouterhasbeennamed.Whatpromptdidtherouterdisplay?__________________

c. Whatdoesthepromptsymbolfollowingarouternamemean?____________________
Step3UsetheHELPfeature
a. Enterthehelp commandbytypingthe?attheuserEXECrouterprompt.
Router>?
Listeightavailablecommandsfromtherouterresponse.

Step4EnterprivilegedEXECmode
a. Enterenablemodebyusingtheenable command.Ifapasswordisaskedfor,enter
classwhenprompted.
Router>enable [Enter]
b. WasenableoneofthecommandsavailablefromStep3?__________________________
c. Whatchangedintherouterpromptdisplayandwhatdoesitmean?

____________________________________________________________________
Step5Usethehelpfeature
a. Enterthehelpmodebytypingaquestionmark(?)attherouterprivilegedEXECprompt.
Router#?
b. Listten(10)availablecommandsfromtherouterresponse.

CCNAInstructorLabManual 9
Step6Listtheshow commands
a. Listallshowcommandsbyenteringshow?attherouterprivilegedEXECprompt.
Router#show ?
b. Isrunning-config oneoftheavailablecommandsfromthismode?
_____________________________________________________________________
Step7Examinetherunningconfiguration
a. Displaytherunningrouterconfigurationbyusingthecommandshow running-config
attheprivilegedEXECrouterprompt.
Router#show running-config
b. Listsixkeypiecesofinformationshownwiththiscommand:

Step8Examinetheconfigurationinmoredetail
a. Continuelookingattheconfiguration.

b. Whentheword"more"appears,pressthespacebar.Bypressingthespacebartherouter
willdisplaythenextpageofinformation.
c. Whathappenedwhenthespacebarwaspressed?

_____________________________________________________________________
Step9Usethecommandhistoryfeature
a. Usethecommandhistory toseeandreusethepreviouslyenteredcommands.Press
theuparroworCtrlptoseethelastenteredcommand.Pressitagaintogotothe
commandbeforethat.PressthedownarroworCtrlntogobackthroughthelist.This
functionletsthecommandhistorybeviewed.
b. Whatappearedattherouterpromptwhentheuparrowwaspressed?

_____________________________________________________________________
Step10Enterglobalconfigurationmode
a.Enterconfigure terminal attheprivilegemodeprompt.
Router#configure terminal
b.Whatpromptdidtherouterdisplay?________________________________________

c.Whatdoesthispromptmean?____________________________________________
Step11Exitfromroutermodeandgointointerfaceconfigurationmode
CCNAInstructorLabManual 10
 a.Enterinterface serial 0 attheglobalconfigurationmodeprompt.
Note:Seechartfortheinterfaceidentifier.
Router(conf i g )#
interface serial 0
b.Whatpromptdidtherouterdisplay?________________________________________

c.Whatdoesthispromptmean?____________________________________________
d.Enterexit attheprompttoreturntoglobalconfigurationmode.
Router(conf i g exit
- i f )#
Step12Assignanametotherouter
a.Router(conf i g )#
hostname GAD

b.Whatpromptdidtherouterdisplay?________________________________________

c.Whatdoesthispromptmean?____________________________________________

d.Whatchangehasoccurredintheprompt? ___________________________________
Step13ConfigureConsolePassword
Configuretheconsolepasswordontherouterandexitfromlineconsole:
GAD(conf ig )#line console 0
GAD(conf ig - l i ne )#
password cisco
GAD(conf ig - l i ne )#
login
GAD(conf ig - l i ne )#
exit
GAD(config)#
Step14ConfigureVirtualTerminal
Configurethepasswordonthevirtualterminallinesandexitlinemode:
GAD(conf ig )#line vty 0 4
GAD(conf ig - l i ne )#
password cisco
GAD(conf ig - l i ne )#
login
GAD(conf ig - l i ne )#
exit
GAD(config)#
Step15Configuretheenablepassword
Configuretheenable password ontherouterandexitfromglobalconfigurationmode:
GAD(conf ig )#enable password cisco
GAD(conf ig )#exit
Step16ReturntotheuserEXECmode
ReturntotheuserEXECmodebyenteringthedisable command:
GAD# disable
Step17EntertheprivilegedEXECmodeagain
Thistimeapromptforapasswordwillshow.Enterciscobutthecharacterswillnotbeseen
ontheline.

CCNAInstructorLabManual 11
 GAD> enable
Password:cisco
Step18Returntotheconfigurationmode
Returntotheconfigurationmodebyenteringconfigure terminal:
GAD# configure terminal
Step19Configuretheenablesecretpassword
Configuretheenablesecretpasswordandexitfromglobalconfigurationmode:
GAD(conf ig )#enable secret class
GAD(conf ig )#exit
Note:Remembertheenablesecretpasswordisencryptedfromtheconfiguration
view.Alsodonottypeenable secret password class,orthesecretpassword
willbepassword,notclass.
Step20ReturntotheuserEXECmode
ReturntotheuserEXECmodebyenteringthecommanddisable:
GAD# disable
GAD>
Step21EntertheprivilegedEXECmodeagain
Apromptforapasswordwillshow.Entercisco.Thecharacterswillnotbeseenontheline.If
itfails,continueuntilthebadsecretsmessageisdisplayed:
GAD> enable
Password:cisco
Password:cisco
% Bad secrets
Step22EntertheprivilegedEXECmodeagain
Apromptforapasswordwillshow.Enterclass.Thecharacterswillnotbedisplayedonthe
line:
GAD> enable
Password:class
GAD#
Note:Theenablesecretpasswordtakesprecedenceovertheenablepassword.Sooncean
enablesecretpasswordisenteredtheenablepasswordnolongerisaccepted.
Step23Showtheroutersrunningconfiguration
GAD#show running-config
a.Isthereanencryptedpassword?__________________________________________

b.Arethereanyotherpasswords?___________________________________________

c.Areanyoftheotherpasswordsencrypted?___________________________________
Step24EnterGlobalConfigurationmode
a.Enterconfigure terminal attherouterprompt.Noticethechangeintherouterprompt.

CCNAInstructorLabManual 12
Step25Displayhelpforthebanner motd command
a.Enterbanner motd ? attherouterprompt.
b.Whatisthecharactercalledthatisusedtoindicatethebeginningandendofthebanner?
__________________________________________________________________________
Step26ChoosethetextfortheMOTD
a.Theloginbannershouldbeawarningnottoattemptloginunlessauthorized.Inthe
followingspace,enteranappropriatewarningbanner.Themessagecancontainany
printablecharacter,otherthanthedelimitingcharacter,aswellasspacesandcarriage
returns.
__________________________________________________________________________

Step27Enterthedesiredbannermessage
a.Fromtheglobalconfigurationmodeenterbanner motd # message #.The#signs
areusedasdelimitersandthemessageisthebannermessagechosenintheprevious
step.
Step28TesttheMOTDdisplay
a.Exittheconsolesession.Reentertheroutertodisplaythemessageoftheday.Thisis
donebypressingtheEnterkey.Thiswilldisplaythemessageenteredintotheconfiguration
Step29Logontotherouter
a.Connecttotherouterandlogon.Ifprompted,enterthepassword.
Step30Enterthehelpcommand
a.Enterthehelp commandbytyping?attherouterprompt.Therouterrespondswithall
commandsavailableinusermode.

b.Whatdidtherouterreplywith?__________________________________________

c.Areallroutercommandsavailableatthecurrentprompt?_______________________
d.Isshow oneoftheoptionsavailable?
______________________________________
Step31Displayhelpfortheshow command
a.Entertheshow ? command.Therouterrespondswiththeshow subcommands
availableinusermode.
b.Listthreeusermodeshow subcommands.

showSubcommand Description

Step32DisplayIOSversionandotherimportantinformationwiththeshow version
command

CCNAInstructorLabManual 13
 a.Entertheshow version command.TherouterwillreturninformationabouttheIOSthat
isrunninginRAM.

b.WhatistheIOSversion?_______________________________________________

c.Whatisthenameofthesystemimage(IOS)file?_____________________________

d.WherewastherouterIOSimagebootedfrom?_______________________________
e.Whattypeofprocessor(CPU)andhowmuchRAMdoesthisrouterhave?

_____________________________________________________________________
f.HowmanyEthernetinterfacesdoesthisrouterhave?_________Howmanyserial
interfaces?_________________________
g.Therouterbackupconfigurationfileisstoredinnonvolatilerandomaccessmemory
(NVRAM).

HowmuchNVRAMdoesthisrouterhave?__________________________________
h.Therouteroperatingsystem(IOS)isstoredinFlashmemory.HowmuchFlashmemory
doesthisrouterhave?________________________________________________

i.Whatistheconfigurationregistersetto?___________________________________
Step33Displaythetimeanddatefortherouter
a.Entertheshow clock command.Whatinformationisdisplayed?
____________________
Step34Displayacachedlistofhostnamesandaddresses
a.Entertheshow hosts command.Whatinformationisdisplayedwithshow hosts?

_____________________________________________________________________
Step34Displayuserswhoareconnectedtotherouter
a.Entertheshow users command.Whatinformationisdisplayedwithshow users?

_____________________________________________________________________
Step35Showthecommandbuffer
a.Entertheshow history command.Whatinformationisdisplayedwithshow history?

_____________________________________________________________________
Step36ShowtherouterARPtable
a.Entertheshow arp commandattherouterprompt.WhatistheARPtable?

_____________________________________________________________________
Step37ShowinformationabouttheFlashmemorydevice
a.Entershow flash attherouterprompt.

b.HowmuchFlashmemoryisavailableandused?_______________________________

c.WhatisthefilethatisstoredinFlashmemory?________________________________

d.WhatisthesizeinbytesoftheFlashmemory?________________________________
Step38Showinformationabouttheactiveconfigurationfile

CCNAInstructorLabManual 14
 a.Entershow running-config (orshow run)attherouterprompt.Whatimportant
informationisdisplayedwithshow run?

_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
Step39Showinformationaboutthebackupconfigurationfile
a.Entershow startup-config (orshow start)attherouterprompt.Whatimportant
informationisdisplayedwithshow start,andwhereisthisinformationkept?

_____________________________________________________________________
Step40Displaystatisticsforallinterfacesconfiguredontherouter
a.Entershow interfaces attherouterprompt.
b.FindthefollowinginformationforinterfaceFastEthernet0:(Refertothechartattheendof
thelabtocorrectlyidentifytheinterfacebasedonequipment)

1.WhatisMTU?______________________________________________________

2.Whatisrely?_______________________________________________________

3.Whatisload?______________________________________________________
c.FindthefollowinginformationforinterfaceSerial0

1.WhatistheIPaddressandsubnetmask?__________________________________

2.Whatdatalinklayerencapsulationisbeingused?____________________________
Step41Displaytheprotocolsconfiguredontherouter
a.Entershow protocols attherouterprompt.Whatimportantinformationisdisplayed?

_____________________________________________________________________

CCNAInstructorLabManual 15
Lab3:ConfiguringaSerialInterface

Objective
Configureaserialinterfaceoneachoftworouterssotheycancommunicate.
Background/Preparation
Anyrouterthatmeetstheinterfacerequirementsmaybeused.Possibleroutersinclude800,
1600,1700,2500,2600routers,oracombination.Refertothechartattheendofthelabto
correctlyidentifytheinterfaceidentifierstobeusedbasedontheequipmentinthelab.The
configurationoutputusedinthislabisproducedfrom1721seriesrouters.Anyotherrouter
usedmayproduceslightlydifferentoutput.Thefollowingstepsareintendedtobeexecutedon
eachrouterunlessspecificallyinstructedotherwise.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Gototheeraseandreloadinstructionsattheendofthislab.Performthose
stepsonallroutersinthislabassignmentbeforecontinuing.

Step1BasicRouterConfiguration
a.Configuretherouter.Connecttheroutersasshowninthediagram.Thislabrequiresanull
serialcableandtworolloverorconsolecables.
Step2ConfigurethenameandpasswordsforRouter1
a.OnRouter1,entertheglobalconfigurationmodeandconfigurethehostnameasshownin
thechart.
b.Configuretheconsole,virtualterminalandenablepasswords.Ifthereareanyproblems,
refertotheLab2ConfiguringRouterPasswords.
Step3ConfigureserialinterfaceSerial0
Fromglobalconfigurationmode,configureserialinterfaceSerial0onRouterGAD.Referto
InterfaceSummary.
GAD(conf ig )#interface serial 0
GAD(conf ig - i f )#
ip address 192.168.15.1 255.255.255.0
GAD(conf ig - i f )#
clock rate 56000

CCNAInstructorLabManual 16
 GAD(conf ig - i f )#
no shutdown
GAD(conf ig - i f )#
exit
GAD(conf ig )#exit
Note:Oncetheinterfaceconfigurationmodeisentered,notetheIPaddressofthe
interface.
Enterthesubnetmask.EntertheclockrateonlyontheDCEsideofthedevice.Thecommand
no shutdown turnsontheinterface.Shutdowniswhentheinterfaceisoff.
Step4Savetherunningconfiguration
SavetherunningconfigurationtothestartupconfigurationattheprivilegedEXECmode:
GAD# copy running-config startup-config
Note:Savetherunningconfigurationforthenexttimethattherouterisrestarted.The
routercanberestartedeitherbyasoftwarereload commandorapowershutdown.
Therunningconfigurationwillbelostiftherunningconfigurationisnotsaved.The
routerusesthestartupconfigurationwhentherouterisstarted.
Step5DisplayinformationaboutSerialinterface0onGAD
a.Enterthecommandshow interface serial 0 onGAD.Refertointerfacechart.
GAD# show interface serial 0
Thiswillshowthedetailsofinterfaceserial0.
b.Listatleastthreedetailsdiscoveredbyissuingthiscommand.

c.Serial0is___________________.Lineprotocolis___________________ .

d.Internetaddressis_____________________.

e.Encapsulation_________________________

f.TowhatOSIlayeristheEncapsulationreferring?_____________________________
g.IftheSerialinterfacewasconfigured,whydidtheshow interface serial 0 saythatthe
interfaceisdown?

_____________________________________________________________________
Step6ConfigurethenameandpasswordsforRouter2
a.OntheBirminghamrouter,entertheglobalconfigurationmode.Configurehostname,
console,virtualterminalandenablepasswordsasshowninthepreviouschart.
Step7ConfigureserialinterfaceSerial0
Fromtheglobalconfigurationmode,configureserialinterfaceSerial0onRouterBHM.Refer
tointerfacechart.
BHM(conf ig )#interface serial 0
BHM(conf ig - i f )#
ip address 192.168.15.2 255.255.255.0
BHM(conf ig - i f )#
no shutdown
BHM(conf ig - i f )#
exit
BHM(conf ig )#exit
Step8Savetherunningconfiguration
SavetherunningconfigurationtothestartupconfigurationattheprivilegedEXECmode:
CCNAInstructorLabManual 17
 BHM# copy running-config startup-config
[Enter]
Dest inat i on f i l ename [s tar tup - conf ig ]?

Step9DisplayinformationaboutSerialinterface0onBHM
a.Enterthecommandshow interface serial 0 onBHM.Refertointerfacechart.
BHM# show interface serial 0
Thiswillshowthedetailsofinterfaceserial0.
b.Listatleastthreedetailsdiscoveredbyissuingthiscommand.

c.Serial0is___________________,lineprotocolis___________________ .

d.Internetaddressis___________________ .
e.Encapsulation___________________
f.WhatisthedifferenceintheLineandProtocolstatusrecordedonGADearlier?Why?

_____________________________________________________________________
Step10Verifythattheserialconnectionisfunctioning
a.ping theserialinterfaceoftheotherrouter.
BHM# ping 192.168.15.1
GAD# ping 192.168.15.2
b.FromGAD,pingtheBHMrouterserialinterface.Doesthepingwork?________________

c.FromBHM,pingtheGADrouterserialinterface.Doesthepingwork?________________
d.Iftheanswerisnoforeitherquestion,troubleshoottherouterconfigurationstofindthe
error.
Thenpingtheinterfacesagainuntiltheanswertobothquestionsisyes.
Step11Startcapturingtheconfigurationfile
a.Starttheprocessofcopyingtherouterconfigurationtoatextfile.
UseHyperTerminaltocapturealltextdisplayedonitsscreentoatextfile.

InHyperTerminalclickonTransfer.
CaptureText

Specifythenameoftherouterforthefilenameanduse.txtfortheextension.Browse
tofindalocationtostorethetextfileonthecomputer.Thisfilewillbeeditedandused
inlaterstepsofthislab.

ClickonStartbuttontostartcapturingtext.
b.Writedownthenameandlocationofthisfile:

_____________________________________________________________________
c.Entertheshow running-config command.Pressthespacebarwhenthe"- More -"
promptappears.Theshow running-config commandisusedtodisplaytheactive
configurationfilefortherouterthatisstoredinRAM.
Step12Stopcapturingtheconfigurationfile
CCNAInstructorLabManual 18
 a.Todiscontinuecapturingtheoutputoftherouterconfigurationtoatextfile:
OntheHyperTerminalmenubarselectTransfer>Capturetext>Stop.
Step13Cleanupcapturedconfigurationfile
a.Thecapturedtextfilewillhaveinformationnotrequiredforconfiguringarouter.For
example,the"- More -"promptsarenotrequiredforconfiguringarouter.Toputthisina
formtobepastedbackintherouter,removeanyunnecessaryinformationfromthe
capturedconfiguration.
b.Toaddcommentsintotheconfigurationtoexplainitsvariousparts,usetheexclamation
mark"!".Therouterwillignoreanycommentinarouterconfigurationthatstartswithan
exclamationmark.Therefore,writeanykindofcommentthathelpstounderstandthe
configuration.
c.StartNotepad.FromtheWindowsDesktopselect:
Start
Run

TypeNotepad

PresstheEnterkey
d.InNotepadclickon:
File
Open
Findthefilemadeandselectit.

ClickOpen.
e.Deletethelinesthatcontain:

Showrunningconfig
Buildingconfiguration
Currentconfiguration:
More
Linesthatappearaftertheword"End"
f.Attheendofeachoftheinterfacesectionsadd:
noshutdown
Example:
interface Serial 0
ip address 199.6.13.1 255.255.255.0
no shutdown
g.Thelastlinetoeditisthe:
enable secret 5 $1$prts$Rbf8hxlss.ZrufvI7rMVy/
changethisto:
enable secret class

CCNAInstructorLabManual 19
 Thispasswordmustbeenteredincleartextortheencryptionalgorithmwillreencryptthe
currentpassword.Thenentryfromtheuserpromptwillbeimpossible.
h.SavethecleanversionoftheconfigurationbyclickingonFile>SaveandexitNotepad.
Step14Testthebackupconfiguration
a.Anyformofbackupthathasnotbeentestedcouldbealiabilityinafailuresituation.This
includesbackupconfigurations.Thebackupconfigurationmustbetested.Thetestshould
bescheduledduringlownetworkusageperiodsastherouterwillhavetobetakenoffline.
Allusersthatmaybeaffectedshouldbenotifiedwellinadvancetoensurethatthedown
timewillnotbeaninconvenience.
b.Beforetestingthebackupconfiguration,erasethestartupconfiguration.Fromthe
HyperTerminalsession,enterthecommanderase startup-config attheenablerouter
prompt.ThisdeletestheconfigurationfilefromNVRAM.
Confirmthatstartupconfigurationhasbeendeleted.Entershow startup-config atthe
routerprompt.
c.Whatdoestheroutershowafterthiscommandisentered?
_____________________________________________________________________
Step15Restarttheroutertoremovetherunningconfiguration
a.EnterreloadattheprivilegedEXECmodeprompttoreboottherouter.

Ifpromptedthattheconfigurationhasbeenmodified.Save?typeNandpressEnter.

Whenaskedtoproceedwiththereload,enterYandpresstheEnterkey.
Whentherouterrestarts,notethattherouterdisplaysthemessage:
"Notice : NVRAM inva l i d , possib l y due to wri te erase. "

Whenpromptedtoentertheinitialconfigurationdialog,typeNandpressEnter.

WhenpromptedtoterminateautoinstalltypeYandpressEnter.

PressEnteragain.
b.Whatdoesthepromptlooklike?

_____________________________________________________________________
Step16Reconfiguretherouterfromthesavedtextfile
Usethesend file commandinHyperTerminaltorestorethenewconfiguration.Theedited
versionoftherouterconfigurationfilefromthepreviousstepwillbecopiedintotheareaof
memoryknownastheclipboard.
a.ChangetoprivilegedEXECmode.
b.Whywasapasswordnotrequired?
c.Enterglobalconfigmode:
Enterthecommandconfigure terminal.
ClickonTransfer>SendTextFile.
Selectthefile.
Eachlineinthetextfilewillbeentered.

CCNAInstructorLabManual 20
 Observeforanyerrors.
d.Whatisthemostobviousindicationthattherouterhasbeenrestored?PressCtrlZtoexit
globalconfigurationmode.
e.SavenewconfigurationfileasthestartupconfigurationinNVRAM.Usethecommand
copy running-config startup-config tosavethenewlycreatedrouterconfiguration.
Verifythattherunningconfigurationiscorrectbyusingtheshow running-
config command.
Step17Verifythattheinternetworkisfunctioningagain
PingtheFastEthernetinterfaceoftheotherrouter.
a.Usethereload commandtorestarttherouter.Verifythatthenewconfigurationhasbeen
savedtoNVRAMbyrestartingtherouter.
Whenpromptedtoconfirm,pressY.Thiswillrestarttherouter.
Oncetherouterrestarts,presstheEnterkeyagain.

b.FromGAD,cantheBHMFastEthernetinterfacebepinged?_____________________

c.FromBHM,cantheGADFastEthernetinterfacebepinged?_____________________
d.Iftheanswerisnoforeitherquestion,troubleshoottherouterconfigurationstofindthe
error.
Thenperformthepingsagainuntiltheanswertobothquestionsisyes.

CCNAInstructorLabManual 21
Lab4:ManagingConfigurationFileswithTFTP

Objective
Backupacopyofarouterconfigurationfile.
ReloadthebackupconfigurationfilefromaTFTPserverintoRAMonarouter.
SavethenewrunningconfigtoNVRAM.
Background/Preparation
Fordocumentationandrecoverypurposesitisimportanttokeepbackupcopiesofrouter
configurationfiles.ThesecanbestoredinacentrallocationsuchasaTFTPserverfor
referenceandretrievalifnecessary.
Setupanetworkasdisplayedinthefigure.Anyrouterthatmeetstheinterfacerequirements
maybeused.Possibleroutersinclude800,1600,1700,2500,2600routers,oracombination.
Refertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobeused
basedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproducedfrom
1721seriesrouters.
Anyotherrouterusedmayproduceslightlydifferentoutput.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Gototheeraseandreloadinstructionsattheendofthislab.Performthose
stepsonallroutersinthislabassignmentbeforecontinuing.
Step1ConfiguretheGADrouter
a.Usingthetableatthebeginningofthelab,configuretherouterhostnameandEthernet
interface.
Ifthereareanydifficultiesconfiguringhostname,refertotheConfiguringRouterPasswords
lab.
Ifthereareanydifficultiesconfiguringtheinterface,refertotheConfiguringHostTableslab.
b.Verifytheroutersconfigurationsbyperformingashow running-config oneachrouter.
Ifnotcorrect,fixanyconfigurationerrorsandverify.
c.Issuethecommandcopy running-config startup-config tosavethechanges.
Step2Configuretheworkstation

CCNAInstructorLabManual 22
 a.AworkstationwithTFTPserversoftwaremustbeavailableforthislab.Thereareanumber
ofgoodfreewareandsharewareTFTPserversavailablebysearchingtheInternetfor"tftp
server".
ThisLabusestheCiscoTFTPserver.Verifythatthesoftwareisavailable.Ifnot,askthe
instructorforassistance.
ConfiguretheTFTPHostasfollows:
IPAddress192.168.14.2
IPsubnetmask255.255.255.0
Defaultgateway192.168.14.1
ConfirmthatthehosthasacceptedthenewIPsettingswiththewinipcfg command
(Windows9x)ortheipconfig command(WindowsNT/2000/XP).
b.Verifytherouterconfigurationbyperformingashow running-config.Ifnotcorrect,fix
anyconfigurationerrorsandverify.
Step3StartandconfiguretheCiscoTFTPserver
StarttheTFTPserver.Ifthecomputerisproperlyconnected,thereisnoconfigurationofthe
CiscoTFTPserverneeded.

Step4Verifyconnectivity
ping theTFTPserverfromtheGADrouter.
Ifthepingfails,reviewhostandrouterconfigurationstoresolvetheproblem.
Step5CopythestartupconfigtoTFTPserver
a.Beforecopyingthefiles,verifythattheTFTPserverisrunning.

b.RecordtheIPaddressoftheTFTPserver.______________________________
c.FromtheprivilegedEXECprompt,issuethecopy startup-config tftp command.
Followtheprompts:
GAD# copy startup-config tftp
Address or name of remote host 192.168.14.2
[]?

CCNAInstructorLabManual 23
 Dest inat i on f i l ename [gad- confg]?
startup-config
!!
667 bytes copied in 0.036 secs (18528 bytes/sec)

Step6VerifythetransfertotheTFTPserver
ChecktheTFTPserverlogfile.ClickView>LogFile.Theoutputshouldbesimilartothe
following:
Mon Sep 16 14:10:08 2003: Receiving startup-config file from
192.168.14.1 in binary mode
Mon Sep 16 14:11:14 2003: Successful.
Step7CopythestartupconfigfromtheTFTPserver
a.Nowthatthestartupconfigisbackedup,testthisimagebyrestoringthefiletotherouter.
AssumethattheconfigurationontheGADrouterhasbecomecorruptandcopythebackup
startupconfigfilefromthetftpservertotherunningconfigoftherouter.Tosimulatethis,
changethehostnameoftherouterfromGADto"Router".

b.WhatistheIPaddressoftheTFTPserver?______________________________
c.CompletethefollowingtocopythestartupconfigfilefromtheTFTPservertotherouter.
Router#copy tftp running-config
Address or name of remote host 192.168.14.2
[]?
Source f i l ename [ startup-config
]?
Dest inat i on f i l ename [running- conf
[Enter]
ig ]?
Accessing tftp://192.168.14.2/startup-config...
Loading startup-config from 192.168.14.2 (via FastEthernet0): !
[OK - 667 bytes]
667 bytes copied in 9.584 secs (70 bytes/sec)
GAD#
Step8Savethenewrunningconfig
SavethenewrunningconfigtoNVRAMusingthefollowingcommand:
GAD# copy running-config startup-config
Dest inat i on f i l ename [s tar tup - conf
[Enter]
ig ]?
Building configuration...
[OK]
Step9Testtherestoredfile
Issuetheshow startup-config commandtoverifytheentireconfiguration.

CCNAInstructorLabManual 24
Lab5:ManagingIOSImageswithTFTP

Objective
BackupacopyofarouterIOSfromflashtoaTFTPserver.
ReloadthebackupIOSsoftwareimagefromaTFTPserverintoflashonarouter.
Background/Preparation
ForrecoverypurposesitisimportanttokeepbackupcopiesofrouterIOSimages.Thesecan
bestoredinacentrallocationsuchasaTFTPserverandretrievedifnecessary.
Setupanetworkasdisplayedinthefigure.Anyrouterthatmeetstheinterfacerequirements
maybeused.Possibleroutersinclude800,1600,1700,2500,2600routers,oracombination.
Refertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobeused
basedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproducedfrom
1721seriesrouters.
Anyotherrouterusedmayproduceslightlydifferentoutput.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Step1ConfiguretheGADrouter
a.Usingthetableatthebeginningofthelab,configuretherouterhostnameandEthernet
interface.
Ifthereareanydifficultiesconfiguringhostname,refertotheConfiguringRouterPasswords
lab.
Ifthereareanydifficultiesconfiguringtheinterface,refertotheConfiguringHostTableslab.
b.Verifytherouterconfigurationbyperformingashow running-config.Correctany
configurationerrorsandverify.
Step2Configuretheworkstation
AworkstationwiththeTFTPserversoftwaremustbeavailableforthislab.Therearea
numberofgoodfreewareandsharewareTFTPserversavailablebysearchingtheInternetfor
"TFTPserver".

CCNAInstructorLabManual 25
 ThisLabusestheCiscoTFTPserver.Verifythatthesoftwareisavailable.Ifnot,askyour
instructorforassistance.
ConfiguretheTFTPHostasfollows:
IPAddress192.168.14.2
IPsubnetmask255.255.255.0
Defaultgateway192.168.14.1
ConfirmthatthehosthasacceptedthenewIPsettingswiththewinipcfg command
(Windows9x)ortheipconfig command(WindowsNT/2000/XP).
Step3Collectinformationtodocumenttherouter
a.Issuetheshow version command.

b.Whatisthecurrentvalueoftheconfigregister?____0x__________________________

c.Howmuchflashmemorydoesthisrouterhave?_______________________________

d.Isthereatleast4mb(4096K)offlash?____________________
e.WhatistheversionnumberofbootROM?____________________

f.IsthebootROMversion5.2orlater?____________________
Step4Collectmoreinformationtodocumenttherouter
a.Issuetheshow flash command.

b.Isthereafilealreadystoredinflash?_______________________________________

c.Ifso,whatistheexactnameofthatfile?_____________________________________

d.Howmuchofflashisavailableorunused?___________________________________
Step5StartandconfiguretheCiscoTFTPServer
StarttheTFTPserver.

Step6Verifyconnectivity
PingtheTFTPserverfromtheGadsdenrouter.

CCNAInstructorLabManual 26
 Ifthepingfails,reviewhostandrouterconfigurationstoresolvetheproblem.
Step7CopyIOStoTFTPserver
a.Beforecopyingthefiles,verifythattheTFTPserverisrunning.

b.WhatistheIPaddressoftheTFTPserver?___________________________________
c.Fromtheconsolesession,entershow flash.
d.WhatisthenameandlengthoftheCiscoIOSimagestoredinflash?

_____________________________________________________________________
e.WhatattributescanbeidentifiedfromcodesintheCiscoIOSfilename?

_____________________________________________________________________
Step8CopytheIOSimagetotheTFTPserver
a.FromtheconsolesessionintheprivilegedEXECmode,enterthecopy flash tftp
command.AtthepromptentertheIPaddressoftheTFTPserver.Filenameswillvary
basedonIOSandplatform.ThefilenameforyoursystemwasreportedinStep4:
GAD# copy flash tftp
Source f i l ename [ flash:c1700-y-mz.122-11.T.bin
]?
Address or name of remote host 192.168.14.2
[]?
Dest inat i on f i l ename [c1700- y- mz.122- 11.T.b
y in ] ?
Afterenteringthiscommandandansweringtheprocessrequests,thestudentshouldseethe
followingoutputontheconsole.Theprocessmaytakeafewminutesdependingonthesizeof
theimage.Donotinterruptthisprocess.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
4284648 bytes copied in 34.012 secs (125975 bytes/sec)
Step9VerifythetransfertotheTFTPserver
a.ChecktheTFTPserverlogfilebyclickingView>LogFile.Theoutputshouldresemblethe
followingoutput:
Mon Sep 16 14:10:08 2003: Receiving c1700-y-mz.122-11.T.bin in binary
mode
Mon Sep 16 14:11:14 2003: Successful.
b.VerifytheflashimagesizeintheTFTPserverdirectory.Tolocateit,clickonView>
Options.
ThiswillshowtheTFTPserverrootdirectory.Itshouldbesimilartothefollowing,unlessthe
defaultdirectorieswerechanged:
C:\Program Files\Cisco Systems\Cisco TFTP Server
c.LocatethisdirectoryusingWindowsExplorerorMyComputer.Lookatthedetaillistingof
thefile.Thefilelengthintheshow flash commandshouldbethesamefilesizeasthefile
storedontheTFTPserver.Ifthefilesizesarenotidentical,checkwiththeinstructor.
Step10CopytheIOSimagefromtheTFTPserver
CCNAInstructorLabManual 27
 a.NowthattheIOSisbackedup,theimagemustbetestedandtheIOSrestoredtothe
router.
PingtheTFTPserverIPaddress.Whenpromptedfor"Destinationfilename"usethefile
namefromStep7.

b.RecordtheIPaddressoftheTFTPserver.___________________________________
c.CopyfromtheprivilegedEXECprompt.

GAD# copy tftp flash

Address or name of remote host 192.168.14.2
[ ]?
Source f i l ename [ c1700-y-mz.122-11.T.bin
]?
Dest inat i on f i l ename [c1700- y- mz.122- 11.T.b
[Enter]
in ] ?
%Warning:There is a file already existing with this name
Do you want to over write? [confirm]
Accessing tftp://192.168.14.2/c1700-y-mz.122-11.T.bin...
Erase f l ash : before copying? [conf
[Enter]
i rm]
Erasing the flash filesystem will remove all files! Continue?
[conf i rm]
[Enter]
Erasing device...
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee
...erased
Erase of flash: complete
Loading c1700-y-mz.122-11.T.bin from 192.168.14.2 (via
FastEthernet0):!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 4284648 bytes]
Verifying checksum... OK (0x9C8A)
4284648 bytes copied in 26.584 secs (555739 bytes/sec)
d.Theroutermayprompttoeraseflash.Willtheimagefitinavailableflash?____________
e.Iftheflashiserased,whathappenedontherouterconsolescreenasitwasdoingso?

_____________________________________________________________________
f.Whatisthesizeofthefilebeingloaded?_____________________________________
g.Whathappenedontherouterconsolescreenasthefilewasbeingdownloaded?

_____________________________________________________________________
h.Wastheverificationsuccessful?__________________

i.Wasthewholeoperationsuccessful?__________________
CCNAInstructorLabManual 28
Step11TesttherestoredIOSimage
a.VerifythattherouterImageiscorrect.Cycletherouterpowerandobservethestartup
processtoconfirmthattherewerenoflasherrors.Iftherearenone,thentherouterIOS
shouldhavestartedcorrectly.
b.FurtherverifyIOSimageinflashbyissuingtheshow version commandwhichwillshow
outputsimilarto:
System image file is "flash:c1700-y-mz.122-11.T.bin"

Lab6:PasswordRecoveryProcedures

Objective
Gainaccesstoarouterwithanunknownprivilegedmode(enable)password.
Background/Preparation
Thislabdemonstratesgainingaccesstoarouterwithanunknownprivilegedmode(enable)
password.Onepointtobemadehereisthatanyonewiththisprocedureandaccesstoa
consoleportonaroutercanchangethepasswordandtakecontroloftherouter.Thatiswhyit
isofcriticalimportancethatroutersalsohavephysicalsecuritytopreventunauthorized
access.
Setupanetworkasdisplayedinthefigure.Anyrouterthatmeetstheinterfacerequirements
maybeused.Possibleroutersinclude800,1600,1700,2500,2600routers,oracombination.
Refertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobeused
basedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproducedfrom
1721seriesrouters.
Anyotherrouterusedmayproduceslightlydifferentoutput.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Configurethehostnameandpasswordsontherouter.Haveaninstructor,lab
assistant,orotherstudentchangetheenablesecretpassword.Performcopy
running-config startup-config andreloadtherouter.

CCNAInstructorLabManual 29
 Note:TheversionofHyperTerminalprovidedwithWindows95,98,NTand2000was
developedforMicrosoftbyHilgraeve.Someversionsmaynotissuea"break"
sequenceasrequiredfortheCiscorouterpasswordrecoverytechnique.Ifthisisthe
case,upgradetoHyperTerminalPrivateEdition(PE)availablefreeofchargefor
personalandeducationaluse.Theprogrammaybedownloadedat
http://www.hilgraeve.com.
Step1Attemptlogintotherouter
a.MakethenecessaryconsoleconnectionsandestablishaHyperTerminalsessionwiththe
router.Attempttologontotherouterusingtheenablepasswordcisco.Theoutputshould
looklikethefollowing:

Router>enable
Password:
Password:
Password:
% Bad secrets
Router>
Step2Documentthecurrentconfigregistersetting
a.AttheuserEXECprompttypeshow version.

b.Recordthevaluedisplayedforconfigurationregister___________ .Forexample0x2102.
Step3EntertheROMMonitormode
a.Turntherouteroff,waitafewsecondsandturnitbackon.Whentherouterstarts
displayingSystemBootstrap,VersionontheHyperTerminalscreen,presstheCtrlkey
andtheBreakkeytogether.TherouterwillbootinROMmonitormode.Dependingonthe
routerhardware,oneofseveralpromptssuchas:"rommon1>"orsimply>mayshow.
Step4ExaminetheROMMonitormodehelp
a.Type?attheprompt.Theoutputshouldbesimilartothis:
rommon 1 >?
alias set and display aliases command
boot boot up an external process
break set/show/clear the breakpoint
confreg configuration register utility
context display the context of a loaded image
dev list the device table
dir list files in file system
dis display instruction stream
help monitor builtin command help
history monitor command history
meminfo main memory information
repeat repeat a monitor command

CCNAInstructorLabManual 30
 reset system reset
set display the monitor variables
sysret print out info from last system return
tftpdnld tftp image download
xmodem x/ymodem image download

Step5Changetheconfigurationregistersettingtobootwithoutloadingconfiguration
file
a.FromtheROMMonitormode,typeconfreg 0x2142 tochangetheconfigregister.
rommon 2 >confreg 0x2142
Step6RestartRouter
a.FromtheROMMonitormode,typereset orpowercycletherouter.
rommon 2 >reset
b.Duetothenewconfigurationregistersetting,therouterwillnotloadtheconfigurationfile.
Thesystemprompts:
"Wouldyouliketoentertheinitialconfigurationdialog?[yes]:"
EnternoandpressEnter.
Step7EnterPrivilegedEXECmodeandchangepassword
a.NowattheusermodepromptRouter>,typeenable andpressEntertogotothe
privilegedmodewithoutapassword.
b.Usethecommandcopy startup-config running-config torestoretheexisting
configuration.SincetheuserisalreadyinprivilegedEXECnopasswordisneeded.
c.Typeconfigure terminal toentertheglobalconfigurationmode.
d.Intheglobalconfigurationmodetypeenable secret class tochangethesecret
password.
e.Whilestillintheglobalconfigurationmode,typeconfig-register 0x2102.0x2102is
theoriginalconfigurationregistervaluerecorded.PressEnter.
f.UsetheCtrlzcombinationtoreturntotheprivilegedEXECmode.
g.Usethecopy running-config startup-config commandtosavethenew
configuration.
h.Beforerestartingtherouter,verifythenewconfigurationsetting.FromtheprivilegedEXEC
prompt,entertheshow version commandandpressEnter.
i.Usethereload commandtorestarttherouter.
Step8Verifynewpasswordandconfiguration
a.Whentherouterreloadstheenablepasswordshouldbeclass.

CCNAInstructorLabManual 31
Lab7:ConfiguringStaticRoutes

Objective
Configurestaticroutesbetweenrouterstoallowdatatransferbetweenrouterswithoutthe
useofdynamicroutingprotocols.
Background/Preparation
Setupanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsmaybeused.Possibleroutersinclude800,1600,1700,2500,2600routers,or
acombination.Refertothechartattheendofthelabtocorrectlyidentifytheinterface
identifierstobeusedbasedontheequipmentinthelab.Theconfigurationoutputusedinthis
labisproducedfrom1721seriesrouters.
Anyotherrouterusedmayproduceslightlydifferentoutput.Thefollowingstepsareintended
tobeexecutedoneachrouterunlessspecificallyinstructedotherwise.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Gototheeraseandreloadinstructionsattheendofthislab.Performthose
stepsonallroutersinthislabassignmentbeforecontinuing.

Step1Configurebothrouters
a.Entertheglobalconfigurationmodeandconfigurethehostnameasshowninthechart.
Thenconfiguretheconsole,virtualterminal,andenablepasswords.Ifthereareany
difficulties,refertotheConfiguringrouterpasswordslab.ConfigureinterfacesandIPhost
tables.Ifthereareanydifficulties,refertotheConfiguringHostTableslab.Donotconfigure
aroutingprotocol.
Step2Configuretheworkstations
ConfiguretheworkstationswiththeproperIPaddress,subnetmask,anddefaultgateway.
a.TheconfigurationforthehostconnectedtotheGADRouteris:
IPAddress 192.168.14.2
CCNAInstructorLabManual 32
 IPsubnetmask 255.255.255.0
Defaultgateway 192.168.14.1
b.TheconfigurationforthehostconnectedtotheBHMRouteris:
IPAddress 192.168.16.2
IPsubnetmask 255.255.255.0
Defaultgateway 192.168.16.1
c.Checkconnectivitybetweentheworkstationsusingping.Fromtheworkstationattachedto
theGADrouter,pingtheworkstationattachedtotheBHMrouter.
C:\>ping 192.168.16.2
Pinging 192.168.16.2 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.16.2:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms
d.Wastheping successful?
________________________________________________
e.Whydidtheping fail?
___________________________________________________
Step3Checkinterfacestatus
a.Checktheinterfacesonbothrouterswiththecommandshow ip interface brief.

b.Areallthenecessaryinterfacesup?________________________________________
Step4Checktheroutingtableentries
a.Usingthecommandshow ip route,viewtheIProutingtableforGAD.
GAD> show ip route
output eliminated
Gateway of last resort is not set
C 192.168.14.0/24 is directly connected, FastEthernet0
C 192.168.15.0/24 is directly connected, Serial0
b.Usethecommandshow ip route,viewtheIProutingtableforBHM.
BHM> show ip route
Outputeliminated.
Gateway of last resort is not set
C 192.168.15.0/24 is directly connected, Serial0
C 192.168.16.0/24 is directly connected, FastEthernet0

CCNAInstructorLabManual 33
 c.Arealloftheroutesneededintheroutingtables?______________________________
d.BasedontheoutputfromtheshowiproutecommandontheGADandBHMrouters,cana
hostonnetwork192.168.16.0connecttoahostonnetwork192.168.14.0?
____________________________________________________________________
Ifarouteisnotintherouterstowhichthehostisconnected,thehostcannotreachthe
destinationhost.
Step5Addingstaticroutes
a.Howcanthissituationbechangedsothatthehostscanping eachother?
Addstaticroutestoeachrouterorrunaroutingprotocol.
b.Inglobalconfigurationmode,addastaticrouteonRouter1tonetwork192.168.16.0andon
Router2tonetwork192.168.14.0.
GAD(conf ig )#ip route 192.168.16.0 255.255.255.0 192.168.15.2
BHM(conf ig )#ip route 192.168.14.0 255.255.255.0 192.168.15.1
c.Whyisastaticrouteneededonbothrouters?_________________________________
Step6Verifythenewroutes
a.Usethecommandshow ip route,viewtheIProutingtableforGAD.
GAD> show ip route
Outputeliminated
Gateway of last resort is not set
C 192.168.14.0/24 is directly connected, FastEthernet0
C 192.168.15.0/24 is directly connected, Serial0
S 192.168.16.0/24 [1/0] via 192.168.15.2
b.Usingthecommandshow ip route,viewtheIProutingtableforBHM.
BHM> show ip route
Outputeliminated.
Gateway of last resort is not set
S 192.168.14.0/24 [1/0] via 192.168.15.1
C 192.168.15.0/24 is directly connected, Serial0
C 192.168.16.0/24 is directly connected, FastEthernet0
c.Arealloftheroutesneededintheroutingtables?______________________________

d.Canahostonsubnet192.168.16.0seeahostonnetwork192.168.14.0?____________
Step7pinghosttohostagain
a.Checkconnectivitybetweentheworkstationsusingping.Fromtheworkstationattachedto
theGADrouter,pingtheworkstationattachedtotheBHMrouter.
C:\>ping 192.168.16.2
Pinging 192.168.16.2 with 32 bytes of data:
Reply from 192.168.16.2: bytes=32 time=20ms TTL=254
Reply from 192.168.16.2: bytes=32 time=20ms TTL=254

CCNAInstructorLabManual 34
 Reply from 192.168.16.2: bytes=32 time=20ms TTL=254
Reply from 192.168.16.2: bytes=32 time=20ms
Ping statistics for 192.168.16.2:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 20ms, Maximum = 20ms, Average = 20ms
b. Iftheping wasnotsuccessful,checkroutingtabletomakesurestaticroutesareentered
correctly.

CCNAInstructorLabManual 35
Lab8:ConfiguringIGRP

Note:TheIPHostTableEntrycolumncontentsindicatethename(s)oftheotherrouter(s)intheIPHostTable

Objective
SetupIPanaddressingschemeusingclassCnetworks.
ConfigureIGRPonrouters.
Background/Preparation
Cableanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsdisplayedintheabovediagram,suchas800,1600,1700,2500,and2600
routers,oracombination,maybeused.Pleaserefertothechartattheendofthelabto
correctlyidentifytheinterfaceidentifierstobeusedbasedontheequipmentinthelab.The
configurationoutputusedinthislabisproducedfrom1721seriesrouters.Anyotherrouter
usedmayproduceaslightlydifferentoutput.
Thefollowingstepsareintendedtobeexecutedoneachrouterunlessspecificallyinstructed
otherwise.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Gototheeraseandreloadinstructionsattheendofthislab.Performthose
stepsonallroutersinthislabassignmentbeforecontinuing.

Step1Configuretherouters
a.Ontherouters,entertheglobalconfigurationmodeandconfigurethehostnameasshown
inthechart.Thenconfiguretheconsole,virtualterminal,andenablepasswords.Ifthereisa
problemdoingthis,refertotheConfiguringRouterPasswordslab.Nextconfigurethe
interfacesaccordingtothechart.Ifthereisaproblemdoingthis,refertotheConfiguring
HostTableslab.
Step2ConfiguretheroutingprotocolontheGADrouter
a.ConfigureIGRPusingAS101onGAD.Gotothepropercommandmodeandenterthe
following:
GAD(conf ig )#router igrp 101

CCNAInstructorLabManual 36
 GAD(conf ig - router )#
network 192.168.22.0
GAD(conf ig - router )#
network 192.168.20.0
Step3SavetheGADrouterconfiguration
GAD# copy running-config startup-config
Step4ConfiguretheroutingprotocolontheBHMrouter
a.ConfigureIGRPusingAS101onBHM.Gotothepropercommandmodeandenterthe
following:
BHM(conf ig )#router igrp 101
BHM(conf ig - router )#
network 192.168.25.0
BHM(conf ig - router )#
network 192.168.22.0
Step5SavetheBHMrouterconfiguration
BHM# copy running-config startup-config
Step6ConfigurethehostswiththeproperIPaddress,subnetmaskanddefault
gateway
Step7VerifythattheinternetworkisfunctioningbypingingtheFastEthernetinterface
oftheotherrouter
a.FromthehostattachedtoGAD,isitpossibletopingtheBHMhost?________________

b.FromthehostattachedtoBHM,isitpossibletopingtheGADhost?________________
c.Iftheanswerisnoforeitherquestion,troubleshoottherouterconfigurationstofindthe
error.
Thendothepingsagainuntiltheanswertobothquestionsisyes.
Step8Showtheroutingtablesforeachrouter
a.Fromtheenableorprivilegedexecmodedothefollowing:
b.Examinetheroutingtableentriesbyusingtheshow ip route commandoneachrouter.
c.WhataretheentriesintheGADroutingtable?

_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
d.WhataretheentriesintheBHMroutingtable?

_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
Step9Verifytheroutingprotocol
a.Typeshow ip protocol onbothrouterstoverifyIGRPisrunningandthatitistheonly
protocolrunning.

b.IsIGRPtheonlyprotocolrunningonGAD?___________________________________

c.IsIGRPtheonlyProtocolrunningonBHM?___________________________________

CCNAInstructorLabManual 37
Step10VerifyIGRPstatementsintherunningconfigurationofbothrouters
a.Usetheshow run | begin igrp commandonbothrouters.

b.ListtheIGRPpartoftheconfigurationforGAD:

_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
Step11VerifyIGRProutingupdates
a.Typedebug ip igrp events ontheGADrouterattheprivilegedexecmode.

b.Areroutingupdatesbeingdisplayed?_______________________________________

c.Wherearetheupdatesbeingsentto?_______________________________________

d.Wherearetheupdatesbeingreceivedfrom?__________________________________
e.Turnoffdebugging.
Step12VerifyIGRProutingupdates
a.Typedebug ip igrp transactions ontheGADrouterattheprivilegedexecmode.
b.Howaretheoutputsofthesetwodebugcommandsdebug ip igrp events and
debug ip igrp transactions different?

_____________________________________________________________________
_____________________________________________________________________
_____________________________________________________________________
c.Turnoffdebugging.
Step13Analyzespecificroutes
a.Typeshow ip route 192.168.25.0 ontheGADrouterattheprivilegedexecmode

b.Whatisthetotaldelayforthisroute?________________________________________

c.Whatistheminimumbandwidth?__________________________________________

d.WhatistheReliabilityofthisroute?_________________________________________

e.WhatistheminimumMTUsizeforthisroute?_________________________________
f.Typeshowiproute192.168.20.1ontheBHMrouterattheprivilegedEXECmode.

g.Whatisthetotaldelayforthisroute?________________________________________

h.Whatistheminimumbandwidth?__________________________________________

i.WhatistheReliabilityofthisroute?_________________________________________

j.WhatistheminimumMTUsizeforthisroute?__________________________________

CCNAInstructorLabManual 38
Lab9:ConfiguringStandardAccessLists

Objective
Configure,andapplyastandardACLtopermitordenyspecifictraffic.
TesttheACLtodetermineifthedesiredresultswereachieved.
Background/Preparation
Cableanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagram,suchas800,1600,1700,2500,2600routers,
oracombination,maybeused.Pleaserefertothechartattheendofthelabtocorrectly
identifytheinterfaceidentifierstobeusedbasedontheequipmentinthelab.The
configurationoutputusedinthislabisproducedfrom1721seriesrouters.Anyotherrouter
usedmayproduceaslightlydifferentoutput.
Thefollowingstepsareintendedtobeexecutedoneachrouterunlessspecificallyinstructed
otherwise.

Step1ConfigurethehostnameandpasswordsontheGadsdenrouter
a.OntheGadsdenrouter,entertheglobalconfigurationmodeandconfigurethehostnameas
showninthechart.Thenconfiguretheconsole,virtualterminalandenablepasswords.
ConfiguretheFastEthernetinterfaceontherouteraccordingtothechart.
Step2ConfigurethehostsontheEthernetsegment
a.Host1
IPaddress 192.168.14.2
Subnetmask 255.255.255.0
Defaultgateway 192.168.14.1
b.Host2
IPaddress 192.168.14.3

CCNAInstructorLabManual 39
 Subnetmask 255.255.255.0
Defaultgateway 192.168.14.1
Step3SavetheconfigurationinformationfromtheprivilegedEXECcommandmode
GAD# copy running-config startup-config
Step4Confirmconnectivitybypingingthedefaultgatewayfrombothhosts
a.Ifthepingsarenotsuccessful,correcttheconfigurationandrepeatuntiltheyare
successful.
Step5PreventaccesstotheEthernetinterfacefromthehosts
a.CreateanaccesslistthatwillpreventaccesstoFastEthernet0fromthe192.168.14.0
network.
b.Attherouterconfigurationprompttypethefollowingcommand:
GAD(conf ig )#access-list 1 deny 192.168.14.0 0.0.0.255
GAD(conf ig )#access-list 1 permit any
c.Whyisthesecondstatementneeded?
_______________________________________
Step6Pingtherouterfromthehosts
a.Werethesepingssuccessful?____________________________________________

b.Whyorwhynot?______________________________________________________
Step7ApplytheAccesslisttotheinterface
a.AttheFastEthernet0interfacemodeprompttypethefollowing:
GAD(conf ig - i f )#
ip access-group 1 in
Step8Pingtherouterfromthehosts
a.Werethesepingssuccessful?____________________________________________

b.Whyorwhynot?______________________________________________________
Step9Createanewaccesslist
a.Nowcreateanaccesslistthatwillnotallowtheevennumberedhoststopingbutpermitthe
oddnumberedhoststoping.
b.Whatwillthataccesslistlooklike?FinishthiscommandwithanappropriatecomparisonIP
address(aaa.aaa.aaa.aaa)andwildcardmask(www.www.www.www):
access-list 2 permit aaa.aaa.aaa.aaa www.www.www.www
c.Whywasitnotnecessarytohavethepermit any statementattheendthistime?

_____________________________________________________________________
Step10Applyaccesslisttotheproperrouterinterface
a.Firstremovetheoldaccesslistapplicationbytypingno ip access-group 1 in atthe
interfaceconfigurationmode.
b.Applythenewaccesslistbytyp ingip access-group 2 in
Step11Pingtherouterfromeachhosts

CCNAInstructorLabManual 40
 a.Wasthepingfromhost1successful?_______________________________________

b.Whyorwhynot?______________________________________________________

c.Wasthepingfromhost2successful?_______________________________________

d.Whyorwhynot?______________________________________________________

CCNAInstructorLabManual 41
Lab10:ConfiguringExtendedAccessLists

Objective
Configure,andapplyanextendedACLtopermitordenyspecifictraffic.
TesttheACLtodetermineifthedesiredresultswereachieved.
Background/Preparation
Cableanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagram,suchas800,1600,1700,2500,2600routers,
oracombination,maybeused.Pleaserefertothechartattheendofthelabtocorrectly
identifytheinterfaceidentifierstobeusedbasedontheequipmentinthelab.The
configurationoutputusedinthislabisproducedfrom1721seriesrouters.Anyotherrouter
usedmayproduceaslightlydifferentoutput.
Thefollowingstepsareintendedtobeexecutedoneachrouterunlessspecificallyinstructed
otherwise.
StartaHyperTerminalsessionasperformedintheEstablishingaHyperTerminalsessionlab.
Note:Gototheeraseandreloadinstructionsattheendofthislab.Performthose
stepsontherouterinthislabassignmentbeforecontinuing.
Preparation:
a. EraseStartupConfigurationonGAD:
Router# erase startup-config
b. ReloadRouter:
Router# reload
Step1ConfigurethehostnameandpasswordsontheGADrouter
a.OntheGADrouter,entertheglobalconfigurationmodeandconfigurethehostnameas
showninthechart.Thenconfiguretheconsole,virtualterminalandenablepasswords.
ConfiguretheFastEthernetinterfaceontherouteraccordingtothechart.

CCNAInstructorLabManual 42
 b.AllowHTTPaccessbyissuingtheip http server commandinglobalconfiguration
mode.

Step2ConfigurethehostsontheEthernetsegment
a.Host1
IPaddress 192.168.14.2
Subnetmask 255.255.255.0
Defaultgateway 192.168.14.1
b.Host2
IPaddress 192.168.14.3
Subnetmask 255.255.255.0
Defaultgateway 192.168.14.1
Step3SavetheconfigurationinformationfromtheprivilegedEXECcommandmode
GAD# copy running-config startup-config
Step4Confirmconnectivitybypingingthedefaultgatewayfrombothhosts
a.Ifthepingsarenotsuccessful,correcttheconfigurationandrepeatuntiltheyare
successful.
Step5ConnecttotherouterusingtheWebbrowser
a.Fromahost,connecttotherouterusingaWebbrowsertoensurethattheWebserver
functionisactive.
Step6PreventaccesstoHTTP(port80)fromtheEthernetinterfacehosts
a.CreateanaccesslistthatwillpreventWebbrowsingaccesstoFastEthernet0fromthe
192.168.14.0network.
b.Attherouterconfigurationprompttypethefollowingcommands:
GAD(conf ig )#access-list 101 deny tcp 192.168.14.0 0.0.0.255 any eq
80
GAD(conf ig )#access-list 101 permit ip any any
c.Whyisthesecondstatementneeded?
_______________________________________
Step7Applytheaccesslisttotheinterface
a.AttheFastEthernet0interfacemodeprompttype:
GAD(conf ig - i f )#
ip access-group 101 in
Step8Pingtherouterfromthehosts
a.Werethesepingssuccessful?_____________________________________________

b.Iftheywere,why?_____________________________________________________
Step9Connecttotherouterusingthewebbrowser

CCNAInstructorLabManual 43
 a.Wasthebrowserabletoconnect?__________________________________________
Step10Telnettotherouterfromthehosts
a.WereyouabletoTelnetsuccessfully?_______________________________________

b.Whyorwhynot?______________________________________________________

CCNAInstructorLabManual 44
Lab11:ConfiguringPAT

Objective
ConfigurearoutertousePortAddressTranslation(PAT)toconvertinternalIPaddresses,
typicallyprivateaddresses,intoanoutsidepublicaddress.

Background/Preparation
AidanMcDonaldhasjustreceivedaDSLlineInternetconnectiontoalocalISPinhishome.
TheISPhasallocatedonlyoneIPaddresstobeusedontheserialportofhisremoteaccess
device.ThusallPCsonAidansLAN,eachwithitsownprivateIPaddress,willshareone
publicIPaddressontherouterusingPAT.Routingfromthehomeorgatewayroutertothe
ISPwillbedonebyusingadefaultroutetoSerial0oftheGatewayrouter.TheISP
connectiontotheInternetwillberepresentedbyaloopbackaddressontheISProuter.
Cableanetworksimilartotheoneinthediagram.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagrammaybeused.Thisincludesthefollowingand
anyoftheirpossiblecombinations:
800seriesrouters
1600seriesrouters
1700seriesrouters
2500seriesrouters
2600seriesrouters
Pleaserefertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobe
usedbasedontheequipmentinthislab.Theconfigurationoutputusedinthislabisproduced
from1721seriesrouters.Anyotherrouterusedmayproduceslightlydifferentoutput.Conduct
thefollowingstepsoneachrouterunlessspecificallyinstructedotherwise.
StartaHyperTerminalsession.
Note:Refertotheeraseandreloadinstructionsattheendofthislab.Performthose
stepsonallroutersinthislabassignmentbeforecontinuing.

Step1Configuretherouters
Configureallofthefollowingaccordingtothechart:
Thehostname

CCNAInstructorLabManual 45
 Theconsolepassword
Thevirtualterminalpassword
Theenablesecretpassword
Theinterfaces
Step2Savetheconfiguration
AttheprivilegedEXECmodeprompt,onbothrouters,typethecommand
# copy running-config startup-config.

Step3ConfigurethehostswiththeproperIPaddress,subnetmask,anddefault
gateway
Eachworkstationshouldbeabletopingtheattachedrouter.Ifthepingwasnotsuccessful,
troubleshootasnecessary.Checkandverifythattheworkstationhasbeenassignedaspecific
IPaddressanddefaultgateway.IfrunningWindows98,checkusingStart>Run>winipcfg.
IfrunningWindows2000orXP,checkusingipconfig inaDOSwindow.

Step4Verifythatthenetworkisfunctioning
a. Fromtheattachedhosts,pingtheFastEthernetinterfaceofthedefaultgatewayrouter.
b. Wasthepingfromthefirsthostsuccessful?_____________
c. Wasthepingfromthesecondhostsuccessful?_____________
d. Iftheanswerisnoforeitherquestion,troubleshoottherouterandhostconfigurationsto
findtheerror.Thenpingagainuntiltheybotharesuccessful.

Step5Createadefaultroute
a. Addadefaultroutetotheserial0interfaceofthegatewayrouter.Thiswillforwardany
unknowndestinationaddresstraffictotheISP.Usetheip route commandtocreatethe
defaultroute:Gateway(config)#ip route 0.0.0.0 0.0.0.0 serial 0
b. Istherouteintheroutingtable?__________________________________________
c. TrytopingfromoneoftheworkstationstotheISPserialinterfaceIPaddress.
d. Wasthepingsuccessful?_______________________________________________
e. Why?_____________________________________________________________
f. Whatcommandcheckstheroutingtablecontents?____________________________

Step6DefineanaccesslistthatwillmatchtheinsideprivateIPaddresses
Todefinetheaccesslisttomatchtheinsideprivateaddresses,usetheaccess-list
command:
Gateway(config)#access-list 1 permit 10.10.10.0 0.0.0.255

Step7DefinethePATtranslationfrominsidelisttooutsideaddress
TodefinethePATtranslation,usetheip nat inside source command.Thiscommand,
withtheoverloadoption,willcreateportaddresstranslationusingtheserial0IPaddressas
thebase:
Gateway(config)#ip nat inside source list 1 interface serial 0 overload

Step8Specifytheinterfaces

CCNAInstructorLabManual 46
 Theactiveinterfacesontherouterneedtobespecifiedaseitherinsideoroutsideinterfaces
withrespecttoPAT.Todothis,usetheip nat inside orip nat outside command:
Gateway(config)#interface fastethernet 0
Gateway(configif)#ip nat inside
Gateway(configif)#interface serial 0
Gateway(configif)#ip nat outside

Step9Testingtheconfiguration
a. ConfigureaPContheinternalLANwiththeIPaddress10.10.10.10/24andadefault
gateway10.10.10.1.FromthePCs,pingtheInternetaddress172.16.1.1.Ifsuccessful,
TelnettothesameIPaddress.ThenlookatthePATtranslationonthegatewayrouter,
usingthecommandshow ip nat translations.
b. Whatisthetranslationoftheinsidelocalhostaddresses?
______________ =______________ ______________ =______________
c. Whatdoesthenumberafterthecolonrepresent?_____________________________
d. WhydoallofthecommandsforPATsayNAT?_________________________________

Uponcompletionoftheprevioussteps,finishthelabbydoingthefollowing:
Logoffbytypingexit
Turntherouteroff
Removeandstorethecablesandadapter

Configurationreferencesheet
ThissheetcontainsthebasicconfigurationcommandsfortheISPandGatewayrouters:
ISP
Router#configure terminal
Router(config)#hostname ISP
ISP(config)#enable password cisco
ISP(config)#enable secret class
ISP(config)#line console 0
ISP(configline)#password cisco
ISP(configline)#login
ISP(configline)#exit
ISP(config)#line vty 0 4
ISP(configline)#password cisco
ISP(configline)#login

CCNAInstructorLabManual 47
ISP(configline)#exit
ISP(config)#interface loopback 0
ISP(configif)#ip address 172.16.1.1 255.255.255.255
ISP(configif)#exit
ISP(config)#interface serial 0
ISP(configif)#ip address 200.2.2.17 255.255.255.252
ISP(configif)#no shutdown
ISP(configif)#clock rate 64000
ISP(config)#ip route 199.99.9.32 255.255.255.224 200.2.2.18
ISP(config)#end
ISP#copy running-config startup-config

Gateway
Router#configure terminal
Router(config)#hostname Gateway
Gateway(config)#enable password cisco
Gateway(config)#enable secret class
Gateway(config)#line console 0
Gateway(configline)#password cisco
Gateway(configline)#login
Gateway(configline)#exit
Gateway(config)#line vty 0 4
Gateway(configline)#password cisco
Gateway(configline)#login
Gateway(configline)#exit
Gateway(config)#interface fastethernet 0
Gateway(configif)#ip address 10.10.10.1 255.255.255.0
Gateway(configif)#no shutdown
Gateway(configif)#exit
Gateway(config)#interface serial 0
Gateway(configif)#ip address 200.2.2.18 255.255.255.252
Gateway(configif)#no shutdown
Gateway(config)#ip route 0.0.0.0 0.0.0.0 200.2.2.17

CCNAInstructorLabManual 48
Lab12:ConfiguringDHCP

Objective
ConfigurearouterforDynamicHostConfigurationProtocol(DHCP)todynamicallyassign
addressestoattachedhosts.
Background/Preparation
RoutingfromtheISProutertothecampusrouterusesastaticroute.Adefaultrouteisusedto
routefromthecampusroutertotheISProuter.TheISPconnectiontotheInternetissimulatedby
aloopbackaddressontheISProuter.

Cableanetworksimilartotheoneinthediagramabove.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagrammaybeused.Thisincludesthefollowingandanyof
theirpossiblecombinations:
800seriesrouters
1600seriesrouters
1700seriesrouters
2500seriesrouters
2600seriesrouters

Pleaserefertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobe
usedbasedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproducedfrom
1721seriesrouters.Anyotherrouterusedmayproduceslightlydifferentoutput.Conductthe
followingstepsoneachrouterunlessspecificallyinstructedotherwise.

StartaHyperTerminalsession.
Note:Refertotheeraseandreloadinstructionsattheendofthislab.Performthosestepson
allroutersinthislabassignmentbeforecontinuing.

Step1Configuretherouters
Configureallofthefollowingaccordingtothechart:
Thehostname
Theconsolepassword

CCNAInstructorLabManual 49
 Thevirtualterminalpassword
Theenablesecretpassword
Theinterfaces

Step2Savetheconfiguration
AttheprivilegedEXECmodeprompt,onbothrouters,typethecommandcopy running-
config startup-config.

Step3Createastaticroute
a. Addresses172.16.12.0/24havebeenallocatedforInternetaccessoutsideofthe
company.Usetheip route commandtocreatethestaticroute:
ISP(config)#ip route 172.16.12.0 255.255.255.0 172.16.1.6
b. Isthestaticrouteintheroutingtable?______________________________________

Step4Createadefaultroute
a. Usetheip route commandtoaddadefaultroutefromthecampusroutertotheISP
router.Thiswillprovidethemechanismtoforwardanyunknowndestinationaddresstraffic
totheISP:
campus(config)#ip route 0.0.0.0 0.0.0.0 172.16.1.5
b. Isthestaticrouteintheroutingtable?______________________________________

Step5CreatetheDHCPaddresspool
ToconfigurethecampusLANpool,usethefollowingcommands:
campus(config)#ip dhcp pool campus
campus(dhcpconfig)#network 172.16.12.0 255.255.255.0
campus(dhcpconfig)#default-router 172.16.12.1
campus(dhcpconfig)#dns-server 172.16.1.2
campus(dhcpconfig)#domain-name foo.com
campus(dhcpconfig)#netbios-name-server 172.16.1.10

Step6Excludingaddressesfrompool
Toexcludeaddressesfromthepool,usethefollowingcommands:
campus(config)#ip dhcp excluded-address 172.16.12.1 172.16.12.11

Step7VerifyingDHCPOperation

CCNAInstructorLabManual 50
 a. AteachworkstationonthedirectlyconnectedsubnetconfiguretheTCP/IPpropertiessothe
workstationwillobtainanIPaddressandDomainNameSystem(DNS)serveraddressfrom
theDHCPserver.Afterchangingandsavingtheconfiguration,reboottheworkstation.
b. ToconfirmtheTCP/IPconfigurationinformationoneachhostuseStart>Run>winipcfg
/all.IfrunningWindows2000,checkusingipconfig/allinaDOSwindow.
c. WhatIPaddresswasassignedtotheworkstation?_______________________________
d. Whatotherinformationwasautomaticallyassigned?________________________ ______
e. Whenwastheleaseobtained?______________________________________________
f. Whenwilltheleaseexpire?________________________________________________

Step8ViewDHCPbindings
a. Fromthecampusrouter,thebindingsforthehostscanbeseen.Toseethebindings,usethe
commandshow ip dhcp binding attheprivilegedEXECmodeprompt.
b. WhatweretheIPaddressesassigned?________________________________________
c. Whatarethethreeotherfieldslistedintheoutput?
________________________ _______________________ ________________________

CCNAInstructorLabManual 51
Lab13:ConfiguringPPPEncapsulation

Objective
ConfiguretheserialinterfacesontworouterswiththePPPprotocol.
Testthelinkforconnectivity.
Background/Preparation
Cableanetworksimilartotheoneinthediagramabove.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagrammaybeused.Thisincludesthefollowingand
anyoftheirpossiblecombinations:
800seriesrouters
1600seriesrouters
1700seriesrouters
2500seriesrouters
2600seriesrouters

Pleaserefertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobe
usedbasedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproduced
from1721seriesrouters.Anyotherrouterusedmayproduceslightlydifferentoutput.Conduct
thefollowingstepsoneachrouterunlessspecificallyinstructedotherwise.

Step1Configuretherouters
Configureallofthefollowingaccordingtothechart:
Thehostname
Theconsolepassword
Thevirtualterminalpassword
Theenablesecretpassword
Step2ConfiguretheDublininterfaceasshown
ConfiguretheDublinrouterserialinterfaceasfollows:
Dublin(config)#interface serial 0
Dublin(configif)#ip address 192.168.15.2 255.255.255.0
Dublin(configif)#no shutdown
Dublin(configif)#exit
Dublin(config)#exit
Step3ConfiguretheWashingtoninterfaceasshown
ConfiguretheWashingtonrouterserialinterfaceasfollows:

CCNAInstructorLabManual 52
 Washington(config)#interface serial 0
Washington(configif)#ip address 192.168.15.1 255.255.255.0
Washington(configif)#clock rate 64000
Washington(configif)#no shutdown
Washington(configif)#exit
Washington(config)#exit
Step4Savetheconfiguration
Washington#copy running-config startup-config
Dublin#copy running-config startup-config
Step5Enterthecommandshowinterfaceserial0(refertointerfacechart)on
Washington
Washington#show interface serial 0
a.Thiswillshowthedetailsofinterfaceserial0.
b.Serial0is_____________,lineprotocolis_____________.
c.Internetaddressis_____________________.
d.Encapsulation_________________________
Step6Enterthecommandshowinterfaceserial0(refertointerfacechart)onDublin
Dublin#show interface serial 0
a.Thiswillshowthedetailsofinterfaceserial0.
b.Serial0is_____________,lineprotocolis_____________.
c.Internetaddressis_______________.
d.Encapsulation___________________
Step7Changetheencapsulationtype
ChangetheencapsulationtypetoPPPbytypingencapsulation ppp attheinterface
serial0configurationmodepromptonbothrouters.
Washington(configif)#encapsulation ppp
Dublin(configif)#encapsulation ppp
Step8Enterthecommandshow interface serial 0 onWashington
Washington#show interface serial 0
Encapsulation___________________
Step9Enterthecommandshow interface serial 0 onDublin
Dublin#show interface serial 0
Encapsulation___________________

Step10Verifythattheserialconnectionisfunctioningbypingingtheserialinterface
oftheotherrouter
Washington#ping 192.168.15.2
Dublin#ping 192.168.15.1
a.CantheserialinterfaceontheDublinrouterbepingedfromWashington?_____________
b.CantheserialinterfaceontheWashingtonrouterbepingedfromDublin?_____________
c.Iftheanswerisnoforeitherquestion,troubleshoottherouterconfigurationstofindthe
error.
Step11ConfigurePPPauthentication
ConfiguretheusernameandpasswordontheMadridrouter.Thepasswordsmustbethe
sameonbothrouters.Theusernamemustreflecttheotherroutershostnameexactly.The
passwordandusernamesarecasesensitive:
Washington(config)#username dublin password cisco
Washington(config)#interface serial 0
CCNAInstructorLabManual 53
 Washington(configif)#ppp authentication chap
Step12Verifythattheserialconnectionisfunctioning
a. Verifythattheserialconnectionisfunctioningbypingingtheserialinterfaceoftheother
router:Washington#ping 192.168.15.2
b.Isthepingsuccessful?_________________________________________________
c.Why?______________________________________________________________

Step13ConfigurePPPauthentication
ConfiguretheusernameandpasswordontheTokyorouter.Thepasswordsmustbethesame
onbothrouters.Theusernamemustreflecttheotherroutershostnameexactly.Thepassword
andusernamesarecasesensitive:
Dublin(config)#username Washington password cisco
Dublin(config)#interface serial 0
Dublin(configif)#ppp authentication chap
Step11Verifythattheserialconnectionisfunctioning
a.Verifythattheserialconnectionisfunctioningbypingingtheserialinterfaceoftheotherrouter:
Dublin#ping 192.168.15.1
b.Isthepingsuccessful?_____________________________________________________
c.Why?__________________________________________________________________

CCNAInstructorLabManual 54
Lab14:ConfiguringFrameRelayPVC

Objective
ConfiguretworoutersbacktobackasaFrameRelaypermanentvirtualcircuit(PVC).Thiswill
bedonemanually,intheabsenceofaFrameRelayswitch,andthereforetherewillbeno
LocalManagementInterface(LMI).

Background/Preparation
Cableanetworksimilartotheoneinthediagramabove.Anyrouterthatmeetstheinterface
requirementsdisplayedontheabovediagrammaybeused.Thisincludesthefollowingand
anyoftheirpossiblecombinations:
800seriesrouters
1600seriesrouters
1700seriesrouters
2500seriesrouters
2600seriesrouters
Pleaserefertothechartattheendofthelabtocorrectlyidentifytheinterfaceidentifierstobe
usedbasedontheequipmentinthelab.Theconfigurationoutputusedinthislabisproduced
from1721seriesrouters.Anyotherrouterusedmayproduceslightlydifferentoutput.Conduct
thefollowingstepsoneachrouterunlessspecificallyinstructedotherwise.

Step1Configuretherouters
Configurethefollowingaccordingtothechart:
Thehostname
Theconsolepassword
Thevirtualterminalpassword
Theenablesecretpassword
TheFastEthernetinterface
Step2ConfiguringtheWashingtonserialinterface
First,definetheFrameRelayframetypetobeusedonthislink.Toconfigurethe
encapsulationtype,usethecommandencapsulation frame-relay ietf.Disable
keepalivemessagessincethereisnoFrameRelayswitchinthisconfigurationand
consequentlynoFrameRelayDCE:
Washington#configure terminal
Washington(configif)#interface serial 0

CCNAInstructorLabManual 55
 Washington(configif)#encapsulation frame-relay ietf
Washington(configif)#no keepalive
Washington(configif)#ip address 192.168.1.1 255.255.255.0
Washington(configif)#no shutdown

Step3ConfiguretheFrameRelaymaponWashington
a. WhensendinganEthernetframetoaremoteIPaddress,theremoteMACaddressmust
bediscovered,sothatthecorrectframetypecanbeconstructed.FrameRelayneedsa
similarmapping.
b. TheremoteIPaddressneedstobemappedtothelocalDLCI(Layer2address),sothe
correctlyaddressedframecanbecreatedlocallyforthisPVC.Sincethereisnowayof
mappingtheDLCIautomaticallywithLMIdisabled,thismapmustbecreatedmanually,
usingtheframe-relay map command.Thebroadcast parameteralsoallowsforIP
broadcaststousethesamemappingforcrossingthisPVC:
Washington(configif)#frame-relay map ip 192.168.1.2 201 ietf
broadcast
Step4ConfiguretheDCEonWashington
Inthisconfiguration,whenDCEcablesareused,aclocksignalisnecessary.The
bandwidth commandisoptional,butwisetousetoverifybandwidthtransmission.Another
optionistotitletheconnectionusingthedescription command.Itisveryusefultorecord
informationinthedescriptionaboutthePVC,suchasremotecontactpersonandtheleased
linecircuitidentifier:
Washington(configif)#clock rate 64000
Washington(configif)#bandwidth 64
Washington(configif)#description PVC to Dublin, DLCI 201, Circuit
#DASS465875, Contact John Tobin (061-8886745)
Step5ConfigureDublinrouter
ConfiguretheDublinrouterusingthefollowingcommands.
Dublin#configure terminal
Dublin(configif)#interface serial 0
Dublin(configif)#encapsulation frame-relay ietf
Dublin(configif)#no keepalive
Dublin(configif)#no shutdown
Dublin(configif)#ip address 192.168.1.2 255.255.255.0
Dublin(configif)#frame-relay map ip 192.168.1.1 201 ietf broadcast
Dublin(configif)#bandwidth 64
Dublin(configif)#description PVC to Washington, DLCI 201, Circuit
#DASS465866 Contact Pat White (091-6543211)
Step6VerifyingFrameRelayPVC
a. OntheWashingtonrouter,typethecommandshow frame-relay pvc:
Washington#show frame-relay pvc
b. WhatistheDLCInumberreported?_____________________________ __________
c. WhatisthePVCstatus? _______________________________________________
d. WhatisthevalueoftheDLCIUSAGE?_____________________________________
Step7ShowingFrameRelaymap
a. ToviewtheLayer2toLayer3mapping,usetheshow frame-relay map command
attheprivilegedEXECmodeprompt:Washington#show frame-relay map
b. WhatistheIPaddressshown?____________________________________________
c. Whatstateisinterfaceserial0in?_________________________________________
Step8VerifyFrameRelayconnectivity

CCNAInstructorLabManual 56
a. FromtheWashingtonrouter,pingtheDublinrouterserialinterface.
b. Wasthepingsuccessful?______________________________________________________
c. Ifthepingwasnotsuccessful,troubleshoottherouterconfigurations.

CCNAInstructorLabManual 57
PlanforAcademyStudentSuccess(PASS)
Courseobjectives
TheCCNAcertificationindicatesknowledgeofnetworkingforthesmalloffice,homeoffice
(SOHO)market.Thecertificationalsoindicatestheabilitytoworkinsmallbusinessesor
organizationswithnetworksthathavefewerthan100nodes.AnindividualwiththeCCNA
designationshouldbeabletoperformthefollowingtasks:
InstallandconfigureCiscoswitchesandroutersinmultiprotocolinternetworks
usingLANandWANinterfaces
ProvideLevel1troubleshootingservices
Improvenetworkperformanceandsecurity
Performentryleveltasksintheplanning,design,installation,operation,and
troubleshootingofEthernetandTCP/IPnetworks

CCNA1version3.1CurriculumGuidelines
TheCCNA1v3.1courseisanimportantsteptowardachievingCCNAcertification.Upon
completionofthecourse,studentsshouldbeabletoperformtasksrelatedtothefollowing:
1 Networkingmathematics,terminology,andmodels
2 Copper,optical,andwirelessnetworkingmedia
3 LANandWANcablingandtesting
4 Ethernetoperationand10,100,and1000GigabitversionsofEthernet
5 Ethernetswitching
6 IPaddressingandsubnetting
7 IP,TCP,UDP,andapplicationlayerprotocols

CCNA2version3.1CurriculumGuidelines
TheCCNA2v3.1courseisanimportantsteptowardachievingCCNAcertification.Upon
completionofthecourse,studentsshouldbeabletoperformtasksrelatedtothefollowing:
8 RoutersandtheirrolesinWANs
9 CiscoIOS
10 Routerconfiguration
11 Routerfilemanagement
12 RIPandIGRProutingprotocols
13 TCP/IPerrorandcontrolmessages

CCNAInstructorLabManual 58
14 Routertroubleshooting
15 ACLs

CCNA3version3.1CurriculumGuidelines
TheCCNA3v3.1courseisanimportantsteptowardachievingCCNAcertification.Upon
completionofthecourse,studentsshouldbeabletoperformtasksrelatedtothefollowing:
16 VLSM
17 IntermediateRoutingProtocols;RIPv2,singleareaOSPF,andEIGRP
18 CLIswitchconfiguration
19 Ethernetswitching
20 VLANs
21 STP
22 VTP

CCNA4version3.1CurriculumGuidelines
TheCCNA4v3.1courseisanimportantsteptowardachievingCCNAcertification.Upon
completionofthecourse,studentsshouldbeabletoperformtasksrelatedtothefollowing:
23 NATandPATconfiguration,verification,andtroubleshooting
24 DHCPconfiguration,verification,andtroubleshooting
25 WANtechnologyevaluation,comparison,andcontrast
26 WANdesign
27 PPPauthenticationandconfiguration
28 ISDNconfiguration,verification,andtroubleshooting
29 DDRconfiguration,verification,andtroubleshooting
30 FrameRelayconfiguration,verification,andtroubleshooting
31 Networkmanagementstandardsandprotocols

CCNAInstructorLabManual 59