Showing posts with label Labs !!!. Show all posts
Showing posts with label Labs !!!. Show all posts

Monday, March 3, 2014

Configuring IPsec Site-Site VPN on Cisco Routers

Lab Topology


Configuration on Router R1 (Site-A)

Step 1: Defining ISAKMP Policy phase 1


crypto isakmp enable
crypto isakmp policy 10
encryption 3des
authentication pre-share
group 2
hash md5
!
! authentication method pre-share and remote peer address
crypto isakmp key arshnetworks address 8.8.8.2
!
! Defining IPSec parameters, which are commonly known as Phase 2 Parameters Of VPN
crypto ipsec transform-set t-set-1 esp-3des esp-md5-hmac
exit
! defining when VPN should form
!
access-list 101 permit ip host 11.11.11.11 host 33.33.33.33
!
! creating crypto map to bind all parameters together
!
crypto map vpn-map 10 ipsec-isakmp
set peer 8.8.8.2
set transform-set t-set-1
match address 101
exit
! Applying on the WAN interface
int f 0/0
crypto map vpn-map

Configuration on Router R3 Site-B

crypto isakmp enable
crypto isakmp policy 10
encryption 3des
authentication pre-share
group 2
hash md5
!
crypto isakmp key arshnetworks address 7.7.7.1
!
crypto ipsec transform-set t-set-2 esp-3des esp-md5-hmac
!
access-list 101 permit ip host 11.11.11.11 host 33.33.33.33
!
crypto map vpn-map-2 10 ipsec-isakmp
set peer 7.7.7.1
set transform-set t-set-2
match address 101
exit
!
int f 0/0
crypto map vpn-map-2

Sunday, February 23, 2014

Sunday, February 16, 2014

Configuring Cisco Router as DNS Server

Lab Topology and Configuration




-------------------------------------------------------------------------------
Configuration on Router R1
-------------------------------------------------------------------------------
enable
configure terminal
! Assigning name to the Router
hostname R1
! Assigning ip address on the interface FastEthernet 0/0
interface fa0/0
no shutdown
ip add 7.7.7.1 255.0.0.0
! Pointing default route towards Router R2
ip route 0.0.0.0 0.0.0.0 7.7.7.2
! Shows ip address on the interfaces
do sh ip int br
! Defining location of DNS Server
ip name-server 7.7.7.2
! Specifying source interface for DNS queries
ip domain-lookup source-interface FastEthernet 0/0
!

-------------------------------------------------------------------------------
Configuration on Router R2
-------------------------------------------------------------------------------
enable
config t
! Assigning name to the Router
host R2
! Assigning ip address on the interface FastEthernet 0/0
int fa0/0
no sh
ip add 7.7.7.2 255.0.0.0
! Assigning ip address on the interface FastEthernet 0/1
int fa0/1
no sh
ip add 8.8.8.1 255.0.0.0
! Shows ip address on the interfaces
do sh ip int br
! Enables DNS Service on the Router
ip dns server 
! Configuring R1 and R3 ip address with their hostnames 
ip host r1.com 7.7.7.1
ip host r3.com 8.8.8.2
!
-------------------------------------------------------------------------------
Configuration on Router R3
-------------------------------------------------------------------------------
enable
config t
! Assigning name to the Router
host R3
! Assigning ip address on the interface FastEthernet 0/0
int fa0/0
no sh
ip add 8.8.8.2 255.0.0.0
! Pointing default route towards Router R2
ip route 0.0.0.0 0.0.0.0 8.8.8.1
! Shows ip address on the interfaces
do sh ip int br
! Defining location of DNS Server
ip name-server 8.8.8.1
! Specifying source interface for DNS queries
ip domain-lookup source-interface FastEthernet 0/0

!

NTP with Authentication !!!

Lab : NTP with Authentication !!!

Lab Topology !!!



For theory link on the below link

--------------------------------------------------------------------------------------------------------------------------
Configuration on R1 as Client, Here Router R1 is acting as NTP Client
--------------------------------------------------------------------------------------------------------------------------

enable
! shows date and time
show clock
config t
! assigning name to the Router
host R1
! assigning ip address on the interface FastEthernet 0/1
int fa0/0
no sh
ip add 7.7.7.1 255.0.0.0
! pointing default route towards Router R2
ip route 0.0.0.0 0.0.0.0 7.7.7.2
! shows ip address on the interfaces
do sh ip int br
! locating ntp server
ntp server 7.7.7.2
! providing servers credentials to get associated as ntp client
ntp trusted-key 9000529
ntp authentication-key 9000529 md5 arshnetworks
exit
!

--------------------------------------------------------------------------------------------------------------------------
Configuration on Router R2, Here Router R2 is acting as NTP Server
--------------------------------------------------------------------------------------------------------------------------

enable
! displays date and time
show clock
! lets set date as 13 feb 2014 and time as 2pm 
clock set 14:00:00 13 Feb 2014 ! syntax clock set hours:minutes:seconds date month year 
config t
! assigning name to the Router
host R2
! assigning ip address on the interface FastEthernet 0/0
int fa0/0
no sh
ip add 7.7.7.2 255.0.0.0
! assigning ip address on the interface FastEthernet 0/1
int fa0/1
no sh
ip add 8.8.8.1 255.0.0.0
! shows ip address on the interfaces
do sh ip int br
! lets make R2 as NTP server
ntp master
! lets enable authentication on NTP server
ntp authenticate
! lets set credentials for authentication
ntp trusted-key 9000529
ntp authentication-key 9000529 md5 arshnetworks
!

-------------------------------------------------------------------------------------------------------------------------------
Configuration on Router R3, Here Router R3 is acting as NTP Client
-------------------------------------------------------------------------------------------------------------------------------

enable
config t
! assigning name to the Router
host R3
! assigning ip address on the interface FastEthernet 0/0
int fa0/0
no sh
ip add 8.8.8.2 255.0.0.0
! pointing default route towards Router R2
ip route 0.0.0.0 0.0.0.0 8.8.8.1
! shows ip address on the interfaces
do sh ip int br
!
! locating ntp server
ntp server 7.7.7.2
! providing servers credentials to get associated as ntp client
ntp trusted-key 9000529
ntp authentication-key 9000529 md5 arshnetworks
exit
!

-------------------------------------------------------------------------------------------------------------------------------
Verification Commands
-------------------------------------------------------------------------------------------------------------------------------

! Displays the status of NTP associations, including the status of the GPS reference clock, likely to be used on client side
show ntp associations

! Displays the status of NTP.
show ntp status

! Allows advanced monitoring of reference clock activities for the purposes of debugging.
debug ntp refclock

Graphical Management of Cisco Routers !!!

Lab For Graphical Management of Cisco Routers !!!

Lab Topology


Note : For Initial Configuration visit Config's Page

Tutorial Link : http://youtu.be/hkTnbER5svk

Step 1: Enable http service on the Router

Command : ip http server

Step 2: To Enable Authentication on http access

Command : ip http authentication local