IPv4

Comenzi de vizualizare:

Router# show ip route

Router# show ip protocol

Router# show run+tab

Router# show ip interface brief

Router# show ip interface ... (ex Go0/0)

Router# show interface brief

Router# show start //permite vizualizarea conf de start pe echipament

Router# debug ip rip

Router# copy run start //copiaza running-config in strartup config

Router# no CDP run //opreste CDP-ul

Router# debug ip icmp

Router# undebug all //taie orice proces de debug

Router# show history //afiseaza toate comenzile ce au fost introduse

Router# terminal history size //marirea comenzilor din istorie

0.0.0.0/0 //adresa internetului in Ipv4

::/0 //adresa internetului in Ipv6

IPv6

Router# show ipv6 route

Router# show ipv6 interface brief

 COMENZI SWITCH

IPv4

Resetare SWITCH:

Switch(#) erase startup-config

Switch(#) delete flash:vlan.dat

Switch(#) reload

.........................................................................

REDENUMIRE ECHIPAMENT:

Switch(config)# hostname ....

.........................................................................

SALVARE START-UP CONFIG:

Switch(#)copy running-config startup-config

.........................................................................

SSH PASSWORD:

Switch(config)# ip domain-name cisco.com

Switch(config)# username ...... secret ......

Switch(config)# crypto key generate rsa

Switch(config)# 1024

Switch(config)# line vty 0 15

Switch(config)# login local

Switch(config)# transport imput ssh / telnet / all

Switch(config)# enable secret ..... (parola)

TELNET PASSWORD:

Switch(config)# line vty 0 15

Switch(config)# password ....

Switch(config)# login

.........................................................................

Banner:

Switch(config)# banner motd "....."

.........................................................................

INTRODUCERE ADRESA PE INTERFATA:

Switch(config)# interface Vlan 1

Switch(config-if)# ip address IP SM

Switch(config-if)# no shutdown

.........................................................................

SETARE DEFAULT GATEWAY:

Switch(config)# ip default-gateway .... (IP de la DGW)

.........................................................................

IPv6

Activare IPV6:

Switch(config)# sdm prefer dual-Ipv4-and-Ipv6 default

Switch(config)# copy run start // sau comanda WR

Switch(config)# reload

........................................................................

Switch(config-if)# ipv6 address (FE80::1) link-local // link-local poate fi modificat

.........................................................................
ACCES PORT CONFIG:

Pe interfata:

Switch(config-if)# switch port mode acces

Switch(config-if)# switch port acces vlan ... (in ce LAN vrem sa bagam acest port : ex: 10)

.........................................................................

TRUNK PORT CONFIG:

Switch(config-if)# switch port mode trunk

Switch(config-if)# switch port trunk encapsulation dot1q

Switch(config-if)# switch port trunk allow vlan ...., .... (adaugam retelele care sunt direct conectate)

COMENZI ROUTER

IPv4

Resetare Router:

Router(#) erase startup-config

Router(#) reload

.........................................................................

COPIERE START-UP CONFIG

Router(#) copy running-config startup-config

.........................................................................

Router(config-if)# DESCRIPTION ....

.........................................................................

REDENUMIRE ECHIPAMENT:

Router(config)# hostname ....

.........................................................................
Banner:

Router(config)# banner motd "....."

.........................................................................

CONSOLA PASSWORD:

Router(config)# line console 0

Router(config)# password ...... (cisco)

Router(config)# login

.........................................................................

SSH PASSWORD:

Router(config)#

Router(config)# ip domain-name cisco.com

Router(config)# username ...... secret ......

Router(config)# crypto key generate rsa

Router(config)# 1024

Router(config)# line vty 0 15

Router(config)# login local

Router(config)# transport input ssh / telnet / all

.........................................................................

TELNET PASSWORD:

Router(config)# line vty 0 15

Router(config)# password ....

Router(config)# login

.........................................................................

Setare PASSWORD:

Router(config)# enable secret ..... (parola) // seteaza parola criptata pe user in #

Router(config)# enable password .... (parola) // seteaza parola pentru a trece din user in #

.........................................................................

CRIPTARE PAROLE:

Router(config)# service password encryption

.........................................................................

INTRODUCERE ADRESA PE INTERFATA:

Router(config)# interface Fa0/0

Router(config-if)# ip address IP SM

Router(config-if)# no shutdown

.........................................................................

RUTARE STATICA:

Router(config)# ip route NA (destinatie) SM (destinatie) serial (ex: S0/0/0 pe unde ies)

Router(config)# no shutdown

.........................................................................

RIP V2:

Router(config)#router rip

Router(config-router)#version 2

Router(config-router)#no auto-summary

Router(config-router)#network ....... (NA direct conectata)

Router(config-router)#network ....... (NA direct conectata)

Router(config-router)#passive-interface fa0/0 //opreste update-ul pe SW)

Router(config-router)#default-information originate

Router(config-router)#exit

Router(config)#exit

Router# ping
.........................................................................

ACL:

Router#conf terminal

Router(config)#access-list ?

<1-99> IP standard access list

<100-199> IP extended access list

<1100-1199> Extended 48-bit MAC address access list

<1300-1999> IP standard access list (expanded range)

<200-299> Protocol type-code access list

<2000-2699> IP extended access list (expanded range)

<2700-2799> MPLS access list

<700-799> 48-bit MAC address access list

dynamic-extended Extend the dynamic ACL absolute timer

rate-limit Simple rate-limit specific access list

Router(config)#access-list 1 ?

deny Specify packets to reject

permit Specify packets to forward

remark Access list entry comment

Router(config)#access-list 1 remark PC1 nu poate accesa LAN 2, oricare PC din LAN 1 , poate sa aiba
acces pe LAN 2

Router(config)#exit

Router#enable

Router#conf terminal

Router(config)#access-list 1 deny host 192.168.1.1 (IP)

Router(config)#access-list 1 permit 192.168.1.0 (NA) 0.0.0.255 (Wildcard)

Router(config)#access-list 1 deny any

Router(config)#interface fastEthernet 0/0

Router(config-if)#ip access-group ?

<1-199> IP access list (standard or extended)

<1300-2699> IP expanded access list (standard or extended)

WORD Access-list name

Router(config-if)#ip access-group 1 ?

in inbound packets

out outbound packets

Router(config-if)#ip access-group 1 out

Router#show access-lists 1

.........................................................................

CONFIGURARE SUB-INTERFATA PE ROUTER:

Router(config)# interfate .... (ex: Gi0/0.10)

Router(config)# encapsulation dot1q ... (ex 10 - cel care l-am introdus mai sus)

Router(config)# ip address IP SM

Router(config)# exit

.........................................................................

COMENZI UTILE LOOPBACK 0:

Router(config)# interface loopback 0

Router(config)# ip address IP SM

Router(config)# router rip

Router(conf-router)# default-information originate

Router(conf-router)# exit

Router(config)# ip route 0.0.0.0 0.0.0.0 loopback 0

Router(config)# exit

.........................................................................

SSH cu ACL:

Router(config)# line vty 0 15

Router(config)# login local

Router(config)# transport input ssh

Router(config)# access-class ....

Router(config)# exit

Router(config)# access-list ... permit ....(IP/NA) .... (wildcard)

Router(config)# access-list ... deny any

.........................................................................

IPV6

Activare adresa Ipv6:

Router(config)# ipv6 unicast-routing

.........................................................................

LINK-LOCAL:

Router(config)# interface .....

Router(config-if)# ipv6 address (@ipv6/prefix 64) // genereaza automat @de link-local din adresa MAC

Router(config-if)# no shutdown

sau

Router(config-if)# ipv6 address (NA @ IPv6) eui-64 // genereaza portiunea de gazda din @MAC a
interfetei ; //genereaza automat @de link-local din adresa MAC

Router(config-if)# no shutdown
LINK-LOCAL:

Router(config-if)# ipv6 address (FE80::1) link-local // link-local poate fi modificat

Router(config-if)# no shutdown

.........................................................................

RIPng comenzi:

Router(config-if)# Ipv6 rip Test1 enable // activeaza procesul de RIPng pe interfata

Router(config-if)# ipv6 rip Test1 default-information originate // redistribuie in update de RIP default
route