yulia_zoNe

Lab 9.2.7 Troubleshooting Using Network Utilities
Objectives

• Use network utilities and the integrated router GUI to determine device configurations.
• Select the appropriate network utilities to help troubleshoot connectivity problems.
• Diagnose accessibility problems with Web, FTP, Telnet, and DNS servers.
• Identify and correct physical problems related to cable types and connections.

Background / Preparation
In this lab, you use the browser and various troubleshooting utilities, such as ipconfig, ping, tracert, netstat, and nslookup to diagnose and correct connectivity problems. These command line interface (CLI) utilities are available on most current operating systems, although the exact command and syntax may vary. Windows XP commands and syntax are used in this lab.
Your instructor will set up the network topology similar to the one shown here and will preconfigure the client computer, integrated router, server, and external router for each scenario in the lab. Various software and hardware connectivity problems will be introduced, and you will diagnose the cause from the client computer.
There are six scenarios. Work in teams of three, with each person taking the lead in two of the scenarios, and the other team members assisting.
The following resources are required:

• Computer running Windows XP Professional with Web, FTP, and Telnet clients (CLI or GUI).
• Server running a combination of DNS, HTTP, FTP, and Telnet services (preconfigured). This server will simulate Internet connections and can be a server with these services actually installed and running or a server running the Discovery Live CD.
• Integrated router configured as a DHCP server and client (default configuration).
• Router with two Ethernet interfaces configured as a DHCP server to integrated router (preconfigured).
• Ethernet Cat-5 (minimum) straight and crossover cabling to connect hosts and network devices.

Step 1: Build the network and configure the hosts

1. Have your instructor set up a network topology similar to the one shown with the Host-A client computer, integrated router, server, and router preconfigured.
2. Work from Host-A to issue commands to troubleshoot problems introduced by the instructor.
3. All commands are issued from a command prompt window. Open a command prompt window by clicking Start > All Programs > Accessories > Command Prompt. Keep the window open for the duration of the lab.

Step 2: Record the baseline IP address information for computers and integrated router
NOTE: Perform this step before the instructor introduces problems.

1. Host-A configuration—Issue the command that displays the IP address information for Host-A, including the DNS server, and record the information below. Which command did you use?

IP address: 192.168.10.2
Subnet mask: 255.255.255.0
Default gateway IP address: 192.168.10.1
DNS server IP address:
DHCP server IP address:
How did Host-A obtain its IP address?

1. Integrated router configuration—From Host-A, open a browser and go to the integrated router GUI by entering 192.168.1.1 as the URL address. Log in to the integrated router using the default user ID and password (check with your instructor if necessary). Check the internal and external IP address information and record it below.

Internal IP address: 192.168.10.3
Subnet mask: 255.255.255.0
Is the DHCP server enabled?
Ya, DHCP servernya enabled.
External (Internet) IP address: 10.1.1.5
Subnet mask: 255.255.255.0
Default gateway IP address: 10.1.1.1
DNS server IP address:
Server configuration—Obtain the Server IP configuration from your instructor and record the information below.
IP address: 192.168.4.2
Subnet mask: 255.255.255.0
Default gateway IP address: 192.168.4.1
Web Server 1 protocol and name:
Web Server 2 protocol and name:
FTP Server 1 protocol and name:
FTP Server 2 protocol and name:
Step 3: Scenario 1—Diagnose Web server access

1. After your instructor sets up the problem for this scenario, use various utilities to diagnose the problem.
2. Open your browser and enter the name of the Web Server 1 from Step 2. What happened?
3. Which commands did you use to diagnose the problem?
4. Report the problem or suspected problem to the instructor. What was the problem?
5. What did you do to correct the problem, if anything?
6. You may need to contact the instructor to correct the problem. When the problem is corrected, retest and verify access to the server.

Step 4: Scenario 2—Diagnose Web server access

1. After your instructor sets up the problem for this scenario, use various utilities to diagnose the problem.
2. Open your browser and enter the name of the Web Server 2 from Step 2. What happened?
3. Which commands did you use to diagnose the problem?
4. Report the problem or suspected problem to the instructor. What was the problem?
5. What did you do to correct the problem, if anything?
6. You may need to contact the instructor to correct the problem. When the problem is corrected, retest and verify access to the server.

Step 5: Scenario 3—Diagnose FTP server access

1. After your instructor sets up the problem for scenario, use various utilities to diagnose the problem.
2. Use your FTP client (CLI or GUI) to connect to FTP Server 1 from Step 2. What happened?
3. Which commands did you use to diagnose the problem?

1. Report the problem or suspected problem to the instructor. What was the problem?
2. What did you do to correct the problem, if anything?

1. You may need to contact the instructor to correct the problem. When the problem is corrected, retest and verify access to the server.

Step 6: Scenario 4—Diagnose FTP server access

1. After your instructor sets up the problem for this scenario, use various utilities to diagnose the problem.
2. Use your FTP client (CLI or GUI) to connect to FTP Server 2 from Step 2. What happened?
3. Which commands did you use to diagnose the problem?
4. Report the problem or suspected problem to the instructor. What was the problem?
5. What did you do to correct the problem, if anything?
6. You may need to contact the instructor to correct the problem. When the problem is corrected, retest and verify access to the server.

Step 7: Scenario 5—Diagnose Telnet server access problem

1. After your instructor sets up the problem for this scenario, use various utilities to diagnose the problem.
2. Use a Telnet client (CLI or GUI) to connect to the name of Server 1 identified in Step 2. What happened? Which commands did you use to diagnose the problem?
3. Report the problem or suspected problem to the instructor. What was the problem?
4. What did you do to correct the problem, if anything?
5. You may need to contact the instructor to correct the problem. When the problem is corrected, retest and verify access to the server.

Step 8: Scenario 6—Analyze TCP connections to Host-A

1. Ask your instructor to verify that all problems introduced with the lab setup have been corrected. Using the appropriate clients, connect to the Web, FTP, and Telnet servers simultaneously from Host-A.
2. From the command line, issue a command to display the current active TCP connections to Host-A with names of the servers and protocols. Which command did you use?
3. Which named connections did you see?
4. From the command line, issue a command to display the current active TCP connections to Host-A with IP addresses and protocol port numbers. Which command did you use?
5. Which IP addresses and port numbers did you see?
6. From the command line, issue a command to display the current active TCP connections to Host-A, along with the program that created the connection. Which command did you use?
7. Which program executable (filename with an .exe extension) is listed for each of the connections?

Step 9: Reflection

1. When troubleshooting the problem scenarios during this lab, which troubleshooting technique did you use primarily (top-down, bottom-up, or divide and conquer)?

Jawab:
Divide and conquer

1. Which utility or command do you feel was the most useful for network troubleshooting?

Jawab:
Divide and conquer
Lab 9.3.3 Troubleshooting Physical Connectivity
Objectives

• Examine device LEDs to determine proper Ethernet connectivity.
• Select the correct Ethernet cable for use between various types of devices.
• Visually inspect cables for potential problems.
• Use a cable tester to help identify cabling problems.

Background / Preparation
Physical cabling is one of the most common sources of network problems. This lab focuses on connectivity issues related to network cabling. You will visually inspect cabling and LED link lights to evaluate physical connections and to determine if the correct type of cable is being used based on the devices they interconnect. You will also use a cable tester to identify problems with cables.
The instructor will set up the network topology similar to the one shown and will preconfigure the hosts and network devices. The instructor will introduce various connectivity problems, and you will diagnose the cause of these problems by inspecting link lights and testing cables between devices. Various cable types, both good and bad, will be used to interconnect devices for each scenario in the lab.
Work in teams of two, with each person taking the lead in half of the problem scenarios.
The following resources are required:

• Computer running Windows XP Professional (preconfigured)
• Server (preconfigured)
• Integrated router configured as a DHCP server and client (default configuration)
• Router with two Ethernet interfaces configured as the DHCP server to integrated router (preconfigured)
• Mix of Ethernet Cat-5 (minimum) straight-through and crossover cabling, both good and bad, to connect hosts and network devices
• Basic Cat-5 Ethernet cable tester (RJ-45 pin-to-pin continuity checker)
• Advanced cable tester (optional), such as Fluke 620 (or similar)

Step 1: Build the network and configure the hosts

1. Ask your instructor to set up a network topology similar to the one shown with a preconfigured Host-A client computer, integrated router, server, and router. Initially, correct and properly functioning cabling is used so that end-to-end connectivity can be verified. The instructor then introduces cabling problems in each scenario.
2. Problems can consist of using the wrong type of` cable between two devices (straight-through or crossover) or using a defective cable (miswired or improperly terminated). Observe device interface link lights, visually inspect cables, and use a cable tester to determine the problems.
3. Complete steps 2 and 3 of this lab before the instructor introduces problems.

Step 2: Record the correct cable types used between devices

1. Refer to the topology diagram and record the cable type that should be used (straight-through or crossover) based on the devices being connected. Have your instructor verify this information before proceeding.
2. Which type of cable should be used from Host-A to the integrated router?
3. Which type of cable should be used from the integrated router (router portion) to Hub/Switch?
4. Which type of cable should be used from Hub/Switch to Router?
5. Which type of cable should be used from Router to Server?

Step 3: Record the IP address information for the computers

1. Use the ipconfig command, or get the IP address of Host-A from your instructor, and record it here.

Host-A IP address:

1. Get the server IP address from your instructor and record it here.

Server IP address:

1. Before starting on problem scenarios, verify end-to-end connectivity by pinging from Host-A to Server. If you do not get a reply from the server, check with your instructor. There may be a problem with the initial hardware or software setup.

Step 4: Scenario 1

1. After your instructor sets up the problem, use visual inspection and a cable tester to isolate the problem.
2. Ping from Host-A to Server. What happened?
3. Check the LED link lights on the various device interfaces. Write down any that are not lit.
4. Disconnect and inspect the cable connecting the network interfaces that were not lit. Describe the problem and how you were able to identify it.
5. What did you do to correct the problem?
6. When the problem is corrected, retest and verify end-to-end connectivity by pinging from Host-A to Server. Was the ping successful?

Step 5: Scenario 2

1. After your instructor sets up the problem, use visual inspection and a cable tester to isolate the problem.
2. Ping from Host-A to Server. What happened?
3. Check the LED link lights on the various device interfaces. Write down any that are not lit.
4. Disconnect and inspect the cable connecting the network interfaces that were not lit. Describe the problem and how you were able to identify it.
5. What did you do to correct the problem?
6. When the problem is corrected, retest and verify end-to-end connectivity by pinging from Host-A to Server. Was the ping successful?

Step 6: Scenario 3

1. After your instructor sets up the problem, use visual inspection and a cable tester to isolate the problem.
2. Ping from Host-A to Server. What happened?
3. Check the LED link lights on the various device interfaces. Write down any that are not lit.
4. Disconnect and inspect the cable connecting the network interfaces that were not lit. Describe the problem and how you were able to identify it.
5. What did you do to correct the problem?
6. When the problem is corrected, retest and verify end-to-end connectivity by pinging from Host-A to Server. Was the ping successful?

Step 7: Scenario 4

1. After your instructor sets up the problem, use visual inspection and a cable tester to isolate the problem.
2. Ping from Host-A to Server. What happened?
3. Check the LED link lights on the various device interfaces. Write down any that are not lit.
4. Disconnect and inspect the cable connecting the network interfaces that were not lit. Describe the problem and how you were able to identify it.
5. What did you do to correct the problem?
6. When the problem is corrected, retest and verify end-to-end connectivity by pinging from Host-A to Server. Was the ping successful?

Step 8: Reflection

1. What are some general rules to help you determine which type of Ethernet cable (straight-through or crossover) to use to connect different types of network hosts and devices?
2. Which types of problems can a cable tester detect that might not be determined by visual inspection?

Lab 6.1.2 Creating a Network Diagram From Routing Tables
Step 1:Examine the routing table entries for the router R1
a. Examine show ip route output from router R1 shown below
b. How many networks does router R1 know about?
Jawab:
Lima networks
c. How many networks are directly connected to this router?
Jawab:
Tiga networks
d. How many networks have been learned from another router?
Jawab:
Dua network
e. Using the codes at the beginning of the show ip route output what does the ‘R’ mean?
Jawab:
R  adalah router
f. In the routers learned via RIP to which device does the ip address 172.17.0.2 belong?
Jawab:
Ya, ada
g. In the routers learned via RIP to which device is serial 0/0 referring and what does it mean?
Jawab:
0/0 adalah interfacenya yaitu menampilkan informasi khusus hardware interface. Perintah ini harus di-set termasuk nomor port/slot dari interface serial.
Step 2: Examine the routing table entries for the router R2
a. Examine show ip route output from router R2 shown below
b. How many networks does router R2 know about?
Jawab:
Lima networks
c. How many networks are directly connected to this router?
Jawab:
Tiga networks
d. How many networks have been learned from another router?
Jawab:
Dua networks
e. Using the codes at the beginning of the show ip route output what does the ‘R’ mean?
Jawab:
R adalah router 2
f. In the routers learned via RIP to which device does the ip address 172.17.0.2 belong?
Jawab:
Ya ada
g. In the routers learned via RIP to which device is serial 0/0 referring and what does it mean?
Jawab:
Serial 0/0 adalah interface –nya yaitu menampilkan informasi khusus hardware interface. Perintah ini harus di-set termasuk nomor port/slot dari interface serial.
Step 3: document router interfaces and IP addresses
a. Based on the shown ip router output from R1 and R2

Device	interface	IP Address	Subnet mask (dotted decimal and/xx)
R1	0/0	172.17.0.0	255.255.0.0/16
R1	0/0	192.168.1.0	255.255.255.0/24
R1	0/1	192.168.2.0	255.255.255.0/24
R2	0/0	172.17.0.0	255.255.0.0/16
R2	0/0	192.168.3.0	255.255.255.0/24
R2		192.168.4.0	255.255.255.0

b. In this example can the exact IP address of all router interface be determined by looking at the routing tables?
Jawab: Ya bisa
c. Which router interface IP address can be determined from the routing tables?
Jawab:
Interface 0/0 dan 0/1
Step 4: create a network topology diagram
Step 5: reflection
a. What do you think would happen to the entries in the routing table on R1 if one of the enthernet networks on R2 was disconnected?
Jawab:
Maka pemrosesan sinyal untuk data jaringan computer akan terputus atau tidak akan terjadi.
b. What do you think would happen to the entries in the routing tables on R1 and R2 if the serial interface on R2 was shut down?
Jawab:
Tidak akan terjadi routing.
Lab 6.1.5 Configure and Verify RIP
Step 1: Build the network and configure the routers
Step 2: Check the routing table entries
a. View the IP routing table for R1 using the show ip route command:
b. What is the significance of the “C” to the left of the 172.16.0.0 and 172.17.0.0 network entries in the routing table?
Jawab:
Pada IP 172.16.0.0 menggunakan interface type DCE sedangkan pada IP 172.17.0.0 menggunakan interface type DTE.
Step 3: Configure the routing protocol of the routers
Step 4: Configure the hosts with the proper IP address, subnet mask, and default gateway
a. Configure the host attached to R1 with an IP address, subnet mask and default gateway that is compatible with the IP address of the Fast Ethernet interface (172.16.0.0).
b. Configure the host attached to R2 with an IP address, subnet mask and default gateway that is compatible with the IP address of the Fast Ethernet interface (172.18.0.0).
c. Verify that the internetwork is functioning by pinging the Fast Ethernet interface of the other router.
d. From the host attached to R1, is it possible to ping the R2 router Fast Ethernet interface? Ya mungkin  karena sudah menggunakan gateway yang akan menghubungkan dua buah jaringan yang berbeda.
e. From the host attached to R2, is it possible to ping the R1 router Fast Ethernet interface? Ya mungkin  karena sudah menggunakan gateway yang akan menghubungkan dua buah jaringan yang berbeda.
f. If the answer is no for either question, troubleshoot the router configurations to find the error. Then do the pings again until the answer to both questions is yes. Be sure to check physical cabling for problems and bad connections and make sure that you are using the correct cable types.
Step 5: Show the routing tables for each router
a. In enable or privileged EXEC mode, examine the routing table entries using the show ip route command on router R1.
b. What are the entries in the R1 routing table? R1 terkoneksi pada jaringan 172.17.0.0/16 dan 172.16.0.0/16
c. What is the significance of the “R” to the left of the 172.18.0.0 network entry in the routing table? 172.18.0.0 terhubung ke jaringan melalui 172.17.0.2
d. What does “via 172.17.0.2” mean for this network route? Router mempelajari melalui RIP dengan device 172.17.0.2
e. What does “Serial0/0” mean for this network route? Serial interfacenya atau port/slot
f. Examine the routing table entries using the show ip route command on router R1.
g. What are the entries in the R2 routing table? 172.16.0.0/16
Step 6: Use debug to observe RIP communications
a. On router R1, enter the debug ip rip command from privileged EXEC mode. Examine the exchange of routes between the two routers. The output should look similar to that shown here.
b. Enter the command undebug all to stop all debugging activity
c. What interface does router R1 send and receive updates through? R1 mengirim ke alamat 224.0.0.9 dan R1 menerima dari 172.17.0.2
d. Why does the route to 172.17.0.0 have metric of 1 and the route to 172.18.0.0 have a metric of 2? Karena pada ruter ke 172.17.0.0 memiliki satu lompatan atau terkoneksi langsung sehingga disebut 1 metric sedangkan 172.18.0.0 memiliki dua lompatan karena tidak terkoneksi secara langsung melainkan melalui router lain.
e. Log off by typing exit and turn off the router.

Step 7: Reflection
a. What do you think would happen to the routing table on router R1 if the Ethernet network on router R2 went down? Koneksi antara R1 dan R2 akan terputus
b. What do you think would happen if router R1 was configured to run RIPv1, and R2 was configured to run RIPv2? Maka router dapat berkomunikasi dengan router lain sehingga dapat menetukan jalan yng terbaik dalam pengiriman paket data  tanpa memperhatikan subnet, konfigurasi ini di butuh kan untuk proses routing untuk menentukan interface mana yang akan mengirim data atau menerima.

Lab 6.2.5 Configuring BGP with Default Routing

Step 1: Configure basic information on each router
Step 2: Configure the default and static routes
Step 3: Configure BGP on both ISP routers
Step 4: View the Routing Tables
a. ISP2#show ip route
1)        Is network 192.168.1.0 in the routing table of ISP2? Ya ada
2)        What letter is at the left of the entry for 192.168.1.0? ‘B’
3)        What does the letter mean?
4)        Is network 192.168.100.0 in the routing table? Ya ada
5)        Which router advertised network 192.168.1.0? 172.16.1.1
b. ISP1#show ip route
1)        What network(s) did ISP1 learn from ISP2? 172.16.1.2
2)        How did ISP1 learn about network 192.168.1.0? melalui 10.10.10.1
3)        Will ISP1 advertise any networks to the customer router? Ya akan
c. CR#show ip route
1)        Why are networks 192.168.100.0 and 192.168.200.0 not in CRs routing table? Karena semua lalu lintas dari jaringan 192.168.100.0 dan 192.168.200.0 akan menggunakan ISP1 sehingga kedua jaingan ini tidak terdapat di routing table ISP2
Step 5: Verify connectivity
Step 6: View BGP information on the ISP routers
Step 7: Reflection
Why doesn’t ISP1 advertise any networks to the customer router? Karena setiap jaringan sudah di atur menggunakan ISP yang mana, jadi tidak semua jaringan ynag ada di ISP1 di izinkan untuk menggunakan pelayanan router lainnya.

Lab 5.1.2 Powering Up an Integrated Services Router
Objectives

• Set up a new Cisco 1841 Integrated Services Router ( ISR ).
• Connect a computer to the router console interface.
• Configure Hyper Terminal so that the computer can communicate with the router

Background / Preparation
This lab focuses on the initial setup of the Cisco 1841 ISR. If a Cisco 1841 ISR is not available, you can use another router  model. The information in this lab applies to other routers. A Cisco ISR combines routing and switching functions, security, voice, and LAN and WAN connectivity into a single device, which makes it appropriate for small-sized to medium-sized businesses and for ISP-managed customers.
Some steps in this lab are normally only performed once during initial setup. These steps are indicated as optional.
The following resources are required :

• Cisco 1841 ISR other comparable router.
• Power Cable
• Windows PC with terminal emulation program
• RJ45-to-DB9 connector console cable.

Step 1 : position router and connect ground wire (Optional)
Note : this Step is optional and is required only if the router is being set up for the first time. Read through it to become familiar with the process.
a. Position the router chassis to allow unrestricted air  flow for chassis cooling. Keep at least 1inch  ( 2.5 4 c m ) of clear space beside the cooling inlet and exhaust vents. CAUTION: Do not place any items that weigh more than 10 pounds ( 4.5  kilograms )  on top of the chassis, and do not stack routers on top of each other.
b . Connect the chassis to a reliable earth ground using a ring terminal and size 14AWG (2 mm ) wire using these step :
NOTE: Your instructor should inform you where a reliable earth ground is
1)   Strip one end of the ground wire to expose approximately 3/4 inch ( 20mm ) of conductor.
2)   Crimp the 14AWG (2 mm ) green ground wire to a UL Listed / CS A certified ring terminal using a crimping tool that is recommended by the ring terminal manufacturer. The ring terminal provided on the back panel of the Cisco 1841 ISR router is suitable for a Number 6 grounding screw.
3)   Attach the ring terminal to the chassis as shown in the figure below. Use a Number 2 Phillips screw driver and the screw that is supplied with the ring terminal and tighten the screw
4)   Connect the other end of the ground wire to a suitable earth ground that the instructor indicates.
Step 2 : Install the Compact Flash memory card ( Optional)
NOTE: This step is optional and is required only if the router is being set up for the first time. To avoid wear on the memory card and ejector mechanism, do not actually perform this step. Read through it to become familiar with the process. Attach a grounding strap to your wrist to avoid electro shock damage to the card. Seat the external Compact Flash memory card properly into the slot. This step depends on the type of router. Not all routers have flash cards.
a . If  the router has a Compact Flash memory card, check that the ejector mechanism is fully seated. The
ejector button is next to the Compact Flash memory card. Connect the power cable to the ISR and to the power outlet.
Step 4: Power up the ISR
a . Move the power switch on the back of the ISR to the ON position. During this step, the LEDs on the chassis turn on and off, not necessarily at the same time. The LED  activity depends on what is installed in  the ISR .
b .  Observe the startup messages as they appear in the terminal emulation  program window. While these messages are appearing, do not press any keys  on the keyboard. Pressing a key interrupts the router start up process. Some examples of start up messages displayed are the amount of main memory installed and the image type of the Cisco IOS software that the computer is using. Can you find these example start up  messages in the following figure?
Step 5 : Reflection
a .  Is  there anything about this procedure that is risky?
b .  Why do the router cover, all modules, and cover plates need to be installed?
c .  How many routers can you safely stack on top of each other ?
1)      0
2)      1
3)      2
4)      3
Lab 5.2.3 Configuring an ISR with SDM Express
Objectives
•  Configure basic router global settings – router name, users, and login passwords – using Cisco SDM Express.
•  Configure LAN and Internet connections on a Cisco ISR using Cisco SDM Express. Background / Preparation Cisco Router and Security Device Manager (SDM) is a Java-based web application and a device-management tool for Cisco IOS Software-based routers. The Cisco SDM simplifies router and security configuration through the use of smart wizards, which allows you to deploy, configure, and monitor a Cisco router without requiring knowledge of the command-line interface (CLI). The Cisco SDM is supported on a wide range of Cisco routers and Cisco IOS Software releases. Many newer Cisco routers come with SDM preinstalled. If you are using an 1841 router, SDM (and SDM Express) is pre-installed.  This lab assumes the use of a Cisco 1841 router. You can use another router model as long as it is capable of supporting SDM. If you are using a supported router that does not have SDM installed, you can download the latest version free of charge from the following location: http://www.cisco.com/pcgi-bin/tablebuild.pl/sdm From the URL shown above, view or download the document “Downloading and Installing Cisco Router and Security Device Manager.” This document provides instructions for installing SDM on your router. It lists specific model numbers and IOS versions that can support SDM, and the amount of memory required. Cisco SDM Express is a component of SDM. SDM Express automatically runs a GUI wizard that allows you to perform an initial basic configuration of a Cisco router using a browser and the web interface of the router. SDM Express will only be activated when the router is in its factory-default state. In this lab, you will use Cisco SDM Express to configure LAN and Internet connections on a Cisco ISR. The following resources are required:
•  Cisco 1841 ISR router with SDM version 2.4 installed (critical – see Note 2 in Step 1)
•  Cisco 1841 ISR router configured with factory default settings and with a serial port add-in module (critical – see Notes 1 and 3 in Step 1)
•  (Optional) Other Cisco router model with SDM installed
•  Windows XP computer with Internet Explorer 5.5 or higher and SUN Java Runtime Environment (JRE) version 1.4.2_05 or later (or Java Virtual Machine (JVM) 5.0.0.3810). (See Note 3 in Step 1)
•  Straight-through or crossover category 5 Ethernet cable
•  Access to PC network TCP/IP configuration
Step 1: Configure the PC to connect to the router and then launch Cisco SDM
a.  Power up the router.
b.  Power up the PC.
c.  Disable any popup blocker programs. Popup blockers prevent SDM Express windows from
displaying.
d.  Connect the PC NIC to the FastEthernet 0/0 port on the Cisco 1841 ISR router with the Ethernet cable.
NOTE: An SDM router other than the 1841 may require connection to different port in order to access SDM.
e.  Configure the IP address of the PC to be 10.10.10.2 with a subnet mask of 255.255.255.248.
f.  SDM does not load automatically on the router. You must open the web browser to reach the SDM.
Open the web browser on the PC and connect to the following URL: http://10.10.10.1  NOTE 1 – If browser connection to router fails: If you cannot connect and see the login screen, check your cabling and connections and make sure the IP configuration of the PC is correct. The router may have been previously configured to an address of 192.168.1.1 on the Fa0/0 interface. Try setting the IP address of the PC to 192.168.1.2 with a subnet mask of 255.255.255.0 and connect to http://192.168.1.1 using the browser. If you have difficulty with this procedure, contact your instructor for assistance. If the startup-config is erased in an SDM router, SDM will no longer come up by default when the router is restarted. It will be necessary to build a basic router configuration using IOS commands.
Refer to the procedure at the end of this lab or contact your instructor. g. In the Connect to dialog box, enter cisco for the username and cisco for the password. Click OK. The main SDM web application will start and you will be prompted to use HTTPS. Click Cancel. In the Security Warning window, click Yes to trust the Cisco application. h.  In the Welcome to the Cisco SDM Express Wizard window, read the message and then click Next.
i. Verify that you are using the latest version of SDM. The initial SDM screen that displays immediately after the login shows the current version number. It is also displayed on the main SDM screen shown below, along with IOS version. NOTE 3 – If SDM Express Wizard fails to start: If you connect to the router and SDM Express starts but the SDM Express Setup Wizard shown above does not start automatically, the router may be partially configured and needs to be reset to its factory defaults. If the SDM Express main screen is displayed, choose the Reset to Factory Defaults option, repeat Steps 1a through 1e, and log in again. If the full SDM application starts (not SMD Express), choose the Reset to Factory Defaults option from the File menu on the main SDM screen, repeat Steps 1a through 1e, and log in again. If you have difficulty with this procedure, contact your instructor for assistance. Also note that the Windows XP computer you are using must have Internet Explorer 5.5 or higher and SUN Java Runtime Environment (JRE) version 1.4.2_05 or later (or Java Virtual Machine (JVM) 5.0.0.3810). If it does not, SDM will not start. You will need to download and install JRE on the PC before continuing with the lab.
NOTE 2: If the current version is not 2.4 or higher, notify your instructor before continuing with this lab. You will need to download the latest zip file from the URL listed above and save it to the PC. From the Tools menu of the SDM GUI, use the Update SDM option to specify the location of the zip file and start the update.
Step 2: Perform initial basic configuration
a.  In the Basic Configuration window, enter the following information. When you complete the basic configuration, click Next to continue. b.  From the Router Provisioning window, click the radio button next to SDM Express and then click
Next.
•  In the Host Name field, enter CustomerRouter.
•  In the Domain Name field, enter the domain name customer.com.
•  Enter the username admin and the password cisco123 for SDM Express users and Telnet users. This password gives access to SDM locally, through the console connection, or remotely using Telnet.
• Enter the enable secret password of cisco123. This entry creates an encrypted password that prevents casual users from entering privileged mode and modifying the configuration of the router using the CLI.
Step 3: Configure the LAN IP address
In the LAN Interface Configuration window, choose FastEthernet0/0 from the Interface list. For interface FastEthernet 0/0, enter the IP address of 192.168.1.1 and subnet mask of 255.255.255.0. You can also enter the subnet mask information in a different format: entering a count of the number of binary digits or bits in the subnet mask, such as 255.255.255.0 or 24 subnet bits.
Step 4: De-select DHCP server
At this point, do not enable the DHCP server. This procedure is covered in a later section of this course. In the DHCP server configuration window, ensure that the Enable DHCP server on the LAN interface check box is cleared before proceeding. Click Next to continue. Step 5: Configure the WAN interface
a.  In the WAN Configuration window, choose Serial0/0/0 interface from the list and click the Add Connection button. The Add Connection window appears.
NOTE: With the 1841 router, the serial interface is designated by 3 digits – C/S/P, where
C=Controller#, S=Slot# and P=Port#. The 1841 has two modular slots. The designation Serial0/0/0 indicates that the serial interface module is on controller 0, in slot 0, and that the interface to be used is the first one (0). The second interface is Serial0/0/1. The serial module is normally installed in slot 0 but may be may be installed in slot 1. If this is the case, the designation for the first serial interface on the module would be Serial0/1/0 and the second would be Serial0/1/1.
b.  From the Add Serial0/0/0 Connection dialog box, choose PPP from the Encapsulation list. From the Address Type list, choose Static IP Address. Enter 209.165.200.225 for the IP address and 255.255.255.224 for the Subnet mask. Click OK to continue. Notice that this subnet mask translates to a /27, or 27 bits for the mask.
c.  Notice that the IP address that you just set for the serial WAN interface now appears in the Interface List. Click Next to continue.
d.  Enter the IP address 209.165.200.226 as the Next Hop IP Address for the Default Route. Click Next to continue.
e.  Ensure that the check box next to Enable NAT is cleared. This procedure is covered in a later section of this course. Click Next to continue.
Step 6: Enable the firewall and security settings
a.  Depending on the router IOS version, the next step may be Firewall Configuration. In the Firewall Configuration window, click the radio button that enables the firewall and then click Next. The Security Configuration window appears.
b.  Leave all the default security options checked in the Security Configuration window and then click Next.
Step 7: Review and complete the configuration
a.  If you are not satisfied with the Cisco SDM Express Summary, click Back to fix any changes and then click Finish to commit the changes to the router. b. Click OK after reading the Reconnection Instructions. Save these instructions to a file for future reference, if desired.
NOTE: Before the next time you connect, you will need to change the IP address of the PC to be compatible with the new address that you configured to FastEthernet 0/0. The Reconnection
instructions are shown below.
c.  When the delivery of the configuration to the router is complete. Click OK to close Cisco SDM Express.
Step 8: Reflection
a.  What feature makes configuring the router easy?
b.  Summarize the steps that are configured by the Cisco SDM Express SDM router basic IOS configuration to bring up SDM  If the startup-config is erased in an SDM router, SDM will no longer come up by default when the router is restarted. It will be necessary to build a basic config as follows. Further details regarding the setup and use of SDM are can be found in the SDM Quick Start Guide:           http://www.cisco.com/en/US/products/sw/secursw/ps5318/products_quick_start09186a0080511c89.html#wp44788
1) Set the router Fa0/0 IP address
(This is the interface that a PC will connect to using a browser to bring up SDM. The PC IP address should be set to 10.10.10.2  255.255.255.248)
NOTE: An SDM router other than the 1841 may require connection to different port in order to access SDM.
Router(config)# interface Fa0/0
Router(config-if)# ip address 10.10.10.1 255.255.255.248
Router(config-if)# no shutdown
2)  Enable the HTTP/HTTPS server of the router, using the following Cisco
IOS commands:
Router(config)#ip http server
Router(config)#ip http secure-server
Router(config)#ip http authentication local
3) Create a user account with privilege level 15 (enable privileges).
Router(config)# username <username> privilege 15 password 0 <password>
Replace <username> and <password> with the username and password that
you want to configure.  4)  Configure SSH and Telnet for local login and privilege level 15:
Router(config)# line vty 0 4
Router(config-line)# privilege level 15
Router(config-line)# login local
Router(config-line)# transport input telnet
Router(config-line)# transport input telnet ssh
Router(config-line)# exit

Lab 4.1.5 Subnetting a Network
Objective
•  Create an IP addressing plan for a small network.
Background / Preparation
In this activity, you will play the role of an onsite installation and support technician from an ISP.  A customer has called the ISP complaining of e-mail problems and occasional poor Internet performance. On an earlier site visit, the technician had created diagram of the customer’s existing network shown here.  The ISP is preparing a design for a network upgrade. The interim topology diagram for the proposed network is shown below. There is still a requirement for an IP addressing plan. One of the ISP network designers has made some notes on a simplified sketch of the proposed network, and has written some requirements. The designer asks you to create an IP address plan for the network upgrade.
Step 1: Analyze the network
a.  Referring to the Rough Design Notes, determine the minimum number of hosts that a subnet needs to support the new network design.
1)  The largest subnet must be able to support 30 hosts.
2)  To support that many hosts, the number of host bits required is?
Jawaban = dari 30 host maka jumlah subnet bit yang dibutuhkan adalah sebanyak 3 buah.
b.  What is the minimum number of subnets required for the new network design?
Jawaban= jumlah minimum subnet yang dibutuhkan membangun sebuah jaringan yaitu sebanyak 5-8 segmen jaringan ( jumlah subnet).
c.  Can this network be subnetted according to the requirements?
Jawaban = ya, jaringan ini bisa dilakukan subnetting.
For example: If four subnets are required and the largest subnet has to support 128 hosts, this is a problem, because a subnet in a class C network that has been partitioned four ways can support only 62 hosts.
d. Fill in the blanks to summarize the subnetting requirements of this new network design:
This network requires 129-256 subnets, each supporting 29 hosts. Therefore, 255.255.255.0/24 host ID bits are reserved for the subnet ID. With those values, this network supports  subnets 8, each subnet having 254 hosts.
Step 2: Calculate the custom subnet mask
Now that the number of subnet ID bits is known, the subnet mask can be calculated. A class C network has a default subnet mask of 24 bits, or 255.255.255.0. What will the custom subnet mask be? The custom subnet mask for this network will be 255.255.255.128 or /25.
Step 3: Specify the host IP addresses
Now that the subnet mask is identified, the network addressing scheme can be created. The addressing scheme includes the subnet number, the subnet broadcast address, and the range of IP addresses assignable to hosts.
a.  Complete the table showing all the possible subnets for the 192.168.1.0 network.

Subnet	Subnet Address	Host IP Address Range	Broadcast Address
8	255.255.255.0/24	192.168.1.11	255.255.255.129-255.255.255.135
8	255.255.255.0/24	192.168.1.12	255.255.255.136-255.255.255.144
8	255.255.255.0/24	192.168.1.13	255.255.255.145-255.255.255.53
8	255.255.255.0/24	192.168.1.14	255.255.255.54-255.255.255.62
8	255.255.255.0/24	192.168.1.15	255.255.255.63-255.255.255.71
8	255.255.255.0/24	192.168.1.16	255.255.255.72-255.255.255.80
8	255.255.255.0/24	192.168.1.17	255.255.255.81-255.255.255.89
8	255.255.255.0/24	192.168.1.18	255.255.255.90-255.255.255.98

b. for it to be completed. Hosts will be assigned IP addresses as follows: (fill in the table below)

Device	Interface	IP Address	Connects to	IP Address
1841	Serial 0/0/0	11.11.11.100	ISP Router	11.11.11.1
	Fa 0/0		Wired hosts	Wired host Range:____.____.____.____To  ____.____.____.____
	Fa 0/1		Linksys Internet
Linksys	Internet		1841 Fa 0/1
	LAN Gateway		Wireless Hosts	Wireless host Range:____.____.____.____To  ____.____.____.____

Step 4: Consider other subnetting options
What if there were more than 30 hosts that needed to be supported on either the wired or wireless portion of the network. You could borrow fewer bits, which would create fewer subnets, but each one would support a greater number of hosts per subnet.
a. How many bits would be borrowed to create four subnets?
Jawab:
adalah 2  buah bit yang akan dipinjam
b. How many bits would be left for hosts on each subnet?
Jawab:
5 sampai 8 bits
c. What is the maximum number of hosts each subnet could support?
Jawab:
30 host – 2broadcast = 28 host
d. What would the subnet mask be in dotted decimal and slash number (/#) format?
Jawab:
255.255.255.224 atau 255.255.255.224 / 27
d. If you start with the same 192.168.1.0 network as before and subnet it into four subnets, what would the subnet numbers be?
Jawab:
255.255.255.54 – 255.255.255.62
Step 5: Reflection
a.  Does subnetting help reduce the problem of IP address depletion? Explain your answer.
Jawab:
Iya, sangat membantu mengurangi masalah depletions pada IP address, karena bisa membedakan network identifier dengan host identifier.
b. The Rough Design Notes diagram noted that the wireless subnet would have up to 30 PCs connecting. In pairs or in small groups, discuss whether or not that creates a situation in which IP addresses might get wasted. Does it matter, and why or why not?
Jawab:
Akan sia sia karena proses subnetting yang menghasilkan beberapa subjaringan dengan jumlah host yang sama telah dilakukan, maka aka nada kemungkinan di dalam segmen –segmen jaringan tersebut memiliki alamat – alamat yang tidak digunakan.
c. There are alternate methods of subnetting using CIDR and VLSM. Would VLSM be a worthwhile option for subnetting this network? Discuss in small groups
Jawab:
vlsm bisa menjadi solusi karena teknik subnetting dengan VLSM dapat dilakukan secara rekrusif : network identifier yang sebelumnya telah disubnetkan, di subnetkan kembali . maka dengan kata lain pengambilan kembali sisa dari bit- bit host.
Lab 4.2.4 Determining PAT Translations

1. Client on a private network sends a request to a web server on the public Internet.
2. N A T  router translates source address and forwards the request to the web server
3. T h e web server responds to the client’s translated address
4. The N A T router translates the client address ( destination)  back to the original private address

Objectives

• Explain the active network connections open on a computer when viewing a particular web page.
• Determine what an internal IP address and port number are translated to using port address.

Background / Preparation
Port address translation (PAT) is a form of network address translation ( N A T ) .With PAT, the router. translates multiple internal ( usually private) addresses to a single public IP address on an interface that is connected to the Internet. Port numbers are used, in combination with IP addresses, to keep track of individual connections. In this lab, you use the ipconfig and netstat commands to view open ports on a computer. You will be able to see the initial IP address and port combination, and determine the translated  IP address and port combination The following resources are required:

• Computer running Windows XP Professional.
• Connection to a gateway router or an  I S R  using  P A T.
• Internet connection.
• Access to the PC command prompt.

Step 1: Determine the IP address of the computer
Open a Command  Prompt window by clicking Start  >  Run and typing cmd. Alternatively, you may click Start  >  All  programs  >  Accessories >  Command Prompt. At the prompt, type the ipconfig command to display the IP address of the computer.
a. What is the IP address of the computer?
Jawab:
192.168.194.175
b. Is  there a port number shown, and why or why not?
Jawab:
Ya, ada port number yang muncul, hal ini karena access point telah dikelompokkan atau dibagi dalam beberapa titik akses, sehingga memiliki default gateway yaitu 192.168.194.129
Step 2 : Determine the IP addresses of the gateway router or ISR
Check with your instruct or to get the IP addresses for the ISR NAT router gateway.
Internal Ethernet Address : 192.168.10.1
External Internet Address : 192.168.20.1

Step 3 : Display base line netstat results.
a. At  the command  prompt, type the netstat  –n command.
b. What  type of information does the netstat  –n command  return?
Jawab:
Protocol, IP address, Foreign address.
c. Where does the IP address found in Step 1 appear? Is there a port number associated with it? Why or why not?
Jawab:
Ya ditemukan, karena menggunakan port gateway.
Step 4 : Display active network connections
a. Ping www.cisco.com and record the address.
b. Open a web browser and enter www.cisco.com in the address bar.
c. Go back to the Command Prompt Window. Type the netstat –n command again, and then  type the command without the – n option. The output looks similar to the following figure, depending on what other network applications and connections are open when you issued the command.
d. What is the difference in the output between the netstat and netstat – n commands?
Jawab:
Perbedaannya ialah pada netstat –n hanya menampilakan informasi dari address local ke foreign address. Sedangkan netstat tampa –n akan menapilakn informasi secara details mulai dari ip address, alamat protocol yang digunakan, lokasi isp. Dan user.
e. Write down the connection entries for the client IP address and the IP address of the www.cisco.com web server.

Local client IP address and port number :	Foreign IP address and port number :
127.0.0.1 :1227	127.0.0.1 :1228
127.0.0.1 :1228	127.0.0.1 :1227
127.0.0.1 :1229	127.0.0.1 :1230
192.168.194.175:2233	64.233.181.136 :80
192.168.194.175:52103	192.168.194.129 :53
192.168.194.175:54674	192.168.194.129:53
192.168.194.175:58266	192.168.194.129:53
192.168.194.175:64274	192.168.194.129:53
192.168.194.175:64293	192.168.194.129:53
192.168.194.175:65399	192.168.194.129

f. Are there more netstat entries the second time?
Jawab:
Tidak ada lagi perintah nestat yang berbeda meskipun untuk pengulangan kedua kalinya.
STEP 6 : REFLECTIONS
a. Port address translation (PAT) is also called NAT with overload. What does the term “overload” refer to?
Jawab:
overload merupakan istilah ditujukan pada IP address karena pada nat overload bukan hanya satu alamat ip public yang terekspos,bisa lebih dari satu jika berupa overload.
b. The NAT terminology used in the lab includes four type of address: Inside-local, inside-global, outside-local, and outside-global. In many connections that pass through NAT routers, two of these address are often the same. Which two of these four addresses normally remain unchanged, and why do you think that is the case?