Monday, February 23, 2015

2.1.4.8 Packet Tracer - Navigating the IOS

Packet Tracer - Navigating the IOS
Please Click Here to download topology  2.1.4.8 Packet Tracer - Navigating the IOS
Topology
2.1.4.8 Packet Tracer - Navigating the IOS

Objectives
Part 1: Basic Connections, Accessing the CLI and Exploring Help
Part 2: Exploring EXEC Modes
Part 3: Setting the Clock

Background

In this activity, you will practice skills necessary for navigating the Cisco IOS, including different user access modes, various configuration modes, and common commands you use on a regular basis. You also practice accessing the context-sensitive Help by configuring the clock command.

Part 1:     Basic Connections, Accessing the CLI and Exploring Help

In Part 1 of this activity, you connect a PC to a switch using a console connection and explore various command modes and Help features.

Step 1:   Connect PC1 to S1 uses a console cable.

a.     Click the Connections icon (the one that looks like a lightning bolt) in the lower left corner of the Packet Tracer window.
b.    Select the light blue Console cable by clicking it. The mouse pointer will change to what appears to be a connector with a cable dangling off of it.
c.     Click PC1; a window displays an option for an RS-232 connection.
d.    Drag the other end of the console connection to the S1 switch and click the switch to bring up the connection list.
e.     Select the Console port to complete the connection.

Step 2:   Establish a terminal session with S1.

a.     Click PC1 and then select the Desktop tab.
b.    Click the Terminal application icon; verify that the Port Configuration default settings are correct.
What is the setting for bits per second? _______
c.     Click OK.
d.    The screen that appears may have several messages displayed. Somewhere on the display there should be a Press RETURN to get started! message. Press ENTER.
What is the prompt displayed on the screen? _________

Step 3:   Explore the IOS Help.

a.     The IOS can provide help for commands depending on the level being accessed. The prompt currently being displayed is called User EXEC and the device is waiting for a command. The most basic form of help is to type a question mark (?) at the prompt to display a list of commands.
S1> ?
Which command begins with the letter ‘C’? ___________________
b.    At the prompt, type t, followed by a question mark (?).
S1> t?
Which commands are displayed? ___________________________
c.     At the prompt, type te, followed by a question mark (?).
S1> te?
Which commands are displayed? ___________________
This type of help is known as context-sensitive Help, providing more information as the commands are expanded.

Part 2:     Exploring EXEC Modes

In Part 2 of this activity, you switch to privileged EXEC mode and issue additional commands.

Step 1:   Enter privileged EXEC mode.

a.     At the prompt, type the question mark (?).
S1> ?
What information is displayed that describes the enable command? _____________________________
b.    Type en and press the Tab key.
S1> en
What displays after pressing the Tab key? _________
This is called command completion or tab completion. When part of a command is typed, the Tab key can be used to complete the partial command. If the characters typed are enough to make the command unique, as in the case with the enable command, the remaining portion is displayed.
What would happen if you were to type te at the prompt?
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
c.     Enter the enable command and press ENTER. How does the prompt change?
____________________________________________________________________________________
d.    When prompted, type the question mark (?).
S1# ?
Previously there was one command that started with the letter ‘C’ in user EXEC mode. How many commands are displayed now that privileged EXEC mode is active? (Hint: you could type c? to list just the commands beginning with ‘C’.)
____________________________________________________________________________________

Step 2:   Enter Global Configuration mode.

a.     One of the commands starting with the letter ‘C’ is configure when in Privileged EXEC mode. Type either the full command or enough of the command to make it unique along with the <Tab> key to issue the command and press .
S1# configure
What is the message that is displayed?
____________________________________________________________________________________
b.    Press the key to accept the default parameter enclosed in brackets [terminal].
How does the prompt change? ___________________________________________________________
c.     This is called global configuration mode. This mode will be explored further in upcoming activities and labs. For now exit back to Privileged EXEC mode by typing end, exit or Ctrl-Z.
S1(config)# exit
S1#

Part 3:     Setting the Clock

Step 1:   Use the clock command.

a.     Use the clock command to further explore Help and command syntax. Type show clock at the privileged EXEC prompt.
S1# show clock
What information is displayed?  What is the year that is displayed?
____________________________________________________________________________________
b.    Use the context-sensitive Help and the clock command to set the time on the switch to the current time. Enter the command clock and press ENTER.
S1# clock
What information is displayed? ___________________________________________________________
c.     The % Incomplete command message is returned by the IOS indicating that the clock command needs further parameters. Any time more information is needed help can be provided by typing a space after the command and the question mark (?).
S1# clock ?
What information is displayed? ___________________________________________________________
d.    Set the clock using the clock set command. Continue proceeding through the command one step at a time.
S1# clock set ?
What information is being requested? _____________________________________________________
What would have been displayed if only the clock set command had been entered and no request for help was made by using the question mark? ________________________________________________
e.     Based on the information requested by issuing the clock set ? command, enter a time of 3:00 p.m. by using the 24-hour format of 15:00:00. Check to see if further parameters are needed.
S1# clock set 15:00:00 ?
The output returns the request for more information:
<1-31>  Day of the month
MONTH   Month of the year
f.     Attempt to set the date to 01/31/2035 using the format requested. It may be necessary to request additional help using the context-sensitive Help to complete the process. When finished, issue the show clock command to display the clock setting.  The resulting command output should display as:
S1# show clock
*15:0:4.869 UTC Tue Jan 31 2035
g.    If you were not successful, try the following command to obtain the output above:
S1# clock set 15:00:00 31 Jan 2035

Step 2:   Explore additional command messages.

a.     The IOS provides various outputs for incorrect or incomplete commands as experienced in earlier sections. Continue to use the clock command to explore additional messages that may be encountered as you learn to use the IOS.
b.    Issue the following command and record the messages:
S1# cl
What information was returned? ________________________________________________
S1# clock
What information was returned? ________________________________________________
S1# clock set 25:00:00
What information was returned? 
____________________________________________________________________________________
____________________________________________________________________________________
_____________________________________________________________________________
S1# clock set 15:00:00 32
What information was returned? 
____________________________________________________________________________________
____________________________________________________________________________________
______________________________________________________________________________________
Suggested Scoring Rubric
Activity Section
Question Location
Possible Points
Earned Points
Part 1:  Basic Connections, Accessing the CLI and Exploring Help
Step 2a
5

Step 2c
5

Step 3a
5

Step 3b
5

Step 3c
5

Part 1 Total
25

Part 2:  Exploring EXEC Modes
Step 1a
5

Step 1b
5

Step 1c
5

Step 1d
5

Step 2a
5

Step 2b
5

Part 2 Total
30

Part 3:  Setting the Clock
Step 1a
5

Step 1b
5

Step 1c
5

Step 1d
5

Step 2b
5

Part 3 Total
25

Packet Tracer Score
20

Total Score
100



1.2.4.4 Packet Tracer - Representing the Network

Packet Tracer - Network Representation
Topology
Objectives
Part 1: Overview of the Packet Tracer Program
Part 2: Exploring LANs, WANs, and Internets
Background
Packet Tracer is a fun, take-home, flexible software program which will help you with your Cisco Certified Network Associate (CCNA) studies. Packet Tracer allows you to experiment with network behavior, build network models, and ask "what if" questions. In this activity, you will explore a relatively complex network that highlights a few of Packet Tracer’s features. While doing so, you will learn how to access Help and the tutorials. You will also learn how to switch between various modes and workspaces. Finally, you will explore how Packet Tracer serves as a modeling tool for network representations.
Note: It is not important that you understand everything you see and do in this activity. Feel free to explore the network on your own. If you wish to proceed more systematically, follow the steps below. Answer the questions to the best of your ability.

Part 1:     Overview of the Packet Tracer Program
The network size is larger than most of the networks you will experience in this course (although you will see this topology often in your Networking Academy studies). You may need to adjust the window size of Packet Tracer to see the full network. If necessary, you can use the zoom in and out tools to adjust the size of the Packet Tracer window.
Step 1:     Access the Packet Tracer Help pages, tutorial videos, and online resources
a.     Access the Packet Tracer Help pages in two ways:
1)     Click the question mark icon in the top, right-hand corner of the menu toolbar.
2)     Click the Help menu, and then choose Contents.
b.    Access the Packet Tracer tutorial videos by clicking Help > Tutorials. These videos are a visual demonstration of the information found in the Help pages and various aspects of the Packet Tracer software program. Before proceeding with this activity, you should gain some familiarity with the Packet Tracer interface and Simulation mode.
1)     View the Interface Overview video in the Getting Started section of Tutorials.
2)     View the Simulation Environment video in the Realtime and Simulation Modes section of Tutorials.
c.     Find the “Configuring Devices Using the Desktop Tab” tutorial. Watch the first part to answer the following question:  What information can you configure in the IP Configuration window?
____________________________________________________________________________________
____________________________________________________________________________________
Step 2:   Toggle between Realtime and Simulation modes.
a.     Find the Realtime word in the bottom right corner of the Packet Tracer interface. In Realtime mode, your network is always running like a real network, whether you are working on the network or not. Your configurations are done in real time, and the network responds in near real time.
b.    Click the tab directly behind the Realtime tab to switch to Simulation mode. In Simulation mode, you can watch your network run at a slower pace, observing the paths that data takes and inspecting the data packets in detail.
c.     In the Simulation Panel, click Auto Capture / Play. You should now see data packets, represented as envelopes of various colors, traveling between the devices.
d.    Click Auto Capture / Play again to pause the simulation.
e.     Click Capture / Forward to step through the simulation. Click the button a few more times to see the effect.
f.     In the network topology on the left, click one of the envelopes on an intermediate device and investigate what is inside. Over the course of your CCNA studies, you will learn the meaning of most everything inside these envelopes. For now, see if you can answer the following questions:
-       Under the OSI Model tab, how many In Layers and Out Layers have information?
________________________________________________________________________________
-       Under the Inbound PDU Details and Outbound PDU Details tabs, what are the headings of the major sections?
________________________________________________________________________________
-       Click back and forth between the Inbound PDU Details and Outbound PDU Details tabs. Do you see information changing? If so, what?
________________________________________________________________________________
________________________________________________________________________________
g.    Click the toggle button above Simulation in the bottom right corner to return to Realtime mode.
Step 3:     Toggle between Logical and Physical views.
a.     Find the Logical word in the top left corner of the Packet Tracer interface. You are currently in the Logical workspace where you will spend the majority of your time building, configuring, investigating, and troubleshooting networks.
Note: Although you can add a geographical map as the background image for the Logical workspace, it does not usually have any relationship to the actual physical location of devices.
b.    Click the tab below Logical to switch to the Physical workspace. The purpose of the Physical workspace is to give a physical dimension to your Logical network topology. It gives you a sense of scale and placement (how your network might look in a real environment).
c.     During your CCNA studies, you will use this workspace on occasion. For now, just know that it is here and available for you to use. To learn more about the Physical workspace, refer to the Help files and tutorial videos.
d.    Click the toggle button below Physical in the top right corner to return to the Logical workspace.
Part 2:     Exploring LANs, WANs, and Internets
The network model in this activity incorporates many of the technologies that you will master in your CCNA studies. It represents a simplified version of how a small to medium-sized business network might look. Feel free to explore the network on your own. When ready, proceed through the following steps and answer the questions.
Step 1:   Identify common components of a network as represented in Packet Tracer.
a.     The Icon toolbar has various categories of networking components. You should see categories that correspond to intermediate devices, end devices, and media. The Connections category (with the lightning bolt icon) represents the networking media supported by Packet Tracer. There is also an End Devices category and two categories specific to Packet Tracer: Custom Made Devices and Multiuser Connection.
b.    List the intermediate device categories. ____________________________________________________
c.     Without entering into the Internet cloud or Intranet cloud, how many icons in the topology represent endpoint devices (only one connection leading to them)? _______
d.    Without counting the two clouds, how many icons in the topology represent intermediate devices (multiple connections leading to them)? _______
e.     How many intermediate devices are routers? Note: The Linksys device is a router. _______
f.     How many end devices are not desktop computers? _______
g.    How many different types of media connections are used in this network topology? _______

h.     Why isn’t there a connection icon for wireless in the Connections category?
____________________________________________________________________________________
____________________________________________________________________________________
Step 2:   Explain the purpose of the devices.
a.     In Packet Tracer, the Server-PT device can act as a server. The desktop and laptop PCs cannot act as a server. Is that true in the real world? _______
Based on your studies so far, explain the client-server model.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
b.    List at least two functions of intermediary devices.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
c.     List at least two criteria for choosing a network media type.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
Step 3:   Compare and contrast LANs and WANs.
a.     Explain the difference between a LAN and a WAN. Give examples of each.
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
____________________________________________________________________________________
b.    In the Packet Tracer network, how many WANs do you see? _______
c.     How many LANs do you see? _______
d.    The Internet in this Packet Tracer network is overly simplified and does not represent the structure and form of the real Internet. Briefly describe the Internet.
____________________________________________________________________________________
____________________________________________________________________________________
e.     What are some of the common ways a home user connects to the Internet?
____________________________________________________________________________________
f.     What are some common methods that businesses use to connect to the Internet in your area?
____________________________________________________________________________________
Challenge
Now that you have had an opportunity to explore the network represented in this Packet Tracer activity, you may have picked up a few skills that you would like to try out. Or maybe you would like the opportunity to explore this network in more detail. Realizing that most of what you see and experience in Packet Tracer is currently beyond your skill level, here are some challenges you might want to attempt. Do not worry if you cannot do them all. You will be a Packet Tracer master user and network designer soon enough.
·         Add an end device to the topology and connect it to one of the LANs with a media connection. What else does this device need to send data to other end users? Can you provide the information? Is there a way to verify that you correctly connected the device?
·         Add a new intermediary device to one of the networks and connect it to one of the LANs or WANs with a media connection. What else does this device need to serve as an intermediary to other devices in the network?
·         Open a new instance of Packet Tracer. Create a new network with at least two LANs connected by a WAN. Connect all the devices. Investigate the original Packet Tracer activity to see what else you might need to do to make your new network functional. Record your thoughts and save your Packet Tracer file. You may want to revisit your network later after you have mastered a few more skills.

Suggested Scoring Rubric
Activity Section
Question Location
Possible Points
Earned Points
Part 1: Overview of the Packet Tracer Program
Step 1c
4

Step 2f
6

Part 1 Total
10

Part 2: Exploring LANs, WANs, and Internets
Step 1b
5

Step 1c
5

Step 1d
5

Step 1e
5

Step 1f
5

Step 1g
5

Step 1h
6

Step 2a
6

Step 2b
6

Step 2c
6

Step 3a
6

Step 3b
6

Step 3c
6

Step 3d
6

Step 3e
6

Step 3f
6

Part 2 Total
90

Total Score
100



Monday, February 9, 2015

Floating Route & Email Packet Tracer Activity


Please click here to download topology RIPv2 Bkup and Email.pka

I made up the packet tracer file "RIPv2 Backup and Email.pka" as a supporting activity to assist my students in understanding "Routing Concepts" of CCNA Exploration curriculum and at the same time in response to their question of other usage of static and static default routes.
I often explain to my students that under certain circumstances, a simple static route may be all the backup solution you need just as ISDN as a backup to frame relay. This static route can coexist with the dynamic route but it just doesn't show in the routing table. Therefore, it is called "Floating Route". In case the interface that is advertised in dynamic routing protocol fails, the static route will kick in and replace the major dynamic route as a back up to provide network availability to local network users.

I explain that we can configure a static route as long as the AD of the static route is higher than current dynamic route AD; it won't be used unless the main route leaves the routing table.  The route "floats" in the routing table and isn't seen unless the primary route leaves the table.
The packet tracer file with the topology shown below is created in that purpose and I also take the opportunity to help them review VLSM addressing skills as well as how to configure Email and DNS server in Packet Tracer.

The whole activity is just to prove to the students that using static route as backup sometimes can solve the problem that happens when the main dynamic routes are down. As availability is vital to any networks, this simple solution sometimes saves money and headache caused when any type of dynamic routing failures take place.
In this packet tracer activity, I use default static route as a backup.
I explain that they learned how to write a default static route in their CCNA studies, but they also remember that the default AD of a static route is either 1 or 0... and both of those values are less than 120!   To change the AD of a static route, configure the desired distance at the end of the ip route command.
R1(config)#ip route 0.0.0.0 0.0.0.0 s0/0/0  ?
  <1-255>    Distance metric for this route
  A.B.C.D    Forwarding router's address
  name       Specify name of the next hop
  permanent  permanent route
  tag        Set tag for this route
 
R1(config)#ip route 0.0.0.0 0.0.0.0 s0/0/1  200
The default static route has an AD that's only one higher than that of the RIPv2 route, but that's enough to make the route "float" and not yet be seen in the routing table.
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 172.16.6.5 to network 0.0.0.0

     10.0.0.0/30 is subnetted, 1 subnets
C       10.10.10.8 is directly connected, Serial0/0/1
     172.16.0.0/16 is variably subnetted, 4 subnets, 3 masks
C       172.16.0.0/22 is directly connected, FastEthernet0/0
R       172.16.4.0/23 [120/1] via 172.16.6.5, 00:00:04, Serial0/0/0
R       172.16.6.0/30 [120/1] via 172.16.6.5, 00:00:04, Serial0/0/0
C       172.16.6.4/30 is directly connected, Serial0/0/0
R*   0.0.0.0/0 [120/2] via 172.16.6.5, 00:00:04, Serial0/0/0

Let's see the effect on the routing table when the Serial0/0/0 interface is closed.

R1(config)#int s0/0/0
R1(config-if)#shutdown
%LINK-5-CHANGED: Interface Serial0/0/0, changed state to administratively down
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to down
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 0.0.0.0 to network 0.0.0.0

     10.0.0.0/30 is subnetted, 1 subnets
C       10.10.10.8 is directly connected, Serial0/0/1
     172.16.0.0/22 is subnetted, 1 subnets
C       172.16.0.0 is directly connected, FastEthernet0/0
S*   0.0.0.0/0 is directly connected, Serial0/0/1

When the link comes up again,

R1(config)#int s0/0/0
R1(config-if)# no shutdown
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to up
R1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
       i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
       * - candidate default, U - per-user static route, o - ODR
       P - periodic downloaded static route

Gateway of last resort is 172.16.6.5 to network 0.0.0.0

     10.0.0.0/30 is subnetted, 1 subnets
C       10.10.10.8 is directly connected, Serial0/0/1
     172.16.0.0/16 is variably subnetted, 4 subnets, 3 masks
C       172.16.0.0/22 is directly connected, FastEthernet0/0
R       172.16.4.0/23 [120/1] via 172.16.6.5, 00:00:04, Serial0/0/0
R       172.16.6.0/30 [120/1] via 172.16.6.5, 00:00:04, Serial0/0/0
C       172.16.6.4/30 is directly connected, Serial0/0/0
R*   0.0.0.0/0 [120/2] via 172.16.6.5, 00:00:04, Serial0/0/0

Simply by adjusting the administrative distance of a static route, we've got a backup route that takes little configuration. Floating static routes are an important step in training and working in production networks, so I tell my students to make sure they can write one when needed!

EIGRP Metric Calculation & Tuning

EIGRP is Cisco proprietary routing protocol largely used in today network, because of his high simplicity and ability to balance routes which bring a great flexibility on network management. But one of the great functionality of EIGRP is the possibility to tweak his metric. In this webinar we will be discussing the often misunderstood topic of EIGRP metric and K-Values. How exactly is the metric calculated? What ARE the K values? What are they used for? Perhaps more importantly, we will discuss what K-Values are NOT as this is almost always misunderstood especially because much of the information out there is wrong.

Saturday, February 7, 2015

Time Base ACL

Dynamic Requirements

1) Allow internet access to employees only after 5 PM
2) Block printer access during weekends
3) Allow Internet access on 4th Feb 2011 as it is our company’s anniversary
4) Allow Printer access on coming saturday as we have to take a lot of printouts during the weekend
5) Block access to Internet on weekends 

Can access-list help? 

   Access-list can fulfill the technical part i.e, blocking internet, access to printer,etc.
   But what about relationship with time?
   Blocking access to Internet during weekends
   Network Engineer has come on Friday night around 11:50 PM, create the access-list and go home
   He/She has to once again come back around 11:50 PM on Sunday night and remove the access-list
   Something better is required 

Diagram we are going to use

Conditions:
   R3 should not be allowed internet access and icmp access to R1 during weekends

 Steps in creating Time Based Access Lists

1) Set the clock to current time
    Use the clock command 
    Be aware of the mode
2) Create a time range
     Use the time-range command
3) Associate the time range with access-list
     Connect the access-list the time-range 
4) Apply it on desired interface
      Use  ip access-group command 
      Be careful of direction, implicit deny and routing protocol