2010 ALL NEW TRICKS

1. The commands 'configure terminal', 'configure memory', and 'copy tftp running-config' all load configuration information into_____?

RAM. Most of the configuration commands deal with moving information into and out from RAM.



2. The commands 'copy running-config tftp' and 'copy running-config startup-config' store the currently running configuration from RAM to_____and_____, respectively.

A network tftp server and NVRAM, respectively.

3. What do the prompts for 'User EXEC' mode, 'Privileged EXEC' mode, and 'Global configuration' mode look like?



'User EXEC' mode: Router>

'Privileged EXEC' mode: Router#

(used for copying and managing entire configuration files)





"Global configuration' mode: Router(config)#



used for one-line commands and commands that change the entire

router (affect the system as a whole). Use the privileged EXEC

command "configure" to enter global configuration mode. When

you enter this command, the EXEC prompts for the source of the

configuration commands. You can then specify the terminal,

NVRAM, or a file stored on a network server as the source.

Specific Configuration Modes:



Interfaces Router(config-if)#

Subinterfaces Router(config-subif)#

Controller Router(config-controller)#

Map-list Router(config-map-list)#

Map-class Router(config-map-class)#

Line Router(config-line)#

Router Router(config-router)#

IPX-router Router(config-ipx-router)#

Route-map Router(config-route-map)#

If you type "exit" the router will back out one level, pressing "Control-Z" leaves configuration mode completely and returns to privileged EXEC mode.

4. When configuring routers with Release 11.x methods, once you have typed 'show running-config' and displayed a desired configuration, what commands do you use to save changes to backup?

Use 'copy running-config startup-config' and 'copy running-config tftp'.

5. What are two basic tasks when first configuring a router?

(1) Password configuration and (2) naming the router (router identification configuration).

The router provides a "host name", "a banner", and "interface descriptions" to aid in identification.

Configuration command summary:

· "configure terminal" - Configure manually from the console terminal.

· "configure memory" - Load configuration information from NVRAM to RAM.

· "copy tftp running-config" - Load configuration information from a network TFTP server to RAM.

· "copy running-config startup config" - Store the current configuration in RAM into NVRAM.

· "copy running-config tftp" - Store the current configuration in RAM on a network TFTP server.

· show startup-config" - Display the saved configuration, which is the contents of NVRAM.

· "erase startup-config" - Erase the contents of NVRAM.

You can use the "copy running-config tftp" command to store the current configuration in RAM on a network TFTP server. To do so, complete the following tasks:

1. Enter the 'copy running-config tftp' command.

2. Enter the IP address of the host you want to store the configuration file.

3. Enter the name you would like to assign to the configuration file.

4. Confirm your choices by answering "Yes".

These commands manage the contents of NVRAM:

· "configure memory" - Load configuration information from NVRAM to RAM.

· "erase startup-config" - Erase the contents of NVRAM.

· "copy running-config startup-config" - Store the current configuration in RAM (the running configuration) into NVRAM (as the startup configuration).

· "show startup-config" - Display the saved configuration, which is the contents of NVRAM.



IP Routing Protocol Mode:

Router(config)# router?



bgp Border Gateway Protocol (EGP)

egp Enterior Gateway Protocol (EGP)

eigrp Enhanced Interior Gateway Routing Protocol (EIGRP)

igrp Interior Gateway Routing Protocol (IGRP)

isis ISO IS-IS

iso-igrp IGRP for OSI networks

mobile Mobile routes

odr On Demand stub Routes

ospf Open Shortest Path First (OSPF)

rip Routing Information Protocol (RIP)

static Static routes

After a routing protocol is enabled by a global command, the router configuration mode prompt Router(config-router)# is displayed. Type a question question mark (?) to list the router configuration commands.



Router(config)# router rip

Router(config-router)# ?

Router configuration commands:

default-information Control distribution of default

information

distance Define an administrative

distance

distribute-list Filter networks in routing

updates

exit Exit from routing protocol

configuration mode



Many features are enabled on a per-interface basis. Interface configuration commands modify operation of an Ethernet, Token Ring, or serial port. Interface subcommands always follow an interface command; the interface command defines the interface type.



Configuration Methods:

1. Enter configuration statements

2. Save the changes to a backup the router will use when it starts up

3. Examine the changes you have made

4. If necessary, modify or remove configuration statements

You can secure your system by using passwords to restsrict access. Passwords can be established both on individual lines and in the privileged EXEC mode.

The "line console 0" command establishes a password on the console terminal.The "line vty 0 4" command establishes password protection on incoming Telnet sessions.

The "enable-password" command restricts access to the privileged EXEC mode.

The "enable-secret password" from the System Configuration Dialog to setup global parameters uses a Cisco-proprietary encryption process to alter the password character string.

Password can be further protected from display through the use of the "service password-encryption" command. The encryption algorithm does not match the Data Encryption Standard (DES).

The "banner mode" command is used to configure a message of the day which is displayed at login and is useful for conveying messages that affect all network users, such as impending system shutdowns.
















Semester 2, Lesson 10 Notes:
Sources for Cisco IOS Software

The default source for Cisco IOS software depends on the hardware platform, but most commonly the router looks to the 'configuration commands' saved in NVRAM.

You can specify other sources where the router should look for software, or the router will use its own "fall back sequence" as necessary to load software. Settings in the "configuration register" enable alternatives for where the router will bootstrap Cisco IOS software.

You can specify "enabled config-mode boot" (Router(config)# boot...) system commands to enter fall back sources for the router to use in sequence. Save these statments in NVRAM to use during the next startup with the command "copy running-config startup-config". The router will use these commands as needed, in sequence, when it restsarts.

However, if NVRAM lacks boot system commands the router can use; the system has its own 'fall back alternatives':

1. the router will fall back and use defalut Cisco IOS in Flash memory.

2. If Flash memory is empty, the router will try its next TFTP alternative. ...The router uses the configuration register value to form a filename from which to boot a default system image stored on a network.



2. What important command displays information about the Cisco IOS software that is currently running on the router, including the 'configuration register' setting?

"show version"

The order in which the router looks for system bootstrap information depends on the 'boot field' setting in the "configuration register". You can change the default "configuration register" setting with the 'enabled config-mode command', "config-register" (Router(config)# config-register 0x10F^Z).

The "configuration register" is a 16-bit register in NVRAM. The lowest four bits of the configuration register (bits 3, 2, 1, and 0) form the 'boot field'. Configuration register values (bits 3, 2, 1, and 0):



0x100 ROM monitor mode boot field 0-0-0-0

0x101 Boot from ROM boot field 0-0-0-1

0x102 - 0x10F Examine NVRAM boot field 0-0-1-0-1-1-1-1

To check the boot field setting, for example, to verify the config-register command, you must use the "show version" command. Note: You will not see evidence of any config-register setting in output from either the "show running-config" or "show startup-config comands".

The command "copy running-config startup-config" saves the command in NVRAM.

3. If both flash memory is corrupted and the network server fails to load the software image, what is the final software bootstrap option?

(3)Booting from ROM.

A 'TFTP server' can be another router, or it can be a host system. The TFTP host can be any system (Unix, DOS, Windows) with TFTP loaded and is able to contain files on the TCP/IP network. You will be copying software between the TFTP host and Flash memory in the router.

4. What comand would you use to make sure that you can see and write into Flash and verify that the router has sufficient room in Flash to accomodate the Cisco IOS software image you want to load?

"show flash"

1. Command used to verify that you have sufficient memory on your system for the Cosci IOS software you want to load.

2. Command used to learn the name of the system image file.

With Cisco IOS Release 11.2, the naming convention for Cisco IOS contains three parts:(Ex. igs-inr-1, c4500-aj-m, gs7-k-mz)

1. The first part of the image name contains the platform on which the image runs. (ex. cpa25, igs, c4500, gs7)

2. The second part of the image name identifies the special capabilities of the image. A letter or series of letters identifies the feature sets supported in the image. (Ex. 1, cg, inr, aj, k)

3. The third part of the image name specifies where the image runs and if it has been 'zip' compressed. (Ex. 1, m, mz)

5. What two related commands are useful for transferring Cisco IOS images between tftp server and flash memory?

1. "copy tftp flash" - Copy the system image to a TFTP server.

Provides for a backup copy of the current Cisco IOS software image.

2. "copy tftp flash" - Download the new image from the TFTP server.

This command begins operation by requesting the 'IP address' of the remote host that will act as a TFTP server. Next you are prompted for the 'image name' of the update image. Following an opportunity to confirm your entries, the procedure asks if you are willing to 'erase Flash'. Each exclamation point (!) means that one User Datagram Protocol (UDP) segment has successfully transferred. The series of Vs indicates successful check run verification of a segment.

Use the "show flash" command to view the file and to compare its size with that of the original on the server before changing the 'boot system commands' to use the updated image. Following a successful copy, the "reload" command boots up the router as specified with the boot system system using the updated image.
Semester 2, Lesson 11 Notes:
Fundamentals of TCP/IP

TCP/IP - "Transmission Control Protocol/Internet Protocol". Common name for the suite of protocols developed by the U.S. DOD in the 1970s to support the construction of worldwide internetworks. TCP and IP are the two best-known protocols in the suite.

TCP - "Transmission Control Protocol". Connection-oriented 'transport layer' protocol that provides reliable full-duplex data transmission. TCP is part of the TCP/IP protocol stack.

IP - "Internet Protocol". 'Network layer' protocol in the TCP/IP stack offering a connectionless internetwork service. IP provides features for addressing, type-of-service specification, fragmentation and reassembly, and security. Documented in RFC 791.

The TCP/IP protocol stack has the following components:

· Protocols to support file transfer, e-mail, remote login, and other 'application protocols'. Network management is also supported at the Application layer. (layer 7)

· Reliable and "unreliable" transports (layer 4)

· Connectionless datagram delivery at the Network layer (layer 3)

· ICMP provides control and message functions at the Network layer (layer 3).

1. How do the TCP/IP 'Conceptual layers' relate to the 'OSI layers'?

1. TCP/IP groups the OSI 7-Application, 6-Presentation, and 5-Session layers into an "Application Layer".

2. The OSI 4-Transport layer maps exactly to the TCP/IP "Transport Layer".

3. TCP/IP renames the OSI 3-Network layer as an "Internet Layer".

4. TCP/IP calls the OSI 2-Data link and 1-Physical layers the "Network Interface Layer".

2. Compare and contrast TCP and UDP Transport Layer).

1. TCP (Transmission Control Protocol) is a connection-oriented, 'reliable protocol'. It is responsible for breaking messages into 'segments', reassembling them at the destination station, resending anything that is not received, and reassembling messages from the segments. TCP supplies a 'virtual circuit' between end-user applications.

2. UDP (User Datagram Protocol) is a connection-less, "unreliable" protocol. Although UDP is responsible for transmitting messages, no software checking for segment delivery is provided at this layer; hence the description 'unreliable'.

The "Transport layer" performs two functions:

1. Flow control provided by sliding windows

2. Reliability provided by sequence numbers and acknowledgmenmts



3. Briefly describe everything you know about the fields in a TCP 'segment'.

TCP field segments include:

1. Source and destination ports (what services are being requested)

2. Sequence numbers, Acknowledgment numbers, and Header length (keeping track of segments)

3. Code bits (setup and termination of sessions)

4. Window (number of octets that the sender is willing to accept)

5. Checksum (number of header and data fields, for error correction)

6. Data (upper-layer protocol data)

Both TCP and UDP us eport (or socket) numbers to pass information to the upper layers. Port numbers are used to keep track of different conversations crossing the network at the same time. Application software developers agree to use well-known port numbers that are defined in RFC1700.

Some ports are reserved in both TCP and UDP, but applications might not be written to support them. Port numbers have the following assigned ranges:

· Numbers below 255 are for public applications.

· Numbers from 255 to 1023 are assigned to companies for sealable applications.

· Numbers above 1023 are unregulated.

End systems use port numbers to select the proper application. Originating source port numbers are dynamically assigned by the source host, usually some number greater than 1023.

TCP "Three-Way Handshake" (Open Connection)

Both ends of the connection are synchronized with a three-way handshake /open connection sequence. Exchanging beginning sequence numbers during the connection sequence ensures that lost data can be recovered if problems occur later.



Host-A Host-B

------ ------

1. Send SYN (seq=x)

Receive SYN (seq=x)





Send SYN (seq=y, ack=x+1)

2. Receive SYN (seq=y, ach=x+1)







3. Send ACK (ack=y+1)

Receive ACK (ack=y+1)





"Window size" - Refers to the number of messages that can be transmitted while awaiting an acknowledgment. TCP uses 'expectational acknowledgments', meaning that the acknowledgment number refers to the octet expected next.

"Par" (Positive Acknowledgment and Retransmission) - TCP provides "sequencing" of segments with a "forward reference acknowledgment". Each datagram is numbered before transmission. At the receiving station, TCP reassembles the segments into a complete message. If a sequence number is missing in the series, that segment is retransmitted. Segments that are not acknowledged within a given time period result in retransmission.

"UDP (User Datagram Protocol) uses no windowing or acknowledgments. Application-layer protocols can provide for reliability. UDP is designed for applications that do not need to put sequencses of segments together. Protocols that use UDP include TFTP, SNMP, Network File System (NFS), and Domain Name System (DNS).

4. Briefly describe everything you know about the fields in an IP 'datagram'.

IP datagram fields include:

1. Version number and header length

2. Type of service and total length of datagram

3. Time-To-Live

4. Which upper-layer Protocol has sent the Datagram (TCP or UDP)

5. Header checksum

6. Source and Destination IP addresses

7. IP options (testing, debugging, security)

8. Data

5. Briefly distinguish between IP, ICMP, ARP, and RARP (Internet layer).

Several protocols operate at the TCP/IP Internet layer, which corresponds to the OSI 3-Network layer:

"IP" (Internet protocol) provides 'connectionless', 'best-effort routing' of datagrams [packets]. It is not concerned with their content; it is looking for ways to move the datagrams to their destination. IP provides features for addressing, type-of-service specification, fragmentation and reassembly, and security.

"ICMP" (Internet Control Message Protocol) provides control and messaging capabilities. Network layer Internet protocol that reports errors and provides other information relevant to IP packet processing.

If a router receives a packet that it is unable to deliver to its destination, the router sends an ICMP :destination unreachable" message to the source and the router discards the message. The message might be undeliverable because of an invalid IP address or there is no known route to the destination. Undeliverable ICMP messages are discarded to prevent flooding of the network.

An "echo reply" is a successful reply to a "ping" command; however, the results could include other ICMP mesages, such as unreachables and timeouts.

ICMP uses the following types of defined messages. Others exist that are not included on this list:

· Destiantion (Host) Unreachable

· Echo Request (Ping)

· Echo Reply (Ping Reply)

· Time Exceeded

· Parameter Problem

· Source Quench

· Redirect

· Timestamp

· Timestamp Reply

· Information Request

· Information Reply

· Address Request

· Address Reply

"ARP" (Address Resolution Protocol) determines the 2-Data link layer address for a known IP address. Internet protocol is used to map an IP address (network address) to a MAC sublayer address. To determine a destination address for a 'datagram' the "ARP cache" table is checked. If the address is not in the table, ARP sends a 'broadcast' looking for the destination station. Every station on the network receives the broadcast.

The term "local ARP" is used to describe resolving an address when both the requesting host and the destination host share the same media or wire. Prior to issuing the ARP, the "subnet mask" was consulted. The mask determined that the nodes are on the same subnet.

"RARP" (Reverse Address Resolution Protocol) determines network addresses (IP addresses) when data link layer addresses are known. Protocol in the TCP/IP stack that provides a method for finding IP addresses based on MAC addresses.

RARP relies on the presence of a RARP server with a table entry or other means to respond to these requests. On the local segment, RARP can be used to initiate a remote operating system load sequence








Semester 2, Lesson 12 Notes:
TCP/IP Address Overview and Configuring Router Addresses

Each node using the TCP/IP protocol suite has a unique '32-bit logical address'. This address is known as the "IP address".

Each company listed on the internetwork is seen as a 'single unique network' that must be reached before an 'individual host' within that company can be contacted. Each company network has an address; the hosts that live on that network share that same "network address", but each host is identified by the unique "host address" on the network.

"Broadcast" - Data packet that will be sent to all nodes on a network. Broadcasts are identified by a "broadcast address" a 'host address' of all ones in the 'IP address'.

The Cisco IOS software supports two kinds of broadcasts:

1. "Directed broadcasts" - Broadcasts directed into a specific network are allowed and are forwarded by the router. These directed broadcasts contain all ones in the host portion of the address.

2. "Flooding" - 'Flooding broadcasts' (255.255.255.255) are not propagated, but are considered local broadcasts.

"Flooding" - Traffic passing technique used by 'switches' and 'bridges' in which traffic received on an interface is sent out to all of the interfaces of that device except the interface on which the information was originally received.

"Network Addresses" - An address of all zeros means 'this network' or 'the wire itself'. The "routing table" contains entries for the 'wire' or 'network addresses'; it usually does not contain any information about hosts.

An 'IP address' and 'subnet mask' on an interface achieves three purposes:

1. It enables the system to process the receipt and transmission of packets.

2. It specifies the device's local address.

3. It specifies a range of addresses that share the cable with the device.

1. If a router has:

A serial interface SO with IP address 172.16.1.2

An Ethernet interface EO with IP address 172.31.4.1

A Token Ring interface TO with IP address 172.31.16.1

and if all interfaces use a mask of 255.255.25.0, find the subnet (wire) number for each interface.



SO: 172.16.1.0 (172.16.1.2 AND 255.255.255.0)

EO: 172.31.4.0 (172.31.4.1 AND 255.255.255.0)

TO: 172.31.16.0 (172.31.16.1 AND 255.255.255.0)

2. What is the result of the command:

"Router(config-if)# ip address ip-address subnet-mask"

This command establishes the 'logical network address' (ip-address) and subnet-mask of the specified interface. Specifically, it (1) assigns an address and a subnet-mask and (2) starts IP processing on that interface.

"Router(config)# term ip netmask-format"

Command used to specify the format of network masks for the current session. Format options are:

Bit count

Dotted decimal (the default)

Hexdecimal

What does the following command do?

"Router(config)# ip host name ip-address"

The 'ip host' command makes a "static name-to-address entry" in the router's configuration file. Hosts and interfaces then become selctable by either their 'name' or their 'IP address'.

"Router(config)# ip name-server server-address [...]"

Command used to define which hosts can provide the 'name service'. A maximum of six IP addresses can be specified as name servers in a single command.

"Router(config)# ip domain-lookup"

The DNS (name service) is enabled by default with a server address of 255.255.255.255, which is a local broadcast.

"Router(config)# no ip domain-lookup"

Command used to turn off name-to-address translation in the router.

4. What type of information is obtained from the command:

"Router# show hosts"

This command displays host names, their associated IP addresses, and type and time status indicators about how and why the host name became associated with those IP addresses (Cache of host name-to-address mappings).

The Cisco IOS software maintains a 'cache' of 'host name-to-address mappings' for use by EXEC commands. This cache speeds the process of converting names to addresses.

5. Distinguish amongst the three commands which allow you to 'verify address configuration' in your internetwork.

1. "Telnet" (a layer 7 test) verifies the allplication layer software between source and destination stations (this is the most complete test mechanism available).

2. "Ping" (a layer 3 test) uses the IMCP protocol to verify the hardware connection and the logical address of the network layer (this is a very basic testing mechanism). The 'ping' command sends ICMP echo packets and is supported in both user and privileged EXEC mode. These are the commands that may be returned by the "ping" test (ICMP Echo Request):

3.

4. Character Definition

5. ! Successful receipt of an echo reply

6. . Times out waiting for datagram reply

7. U Destination unreachable error

8. C Congestion-experienced packet

9. I Ping interupted (Ctrl-Shift-6 x)

10. ? Packet type unknown

11. & Packet Time To Live exceeded

"Extended Ping" is supported only from privileged EXEC mode. You can use the extended command mode of the ping command to specify the supported internet header options. To enter the extended mode, enter 'Y' at the extended commands prompt.

12. "Trace" uses Time-To-Live (TTL) values to generate messages from each router used along the path (this is very useful for locating path failures). 'Host names' are shown if the addresses are translated dynamically or via static host table entires. The 'times' listed represent the time required for each of three probes to return.

When the trace reaches the target destination, an asterisk (*) is reported at the display. This normally is caused by the receipt of a port -unreachable packet and the time out in responce to the probe packet. Other responses include:



!H - The probe was received by the router,

but not forwarded, usually due to an

access list.

P - The protcol was unreachable.

N - The network was unreachable.

U - The port was unreachable.

* - Time out.

Semester 2, Lesson 13 Notes:
Router configuration and Routing Protocols: RIP and IGRP

"IGP" (Interior Gateway Protocol) - Internet protocol used to exchange routing information within an autonomous system. Examples of common IGPs include IGRP, OSPF, and RIP.

"RIP" (Routing Information Protocol) - IGP supplied with UNIX BSD systems. The most common IGP in the Internet. RIP uses hop count as a routing metric.

"IGRP" (Interior Gateway Routing Protocol) - IGP developed by Cisco to address the problems associated with routing in large, heterogeneous networks.

Each 'interface' on the router must be configured with a unique 'IP address' and 'subnet mask'. Information that relates an IP address to a router is called the "routing table".

Routers learn paths to destinations three different ways:

(Note: The "ip route" command is used to set up 'static routes'. The "ip default-network" command is used to set up 'default routes')

(1)"Static routes" - Manually defined by the system administrator as the only path to the destination (stub network). Route that is explicitly configured and entered into the routing table. Static routes take precedence over routes chosen by dynamic routing protocols. Useful for controlling security and reducing traffic. The "ip route" command is used to setup a static route.

Router(config)# ip route network [mask] {address/interface) [distance]



network Destination 'network' or subnet mask

Subnet mask



address IP address of next hop router



interface Name of interface to use to get to

destination network



distance The administrative distance

"Administrative distance" - a rating of the trustworthiness of a routing information source expressed as a numeric value from 0 to 255. The higher the number, the lower the trustworthiness rating.

A 'static route' allows manual configuration of the routing table. No dynamic changes to this table entry will occur as long as the path is active. A static route may reflect some special knowledge of the networking situation known to the network administrator. Manually entered 'administrative distance' values for static routes are usually low numbers.

Routing updates are not sent on a link if only defined by a 'static route', thereby conserving bandwidth.

(2)"Default routes" - Manually defined by the system administrator as the path to take when no route to the destination is known. Routing table entry that is used to direct frames for which a next hop is not explicitly listed in the routing table. 'Default routes' are configured using the 'ip default route' command, while at the 'Router (config)# prompt.

Router(config)# ip default-network network-number

Network-number: IP network number or subnet number defined as the default.

(3)"Dynamic routing" - Router learns of paths to destinations by receiving periodic updates from other routers. Routing that adjusts auotmatically to network topology or traffic changes. Also called adaptive routing. Dynamic routing uses 'broadcasts' and 'multicasts' to communicate with other routers. The "router" command starts a routing process.

Router(config)# router protocol [number/word]

protocol RIP, IGRP, OSPF, or Enhanced IGRP.

number autonomous-number for IGRP

An "Autonomous System" (AS) is a group of routers under a common administration, An 'autonomous system' consists of touters, run by one or more operators, that present a consistent view of routing to the external world. As numbers are used to prevent updates from different Autonomous Systems being propagated amongst each other.

The "Network Information Center" (NIC) assigns a unique 'autonomous system' to enterprises. This autonomous system is a 16-bit number. A routing protocol, such as Cisco's "Interior Gateway Routing Protocol" (IGRP) requires that you specify this unique, assigned autonomous system number in your configuration.

Router(config-router)# network network-number

network:

Such as autonomous system, which is used with those protocols that require an autonomous system, such as IGRP.

network-number:

Specifies a directly connected network.

The "network" command is required because it allows the routing process to determine which interfaces will participate in the sending and receiving of routing updates. The "network number" must be based on the NIC network numbers, not subnet numbers or individual addresses. The network command assigns a NIC-based address to which the router is directly connected. The routing process will associate interfaces with the proper addresses and will begin packet processing on the specified networks.

"Exterior routing protocols" are used to communicate between 'autonomous systems'. "Interior routing protocols" are used to communicate within a single Autonomous System.

At the "Internet layer" of the TCP/IP suite of protocols, a router can use the IP routing protocol to accomplish routing through the implementation of a specific routing algorithm. Examples of the IP routing protocols include:

RIP:

A 'distance vector' routing protocol.

IGRP:

Cisco's 'distance vector' routing protocol.

OSPF:

A 'link-state' routing protocol.

Enhanced IGRP:

A 'balanced hybrid' routing protocol.

The selection of IP as a routing protocol involves the setting of both global and interface parameters.

Global configuration tasks:

1. Select a routing protocol, RIP or IGRP.

2. Assign IP network numbers without specifying subnet values.

Interface configuration task:

1. assign network/subnet addresses and the appropriate subnet mask.

RIP (Routing Information Protocol) is primarily concerned with the 'hop count'. Key characteristics of RIP include the following:

· It is a distance vector routing protocol.

· Hop count is used as the metric for path selection.

· The maximum allowable hop count is 15.

· Routing updates are broadcast every 30 seconds by default.

IGRP (Interior Gateway Routing Protocol) is a distance vector routing protocol developed by Cisco. IGRP sends routing updates at 90-second intervals that advertise networks for a particular autonomous system. The following are some key characteristics of IGRP:

· IGRP is a distance vector routing protocol.

· A composite metric (including bandwidth, delay, load, reliability, and MTU) is used for path selection.

· It is versatile, flexable, and scalable, allowing for more complex topologies and large networks.

· Routing updates are broadcast every 90 seconds.

· Speed is the primary concern of IGRP.

"MTU" (Maximum transmission unit) - Maximum packet size, in bytes, that a particular interface can handle.

"show ip protocol" - (1) Command that displays values about routing timers and network information associated with the entire router. (2) Command that displays parameters, filters, and network information about the entire router. Use this information to indentify a router that is suspected of delivering bad routing information.

"show ip route" - Command that displays the contents of the IP routing table.

The 'routing table' contains entries for all known networks and subnetworks and contains a 'code' that indicates how that information was learned.

"show ip interface" - Command that displays the status and global parameters associated with an interface.

The Cisco IOS software automatically enters a directly connected route in the routing table if the 'interface' is one through which software can send and receive packets. Such an 'interface' is marked 'up'. If the interface is unusable, it is removed from the routing table. Removing the entry allows implementation of backup routes, if they exist.

"debug ip rip" - Command that displays RIP routing updates as they are sent and received




Semester 2, Lesson 14 Notes:
Router Access Lists, Security, and Firewalls

"Access list" - (1) List kept by Cisco routers to control access to or from the router for a number of services (for example, to prevent packets with a certain IP address from leaving a particular interface on the router). (2) Command that creates an entry in a standard traffic filter list.

· Standard

-Simpler address specifications

-Generally permits or denies entire protocol suites

· Extended

-More complex address specifications

-Generally permits or denies specific protocols

"Access lists" offer another powerful tool for network control. These lists add the flexibility to filter the packet flow that flows in or out of router interfaces. "Access lists" perform several functions within a Cisco router including:

· Impliment security/access procedures

· Act as a protocol "firewall"

"Extended Access lists" allow 'filtering' on address, protocol, and applications. Access lists are used to 'limit broadcast traffic'.

You can also use "Access lists" to:

· Identify packets for priority or custom queing

· Restrict or reduce the contents of routing updates

"Access lists" also process packets for other security features to:

· Provide IP traffic dynamic access control with enhanced user authentication using the lock-and-key feature

· Identify packets for encryption

· Identify Telnet access allowed to the router virtual terminals

"DDR" (Dial-on-demand routing) Technique whereby a Cisco router can automatically initiate and close a 'circuit-switched session' as transmitting stations demand. The router 'spoofs keepalives' so that end stations treat the session as active. DDR permits routing over ISDN or telephone lines using an external ISDN terminal adaptor or modem.

The OSI model is the very heart of networking with every layer performing a specific task in order to facilitate data communications. In the world of networking the first four (4) layers are the focus. They define the following:

* What type and speed of LAN and WAN media to be implemented
* How data is sent across the media
* What type of addressing schemes will be used.
* How data will be reliably sent across the network and how flow control will be accomplished
* What type of routing protocol will be implemented

Why a Layered Network Model ?

* Reduces complexity
* Standardizes interfaces
* Facilitates modular engineering
* Ensures interoperable technology
* Accelerates evolution
* Simplifies teaching and learning

The OSI model - seven numbered layers indicate distinct functions. In the Transmission Control Protocol/Internet Protocol (TCP/IP), the distinct functions fit into five named layers. This separation of networking functions is called "layering".
OSI Layer Functions:

7. APPLICATION (Network processes to applications)

The application layer provides network services to user applications. For example, a word processing application is serviced by file transfer services at this layer.

6. PRESENTATION (Data representation)

This layer provides data representation and code formatting. It ensures that the data that arrives from the network can be used by the application, and it ensures that information sent by the application can be transmitted on the network.

5. SESSION (Interhost communication)

This layer establishes, maintains, and manages sessions between applications.

4. TRANSPORT (End-to-end connections)

This layer segments and reassembles data into a data stream. This layer uses the TCP protocol.

3. NETWORK (Addresses and best path)

This layer determines the best way to move data from one place to another. The router operates at this layer. This layer uses the IP addressing scheme.

2. DATA LINK (Access to media)

This layer provides physical transmission across the medium. It handles error notification, network topology, and flow control. This layer uses the Media Access Control (MAC) address.

1. PHYSICAL (Binary transmission)

This layer provides the electrical, mechanical, procedural, and functional means for activating and maintaining the physical link between systems. This layer uses the physical media like twisted pair, coaxial, and fiber-optic cable.

[Host Layers] (layers 7, 6, 5, & 4)
Provide for accurate data delivery between computers

[Media Layers] (layers 3, 2, & 1)
Control physical delivery of messages over the network

Each layer uses its own 'layer protocol' to communicate with its peer layer in the other system. Each layer's protocol exchanges information, called protocol data units (PDUs), between peer layers. A given layer can use a more specific name for its "PDU".



7, 6, 5. ------ [data]

4. Transport--- segments [segment header][data]

3. Network----- packets [network header][data segment]

2. Data Link--- frames [frame header][network packet][frame trailer]

1. Physical---- bits [binary 1's & 0's]

This peer-layer protocol communication is achieved by using the services of the layers below it. The layer below any current layer provides its services to the current layer. Each lower-layer service takes upper-layer information as part of the lower-layer PDUs it exchanges with its layer peer.

[1-Physical Layer] (bits)
The Ethernet and IEEE 802.3 standards define a bus-topology LAN that operates at a baseband signaling rate of 10 Mbps.

1. 10Base2 - Known as 'thin Ethernet', allows network segments up to 185 meters on coaxial cable.

2. 10Base5 - Known as 'thick Ethernet', allows network segments up to 500 meters on coaxial cable.

3. 10Base-T - Carries Ethernet frames on inexpensive twisted-pair wiring.

The 10Base5 and 10Base2 standards provide access for several stations on the same LAN segment. Stations are attached to the segment by a cable that runs from an attachment unit interface (AUI) in the station to a transceiver that is directly attached to the Ethernet coaxial cable.

Because the 10Base-T standard provides access for a single station only, stations attached to an Ethernet LAN by 10BaseT are almost always connected to a hub or a LAN switch. In this arrangement, the hub or LAN switch is the same as an Ethernet segment.

[2-Data Link Layer] (physical addressing)
The Ethernet and 802.3 data links provide data transport across the physical link joining two devices Devices can be directly attached to each other over the Ethernet LAN. Computers have MAC addresses used by the data-link layer. The router also uses MAC addresses for each of its LAN side interfaces. For indicating the 802.3 interface on the router, you will use the Cisco IOS interface type abbreviation E followed by an interface number (for example, E0).

[3-Network Layer] (Path determination)
Which path should traffic take through the cloud of networks? Path determination occurs at Layer 3, the 'Network layer'. The path determination function enables a router to evaluate the available paths to a destination and to establish the preferred handling of a packet.

Several protocols operate at the TCP/IP Internet layer, which corresponds to the OSI Network layer:

* IP (Internet Protocol) provides connectionless, best-effort delivery routing of datagrams. It is not concerned with the content of the datagrams. Instead, it looks for a way to move the datagrams to their destination.
* ICMP (Internet Control Messages Protocol) provides control and messaging capabilities. ICMP - Network layer Internet protocol that reports errors and provides other information relevant to IP packet processing.
* ARP (Address Resolution Protocol) determines the data link layer address for known IP addresses. Internet protocol used to map an IP address to a MAC address.
* RARP (Reverse Address Resolution Protocol) determines network addresses when data link layer addresses are known. Protocol in the TCP/IP stack that provides a method for finding IP addresses based on MAC addresses.

[TCP/IP Network Layers]

-[DoD TCP/IP Model]- -[OSI 7-Layer Model]-

4. Application (7-Application, 6-Presentation, & 5-Session)

3. Transport (4-Transport)

2. Internet (3-Network)

1. Network Interface (2-Data Link & 1-Physical)

Best-effort delivery - Describes a network system that does not use a sophisticated acknowledgment system to guarantee reliable delivery of information.

[TCP/IP addresses]

* Unique addressing allows communication between 'end stations'
* Path choice is based on location
* Location is represented by an 32-bit address (IP address)

Each company listed on the internetwork is seen as a single unique network that must be reached before an individual host within that company can be contacted. Each company network has an address; the hosts that live on that network share that same network address, but each host is identified by the unique host address on the network.


[Addressing with subnets]
With subnets, the network address use is more efficient. There is no change to how the outside world sees the network, but within the organization, there is additional structure.

Routers determine the destination network using the 'subnet address', limiting the amount of traffic on the other network segments.

"Routing services" use network topology information when evaluating network paths. This information can be configured by the network administrator or collected through dynamic processes running in the network.

The 3-Network layer interfaces to networks and provides best effort end-to-end packet delivery services to its user, the 4-Transport layer. The 3-Network layer sends packets from the source network to the destination network based on 'IP routing table' (contains: 'Destination network' addresses & 'Next Hop' (outgoing interface) pairs).

After the router determines which path to use, it can proceed with "switching the packet"; taking the packet it accepted on one interface and forwarding it to another interface or port that reflects the best path to the packet's destination.

Using IP addresses, the 3-Network layer can provide a 'relay connection' that interconnects independent networks. By using 'consistent end-to-end addressing' to represent the path of media connections, the 3-Network layer can find a path to the destination without unnecessarily burdening the devices or links on the internetwork with broadcasts.

The Network address identifies a path part used by the router within the network cloud. The router uses the network address to identify the source or destination network of a packet within an internetwork. For some network-layer protocols, this relationship is established by a network administrator who assigns network addresses according to some preconceived internetwork addressing plan. For other network-layer protocols, assigning addresses is partially or completely dynamic.

* Network address - Path part used by the router
* Host address - Specific port or device on the network





ICMP - Internet Control Messages Protocol

The ICMP is implemented by all TCP/IP hosts. ICMP messages are carried in IP datagrams and are used to send error and control messages. ICMP uses the following types of defined messages. Others exist that are not included on this list:

* Destination Unreachable
* Time Exceeded
* Parameter Problem
* Source Quench
* Redirect
* Echo
* Echo Reply
* Timestamp
* Timestamp Reply
* Information Request
* Information Reply
* Address Request
* Address Reply

If a router receives a packet that it is unable to deliver to its ultimate destination, the router sends an ICMP host unreachable message to the source. The message might be undeliverable because there is no known route to the destination.

An ICMP 'echo reply' is a successful reply to a "ping" command (ICMP echo request); however, results could include other ICMP messages, such as unreachable and timeouts.
ARP - Address Resolution Protocol

ARP is used to resolve or map a known IP address to a MAC sublayer address to allow communication on a multiaccess medium such as Ethernet. To determine a destination address for a datagram, FIRST, the ARP cache table is checked. If the address is not in the table, ARP sends a broadcast (ARP request) looking for the destination station. Every station on the network receives the broadcast (ARP request). When the destination station replies (ARP reply) only the original station (now the destination) receives the ARP replay and updates it's ARP cache.

The term "local ARP" is used to describe resolving an address when both \ the requesting host and the destination host share the same media or wire. Prior to issuing the ARP, the subnet mask was consulted. The mask determined that the nodes are on the same subnet.

[4-Transport Layer] (End-to-end connections)

* segments upper-layer applications
* establishes an end-to-end connection
* sends segments from one end host to another
* optionally, ensures data reliability

Services located in the 4-Transport layer allow users to break apart or 'segment' several upper-layer application data onto the same Layer 4 data stream. These same services allow users to reassemble the same upper-layer applications data. The Layer 4 data stream provides transport services from the host to the destination. Services such as these are sometimes referred to as "end-to-end services". The Layer 4 data stream is a 'logical connection' between the endpoints of a network.

As the Transport layer sends its data segments, it can also ensure the integrity of the data. One method of doing this is called "flow control". Flow control avoids the problem of a host at one side of the connection overflowing the buffers in the host at the other side. Transport layer services also allow users to request reliable data transport between hosts and destinations. To obtain such reliable transport of data, a connection-oriented relationship is used between the communicating end systems.

Reliable transport can accomplish the following:

* Ensure that segments delivered will be acknowledged back to the sender.
* Provide for retransmission of any segments that are not acknowledged.
* Put segments back into their correct sequence at the destination.
* Provide congestion avoidance and control.

One reason for different layers in the OSI model is so that multiple applications can share the same transport connection. Transport functionality is accomplished segment by segment. This means that different applications can send data segments on a first-come, first-served basis. Such segments can be intended for the same destination or for many different destinations

One user of the 4-Transport layer must establish a connection-oriented session with its peer system.



Sender --- synchronize ------------------> Receiver

Sender <------ negotiate connection -----> Receiver

Sender <------------------ synchronize --- Receiver

Sender --- acknowledge ------------------> Receiver

----- connection established -----

Sender <- data transfer (send segments) -> Receiver

TCP/IP 3-way Handshake



(1) Send SYN(seq=x) -----\

\--> Receive SYN(seq=x)

(2) /--- Send SYN(seq=x, ack=y+1)

Receive SYN(seq=y) <-/

ACK(x+1)

(3) Send ACK(ack=y+1) ---\

\--> Receive ACK(ack=y+1)

When datagrams arrive too quickly for a host or gateway to process, they are stored in memory temporarily (buffer). If the traffic continues, the host or gateway eventually exhausts its memory and must discard additional datagrams that arrive. Instead of allowing data to be lost, the transport function can issue a 'not ready' (Window size=0) indicator to the sender. Acting like a stop sign, this indicator signals the sender to stop sending data. When the receiver can handle additional data, the receiver sends a 'ready' (Window size >0) transport indicator, which is like a go signal.

If the sender has to wait for an acknowledgment after sending each segment, throughput will be low. Because time is available after the sender finishes transmitting the data packet and before the sender finishes processing any received acknowledgment, the interval is used for transmitting more data. The number of data packets the sender is allowed to have outstanding - without yet receiving an acknowledgment - is known as the "window" or window size.

Windowing is a method to control the amount of information transferred end-to-end. Some protocols measure information in terms of the number of packets; TCP/IP measures information in terms of the number of bytes. Windowing is an end-to-end agreement between sender and receiver.

Reliable delivery guarantees that a stream of data sent from one machine will be delivered through a data link to another machine without duplication or data loss. (PAR) "Positive Acknowledgment with Retransmission" is one technique that guarantees reliable delivery of data streams. Positive acknowledgment requires a recipient to communicate with the source, sending back an acknowledgment (ACK x+1) message when it receives data. The sender keeps a record of each data packet it sends and waits for an acknowledgment before sending the next data packet. The sender also starts a timer when it sends a segment, and it retransmits a segment if the timer expires before an acknowledgment arrives.
Routing

Routers generally relay a packet from one data link to another. To relay a packet, a router uses two basic functions:

1. a path determination function, and

2. a switching function.

A router is responsible for passing the packet to the next network along the path. The router uses the 'network portion' of the address to make 'path selections'. The 'switching function' allows a router to accept a packet on one interface and forward it on a second interface. The 'path determination' function enables the router to select the most appropriate interface for forwarding a packet. The 'node portion' of the address refers to a specific port on the router that leads to an adjacent router in that direction.

* Network portion of address used to make path selections
* Node portion of address refers to router port to the path

'Routed protocol' - Protocol that can be routed by a router. A router must be able to interpret the logical internetwork as specified by that routed protocol. Any network protocol that provides enough information in its network layer address to allow a packet to be forwarded from host to host based on the addressing scheme. Routed protocols define the format and use of the fields within a packet.

Examples of routed protocols include AppleTalk, DECnet, and IP.

'Routing protocol' - Protocol that accomplishes routing through the implementation of a specific routing algorithm. Supports a routed protocol by providing mechanisms for sharing routing information. Routing protocol messages move between the routers. A routing protocol allows the routers to communicate with other routers to update and maintain tables.

Examples of routing protocols include IGRP, OSPF, and RIP.
RIP - Routing Information Protocol

IGP (Interior Gateway Routing Protocol) supplied with UNIX BSD systems. The most common IGP in the Internet. RIP uses hop count as a routing metric. Key characteristics of RIP include the following:

· It is a distance vector routing protocol.

· Hop count is used as the metric for path selection.

· The maximum allowable hop count is 15.

· Routing updates are broadcast every 30 seconds by default.
IGRP - Interior Gateway Routing Protocol

IGP developed by Cisco to address the problems associated with routing in large, heterogeneous networks.
EIGRP - Enhanced Interior Gateway Routing Protocol

Advanced version of IGRP developed by Cisco. A 'balanced hybrid' routing protocol. Provides superior convergence properties and operating efficiency, and combines the advantages of link state protocols with those of distance vector protocols.
OSPF - Open Shortest Path First

Link-state, hierarchical IGP routing protocol proposed as a successor to RIP in the Internet community. OSPF features include least-cost routing, multipath routing, and load balancing. OSPF was derived from an early version of the ISIS protocol.

[Network-Layer Protocol Operations]
When a host application needs to send a packet to a destination on a different network, a 2-Data-link frame is received on one of a router's interfaces. The 3-Network layer process examines the header to determine the destination network and then references the routing table that associates networks to outgoing interfaces. The packet is again encapsulated in the 2-Data-link frame for the selected interface and queued for delivery to the next hop in the path. This process occurs each time the packet switches through another router. At the router connected to the network containing the destination host, the packet is again encapsulated in the destination LAN's 2-Data-link frame type and delivered to the destination host.

"Static Route" - uses a protocol route that a network administrator enters into the router. Route that is explicitly configured and entered into the routing table. Static routes take precedence over routes chosen by dynamic routing protocols.

* For security when appropriate to hide parts of an internetwork
* Point-to-point or circuit-switched connection
* Stub network (network that has only a single connection to a router)
* Only a single network connection with no need for routing updates (Fixed route to address reflects administrators knowledge)

"Dynamic Route" - uses a route that a network routing protocol adjusts automatically for topology or traffic changes. Routing that adjusts automatically to network topology or traffic changes. Also called adaptive routing.

The success of "dynamic routing" depends on two basic router functions:

1. Maintenance of a routing table, and

2. Timely distribution of knowledge in the form of routing updates to other routers.

Dynamic routing relies on a 'routing protocol' to share knowledge. A 'routing protocol' defines the set of rules used by a router when it communicates with neighboring routers.

"Default route" - Routing table entry that is used to direct frames for which a next hop is not explicitly listed in the routing table.

"Distance vector" routing algorithm - Class of routing algorithms that iterate on the 'number of hops' in a route to find a shortest-path spanning tree. Distance vector routing algorithms call for each router to send its entire 'routing table' in each periodic update, but only to its neighbors and in the process accumulate 'distance vectors'. Distance vector routing algorithms can be prone to routing loops, but are computationally simpler than 'link state' routing algorithms. Also called Bellman-Ford routing algorithm. Distance vector algorithms do not allow a router to know the exact topology of an internetwork.

"Link state" (also called shortest path first) routing algorithm - Routing algorithm in which each router broadcasts or multicasts information regarding the 'cost of reaching each of its neighbors' to all nodes in the internetwork. 'Link state' algorithms create a consistent view of the network (they maintain a complex database of topology information) and are therefore not prone to routing loops, but they achieve this at the cost of relatively greater computational difficulty and more widespread traffic (compared with distance vector routing algorithms). Link-state routing uses link-state advertisements (LSAs), a topological database, the SPF algorithm, the resulting SPF tree, and finally, a routing table of paths and ports to each network.

'LSA' - Link-state advertisement. Broadcast packet used by 'link-state' protocols that contains information about neighbors and path costs. LSAs are used by the receiving routers to maintain their routing tables. Sometimes called a link-state packet (LSP).

The "Balanced hybrid" approach combines aspects of the 'link-state' and 'distance vector' algorithms.

'Convergence' - The speed and ability of a group of internetworking devices running a specific routing protocol to agree on the topology of an internetwork after a change in that topology. (The knowledge needs to reflect an accurate, consistent view of the new topology.) When all routers in an internetwork are operating with the same knowledge, the internetwork is said to have 'converged'.



[ Distance Vector Routing ] [ Link-State (SPF) Routing ]

* Views net topology from * Gets common view of entire

neighbor's perspective network topology



* Adds distance vectors * Calculates the shortest

from router to router path to other routers



* Frequent, periodic up- * Event-triggered updates:

dates: slow convergence faster convergence



* Passes copies of routing * Pass link-state routing

table to neighbor routers updates to other routers

· "Exterior routing protocols" are used to communicate between autonomous systems.

· "Interior routing protocols" are used within a single autonomous system.
Router Configuration

IP routing configuration tasks:

1. Global Configuration

o Select routing protocols (RIP, IGRP)

o Specify network(s) (assign IP network numbers)

2. Interface Configutation

o assign network/subnet addresses & subnet masks

Use the "ip address" command to establish the logical network address of this interface.

Router(config-if)# ip address ip-address subnet-mask

* assigns an address and subnet mask
* starts IP processing on an interface

Use the "term ip netmask-format" command to specify the format of network masks for the current session. Format options are:

- Bit count

- Dotted decimal (the default)

- Hexadecimal

Router(config)# term ip netmask-format

* sets format of network mask as seen in show commands



The "router" command starts a routing process.

Router(config)# router protocol [keyword]

* defines an IP routing protocol

Router(config-router)# network network-number

* the network subcommand is a mandatory configuration command for each IP routing process

The "router rip" command that selects RIP as the routing protocol.

Router(config)# router rip

* starts the RIP routing process

Router(config-router)# network network-number

* selects participating attached networks

The "network" command assigns a NIC-based address to which the router is directly connected. The routing process will associate interfaces with the proper addresses and will begin packet processing on the specified networks.



Example:

router rip Selects RIP as the routing protocol.

network 1.0.0.0 Specifies a directly connected network.

network 2.0.0.0 Specifies a directly connected network.

The Cisco router interfaces connected to networks 1.0.0.0 and 2.0.0.0 will send and receive RIP updates. These routing updates allow the router to learn the network topology.
2. LAN Switching



The default encapsulation types on Cisco router interfaces and their keywords are:

* Ethernet - novell-ether
* Token Ring - sap
* FDDI - snap

Note: The default Ethernet encapsulation type on Cisco routers does not match the default Ethernet encapsulation type on Novell servers after NetWare 3.11.

Novell uses Novell RIP for routing. Novell RIP checks its two distance vector metrics by first comparing the ticks for path alternatives. If two or more paths have the same tick value, Novell RIP compares the hop count. If two or more paths have the same hop count, the router will load share based on the IPX maximum-paths command.

* Uses ticks (about 1/18 sec) and hop count (maximum of 15 hops)
* Broadcasts routing information to neighbor routers every 60 seconds

SAP (Service Advertizements Protocol) - All servers and routers keep a complete list of the services available throughout the network in server information tables. SAP uses an aging mechanism to identify and remove table entries that become invalid.

* SAP packets advertize all NetWare network services
* Service Advertisements occur at 60-second intervals
* Adding, finding, and removing services on the internetwork is dynamic because of SAP advertisements
* Can add excessive broadcast traffic to the network
* Routers do not forward SAP broadcasts. Instead, each router builds its own SAP table and forwards the SAP table to other routers. By default this occurs every 60 seconds but the router can use access lists to control the SAPs accepted or forwarded.

Each SAP service is an object type identified by a hexadecimal number:

* 4 NetWare file server
* 7 Print server
* 24 Remote bridge server (router)

GNS Get Nearest Server protocol (SAP query):

* GNS is a broadcast from a client needing a server
* NetWare servers and Cisco routers get this SAP packet
* NetWare servers provide GNS response
* Cisco router will not respond to the GNS request. If there are no NetWare servers on the local network, the Cisco router will respond with a server address from its own SAP table.

Novell IPX configuration Tasks:

* Global Configuration
o Start IPX routing process
o Enable Load sharing (if appropriate)
* Interface Configuration
o Assign unique Network numbers
o Set the (optional) Encapsulation type



Router(config)# ipx routing [node address]

* enables Novell IPX routing
* If no node address is specified, the Cisco router uses the MAC address of the interface
* If a Cisco router has only serial interfaces, an address must be specified



Router(config)# ipx maximum-paths paths

* Configures round-robin load sharing over multiple equal metric paths
* paths - Maximum number of parallel paths to the destination; the default is 1 and the maximum is 512



Router(config-if)# interface type number.subinterface-number

Router(config-if)# ipx network network [encapsulation encap-type]

* Specify a subinterface, then enable IPX routing with encapsulation type



Router(config-if)# ipx network network [encapsulation encap-type]

[secondary]

* Assign primary and secondary network number and encapsulation

Subinterface - One of a number of virtual interfaces on a single physical interface:

* Allows a single physical interface to support multiple logical interfaces or networks.
* Several logical interfaces or networks can be associated with a single hardware interface.
* Each subinterface must use a distinct encapsulation, and the encapsulation must match that of the clients and servers using the same network number.

Novell IPX Configuration example:



Router(config)# ipx routing

* Selects IPX for routing, and starts IPX RIP



Router(config)# ipx maximum-paths 2

* Allows load sharing over parallel metric paths to the destination. The number of parallel paths used is limited to two



Router(config-if)# interface ethernet 0.1

* Indicates the first subinterface on interface E0



Router(config-if)# ipx encapsulation novell-ether

* Specifies that Novell's unique frame format is used on this network segment. Cisco's keyword is novell-ether; Novell's terminology is Ethernet_802.3



Router(config-if)# ipx network 9e

* Network number assigned to subinterface E0.1



Router(config-if)# interface ethernet 0.2

* Indicates the second subinterface on interface E0



Router(config-if)# ipx network 6c encapsulation sap

* Network number assigned to subinterface E0.2



Router(config-if)# interface ethernet 1

Router(config-if)# ipx network 4a encapsulation sap

* Specifies that Ethernet 802.2 frame format is used on this network segment. Cisco's keyword is sap



Router(config-if)# interface serial 0

Router(config-if)# ipx network 1

Verfying IPX operation:

Monitoring Commands:

* show ipx interface (IPX status and IPX parameters configured)
* show ipx route (IPX Routing table contents)
* show ipx servers (IPX server list - discovered through SAP)
* show ipx traffic (Number and type of packets received/transmitted)

Troubleshooting Commands:

* debug ipx routing activity (Information about RIP update packets)
* debug ipx routing sap (Information about SAP update packets)

SAP responses may be one of these types:

0x1 - General query

0x2 - General response

0x3 - Get Nearest Server request

0x4 - Get Nearest Server response
1. Review (of the first 3 Semesters)



Distance Vector routing algorithm - Class of routing algorithms that iterate on the number of hops in a route to find a shortest-path spanning tree. Distance vector routing algorithms call for each router to send its entire routing table in each update, but only to its neighbors. Distance vector routing algorithms can be prone to routing loops, but are computationally simpler than link state routing algorithms. Also called Bellman-Ford routing algorithm.

* Pass periodic copies of routing table to neighbor routers and accumulate distance vectors

Link State routing algorithm - (Shortest path first) Routing algorithm in which each router broadcasts or multicasts information regarding the cost of reaching each of its neighbors to all nodes in the internetwork. Link state algorithms create a consistent view of the network and are therefore not prone to routing loops, but they achieve this at the cost of relatively greater computational difficulty and more widespread traffic (compared with distance vector routing algorithms).

Convergence - The speed and ability of a group of internetworking devices running a specific routing protocol to agree on the topology of an internetwork after a change in that topology.

Exterior routing protocols - used to communicate between autonomous systems.

Interior routing protocols - used within a single autonomous system.

* RIP - A distance vector routing protocol.
* IGRP - Cisco's distance vector routing protocol.
* OSPF - A link-state routing protocol.
* EIGRP (Enhanced IGRP) - A balanced hybrid routing protocol

IGRP configuration:

Router(config)# router igrp autonomous-system

* Defines IGRP as an IP routing process

Router(config-router)# network network-number

* Selects participating attached networks

Access Lists

Access list -

1. List kept by Cisco routers to control access to or from the router for a number of services (for example, to prevent packets with a certain IP address from leaving a particular interface on the router).

2. Command that creates an entry in a standard traffic filter list.

Standard Access Lists:

* Simpler address specifications (source address)
* Generally permit or deny entire protocol suite
* acl-number in the range of 1-99

Extended Access Lists:

* More complex address specifications
* Generally permit or deny specific protocols
* acl-number in the range 100-199

NOTE: With Cisco IOS Release 11.2 and later you can also identify a standard or extended IP access list with an alphanumeric string (name) instead of the current numeric (1 to 199) representation.

Wildcard mask - 32-bit quantity used in conjunction with an IP address to determine which bits in an IP address should be ignored when comparing that address with another IP address. A wildcard mask is specified when setting up access lists. (0=check, 1=ignore)

IP Access List test conditions:

* Check for IP subnets:
o IP-address wildcard-mask (0=check, 1=ignore)
* Ignore all the address bits (match any)
o Accept any address: 0.0.0.0 255.255.255.255
o Abrivate using the keyword 'any'
* Check all the address bits (match all)
o Host-address 0.0.0.0 (wildcard mask)
o Abbreviate using the keyword 'host' then the IP address
* Place Standard Access-Lists close to the destination
* Place Extended Access-Lists close to the source

IPX Routing

Cisco's routers offer the following features in Novell network environments:

* Access lists and filters for IPX, RIP, SAP, and NetBIOS
* Scalable routing protocols, including Enhanced IGRP and NLSP
* Configurable RIP and SAP updates and packet sizes
* Serverless LAN support
* Rich diagnostics, management, and troubleshooting features

IPX (Internetwork Packet Exchange) - NetWare network layer (Layer 3) protocol used for transferring data from servers to workstations.

SAP (Service Advertisement Protocol) - IPX protocol that provides a means of informing network clients, via routers and servers, of available network resources and services.

* SAP packets advertise all NetWare network services
* Can add excessive broadcast traffic to the network
* Service advertisements occur at 60-second intervals
* Routers do not forward SAP broadcasts. Instead, each router builds its own SAP table and forwards the SAP table to other routers. By default this occurs every 60 seconds but the router can use access lists to control the SAPs accepted or forwarded.

NetBIOS (Network Basic Input/Output System) - API used by applications on an IBM LAN to request services from lower-level network processes. These services might include session establishment and termination, and information transfer.

SPX (Sequenced Packet Exchange) - Reliable, Layer 4 connection-oriented protocol that supplements the datagram service provided by network layer (Layer 3) protocols. Novell derived this commonly used NetWare transport protocol from the SPP of the XNS protocol suite.

The NetWare protocol stack supports all common media access protocols. The data link and physical layers are accessed through the Open Data Link (ODI) interface.

Each interface retains its own address. The use of the MAC address in the logical IPX address eliminates the need for an Address Resolution Protocol (ARP).

When you configure Cisco IOS software for Novell IPX, use the Cisco name for the appropriate encapsulation. Make sure the encapsulations on the clients, servers, and routers all match. The default encapsulation types on Cisco router interfaces and their keywords are:

* Ethernet - novell-ether
* Token Ring - sap
* FDDI - snap

Novell RIP - a distance vector routing protocol. Novell RIP uses two metrics to make routing decisions: ticks (a time measure) and hop count (a count of each router traversed). Broadcasts to neighbors every 60 seconds.

GNS (Get Nearest Server) - Request packet sent by a client on an IPX network to locate the nearest active server of a particular type. An IPX network client issues a GNS request to solicit either a direct response from a connected server or a response from a router that tells it where on the internetwork the service can be located. GNS is part of the IPX SAP.

* GNS is a broadcast from a client needing a server
* NetWare servers and Cisco routers get the SAP packet
* NetWare servers provide GNS response
* Cisco routers will not respond to the GNS request. If there are no NetWare servers on the local network, the Cisco router will respond with a server address from its own SAP table.

Novell IPX Configuration tasks -

* Global configuration:
o Start the IPX routing process
o Enable load sharing (if appropriate)
* Interface configuration:
o Assign unique network numbers to each interface
o Set the optional encapsulation type



Router(config)# ipx routing [node address]

* enables Novell IPX routing
* If no node address is specified, the Cisco router uses the MAC address of the interface
* If a Cisco router has only serial interfaces, an address must be specified



Router(config)# ipx maximum-paths paths

* Configures round-robin load sharing over multiple equal metric paths
* paths - Maximum number of parallel paths to the destination; the default is 1 and the maximum is 512



Router(config-if)# interface type number.subinterface-number

Router(config-if)# ipx network network [encapsulation encap-type]

* Specify a subinterface, then enable IPX routing with encapsulation type



Router(config-if)# ipx network network [encapsulation encap-type]

[secondary]

* Assign primary and secondary network number and encapsulation

Subinterface - One of a number of virtual interfaces on a single physical interface:

* Allows a single physical interface to support multiple logical interfaces or networks.
* Several logical interfaces or networks can be associated with a single hardware interface.
* Each subinterface must use a distinct encapsulation, and the encapsulation must match that of the clients and servers using the same network number.

Verfying IPX operation

Monitoring Commands:



* show ipx interface (IPX status and IPX parameters configured)

* show ipx route (IPX Routing table contents)

* show ipx servers (IPX server list - discovered through SAP)

* show ipx traffic (Number and type of packets

received/transmitted)

Troubleshooting Commands:



* debug ipx routing activity (Information about RIP update packets)

* debug ipx routing sap (Information about SAP update packets)