Welcome to EveDumps This is a free, Complete course for the CCNA 200-301. Let's get started In this lab we'll finally get hands on in the Cisco IOS CLI the command line interface. If you've already readed the Day, 4 lecture article, You should be able to complete these tasks on your own. Even if you can, I recommend, Reading this article after to check and get any additional explanations.
So we've got a small network here with a few PCs and switch and a router. Our tasks involve some basic configurations on the router and switch For this article. I will only configure the router.However, I recommend that you go through the steps on both devices. Repetition is essential to get used to all of the commands. You need to know so remember. To configure both devices.
Step 1 is to set the appropriate hostnames for each device R1 and SW1. We didn't cover the command in the main article, But to do so, You use the ‘hostname' command in global configuration mode Click on the device and then select CLI to access the command line. Interface from which we will configure each device. Now, In the lecture article I explained about how to connect to the console port of a device In packet tracer, You can actually do that connect a PC to the console port of the device and then use the PC to do the configurations, However, Simply clicking on The device itself is much more convenient, So that's what we'll be doing for these labs. Just keep in mind that in real life you can't configure the device directly on the device itself. You have to connect to it with a computer.
The current hostname for each device is displayed here, As you can see. By default, The hostname is router To change the hostname. We must enter 'Global configuration' mode.
However, To get there, We must first enter 'Privileged exec' mode. This is achieved by using the 'enable' command To demonstrate a shortcut. I will use the 'exit' command to return to the previous exec mode Notice that you can enter privileged exec mode by simply typing 'en'. You can also type 'en' and then use tab to auto-complete it to 'enable', But this isn't necessary.
'En' alone is fine. 'E', However, Is too short, And we are told this is an ambiguous command. This is because there are other potential commands that begin with 'e', Which we can see by tying 'e' and then a question mark.
As you can see, There are two potential commands; enable and exit. So if you just enter 'e', The router doesn't know which command you mean. However, 'enable' is the only command beginning with 'en'. So 'en' is all the router needs to know which command you mean.
Now that we are in privileged exec mode. We can use the 'configure terminal' command to get to 'global configuration' mode. If you want to use shortcuts again, As we did with enable and 'en' the shortest version of the 'configure terminal' command is 'conf t' From here we can set the hostname of the router. This is done with the hostname command. I will enter 'hostname R1'.
As you can see, The hostname has changed from 'router' to 'R1' Change. The hostname of SW1 as well, And that's all for step 1. Step 2 is to set the unencrypted enable password on each router to CCNA. The 'enable password' is used to enter privileged exec mode, Which is also called enable mode. Previously we had no password set, So we were able to enter privileged exec mode without any password.
Now we are going to protect privileged exec mode so that only administrators can access it. The command is simple and it is done in 'global configuration' mode, Which we are already in Type 'enable, Password CCNA'. That's it Now, Let's test it out, Which is step 3 From here, I will use the exit command twice once to bring me back to privileged exec mode and then once again to bring me back to user exec mode. Now I will use the enable command again. However, This time I am asked for a password, The characters do not appear as I type. However, If I type the password 'CCNA' correctly and press enter, I am brought to privileged exec mode.
Now, Let's see what happens if I fail to enter the correct password, I enter the wrong password once twice and then three times before being rejected for having 'bad secrets'. Now I will try again with the correct password and I'm in Step. 3 is now complete Step. 4 is simply to view the password in the running configuration The running configuration is the current active configuration of the router, Whether or not you have actually saved it. If you turn off the router, Without saving the running configuration, You will lose any changes.
If you want to keep your changes, You have to save them to the startup configuration To view the running configuration use, The show running-config command from privileged exec mode, Which we are already in. You can abbreviate it too, For example, Sh run Enter the command and you can see the password right here with the exact command we used before 'enable password CCNA'. As you can see, It is not encrypted. It is written in clear text right Let's solve that in step 5, So step 4 is now complete. Step 5 is to enable password encryption on the devices We can protect passwords by encrypting them to render them unreadable.
This is done from global configuration mode with the command 'service password-encryption' Conf t service, Password-encryption. That's all for step 5 Step 6 is to once again view the running config. I will use the same command as before and now lets check the password. However, The command doesn't work. That is because we are currently in global configuration mode and show running-config must be entered from privileged exec mode. Now I could type exit to drop back to privileged exec mode and then enter the command, But there is one more way which I demonstrated in the lecture article.
If I type 'do' in front of the command, I can enter it from global configuration mode. 'Do show running-config' There we go. Let's look at the password, You can see here, 'enable password', Followed by a 7 and then a string of other numbers.
The password has successfully been encrypted, Although we didn't type this 7. When we entered the command, It refers to the type of encryption used. There are other types as well: The string of numbers that follow are the password 'CCNA' encrypted to be unreadable so that anyone looking over our shoulder, Can't read the password, Keep in mind that the encryption used in the 'service password-encryption' isn't very secure and can be cracked.
But this at least renders the password safe from someone simply glancing over your shoulder Step. 6 is now complete. Step 7 is to configure a more secure encrypted, Enable password of ‘Cisco' That can be done with the ‘enable secret' command. The enable secret uses MD5 encryption, Which is more secure than what you get with the service password-encryption command, Since we're already in global configuration mode, Let's enter the command, Enable secret Cisco.
Now let's go on to Step 8, Which is to exit back to user EXEC mode and try to login Exit Exit. Now let's try to get back to privileged EXEC mode, Enable Let's try our original password of ‘CCNA'…it doesn't work anymore. How about our newly configured enable secret Cisco that works As you can see, If both an enable secret and enable password are configured only the enable secret can be used. The enable password becomes invalid Step 9 is to once again view the passwords in the running.
Configuration Show running-config There t are Once again the enable password with service password-encryption enabled uses type 7 encryption indicated by this 7. Here. The enable secret uses type 5 encryption, Which is MD5 encryption Step 10, Is to save the running configuration to the startup configuration. There are three ways to do. This One is writeanother is write memoryand.
The third is copy. Running-Config startup-config Let's check if its saved Show startup-config There's the config, And you can see the passwords we configured here. If I scroll through, You can see lots of other default settings for the device here, Step 10 is now complete.
That's all for this article. If you want to show your support, Please subscribe to the channel like the article, Leave a comment and share the article with anyone else studying for the CCNA.
If you wish to have all the perks of being certified with the exam, you should checkout the Cisco CCNP 350-501 Dumps offered in the EveDumps’s Bootcamp Program.
