Slide 1: OSPF
OSPF(Open Short Path First) is of two types : 1) Single Area OSPF and 2) Multi Area OSPF.
Area0
S0 IR
S0
Area2
ABR
Internal Routers
IR
ABR
Area1
Area Border Router
Slide 2: OSPF under Single Area
S 0 192.168.1.194/252
192.168.1.193/252 S 0
Router A
E 0 1.33 192.168.1.32/ 255.255.255.224
Router B
E 0 1.65 192.168.1.64/ 255.255.255.224
Slide 3: (Config)# ip routing (Config-Router)# router OSPF 6573 (Config-Router)# network 192.168.1.32 0.0.0.31 area 1 (Config-Router)# area 1 range 192.168.1.32 255.255.255.224 (Config-Router)# network 192.168.1.192 0.0.0.3 area 1 (Config-Router)# area 1 range 192.168.1.192 255.255.255.224
Slide 4: Configuration of Router B --------------------------------
(Config)# ip routing (Config-Router)# router OSPF 6573 (Config-Router)# network 192.168.1.32 0.0.0.31 area 1 (Config-Router)# area 1 range 192.168.1.64 255.255.255.224 (Config-Router)# network 192.168.1.195 0.0.0.3 area 1 (Config-Router)# area 1 range 192.168.1.195 255.255.255.252
Slide 5: OSPF under Different Areas
Area 0 Area 1
E0 1.50
Area 2
Router A Router B E0 5.50
192.168.1.0
192.168.5.0
Slide 6: Configuration of Router A -------------------------------(Config)# ip routing (Config-Router)# router OSPF 6573 (Config-Router)# network 192.168.1.0 0.0.0.255 area 1 (Config-Router)# area 1 range 192.168.1.0 255.255.255.0 (Config-Router)# network 172.16.0.0 0.0.255.255 area 0 (Config-Router)# area 0 range 172.16.0.0 255.255.0.0
Slide 7: Configuration of Router B --------------------------------
(Config)# ip routing (Config-Router)# router OSPF 6573 (Config-Router)# network 192.168.5.0 0.0.0.255 area 2 (Config-Router)# area 2 range 192.168.5.0 255.255.255.0 (Config-Router)# network 172.16.0.0 0.0.255.255 area 0 (Config-Router)# area 0 range 172.16.0.0 255.255.0.0
Slide 8: Access Control List
It is also called Network Traffic Control Management (NTCM). We can provide restrictions to individual users, subnets and services etc.
ACL
Standard ACL Extended ACL
Any access list is identified by its number. S. A. L Ex. A. L 1 – 99 100 - 199
Slide 9: Rules for creating and implementing Access List
1. Access list must begin with the Deny Statements (If exists) then Permit Statements must follow. 2. There must be at least one Permit Statement as an Implicit “Deny All” always exists. 3. While Implementation of Access list, There must be only one Access list per Interface, per direction and per protocol.
Slide 10: Standard Access List
S 0 172.16.1.1
Router A
172.16.1.2 S 0
Router B
E 0 1.50
1.4 1.3 1.1 1.2
E 0 5.50
5.4 5.3 5.1 5.2
Syntax Router(config)# Access-list ALNO P/D Src Router(config)# Int <name of interface> Router(Config-if)#Ip Access-Group <Direction> Src-WCM
Slide 11: Configuration Standard Access-list For Router A
Restricting particular user (Config)# Access-list 1 deny 192.168.1.3 0.0.0.0 (Config)# Access-list 1 permit 0.0.0.0 255.255.255.255 or Access-list 1 permit any Restricting a Network (Config)# Access-list 1 deny 192.168.3.0 0.0.0.255 (Config)# Access-list 1 permit any
Slide 12: Extended Access List
S 0 172.16.1.1
172.16.1.2 S 0
Router A
E 0 1.50 1.4 1.3 1.1 1.2
Router B
E 0 5.50 5.4 5.3 5.1 5.2
1.20
Slide 13: Configuration of Router A
(Config)# Access-list 101 deny TCP 192.168.5.0 0.0.0.255 192.168.1.20 0.0.0.0 eq FTP (Config)# Access-list 101 permit IP any any
Implementation
(Config)#int E0 (config-if)# IP Access-group 101 Out
Slide 15: NAT(Network Address Translation)
S 0 172.16.1.1
172.16.1.2 S 0
Router A
E 0 1.50 1.4 192.168.1.3 1.1 1.2
Router B
E 0 5.50 5.4 5.3 5.1 5.2
Note : 192.168.1.3 is denied from entering the network of 5.0.So it will enter with mask.
Slide 16: Configuration of Router A -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.1.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.1 255.255.0.0 (Config-if)# clock rate 56000 (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 192.168.5.0 255.255.255.0 172.16.1.2 (Config)# int E 0 (Config-if)# ip nat inside
Slide 17: (Config)# int S 0 (Config-if)# ip nat outside (Config)# access-list 1 permit 192.168.1.3 0.0.0.0 (Config)# ip nat inside source list 1 int S 0 overload
Configuration of Router B -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.5.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.2 255.255.0.0 (Config-if)# clock rate 56000 (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit
Slide 18: (Config)# ip routing (Config-Router)# ip route 192.168.1.0 255.255.255.0 172.16.1.1 (Config)# access-list 10 deny 192.168.1.3 0.0.0.0 (Config)# access-list 10 permit any (Config)# int E 0 (Config-if)# ip access-group 10 out
Note : Only Public IP can go to the Internetworking world.
Slide 19: A Scenario of providing Net access to the IP's of Router B
172.16.1.1 Routing 1.50 Router A
172.16.1.2
5.50 Routing
Router B 5.0
Switch
Leased line
192.168.1.99
Natting
Slide 20: Configuration of Router A -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.1.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.1 255.255.0.0 (Config-if)# clock rate 56000(for DCE) (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 0.0.0.0 0.0.0.0 192.168.1.99
Slide 21: (Config)# int E 0 (Config-if)# ip nat outside (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip nat inside ((Config-if)# exit (Config)# access-list 10 permit 172.16.0.0 0.0.255.255 (Config)# ip nat inside source list 10 int E 0 overload
Configuration of Router B -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.5.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit
Slide 22: (Config)# int S 0 (Config-if)# ip address 172.16.1.2 255.255.0.0 (Config-if)# clock rate 56000 (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# int E 0 (Config-if)# ip nat inside (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip nat outside (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 0.0.0.0 0.0.0.0 172.16.1.1 (Config)# access-list 10 permit 192.168.5.0 0.0.0.255 (Config)# ip nat inside source list 10 int E 0 overload
Slide 23: PPP(Point-to-Point) using PAP protocol
Internet based leased line
S 0 172.16.1.1 172.16.1.2 S 0
Router A (ISDN) E 0 1.50
1.4 1.3 1.1 1.2
Router B (Zoom)
E 0 5.50 5.4 5.3 5.1 5.2
NOTE : Passwords of both should be same.
Slide 24: Configuration of Router A -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.1.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.1 255.255.0.0 (Config-if)# clock rate 56000(for DCE) (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 192.168.5.0 255.255.255.0 172.16.1.2 (Config)# int S 0 (Config-if)# encapsulation ppp (Config-if)# ppp authentication PAP (Config-if)# ppp PAP sent-username zoom password cisco
Slide 25: Configuration of Router B -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.5.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.2 255.255.0.0 (Config-if)# clock rate 56000(for DCE) (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 192.168.1.0 255.255.255.0 172.16.1.1 (Config)# int S 0 (Config-if)# encapsulation ppp (Config-if)# ppp authentication PAP (Config-if)# ppp PAP sent-username ISP password cisco
Slide 26: PPP(Point-to-Point) using CHAP protocol
Internet based leased line
S 0 172.16.1.1 172.16.1.2 S 0
Router A (ISDN) E 0 1.50
1.4 1.3 1.1 1.2
Router B (Zoom)
E 0 5.50 5.4 5.3 5.1 5.2
NOTE : Passwords of both should be same.
Slide 27: Configuration of Router A -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.1.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.1 255.255.0.0 (Config-if)# clock rate 56000(for DCE) (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 192.168.5.0 255.255.255.0 172.16.1.2 (Config)# int S 0 (Config-if)# encapsulation ppp (Config-if)# ppp authentication CHAP (Config-if)# ppp CHAP hostname zoom (Config-if)# ppp CHAP password cisco
Slide 28: Configuration of Router B -------------------------------# Config t (Config)# int E 0 (Config-if)# ip address 192.168.5.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int S 0 (Config-if)# ip address 172.16.1.2 255.255.0.0 (Config-if)# clock rate 56000(for DCE) (Config-if)# bandwidth 64 (Config-if)# no shut (Config-if)# exit (Config)# ip routing (Config-Router)# ip route 192.168.1.0 255.255.255.0 172.16.1.1 (Config)# int S 0 (Config-if)# encapsulation ppp (Config-if)# ppp authentication CHAP (Config-if)# ppp CHAP hostname ISP (Config-if)# ppp CHAP password cisco
Slide 29: DDR(Dial on Demand Routing)
ISP
S 0 172.16.1.1
172.16.1.2 S 0
Router A
E 0 1.50 1.4 1.3 1.1 1.2
Router B
E 0 5.50 5.4 5.3 5.1 5.2
Slide 30: # Config t (Config)# isdn switch-type basic-net 3 (Config)# int E 0/1 (Config-if)# ip address 192.168.1.50 255.255.255.0 (Config-if)# no shut (Config-if)# exit (Config)# int Bri 1/0 (Config-if)# no ip address (Config-if)# encapsulation ppp (Config-if)# no cdp enable (Config-if)# no shut (Config-if)# exit (Config)# int dialer 1 (Config-if)# ip address negotiated (Config-if)# encapsulation ppp (Config-if)# no cdp enable (Config-if)# ppp authentication CHAP PAP callin (Config-if)# ppp CHAP hostname unicomin@hd2 (Config-if)# ppp CHAP password password
