CISCO PACKET TRACER

A NETWORK SIMULATION PROGRAM

Sec 5
OSPF ORGANIZATION
OSPF BROADCAST MULTIACCESS NETWORK

 DR : Designated Router
 BDR : Backup Designated Router.
 DR & BDR Choice :
1. Priority.
Router Priority : 1 to 255 ( Default : 1 ).
2. Manual ID.
3. ID based on Loopback IP address.
4. ID based on the Physical IP address.
Assume Default Priority

ID = ??
OSPF Dynamic Routing
Router 0 IP config.
 Repeat for Router 1,2

Router 0 IP config.
OSPF Routing for
Router 2.
OSPF Routing for
Router 1.
OSPF Routing for Router 0.
Show Routing table
of Router 2
Raise Router 2 Priority
PRIORITY

 To raise Router 2 priority

Router (config) # int gig 0/0
Router (config-if) # ip ospf priority 5
Router (config-if) # exit

 To display neighbors
Router (config) # do show ip ospf ne
Restart Router 2
1. Restart all routers.
2. Show ospf neighbors.
LOOPBACK INTERFACE

 Loopback interface IP has more priority over Physical IP address.

 To define loopback interface
Router (config) # int loopback 1
Router (config-if) # ip address 50.0.0.0 255.0.0.0
Loopback IP 50.0.0.1
Delete the
Priority
SET ROUTER ID MANUALLY

 Router (config) # router ospf 1

Router (config-router) # router-id 100.0.0.1
REDUNDANCY PROTOCOLS
REDUNDANCY PROTOCOLS

HSRP VRRP GLBP

Host Standby Router Virtual Router Gateway Local

Protocol Redundancy Protocol Balancing Protocol

√
1. Connect the following network
2. Set Virtual IP
192.168.1.50
Active

Standby
Delete
Reconnect
ACCESS CONTROL LIST (STANDARD)
ACL
1. Connect the following network.
2. Use OSPF routing protocol.
3. Test the Connectivity.
STANDARD ACL

 To Prevent PC0 from communicating with network 192.168.1.0

 Standard ACL on Router 3

Packet OUT
STANDARD ACL
From 1 to 99 Source

 Router (config) # access-list 1 deny 200.0.0.2

 Router (config) # access-list 1 permit any
 Router (config) # int gigabitEthernet 0/0
 Router (config-if) # ip access-group 1 out
To display ACL :
Router (config) # do show acc
To cancel ACL :
Router (config) # no access-list 1
1. Send message from PC0 to PC1.
2. Send message from PC2 to PC1.
1. Delete the ACL.
2. Send message from PC0 to PC1.
ACCESS CONTROL LIST (EXTENDED)
ACL
Add a web server to the previous
network.
Check the Web browsing service using
PC0.
EXTENDED ACL

 Prevent PC0 from Browsing only.

 Apply ACL on Router 1

IN
EXTENDED ACL
From 100 to 199 Browsing
(HTTP) Source Distenation Port no.

 Router (config) # access-list 100 deny tcp host 200.0.0.2 host 192. 168.1.3 eq 80
 Router (config) # access-list 100 permit ip any any
 Router (config) # int gigabitEthernet 0/0
 Router (config-if) # ip access-group 100 in
Check the Web browsing service using
PC0 again.
Check the Web browsing service using
PC2.
Ping web server from PC0.
EXTENDED ACL

 To prevent a network from Pinging a server :

Network Wild card
mask Server
IP
 Router (config) # access-list 101 deny ICMP 200.0.0.0 0.0.0.255 host 192. 168.1.3
echo
 Router (config) # access-list 101 permit ip any any
 Router (config) # int gigabitEthernet 0/0 Choose Interface

 Router (config-if) # ip access-group 100 in

IN or OUT
THANK YOU