• View
• Edit
• History
• Print

Chapter 11 - It’s a Network

11.0 It's a Network

11.0.1 Introduction >11.0.1.1 Introduction

Upon the completion of this chapter you will be able to:

• Identify the devices and protocols used in a small network.
• Explain how a small network serves as the basis of larger networks.
• Describe the need for basic security measures on network devices.
• Identify security vulnerabilities and general mitigation techniques.
• Configure network devices with device hardening features to mitigate security threats.
• Use the output of the ping and tracert commands to establish relative network performance.
• Use basic show commands to verify the configuration and status of a device interface.
• Use basic host and IOS commands to acquire information about the devices in a network.
• Explain file systems on routers and switches
• Apply the commands to back up and restore an IOS configuration file.

11.0.1 Introduction >10.0.1.2 Activity- Application Investigation

The figure on this page shows the following two networks:

Network A consisting of:

• PC16, connected to Router6
• Router6, connected to Router7
• Router7, connected to Server4
• Server4

Network B consisting of:

• PC15, connected to Switch6
• Switch6, connected to Router3
• Router3, connected to Router4 via serial connection. Router3 is also connected to Router5
• Router4, connected to Server3
• Router5, connected to Wireless Router1
• Wireless Router1, connected to Tablet PC0

Objectives

11.1 Create and Grow

11.1.1 Devices in a Small Network >11.1.1.1 Small Network Topologies

The figure on this page shows two workers connected to a switch. Another PC, an IP phone and a server are also connected to the switch. The switch is then connected to a router labeled LAN. The router connects to a cloud with a serial connection labeled WAN.

11.1.1 Devices in a Small Network >11.1.1.2 Device Selection for a Small Network

The figure on this page consists of the following five imagess. Each is a consideration when designing a network:

• Image1 shows money and is labelled "Cost".
• Image 2 shows a wiring closet with many wires connected to switches and is labeled "Ports".
• Image 3 shows a runner and is labeled "Speed".
• Image 4 shows modular routers and is labeled "Expandable/Modular".
• Image 5 shows a woman working on a laptop that is attached to a network equipment rack and is labeled "Manageable".

11.1.1 Devices in a Small Network >11.1.1.3 IP Addressing for a Small Network

The interactive activity on this page demonstrates that you can organize devices by function, location, or type. The figure shows the following two groups of network devices:

West Office consisting of:

• 2 servers
• 1 printer
• 2 laptops labelled "Sales"
• 1 PC labelled "HR"
• 1 PC labelled "Legal"

East Office consisting of:

• 2 servers
• 1 printer
• 1 PC labelled "HR"
• 1 PC labelled "Legal"
• 1 PC labelled "Admin"
• 1 laptop labelled "Sales"

The figure also has the following buttons which, when activated, highlight the relevant devices :

• Location (activated by default), highlights all the devices with one colour for the West Office and another colour for the East office.

The following three buttons are under the heading "Department":

• Sales, Highlights the two Sales laptops in the West Office and also the Sales laptop and the first server in the East Office.
• HR, Highlights the HR PC in the West Office and also the HR PC and the second server in the East Office.
• Legal, Highlights the Legal PC and the second server in the West Office and also the Legal PC in the East Office.

The following three buttons are under the heading "Device":

• Printer, Highlights the printer in the West Office and also the printer in the East Office.
• Server, Highlights the two servers in the West Office and also the two servers in the East Office.
• Computer, Highlights the two Sales laptops, the HR PC, and the Legal PC in the West Office and also the HR PC, the Legal PC, the Admin laptop, and the Sales laptop in the East Office.

11.1.1 Devices in a Small Network >11.1.1.4 Redundancy in a Small Network

The interactive activity on this page shows two routers, each connected to a switch. There are 3 servers, each connected to both switches. The switches are also connected. This diagram is demonstrating a redundant server farm. When you click a device, a callout displays the following functions and roles of each type of device:

11.1.1 Devices in a Small Network >11.1.1.5 Design Considerations for a Small Network

The figure on this page shows a router that has been sectioned into the following different types of traffic, the figure has a heading of "Prioritizing Traffic":

To the left of the router is an arrow pointiong to the router with the following text, "Traffic sent to router without any priority.

To the right of the router is a cloud labelled "Backbone network". Text above the cloud says, "Traffic sent to backbon in order of priority.".

The description given for this figure is "Priority queuing ha four queues. The high-priority queue is always emptied first.".

11.1.1 Devices in a Small Network >11.1.1.6 Identifying Network Planning and Design Factors

The interactive activity on this page allows the learner to match a planning and design factor with its corresponding focus area. Each focus area can have 2 planning and design factors.

Implementing a small network focuses on planning and design. The learner is asked to match each planning and design factor with its corresponding major focus area.

The focus areas are:

• Ports
• Speed
• Scalable
• Manageable
• Cost

The planning and design factors are:

• Types of interfaces required
• Bandwidth required
• Number of interfaces needed
• NIC capacity of devices
• Initial, basic cost of network devices
• Prioritization of data traffic
• Upgrades to network devices
• Types of cable runs
• Varying cable connection types
• IP addressing scheme

The figure also has the following 2 buttons:

• Check
• Reset

11.1.2 Protocols in a Small Network >11.1.2.1 Common Applications in a Small Network

The image on this page is the Windows Task Manager showing the applications running on a computer.

11.1.2 Protocols in a Small Network >11.1.2.2 Common Protocols in a Small Network

The interactive activity shows six servers connected to a switch, which is connected to a router. Click ing each server shows the following descriptions of what the server does:

11.1.2 Protocols in a Small Network >11.1.2.3 Real-Time Applications for a Small Network

Figure 1 on this page shows three pictures of people working at their computers.

Figure 2 on this page shows three pictures of the following network equipment:

• Cable and switch
• IP phones
• Cisco Unified Communications 500 Series appliance

11.1.3 Growing to Larger Networks >11.1.3.1 Scaling a Small Network

The 3 images on this page show the following elements required for scaling a network:

• Image 1, a man drawing a network topology. This represents Network documentation.
• Image 2, a tablet and a mobile phone. This represents device inventory.
• Image 3, money. This represents budget.

11.1.3 Growing to Larger Networks >11.1.3.2 Protocol Analysis of a Small Network

The image on this page shows the Windows protocol analyzer.

11.1.3 Growing to Larger Networks >11.1.3.3 Evolving Protocol Requirements

The figure on this page shows the Processes tab in Windows task manager and examples of processes running in the windows operating system. Processes are individual software programs running concurrently.

The figure also has the following 4 buttons:

1. Applications: highlights running applications such as "EXCEL.EXE"
2. Services: highlights running services such as "alg.exe"
3. System operations: highlights running system operations such as "WLTRYSVC.EXE"
4. One program may be running several times, each in its own process, highlights the different instances of the same process such as "svchost.exe"

The description given for this figure is "Examples of processes running in the Windows operating system.".

11.2 Keeping the Network Safe

11.2.1 Network Device Security Measures >11.2.1.1 Categories of Threats to Network Security

The interactive activity on this page shows the following four images:

• Image 1, an open folder. The image is labelled, "Information Theft".
• Image 2, a hammer floating over the internal components of a hard drive. The image is labelled, "Data Loss and Manipulation".
• Image 3, a cheque book and a credit card. The image is labelled, "Identity Theft".
• Image 4, a computer with a bug on the screen and a 4.0.4. error "Page not found". The image is labelled, "Disruption of Service".

Clicking on each image shows the following information:

11.2.1 Network Device Security Measures >11.2.1.2 Physical Security

The figure on this page shows a diagram of a physical layout for a network closet. This diagram shows the following network equipment:

• AC
• UPS BAY
• SVRS
• WAN
• LAN

The equipment is in a locked room only accessible via a card reader. Outside the room is a help desk.

11.2.1 Network Device Security Measures >11.2.1.3 Types of Security Vulnerabilities

Figure 1 on this page lists the following network security weaknesses:

TCP/IP protocol weaknesses:

• Hypertext Transfer Protocol (HTTP), File Transfer Protocol (FTP), and Internet Control Message Protocol (ICMP) are inherently insecure.
• Simple Network Management Protocol (SNMP) and Simple Mail Transfer Protocol (SMTP) are related to the inherently insecure structure upon which TCP was designed

Operating system weaknesses:

• Each operating system has security problems that must be addressed
• UNIX, Linux, Mac OS X, Windows Server 2012, windows 7, Windows 8
• They are documented in the Computer Emergency Response Team (CERT) archives at http://www.cert.org.

Network equipment weaknesses: Various types of network equipment, such as routers, firewalls, and switches have security weaknesses that must be recognised and protected against. Their weaknesses include password protection, lack of authentication, routing protocols, and firewall holes.

Figure 2 on this page lists the following configuration weaknesses and how each weakness can be exploited:

Figure 3 on this page lists the following policy weaknesses and how each weakness can be exploited:

11.2.1 Network Device Security Measures >11.2.1.4 Activity - Security Threats and Vulnerabilities

Figure 1 on this page is an interactive activity that allows the learner to match security threats and vulnerability scenarios with the appropriate type of threat. Each type of threat can have two vulnerability scenarios.

The security threats are:

• Information Theft
• Identity Theft
• Data Loss/Manipulation
• Disruption of Service

The vulnerability scenarios are:

• Sending a virus to reformat a hard drive
• Preventing legal users from accessing data services
• Stealing a companies user database
• Making illegal online purchases
• Altering data records
• Stealing scientific research reports
• Overloading a network to keep users out
• Impersonating someone to obtain credit

The figure also has the following 2 buttons:

• Check
• Reset

Figure 2 on this page is an interactive activity that allows the learner to match security management practices with their management type.

The management types are:

• Hardware
• Environmental
• Electrical
• Maintenance

The security management practices are:

• Label critical cables and components
• Control access to console ports
• Create positive air flow
• Install UPS systems
• Control temperature and humidity
• Use security cameras
• Install redundant power supplies
• Lock up devices - prevent unauthorised access

The figure also has the following 2 buttons:

• Check
• Reset

11.2.2 Vulnerabilities and Network Attacks >11.2.2.1 Viruses, Worms, and Trojan Horses

The flash animation on this page shows two PCs. Each PC is connected to a router and the routers are connected. There is an attacker working on one of the computers. The attacker is sending malicious code to the other PC in the form of worms, viruses, and a Trojan horse.

The first router has a callout saying, "The primary vulnerabilities for end-user workstations are worm, virus, and trojan horse attacks.".

As the worm passes through the network a callout states that,"A worm executes arbitrary code and installs copies of itself in the infected computer's memory, which infects other hosts.".

As the virus passes through the network a callout states that, "A virus is malicious software that is attached to another program to execute a particular unwanted function on a user's workstation.

As the trojan horse passes through the network a callout states that, "A Trojan horse is different only in that the entire application was written to look like something else, when. in fact, it is an attack tool.

11.2.2 Vulnerabilities and Network Attacks >11.2.2.2 Reconnaissance Attacks

The figure on this page shows the following four buttons representing different methods of reconnaissance attacks. Each button has an image and a text label.:

The figure also shows an animation of an attacker's computer connected to a network consisting of two PCs and two servers. As each button is selected an example is shown of each reconnaissance attack.

11.2.2 Vulnerabilities and Network Attacks >11.2.2.3 Access Attacks

Figure 1 on this page is an example of a password attack. The user authentication dialog box is shown.

Attackers can implement password attacks using several different methods:

• Brute-force attacks
• Trojan horse programs
• Packet sniffers

Figure 2 on this page is an animation showing how a trust exploitation works. The figure shows a network consisting of System A and System B both connected to a Cisco PIX (Private Internet eXchange) IP firewall and NAT appliance which is connected to a cloud. The figure also shows an attacker.

1. System A trusts System B
2. System B trusts everyone
3. An attacker wants to gain access to System A
4. The attacker has a callout saying, "I can't get access to System A but System B is open.".
5. System B compromised by attacker
6. The attacker has a callout saying, "I own System B but System B and now have access to System A.".

An attacker on a host cannot get access to system A, but can get access to system B. Since system B can access system A, the attacker can now access system A.

Figure 3 on this page shows a complex network consisting of two PCs and two servers connected to a layer 3 switch. The layer 3 switch is connected to a Cisco PIX (Private Internet eXchange) IP firewall and NAT appliance which is connected to a router. Compromised Host A is also connected to IP firewall appliance. The first router is connected to a second router in a cloud which in turn is connected to a third router which is connected to a fourth router in another cloud. An attacker is connected to the fourth router.

Source: Attacker Destination: A Port: 22

Source: A Destination: B Port: 22

Source: Attacker Destination: B Port: 23

Port redirection is a type of trust-exploitation attack that uses a compromised host to pass traffic through a firewall that would otherwise be dropped. It is mitigated primarily through the use of proper trust models. Antivirus software and host-based IDS can help detect and prevent an attacker installing port redirecting utilities on the host.

Figure 4 on this page is an example of a man-in-the-middle attack.

The figure shows a network consisting of a laptop connected to switch S1 which is connected to router R1. Router R1 is connected to router R2 which is connected to a cloud. The figure also shows an attacker with laptop and also shows a server.

The attacker convinces the laptop to forward all traffic to his computer. The attacker forwards the traffic correctly and returns it to the laptop. However, as a result, the attacker can inspect all packets to and from the laptop.

11.2.2 Vulnerabilities and Network Attacks >11.2.2.4 DoS Attacks

Figure 1 on this page shows different Denial of Service attacks and shows how the resource overload affects the data.

The description given for this figure is, "DoS attacks prevent authorised people from using a service by using up system resources.".

Figure 2 on this page shows an attacker sending a ping of death packet to a host. The malformed or very large ping packet overloads the host and renders the host unresponsive.

Figure 3 on this page demonstrates a SYN flood attack. In this figure the attacker is sending multiple Syn packets to a web server. The attacker does not complete the transaction and when a valid user sends a SYN request, the server is unavailable.

1. Attacker sends multiple SYN requests to a web server
2. Web server sense SYN-ACK replies
3. Web server waits to complete three-way handshake
4. Valid user sends SYN request
5. Web server is unavailable

Figure 4 on this page shows an attacker connected to four handlers which are connected to eight zombies or agents for a denial of service attack. The agents launch the attack on a single host and render it unavailable. This is an example of a DDos attack.

The description given for this figure is, "Attacker uses many intermediate hosts, called zombies, to launch the attack.".

Figure 5 on this page shows an attacker connected to a router acting as a smurf amplifier. The amplifier tells many zombie computers to send an ICMP reply, such as "ICMP REPLY D=209.165.200.225 S=172.18.1.2", to a single host. This overwhelms the destination.

11.2.2 Vulnerabilities and Network Attacks >11.2.2.5 Activity - Types of Attack

The 3 interactive activities on this page allow the learner to match the type of attack with the appropriate scenario.

Determine the types of security attacks described. Match each security attack type to its scenario.

The security attack scenarios shown in figure 1 are:

• Eli opened an email sent to him by a friend. Later in the day, Eli received telephone calls from his friends saying they received emails from him that he did not knowingly send.
• Sharron works for the finance department in her company. Her network administrator has given the finance department employees public IP addresses to access the Internet bank account. After an hour of work, the finance department members are told that the company bank account has been compromised.

The security attack scenarios shown in figure 2 are:

• Jeremiah downloaded some software from the Internet. He opened the file and his hard drive crashed immediately. He lost all information on his computer.
• Angela receives email with a link to her favourite online store, which is having a sale. She uses the link provided and is directed to a site that looks like her favourite online store. She orders from the web page using her credit card. Later, Angela discovers that her credit card has been used to pay for additional merchandise that she did not order.

The security attack scenarios shown in figure 3 are:

• Arianna was working on the Internet - a popup appeared stating that she needed to update her operating system by clicking on the link. When she clicked on the link, unknown to Arianna, a program was installed on her computer.

Each figure shows the following types of security attacks:

• Worms
• Denial of Service (DoS)
• Viruses
• Access
• Reconnaissance
• Trojan Horses

The figure also has the following 2 buttons:

• Check
• Reset

11.2.2 Vulnerabilities and Network Attacks >11.2.2.6 Lab - Researching Network Security Threats

See Lab Descriptions.

11.2.3 Mitigating Network Attacks >11.2.3.1 Backup, Upgrade, Update, and Patch

The figure on this page shows an image of a computer performing a Windows update with Internet Explorer.

11.2.3 Mitigating Network Attacks >11.2.3.2 Authentication, Authorisation, and Accounting

The figure on this page shows a credit card statement.

The credit limit is highlighted and has a callout saying, "Authorisation. How much can you spend?". The list of transactions is highlighted and has a callout saying, "Accounting. What did you spend it on?". A credit card is also shown with the name and card number highlighted and a callout saying, "Authentication. Who are you?". These are part of the triple A or AAA concept.

11.2.3 Mitigating Network Attacks >11.2.3.3 Firewalls

The figure on this page shows images of the following different firewall devices with their descriptions as you select each image:

11.2.3 Mitigating Network Attacks >11.2.3.4 Endpoint Security

The figure on this page shows images of many different end devices, such as:

• Smart phones
• Tablets
• Laptops

11.2.4 Securing Devices >11.2.4.1 Introduction to Securing Devices

The figure on this page shows a PC connected to a network with three routers; R1, R2, and R3. R2 has a laptop, labelled "System Administrator", connected to it with a console cable. The laptop has a callout saying, "System administrator locks down R2".

11.2.4 Securing Devices >11.2.4.2 Passwords

The figure on this page shows two tables.

The first table contains weak passwords and the reasons why they are weak:

The second table contains strong passwords and the reasons why they are strong:

11.2.4 Securing Devices >11.2.4.3 Basic Security Practices

The figure on this page shows router output for configuring encrypted line passwords and setting restrictions on password length or failed attempts.

11.2.4 Securing Devices >11.2.4.4 Enable SSH

The figure on this page shows router output for configuring a router to accept SSH as an alternative to telnet for remote access. The steps are:

• Step 1: Configure the IP domain name.
• Step 2: Generate one-way secret keys.
• Step 3: Verify or create a local database entry.
• Step 4: Enable VTY inbound SSH sessions.

11.2.4 Securing Devices >11.2.4.5 Lab - Accessing Network Devices with SSH

See Lab Descriptions.

11.2.4 Securing Devices >11.2.4.6 Lab - Securing Network Devices

See Lab Descriptions.

11.3 Basic Network Performance

11.3.1 Ping >11.3.1.1 Interpreting Ping Results

The figure on this page shows the Windows Local Area Connection Settings dialog box. The Internet Protocol TCP/IP item is highlighted.

Pinging the local host confirms that TCP/IP is installed and working on the local network adaptor.

The figure also shows a laptop pinging itself. Pinging 127.0.0.1 causes a device to ping itself.

11.3.1 Ping >11.3.1.2 Extended Ping

The figure on this page shows two connected LANs. Each LAN consists of Two PCs, two switches, and a router.

11.3.1 Ping >11.3.1.3 Network Baseline

Figure 1 to 3 on this page show two ping tests run from one of the PCs on different dates.

FEB 8, 2013 08:14:43

MAR 17, 2013 14:41:06

Figure 1 highlights the ping commands. Figure 2 highlights the dates. Figure 3 highlights the response times.

Figure 4 on this page shows a picture of a hyper terminal with the Capture Text feature being used to make a copy of the output from the ping test. The steps are:

1. Start the text capture process.
2. Issue a ping <ip address> command.
3. Stop the capture process.
4. Save the text file.

11.3.2 Tracert >11.3.2.1 Interpreting Tracert Messages

Figure 1 on this page shows two connected LANs. Each LAN consists of Two PCs, two switches, and a router. The LANs are connected via two other routers.

One of the PCs in the first LAN , Host 1, has a callout saying, ""Trace from a host, @@C:\>tracert 10.1.0.2". The router from the first LAN, Router A, has a calout saying, "Trace from a router, @@RouterA#traceroute 10.1.0.2".

Figure 2 on this page shows a picture of a hyper terminal with the Capture Text feature being used to make a copy of the output from the ping test. The steps are:

1. Start the text capture process.
2. Issue a traceroute <ip address> command.
3. Stop the capture process.
4. Save the text file.

11.3.2 Tracert >11.3.2.2 Packet Tracer - Test Connectivity with Traceroute

Objectives:

11.3.2 Tracert >11.3.2.3 Lab - Testing Network Latency with Ping and Traceroute

See Lab Descriptions.

11.3.3 Show Commands >11.3.3.1 Common show Commands Revisited

Figure 1 on this page shows the output from a show running-config command on a router.

Figure 2 on this page shows the output from a show interfaces command on a router.

Figure 3 on this page shows the output from a show arp command on a router.

Figure 4 on this page shows the output from a show ip route command on a router.

Figure 5 on this page shows the output from a show protocols command on a router.

Figure 6 on this page shows the output from a show version command on a router.

11.3.3 Show Commands >11.3.3.2 Viewing Router Settings with the show version Command

The animation on this page displays the output from a "show version" command on a router. As the animation plays, different sections are highlighted as follows:

IOS Version:

I->OS (tm)2500 Software (C2500-I-L),Version
12.0(17a),RELEASE SOFTWARE (fc1)

Bootstrap version:

IOS Image File:

Model and CPU:

Amount of RAM:

Number and type of interfaces:

Amount of NVRAM:

Amount of flash:

11.3.3 Show Commands >11.3.3.3 Viewing Switch Settings with the show version Command

The figure on this page shows the output from a "show version" command on a router.

11.3.3 Show Commands >11.3.3.4 Packet Tracer - Using show Commands

Objectives:

11.3.4 Host and IOS Commands >11.3.4.1 ipconfig Command Options

Figure 1 on this page shows the output of the ipconfig command on a PC. The IP address, the subnet mask, and the default gateway are highlighted in different colours.

The description given for this figure is, "Sample ipconfig output showing default gateway address.".

Figure 2 on this page shows the output of the ipconfig/all command on a PC. The physical address is highlighted.

11.3.4 Host and IOS Commands >11.3.4.2 arp Command Options

The figure on this page shows a switch connected to the following five PCs. and a router.

The output of the arp -a command on a PC is displayed. The IP address and MAC address pair of the router are highlighted.

11.3.4 Host and IOS Commands >11.3.4.3 show cdp neighbors Command Options

Figure 1 on this page shows the output of the show c.d.p. neighbors command and show cdp neighbors detail command of a router.

- - - - - - - - - - - - - - - - - - - - - - - - -

Figure 2 on this page shows the network topology used throughout the curriculum. This topology has three routers connected with serial connections. R1 connects to R2, and R2 connects to R3. Each Router has a LAN with a switch and a PC.

11.3.4 Host and IOS Commands >11.3.4.4 Using the show ip interface brief Command

Figure 1 on this page shows a network consisting of a P.C. connected to a switch, which is connected to a router, which is connected to a cloud.

Figure 2 on this page shows the output of the show ip interface brief command, the output of a ping command, and the output of a traceroute command.

The figure has the following 2 buttons:

• R1: shows output from a router
• S1: shows output from a switch

R1 output

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

S1 output:

<Output omitted>

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

11.3.4 Host and IOS Commands >11.3.4.5 Activity - Show Commands

The interactive activity on this page allows the learner to match the common show commands with an appropriate scenario.

The show commands are:

• show version
• show startup-config
• show ip protocols
• show ip route
• show arp
• show ip int brief

The scenarios are:

• You suspect there is a problem with the current switch configuration. You want to see the saved configuration so that you can compare it to what is currently running.
• You are on a call with the Cisco technical assistance personnel. They ask you for the switch IOS name, RAM, NVRAM, and flash available. They also asl for the hexadecimal boot location.
• You are running the EIGRP routing protocol and need to know the update intervals and what active interfaces and networks are being advertised by your router.
• You cannot get to the Internet. You need to find out if your router has a path to the Internet and which protocols are being used to provide the paths.
• Your network documentation really needs to be updated. A quick listing of the IP addresses of your routers in relation to their MAC addresses would help finish the task for recording purposes.
• A switch is the closest intermediate device to you. It has 24 ports. You want to see a simple list of the ports being used, their status, and the VLAN IP address of the switch.

The figure also has the following 2 buttons:

• Check
• Reset

11.3.4 Host and IOS Commands >11.3.4.6 Lab - Using the CLI to gather Network Device Information

See Lab Descriptions.

11.4 Managing IOS Configuration Files

11.4.1 Router and Switch File Systems >11.4.1.1 Router File Systems

Figure 1 on this page shows the output of the show file systems command on a router.

Figure 2 on this page shows the output of the dir command on a router. The output displays the contents of flash.

Figure 3 on this page shows the output of cd nvram command followed by the pwd command.

11.4.1 Router and Switch File Systems >11.4.1.2 Switch File Systems

The figure on this page shows the output of show file systems command on a router.

11.4.2 Back up and restore Configuration files >11.4.2.1 Backing up and Restoring using Text Files

The figure on this page shows the process to back up and restore configuration files using Tera Term as described in the page notes.

11.4.2 Back up and restore Configuration files >11.4.2.2 Backing up and Restoring using Text Files

The figure on this page shows the output of the copy running-config tftp command on a router. This will allow the user to make a backup of the current configuration to a tftp server on the network as described in the page notes.

11.4.2 Back up and restore Configuration files >11.4.2.3 Using USB ports on a Cisco Router

The image on this page shows the back of a Cisco 1941 router. The USB ports are highlighted.

11.4.2 Back up and restore Configuration files >11.4.2.4 Backing up and Restoring using a USB

Figure 1 on this page shows the output of the show file systems command on a router. The u.s.b. flash 0. file system is highlighted.

11.4.2.4 Backing Up and Restoring using a USB

Figure 2 on this page shows two outputs of the copy running-config usbflash0: command. Once when the destination file does not exist and once when it does. If the destination file already exists the user is prompted to overwrite it.

The description given for this figure is, "Copying to USB flash drive, and no file pre-exists.".

The description given for this figure is, "Copying to USB flash drive, and the same configuration file already exists on the drive.".

Figure 3 on this page shows the output of the dir usbflash0: command. It also shows the output of the more usbflash0:/R1-config command.

11.4.2 Back up and restore Configuration files >11.4.2.5 Packet Tracer – Backing Up Configuration Files

Objectives:

11.4.2 Back up and restore Configuration files >11.4.2.6 Lab - Managing Router Configuration Files with Tera Term

See Lab Descriptions.

11.4.2 Back up and restore Configuration files >11.4.2.7 Lab – Managing Device Configuration Files using TFTP, Flash and USB

See Lab Descriptions.

11.4.2 Back up and restore Configuration files >11.4.2.8 Lab – Researching Password Recovery Procedures

See Lab Descriptions.

11.5 Integrated Routing Services

11.5.1 Integrated Router >11.5.1.1 Multi-Function Device

Figure 1 on this page is an animation that shows a Linksys model WRT 300 N-2 wireless router that opens up and exposes three services that the integrated services device provides. These services are:

• Access Point
• Switch
• Router

Figure 2 on this page illustrates the advantages of wireless.

The figure shows a wireless access point connecting to a DSL or cable modem which is connected to the Internet.

The following devices have a wireless connection to the access point:

• Printer
• PC
• Smart TV
• Laptop
• Smart Phone

The benefits of wireless LAN technology include the following items:

• Mobility - allows for easy connection of both stationary and mobile clients.
• Scalability - can be easily expanded to allow more users to connect and to increase the coverage area.
• Flexibility - provides anytime, anywhere connectivity.
• Cost Savings - equipment costs continue to fall as the technology matures.
• Reduced installation time - installation of a single piece of equipment can provide connectivity for a large number of people.
• Reliability in harsh environments - easy to install in emergency and hostile environments.

Figure 3 on this page illustrates the limitations of wirelesss.

The figure shows three users working on computers all connected to a wireless access point.

Limitations of wireless LAN technology include the following:

• Interference - Wireless technology is susceptible to interference from other devices that produce electromagnetic energies. This includes cordless phones, microwaves, televisions, and other wireless LAN implementations.
• Network and Data security - Wireless LAN technology is designed to provide access to the data being transmitted, not security of the data. Additionally, it can provide an unprotected entrance into the wired network.
• Technology - Wireless LAN technology does not currently provide the speed or reliability of wired LANs.

11.5.1 Integrated Router >11.5.1.2 Types of Integrated Routers

The figure on this page shows a close-up view of both the front and the back of the Linksys integrated router model WRT 300 N-2.

The figure has the following 2 buttons:

• Front
• Rear

When the Front button is activated the following information is displayed:

Front View:

• This Linksys is a simplified, low-cost device that carries out the functionality of multiple network devices, such (switch, router, wireless access point).
• Light emitting diodes (LEDs) indicate the connection status of each port:
  • Power LED - indicates the presence of power to the device; Solid green LED.
  • WLAN LED - indicates status of wireless connections.
  • 1 - 4 LEDs - indicates status of the wired Ethernet connections.
  • Internet LED - indicates status of the Internet connection

When the Rear button is activated the following information is displayed:

Rear View:

• When connecting a local network using a multifunction device it is important that all local devices are connected to the switch ports.
  • A single port that is connected to the router portion of the multifunction device. This is used to connect the device to another network, such as the Internet. The router portion of a multifunction device maintains routing tables. There is an internal connection from the routing portion of the multifunction device to the switch portion. The Internet port is connected to a different network than the Ethernet ports.
  • Multiple ports that are connected to the internal switch portion of the multifunction device. These are usually labeled "Ethernet". All devices connected to the switch ports are on the same local network. There is also an internal connection from the switch port to the router port (Internet port).

11.5.1 Integrated Router >11.5.1.3 Wireless Capability

The figure on this page shows the configuration interface of the Linksys integrated router model WRT 300 N-2. This interface is web based and accessed through a web browser.

From the Wireless menu select the Basic Wireless Settings. The main settings are as follows:

• Network Mode: determines the type of technology that must be supported. For example, 802.11b, 802.11g, 802.11n or Mixed mode.
• SSID: used to identify the WLAN. All devices that wish to participate in the WLAN must have the same SSID.
• Standard Channel: specifies the channel over which communication will occur. By default, this is set to Auto to allow the AP to determine the optimum channel to use.
• SSID Broadcast: determines the SSID will be broadcast to all devices within the range. By default set to Enabled.

11.5.1 Integrated Router >11.5.1.4 Basic Security of Wireless

Figure 1 on this page shows three houses, each using wireless communications inside the home. There is a car parked on the street in front of the three houses. Inside the car is a person using a laptop computer.

This figure is used to show security concerns of wireless technology and lists the following steps that should be implemented to mitigate such threats:

Basic Security:

• Change default values
• Disable SSID broadcasting
• Enable encryption

Wardriving, walking, chalking

• Wardriving is the process of driving around an area searching for wireless LANs. Once discovered, the location of the WLAN is logged and shared. The goal of wardriving is to bring attention to the fact that most wireless networks are insecure and to show the widespread acceptance and use of wireless LAN technology.
• A similar process to wardriving is known as warwalking or warchaulking where the person walks around an area to discover wireless access. Once access is discovered a chalk mark is placed in front of the location to indicate the status of the wireless connection.

Figure 2 on this page is an animation showing the encryption process between a wireless access point and a wireless client. The access point has a callout saying, "Hosts need the right key.". The router sends data to the client PC using the pre-configured keys and the PC uses the key to decrypt the data.

11.5.2 Configuring the Integrated Router >11.5.2.1 Configuring the Integrated Router

The figure on this page shows a Linksys wireless router connected to a computer with a network cable. This configuration is used to initially connect to and configure the access point.

11.5.2 Configuring the Integrated Router >11.5.2.2 Enabling Wireless

The figure on this page shows the configuration interface of the Linksys integrated router model WRT 300 N-2 and is highlighting the network mode option. The dropdown list is used to select which 802.11 modes to support. The options are:

• Mixed
• BG mixed
• Wireless G only
• Wireless B only
• Wireless N only
• Disabled.

11.5.2 Configuring the Integrated Router >11.5.2.3 Configure a Wireless Client

The figure on this page shows the configuration window for a Linksys wireless network interface card. This is a GUI that the user can use to configure connections to wireless networks. This works in place of the operating system’s configuration tool.

11.5.2 Configuring the Integrated Router >11.5.2.4 Packet Tracer – Configuring a Linksys Router

Objectives:

11.6 Summary

11.6.1 Summary >11.6.1.1 Capstone Project – Design and Build a small Business network

The figure on this page shows a collage of four pictures, a network patch panel with dozens of network connections, a track runner jumping over a hurdle, a woman working on a server rack, and a stack of four Cisco routers.

When planning any network consider...

• Cost
• Ports
• Speed
• Expandability
• Manageability

11.6.1.2 Packet Tracer – Skills Integration Challenge

11.6.1.3 Summary

The figure on this page shows a switch connected to three computers, a server, an IP phone, and a router. The router then connects to a WAN, that connects to the Internet. This graphic is an example of a typical small business network.

End of Chapter 11: Its a Network.

This is the end of the CCNA Introduction to Networks course chapter descriptions.