1

Cisco IOS File System and
Devices

2

Managing Cisco IOS Images

3

bin [10084760 bytes used. 6692456 available. Verifying Memory Image Filenames wg_ro_a#show flash System flash directory: File Length Name/status 1 10084696 c2500-js-l_120-3. 16777216 total] 16384K bytes of processor board System flash (Read ONLY) 4 .

Creating a Software Image Backup 5 .

Upgrading the Image from the Network 6 .

LAB Install TFTP server on a virtual machine Connect the machine to a Router To see the content of Flash file #show Flash To copy flash #Copy flash tftp supply IP address of TFTP Server and file name To copy running-configuration #copy running-config tftp supply IP address of TFTP Server and file name 7 .

Resolving Host Names  To use a hostname rather than an IP address to connect to a remote device  Two ways to resolve hostnames to IP addresses – building a host table on each router – building a Domain Name System (DNS) server 8 .

Resolving Host Names  Building a host table  ip host host_name ip_address R1(config)#ip host com1 10.2  To view table R1#show hosts  To verify that the host table resolves names.0. 9 .0.0. try ping hostnames at a router prompt.0.1 R1(config)#ip host com2 10.

Password Recovery Normal Boot Sequence POST Bootstrap IOS Startup Running This setup is decided by configuration register value 10 .

and 1 are on. 8. To ignore NVRAM the 6th bit should be made ON When the 6th bit is turned on the value will be 2142 11 . Configuration Register Decimal 8 4 2 1 8 4 2 1 8 4 2 1 8 4 2 1 15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0 Bit Default 0 0 1 0 0 0 0 1 0 0 0 0 0 0 1 0 2102 This means that bits 13.

Password Recovery Show version will give configuration register value Password is stored in NVRAM To by pass NVRAM during boot sequence we need to change the configuration register value To change the CR values press Ctr+Break and go to ROM monitor mode 12 .

Password Recovery Router 2500  o/r 0x2142 i Router 2600  confreg 0x2142 >reset 13 .

14 .

WAN vs LAN Distance between WAN and LAN WAN speed is less WAN is leased from Service provider 15 .

 A network administrator designing a remote network must weight issues concerning users needs such as bandwidth and cost of the variable available technologies. 16 . Remote Access Overview  A WAN is a data communications network covering a relatively broad geographical area.

WAN Overview Service Provider  WANs connect sites  Connection requirements vary depending on user requirements and cost 17 .

 A copper or fiber cable connects the CPE to the service provider’s nearest exchange or central office (CO). operated and managed by the customer. 18 . they are owned. or "last-mile". CPE (Customer Premises Equipment) are equipments located at the customer’s site. A central office (CO) is sometimes referred to as a point of presence (POP)  This cabling is often called the local loop. WAN technology/terminology  Devices on the subscriber premises are called customer premises equipment (CPE).  The subscriber owns the CPE or leases the CPE from the service provider.

and local loop begins. 19 .WAN technology/terminology A demarcation point is where customer premises equipment (CPE) ends. The local loop is the cabling from demarcation point to Central Office (CO).

 The DCE primarily provides an interface for the DTE into the communication link on the WAN cloud.35.  The customer devices that pass the data to the DCE are called data terminal equipment (DTE). 20 . such as V. These protocols establish the codes and electrical parameters the devices use to communicate with each other. WAN technology/terminology  Devices that put data on the local loop are called data communications equipment (DCE). The DTE/DCE interface uses various physical layer protocols.

At the receiving end the analog signals are returned to their digital form. or demodulated 21 . The modulated signal can be heard as a series of whistles by turning on the internal modem speaker. The digital signals are superimposed on an analog voice signal that is modulated for transmission.WAN Devices Modems transmit data over voice-grade telephone lines by modulating and demodulating the signal.

Data Link Encapsulation  The data link layer protocols define how data is encapsulated for transmission to remote sites. such as ISDN.  These protocols use the same basic framing mechanism. WANs . high-level data link control (HDLC) 22 . and the mechanisms for transferring the resulting frames. Frame Relay or Asynchronous Transfer Mode (ATM).  A variety of different technologies are used.

25 leased from service provider Switched • Frame Relay  Carries different traffic • POTS •ATM (voice. E3 • Dial-up modems • DSL Switched • Cable modems • SONET • Wireless Packet Switched  Covers a relative broad area  Use transmission facilities Circuit • X. WAN Technologies Overview Dedicated Analog • T1. T3. E1. video and data) • ISDN 23 .

368 Mbps 24 .544 Mbps E1 = 2. and E series in Europe Uses time division multiplexing and assign time slots for transmissions – T1 = 1.S. Dedicated Digital Services Dedicated Digital Services provide full-time connectivity through a point-to-point link T series in U.736 Mbps E3 = 34.048 Mbps – T3 = 44.

25 .  All forms of DSL service are categorized as ADSL or SDSL and there are several varieties of each type.  The two basic types of DSL technologies are asymmetric (ADSL) and symmetric (SDSL).  Asymmetric service provides higher download or downstream bandwidth to the user than upload bandwidth. Digital Subscriber Lines  Digital Subscriber Line (DSL) technology is a broadband technology that uses existing twisted-pair telephone lines to transport high- bandwidth data to service subscribers.  Symmetric service provides the same capacity in both directions.

there is a digital-to-analogue conversion at the client side. there is a analogue-to-digital conversion at the client side. Analog Services • Dial-up Modems (switched analog) • Standard that can provides 56 kbps download speed and 33. • With the upload path.6 kbps upload speed. • With the download path. 26 .

 A cable modem will typically have two connections because a splitter delivers the TV bands to TV set and the internet access bands to PC via a cable box  The splitter delivers the TV bands to TV set and the internet access bands to PC via a cable box 27 .Cable Modems (Shared Analog)  Cable TV provides residential premises with a coaxial cable that has a bandwidth of 750MHz  The bandwidth is divided into 6 MHz band using FDM for each TV channel  A "Cable Modem" is a device that allows high-speed data access (Internet) via cable TV network.

Wireless  Terrestrial Bandwidths typically in the 11 Mbps range Cost is relatively low Line-of-sight is usually required Usage is moderate  Satellite Can serve mobile users and remote users Usage is widespread Cost is very high 28 .

bandwidth = 128 kbps for BRI (Basic Rate D Interface) B  2 B channels @ 64kps and 1 D channel @ 16kps  B channels are voice/data channels. D for signaling 29 . Circuit Switched Services  Integrated Services Digital Network (ISDN)  Historically important--first dial-up digital service B  Max.

Integrated Services Digital Network 30 .

No data can transfer before the end-to-end connection is established. allowing DTE networks to communicate at any time with no setup procedures before transmitting data.  Circuit switching Sets up line like a phone call. 32 . through the DCE switch. WAN Connection Types  Leased lines It is a pre-established WAN communications path from the CPE. to the CPE of the remote site.

packet switching can save you a lot of money. Frame Relay and X. However. if you have constant data transfers. As long as you are not constantly transmitting data and are instead using bursty data transfers. WAN Connection Types • Packet switching WAN switching method that allows you to share bandwidth with other companies to save money.25 are packet switching technologies. then you will need to get a leased line. 33 .

Defining WAN Encapsulation Protocols  Each WAN connection uses an encapsulation protocol to encapsulate traffic while it crossing the WAN link.  The choice of the encapsulation protocol depends on the underlying WAN technology and the communicating equipment. 34 .

Defining WAN Encapsulation Protocols  Typical WAN encapsulation types include the following: Point-to-Point Protocol (PPP) Serial Line Internet Protocol (SLIP) High-Level Data Link Control Protocol (HDLC) X.25 / Link Access Procedure Balanced (LAPB) Frame Relay Asynchronous Transfer Mode (ATM) 35 .

 Cost Making a compromise between the traffic you need to transfer and the type of service with the available cost that will suit you. 36 .  Bandwidth Determining usage over the WAN is important to evaluate the most cost-effective WAN service.Determining the WAN Type to Use  Availability Each type of service may be available in certain geographical areas.

ISDN – BRI 128 Kbps ISDN – PRI E1 / T1 Leased Line / Frame Relay E3/T3 37 . Max. WAN Speeds for WAN Connections Maximum WAN Type Speed Asynchronous Dial-Up 56-64 Kbps X.25.

ATM Packet-switched Service Provider PPP. PPP. HDLC Circuit-switched Telephone Company 38 . Typical WAN Encapsulation Protocols: Layer 2 HDLC.25. SLIP. SLIP Leased Line X. Frame Relay.

Frame Relay. PPP • Multipoint .HDLC. X.25 and ATM • HDLC – Proprietary – cisco device default • PPP . WAN Protocols LAN E0 S0 S0 Network Datalink WAN Physical • Point to Point .Open 39 .

HDLC Command Router(config-if)#encapsulation hdlc • Enable hdlc encapsulation • HDLC is the default encapsulation on synchronous serial interfaces 41 .

An Overview of PPP PPP Encapsulation Link setup and control using LCP in PPP PPP is open standard HDLC is only for encapsulation PPP provides encapsulation and authentication PPP is made up of LCP and NCP LCP is for link control and NCP for multiple protocol support and call back 42 .

Compression reproduce data at destination Error Monitor data dropped on link Detection Avoid frame looping Multilink Load balancing across Multilink multiple links Protocol (MP) 43 . PPP LCP Configuration Options Feature How It Operates Protocol Require a password PAP Authentication Perform Challenge Handshake CHAP Compress data at source.

PPP Authentication Overview Dialup or Circuit-Switched Network PPP Session Establishment 1 Link Establishment Phase 2 Optional Authentication Phase 3 Network-Layer Protocol Phase Two PPP authentication protocols: PAP and CHAP 44 .

Selecting a PPP Authentication Protocol Remote Router PAP Central-Site Router (SantaCruz) 2-Way Handshake (HQ) “santacruz. boardwalk” Accept/Reject Hostname: santacruz username santacruz Password: boardwalk password boardwalk • Passwords sent in clear text 45 .

) CHAP Remote Router Central-Site Router (SantaCruz) 3-Way Handshake (HQ) Challenge Response Hostname: santacruz Accept/Reject username santacruz Password: boardwalk password boardwalk •Use “secret” known only to authenticator and peer 46 . Selecting a PPP Authentication Protocol (cont.

) Enabling PPP Enabling PPP   ppp encapsulation ppp encapsulation Enabling PPP Authentication Enabling PPP Authentication  hostname  hostname  username / password  username / password  ppp authentication  ppp authentication 47 .) call. Configuring PPP and Authentication Overview Verify who you are. Service Provider Authenticating Router Router to Be Authenticated (The router that received the (The router that initiated the call.

Configuring PPP Router(config-if)#encapsulation ppp • Enable PPP encapsulation 48 .

Configuring PPP Authentication Router(config)#hostname name • Assigns a host name to your router Router(config)#username name password password • Identifies the username and password of authenticating router 49 .

Configuring PPP Authentication
(cont.)

Router(config-if)#ppp authentication
{chap | chap pap | pap chap | pap}

• Enables PAP and/or CHAP authentication

50

Configuring CHAP Example

R1 PSTN/ISDN R2

• hostname R1 hostname R2
• username R2 password cisco username R1 password cisco
• ! !
• int serial 0 int serial 0
• ip address 10.0.1.1 255.255.255.0 ip address 10.0.1.2 255.255.255.0
• encapsulation ppp encapsulation ppp
• ppp authentication CHAP ppp authentication CHAP

51

Verifying HDLC and PPP
Encapsulation Configuration
Router#show interface s0
Serial0 is up, line protocol is up
Hardware is HD64570
Internet address is 10.140.1.2/24
MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255
Encapsulation PPP, loopback not set, keepalive set (10 sec)
LCP Open
Open: IPCP, CDPCP
Last input 00:00:05, output 00:00:05, output hang never
Last clearing of "show interface" counters never
Queueing strategy: fifo
Output queue 0/40, 0 drops; input queue 0/75, 0 drops
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
38021 packets input, 5656110 bytes, 0 no buffer
Received 23488 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
38097 packets output, 2135697 bytes, 0 underruns
0 output errors, 0 collisions, 6045 interface resets
0 output buffer failures, 0 output buffers swapped out
482 carrier transitions
DCD=up DSR=up DTR=up RTS=up CTS=up
52

changed state to up •4d20h: Se0 PPP: Treating connection as a dedicated line •4d20h: Se0 PPP: Phase is AUTHENTICATING. by both •4d20h: Se0 CHAP: O CHALLENGE id 2 len 28 from ”left" •4d20h: Se0 CHAP: I CHALLENGE id 3 len 28 from ”right" •4d20h: Se0 CHAP: O RESPONSE id 3 len 28 from ”left" •4d20h: Se0 CHAP: I RESPONSE id 2 len 28 from ”right" •4d20h: Se0 CHAP: O SUCCESS id 2 len 4 •4d20h: Se0 CHAP: I SUCCESS id 3 len 4 •4d20h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0. changed state to up debug ppp authentication debug ppp authentication successful CHAP output 53 .Verifying PPP Authentication with the debug ppp authentication Command R1 Service R2 Provider •4d20h: %LINK-3-UPDOWN: Interface Serial0.

data. video 54 . What is ISDN? Small office Digital PBX Provider Telecommuter network Home office Central site Voice.

Integrated Services Digital Network  Telephone services -> Telecommunication services  Used for voice. Why ISDN?  ISDN . data and video 55 .

PPP) D 16/64 kbps Signaling information BRI D 2B PRI D 23 or 30B • BRI and PRI are used globally for ISDN 56 . ISDN Access Options Channel Capacity Mostly Used for B 64 kbps Circuit-switched data (HDLC.

Interfaces and Devices ISDN Ready TE1 BRI Port I S D 4W 2W NT1 N S/T interface S U interface w i TE2 TA t c Analog devices: After connecting to TA it becomes TE1 h phone. Serial port 58 .

Interfaces and Devices Function Group – A set of functions implemented by a device or software Reference Point – The interface between two function group 59 .

Reference Points 60 .

1 10.168.2 E0 192. LAB-ISDN ISDN Switch R1 R2 BRI BRI E0 10.0.0.1 255.0.0.0.2 name R2 20 R1(config-if)#PPP authentication CHAP R1(config-if)#no shut R1(config-if)#no shut R1(config-if)#dialer idle-timeout 100 Static Routes or default route R1(config)#ip route 0.2 192.0.0.168.0.0.2 R1(config)#isdn switch-type basic-net3 61 .1.168.1 192.0 10.0.0.0.0.2 Router(config)#hostname R1 Access List R1(config)#username R2 password cisco R1(config)#dialer-list 1 protocol ip permit R1(config-if)#int bri 0 R1(config)#int bri 0 R1(config-if)# ip address 10.0 0.0.1 192.1.0 R1(config-if)# dialer–group 1 R1(config-if)#enacapsulation ppp R1(config-if)#dialer map ip 10.0.168.0.0.0.

ISDN DDR configuration Commands Command Description iproute Global command that configure static route or default route username name name password Global command that configure CHAP username and secret password access-list Global command that creates ACL’s to define a subset of traffic as interesting dialer-list 1 protocol IP Global command that creates a dialer list that makes all IP traffic interesting or reference to ACL for subset dialer–group 1 Interface subcommand that references dialer list to define what is interesting dialer idle-timeout 100 Interface subcommand that settles idle time out values dialer string number Interface subcommand that define dial numbers int bri 0 Global command that selects BRI interface 62 .

Packet Switched Services  X. it has an inherent delay (unlike Frame Relay) and requires large.25 stores the whole frame to error check it before forwarding it on to the destination.25 (Connection-oriented)  Reliable--X. expensive memory buffering capabilities.25  Used mostly to forward LAN IP packets 63 .25 has been extensively debugged and is now very stable--literally no errors in modern X.  Frame Relay (Connectionless)  More efficient and much faster than X.25 networks  Store & Forward--Since X.

Frame Relay Basics • FR is WAN layer2 protocol • FR developed in 1984. its a faster packet switching technology • In 1990 FR consortium was developed and extension added 64 .

933A. ANSI.Cisco. 16-1007  Committed Information Rate or CIR . Terminology R1 FR Network R2 Frame Relay Network End Device Interface Device DCE – Dedicated FR Switches. can be one or multiple Encapsulate Data Access Line Trunk Line Virtual Circuit – an end to end connection between interface device . 65 .agreed-upon bandwidth  Frame Relay there are two encapsulation types: Cisco and IETF  Local Management Interface (LMI) is a signaling standard used between your router and the first Frame Relay switch i . and Q.PVC or SVC  Data Link connection Identifiers (DLCI) number is the identification for VC.

10/29 R2 S0 100 200 S0 E0 E0 192.1/24 192.168.2/24 192.255.3.2.2/24 R1 Frame Relay Switch Router#config t Router#config t Router(config)#hostname R1 Router(config)#hostname FRSwitch R1(config)# int s 0 FRSwitch(config)# frame-relay switching R1(config-if)#ip address 192.168.168.168.3.255.1/24 192.168.1.3.168.9 255.3.9/29 DCE DCE 192.168.Frame Relay FR Switch R1 192. LAB .248 FRSwitch(config)# int s 1/0 R1(config-if)#enacapsulation frame-relay FRSwitch(config-if)#enacapsulation frame-relay R1(config-if)# frame-relay intf-type DTE FRSwitch(config-if)# frame-relay intf-type DCE R1(config-if)# frame-relay interface-dlci 100 FRSwitch(config-if)# clock rate 64000 FRSwitch(config-if)# frame-relay route 100 int serial 1/1 200 R1(config-if-dlci)# exit FRSwitch(config-if)#no shut R1(config-if)#framerelay map ip 192.2.168.10 100 R1(config-if)#no shut 67 .1.