Worksheet 7 Command Line Fundamental (Ref. CCNA5 Introduction to Network 2.2, 6.4) Objective: Get familiar with the router prompt for each mode. Assign a name to the router. Configure router password. Save and delete the configuration files. Reload the router. 1 Step 1 Build a console connection to a Router 1.1. Connect the com port of a PC to the console port of a router. 1.2. Start a PuTTy session as performed in Worksheet 6. 1.3. Press Enter. If the initial dialog shows up, enter “no”. Step 2 Navigate among different modes of the router 2.1 When you see the start-up screen, you can press Enter to get into user mode. The label prompt of User Mode is: Router> Note: The User Mode is mostly used to view statistics, and it is also a stepping-stone to logging into Privileged Mode. 2.2 Enter privileged Mode by using the “enable” command. Router>enable Router# Note: The prompt Router# indicates you are in Privileged Mode. You can view and change the configuration in Privileged Mode. 2.3 You can go back from Privileged Mode to User Mode by using the “disable” command: Router#disable Router> Note: You may use Router>en as a shortcut for Router>enable to log into Privileged Mode. Router>en Router# 2.4 Enter configure terminal at the Privilege Mode prompt. In this mode, you can change settings in router Router#configure terminal 2 Note: You may use Router#config t as a shortcut. What does the router prompt look like at the Global Configuration Mode? _____________________________________________________ 2.5 Enter “interface fa0/0” command at the global configuration mode prompt. Router(config)#interface fa0/0 How does the router prompt look like at the Interface Configuration Mode? ______________________________________________________ 2.6 Enter exit to return to the Global Configuration Mode. Router(config-if)#exit Router(config)# Step 3 Assign a name to the router 3.1 To give a unique name to a router, the configuration is done in Global Configuration Mode by using the following command: Router(config)#hostname ISOM Is there any immediate change at the router prompt? _______________________________________________________ Step 4 View and save the configuration file 4.1 The entire configuration you configured on the router is stored in the RAM and the file is called “running-config”. To view the running configuration file, use the following command in Privileged Mode: ISOM#show running-config 3 or in short form: ISOM#sh run 4.2 There is a permanent storage area (Non-volatile RAM or called NVRAM) for the configuration and the file permanently stored in the NVRAM is called startup-config. To show it you can type: ISOM#show startup-config 4.3 The running configuration file in RAM will be erased if you restart or switch off the router, but the startup configuration file in NVRAM will not. To backup the running configuration file, we shall use copy command. ISOM#copy running-config startup-config or in short form: ISOM#copy run start Destination filename [startup-config]? Press “enter” to confirm. This command will copy the configuration file (running-config) from RAM into a file called startup-config in NVRAM. How to verify the configuration file is copied into the NVRAM? ______________________________________________________ Step 5 Configure privileged password 5.1 To configure a plain-text password to protect the Privileged Mode, we can use “enable password [password]” command in Global Configuration Mode: ISOM(config)#enable password 123 5.2 To configure an encrypted password we should use “enable secret 4 [password]” command. This [password] will be saved in an encrypted format in the RAM. ISOM(config)#enable secret 456 5.3 Go back to the Privileged Mode, and show the running configuration file to see the password: ISOM(config)#exit ISOM#show running-config What passwords can you see in the running configuration file? ______________________________________________________ 5.4 Go back to User Mode and login to Privileged Mode again. Does it require a password for entering Privileged Mode now? ______________________________________________________ Which password is requesting now and why? ______________________________________________________ 5.5 To delete a password, you can use the following command: ISOM(config)#no enable secret 5.6 Go back to User Mode and login to Privileged Mode again. As the secret password is deleted, which password is requesting now? ______________________________________________________ Step 6 Configure console password There are five different passwords used to secure the router. Two of them are used to secure Privileged Mode, the rest are used to secure user login through 5 Telnet, Console and Auxiliary. These passwords are assigned by using the “line” command. A console password is used to protect a router when users configure a router through a console cable. 6.1 To configure a console password, do the following: ISOM(config)#line console 0 ISOM(config-line)#login ISOM(config-line)#password console123 6.2 Use “exit” several time until you go back to the startup screen (Press RETURN to get started). Try to enter User Mode and Privileged Mode again. Does it require a password for entering User Mode now? What is it? ______________________________________________________ 6.3 View the console password in the running configuration file. ISOM#show running-config Is the console password in plain-text or encrypted format? ______________________________________________________ Step 7 Encrypt password 7.1 Only enable secret password is encrypted by default. The other passwords are saved in plain text format. It is not secured and is easy to view by others. There is a command service password-encryption to encrypt all the passwords. ISOM(config)#service password-encryption 7.2 Now check the passwords again in the running configuration file. Are the passwords in plain-text or encrypted format? ______________________________________________________ 6 7.3 The no service password-encryption command is to stop the password encryption process. ISOM(config)#no service password-encryption 7.4 Now check the passwords again in the running configuration file. Are the passwords changed back to plain-text and why? ______________________________________________________ Step 8 Configure a message of the day (MOTD) Banner 8.1 MOTD banner is a message that shown when someone login to the router/switch. Enclose the banner text in quotations. ISOM(config)#banner motd “Authorized Access Only” 8.2 Input “exit” command in user mode. You will go back to the starting view. What do you see when you press enter? ______________________________________________________ Step 9 Delete the configuration file and reload the router 9.1 To delete the configuration file in the NVRAM, use the erase command: ISOM#erase startup-config Erasing the nvram filesystem will remove all configuration files. Continue? [confirm] Press “enter” to confirm. 7 9.2 Only the configuration file in the NVRAM can be deleted. You cannot delete the configuration file in the RAM. If you want to erase the settings in RAM, you just need to shutdown or restart the router. ISOM#reload Proceed with reload? [confirm] Press “enter” to confirm. 9.3 After you delete the startup configuration file in NVRAM and reload the router, what is displayed after the router reboot? ___________________________________________________ Step 10 Restore all the setup PLEASE!!!!!!!!!! 10.1 Make sure you have erased all configuration files (must do please) ISOM#erase startup-config ISOM#reload 10.2 Disconnect the equipment, and return the cables (you can ignore this) 8