Você está na página 1de 3

TE1 NT2 NT1

S T U
S
TE2 TA US
R
EU

Mask CIDR Net Host Rng Ports Protocol 80: HTTP


TCP
443: HTTPS
252 /30 6 2 4 21 FTP
248 /29 5 3 8 22 SSH
23 Telnet TCP
240 /28 4 4 16
224 /27 3 5 32 25 SMTP Both!
53 DNS
192 /26 2 6 64
69 TFTP
128 /25 1 7 128 110 POP3 UDP
0 /24 0 8 0 119 NNTP
161 SNMP

Protocol Type Admin Dist Metrics Notes


EIGRP Hybrid 90 Multiple Classless, VLSM, DUAL, RTP, PDMs (1x
table set per prot), multiple AS#s, mult L3
32-bit composite prots, summarization
IGRP Dist- 100 Bandwidth, Cisco prop, 255 max-hop-ct (100 default),
AS#, updates @90 sec, invalid @270 sec,
Vector Delay hold-down 280 secs, flush 630 secs,
classless, VLSM
OSPF Link- 110 Bandwidth Dijkstra alg, classless (VLSM), wildcard
mask
state
RIPv1 Dist- 120 Hop count classful, 30 sec updates,180 sec route
invalid,240 sec route flush, max. 15 hops
Vector (Bellman-Ford alg), round-robin load
balancing (max. 6 links)

OSI Layer PDU Internet Layer Internet layer Protocols


7 Application Data 4 Application SNMP, Telnet, FTP, TFTP
6 Presentation Data
5 Session Data
4 Transport Segment 3 Transport TCP, UDP
3 Network Packet 2 Internetwork IP, OSPF, RIP, ICMP
2 Data Link Frame 1 Network lower-layer protocol
1 Physical Bits Interface standards

IP Classes Private IPs


A 1 – 126 10.0.0.0 – 10.255.255.255
B 128 – 191 172.16.0.0 – 172.31.255.255
C 192 – 223 192.168.0.0 – 192.168.255.255
Dialer map steps: STP States
1. dialer Blocking Preventing use of looped paths
2. map Listening Prep to forward w/o populating MAC table
3. <protocol> Learning Populate MAC table, not forwarding
4. <next-hop-address> Forwarding Sending/rcving data frames
5. dial-string
DDR dialing sequence:
1. route determination RT#int bri 0
2. ID interesting traffic RT#(conf-if)encap ppp
3. Dialer info lookup RT#(conf-if)ip address 172.16.2.2 255.255.255.0
4. Traffic txn RT#(conf-if)isdn spid1 555555522222202 (if required)
5. Call terminated/timed out !use this one if all IP is considered interesting
RT#(conf-if)dialer-group 1
Standard ACL: !or use next statement to trigger web to
Cisco(config)#access-list <1-99> <deny|permit> <source IP> <WC mask> RT#(conf-if)dialer-group 2
Cisco(config)#access-list <1-99> permit any NOTE: only one dialer group per interface!!

Extended ACL: Dailing:


Cisco(config)#access-list <100-199> <deny|permit> <protocol> <source IP> RT#(conf-if)dialer string 17067924567
<WC mask> <dest IP> <WC mask> eq <port> !or if using broadcast names/ip map
Cisco(config)#access-list <100-199> permit any any RT#(conf-if)dialer map ip 172.16.2.2 broadcast name LA 17212345555

To apply ACL: DDR Configuration PRI


Cisco(config-if)#ip access-group <#> <in|out> Must configure: switch-type, DSO channels, encoding & framing,

Applying IP address to 2950 switch: Configure a Default Route


(config)#interface vlan1 ip route 0.0.0.0 0.0.0.0 192.1.1.6
ip address <ip address> <mask> ip route default-network 10.0.0.0 (used to reach another Class A,B, or C
no shut network by default)

Configure a new switch Frame-Relay


Static Mapping
SW2#Vlan database no frame-relay inverse-arp
SW2#vtp domain fred frame-relay map ip 199.1.1.2 570 broadcast
SW2#exit frame-relay map ip 199.1.1.3 571 broadcast

set-up Client Trunking Dynamic


frame-relay interface-dlci 570 [lim type]
SW2(conf)#int fa0/11
SW2(conf-if)#switch mode dynamic auto Point-to-Point (inverse ARP not needed)
SW2(conf-if)#^Z interface serial 0.3 point-to-point
SW2# ip address 123.45.6.7 255.255.0.0
frame-relay interface-dlci 570
Trouble Shooting
Domain name must be the same
One switch must be server (switch mode dynamic desirable)
The others must be clients (switch mode dynamic auto)

Simulation Tips
1. Id Problem/Understand Topology
2. Watch the time
3. Use organized Troubleshooting
4. Things to look for:
- Network Statements
- IP addressing/Mask
- VTY Passwords

DDR Configuration BRI (min config, switch-type and spid)

RT#isdn switch-type basic-ni1

Defining Interesting Traffic

RT1#access-list 101 permit tcp any host 172.16.3.1 eq 80


!
RT1#dialer-list 1 protocol ip permit
!
RT#dialer-list 2 protocol ip list 101

Você também pode gostar