Changes between Version 4 and Version 5 of Cnbp2019/Agenda/NetworkSetup

Timestamp:

Feb 11, 2019, 11:28:52 AM (6 years ago)

Author:

admin

Comment:

--

Cnbp2019/Agenda/NetworkSetup

@@ -119 +119 @@
 
 In GNS3 topology right click on each network device and select Console. It will open your device console screen on a putty.
+
+=== Initial Configurations ===
+
+Before configuring the devices for the network setup. Let's configure some initial settings in the Core Network Devices. 
+
+Press the '''Enter''' key to go to the user mode of the FAC1 switch. Prompt will look as follows.
+{{{
+FAC1#
+}}}
+In this privileged mode, you can check the router configuration by the following command. The configuration you see will be the default configuration
+{{{
+FAC1#show run
+}}}
+To add configurations you have to go configuration mode. Type '''config terminal'''. Note the prompt change.
+{{{
+FAC1(config)#
+}}}
+
+
+> '''note:''' If you get following error,
+
+> `%Error opening tftp://255.255.255.255/AccessRt-confg (Timed out)`
+
+> Give the following command in the config mode, `no service config`
+
+
+
+You can now start making configurations.
+
+ - The first thing you have to add is the hostname of the device. The hostname is the device's identification. In this Lab device name or the hostname is automatically configured based on the GUI edits we did previously. If you want to change it you may use
+{{{
+hostname <device name>
+}}}
+
+ - Then let's give a enable secret. Which is a password you set when you go to the privileged mode from the user mode? We will use the '''class password''' as the enable secret
+{{{
+enable secret <class password>
+}}}
+ - Add the DNS server
+{{{
+ip name-server 192.248.1.161
+}}}
+> In your production envirnment you may use your internal dns resolver if needed.
+ - Next you can add a banner to your device. This will display every time you log in to the device
+{{{
+banner motd @ Unauthorized Access is Prohibited! @
+}}}
+ - Add more security by encrypting passwords in your config file
+{{{
+service password-encryption
+}}}
+ - Then lets's configure the line console which are the console port settings
+    * Go to line console config mode
+{{{
+line console 0
+}}}
+    * Enable login authentication. Make sure not to save or exit the router after this command without executing the next command. 
+{{{
+login
+}}}
+    * Set the password
+{{{
+password <class password>
+}}}
+ - Finally let's enable ssh (version 2) in the device. Type '''exit''' to go back to previous mode (config mode) from line console config mode
+    * Configure a domain name. Use '''instXY.learn.ac.lk''' for this lab where XY is your group id.
+{{{
+ip domain name instXY.learn.ac.lk
+}}}
+    * Create an ssh user with a password. In here we will use the username admin with the class password
+{{{
+username admin secret <class password>
+}}}
+    * Create a certificate which will use for encryption
+{{{
+crypto key generate rsa
+}}}
+    * Give the size of key as 768 (minimum size needed to activate ssh version 2)
+    * Then Configure the line vty
+{{{
+line vty 0 4
+login local
+transport input ssh
+}}}
+ - Now '''save the configurations'''. you have to Go to privileged mode and give the following command
+{{{
+#copy running-config startup-config
+}}}
+ - Check the configuration by '''show run''' command.
+''' Apply these settings in FAC2 as well'''