• • Table of Contents Index Cisco Router Configuration, Second Edition By Allan Leinwand, Bruce Pinsky CCIE #1045 Publisher : Cisco Press Pub Date : December 20, 2000 ISBN : 1-57870-241-0 Pages : 360 Slots : 1 The objective of this book is to help you, the novice Cisco users, with the basic administration of your internetworking devices Using straightforward case studies and practical examples, Cisco Router Configuration, 2E teaches IOS fundamentals for configuring, operating, and maintaining internetworking devices Cisco Router Configuration, 2E provides an overview of Cisco IOS software It describes basic information on Cisco devices and device interfaces (Ethernet, Token Ring, FDDI, Frame Relay, ATM) The basics of IP, IPX, and AppleTalk are explained, and the book shows how to use Cisco IOS software to configure addresses, routes, and routing protocols within these three protocols Finally, Cisco Router Configuration, 2E provides an elaborate example of an entire network setup with complete Cisco IOS configurations All information in the second edition will include Cisco IOS 12.0 syntax • • Table of Contents Index Cisco Router Configuration, Second Edition By Allan Leinwand, Bruce Pinsky CCIE #1045 Publisher : Cisco Press Pub Date : December 20, 2000 ISBN : 1-57870-241-0 Pages : 360 Slots : 1 Copyright About the Authors About the Technical Reviewers Acknowledgments Introduction Objectives Audience Organization A Brief History of Cisco Systems Book Features and Elements Chapter 1 Getting Started in Internetworking The OSI Reference Model Types of Internetworking Devices An Internetwork Example References Summary Chapter 2 The Basics of Device Configuration Preliminary Configuration Steps References Chapter 3 The Basics of Device Interfaces Basic Interface Configuration Local-Area Network Technologies Wide-Area Network and Dialup Network Technologies References Summary Chapter 4 TCP/IP Basics TCP/IP Addressing Configuring IP Addresses IP Routing Configuration Viewing Dynamic Routing Protocol Information Configuring Basic IP Dialup Services Configuring Other IP Options References Configuring IP Routing Protocols Configuring IP Filtering via Access Lists Verifying IP Connectivity and Troubleshooting Summary Chapter 5 AppleTalk Basics AppleTalk Addressing and Address Structure Configuring AppleTalk Addresses AppleTalk Routing Configuration Configuring AppleTalk Filtering via Access Lists Configuring Basic AppleTalk Dialup Services Summary Configuring AppleTalk Routing Protocols Verifying AppleTalk Connectivity and Troubleshooting References Chapter 6 IPX Basics IPX Addressing and Address Structure Configuring IPX Addresses IPX Routing Configuration Configuring Static Routing Configuring IPX Routing Protocols Configuring IPX Routing Commands Verifying IPX Routing Configuration SAP SAP Filters Configuring NLSP Configuring IPX Filtering via Access Lists Verifying IPX Connectivity and Troubleshooting Summary Configuring IPX RIP Configuring IPX EIGRP Configuring Basic IPX Dialup Services Configuring IPX Type 20 Packet Forwarding References Chapter 7 Basic Administrative and Management Issues Basic Access Control Basic Attack Prevention Basic Logging Basic Time Control References Basic Network Management Summary Chapter 8 Comprehensive IOS Configuration for the ZIP Network The Kuala-Lumpur Router The SF-1 Router The SF-2 Router The SF-Core-2 Router The Seoul-1 Router The Seoul-2 Router The SingISDN Access Server Summary The SF-Core-1 Router The San-Jose Router The Singapore Router The Sing2511 Access Server Index Copyright Copyright© 2001 Cisco Press Cisco Press logo is a trademark of Cisco Systems, Inc All rights reserved No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review Library of Congress Cataloging-in-Publication Number: 00-109754 Printed in the United States of America First Printing December 2000 1 2 3 4 5 6 7 8 9 0 04 03 02 01 Trademark Acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark Warning and Disclaimer This book is designed to provide information about Cisco router configuration Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied The information is provided on an "as is" basis The author, Cisco Press, and Cisco Systems, Inc., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc Feedback Information At Cisco Press, our goal is to create in-depth technical books of the highest quality and value Each book is crafted with care and precision, undergoing rigorous development that involves the unique expertise of members from the professional technical community Readers' feedback is a natural continuation of this process If you have any comments regarding how we could improve the quality of this book or otherwise alter it to better suit your needs, you can contact us through e-mail at ciscopress@mcp.com Please make sure to include the book title and ISBN in your message We greatly appreciate your assistance Credits Publisher John Wait Editor-in-Chief John Kane Cisco Systems Program Manager Bob Anstey Managing Editor Patrick Kanouse Acquisitions Editor Tracy Hughes Senior Editor Jennifer Chisholm Copy Editor Krista Hansing Technical Editors Henry Benjamin Kevin Burgess Andre' Paree-Huff Dave Sumter Michael Truett Cover Designer Louisa Klucznick Compositor Steve Gifford Indexer Tim Wright Proofreaders Chrissy Andry Gayle Johnson Dedications Allan Leinwand would like to dedicate this book to his family and friends, who have provided continual support, suggestions, encouragement, and insights throughout the writing of this book Bruce Pinsky would like to thank all his friends and family, who have provided their support in helping to make this book a reality An extra special thank you goes to his wife, Paula, and sons, Eric and Kyle, for their tireless support during the many nights and weekends dedicated to the completion of this text About the Authors Allan Leinwand is the Chief Technology Officer and Vice President of Engineering at Telegis Networks, Inc Previously, as Chief Technology Officer and Vice President of Engineering for Digital Island, Inc., he was responsible for the technical direction of the company's global network and content distribution strategy Before Digital Island, he was a Consulting Engineering Manager at Cisco Systems, Inc., responsible for the global network design of customer networks Allan received his BS in Computer Science at the University of Colorado at Boulder in 1988, and has been working in internetworking technology and solutions for large corporations since that time He teaches graduate computer networking courses for the University of California, Berkeley; has published many papers on network management and network design; and is the co- author of the Addison-Wesley text Network Management: A Practical Perspective, Second Edition Bruce Pinsky, CCIE #1045, is the Vice President of Product Engineering and Network Infrastructure at Telegis Networks, Inc Previously, as Chief Information Officer, Vice President of Solutions Engineering, and Chief Network Strategist of Digital Island, Inc., he was responsible for the direction and deployment of corporate technology infrastructure and advanced technology research Before Digital Island, Bruce was a Senior Internetwork Support Technologist at Cisco Systems, Inc., and was responsible for the escalation of complex customer technical issues He received his BS in Computer Science at California State University, Hayward, in 1988, and he has been working in internetworking technology and systems integration for large corporations and consulting firms before and since that time One of the original Cisco Certified Internetwork Engineers, Bruce has expertise in such topics as network troubleshooting and protocol analysis, network design and configuration, and workstation and server-based operating systems He routinely teaches courses on network configuration, design, and troubleshooting, and is co-inventor of patented routing technology About the Technical Reviewers Henry Benjamin, CCIE, CCNA, CCDA, B Eng., is a Cisco Certified Internetwork Expert and an IT network engineer for Cisco Systems, Inc He has more than 10 years of experience in Cisco networks, including planning, designing, and implementing large IP networks running IGRP, EIGRP, and OSPF In the past year, Henry has focused on architectural design and implementation in Cisco internal networks across Australia and the Asia/Pacific region He is the author of a book dedicated to passing the CCIE written exam and has helped with many other titles related to Cisco IOS Henry holds a Bachelor of Engineering Degree from Sydney University This review is dedicated to his sick mum Kevin Burgess has been doing network design, analysis, and maintenance for the past 10 years As a Network Engineer with EDS for the past five years, he has worked on various projects across Canada Kevin holds certifications from Novell and Cisco and is currently working on his CCIE André Paree-Huff, CCNP, MCSE+I, ASE, A+, Network+, I-Network+, has been working in the computer field for more than 8 years He is currently working for Compaq Computer Corporation as a Network Support Engineer, Level III, for the North America Customer Support Center in Colorado Springs, Colorado André handles troubleshooting of network hardware, specializing in Layers 2 and 3 of the OSI model Andr é has co- authored four network-related technical manuals and has been a technical editor on many others He is currently working toward his CCIE Dave Sumter, CCIE #4942, CCDP, has been in the networking industry for close to five years and has been concentrating solely on Cisco solutions for the last three years He works for Cisco Systems, Inc., in South Africa Dave's current duties involve the design of large-scale campus and WAN solutions for corporate and government clients in South Africa Other duties involve the ongoing training of Cisco partners and participation in the examination of CCIE candidates at the CCIE routing and switching lab in South Africa Michael Truett, CCNP, is a network engineer for a large organization specializing in VoIP He is currently working on his CCDP and CCIE His strength lies in the area of network design, implementation, and troubleshooting for large networks on many different media types, including Frame Relay and satellite In his spare time, Michael also teaches several classes on Cisco routers and switches [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] San Jose router (ZIP network) configuration commands 2nd 3rd SAP filters 2nd 3rd nearest server SAP (service access point SAP (Service Advertisement Protocol) 2nd 3rd 4th SAP filters 2nd 3rd SAP table viewing saving startup configuration scalability AppleTalk networks Phase 2 scripting language System Configuration Dialog 2nd SDLC (Synchronous Data Link Control) 2nd SDSL (Synchronous DSL) security AAA enabling 2nd AAA> enabling access control protocols 2nd access lists configuring 2nd asynchronous dialup configuring 2nd console port 2nd 3rd passwords enable secret SSH configuring 2nd 3rd SSH> viewing active sessions SSS TCP intercept unicast RPF 2nd 3rd 4th 5th vty lines 2nd seed routers discovery mode segments AppleTalk nonextended zones AppleTalk addresses Etheretn selecting dynamic routing protocols 2nd 3rd IOS image transfer methods media types 2nd protocols (System Configuration dialog) Seoul-1 router (ZIP network) configuration commands 2nd 3rd 4th Seoul-2 router (ZIP network) configuration commands 2nd serial interfaces synchronous PPP enabling server associations service timestamps command services ISDN services names (AppleTalk) packet filtering session layer (OSI) sessions IOS module number, specifying 2nd nonprivileged mode privileged mode 2nd sessions command 2nd Set-Request messages setting system clock manual configuration 2nd NTP 2nd 3rd SNTP 2nd severity levels logging messages SF-1 router (ZIP network) configuration commands 2nd SF-2 router (ZIP network) configuration commands SF-Core-1 router (ZIP network) configuration commands 2nd 3rd 4th SF-Core-2 router (ZIP network) configuration commands 2nd shaping traffic show access-lists command show appletalk arp command 2nd show appletalk globals command show appletalk interface brief command show appletalk interface command 2nd show appletalk nbp command 2nd show appletalk route command show appletalk traffic command show crypto key mypubkey rsa command show flash 2nd show flash command 2nd show frame pvc/svc command show frame-relay map command show host command 2nd show interface ethernet 0 command show interfaces show interfaces command 2nd text descriptions, adding 2nd show ip access-lists command show ip arp command 2nd show ip dhcp binding command show ip dhcp server statistics command show ip interface brief command show ip interface command show ip protocols command show ip route command 2nd 3rd 4th 5th 6th show ip traffic command 2nd show ipx access-lists command show ipx interface command show ipx route command 2nd 3rd show ipx servers command 2nd show ipx traffic command show logging command show ntp status command show running-config command show sessions command 2nd show snmp command show standby command 2nd show tcp intercept connections command show version command shutdown command 2nd Simple Network Management Protocol [See also SMNP] Sing2511 access server (ZIP network) configuration commands 2nd 3rd Singapore router (ZIP network) configuration commands 2nd 3rd SingISDN access server (ZIP network) configuration commands 2nd 3rd single point of failure preventing 2nd 3rd 4th 5th 6th slots numbering SMNP (Simple Network Management Protocol) SNAP (Subnetwork Access Protocol) encapsulation SNAP LLC AppleTalk implementations 2nd SNMP agents configuring 2nd community strings configuring Get-Next-Request messages Get-Request messages Response messages Set-Request messages Trap messages 2nd 3rd 4th snmp-server community command snmp-server host command SNTP system clock, setting 2nd software agents source IP address forgery preventing 2nd 3rd 4th 5th specifying interfaces for configuration module number for IOS sessions 2nd SPF algorithm SPIDs (service profile identifiers) spoofing squeeze command commands squeeze SSH configuring 2nd 3rd viewing active sessions SSH (Secure Shell) STAC compression standard access lists IPX configuring standard MIBs standardization ISO start bits starting System Configuration Dialog interface summary 2nd interface summary;interface summary startup config copying to running config viewing startup configuration copying to running configuration 2nd startup-config static routes AppleTalK viewing static routing configuring 2nd 3rd IPX configuring static routing protocols AppleTalk AppleTalk configuration stop bits stratum structure IP addresses CIDR blocks 2nd classes 2nd TCP/IP addresses 2nd 3rd 4th 5th 6th stub networks subcommands 2nd appletalk access-group appletalk discovery appletalk zip-reply-filter appletalk zone description 2nd DHCP configuration 2nd dialer map ipx encapsulation framerelay map appletalk interface configuration ATM 2nd Frame Relay 2nd ISDN 2nd 3rd ring-speed 2nd X.25 2nd 3rd interface configuration: Frame Relay ipx network map-group media-type PPP interface configuration removing x25 address x25 map appletalk subcommands:media-type subinterfaces 2nd subnet masks subnet zero subnetting summary keyword (show ip protocols command) summary routes configuring 2nd 3rd 4th 5th 6th 7th 8th superceding configuration commands 2nd supernets suppressing RMTP routing updates SVCs mapping to AppleTalk addresses SVCs (switched virtual circuits) switches 2nd 3rd symmetrical routes SYN flooding preventing synchronization time sources synchronous protocols HDLC 2nd synchronous serial transmission HDLC 2nd syntax Cisco IOS encapsulation interfaces specifying on VIP cards syslog 2nd 3rd 4th system clock manual configuration 2nd NTP configuration 2nd 3rd setting SNTP configuration 2nd viewing System Configuration Dialog configuration command script 2nd System Configuration dialog mode interface summary 2nd interfaces configuring protocols selecting 2nd [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] T1 controllers TA ISDN dialup configuring 2nd 3rd 4th 5th Tab key partial commands, completing TACACS comparing to RADIUS specifying for AAA clients 2nd TACACS (Terminal Access Controller Access Control System) tacacs-server host command 2nd TAs (terminal adapters) TCP TCP intercept TCP SYN flood attacks TCP SYN flooding preventing TCP/IP address structure 2nd 3rd 4th 5th 6th IP addresses configuring 2nd 3rd 4th 5th 6th 7th 8th 9th 10th 11th 12th 13th 14th 15th 16th subnet zero verifying configuration 2nd 3rd TCP/IPc TE1 (terminal equipment type 1) TE2 (terminal equipment type 2) Telnet accessing IOS devices 2nd Terminal Access Controller Access Control System [See also TACACS] terminal adapters dialer interfaces 2nd terminal ip netmask-format decimal command terminals connecting to devices 2nd text descriptions adding to show interfaces command 2nd TFTP IOS image transfers, performing 2nd TFTP (trivial file transfer protocol) three-way handshakes time and date manual configuration 2nd NTP configuration 2nd 3rd setting SNTP configuration 2nd time sources synchronizing time zones manual configuration token capture comparing to CSMA/CD token capture protocol token capture protocols FDDI 2nd Token Ring 2nd IPX encapsulation topologies Ethernet segments FDDI 2nd Token Ring 2nd topologies: Ethernet segments trace command 2nd traffic AppleTalk performance monitoring collisions CSMA/CD SAP filtering 2nd 3rd traffic contracts traffic policing traffic shaping transferring images to IOS devices FTP 2nd TFTP 2nd IOS images selecting method translational bridges 2nd transmission methods WANs 2nd transmission paths (ATM) transparent bridges transport layer (OSI) transport protocols Trap messages 2nd 3rd triple DES encryption algorithm troubleshooting access lists AppleTalk connectivity 2nd 3rd 4th connectivity debug commands 2nd ping command 2nd 3rd show ip arp command 2nd show ip route command 2nd show ip traffic command 2nd trace command 2nd IPX 2nd 3rd type 20 packet forwarding (IPX) configuring 2nd [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] UCT (Coordinated Universal Time) UDP broadcasts forwarding 2nd 3rd UNI (User-Network Interfaces) 2nd unicast RPF 2nd 3rd 4th 5th UNIX workstations logging messages to unreliable protocols UDP up interfaces updating calendar system 2nd upgrading IOS images user configuration mode 2nd 3rd user-to-network interfaces DCEs DTEs username command 2nd utilities syslog 2nd 3rd 4th [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] VCI (virtual channel identifier) VCs multipoint subinterfaces point-to-point subinterfaces 2nd VCs (virtual circuits) VDSL (Very High Data Rate DSL) verifying access list operation AppleTalk addresses 2nd AppleTalk routing 2nd 3rd connectivity debug commands 2nd ping command 2nd 3rd show ip arp command show ip route command show ip traffic command 2nd trace command IP address configuration 2nd 3rd IP connectivity IP routing configuration 2nd 3rd IPX addresses 2nd 3rd IPX connectivity 2nd 3rd IPX routing configuration 2nd SSH configuration viewing active SSH sessions AppleTalk static routes calendar system command options 2nd Flash memory contents 2nd Frame Relay interface status 2nd HSRP information 2nd interface status 2nd IPX routing table routing protocol information 2nd 3rd running configuration SAP table startup config system clock VIP (Virtual Interface Processor) cards VIP cards interfaces specifying virtual channels virtual paths virtual terminals accessing IOS devices 2nd password, setting VLSM (variable-length subnet masking) VPI (virtual path identifier) numbers vty lines securing 2nd [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] WAN interfaces IP address configuration IPX configuring 2nd multipoint IP address configuration 2nd 3rd 4th 5th point-to-point IP address configuration 2nd IPX network numbers, assigning text descriptions, adding WANs AppleTalk configuring multipoint configuration 2nd point-to-point configuration 2nd ATM 2nd addressing interface configuration subcommands 2nd QoS virtual channels cell relay 2nd DSL 2nd ADSL 2nd SDSL VDSL Frame Relay 2nd Annex-D interface configuration subcommands 2nd 3rd interfaces status, viewing 2nd HDLC 2nd 3rd 4th ISDN BRI interface configuration subcommands 2nd 3rd NT1 PRI spoofing TAs packet switching 2nd PPP 2nd X.25 2nd interface configuration subcommands 2nd 3rd placing a call warmStart Trap web sites ISI (Information Sciences Institute of the University of Southern Californiau) wildcard masks OSPF routing window sizes (X.25) configuring workstations [See zones] AppleTalk MAC-to-AppleTalk address resolution wrapped mode (FDDI) 2nd [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] X.25 2nd interface configuration subcommands 2nd 3rd placing a call x25 address subcommand x25 map appletalk subcommand x25 map ipx subcommand [SYMBOL] [A] [B] [C] [D] [E] [F] [G] [H] [I] [K] [L] [M] [N] [O] [P] [Q] [R] [S] [T] [U] [V] [W] [X] [Z] ZIP GetZoneList requests packet filtering 2nd ZIP network configuration commands Kuala-Lumpur router San Jose router 2nd 3rd Seoul-1 router 2nd 3rd 4th Seoul-2 router 2nd SF-1 router 2nd SF-2 router SF-Core-1 router 2nd 3rd 4th SF-Core-2 router 2nd Sing2511 access server 2nd 3rd Singapore router 2nd 3rd SingISDN access server 2nd 3rd zones 2nd configuring packet filtering 2nd ... • Table of Contents Index Cisco Router Configuration, Second Edition By Allan Leinwand, Bruce Pinsky CCIE #1045 Publisher : Cisco Press Pub Date : December 20, 2000 ISBN : 1-57870-241-0 Pages... Summary The SF-Core-1 Router The San-Jose Router The Singapore Router The Sing2511 Access Server Index Copyright Copyright© 2001 Cisco Press Cisco Press logo is a trademark of Cisco Systems, Inc... Comprehensive IOS Configuration for the ZIP Network The Kuala-Lumpur Router The SF-1 Router The SF-2 Router The SF-Core-2 Router The Seoul-1 Router The Seoul-2 Router The SingISDN Access Server