INJIBARA UNIVERSITY

College of Engineering and Technology

Department of Information Technology 4th Year Student

9/15/2023 Network Devices Configurtion ppt. 1

Chapter One

Outlines
 Definitions of Network Devices

 Components of network hard ware devices

 Router configuration commands

9/15/2023 Network Devices Configurtion ppt. 2

 Network Devices
• Network devices are components used to connect computers or
other electronic devices together so that they can share files or
resources like printers or fax machines.

• Router

• A router is a special type of computer. It has the same basic

components as a standard desktop PC.

• However, routers are designed to perform some very specific

functions.
9/15/2023 Network Devices Configurtion ppt. 3
 Cont.
• Routers/Switches need the internetwork operating system (IOS) to run
configuration files. These configuration files contain the instructions and
parameters that control the flow of traffic in and out of the routers/switches

• Functions of routers

Router connects multiple networks:

 When a router receives an IP packet on one interface, it determines which

interface to use to forward the packet onto its destination.

 These interfaces are used to connect a combination of both Local Area Networks
(LANs) and Wide Area Networks (WANs).

9/15/2023 Network Devices Configurtion ppt. 4

• Routers determine the best path:

The router uses its routing table to determine the best path to forward the packet.

determining the best path to send packets and forwarding packets toward their
destination.

Router Components

Hardware Components

 Router memory components

 CPU: CPU executes operating system instructions

 Interface and Lines

Software Components : IOS

9/15/2023 Network Devices Configurtion ppt. 5

 Router memory components
ROM: maintain instructions of POST diagnosis

• Stores bootstrap program and basic operating system software

• Mini IOS

RAM: also called dynamic RAM(DRAM)

• Contains the running copy of configuration file

• Stores routing tables

• Holds ARP cache

• Performs packet buffering (shared RAM)

• Provides temporary memory for the configuration file of the router

while the router is powered on

9/15/2023 Network Devices Configurtion ppt. 6
Non-Volatile RAM(NVRAM): Stores startup configuration

• Retains content when router is powered down or restarted

• Configuration Register – 16 bit register which decides boot

• Sequence

FLASH Memory: Holds the operating system image (IOS)

• Allows software to be updated without removing and replacing chips on the

processor

• Retains content when router is powered down or restarted

• Can store multiple versions of IOS software

• Is a type of electronically erasable, programmable ROM (EEPROM)

9/15/2023 Network Devices Configurtion ppt. 7
 Interfaces & Lines
• Cisco devices contain two distinctly different types of ports, interfaces and lines.

• Interfaces connect routers and switches to each other or

• traffic is actually routed or switched across interfaces.

• Ex. Serial Ethernet, Fast Ethernet, Token Ring, ATM, ISDN BRI, Loopback interfaces
etc.

• It can identified both interface name and number

Ethernet0/FastEthernet0/2(module/interface for the version of 3600 routers).

• Lines identify ports that allow us to connect into, and then configure, Cisco devices.

• Example Console ports, Auxiliary ports and VTY (telnet) ports and identified like
Console 0
9/15/2023 Network Devices Configurtion ppt. 8
9/15/2023 Network Devices Configurtion ppt. 9
 Categories of router interfaces
Categories of interfaces Interfaces Function of interface
LAN interfaces Ethernet , Fast Used to connect router
Ethernet Ports, to LAN network
Gigabit

WAN Interfaces Serial Ports Used to connect routers

into external network
that internetwork LAN

Management Interfaces Console and auxiliary Used for configuration

ports purpose

9/15/2023 Network Devices Configurtion ppt. 10

 Using Lines to Configure the IOS
• The console port is generally a RJ-45 connector, and requires a rollover
cable to connect.

• The opposite side of the rollover cable connects to a PC’s serial port
using a serial terminal adapter.

• From the PC, software such as HyperTerminal is required to make a

connection from the local serial port to the router console port

• The auxiliary port functions the same with console except it support modem
commands providing dial-in access to Cisco devices.
9/15/2023 Network Devices Configurtion ppt. 11
• Telnet, and now SSH, are the most common methods of
remote access to routers and switches.

• There are two requirements before a router/switch will

accept a VTY connection:

An IP address must be configured on an interface

At least one VTY port must be configured with a password

9/15/2023 Network Devices Configurtion ppt. 12

 Internetwork Operating System (IOS)
 Cisco IOS manages the hardware and software resources of the router.

 IOS is a multitasking operating system that is integrated with routing,

switching, internetworking, and telecommunications functions.

• CLI is a method of configuring Cisco routers

• Upon bootup, the startup-config file in NVRAM is copied into RAM

and stored as the running-config file.

• IOS executes the configuration commands in the running-config.

9/15/2023 Network Devices Configurtion ppt. 13

 Router Boot-up-Process
• There are four major phases to the boot up process

1. Performing the POST: After the POST has been completed, the
router executes the bootstrap program.

2. Loading the Bootstrap Program: After the POST, the bootstrap

program is copied from ROM into RAM.

 The main task of the bootstrap program is to locate the Cisco IOS
and load it into RAM.

9/15/2023 Network Devices Configurtion ppt. 14

3. Locating and Loading Cisco IOS:

 The IOS is typically stored in flash memory, but can also be

stored in other places such as a TFTP (Trivial File Transfer
Protocol) server.

 If a full IOS image cannot be located, a scaled-down version of

the IOS is copied from ROM into RAM.

 A TFTP server is usually used as a backup server for IOS but it can
also be used as a central point for storing and loading the IOS.

9/15/2023 Network Devices Configurtion ppt. 15

4. Locating and Loading the Configuration File: After the IOS is
loaded, the bootstrap program searches for the startup
configuration file, known as startup-config, in NVRAM.

 Parameters including: interface addresses, routing information,

passwords…

 If the startup configuration file, startup-config, is located in

NVRAM, it is copied into RAM as the running configuration file,
running-config.

9/15/2023 Network Devices Configurtion ppt. 16

 Basics configuration of router and switch
• Most of the router manufacturers provide SDM (Security
Device Manager) software along with the router to enable
users configure the router graphically.
• SDM Express uses eight configuration steps to assist in
creating a basic router configuration.
• Basic Configuration, LAN IP Address, DHCP, Internet
(WAN), Firewall, Security Settings and Summary
9/15/2023 Network Devices Configurtion ppt. 17
 Cisco IOS Modes of Operation
• The Cisco IOS software provides two levels of access to
commands: user and privileged.

• The unprivileged user mode is called user EXEC mode.

The privileged mode is called privileged EXEC mode
and requires a password.

9/15/2023 Network Devices Configurtion ppt. 18

Most commonly used mode

9/15/2023 Network Devices Configurtion ppt. 19

User EXEC Mode:
When you are connected to the router, you are started in user EXEC mode. The user
EXEC commands are a subset of the privileged EXEC commands.
Privileged EXEC Mode:
Privileged commands include the following:
• Configure – Changes the software configuration.
• Debug – Display process and hardware event messages.
• Setup – Enter configuration information at the prompts.
Enter the command disable to exit from the privileged EXEC mode and return to
user EXEC mode.
9/15/2023 Network Devices Configurtion ppt. 20
 Configuration Mode
• To enter configuration mode, enter the command configure terminal
and exit by pressing Ctrl-Z.
Basic Router/Switch Configuration- use the hole configuration for
the following topology

9/15/2023 Network Devices Configurtion ppt. 21

 1. Getting Help
In any command mode, you can get a list of available commands by entering a

question mark (?).

Router>?

To obtain a list of commands that begin with a particular character sequence, type
in

Router#co?

Configure connect copy

abbreviate commands and keywords by entering just enough characters

to make the command unique fromNetwork

9/15/2023
other commands. show command to sh
Devices Configurtion ppt. 22
 2. Disabling DNS lookup
• DNS lookup can sometime take your time looking for the name translations even
if
• you didn’t configure any host name but we can disable the DNS lookup
from your cisco device.
• Example:
• Router>enable
• Router# configure terminal
• Router(config)#no ip domain-lookup
• Router(config)#exit
9/15/2023 Network Devices Configurtion ppt. 23
3. Rename the Router
• To specify or modify the host name for the router, global configuration
command HOSTNAME is used.

• Hostname is case sensitive. The host name is used in prompts and default
configuration filenames. For instance the first router R1 can be renamed as
INUR1 as follow.

• Router (config) # hostname INUR1

• INUR1(config) #

• The factory-assigned default host name is router

9/15/2023 Network Devices Configurtion ppt. 24
4. Setting the System Clock
• The system clock runs from the moment the system starts up and keeps
track of the current date and time based on Coordinated Universal Time
(UTC), also known as Greenwich Mean Time (GMT).

• To display the system clock, use the show clock EXEC command.

Example

• Clock set hh:mm:ss day month yyyy

• clock set hh:mm:ss month day yyyy

9/15/2023 Network Devices Configurtion ppt. 25

5. Setting the Banner

 To specify a message-of-the-day (MOTD) banner, use the banner

motd global configuration command.

 The no form of this command deletes the MOTD banner.

 When someone connects to the router, the MOTD banner appears

before the login prompt.

 INUR1(config)# banner motd # message #

9/15/2023 Network Devices Configurtion ppt. 26

 6. Setting Passwords

a. Console Password

• Console password is needed when logging into router at user EXEC

mode from console.

• INUR1 (config)# line console 0

• INUR1 (config-line)# password console Password

• INUR1 (config-line)#login

9/15/2023 Network Devices Configurtion ppt. 27

b. Vty lines password
• Virtual terminal lines (vty) are used to allow remote access to the
router (by telneting through its interfaces). The router has five
virtual terminal lines by default.

• INUR1 (config)# line vty 0 4

• INUR1 (config-line)# password vtyPassword

• INUR1 (config-line)#login

9/15/2023 Network Devices Configurtion ppt. 28

 Privileged Access Password Next class
• To set a local password to control access to various privilege levels, use the
enable password global configuration command.
• Use the no form of this command to remove the password requirement.
• Must contain from 1 to 25 uppercase and lowercase alphanumeric
characters.
• Must not have a number as the first character.
• Can have leading spaces, but they are ignored. However, intermediate and
trailing spaces are recognized
• INUR1 (config)# enable password WeakPrivilegePassword
9/15/2023 Network Devices Configurtion ppt. 29
Setting Secret (Encrypted) Password
• To set an encrypted local password to control access to various
privilege levels, use

• The enable secret global configuration command. Use the no form

of this command to remove the password requirement.

• INUR1 (config)# enable secret StrongPrivilegePassword

9/15/2023 Network Devices Configurtion ppt. 30

 7. Bring up an interface
• show ip interface brief at the user privilege mode on cisco routers

• To bring up the status of an interface

• we use the no shutdown command to open the router interface.

Example:
INUR1>enable
INUR1#configure terminal
INUR1 (config)#interface serial2/0
INUR1 (config-if)#no shutdown
INUR1 (config-if)#exit
INUR1 (config)#interface fastethernet0/0
INUR1 (config-if)#no shutdown
INUR1 (config-if)#exit
9/15/2023 Network Devices Configurtion ppt. 31
 Clock rate on serial interfaces
• Serial interface with DCE ends of a router need to be configured with
the clock rate
Example:
INUR1>enable
INUR1#configure terminal
INUR1 (config)#interface serial2/0
INUR1 (config-if)#no shutdown
INUR1 (config-if)#clock rate 4800
INUR1 (config-if)#exit
The clock rate can be set from some specific values.
9/15/2023 Network Devices Configurtion ppt. 32
 Setting the Description for an Interface
• To add a description to an interface configuration, use the description interface
configuration command.
• Use the no form of this command to remove the description.
Router(config)# interface serial 2/0
INUR1 (config-if)# description T1 line to INUR1- 128 Kb/s
The description "T1 line to INUR1- 128 Kb/s" appears in the output of the following
EXEC commands: show startup-config, show interfaces, and show running-config
INUR1# show startup-config
INUR1# show interfaces
INUR1# show running-config
9/15/2023 Network Devices Configurtion ppt. 33
 10. IP addressing
• Every interface need to be configured with an IP address on
the router to communicate over the network.
INUR1>enable
INUR1#configer terminal
INUR1 (config)#interface fastethernet0/0
INUR1 (config-if)#ip address 10.10.10.1 255.255.255.0
INUR1 (config-if)#no shutdown
INUR1 (config-if)#exit
INUR1 (config)#interface serial2/0
INUR1 (config-if)#ip add 192.168.20.1 255.255.255.252
INUR1 (config-if)#no shutdown
INUR1 (config-if)#exit
9/15/2023 Network Devices Configurtion ppt. 34
 11. DHCP (Dynamic Host Configuration Protocol)
 DHCP DISCOVER, DHCP OFFER, DHCP REQUEST and DHCP

ACKNOWLEDGEMENT.

 abbreviated as DORA

 After receiving DHCP ACKNOWLEDGEMENT, the IP address is leased to

the DHCP Client.

 with the “ip helper-address …” command, the router will accept that
broadcast message and cover it into a unicast packet and forward it to the
DHCP Server.
9/15/2023 Network Devices Configurtion ppt. 35
 When a DHCP address conflict occurs
• During the IP assignment process, the DHCP Server uses ping to
test the availability of an IP before issuing it to the client.

• If no one replies then the DHCP Server believes that IP has not been
allocated and it can safely assign that IP to a client.

• If someone answers the ping, the DHCP Server records a

conflict.

9/15/2023 Network Devices Configurtion ppt. 36

 Configure a DHCP Server on Cisco router
Router(config)#ip dhcp pool CLIENTS
Router(dhcp-config)#network 10.1.1.0 /24
Router(dhcp-config)#default-router 10.1.1.1
Router(dhcp-config)#dns-server 10.1.1.1
Router(dhcp-config)#domain-name INU.com
Router(dhcp-config)#lease 0 12-The syntax is “lease{days[hours] [minutes] |
infinite}”in this case the lease is 12 hours. The default is a one-day lease
Router(dhcp-config)#exit
Router(config)# ip dhcp excludedaddress 10.1.1.1 10.1.1.10
9/15/2023 Network Devices Configurtion ppt. 37
 12. Handling configuration Files

• Any time you make changes to the router configuration.

• There are two types of configuration files: the running (current
operating) configuration and the startup configuration.
• Use the following privileged mode commands to work with configuration
files.
configure terminal – modify the running configuration manually from the
terminal.
show running-config – display the running configuration.
show startup-config – display the startup configuration.
9/15/2023 Network Devices Configurtion ppt. 38
Cont..
• copy running-config startup-config – copy the running configuration to the
startup configuration.

• copy startup-config running-config – copy the startup configuration to the

running configuration.

• erase startup-config – erase the startup-configuration in NVRAM.

• copy tftp running-config– load a configuration file stored on a Trivial File

Transfer

• Protocol (TFTP) server into the running configuration.

• copy running-config tftp– store the running configuration on a TFTP server.

9/15/2023 Network Devices Configurtion ppt. 39
 Viewing, saving and erasing configurations
Viewing

INUR1>enable

INUR1#show running-config

Saving

INUR1>enable

INUR1#copy running-config starup-config Or

INUR1#write

Erasing startup configurations

INUR1>enable

INUR1#erase startup-config
9/15/2023 Network Devices Configurtion ppt. 40
no and do commands
• Use the command without the keyword no to reenable a disabled
feature or to enable a feature that is disabled by default

Example

INUR1(config)#int fa0/0

INUR1(config-if)#no ip address

Disabling Logging synchronous messages

INUR1(config)#line console 0

INUR1(config-line)#logging synchronous
9/15/2023 Network Devices Configurtion ppt. 41
 15. Remote Device Management (telnet & SSH)
• SSH i.e. Secure Shell and Telnet are the network protocols that serves the same
purpose that is to provide remote access to the system in order to establish some
sort of communication between the systems.

 SSH encrypts the data/packets being transferred between the systems so it cannot
be Decoded by the Hackers.

 In Public network mostly SSH is used for remote connection

 SSH uses authentication which ensures that the source of the data is still the same
system and not another

 SSH uses public and private keys, to identify hosts and users (authentication).

 By default SSH runs on port 22.

9/15/2023 Network Devices Configurtion ppt. 42
Telnet
The data transferred between the systems is in Plain text (ASCII form)
and not in encrypted format which is the major security concern.

Telnet is mostly used in Private network as it's highly insecure to use

in Public network.

Telnet does not use Authentication which is again a security issue.

Telnet runs on port 23.

9/15/2023 Network Devices Configurtion ppt. 43

Configuring Telnet
• A virtual terminal line is "virtual port" on the router.

Step 1. Enter line configuration mode.

Step 2. Enable login on the vty lines.

Step 3. Set a password for Telnet access.

Step 4. Set the exec-timeout interval.

9/15/2023 Network Devices Configurtion ppt. 44

Cont..
Router# configure terminal
Router(config)#banner motd #Welcome to INU Router#
Router(config)#enable password inu123
Router(config)#interface fastethernet0/0
Router(config-if)#ip address 192.168.0.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#line vty 0 4
Router(config-line)#password inuvty123
Router(config-line)#login
Router(config-line)#logging synchronous
Router(config-line)#exec-timeout 30
Router(config-line)#motd-banner
9/15/2023 Network Devices Configurtion ppt. 45
Testing Telnet Connectivity
PC>telnet 192.168.0.1
Trying 192.168.0.1 …Open Welcome to inu Router
User Access Verification
Password:
Router>enable
Password:
Router#
If you need to disconnect the logged in remote connection type “logout”
and9/15/2023
press enter. Network Devices Configurtion ppt. 46
Configuring SSH
Open the router Router console line and create domain and user name.
Router(config)#ip domain-name inu.com
Router(config)#username inu Password inussh123
Router(config)#
If you don’t, just follow and generate the encryption keys for securing the
ssh session.
Router(config)#crypto key generate rsa
How many bits in the modulus [512]: 1024
% Generating 1024 bit RSA keys, keys will be non-exportable…[OK]
9/15/2023 Network Devices Configurtion ppt. 47
Cont..
 Now enable SSH version 2, set time out duration and login attempt
time on the router.

Remember this message if you going to use ssh version 2 “Please

create RSA keys (of at least 768 bits size) to enable SSH v2.”

Router(config)#ip ssh version 2

Router(config)#ip ssh time-out 50

Router(config)#ip ssh authentication-retries 4

9/15/2023 Network Devices Configurtion ppt. 48
Cont..
Enable vty lines and configure access protocols.

Router(config)#line vty 0

Router(config-line)#transport input ssh

Router(config-line)#password inu123

Router(config-line)#login

Router(config-line)#motd-banner

Router(config-line)#exit

Router(config)#
9/15/2023 Network Devices Configurtion ppt. 49
Testing SSH Connectivity

PC>ssh -l inu 192.168.0.1

Open

Password:

Router>enable

Password:

Router#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Router(config)#

Connection established successfully and the connection is secured with Secure Shell.

9/15/2023 Network Devices Configurtion ppt. 50

 Troubleshooting: TCP/IP Utilities
• Ping: To test if your network connection is complete between two
computers, you can use the Packet Internet Groper, better known as ping

• Tracert: informs us of the route and number of hops the packet of

data took to arrive at its destination.

• Ipconfig/all: This command is useful on systems running DHCP,

allowing users to determine which TCP/IP configuration values have
been configured by DHCP.

• Nslookup: It can be a useful troubleshooting tool if the DNS server is not

working correctly.
9/15/2023 Network Devices Configurtion ppt. 51
• Netstat: The netstat command can be used to display the
currently active TCP connections on a computer

• Route: The route command can be used to display and modify

the routing table of a computer.

• Syslog: is an excellent tool for system monitoring and is

almost always included in your distribution

9/15/2023 Network Devices Configurtion ppt. 52

Places to store and display syslog messages

Place to store syslog messages Command to use

Internal buffer (inside a switch or logging buffered [size]

router)
Syslog server Logging

Flash memory logging file flash:filename

Nonconsole terminal (VTY terminal monitor

connection…)
Console line logging console

9/15/2023 Network Devices Configurtion ppt. 53

 Cont.
• seq no:timestamp%FACILTY-SEVERITY-MNEMONIC: message text
• Seq no: a sequence number only if the service sequence-numbers global
configuration command is configured
• Timestamp: Date and time of the message or event. This information appears only
if the service timestamps global configuration command is configured.
• FACILITY: This tells the protocol, module, or process that generated the message.
• Some examples are SYS for the operating system, IF for an interface…
• SEVERITY: A number from 0 to 7 designating the importance of the action
reported.
• MNEMONIC: A code that identifies the action reported.
9/15/2023 Network Devices Configurtion ppt. 54
Level Keyword
0 emergencies
1 alerts
2 critical
3 errors
4 warnings
5 notification
6 informational
79/15/2023 debugging
Network Devices Configurtion ppt.
Description
System is unusable
Immediate action is needed
Critical conditions exist
Error conditions exist
Warning conditions exist
Normal, but significant, conditions
exist
Informational messages
Debugging messages
55
9/15/2023 Network Devices Configurtion ppt. 56