Security Management documentation Eva | Cisco Systems CCNA 2

Security Management documentation – Eva (2500)

Eva#show ip interface

Ethernet0 is up, line protocol is down Internet address is 172.16.160.1/19 Broadcast address is 255.255.255.255 Address determined by setup command MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is enabled Outgoing access list is not set Inbound access list is 103

Proxy ARP is enabled Security level is default Split horizon is enabled ICMP redirects are always sent ICMP unreachables are always sent ICMP mask replies are never sent IP fast switching is enabled

IP fast switching on the same interface is disabled IP multicast fast switching is enabled

Router Discovery is disabled

IP output packet accounting is disabled IP access violation accounting is disabled TCP/IP header compression is disabled Probe proxy name replies are disabled Gateway Discovery is disabled

Policy routing is disabled

Serial0 is administratively down, line protocol is down Internet protocol processing disabled

Serial1 is up, line protocol is up Internet address is 172.16.128.2/19 Broadcast address is 255.255.255.255 Address determined by setup command MTU is 1500 bytes

Helper address is not set

Directed broadcast forwarding is enabled Outgoing access list is not set Inbound access list is not set

Proxy ARP is enabled Security level is default Split horizon is enabled ICMP redirects are always sent ICMP unreachables are always sent ICMP mask replies are never sent IP fast switching is enabled

IP fast switching on the same interface is enabled IP multicast fast switching is enabled

Router Discovery is disabled

IP output packet accounting is disabled IP access violation accounting is disabled TCP/IP header compression is disabled Probe proxy name replies are disabled Gateway Discovery is disabled

Policy routing is disabled

Eva#show ip access-lists Extended IP access list 103

permit ip 172.16.160.0 0.0.31.255 host 172.16.32.5 (15 matches)

154 - 238 CCNA 2: Routers and Routing Basics v3.1 Instructor Guide – Case Study

Copyright ♥ 2004, Cisco Systems, Inc.

Image 155

Cisco Systems CCNA 2 manual Security Management documentation Eva, Eva#show ip interface

Contents

Page Student-Centered, Instructor-Facilitated Welcome Hands-On, Skills-Based One Size Does Not Fit All Guide Overview Global Community Course Description II. Course OverviewTarget Audience Prerequisites Certification Alignment Lab Requirements Course Overview Copyright 2004, Cisco Systems, Inc Nomenclature III. Teaching Guide for Each TI Lesson Target indicator TIModule Learning objective LO Module 1 Caution Module 1 WANs and RoutersOverview Introduction to routers in a WAN WANsIntroduction to WANs ROM Router LANs and WANs Academy approach to hands-on labs Role of Routers in a WAN Routers Router physical characteristics Console Port Connections Router external connectionsManagement port connections Connecting WAN interfaces Connecting Router LAN interfaces Module 1 Summary Module 2 Caution Module 2 Introduction to Routers Router user interface modes Operating Cisco IOS SoftwarePurpose of Cisco IOS software Router user interface Operation of Cisco IOS software Cisco IOS software features Initial startup of Cisco routers Router LED indicatorsInitial router bootup Starting a Router Keyboard help in the router CLI Router loginEstablish a console session Router command history Enhanced editing commands Show version command Troubleshooting command line errors Module 2 Summary Module 3 Caution Module 3 Configuring a Router Copyright 2004, Cisco Systems, Inc CLI command modes Configure a Router Configuring router passwords Configuring a router name Examining the show commands Making configuration changes Configuring a serial interface Router#copy running-config startup-config Configuring an Ethernet interface Importance of configuration standards Finishing the Configuration Interface descriptions Configuring an interface description Host name resolutions Login bannersConfiguring message-of-the-day Motd Backing up configuration files Configuring host tablesConfiguration backup and documentation Copyright 2004, Cisco Systems, Inc Module 3 Summary Module 4 Caution Use the show cdp neighbors commandModule 4 Learning about Other Devices Essential Labs Optional Labs Discovering and Connecting to NeighborsIntroduction to CDP TLV Information obtained with CDP Creating a network map of the environment Implementation, monitoring, and maintenance of CDP Disabling CDP Troubleshooting CDP Command Purpose Router131.108.100.152 Getting Information about Remote DevicesTelnet Establishing and verifying a Telnet connection Resume Disconnecting and suspending Telnet sessionsAdvanced Telnet operation Ctrl -Shift -6 then StanlyLab#show sessions Alternative connectivity tests LAB-A#trace lab-d LAB-B#ping lab-cLAB-D#ping lab-c LAB-A#trace lab-e LAB-C#show ip route Troubleshooting IP addressing issues Module 4 Summary Module 5 Managing Cisco IOS Software Essential Labs Optional Labs None Core TIs All Optional TIs Router Boot Sequence and VerificationStages of the router power-on boot sequence How a Cisco device locates and loads the Cisco IOS Troubleshooting IOS boot failure Using the boot system commandConfiguration register Additional Resources Managing the Cisco File System IOS naming convention IOS file system overview Select Transfer Capture Text Managing configuration files using TftpManaging configuration files using copy and paste Enter copy tftp running-config Show running-config Managing IOS images using XModem Managing IOS images using Tftp File system verification Environment variables Discuss the following alternatives with the students Module 5 Summary Module 6 Caution Module 6 Routing and Routing Protocols Static route operation Introduction to Static RoutingIntroduction to routing Rt1config#ip route 192.168.2.0 255.255.255.0 192.168.1.2 Rt1config#ip route 192.168.2.0 255.255.255.0Rt1config#ip route 192.168.2.0 255.255.255.0 s0 Rt1#config terminal Configuring static routes Verifying static route configuration Configuring default route forwarding Show ip route output Rt1#show ip route Troubleshooting static route configuration Rt1#ping Rt1#show interfaces s0 Autonomous systems Dynamic Routing OverviewIntroduction to routing protocols Identifying the classes of routing protocols Distance vector routing protocol featuresPurpose of a routing protocol and autonomous systems Routing Protocols Overview Link-state routing protocol features Routing protocols Routing configurationPath determination IGP versus EGP Module 6 Summary Module 7 Caution Module 7 Distance Vector Routing ProtocolsOverview Distance Vector Routing Distance vector routing updatesDistance vector routing loop issues Problem Routing Loops Eliminating routing loops through split horizon Defining a maximum count Routing Update Route poisoning Avoiding routing loops with triggered updates RIP Preventing routing loops with holddown timers RIP routing process Configuring RIP Common RIP configuration issues Using the ip classless command LAB-A#debug ip rip Verifying RIP configurationTroubleshooting RIP update issues Load Balancing with RIP Preventing routing updates through an interface Essential Labs Optional Labs Core TIs IgrpLoad balancing across multiple paths Integrating static routes with RIP Igrp metrics Igrp features Igrp routes Igrp stability features Migrating from RIP to Igrp Configuring IgrpVerifying Igrp Configuration Troubleshooting Igrp Module 7 Summary Ip classless command Copyright 2004, Cisco Systems, Inc Module 8 Caution Module 8 TCP/IP Suite Error and Control Messages Icmp message delivery Overview of TCP/IP Error MessageError reporting and error correction Icmp Detecting excessively long routes Using ping to test destination reachabilityUnreachable networks Destination unreachable message Miscellaneous error reportingEcho messages Icmp redirect/change requests TCP/IP Suite Control MessagesIntroduction to control messages Router discovery message Clock synchronization and transit time estimationInformation requests and reply message formats Address mask requests Congestion and flow control messages Router solicitation message Module 8 Summary Module 9 Caution Module 9 Basic Router Troubleshooting Determining the gateway of last resort Show ip route commandExamining the Routing Table Determining L2 and L3 addresses Determining route administrative distanceDetermining route source and destination Determining the route next hop Determining the last routing updateDetermining the route metric Observing multiple paths to destination Network TestingIntroduction to network testing Using a structured approach to troubleshooting Layer 7 troubleshooting using Telnet Testing by OSI layersLayer 1 troubleshooting using indicators Layer 3 troubleshooting using ping Troubleshooting using show cdp Troubleshooting Router Issues OverviewTroubleshooting Layer 1 using show interfaces Troubleshooting Layer 2 using the show interfaces Troubleshooting using show controllers Troubleshooting using tracerouteTroubleshooting routing issues Introduction to debug Show cdp Traceroute Show controllers serial Debug Module 9 Summary Module 10 Caution Module 10 Intermediate TCP/IP Synchronization or three-way handshake TCP OperationTCP operation Windowing and window size Denial of service attacks UDP operation Sequencing numbersPositive acknowledgements Multiple conversations between hosts Overview of Transport Layer Ports Port numbering and well known port numbers Ports for servicesPorts for clients Comparison of MAC addresses, IP addresses, and port numbers Example of multiple sessions between hosts Module 10 Summary Access Control List Fundamentals Module 11 Access Control List ACLs How ACLs work Introduction to ACLs Creating ACLs Rt1config#access-list ?Rt1config#access-list 1 permit ? Rt1config#access-list 1 permit 192.168.0.1 ? C.D Wildcard bits Log Verifying ACLs Function of a wildcard mask Standard ACLs Access Control Lists ACLs Extended ACLs Rt1config#access-list 101 ?Rt1config#access-list 101 permit ? Named ACLs Firewalls Placing ACLs Restricting virtual terminal access Module 11 Summary Overview and Objectives IV. Case Study Scenario and Phase 1 Project Description Network Diagram IP Addressing Phase 2 IP Addressing Boaz Center Phase 3 Basic Router and Workstation Configuration Instructor approval Date Ping from Router Boaz to Workstation Phase 4 Access Control Lists Eva Phase 5 Documenting the NetworkConfiguration management documentation Boaz Eva Security management documentation Boaz Technical Documentation Case Study DeliverablesGeneral Documentation Copyright 2004, Cisco Systems, Inc Class Range Phase 1 Project DescriptionCase Study Instructor Notes Optional Case Study Instructor Sample Outputs Phase 5 Documenting the Network Sample outputs Boaz Boaz#show ip interface brief Boaz#show startup-config Using 1090 out of 32762 bytes Boaz#show ip interface Security Management documentation Boaz Copyright 2004, Cisco Systems, Inc Configuration Management documentation Phase 5 Documenting the Network Sample outputs Centre Centre#show version Copyright 2004, Cisco Systems, Inc Centre#show ip interface Security Management documentation Centre Centre#show ip access-lists Configuration Management documentation Eva Phase 5 Documenting the Network Sample outputs Eva Eva#show hosts Eva#show startup-config Using 1156 out of 32762 bytes Eva#show ip interface Security Management documentation Eva Copyright 2004, Cisco Systems, Inc Appendices Appendix a Cisco Online Tools and Utilities Output Interpreter Error Message Decoder Software Bug Toolkit IP Subnet Calculator Password Recovery Procedures TAC Case Collection Software Advisor Feature Navigator TAC Advanced Search Best Practices What is meant by best practices? Nets Standards Nets Literacy, math, and science standards Web Links Timss Report Participating Countries Timss report Learner Model Academy Student Student-centered learning Multiple Intelligences Multiple intelligences Web Links Inquiry Based Learning Inquiry-based learning Special Needs Special needs Web Links Learning Disabilities Learning disabilities Strategies for Teaching Students with Learning Disabilities Ccna labs Lab-Centric Instruction PPP Isdn Ccnp Labs Ccnp labs Web Links Netlab Web Links Simulations Simulations Sponsored Curriculum Labs Sponsored curriculum labs Sponsored Curriculum Labs Fundamentals of Voice and Data Cabling IT Essentials PC Hardware and Software IT EssentialsIT Essentials Network Operating Systems Fundamentals of Web Design Fundamentals of UnixFundamentals of Java Programming Http//cisco.netacad.net/cnacs/prot-doc/newcourses.html PIX Firewall PhotoZoom Emerging technologies Wireless solutions Steps in the Problem-Solving Model Troubleshooting Teaching Methods Web Resources Challenges and projects Project-based Instruction Copyright 2004, Cisco Systems, Inc Design activities Dartmouth Problem-Solving Cycle Web Links Brainstorming Cluster Diagram Gifted Education a Resource Guide for Teachers Case Studies Case studies Case Study Teaching in Science a Bibliography Cisco.com Web research Instructor-led classrooms Instructional Strategies Copyright 2004, Cisco Systems, Inc Self-paced instruction Small groups Cooperative/collaborative workPairs or partners Whole class TeamsCompetitive teams Large groups Student-led discussions Demonstrations Presentations Jigsaw Puzzle Jigsaws Ask the Right Questions Ask the right questions Copyright 2004, Cisco Systems, Inc PMI 6 PMI Graphic organizers Problem-Solving Matrix Flowchart Extended Star Topology in a Multi-Building Campus Digital Signal Data Encapsulation Local Area Networks and Devices Copyright 2004, Cisco Systems, Inc RFI EMI Setting goals Kinesthetic Activities Kinesthetic activities Web Links Review strategies Assessment Strategies Journals and reflection Copyright 2004, Cisco Systems, Inc Web Links Grading Rubric Sample Rubrics Rubistar http//rubistar.4teachers.org Guidelines for Portfolio Assessment in Teaching English Portfolio Oral Exams Oral exams Copyright 2004, Cisco Systems, Inc Lab Exams Lab exams Web Links Six Lenses Six lenses Copyright 2004, Cisco Systems, Inc