Standard Access List - Inplant Training in chennai

CISCO CERTIFIED NETWORK ASSOCIATE
WWW.KAASHIVINFOTECH.COM
ABOUT CCNA
 This
certification builds a foundation in
and apprentice knowledge of
networking.
 CCNA
certified professionals can install, configure, and operate
LAN, WAN and daily access services for small networks (100
modes or fewer), including but not limited to use of these
protocols: IP, IGRP, SERIAL FRAME-RELAY, IP RIP, VLANs,
RIP ETHERNET, ACCESS-LISTS.
WWW.KAASHIVINFOTECH.COM
Introduction to Routers
Router user interface
 The Cisco IOS software uses a command-line interface (CLI) as
the traditional console environment.
 This environment is accessible through several methods:
Console
AUX port (modem)
Telnet
WWW.KAASHIVINFOTECH.COM
Establishing a HyperTerminal session
Router
Console port
Rollover cable
Terminal or a PC
with terminal
emulation
software
Com1 or Com2 serial port
Take the following steps to connect a terminal to the console port on the router:
• Connect the terminal using the RJ-45 to RJ-45 rollover cable and an RJ-45 to DB-9 or RJ-45 to
DB-25 adapter.
• Configure the terminal or PC terminal emulation software for 9600 baud, 8 data bits, no parity,
1 stop bit, and no flow control.
WWW.KAASHIVINFOTECH.COM
Router user interface modes
• The IOS provides a command interpreter service known as the command executive
(EXEC).
• After each command is entered, the EXEC validates and executes the command.
• The levels are user EXEC mode and privileged EXEC mode.
WWW.KAASHIVINFOTECH.COM
CLI command modes
Router#configure terminal
Router(config)#
WWW.KAASHIVINFOTECH.COM
Configuring router passwords
Not recommended, clear text
Encrypts the passwords
above, but…
Use this command instead, password is encryped
Router(config)#enable secret <password>
WWW.KAASHIVINFOTECH.COM
Configuring a serial interface
• On serial links that are directly interconnected, as in a lab environment, one side must
be considered a DCE and provide a clocking signal.
• The clock is enabled and speed is specified with the clock rate command.
Router(config)#interface serial 0/0
Router(config-if)#clock rate 64000
Router(config-if)#no shutdown
WWW.KAASHIVINFOTECH.COM
Access Control List
It is also called Network Traffic Control Management
(NTCM). We can provide restrictions to individual users, subnets
and services etc.
ACL
Standard ACL
Extended ACL
Any access list is identified by its number.
S. A. L
Ex. A. L
WWW.KAASHIVINFOTECH.COM
1 – 99
100 - 199
Rules for creating and implementing
Access List
1. Access list must begin with the Deny Statements (If
exists) then Permit Statements must follow.
2. There must be at least one Permit Statement as an
Implicit “Deny All” always exists.
3. While Implementation of Access list, There must be
only one Access list per Interface, per direction and
per protocol.
WWW.KAASHIVINFOTECH.COM
Standard Access List
S 0 172.16.1.1
Router A
E 0 1.50
1.4
1.1
1.3
1.2
172.16.1.2 S 0
Router B
E 0 5.50
Syntax
Router(config)# Access-list ALNO P/D Src Src-WCM
Router(config)# Int <name of interface>
Router(Config-if)#Ip Access-Group <Direction>
WWW.KAASHIVINFOTECH.COM
5.4
5.1
5.3
5.2
SWITCHES
Layer 2 switching is the process of using the
hardware address of devices on LAN to segment a
network.
In multiple links between switches we face multi
looping problems. To solve this problem switches
run Spanning Tree Protocol (STP).
WWW.KAASHIVINFOTECH.COM
Virtual LAN (VLAN)
A VLAN is a logical grouping of network users and
resources connected to administratively defined ports
on a switched.
A group of users that need an unusually high level of
security can be put into its own VLAN so that users
outside of the VLAN can’t communicate with them. So
it provide security.
WWW.KAASHIVINFOTECH.COM
Adding a VLAN
Switch>show vlan
Switch>enable
Switch#vlan database
Switch(vlan)#vlan vlan-id name vlan-name
Switch(vlan)#exit or ^z.
WWW.KAASHIVINFOTECH.COM
Spanning Tree Protocol (STP)
• STP is a loop-prevention
protocol
• Uses the Spanning Tree
Alogithm
• STP allows L2 devices to
communicate with each other
to discover physical loops in
the network.
• STP specifies an algorithm that
L2 devices can use to create a
loop-free logical topology.
WWW.KAASHIVINFOTECH.COM
Configuring STP
• By default, STP is enabled for every port on the
switch.
• If for some reason STP has been disabled, you can
reenable it.
• To re-enable STP, use the
Switch(config)#spanning-tree vlan vlan-id
• To disable STP, on a per-VLAN basis:
Switch(config)#no spanning-tree vlan vlan-id
WWW.KAASHIVINFOTECH.COM
FRAME RELAY
A packet-switched technology that made its debut in the
early 1990s, Frame Relay is a high-performance Data
Link and Physical layer specification. An upside to Frame
Relay is that it can be more cost effective than point-topoint links, plus it typically runs at speeds of 64Kbps up
to 45Mbps (T3). Another Frame Relay benefit is that it
provides features for dynamic bandwidth allocation and
congestion control.
WWW.KAASHIVINFOTECH.COM
HubCity
interface Serial0
ip address 172.16.1.2
255.255.255.0
encapsulation frame-relay
(Inverse-ARP still works here)
Frame-Relay Map Statements
Headquarters
Hub City
DLCI 101
Spokane
interface Serial0
ip address 172.16.1.1
255.255.255.0
encapsulation frame-relay
frame-relay map ip 172.16.1.3 102
frame-relay map ip 172.16.1.2 102
Spokomo
interface Serial0
ip address 172.16.1.3
255.255.255.0
encapsulation frame-relay
frame-relay map ip 172.16.1.1 211
frame-relay map ip 172.16.1.2 211
DLCI 112
172.16.1.2
Frame Relay
Network
DLCI 102
172.16.1.1
Satellite Office 1
Spokane
DLCI 211
172.16.1.3
Satellite Office 2
Spokomo
Notice that the routers are configured to use either IARP or Frame Relay maps. Using
both on the same interface will cause problems.
WWW.KAASHIVINFOTECH.COM
THANK YOU
WWW.KAASHIVINFOTECH.COM