Please enable JavaScript.

Coggle requires JavaScript to display documents.

CCNA2: Discovery, Management, Maintinance (Router File Systems (USB…

- - - - device sends perodic CDP advertisments
        
        advertisments share information about the type of device - name + number & type of interfaces
    - - design decisions
      - troubleshooting
      - making changes to equipment
  - - - attacker can gather valuable information (IP address, OS versions etc)
    - - cdp run
    - - no cdp run
    - - no cdp enable - interface configuration mode
    - - cdp enable - interface configuration mode
  - - - Display information about CDP neighbours
        
        Device identifiers - Hostname
        
        Port identifier - name of the local remote port
        
        Capabilities list - Whether device is a router or a switch (S for switch, I for IGMP [beyond scope of course])
        
        Platform - hardware platform
        
        Can display more information, such as IOS version show cdp neighbours detail
    - - Display interfaces CDP is enabled on
- - - - lldp run
    - - no lldp run
    - - LLDP must be configured sparately t transmit and receive LLDP packets
    - - lldp {transmit/receive}
    - - no lldp {transmt/receive}
  - - - provide additional information
      - neighbours IOS version
      - neighbours IP address
      - neighbours device capability
- - - - Troubleshooting
      - Securing
      - Planning
      - Impossible to determine order of events if time is not syncronized
  - - - clock set
    - - Configure NTP on the network
      - devices obtain time settings from NTP server
      - local NTP server used by a group of NTP clients canbe syncronize to a NTP server on the internet
  - - - Each layer is called a stratum. Straum is number of hops count fron authoritative server.
      - Stratum 0
        
        Authorative time source
        
        high-precision time keeping
        
        accurate & no delay
        
        devices such as atomic clocks
        
        reference clocks
        
        maintained by organisation outside your network (usually)
      - Stratum 1
        
        Devices directly connected to authortative time sources
        
        Act as primary network time standard
      - Stratum 2 and lower
        
        connected through network connections to Stratum 1
        
        Stratum 2 devices can be NTP clients.
        
        Syncronize time using NTP packets from stratum 1 servers
        
        Could also act as servers for stratum 3 devices
      - Max hop count is 15 (Stratum 16)
      - Time servers on same level can be configred to perform peer veriification
  - - - clock timezone timezone
      - clock summertime
  - - - Verifies syncronssations
    - - Verifies device in now a stratum n device
- - - - Send notifcations
      - Event message collectors
    - - routers
      - switches
      - application servers
      - firewalls
  - - - eg sent to syslog server
      - or internal buffer (only viewable through devices CLI)
    - - debug messages are only sent to internal buffer
      - populr destination for syslog messages
        
        Logging buffer (RAM inside router)
        
        Console line
        
        Terminal line
        
        Telnet
        
        SSH
        
        Syslog server
    - - Level 0 - Level 4
        
        error messages about software or hardware malfunctions
        
        mean fnctonality of the device is affected
      - Level 5
        
        normal but signifigant
        
        interface up or down transitions
        
        system restart
      - Level 6
        
        normal information message that does not affect device functionalty
        
        For example, when a Cisco device is booting, you might see the following informational message: %LICENSE-6-EULA_ACCEPT_ALL: The Right to Use End User License Agreement is accepted.
    - - IP
      - OSPF protocol
      - SYS operation system
      - IP security (IPSec)
      - Interface IP (IF)
    - - seq no: timestamp: %facility-severity-MNEMONIC: description
        
        0:00:46: %LINK-3-UPDOWN: Interface Port-channel1, changed state to up
      - service timestamps log datetime
        
        log messages will be time stamped
      - service sequence-numbers
  - - - parses ouput into predefined columns
      - perform granular searches through the data
      - delete unimportant messages
    - - on some IOS versions device also buffers log messages
      - logging console
        
        send log messages of all severity to console
      - logging buffered
        
        send syslog messages of all severity to buffer
    - - Configure IPv4 address of syslog server
        
        logging ipv4-address
      - Control which messages will be sent
        
        logging trap maximum-level
      - Configure source interfac
        
        specifies that syslog packets contain the IPv4 or IPv6 address of a specific interface, regardless of which interface the packet uses to exit the router.
        
        logging source-interface interfce-type/number
        
        commonly set as loopback address
  - - - DIsplays default logging service settings
- - - - ro
        
        read only
      - wo
        
        write only
      - rw
        
        Read and write
  - - - Using terminal program (g Tera Term) goto File menu and click Log
      - Choose location sae the file. Terminal begins capturing text
      - After capture has started execute: show running-config or show startup-config
    - - On File menu click Send
      - Locate file to be opened into device nd lick Open
      - Tera Term will paste file into the device
    - - Backup
        
        copy running-config tftp or copy startup-config tftp
      - Restore
        
        copy tftp running-config or copy tftp startup-config
  - - - show file systems
      - copy run usbflashdirectory
    - - copy usbflashdirectory:filename running-config
  - - - Various buttons (break sequence) can be pressed on various router versions
      - remove external flash memory when device is powered on
    - - confreg 0x2142
    - - Eg change password
      - launch startupconfig before any configuration is made
- - - - Universal image with all features - including cryptography
        
        Has "universalk9" designation in image name
      - Universal image without some features - primarily payload cryptography
        
        Has "universalk9_npe" designation in image name
  - - - Identifies Platform on which image is run
    - - Specigies the image designation universalk9/universalk9_npe
    - - Indicates where image is run and if file is compressed.
      - Memory location
        
        f - flash
        
        • m - RAM
        
        • r - ROM
        
        • l - relocatable
      - z - zip
        x - mzip
    - - designates file is digitally signed by cisco
    - - speciiles file format
        
        version of IOS
        
        M indicates extended maintenance release
    - - File extension
      - Indicates file is a binary executable file
  - - - 256MB of flash
      - 512Mb of RAM
    - - 256MB of flash
      - 1 GB of RAM
- - - - 1.Ping TFTP server to ensure access
      - Verify TFTP server has sufficient disk space
        
        use show flash:0 to determine size of mage
      - Copy image to the TFTP server
        
        copy source-url destination-url
  - - - Several boot system commands can be entred in sequence to provide fault-toleram [;amt
- - - - IP Base
      - Data
      - Unified Communications (UC)
      - Security (SEC)
      - Use show license feature to view technology package licenses and feature licenses supported on router
  - - - Purchase software package or feature
        
        Start off with IPBase as foundation and add packages like Security, Data or Unified Communications
        
        Provides Product Activation Key (PAK) after purchase
        
        Acts a reciet to get licence
        
        Provides EULA
      - Use PKA and UDI to obtain licence (file)
        
        Cisco Licence Manager (http://www.cisco.com/go/clm)
        
        Standalone application
        
        helps network administrators rapidly deploy multiple Cisco software licenses
        
        Cisco License Registration Portal (http://www.cisco.com/go/license)
        
        Web-based
        
        UDI - Unique device identifier
        
        UDI is a combination of the Product ID (PID), the Serial Number (SN), and the hardware version. The SN is an 11 digit number which uniquely identifies a device. The PID identifies the type of device. Only the PID and SN are used for license creation..
        
        show license udi
        
        Finally, receive an email containing the license information to install the license file. The license file is an XML text file with a .lic extension.
    - - Use the license install stored-location-url
      - reload
  - - - RTUs work on honour system
      - RTU requires acceptance of EULA
        
        license accept end user agreement
    - - Restored by using license install
      - Backuped up by using
        
        license save file-sys://lic-location
    - - Disable technology package
        
        license boot module module-name technology-package package-name disable
      - Clear licence
        
        license clear feature name
        
        license boot module used for disabling the active license
        
        no license boot module module-name technology-package package-name disable
      - Only license added using the license install command can be removed.