cafebook.info 03 cac bai lab ccna tieng viet cua ethena

7/28/2019 Cafebook.info 03 Cac Bai Lab CCNA Tieng Viet Cua Ethena

1/174

Training & Education Network

02 Bis Dinh Tien Hoang Street , Dakao Ward, District !, HCMC Tel : (848) 824 4041 Fax : (848) 824 4041

E-mail : training@athenavn. com URL : www. athenavn. com

Y O U LL L O V E T H E W A Y W E M I N D Y O U R K N O W L E D G E1

CCNA ATHENA LABVersion 1. 0


2/174





Phn 1

Cisco IOS

Bi 1 :


3/174





t mt khu truy nhp cho Router

1. Gii thiu :Bo mt l mt yu t rt quan trng trong network, v th n rt c quan tm v s dng

mt khu l mt trong nhng cch bo mt rt hiu qu. S dng mt khu trong router c th gipta trnh c nhng s tn cng router qua nhng phin Telnet hay nhng s truy cp trc tip vorouter thay i cu hnh m ta khng mong mun t ngi l.

2. Mcch :Ci t c mt khu cho router, khi ng nhp vo, router phi kim tra cc loi mt khu cn

thit.

3. M t bi lab v hnh :

Trong hnh trn, PC c ni vi router bng cp console

4. Cc cp bo mt ca mt khu :Cp bo mt ca mt khu da vo cp ch m ho ca mt khu . Cc cp m ha

ca mt khu : Cp 5 : m ha theo thut ton MD5, y l loi m ha 1 chiu, khng th gii m

c(cp ny c dng m ho mc nh cho mt khu enable secret gn cho router) Cp 7: m ha theo thut ton MD7, y l loi m ha 2 chiu, c th gii m c(cp

ny c dng m ha cho cc loi password khc khi cn nh : enable password, line vty,

line console) Cp 0: y l cp khng m ha.

5. Qui tct mt khu :Mt khu truy nhp phn bit ch hoa, ch thng, khng qu 25 k t bao gm cc k s,

khong trng nhng khng c s dng khong trng cho k tu tin.

Router(config)#enable password athena-athena-athena-athen% Overly long Password truncated after 25 characters mt khu ct vi 26 k


4/174





tkhngc chp nhn

6. Cc loi mt khu cho Router : Enable secret: nu t loai mt khu ny cho Router, bn s cn phi khai bo khi ng

nhp vo ch user mode, y l loi mt khu c hiu lc cao nht trong Router, c m hamc nh cp 5.

Enable password: y l loi mt khu c chc nng tng t nhenable secret nhng chiu lc yu hn, loi password ny khng c m ha mc nh, nu yu cu m ha th scm ha cp 7.

Line Vty: y l dng mt khu dng gn cho ng line Vty, mt khu ny sc kim

tra khi bn ng nhp vo Router qua ng Telnet. Line console : y l loi mt khu c kim tra cho php bn s dng cng Console cu hnh cho Router.

Line aux: y l loi mt khu c kim tra khi bn s dng cng aux.

7. Cc bct mt khu cho Router : Bc 1 : khi ng Router, nhn enter vo chuser mode.

T chuser mode dng lnh enable vo chPrivileged modeRouter con0 is now available

Press RETURN to get started.Router>enableRouter#

Bc 2 : T du nhc chPrivileged mode vo mode cofigure cu hnh cho Routerbng lnh configure terminal

Router#config tEnter configuration commands, one per line. End with CNTL/Z.Router(config)#

Bc 3 : Cu hnh cho tng loi Password Cu hnh cho mt khu enable secret

(Ch : mt khu c phn bit ch hoa v ch thng)Router(config)#enable secret athena Mt khu l athenaRouter(config)#exit

Cu hnh mt khu bng lnh enable passwordRouter(config)#enable password cisco Mt khu l ciscoRouter(config)#exit

Lu : khi ta ci t cng lc 2 loi mt khu enable secret v enable password th Routers kim tra mt khu c hiu lc mnh hn l enable secret. Khi mt khu secret khng cn th lc mt khu enable password sc kim tra.

Cu hnh mt khu bng lnh Line9 Mt khu cho ng Telnet (Line vty)


5/174





Router(config)#line vty 0 4

Router(config-line)#password class password l classRouter(config-line)#login mch cit passwordRouter(config-line)#exit

9 Mt khu cho cng console :Router(config)#line console 0 mng Line Console

cng Console th0Router(config-line)#password cert password l cert

Router(config-line)#login

mch cit passwordRouter(config-line)#exit

9 Mt khu cho cng aux :Router(config)#line aux 0 S 0 chs thtcng auxc dngRouter(config-line)#password router password l routerRouter(config-line)#loginRouter(config-line)#exit

Sau khi t xong mt khu, ta thot ra ngoi ch Privileged mode, dng lnh Show running-config xem li nhng password cu hnh :

Router#show running-config

Building configuration. . .Current configuration : 550 bytesversion 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption password citch khng m hahostname Routerenable secret 5 $1$6bgK$prmkIPVMht7okiCQ5EQ2o passwordsecretc

m ha mcnhcp 5enable password cisco!

line con 0password cert password cho cngConsole l certloginline aux 0password router password cho cngauxl routerlogin

line vty 0 4password class password cho ngvtyl class

login


6/174





!End

Dng lnh Show running-config ta s thy c cc password cu hnh, nu mun m ha tt ccc password ta dng lnh Service password-encryption trong mode config.

Router(config)#service password-encryptionRouter(config)#exit

Dng lnh show running-config kim tra li :

Router#show runBuilding configuration. . .

enable secret 5 $1$6bgK$prmkIPVMht7okiCQ5EQ2o/enable password 7 094F471A1A0A password c m ha cp 7line con 0password 7 15110E1E10 password c m ha cp 7loginline aux 0password 7 071D2E595A0C0B password c m ha cp 7login

line vty 0 4password 7 060503205F5D password c m ha cp 7login

!

End

Ch : Ta khng th dng lnh no service password-encryption b ch m ha cho mtkhu, ta chc th b ch m ha khi gn li mt khu khc

Sau khi t mt khu xong, khi ng nhp vo Router li, mt khu sc kim tra :

Router con0 is now available

Press RETURN to get started. nhn enter

User Access Verification mt khu line console sc kim tra

Password : cert khai bo mt khu console l : certRouter>ena enable d vo mode PrivilegedPassword : athena V mt khu secretc hiu lc cao hn nn c kim traRouter#

Cc loi mt khu khc nhLine Vty, Line aux sc kim tra khi s dng n chc nng

8. Gb mt khu cho router :


7/174





Nu mun g b mt khu truy cp cho loi mt khu no ta dng lnh no trc cu lnh gncho loi mt khu .

V d : Mun g b mt khu secret l athena cho routerRouter(config)#no enable secret athenaRouter(config)#exit

Bng cch tng t, ta c th gb mt khu cho cc loi mt khu khc.

Bi 2

Cisco Discovery Protocol (CDP)


8/174





1. Gii thiu : :

CDP (Cisco Discovery Protocol) l 1 giao thc ca Cisco, giao thc ny hot ng lp 2 (datalink layer) trong m hnh OSI, n c kh nng thu thp v ch ra cc thng tin ca cc thit ln cnc kt ni trc tip, nhng thng tin ny rt cn thit v hu ch cho bn trong qu trnh x l s cmng.

2. Mcch :Bi thc hnh ny gip bn hiu r v giao thc CDP v cc thng s lin quan, nm c chc

nng ca cc lnh trong giao thc ny.


hnh bi lab nh hnh v, cc routerc ni vi nhau bng cp serial.

4. Cc bc thc hin :Trc tin cu hnh cho cc Router nh sau(xem bng lnh Show run) Router Athena1 :

Current configuration : 595 bytes!version 12. 2no service single-slot-reload-enable

service timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname ATHENA1!logging rate-limit console 10 except errors!ip subnet-zero


9/174





no ip finger!no ip dhcp-client network-discovery!interface Ethernet0no ip addressshutdown

!interface Serial0ip address 192. 168. 1. 2 255. 255. 255. 0no fair-queue

!

interface Serial1ip address 192. 168. 2. 1 255. 255. 255. 0

!ip kerberos source-interface anyip classlessip http server!line con 0transport input none

line aux 0line vty 0 4!End

Router Athena2 :Building configuration. . .

Current configuration : 450 bytes!version 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!

hostname ATHENA2!ip subnet-zero!interface Ethernet0no ip address

shutdown!interface Serial0


10/174





ip address 192. 168. 1. 1 255. 255. 255. 0clockrate 56000

!interface Serial1no ip addressshutdown

!ip classlessno ip http server!line con 0line aux 0

line vty 0 4login

!End

Router Athena3 :Current configuration : 858 bytes!version 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Athena3!ip subnet-zero!interface Serial0no ip address

shutdownno fair-queue

!interface Serial1ip address 192. 168. 2. 2 255. 255. 255. 0

clockrate 56000!ip classlessip http server!line con 0line aux 0line vty 0 4!


11/174





End

Lu : V CDP l 1 giao thc ring ca Cisco nn n c mcnh khing, v vy khi ta dnglnh Show run, nhng thng tin v giao thc ny s khngc hin th. Giao thc ny c th hotng trn cRouterv Switch.

5. Cc lnh trong giao thc CDP : Lnh Show CDP neighbors : dng xem thng tin ca cc thit b xung quanh c lin kt

trc tip ( lnh ny s dng trong mode Privileged )

ATHENA1#show cdp neighborsCapability Codes : R - Router, T - Trans Bridge, B - Source Route Bridge

S - Switch, H - Host, I - IGMP, r - Repeater

Device ID Local Intrfce Holdtme Capability Platform Port IDAthena3 Ser 1 149 R 2523 Ser 1ATHENA2 Ser 0 134 R 2500 Ser 0

Lnh Show CDP neighbors detail: dng xem chi tit thng tin ca cc thit b lin kt trctip.

ATHENA1#show cdp neighbors detail-------------------------Device ID : Athena3 thit blin kt trc tip l Athena3

Entry address(es) :IP address : 192. 168. 2. 2 a chcng lin kt trc tipPlatform : cisco 2523, Capabilities : Router loi thit blin kt : Cisco Router 2523Interface : Serial1, Port ID (outgoing port) : Serial1 lin kt trc tip qua

cng Serial1Holdtime : 124 sec

Version :Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmong Thng tin v hiu hnh ca

thit blin kt

advertisement version : 2-------------------------Device ID : ATHENA2 thit blin kt trc tip l Athena2Entry address(es) :IP address : 192. 168. 1. 1 a chcng lin ktPlatform : cisco 2500, Capabilities : Router loi thit blin kt l Cisco

Router 2500Interface : Serial0, Port ID (outgoing port) : Serial0 lin kt qua cng Serial 0


12/174





Holdtime : 168 sec thi gian gigi tin l 168 secondVersion :Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmong Thng tin chi tit v phin bn v

hiu hnh ca thit badvertisement version : 2

Lnh Show CDP: hin th thng tin CDP v timer v hold-time.

ATHENA1#show cdpGlobal CDP information :

Sending CDP packets every 60 seconds gi cdp c gi mi 60 secondSending a holdtime value of 180 seconds thi gian gigi tin l 180 secondSending CDPv2 advertisements is enabled

Lnh Show CDP interface : hin th thng tin CDP v tng cng, cch ng gi v c timer,hold-time.

ATHENA1#show cdp intEthernet0 is administratively down, line protocol is down cng Ethernet0 down

do khng c thit blin kt trc tipEncapsulation ARPA cch ng gi packet

Sending CDP packets every 60 secondsHoldtime is 180 secondsSerial0 is up, line protocol is up cng Serial0 up do co thit blin kt trc tipEncapsulation HDLC cch ng gi packetdng HDLCSending CDP packets every 60 secondsHoldtime is 180 seconds

Serial1 is up, line protocol is up cng Serial1 up do c thit blin kt trc tipEncapsulation HDLC cch ng gi packetSending CDP packets every 60 secondsHoldtime is 180 seconds

Lu : ta c th dng lnh no cdp enable tt ch CDP trn cc interface, v lc ny lnh showCDP interface s

khng hi

n th

thng tin CDP trn interface

. N

u mu

n b

t li ch

CDP trninterface no ta dng lnh CDP enable trn interface .

ATHENA1(config)#int s0ATHENA1(config-if)#no cdp enable tt ch CDP trn interface Serial0ATHENA1(config-if)#^ZATHENA1#show cdp inter01 : 32 : 44 : %SYS-5-CONFIG_I : Configured from console by consoleEthernet0 is administratively down, line protocol is down


13/174





Encapsulation ARPASending CDP packets every 60 secondsHoldtime is 180 seconds

Serial1 is up, line protocol is upEncapsulation HDLCSending CDP packets every 60 secondsHoldtime is 180 seconds thng tin v cng Seria0 khng hin thsau khi

tt ch cdp trn n

Nu mun bt li ch CDP trn interface no ta dng lnh CDP enable trn interface .ATHENA1(config)#int s0ATHENA1(config-if)#cdp enable

ATHENA1(config-if)#exit

Lnh Show CDP traffic: hin th bm CDP bao gm s lng gi packet gi, nhn v bli.

ATHENA1#show cdp trafficCDP counters :

Total packets output : 128, Input : 115Hdr syntax : 0, Chksum error : 0, Encaps failed : 9No memory : 0, Invalid packet : 0, Fragmented : 0CDP version 1 advertisements output : 0, Input : 0CDP version 2 advertisements output : 128, Input : 115

Lnh Clear CDP couter : dng reset lai bm CDP. Lnh No CDP run : tt hon ton ch CDP trn RouterATHENA1(config)#no cdp runATHENA1(config)#^ZATHENA1#show cdp lnh show cdp khng hp l khi tt ch cdp% CDP is not enabled

Lnh CDP run : dng m li ch CDP trn Router

ATHENA1(config)#cdp runATHENA1(config)#exitATHENA1#show cdpGlobal CDP information :

Sending CDP packets every 60 secondsSending a holdtime value of 180 secondsSending CDPv2 advertisements is enabled

Lu : Giao thc CDP chcho ta bitc thng tin ca nhng thit bc lin kt trc tip.

Athena3#show cdp neighbors detail-------------------------Device ID : ATHENA1


14/174





Entry address(es) :IP address : 192. 168. 2. 1

Platform : cisco 2500, Capabilities : RouterInterface : Serial1, Port ID (outgoing port) : Serial1Holdtime : 138 sec

Version :Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-JK8OS-L), Version 12. 2(1d), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.Compiled Sun 03-Feb-02 22 : 01 by srani

advertisement version : 2

T Router Athena3 ch xem c thng tin ca thit b ni trc tip l Router Athena1Gi s ta thay i a chIP ca cng Serial1 router Athena3

Athena3(config)#int s0Athena3(config-if)#ip add 192. 168. 3. 2 255. 255. 255. 0Athena3(config-if)#no shutAthena3(config-if)#clock rate 56000Athena3(config-if)#^Z

Dng lnh Ping t Router Athena3 ping a chcng Serial 1 ca Router Athena1 :

Athena3#ping 192. 168. 2. 1Type escape sequence to abort.Sending 5, 100-byte ICMP Echos to 192. 168. 2. 1, timeout is 2 seconds :. . . . .Success rate is 0 percent (0/5)

S dng giao thc CDP t Router Athena3 xem thng tin v cc thit b lin kt trc tip :Athena3#show cdp neighbors detail-------------------------Device ID : ATHENA1Entry address(es) :IP address : 192. 168. 2. 1

Platform : cisco 2500, Capabilities : Router

Interface : Serial1, Port ID (outgoing port) : Serial1Holdtime : 144 secVersion :Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-JK8OS-L), Version 12. 2(1d), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2002 by cisco Systems, Inc.Compiled Sun 03-Feb-02 22 : 01 by srani


15/174





advertisement version : 2

Bn thy r t Router Athena3 ta ping khng thy c Router Athena1 nhng dng giao thc CDPbn vn nhn c thng tin ca thit b lin kt. y l u im ca giao thc CDP. u im ny srt hu ch cho bn khi x l s c mng.

Bi 3

Telnet


16/174





1. Gii thiu :

Telnet l mt giao thc u cui o ( Vitural terminal), l mt phn ca giao thc TCP/IP.Giao thc ny cho php to kt ni vi mt thit b t xa.

2. Mc ch :Bi thc hnh ny gip bn hiu v thc hin c nhng cu hnh cn thit c th thc

hin cc phin Telnet t host vo Router hay t Router vo Router.


hnh bi lab nh hnh trn, cc routerc ni vi nhau bng cp serial. Host1 ni virouter Athena1 bng cp cho, router Anthena1 v router Athena2 c ni vi nhau bng cngSerial.

4. Cc bc thc hin :Cu hnh cho cc router Athena1, Athena2 v Host 1 nh sau : Host 1 :

IP : 10. 0. 0. 2Subnetmask : 255. 255. 255. 0

Gateway : 10. 0. 0. 1

Router athena1version 12. 1

no service single-slot-reload-enable

service timestamps debug uptimeservice timestamps log uptime

no service password-encryption

!


17/174





hostname athena1

!

ip subnet-zero!

interface Ethernet0

ip address 10. 0. 0. 1 255. 255. 255. 0!

interface Serial0

ip address 192. 168. 1. 1 255. 255. 255. 0

clockrate 56000

!end

Router athena2Building configuration. . .

Current configuration : 582 bytes

!version 12. 2

no service single-slot-reload-enable

service timestamps debug uptimeservice timestamps log uptime

no service password-encryption!

hostname athena2!

interface Serial0

ip address 192. 168. 1. 2 255. 255. 255. 0no fair-queue

!

end

Bn phi chn chn rng cc kt ni vt l thnh cng (kim tra bng lnh Ping)

Kim tra kt ni Telnet :T Host ta th telnet vo Router Athena1 :

C : \Documentsand settings\Administrator>Telnet 10. 0. 0. 1

Password required, but none set i hi mt khu nhng khngc ci dtConnection to host lost Kt ni tht bi

T Router athena1 ta kt ni Telnet vo Router Athena2


18/174





athena1#telnet 192. 168. 1. 2

Trying 192. 168. 1. 2. . . Open

Password required, but none set

[Connection to 192. 168. 1. 2 closed by foreign host]

Thc hin Telnet khng thnh cng v chc nng Telnet i hi bn phi mng line Vty v cit mt khu cho n.

t mt khu Vty cho Router Athena1 :athena1#conf tEnter configuration commands, one per line. End with CNTL/Z.

athena1(config)#line Vty 0 4athena1(config-line)#pass athena1

athena1(config-line)#login

athena1(config-line)#exit

t mt khu Vty cho Router Athena2 :athena2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

athena2(config)#line vty 0 4athena2(config-line)#pass athena2

athena2(config-line)#loginathena2(config-line)#exit

Lc ny bn thc hin Telnet : T Host bn thc hin Telnet vo Router Athena1C : \Documentsand settings\Administrator>Telnet 10. 0. 0. 1

User Access Verification

Password :Athena1>ena% No password set

Athena1>

Tng t bn thc hin hin Telnet t Router Athena1 n Router Athena2 :athena1#192. 168. 1. 2

Trying 192. 168. 1. 2. . . Open

User Access VerificationPassword :

athena2>ena


19/174





% No password set

athena2>

Lu : i vi thit b ca Cisco, bn chcn nh a chca ni cn Telnetn, thit b sthiu v thc hin kt ni Telnet.Khi Telnet vo, bn ang Mode User v giao thc ny i hi bn phi c ci t mt khu vo Privileged Mode. Thc hin vic ci t mt khu :Router Athena1athena1(config)#ena pass cisco

athena1(config)#exit

Router Athena2

athena2(config)#ena pass classathena2(config)#exit

Bn thc hin li vic kt ni Telnet, t Host vo Router Athena1 :C : \Documentsand settings\Administrator>Telnet 10. 0. 0. 1

User Access Verification

Password : athena1

Athena1>enaPassword : cisco

Athena1#

T Router Athena1 vo Router Athena2 :athena1#192. 168. 1. 2Trying 192. 168. 1. 2. . . Open

User Access VerificationPassword : athena2

athena2>ena

Password : classathena2#

Ty bn c th thc hin vic thay i cu hnh cho cc thit b m khng cn phi thng quacng Console.

Kim tra vic Telnet bng lnh Show line

athena2#show line

Tty Typ Tx/Rx A Modem Roty AccO AccI Uses Noise Overruns Int


20/174





* 0 CTY - - - - - 5 0 0/0 -

1 AUX 9600/9600 - - - - 0 0 0/0 -

* 2 VTY - - - - - 1 0 0/0 -* 3 VTY - - - - - 7 0 0/0 -

* 4 VTY - - - - - 4 0 0/0 -

5 VTY - - - - - 1 0 0/0 -6 VTY - - - - - 0 0 0/0 -

Du * biu th nhng line bn ang s dng Telnet, theo nh bng trn, bn ang s dng 3 ngline Telnet qua li gia 2 Router Athena1 v Athena2 qua cc port 2, 3, 4.

Ct Uses ch s ln bn s dng ng line .

Lu : Bn chthc hin c vic Telnet qua li gia cc Router khng qu 10 ln cng lc (vbn chc 5 line Vty t0 n 4)athena1#192. 168. 1. 2

Trying 192. 168. 1. 2. . .% Connection refused by remote host

Router bo li khi bn thc hin phin Telnet th 11.Bn cng c th thc hin Telnet cng lc gia cc thit b bng cch t mn hnh telnet, bn nhnt hp phm : Ctrl-Shift-6 sau nhn phm X, lc ny bn s trli mn hnh gc ban u v bn

c th

tip t

c th

c hi

n cc phin Telnet vo cc thi

t b

khc.

tr

v

mn hnh Telnet ban

ubn n phm enter 2 ln Thot khi cc phin Telnet : chng ta s dng lnh Exit hay lnh Disconnect Ngt mt kt ni Telnet: chng ta s dng lnh clear line

Bi 4

Khi phc mt khu cho Cisco Router


21/174





(Recovery Password)

1. Gii thiu :Mt khu truy cp l rt hu ch trong lnh vc bo mt, tuy nhin i khi n cng em li phin

toi nu chng may bn qun mt mt khu truy nhp. Bi thc hnh khi phc mt khu cho CiscoRouter ny gip bn khi phc li mt khu ng nhp vo Router.

Lu : t mt khu cho Router c ngha rt ln trong kha cnh security, n ngn cn c ccphin Telnet t xa vo Router thay i cu hnh hay thc hin nhng mc ch khc. Bn nn

trnh nhm ln gia hai khi nim bo mt v khi phc mt khu, bn c th khi phc hay thayi c mt khu ca Router khng c ngha l mc bo mt ca Router khng cao v khiphc mt khu cho Router, iu kin tin quyt l bn phi thao tc trc tip trn Router, iu nyc ngha l bn phi c s chp nhn ca Admin hay k thut vin qun l Router.


`

Trong hnh trn PC ni vi router bng cp console

3. Gii thiu slc v qu trnh khing ca Router :

Khi va bt ngun, Router s kim tra phn cng, sau khi phn cng c kim tra hon tt,hiu hnh sc np t Flash, tip Router s np cu hnh trong NVRAM bao gm tt c

nhng ni dung cu hnh trc cho Router nh cc thng tin v giao thc, a ch cc cng vc mt khu truy nhp. V vy Router khng kim tra mt khu khi ng nhp, bn phi ngnkhng cho Router np d liu t NVRAM.

Mi dng Router c mt k thut khi phc mt khu khc nhau, tuy vy khi phc mt khu choRouter bn phi qua cc bc sau :

9 Bc 1 : Khi ng Router, ngn khng cho Router np cu hnh trong NVRAM. (bng cchthay i thanh ghi t 0x2102 sang thanh ghi 0x2142).

9 Bc 2: Reset li Router (lc ny Router s dng thanh 0x2142 khi ng).


22/174





9 Bc 3 : ng nhp vo Router(lc ny Router khng kim tra mt khu), dng cc lnh caRouter xem hay ci t li mt khu (bn chxem c mt khu khi mt khu c ci t ch khng m ha)

9 Bc 4 : Thay i thanh ghi (t 0x2142 sang 0x2102).9 Bc 5: Lu li cu hnh va ci t (lc ny mt khu bit).

4. Khi phc mt khu cho Cisco Router 2500.Gi s khi bn ng nhp vo Router nhng bn qun mt mt khu.

athena con0 is now available

Press RETURN to get started.

athena>enablePassword :Password :Password :% Bad secrets

Bn phi thc hin vic khi phc mt khu. Cc bc thc hin nh sau : Bc 1 : bn khi ng li Router v chuyn Router sang ch Rom Monitor

System Bootstrap, Version 5. 2(8a), RELEASE SOFTWARECopyright (c) 1986-1995 by cisco Systems2500 processor with 8192 Kbytes of main memory n Ctrl Break khng cho

Router np dliu tNVRAMAbort at 0x103AA7E (PC)>o/r 0x2142 Sdng lnh ny thayi gi trthanh ghi sang0x2142

Bc 2: khi ng li Router, lc ny Router s np cu hnh t thanh ghi 0x2142 (cu hnhtrng)

athena>ena password s khng yu cu kim tra khing nhpathena#show start dng lnh Show start xem cu hnh trong NVRAMUsing 456 out of 32762 bytes!

version 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Router!enable secret 5 $1$AqeQ$yB00zFjHxIiVoHLnbLEhh1 password secret


23/174





c m hoenable password cisco mt khu enable password l cisco!end

Bc 3 : Cu hnh li mt khu cho Router :

Trc tin bn phi copy ton b d liu t trong NVRAM vo RAM.

athena#copy start run copy cu hnh t NVRAM vo trong RAMathena#config tEnter configuration commands, one per line. End with CTRL/Z.

athena(config)#ena secret Athena mt khu secretc cu hnh li l Athenaathena(config)#exitathena#conf tathena(config)#ena pass class mt khu enable password l classathena(config)#exit

Bc 4 : Thay i thanh ghi hin hnh t0x2142 tr v0x2102Dng lnh Show version xem thanh ghi hin hnh

athena#show versionCisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmongImage text-base : 0x03042000, data-base : 0x00001000..

2 Serial network interface(s)32K bytes of non-volatile configuration memory.16384K bytes of processor board System flash (Read ONLY)

Configuration register is 0x2142 Thanh ghi0x2142angc sdng

9 Thayi thanh ghi:

athena(config)#config-register 0x2102 dng lnh config-registerathena(config)#exit

9 Xem li thanh ghi hin hnh :athena#show verCisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmong


24/174





.2 Serial network interface(s)32K bytes of non-volatile configuration memory.16384K bytes of processor board System flash (Read ONLY)

Configuration register is 0x2142 (will be 0x2102 at next reload) thanh ghi hinhnh l 0x2102

Bc 5: lu cu hnh thay i vo thanh ghi 0x2102athena#wr meBuilding configuration. . .

[OK]

Sau khi hon thnh, bn phi lu cc cu hnh t RAM vo trong NVRAM bng lnh copy run startathena#copy run start

Dng lnh show start xem cu hnh khi ng trong NVRAMathena#show startUsing 488 out of 32762 bytes!version 12. 1no service single-slot-reload-enableservice timestamps debug uptime

service timestamps log uptimeno service password-encryption!hostname athena!enable secret 5 $1$49cD$jrvYyRSQhpTAHuDA1/R1v.enable password class!!!End

Sau khi reload li, ng nhp vo Router, mt khu secret l Athena sc kim tra

athena con0 is now available

Press RETURN to get started.

athena>enaPassword : mt khu l Athena sc kim tra v chp nhnathena#

Ngi vit


25/174





NGUYN CH TRUYN

Bi 5

Recovery Password cho Switch 2950

1. Gii thiu :Trong bi lab ny chng ta se thc hin recovery password ca mt switch


Ni cp console gia PC vi switch. Chng ta s tin hnh recovery password trn switch 2950 trongbi lab ny.

3. Thc hin : kho st vic recovery password r rng hn, chng ta s cu hnh tn v password cho

switch trc khi tin hnh recovery password cho switchChng ta cu hnh tn v password cho switch nh sau :

Switch#conf tSwitch(config)#host Athena

Athena(config)#enable password cisco t password cho switch

Athena(config)#enable secret Athena t secret password cho switchSau khi cu hnh xong chng ta lu vo NVRAM v xem li cu hnh trong NVRAM trc khi tinhnh recovery password cho switch.

Athena#copy run startDestination filename [startup-config]?Building configuration. . .

Athena#show startAthena#sh startUsing 1186 out of 32768 bytes


26/174





version 12. 1hostname Athenaenable secret 5 $1$s22D$vCe6IFIeKLhUPZqgm6QZ6/enable password cisco

Chng ta tin hnh recovery password theo cch bc sau : Bc 1 : tt ngun switch, sau gia nt MODE trn switch 2950 trong lc bt ngun li. Khi

mn hnh hin nhng thng bo sau, ta nh nt MODE ra.

Cisco Internetwork Operating System SoftwareIOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12. 1(22)EA2, RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sun 07-Nov-04 23 : 14 by antonino

(mt s thng bo c lc b) flash_initload_helperboot

Bc 2 : Chng ta nhp flash_init bt u cu hnh cho cc file ca flash. Nhp cu lnhdir flash : xem cc file c cha trong flash. Sau chng ta i tn file config. text thnh config.bak (v cu hnh ca chng ta lu phn trc c switch cha trong file ny) bng cu lnh sau :rename flash : config. text flash : config. bakSau chng ta reload li switch bng cu lnh boot

Bc 3 : Trong qu trnh khi ng switch s hi :Continue with the configuration dialog? [yes/no] :

Chng ta nhp vo NO, b qua cu hnh ny. Sau khi khi ng xong chng ta vo modeprivileged.Switch>enSwitch#

Sau chng ta chuyn tn file config. bak trong flash thnh config. text bng cch :Switch#rename flash : config. bak flash : config. text

Ri cu hnh NVRam vo RAM bng cu lnh sau :Switch#copy flash : config. text system : running-config

Bc 4 : g b tt c cc loi passwordAthena#conf tAthena(config)#no enable passwordAthena(config)#no enable secret

Bc 5: copy cu hnh t RAM vo NVRam, ri reload switch li.Athena#copy run start

Destination filename [startup-config]? Building configuration. . .[OK]

Athena#reload


27/174





Bi 6

Np IOS IMAGE tTFTP SERVER choCisco Router chy tFlash

1. Gii thiu :Flash l 1 b nh c th xa, c dng lu tr hiu hnh v mt s m lnh. B nh

Flash cho php cp nht phn mm m khng cn thay th chip x l. Ni dung Flash vn c gikhi tt ngun.

Bi lab ny gup bn thc hin vic np IOS (Internetwork Operating System) Image t Flashtrong Router Cisco vo TFTP server to bn IOS Image d phng v np li IOS Image t tTFTP sever vo Cisco Router chy t Flash(khi phc phin bn c hay update phin bn mi) thngqua giao thc truyn TFTP (Trivial file transfer protocol)


TFTP Sever192.168.14.0255.255.255.0

Ethernet0192.168.14.1255.255.255.0

` Athena

Cp Console

hnh bi lab nh hnh v, PC ni vi router bng cp cho v mt cp console (iu khinrouter).3. Cc bc thc hin :

Chng ta s cu hnh cho router Athena v PC (ng vai tr nh mt TFTP server) nh sau : PC :


28/174





IP Address : 192. 168. 14. 2Subnetmask : 255. 255. 255. 0Gateway : 192. 168. 14. 1

Router Athena :no service password-encryptionhostname athena!ip subnet-zerono ip finger!interface Ethernet0ip address 192. 168. 14. 1 255. 255. 255. 0

!interface Serial0no ip addressshutdownno fair-queue


!ip kerberos source-interface any

ip classlessip http server!line con 0transport input none

line aux 0line vty 0 4!end

Bn thc hin lnh Pingm bo vic kt ni gia Router v TFTP serverathena#ping 192. 168. 14. 2Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 192. 168. 14. 2, timeout is 2 seconds :!!!!!Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms

Dng lnh Show version xem phin bn IOS hin hnh :athena#show verCisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-JK8OS-L), Version 12. 2(1d), RELEASE SOFTWARE (fc1) Routerang s dng IOS version 12. 2(1d)


29/174





Copyright (c) 1986-2002 by cisco Systems, Inc.Compiled Sun 03-Feb-02 22 : 01 by sraniImage text-base : 0x0307EEE0, data-base : 0x00001000

ROM : System Bootstrap, Version 11. 0(10c), SOFTWAREBOOTFLASH : 3000 Bootstrap Software (IGS-BOOT-R), Version 11. 0(10c), RELEASE SOFTWARE (fc1)

athena uptime is 15 minutesSystem returned to ROM by bus error at PC 0x100D042, address 0xFFFFFFFCSystem image file is "flash : /c2500-jk8os-l. 122-1d. bin" Tn tp tin IOS image

c np tflash- loICisco 2500sdng hiu hnhphin bn12. 2(1d)

cisco 2500 (68030) processor (revision N) with 14336K/2048K bytes of memory.Router c 16MB RAM, 14 MB dng cho

b nhxl, 2 MB dng cho b nhI/OProcessor board ID 08030632, with hardware revision 00000000Bridging software.X. 25 software, Version 3. 0. 0.SuperLAT software (copyright 1990 by Meridian Technology Corp).TN3270 Emulation software.1 Ethernet/IEEE 802. 3 interface(s)

2 Serial network interface(s)32K bytes of non-volatile configuration memory.16384K bytes of processor board System flash (Read ONLY) Router c 16 MB flashConfiguration register is 0x2102 Thanh ghi hin hnh

Dng lnh Show Flash xem b nhFlash

athena#show flashSystem flash directory :File Length Name/status1 16505800 /c2500-jk8os-l. 122-1d. bin

[16505864 bytes used, 271352 available, 16777216 total]

16384K bytes of processor board System flash (Read ONLY)

ngha t n File IOS Image : c2500 : loi thit b Cisco 2500 jk8os : cc tnh nng

j : enterprise subnetk8 : reserved for huture encrytion capapilitieso : fire walls : suorce router switch


30/174





1. 122 : lai phin bn IOS

Bn thc hin vic np IOS image tFlash vo TFTP server:

athena#copy flash tftpSource filename []? /c2500-jk8os-l. 122-1d. bin

Address or name of remote host []? 192. 168. 14. 2 a chTFTP serverDestination filename [c2500-jk8os-l. 122-1d. bin]?!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

16505800 bytes copied in 232. 724 secs (71145 bytes/sec)

Qu trnh np thnh cng, file IOS image c lu vo chng trnh cha TFTP server

Bn thc hin xong vic np IOS t Flash vo TFTP server, sau y bn thc hin li vic np mtIOS c sn t TFTP server vo li flash ca mt Router.

Cc bc thc hin : Bn cu hnh Router v Host nh trn. chy chng trnh TFTP tPC.

Gi s bn c 2 file IOS c sn trong TFTP server


31/174





File IOS Image c2500-i-l. 121-26. bin c dung lng 7, 85 MB.File IOS Image c2500-jk80os-l. 122-1d. bin c dung lng 16MB9 Bn thc hin kim tra Flash :

athena#show flashSystem flash directory :File Length Name/status1 8039140 /c2500-i-l. 121-26. bin

[8039204 bytes used, 349404 available, 8388608 total]8192K bytes of processor board System flash (Read ONLY)

Nhn xt : B nhFlash ca bn c dung lng l 8 MB, bn c thlu file IOS image c2500-i-l.121-26. bin vo Flash

9 Thc hin qu trnh copy flashathena#copy tftp flash

**** NOTICE ****Flash load helper v1. 0This process will accept the copy options and then terminatethe current system image to use the ROM based image for the copy.Routing functionality will not be available during that time.If you are logged in via telnet, this connection will terminate.Users with console access can see the results of the copy operation.


32/174





---- ******** ----Proceed? [confirm] xc nhn vic copy

Address or name of remote host []? 192. 168. 14. 2 tn haya chni luFlash (TFTP Server)

Source filename []? c2500-i-l. 121-26. bin Tn file ngunDestination filename [c2500-i-l. 121-26. bin]? Tn file ch%Warning : There is a file already existing with this nameDo you want to over write? [confirm]

Accessing tftp : //192. 168. 14. 2/c2500-i-l. 121-26. bin. . .Erase flash : before copying? [confirm]

00 : 09 : 43 : %SYS-5-RELOAD : Reload requested%SYS-4-CONFIG_NEWER : Configurations from version 12. 1 may not be correctly understood.%FLH : c2500-i-l. 121-26. bin from 192. 168. 14. 2 to flash. . .

System flash directory :File Length Name/status1 8039140 /c2500-i-l. 121-26. bin

[8039204 bytes used, 349404 available, 8388608 total]Accessing file 'c2500-i-l. 121-26. bin' on 192. 168. 14. 2. . .Loading c2500-i-l. 121-26. bin from 192. 168. 14. 2 (via Ethernet0) : ! [OK]

Erasing device. . . eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee. . . erasedqu trnh xa flash

Loading c2500-i-l. 121-26. bin from 192. 168. 14. 2 (via Ethernet0) : !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! qu trnh np Flash[OK - 8039140/8388608 bytes]

Verifying checksum. . . OK (0x9693)Flash copy took 0 : 03 : 57 [hh : mm : ss]%FLH : Re-booting system after downloadF3 : 7915484+123624+619980 at 0x3000060

Restricted Rights Legend

Use, duplication, or disclosure by the Government is

subject to restrictions as set forth in subparagraph(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52. 227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252. 227-7013.

cisco Systems, Inc.170 West Tasman DriveSan Jose, California 95134-1706


33/174





Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmongImage text-base : 0x03042000, data-base : 0x00001000

cisco 2500 (68030) processor (revision N) with 6144K/2048K bytes of memory.Processor board ID 17553463, with hardware revision 00000000Bridging software.X. 25 software, Version 3. 0. 0.1 Ethernet/IEEE 802. 3 interface(s)

2 Serial network interface(s)32K bytes of non-volatile configuration memory.8192K bytes of processor board System flash (Read ONLY)

Press RETURN to get started!

Sau khi np Flash hon thnh, Router s reset li thay i Flash mi, lc ny IOS trong Flash s lfile IOS bn va copy vo.

9 Qu trnh np Flash trong TFTP server


34/174





Lu : l trong c qu trnh copy flash tTFTP server vo Router hay tRouter vo TFTP serverbn u phi chy chng trnh TFTP server trn PC.


35/174





Bi 7

Np IOS image cho 2 Routerchy tFlash

1. M t bi lab v hnh :Bi thc hnh ny gup bn thc hin vic np IOS image t Flash ca Router ny sang Router

kia.

Hai routerc ni vi nhau bng cp serial. a chcc interface c ghi trn hnh.

2. Cc bc thc hin :Bn cu hnh cho 2 Router nh sau :

Athena1#sh run

Building configuration. . .

Current configuration : 440 bytes!version 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname Athena1

!ip subnet-zero!interface Ethernet0no ip addressshutdown

!interface Serial0ip address 10. 0. 0. 1 255. 0. 0. 0


36/174





clockrate 64000!interface Serial1no ip addressshutdown

!ip classlessip http server!line con 0line aux 0line vty 0 4

!end

Athena2#sh run

Building configuration. . .

Current configuration : 448 bytes!version 12. 1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptime

no service password-encryption!hostname Athena2!ip subnet-zero!interface Ethernet0no ip address

shutdown!interface Serial0ip address 10. 0. 0. 2 255. 0. 0. 0no fair-queue


!ip classlessip http server!line con 0


37/174





line aux 0line vty 0 4!end

Chng ta kim tra flash ca hai router :Athena1#sh flash

System flash directory :File Length Name/status1 8038440 /c2500-i-l. 121-25. bin //T n File IOS Image//

[8038504 bytes used, 350104 available, 8388608 total]8192K bytes of processor board System flash (Read ONLY) //8MB flash//

Athena2#sh flash

System flash directory :File Length Name/status1 8039140 c2500-i-l. 121-26. bin


thc hin vic copy IOS image t Router Athena1 sang Router Athena2, bn phi m ch TFTP server cho Router Athena1.

Athena1(config)#tftp-server flash :

Athena1(config)#tftp-server flash : c2500-i-l. 121-26. binAthena1(config)#^Z

Bn thc hin vic Copy IOS t Router Athena2Athena2#copy tftp flash :

**** NOTICE ****Flash load helper v1. 0This process will accept the copy options and then terminatethe current system image to use the ROM based image for the copy.Routing functionality will not be available during that time.If you are logged in via telnet, this connection will terminate.Users with console access can see the results of the copy operation.

---- ******** ----

Proceed? [confirm]Address or name of remote host []? 10. 0. 0. 1 a chRouter Athena1(Serial0)Source filename []? c2500-i-l. 121-26. bin Tn file IOS imageDestination filename [c2500-i-l. 121-26. bin]? Tn File ch trong Router Athena2

Accessing tftp : //10. 0. 0. 1/c2500-i-l. 121-26. bin. . .Erase flash : before copying? [confirm] Xc nhn vic copy

00 : 02 : 57 : %SYS-5-RELOAD : Reload requested%SYS-4-CONFIG_NEWER : Configurations from version 12. 1 may not be correctly understood.


38/174





%FLH : c2500-i-l. 121-26. bin from 10. 0. 0. 1 to flash. . .

System flash directory :File Length Name/status1 8038440 /c2500-i-l. 121-25. bin

[8038504 bytes used, 350104 available, 8388608 total]Accessing file 'c2500-i-l. 121-26. bin' on 10. 0. 0. 1. . .Loading c2500-i-l. 121-26. bin from 10. 0. 0. 1 (via Serial0) : ! [OK]

Erasing device. . . eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee. . . erasedQu trnh xo FlashLoading c2500-i-l. 121-26. bin from 10. 0. 0. 1 (via Serial0) : Qu trnh np IOS!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!![OK - 8039140/8388608 bytes]

Verifying checksum. . . OK (0x9693)Flash copy took 0 : 22 : 28 [hh : mm : ss]%FLH : Re-booting system after downloadF3 : 7915484+123624+619980 at 0x3000060

Restricted Rights Legend

Use, duplication, or disclosure by the Government issubject to restrictions as set forth in subparagraph

(c) of the Commercial Computer Software - RestrictedRights clause at FAR sec. 52. 227-19 and subparagraph(c) (1) (ii) of the Rights in Technical Data and ComputerSoftware clause at DFARS sec. 252. 227-7013.

cisco Systems, Inc.170 West Tasman DriveSan Jose, California 95134-1706

Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmong

Image text-base : 0x03042000, data-base : 0x00001000

cisco 2500 (68030) processor (revision N) with 6144K/2048K bytes of memory.Processor board ID 17553463, with hardware revision 00000000Bridging software.X. 25 software, Version 3. 0. 0.1 Ethernet/IEEE 802. 3 interface(s)2 Serial network interface(s)32K bytes of non-volatile configuration memory.


39/174





8192K bytes of processor board System flash (Read ONLY)

Press RETURN to get started! Router s reset li sau khi np IOS mi

00 : 00 : 05 : %LINK-3-UPDOWN : Interface Ethernet0, changed state to up00 : 00 : 05 : %LINK-3-UPDOWN : Interface Serial0, changed state to up00 : 00 : 06 : %LINK-3-UPDOWN : Interface Serial1, changed state to down00 : 00 : 07 : %LINEPROTO-5-UPDOWN : Line protocol on Interface Serial0, changed state to up00 : 00 : 14 : %LINEPROTO-5-UPDOWN : Line protocol on Interface Ethernet0, changed state todown00 : 00 : 16 : %LINK-5-CHANGED : Interface Ethernet0, changed state to administratively down00 : 00 : 16 : %SYS-5-CONFIG_I : Configured from memory by console

00 : 00 : 20 : %LINK-5-CHANGED : Interface Serial1, changed state to administratively down00 : 00 : 20 : %LINEPROTO-5-UPDOWN : Line protocol on Interface Serial0, changed state to up00 : 00 : 22 : %LINEPROTO-5-UPDOWN : Line protocol on Interface Serial1, changed state to down00 : 01 : 00 : %SYS-5-RESTART : System restarted --Cisco Internetwork Operating System SoftwareIOS (tm) 2500 Software (C2500-I-L), Version 12. 1(26), RELEASE SOFTWARE (fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.Compiled Sat 16-Oct-04 02 : 44 by cmong

Athena2>

Bn c th kim tra Flash li bng lnh show flashAthena2>sh flashSystem flash directory :File Length Name/status1 8039140 /c2500-i-l. 121-26. bin


Lu : V y bn s dng 2 Router c b nh Flash bng nhau nn bt but bn phi thc hinvic xa Flash c trong qu trnh thc hin copy Flash mi, nhng trong trng hp bn s dng ccloi Router c b nh Flash ln, cn b nh lu thm IOS image (bn dng lnh Show Flashhay Show version kim tra) th bn khng cn phi xa Flash, iu ny c ngha l bn c th lu2, 3 hay nhiu IOS trn Flash ty thuc vo kh nng lu tr ca Flash. Lc ny bn phi khai bocho Router bit phi dng IOS Image no khi ng, bn dng lnh Boot System flash trongmode config thc hin qu trnh khai bo ny.


40/174





Bi 8

Np IOS cho Switch

1. Gii thiu chung v switch 2950 :Hnh nh mt trc ca switch 2950

Nhn vo hnh bn c th thy switch c 12 port FastEtheret. H thng lu tr tp tin ca switch 2950 : NVRAM lu startup-config. Flash lu cc tp tin : IOS image(thng c phn m rng l. bin), vlan. dat(cha cc cu

hnh ca cc VLAN), config. text, private-config. text. RAM cha running-config. Qu trnh khi ng s load tp tin config. text vo startup-config cha trong NVRAM. Nu

xo tp tin config. text, sau khi khi ng li s mt ht tt c cc cu hnh.

2. Mcch bi lab :IOS image ging nh l hiu hnh i vi mt my tnh bnh thng. Theo thi gian, th IOS

image s c nhng phin bn mi hn so vi phin bn ang c trong switch. Cc phin bn mi hnc a ra nhm : sa nhng li c th mc phi trong phin bn trc, cung cp nhng tnh nngmi cho cc protocol c, hoc l cp nht nhng protocol mi. V vy, bn cn cp nht phin bnmi cho cc switch ca bn n hot ng tt v c th tng thch vi nhng switch mi scthm vo mng sau ny.



41/174





PC ni vi Switch 2950 bng mt ng cp thng v mt cp console. PC v siwtch c c a chIP nh trn hnh.4. Cc bc thc hin :

BC 1 :Dng cp console kt ni my tnh vi cng console ca switch. Cm ngun cho switch, dng

chng trnh Hyperterminal ca hiu hnh windows cung cp kt ni n switch, kt ni ny sgip chng ta thc hin cc cu hnh c bn cho switch. Bn phi thit lp cu hnh cho kt ni ldefault. Dng cp thng, ni card mng ca my tnh vi 1 cng FastEthernet mt trc ca switch phc v cho bi lab cp nht IOS cho switch.

Xo cu hnh hin ti trn mySwitch>enableSwitch#erase startup-configErasing the nvram filesystem will remove all configuration files! Continue? [confirm]yErase of nvram : completeSwitch#00 : 04 : 57 : %SYS-7-NV_BLOCK_INIT : Initalized the geometry of nvramSwitch#

Xa cu hnh vlan c :Switch#delete vlan. dat

Switch#reloadProceed with reload? [confirm]y00 : 06 : 33 : %SYS-5-RELOAD : Reload requested

--output omitted

Would you like to enter the initial configuration dialog? [yes/no] : n

--output omitted


42/174





BC 2 : Xem cu hnh mc nh ca switch

Switch>Switch>enSwitch#show running-config--output omitted!interface Vlan1no ip addressno ip route-cacheshutdown

!ip http server!line con 0line vty 5 15!--output omitted

BC 3 : Bc ny thc hin cc cu hnh ban u v kim tra li cc cu hnh ny ngcha.Trc tin bn phi cu hnh switch name, enable password, privileged password, consolepassword, v virtual terminal password. Cng gn ging cc lnh trong router.Switch#configure terminal

Switch(config)#hostname athenaAthena(config)#enable password ciscoAthena(config)#enable secret classAthena(config)#line con 0Athena(config-line)#password athenaAthena(config-line)#loginAthena(config-line)#line vty 0 15Athena(config-line)#password certAthena(config-line)#loginAthena(config-line)#^ZAthena#00 : 08 : 11 : %SYS-5-CONFIG_I : Configured from console by console

Athena#

thc hin c bi lab ny bn phi cp pht a ch IP cho VLAN 1 c th kt ni thnh cngvi server, v cng phi cu hnh default-gateway (bn nn tp thi quen cu hnh default-gatewaymi khi cu hnh).

Athena#configure terminalEnter configuration commands, one per line. End with CNTL/Z.

Athena(config)#interface vlan 1Athena(config-if)#ip address 10. 1. 1. 251 255. 255. 255. 0Athena(config-if)#no shutdown


43/174





Athena(config-if)#00 : 17 : 48 : %LINK-3-UPDOWN : Interface Vlan1, changed state to up

Athena(config-if)#

Cn m bo a ch IP cp pht cho VLAN l a ch hp l (ngha l n thuc v subnet cp phtcho VLAN )Theo mc nh, tt c cc port u thuc v VLAN 1. Do , tt c cc thit b bt c port no cngu phi thuc v cng 1 subnet cp pht cho VLAN 1 trn. Bn cu hnh cho my tnh ca bna chIP v subnet mask nh sau : 10. 1. 1. 10 255. 255. 255. 0Kim tra li kt ni c thnh cng hay khng bng cch g lnh sau trn PC :C : \>ping 10. 1. 1. 251

Lu : Nu ping khng thnh cng, c th phi ch vi pht switch cp nht li cu hnh, ri pingli. Nu vn khng thnh cng phi kim tra li xem thc hin ng cc bc cu hnh nh trncha.By gi bn c thng my tnh truy cp trn switch thng qua telnet hoc l web browser.Thc hin telnet t my tnh n switch dng a chIP ca VLAN1 10. 1. 1. 251, nhp vo mt m l: cert khi c hi. Hoc m ra mt web browser, nhp vo a chIP 10. 1. 1. 251, nhp vo tn userl athena, phi nhp mt m l class.

BC 4 : Xem s qua cc tp tin h thng trn switch bng lnh sau :

athena#show file systemsFile Systems :

Size(b) Free(b) Type Flags Prefixes* 7741440 3171840 flash rw flash :

- - opaque ro bs :32768 31806 nvram rw nvram :- - opaque rw null :- - opaque rw system :- - network rw tftp :- - opaque ro xmodem :- - opaque ro ymodem :- - network rw rcp :- - network rw ftp :- - opaque ro cns :

athena#

Trong s cc tp tin trn switch c lu li cn ch : System Image (tp tin IOS nm trn vng nhflash), tp tin cu hnh lc startup nm trn NVRAM ca vng nh flash. H iu hnh ca switch

c load trn DRAMXem thng tin v cc tp tin h thng ca switch. bit c version hin ti ca IOS g lnh sau :athena#show versionOS (tm) C2950 Software (C2950-I6Q4L2-M), Version 12. 1(22)EA2, RELEASESOFTWARE(fc1)Copyright (c) 1986-2004 by cisco Systems, Inc.--output omitted--

athena#dir


44/174





Directory of flash : /

2 -rwx 109 Mar 01 1993 00 : 20 : 34 +00 : 00 info4 drwx 3968 Mar 01 1993 00 : 23 : 20 +00 : 00 html5 -rwx 3086328 Mar 01 1993 00 : 22 : 37 +00 : 00 c2950-i6q4l2-mz. 121-22. EA2

. bin338 -rwx 109 Mar 01 1993 00 : 23 : 56 +00 : 00 info. ver340 -rwx 283 Jan 01 1970 00 : 00 : 48 +00 : 00 env_vars

7741440 bytes total (3173376 bytes free)athena#

BC 5: Thc hin sao chp IOS image gia tftp server v switch.a. Chp file IOS image t switch ln tftp server (upload)b. Chp file IOS image t tftp server v li switch (download)

C php cn bn ca lnh chp tp tin ca switch : copy from source to dest. bit thm chitit ca lnh copy c th s dng help ca CLI nh cch sau :athena#copy ?/erase Erase destination file system./noverify Disable automatic image verification after copybs : Copy from bs : file systemcns : Copy from cns : file systemflash : Copy from flash : file systemftp : Copy from ftp : file systemnull : Copy from null : file systemnvram : Copy from nvram : file system

rcp : Copy from rcp : file systemrunning-config Copy from current system configurationstartup-config Copy from startup configurationsystem : Copy from system : file systemtftp : Copy from tftp : file systemxmodem : Copy from xmodem : file systemymodem : Copy from ymodem : file system

athena#copyUpload tp tin IOS ln tftp serverathena#copy flash : c2950-i6q4l2-mz. 121-22. EA2. bin tftp

Address or name of remote host []? 10. 1. 1. 10Destination filename [c2950-i6q4l2-mz. 121-22. EA2. bin]? c2950-i6q4l2-mz. 121-22. EA2. bin!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!--output omitted--

3086328 bytes copied in 21. 672 secs (142411 bytes/sec)athena#

Download IOS image t TFTP server vo Flash ca switch, v bn s down load v tp tin va miupload ln, dn n b trng tn cho nn bn sc hi l c ghi ln hay khng, bn phi tr lil yes :athena#copy tftp flash :

Address or name of remote host []? 10. 1. 1. 10Source filename []? c2950-i6q4l2-mz. 121-22. EA2. bin


45/174





Destination filename [c2950-i6q4l2-mz. 121-22. EA2. bin]?%Warning : There is a file already existing with this nameDo you want to over write? [confirm]y

Accessing tftp : //10. 1. 1. 10/c2950-i6q4l2-mz. 121-22. EA2. bin. . .Loading c2950-i6q4l2-mz. 121-22. EA2. bin from 10. 1. 1. 10 (via Vlan1) : !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!--output omitted--[OK - 3086328 bytes]3086328 bytes copied in 87. 712 secs (35187 bytes/sec)

BC 6 : Lu li cc cu hnh :athena#copy running-config startup-config

MRNG :Bn nn th thit lp kt ni 2 switch vi nhau, cu hnh 1 switch lm tftp server, cn switch kiaphi cp nht li IOS image ca mnh t switch.


46/174





Phn 2

Cu hnh cho Switch


47/174





Bi 1

CU HNH VLAN TRN SWITCH 29501. Gii thiu chung v VLAN :

Trc y, cc switch ch c chc nng ngn cch cc broadcast domain, cho nn c th xemcc thit bc cm trn cng mt switch l mt LAN network. iu dn n hn ch khng gianvt l ca 1 LAN chc th trong 1 cn phng hoc cng lm l to nh. Vi chc nng phn chiaVLAN bn c th cp mt s port ca switch cho VLAN A, v cc port khc cho VLAN B Mi VLANl mt broadcast domain v 2 thit b trn 2 VLAN khc nhau khng th lin lc c nu khng cthit b lp 3 kt ni 2 VLAN li vi nhau. VLAN em li s thu li trong vic chia nhm lm vic v 1VLAN c th nm nhiu switch khc nhau, min l cc switch c kt ni vi nhau.


Straight through

Straight through

Console

`

`

PC1

PC2Sw

itch2

950

VLAN 1:

192.168.1.1255.255.255.0

VLAN 10:192.168.10.1

255.255.255.0VLAN 20:

192.168.20.1255.255.255.0

Name: accounting

Cc thit b cn c : 1 switch 2950, 2 PC, 2 cp thng, 1 cp console

3. Cc bc thc hin : BC 1

Thit lp cc kt ni ging nh trong hnh.Xo cu hnh hin ti trn switch 2950 : xo startup-config, v vlan. dat

Switch>enableSwitch#erase startup-configErasing the nvram filesystem will remove all configuration files! Continue? [confirm]yErase of nvram : completeSwitch#00 : 04 : 57 : %SYS-7-NV_BLOCK_INIT : Initalized the geometry of nvramSwitch#


48/174





Xa cu hnh vlan c :Switch#delete vlan. dat

Switch#reloadProceed with reload? [confirm]y00 : 06 : 33 : %SYS-5-RELOAD : Reload requested

--output omitted

Would you like to enter the initial configuration dialog? [yes/no] : n

--output omitted

BC 2 : Xem qua cu hnh mc nh ca switch :

Switch>Switch>enableSwitch#show running-config--output omitted!interface Vlan1no ip addressno ip route-cacheshutdown

!ip http server!line con 0line vty 5 15!--output omitted

Thc hin cc bc cu hnh c bn :Switch#configure terminalEnter configuration commands, one per line. End with CNTL/Z.Switch(config)#hostname athena

athena(config)#enable password ciscoathena(config)#enable secret classathena(config)#line con 0athena(config-line)#password athenaathena(config-line)#loginathena(config-line)#line vty 0 15athena(config-line)#password certathena(config-line)#loginathena(config-line)#^Z


49/174


50/174





athena(vlan)#vlan 20VLAN 20 added :

Name : VLAN0020athena(vlan)#exit

APPLY completed.Exiting. . . .athena#configure terminalathena(config)#interface fast 0/9athena(config-if)#switchport access vlan 20athena(config-if)#exitathena(config)#interface range fast 0/10, fast 0/12athena(config-if-range)#switchport access vlan 20

athena(config-if-range)#exitathena(config)#

Xem li cc cu hnh mi nhp vo bng lnh : show vlanathena#show vlan

VLAN Name Status Ports---- -------------------------- ------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4

Fa0/1110 VLAN0010 active Fa0/5, Fa0/6, Fa0/7, Fa0/820 VLAN0020 active Fa0/9, Fa0/10, Fa0/121002 fddi-default act/unsup

--output omitted

athena#vlan databaseathena(vlan)#vlan 20 name accountingVLAN 20 modified :

Name : accountingathena(vlan)#exit

APPLY completed.Exiting. . . .

Xem tn ca vlan 20 by gi c i thnh accouting ch khng cn l tn mc nh : VLAN0020nh trc y.

athena#show vlan

VLAN Name Status Ports---- ----------------- -------- --------------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4

Fa0/1110 VLAN0010 active Fa0/5, Fa0/6, Fa0/7, Fa0/820 accounting active Fa0/9, Fa0/10, Fa0/121002 fddi-default act/unsup


51/174





--output omitted--

By gi bn i tn VLAN 10 thnh engineering nhng sau nhp vo lnh abort, tn ca VLAN 10vn khng thay i, v n khng c lu li. Lnh abort s hu tt c cu hnh trong phin lm ngnhp vo vlan database hin hnh.athena#vlan databaseathena(vlan)#vlan 10 name engineeringVLAN 10 modified :

Name : enginerringathena(vlan)#abort

Aborting. . . .

athena#athena#show vlan

VLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4

Fa0/1110 VLAN0010 active Fa0/5, Fa0/6, Fa0/7, Fa0/820 accounting active Fa0/9, Fa0/10, Fa0/121002 fddi-default act/unsup

--output omitted

BC 4 : Nhp vo a chIP cho cc VLAN interface

athena(config)#interface vlan 1athena(config-if)#ip address 192. 168. 1. 1 255. 255. 255. 0athena(config-if)#no shutathena(config-if)#interface vlan 10athena(config-if)#ip address 192. 168. 10. 1 255. 255. 255. 0athena(config-if)#no shutathena(config-if)#interface vlan 20athena(config-if)#ip address 192. 168. 20. 1 255. 255. 255. 0athena(config-if)#no shut

Kim tra li cc a chIP nhp vo bng lnh sau :athena#show run!interface Vlan1ip address 192. 168. 1. 1 255. 255. 255. 0no ip route-cacheshutdown!interface Vlan10ip address 192. 168. 10. 1 255. 255. 255. 0


52/174





no ip route-cacheshutdown

!interface Vlan20ip address 192. 168. 20. 1 255. 255. 255. 0no ip route-cache

!

Lu : chc mt vlan interface c php up vo bt c lc no. Chng hn interface vlan 20 angup, nu bn g lnh no shut cho interface vlan 10 th interface vlan 20 tng down.

BC 5 : kim tra hot ng ca cc VLAN, bn c th lm nh sau :

a) Cu hnh cho PC 1 a chIP : 192. 168. 1. 2 255. 255. 255. 0. Dng cp thng ni card mngca PC1 vi port 1 ca switch. ng t PC 1 bn g lnh : ping 192. 168. 1. 1. Lnh ping phi thnhcng. Nu khng, bn phi kim tra li ton b cu hnh.

b) Cu hnh cho PC1 a ch IP : 192. 168. 10. 2 255. 255. 255. 0. Ni PC1 vi port 5 ca switch(VLAN 10).ng trn PC g lnh : ping 192. 168. 10. 1

c) Cu hnh cho PC1 a ch IP : 192. 168. 20. 2 255. 255. 255. 0. Ni PC1 vi port 9 ca switch(VLAN 20). G lnh : ping 192. 168. 1. 1. Lnh ping phi thnh cng. Cu hnh cho PC2 a ch IP :192. 168. 20. 3 255. 255. 255. 0, ni PC2 vi port 10 trn switch. ng trn PC1 g lnh : ping 192.168. 20. 3. Lnh ping phi thnh cng. By gi cu hnh cho PC2 a chIP : 192. 168. 10. 2 255. 255.255. 0, ni PC2 vi port 5 trn switch (VLAN 10) By gi bn khng th ping t PC1 n PC2 c vchng trn 2 VLAN khc nhau.


53/174





Bi 2

Cu hnh VLAN TRUNK1. Gii thiu :

Trunk l mt ng vt l ng thi ca l mt ng logic cho php vlan trn hai switch khcnhau trao i thng tin c vi nhau. Thay v vlan trn hai switch mun trao i thng tin vi nhauchng ta phi ni mt port thuc vlan trn switch ny vi mt port cng thuc vlan trn switchcn li

th trunk cho php thc hin iu chbng mt ng vt l. Trunk to ra nhiu ng kt ni vlano trn mt ng vt l. T vlan trn cc switch khc c th lin lc c vi nhau.

Trunk c hai loi ng gi l : dot1q v isl. Dot1q s dng cc frame tagging truyn d liu cavlan gia hai switch khc nhau. Cn ISL sng gi ethernet frame bng cc gn vo u fram gi trVLAN ID.



54/174





Hai switch c ni vi nhau bng cp cho v c cu hnh cng VTP domain.

3. Cu hnh cho cc switch :Chng ta to vlan2, vlan4, vlan6 cho Athena1; vlan3, vlan5, vlan7 cho Athena2 v cu hnh

cho hai switch trong cng mt VTP domain.Athena1#vlan databaseAthena1(vlan)#vlan 2 name vlan2 To vlan2 cho switch Athena1Athena1(vlan)#vlan 4 name vlan4Athena1(vlan)#vlan 6 name vlan6Athena1(vlan)#vtp domain name Athena Cu hnh cho Athena1 thuc

VTP domain Athena

Athena1(vlan)#applyAthena2#vlan databaseAthena2(vlan)#vlan 3 name vlan3Athena2(vlan)#vlan 5 name vlan5Athena2(vlan)#vlan 7 name vlan7Athena2(vlan)#vtp domain name AthenaAthena2(vlan)#apply

Sau khi cu hnh Vlan xong chng ta kim tra li cc vlan ca Athena1 v Athena2 bng cu lnhshow vlan.

Athena1#sh vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------

1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/12

2 vlan2 active4 vlan4 active6 vlan6 active

Athena2#sh vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/2, Fa0/3, Fa0/4, Fa0/5,

Fa0/6, Fa0/7, Fa0/8, Fa0/9,Fa0/10, Fa0/11, Fa0/12, Fa0/13,

Fa0/14, Fa0/15, Fa0/16, Fa0/17,Fa0/18, Fa0/19, Fa0/20, Fa0/21,Fa0/22, Fa0/23, Fa0/24


Switch Athena1 c to vlan2, vlan4, vlan6; switch Athena2 c vlan3, vlan5, vlan6.By gi chng ta s cu hnh ng trunk cho hai switch bng cch :(Chng ta cha ni hai port fa0/1 ca hai switch li vi nhau)


55/174





Athena1#conf tAthena1(config)#in fa0/1Athena1(config-if)#switchport mode trunk Cu hnh cho port Fa0/1 l trunk

Athena2#conf tAthena2(config)#in fa0/1Athena2(config-if)#switchport mode trunkAthena2(config-if)#switchport trunk encapsulation dot1q sdng giao thc

ng gi dot1q cho ng trunkLu : do switch 2950 ch h tr dot1q nn chng ta phi cu hnh cho switch Athena2 (2900) sdng cng giao thc ng gi l dot1q. Khng cu hnh ISL cho switch Athena2.By gi chng ta s dng cu lnh show vtp status kim tra VTP :

Athena1# sh vtp statusVTP Version : 2Configuration Revision : 3Maximum VLANs supported locally : 64Number of existing VLANs : 8VTP Operating Mode : ServerVTP Domain Name : AthenaVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xEA 0xB0 0xB8 0x44 0xFF 0x84 0x8D 0xFDConfiguration last modified by 0. 0. 0. 0 at 3-1-93 00 : 22 : 49

Athena2#sh vtp statusVTP Version : 2Configuration Revision : 2Maximum VLANs supported locally : 68Number of existing VLANs : 11VTP Operating Mode : ServerVTP Domain Name : AthenaVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xA6 0x13 0x28 0xD8 0x04 0xB8 0xAD 0x14Configuration last modified by 0. 0. 0. 0 at 3-1-93 00 : 17 : 09

Chng ta lu l s configuration revision ca VTP switch Athena1 ln hn ca Athena2. Hai switchc cng VTP domain name l Athena v c hai l VTP server.By gi chng ta ni hai port fa0/1 ca hai switch li vi nhau v kim tra li cc vlan.

Athena1#sh vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4

Fa0/5, Fa0/6, Fa0/7, Fa0/8Fa0/9, Fa0/10, Fa0/11, Fa0/12


56/174







Fa0/6, Fa0/7, Fa0/8, Fa0/9,Fa0/10, Fa0/11, Fa0/12, Fa0/13,Fa0/14, Fa0/15, Fa0/16, Fa0/17,Fa0/18, Fa0/19, Fa0/20, Fa0/21,

Fa0/22, Fa0/23, Fa0/242 vlan2 active4 vlan4 active6 vlan6 active

Nhn xt: cc vlan trn switch Athena2 b mt thay vo l cc vlan ca Athena1. Do Athena1c s configuration revision ln hn nn p chng tt c vlan ca mnh ln switch Athena2.Chng ta c th tng s configuration cho switch bng cch ra vo vlan datatbase v apply nhiu ln.C mi ln chng ta vo vlan database apply mt ln th s configuration s tng ln mt ln.By gi chng ta s kho st nu hai switch khc VTP domain th s hot ng nh th no.Chng ta cu hnh cho switch Athena1 c VTP domain l Athena, cn switch Athena2 l Athena1.Do phn trn chng ta cu hnh cho switch Athena1 thuc VTP domain Athena v cc vlan ca

Athena2 b mt nn by gi chng ta cu hnh Athena2 thuc VTP domain Athena1 v to li ccvlan3, vlan5, vlan7 cho Athena2. (lu chng ta nn tho cp ni hai port fa0/1 ca hai switch trckhi thc hin)

Athena2#vlan databaseAthena2(vlan)#no vlan 2Athena2(vlan)#no vlan 4Athena2(vlan)#no vlan 6Athena2(vlan)#vlan 3 name vlan3Athena2(vlan)#vlan 5 name vlan5Athena2(vlan)#vlan 7 name vlan7Athena2(vlan)#vtp domain name AthenaAthena2(vlan)#apply

By gi chng ta kim tra li s configuration revision ca hai switch v cc vlan ca chng.Athena1#sh vtp status

VTP Version : 2Configuration Revision : 3Maximum VLANs supported locally : 64Number of existing VLANs : 8VTP Operating Mode : ServerVTP Domain Name : Athena

Athena2#sh vtp statusVTP Version : 2


57/174





Configuration Revision : 0Maximum VLANs supported locally : 68Number of existing VLANs : 11VTP Operating Mode : ServerVTP Domain Name : Athena1





Fa0/6, Fa0/7, Fa0/8, Fa0/9,Fa0/10, Fa0/11, Fa0/12, Fa0/13,Fa0/14, Fa0/15, Fa0/16, Fa0/17,Fa0/18, Fa0/19, Fa0/20, Fa0/21,Fa0/22, Fa0/23, Fa0/24


By gi chng ta ni cp hai port fa0/1 li. Kim tra li cc vlan chng ta s thy c l hai switchkhng trao thi thng tin vlan vi nhau (switch Athena1 s khng p vlan ln switch Athena2).



2 vlan2 active

4 vlan4 active6 vlan6 active


Fa0/6, Fa0/7, Fa0/8, Fa0/9,Fa0/10, Fa0/11, Fa0/12, Fa0/13,


58/174





Fa0/14, Fa0/15, Fa0/16, Fa0/17,Fa0/18, Fa0/19, Fa0/20, Fa0/21,Fa0/22, Fa0/23, Fa0/24


Vy nu hai switch khng cng mt VTP domain th s khng trao i thng tin vlan cho nhau.


59/174





Bi 3

Cu hnh VTP Password1. Gii thiu :

Trong VTP, nu nh ta ni hai switch cng VTP domain vi nhau, th cc switch s trao ithng tin Vlan vi nhau. Nu switch no c s Configuration Revision cao hn s chuyn ht tt ccc thng tin Vlan ca mnh cho switch kia. iu ny c mt li cng nh mt hi. Trong trng hpnu nh ta thit lp mt mng vi nhiu Vlan ang hot ng tt, khi nng cp mng bng cchlp thm mt switch mi vo switch c v ta mun switch ny s ly nhng thng tin v cc Vlan c, nhng khng may switch ny c s Configuration Revision nn chuyn ht cc thng tin vlancho switch c. iu ny ng ngha vi chng ta mt tt c Vlan cang hot ng (do switch micha c vlan no). VTP password gip chng ta khc phc c trng hp khng mong mun ny.Nu hai switch cng mt VTP domain nhng khc VTP password th s khng trao i thng tin Vlanvi nhau qua ng trunk.

2. M t bi lab v hnh

Chng ta s cu hnh cho hai switch cng VTP domain name l Athena. Switch Athena1 c cc Vlanl vlan2, vlan4, vlan6. Switch Athena2 c cc vlan3, vlan5, vlan7

3. Cu hnh switch :Chng ta cu hnh vlan2, vlan4, vlan6 cho switch Athena1; vlan3, vlan5, vlan7 cho switch

Athena2.Athena1#sh vlanVLAN Name Status Ports---- -------------------------------- --------- -------------------------------1 default active Fa0/1, Fa0/2, Fa0/3, Fa0/4


2 Vlan2 active4 Vlan4 active6 Vlan6 active


60/174


61/174





Maximum VLANs supported locally : 68Number of existing VLANs : 8VTP Operating Mode : ServerVTP Domain Name : AthenaVTP Pruning Mode : DisabledVTP V2 Mode : DisabledVTP Traps Generation : DisabledMD5 digest : 0xAB 0xF7 0xF9 0xCD 0x83 0xEB 0x42 0xE6Configuration last modified by 0. 0. 0. 0 at 3-1-93 00 : 01 : 47

Trong trng hp ny sConfiguration Revision ca Athena1 ln hn ca Athena2 do khi ta ning trunk li th cc vlan ca Athena2 s b mt v thay vo l cc vlan ca Athena1.

By gi chng ta cm cp cho vo hai port fa0/1 ca hai switch v kim tra li vlan trn switchAthena1 v Athena2



2 Vlan2 active4 Vlan4 active6 Vlan6 active

Athena2#sh vlanVLAN Name Status Ports---- -------------------------------- ------