Configurazione di un router da riga di comando

Transcript

1 Configurazione di un router da riga di comando Competenze sviluppate: Saper configurare le interfacce di rete Saper configurare il DHCP Saper creare le Access List ed applicarle alle interfacce Saper configurare il NAT statico Ambiente di simulazione: CISCO PACKET TRACER Informazioni per la consegna: Salva il documento in formato PDF con il titolo: Log_ _LABSIS_4Ci_<COGNOME> Ogni punto registrato deve essere indicato col corrispondente item della guida. Salva il progetto packet tracer col me DHCP_NAT_ACL. Crea il file LABSIS_19_02_15(Cogme).zip contenente i due file sopra indicati. Consegna il file su AMPLIO. Traccia: Le parti in nero so da eseguire, le parti rosse so da sviluppare, le parti in blu so da documentare 1. Interconnettere due Switched LAN attraverso un router che possiede 2 interfacce fast ethernet e un interfaccia seriale. 2. Le LAN so configurate con indirizzi di rete: /24 e / La prima LAN è collocata alla sinistra del router e si chiamerà INTERNAL, mentre la seconda è alla destra del router ed è minata EXTERNAL 4. Disporre i componenti: per cominciare 1 host per ogni rete 5. Equipaggiare il router con l hardware indicato 6. Collegare i componenti 7. Fare u screen shot dello schema di connessione 8. Configurazione del router tramite CLI Router>? Exec commands: <1-99> Session number to resume connect Open a terminal connection disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands exit Exit from the EXEC logout Exit from the EXEC ping Send echo messages resume Resume an active network connection show Show running system information ssh Open a secure shell client connection telnet Open a telnet connection terminal Set terminal line parameters traceroute Trace route to destination 1

2 9. Entrare in modalità privilegiata Router>enable Router#? <1-99> Session number to resume auto Exec level Automation clear Reset functions clock Manage the system clock configure Enter configuration mode connect Open a terminal connection copy Copy from one file to ather debug Debugging functions (see also 'undebug') delete Delete a file dir List files on a filesystem disable Turn off privileged commands disconnect Disconnect an existing network connection enable Turn on privileged commands erase Erase a filesystem exit Exit from the EXEC logout Exit from the EXEC mkdir Create new directory more Display the contents of a file Disable debugging informations ping Send echo messages reload Halt and perform a cold restart resume Resume an active network connection rmdir Remove existing directory send Send a message to other tty lines setup Run the SETUP command facility show Show running system information ssh Open a secure shell client connection telnet Open a telnet connection terminal Set terminal line parameters traceroute Trace route to destination undebug Disable debugging functions (see also 'debug') write Write running configuration to memory, network, or terminal Router# 10. Entrare in modalità di configurazione Router# configure terminal Enter configuration commands, one per line. End with CNTL/Z. Router(config)#? Configure commands: aaa Authentication, Authorization and Accounting. access-list Add an access list entry banner Define a login banner boot Modify system boot parameters cdp Global CDP configuration subcommands class-map Configure Class Map clock Configure time-of-day clock config-register Define the configuration register crypto Encryption module do To run exec commands in config mode enable Modify enable password parameters end Exit from configure mode exit Exit from configure mode hostname Set system's network name interface Select an interface to configure ip Global IP configuration subcommands line Configure a terminal line logging Modify message logging facilities Negate a command or set its defaults ntp Configure NTP queue-list Build a custom queue list radius-server Modify Radius query parameters router Enable a routing process service Modify use of network based services 2

3 tacacs-server username Router(config)# Modify TACACS query parameters Establish User Name Authentication 11. Assegnare al router l hostname Gateway Router(config)#hostname Gateway 12. Configurare le interfacce interface fastethernet 0/0 Gateway(config-if)#? arp Set arp type (arpa, probe, snap) or timeout bandwidth Set bandwidth informational parameter cdp CDP interface subcommands crypto Encryption/Decryption commands custom-queue-list Assign a custom queue list to an interface delay Specify interface throughput delay description Interface specific description duplex Configure duplex operation. exit Exit from interface configuration mode fair-queue Enable Fair Queuing on an Interface hold-queue Set hold queue depth ip Interface Internet Protocol config commands mac-address Manually set interface MAC address mtu Set the interface Maximum Transmission Unit (MTU) Negate a command or set its defaults priority-group Assign a priority group to an interface service-policy Configure QoS Service Policy shutdown Shutdown the selected interface speed Configure speed operation. standby HSRP interface configuration commands tx-ring-limit Configure PA level transmit ring limit zone-member Apply zone name Gateway(config-if)# Gateway(config-if)# ip? access-group Specify access control for packets address Set the IP address of an interface hello-interval Configures IP-EIGRP hello interval helper-address Specify a destination address for UDP broadcasts inspect Apply inspect name ips Create IPS rule mtu Set IP Maximum Transmission Unit nat NAT interface commands ospf OSPF interface commands proxy-arp Enable proxy ARP split-horizon Perform split horizon summary-address Perform address summarization virtual-reassembly Virtual Reassembly Gateway(config-if)# ip address Gateway(config-if)# shutdown Gateway(config-if)# exit interface fastethernet 1/0 Gateway(config-if)# Gateway(config-if)# ip address Gateway(config-if)# shutdown Gateway(config-if)# exit 3

4 13. Configurare le caratteristiche generali del router Impostare il Pool di indirizzi DHCP chiamato INTERNAL per la rete interna con le seguenti caratteristiche: default-router , network /24 ip? access-list Named access-list default-network Flags networks as candidates for default routes dhcp Configure DHCP server and relay parameters domain IP DNS Resolver domain-lookup Enable IP Domain Name System hostname translation domain-name Define the default domain name forward-protocol Controls forwarding of physical and directed IP broadcasts ftp FTP configuration commands host Add an entry to the ip hostname table name-server Specify address of name server to use nat NAT configuration commands route Establish static routes ssh Configure ssh options tcp Global TCP parameters ip dhcp? excluded-address Prevent DHCP from assigning certain addresses pool Configure DHCP address pools ip dhcp ip dhcp pool? WORD Pool name ip dhcp pool DYNAMIC Gateway(dhcp-config)#? default-router Default routers dns-server Set name server exit Exit from DHCP pool configuration mode network Network number and mask Negate a command or set its defaults option Raw DHCP options Gateway(dhcp-config)#default-router Gateway(dhcp-config)#network Gateway(dhcp-config)#exit 14. Escludere dall assegnazione dinamica i primi 10 indirizzi IP ip dhcp excluded-address Verificare che sull host della rete interna funzioni l assegnamento dinamico DHCP 16. Impostare il Pool di indirizzi DHCP chiamato EXTERNAL per la rete sterna con le seguenti caratteristiche: default-router , network /24 escludendo i primi 128 indirizzi ip dhcp pool EXTERNAL Gateway(dhcp-config)#default-router Gateway(dhcp-config)#network Gateway(dhcp-config)#exit ip dhcp excluded-address? A.B.C.D Low IP address ip dhcp excluded-address Salvare la configurazione sulla memoria NVRAM do copy run start 4

5 17. Visualizzare la configurazione del router exit Gateway#show run 18. Incollare la visualizzazione dello show run 19. Verificare che sull host della rete esterna funzioni l assegnamento dinamico DHCP 20. Aggiungere in ciascuna rete altri 9 host con configurazione dinamica e 1 con configurazione statica avente l indirizzo successivo a quello del router. 21. Fai u screen shot del nuovo schema IMPOSTARE IL NAT STATICO 22. Assegnare all host statico di una rete un indirizzo statico dell altra rete: e Gateway#configure terminal ip nat? inside Inside address translation outside Outside address translation pool Define pool of addresses ip nat ip nat inside source? list Specify access list describing local addresses static Specify static local->global mapping ip nat inside source static ip nat outside source static Assegnare il ruolo delle interfacce nel natting: fa 0/0 inside; fa 1/0 outside interface fastethernet 0/0 Gateway(config-if)#ip nat? inside Inside interface for address translation outside Outside interface for address translation Gateway(config-if)#ip nat inside Gateway(config-if)#exit interface fastethernet 1/0 Gateway(config-if)#ip nat outside Gateway(config-if)#exit 24. Salvare la configurazione sulla memoria NVRAM do copy run start 25. Inviare un Ping dall host all host Screen shot e descrivi quello che avviene 27. Inviare un Ping dall host all host Screen shot e descrivi quello che avviene 29. Cosa succede se si invia un Ping dall host all host ? 5

6 DEFINIRE UN ACCESS LIST STANDARD 30. Creare l access list 1 in cui si nega il permesso all host access-list 1? deny Specify packets to reject permit Specify packets to forward remark Access list entry comment access-list 1 deny host access-list 1 permit any 31. Visualizzare le access list presenti nel router do show access-list Standard IP access list 1 deny host permit any 32. Catturare il contenuto della access-list 33. Applicare l access list ai pacchetti in ingresso sull interfaccia fa 0/0 interface fastethernet 1/0 Gateway(config-if)#ip access-group 1? in inbound packets out outbound packets Gateway(config-if)#ip access-group 1 in Gateway(config-if)#Gateway(config-if)# 34. Verificare se il filtraggio avviene correttamente 35. Cosa succede se un host ester invia un ping all host ? 6