Professional Documents
Culture Documents
I assume that you already have some basic knowledge of CLI and how to navigate
between different configuration modes (user mode, privileged exec mode etc), so
let’s get started:
The first step is to secure your access to the router by configuring a global secret
password and also passwords for Telnet or Console as needed.
Enter into Global Configuration mode from the Privileged EXEC mode:
In Global Configuration Mode you configure parameters that affect the whole
router device. Here we will configure the Enable Secret password that you will be
using from now own to enter into Privileged EXEC Mode from User EXEC Mode.
From now on, when you log in from user EXEC mode you will be asked for a
password.
It is suggested also to configure a password for the Telnet Lines (VTY lines) which
will secure your access when connecting via Telnet over the network.
To differentiate your Router from other devices in the network, you should
configure a Hostname for your device.
Notice that your Router prompt changes to the new hostname that you have just
set.
This is an essential step in order for your router to be able to forward packets in the
network. The most basic parameter for a Router Interface is the IP address. From
Global Configuration Mode you need to enter into Interface Configuration Mode:
The Router’s main purpose is to find the best route path towards a destination
network and forward packets according to the best path. There are two main ways
a router knows where to send packets. The administrator can assign static routes,
or the router can learn routes by using a dynamic routing protocol. For simple
network topologies, static routing is preferred over dynamic routing. Let’s see how
to configure static routes from Global Configuration Mode.
The command above tells the router that network 200.200.200.0/24 is reachable
via gateway address 100.100.100.2.
Another popular static route that we usually configure on Internet Border routers is
the default static route:
The default static route above instructs the router to send ALL packets that the
router does not have a more specific route entry to gateway address 50.50.50.1
(which might be the ISP gateway address).
Save your current running configuration into NVRAM. This will overwrite the
startup configuration.
My-Router(config)# exit
My-Router# copy running-config startup-config
You can display your current configuration to verify your settings as following: