Command list Useful Show commands Router# show running-config Router# show arp Router# show interfaces Switch#

Switch# Switch# Switch# show show show show running-config vlan mac-address-table spanning-tree

Setting IP address on an interface Router(config)#int fa0/0 Router(config-if)#ip address 192.168.1.1 255.255.255.0 Router(config-if)# no shutdown Setting IP address on a serial interface Router(config)#int ser0/3/0 Router(config-if)#ip address 192.168.1.1 255.255.255.0 Router(config-if)#clock rate 125000 [only necessary for DCE device] Router(config-if)# no shutdown

Setting passwords for telnet access Router(config)#enable password cisco Router(config)#line vty 0 4 Router(config-line)#password class Router(config-line)#login

Setting up sub-interface for Inter-VLAN routing Router(config)#int fa0/0 Router(config-if)# no shutdown Router(config-if)# int fa0/0.1 Router(config-subif)# encapsulation dot1q 10 Router(config-subif)# ip address 192.168.1.1 255.255.255.0

Setting up RIPv2 Router(config)#router rip Router(config-router)# version 2 Router(config-router)# network 192.168.1.0 Setting up OSPF Router(config)#router ospf 1 Router(config-router)# network 192.168.1.0 0.0.0.255 area 0

Assigning a port to a VLAN Switch(config)#int Switch(config-if)# Switch(config-if)# Switch(config-if)# fa0/0 switchport mode access switchport access vlan 10 no shutdown

Setting up Switch Management interface Switch(config)#int vlan 1 Switch(config-if)# ip address 192.168.1.2 255.255.255.0 Switch(config-if)# no shutdown Note: You might need to set a default gateway if you want to access the switch from another network Switch(config)#ip default-gateway 192.168.1.1

Setting port-security (I didnt teach this this semester) Switch(config)#int fa0/0 Switch(config-if)#switchport port-security mac-address sticky Switch(config-if)#switchport port-security violation shutdown Switch(config-if)#switchport port-security maximum 1

Setting the root bridge for Spanning Tree Switch(config)#spanning-tree vlan 10 priority 4096 Note: Spanning-tree is VLAN specific and the priority needs to be lower than other switches in the network. DHCP

1) Create a pool 2) Define network addresses, dns-server, default-router Router0(config)#ip dhcp pool IT Router0(dhcp-config)#network 192.168.1.0 255.255.255.248 Router0(dhcp-config)#default-router 192.168.1.1 Router0(dhcp-config)#dns-server 172.3.1.2

NAT 1) 2) 3) 4) Make a pool (usually given to you from ISP) Define IP addresses that can use the pool Link them together Define what interfaces are inside and outside of NAT

Router0(config)#ip nat pool SWIMMING 76.76.76.5 76.76.76.14 netmask 255.255.255.240 Router0(config)#access-list 1 permit 192.168.1.0 0.0.0.255 Router0(config)#ip nat inside source list 1 pool SWIMMING Router0(config)#int fa 0/0 Router0(config-if)# ip nat inside Router0(config)#int serial0/3/0 Router0(config-if)# ip nat outside PAT Router0(config)#access-list 1 permit 192.168.1.0 0.0.0.255 Router0(config)#ip nat inside source list 1 interface serial 0/3/0 overload Router0(config)#int fa 0/0 Router0(config-if)# ip nat inside Router0(config)#int serial0/3/0 Router0(config-if)# ip nat outside NAT/PAT Router0(config)#ip nat pool SWIMMING 76.76.76.5 76.76.76.14 netmask 255.255.255.240 Router0(config)#access-list 1 permit 192.168.1.0 0.0.0.255 Router0(config)#ip nat inside source list 1 pool SWIMMING overload Router0(config)#int fa 0/0 Router0(config-if)# ip nat inside Router0(config)#int serial0/3/0 Router0(config-if)# ip nat outside

Example Standard ACLs Example Extended ACLs