Cisco Infrastructure

8/8/2019 Cisco Infrastructure

http://slidepdf.com/reader/full/cisco-infrastructure 1/47

PROJECT

CISCO- INFRASTRUCTURE

Submitted By:-

NAME- Sandeep Sharma

Roll. No. -1707133

Brach –IT

Collage – HCTM, KAITHAL



ACKNOWLEDGEMENT

I owe a great many thanks to a great many people who helped and

supported me during the Developing of this Project.

My deepest thanks to Trainer, Sumit sharma the Guide of the project for

guiding and correcting various documents of mine with attention and care. He has

taken pain to go through the project and make necessary correction as and when

needed.

My deep sense of gratitude to Sumit sharma, Centre Technical Head of “IIJT”

Institute, gurgaon support and guidance. Thanks and appreciation to the helpful

people at “IIJT” Center for their support.

I would also thank my Institution and my faculty members without whom

this project would have been a distant reality. I also extend my heartfelt thanks to

my family and well wishers.



About The Project

Project Cisco Infrastructure is all about Concern

Implementing network and communication two or more Networks

that are on remote location and securing a networks as configurationof Cisco Devices i.e. Router, Switches and also declare all logical

process that is use in communication.

Here We Create Two logical branch that is on remote location

and we uses several devices and logical modules & process.



NETWORK

In information technology, a network is a series of points or nodes interconnected by

communication paths. Networks can interconnect with other networks and containsubnetworks.

Requirements for creating a network:-

1. What is Network Cable?

Cable is the medium through which information usually moves from one network device

to another. There are several types of cable which are commonly used with LANs. Insome cases, a network will utilize only one type of cable, other networks will use a

variety of cable types. The type of cable chosen for a network is related to the network'stopology, protocol, and size. Understanding the characteristics of different types of cable

and how they relate to other aspects of a network is necessary for the development of a

successful network.

The following sections discuss the types of cables used in networks and other related

topics.

• Unshielded Twisted Pair (UTP) Cable

•

Shielded Twisted Pair (STP) Cable• Coaxial Cable

• Fiber Optic Cable

• Cable Installation Guides

• Wireless LANs

Unshielded Twisted Pair (UTP) Cable

Twisted pair cabling comes in two varieties: shielded and unshielded. Unshielded twisted

pair (UTP) is the most popular and is generally the best option for school networks (See

fig. 1).



Fig.1. Unshielded twisted pair

The quality of UTP may vary from telephone-grade wire to extremely high-speed cable.

The cable has four pairs of wires inside the jacket. Each pair is twisted with a different

number of twists per inch to help eliminate interference from adjacent pairs and other electrical devices. The tighter the twisting, the higher the supported transmission rate and

the greater the cost per foot.

The standard connector for unshielded twisted pair cabling is an RJ-45 connector. This is

a plastic connector that looks like a large telephone-style connector (See fig. 2). A slotallows the RJ-45 to be inserted only one way. RJ stands for Registered Jack, implying

that the connector follows a standard borrowed from the telephone industry. Thisstandard designates which wire goes with each pin inside the connector.

2. Routers

The device used to connect two different network or we can say which is

used to communicate between two different IP. A router is a device that

interconnects two or more computer network, and selectively interchanges packets of

data between them. Each data packet contains address information that a router can use to

determine if the source and destination are on the same network, or if the data packetmust be transferred from one network to another. Where multiple routers are used in a

large collection of interconnected networks, the routers exchange information about

target system addresses, so that each router can build up a table showing the preferred

paths between any two systems on the interconnected networks.

A router is a networking device whose software and hardware are customized to the tasks

of routing and forwarding information. A router has two or more network interfaces,

which may be to different physical types of network (such as copper cables, fiber, or wireless) or different network standards. Each network interface is a small computer

specialized to convert electric signals from one form to another.



Routers connect two or more logical subnets, which do not share a common network

address. The subnets in the router do not necessarily map one-to-one to the physicalinterfaces of the router.[1] The term "layer 3 switching" is used often interchangeably with

the term "routing". The term switching is generally used to refer to data forwarding

between two network devices that share a common network address. This is also calledlayer 2 switching or LAN switching.

IP address: it is a unique identification no. that is used identify a particular

computers

3. Switches

It is a centralized connecting device like hub. It functions as a full duplex

and does the operation on unicasting, multicasting and broadcasting.

It contains a buffer memory buffer stores the data and transfer when its

function is done. It helps in reducing the network traffic

It contains the MAC tablePort no Mac address

Tools:Cable tester:

A cable tester is an electronic device used to verify the electrical connections in a cableor other wired assembly. Generally a cable tester consists of:

1. A source of electric current,

2. A volt meter,3. A switching matrix used to connect the current source and the volt meter to all of

the contact points in a cable.

In addition to these parts a cable tester may also have a microcontroller and a display to

automate the testing process and display the testing results.

A cable tester is used to verify that all of the intended connections exist and that thereare no unintended connections in the cable being tested. When an intended connection

is missing it is said to be "open" (as in Open circuit). When an unintended connectionexists it is said to be a "short" (as in Short circuit). If a connection "goes to the wrong place" it is said to be "miswired" (the connection has two faults: it is open to the correct

contact and shorted to an incorrect contact).

Generally, the testing is done in two phases. The first phase, called the opens test makes

sure each of the intended connections is good. The second phase, called the shorts test

makes sure there are no unintended connections.



There are two common ways to test a connection:

1. A continuity test. Current is passed down the connection. If there is current theconnection is assumed to be good. This type of test can be done with a series

combination of a battery (to provide the current) and a light bulb (that lights when

there is a current).

2. A resistance test. A known current is passed down the connection and the voltagethat develops is measured. From the voltage and current the resistance of the

connection can be calculated and compared to the expected value.

There are two common ways to test for a short:

1. A low voltage test. A low power, low voltage source is connected between twoconductors that should not be connected and the amount of current is measured. If

there is no current the conductors are assumed to be well isolated.

2. A high voltage test. Again a voltage source is connected but this the voltage is of several hundred volts. The increased voltage will make the test more likely to find

connections that are nearly shorted since the higher voltage will cause the

insulation of nearly shorted wires to break down.

WORKING:It is the process which is based on networking. We are here to communicate

between two network of different states with the help of wan technology we

will here use the frame relay technology for our networking. We will

configure the routers switches and the devices..

Work map



Now let’s begun with branch 1 or we can say state 1

Branch 1

Flowchart



Now our work starts with router configuration. In our configuration we will provide theIP address to the ports of routers those are fast Ethernet and serial port

Fast Ethernet IP is used to connect with the switches and the devices connects to theswitches like our pc.IP on the serial port used to communicate with the other network

Let’s start with some basic configuration of IOS: Router> <user mode> Router>en

Router# <enter into the privilege mode>

Router#config t

Router(config)# <configuration mode>

TO set the banner

r outer(config)#banner motd #

Enter TEXT message. End with the character '#'.

Hcl #

To set the password at user mode:

Router(config) line console 0

Router(config)password ******(password)

Router(config) login

To set the password at privilege mode:Router(config)enable password *****(password)

To set the telnet password:

Router(config)line vty 0 4Router(config)password *****(password)

Router(config)login



Cntrl z

Now see the commands for IP address

To set ip at fast Ethernet port Router>en

Router#config t Router(config)# int f0/0

Router(config-if)#ip address 10.0.0.1 255.0.0.0

Router(config-if)#no shut

DHCP (dynamic host configuration protocol)It is a service that is used to provide the automatic IP address to the computer

The Dynamic Host Configuration Protocol (DHCP) is a computer networking protocolused by hosts ( DHCP clients) to retrieve IP address assignments and other configuration

information.

DHCP uses a client-server architecture. The client sends a broadcast request for

configuration information. The DHCP server receives the request and responds withconfiguration information from its configuration database.

In the absence of DHCP, all hosts on a network must be manually configured

individually - a time-consuming and often error-prone undertaking.

DHCP is popular with ISP's because it allows a host to obtain a temporary IP address.

Way to implement it

Router(config)#ip dhcp pool 10.0.0.0/8

Router(dhcp-config)#network 10.0.0.0 255.0.0.0

Router(dhcp-config)#default-router 10.0.0.1

Router(dhcp-config)#^Z

Go to all computers and set TCP/IP configuration as obtain IP automatically (DHCP)

As We are displaying in virtual is in this image.



Now Every PC will be get IP address from DHCP Router and also can communicate

internetwork.

BRANCH B



Flowchart

Similarly we have to do the same operation in branch b

With a change in IP addresses

To set the password at user mode:

Router(config) line console 0

Router(config)password ******(password)

Router(config) login

To set the password at privilege mode:

Router(config)enable password *****(password)

To set the telnet password:

Router(config)line vty 0 4

Router(config)password *****(password)

Router(config)loginCntrl z

To set ip at fast Ethernet port Router>en

Router#config t Router(config)# int f0/0 Router(config-if)#ip address 20.0.0.1 255.0.0.0

Router(config-if)#no shut

DHCP (dynamic host configuration protocol)It is a service that is used to provide the automatic IP address to the computer



The Dynamic Host Configuration Protocol (DHCP) is a computer networking protocol

used by hosts ( DHCP clients) to retrieve IP address assignments and other configurationinformation.

DHCP uses a client-server architecture. The client sends a broadcast request for

configuration information. The DHCP server receives the request and responds with

configuration information from its configuration database.

In the absence of DHCP, all hosts on a network must be manually configuredindividually - a time-consuming and often error-prone undertaking.

DHCP is popular with ISP's because it allows a host to obtain a temporary IP address.

Way to implement it

Router(config)#ip dhcp pool 20.0.0.0/8

Router(dhcp-config)#network 20.0.0.0 255.0.0.0

Router(dhcp-config)#default-router 10.0.0.1



Now Every PC of Branch 2 will be getting IP address from DHCP Router and also

can communicate internetwork.

WAN Technology

A WAN is a data communications network that covers a relatively broad geographic area

and that often uses transmission facilities provided by common carriers, such as

telephone companies. WAN technologies generally function at the lower three layers of the OSI reference model: the physical layer, the data link layer, and the network layer.

Figure 3-1 illustrates the relationship between the common WAN technologies and the

OSI model.

Figure 3-1 WAN Technologies Operate at the Lowest Levels of the OSI Model

Point-to-Point Links

A point-to-point link provides a single, pre-established WAN communications path fromthe customer premises through a carrier network, such as a telephone company, to a

remote network. Point-to-point lines are usually leased from a carrier and thus are oftencalled leased lines. For a point-to-point line, the carrier allocates pairs of wire and facility

hardware to your line only. These circuits are generally priced based on bandwidth

required and distance between the two connected points. Point-to-point links aregenerally more expensive than shared services such as Frame Relay. Figure 3-2 illustrates

a typical point-to-point link through a WAN.



OSI model In 1983 ISO develop a model whose name is reverse of hisname that is OSI model (open system interconnection)

The work done in moving the packet data from source todestination is given by OSI model

OSI model

OSI model

The OSI/IP Model

7. Application Layer

NNTP · SIP · SSI · DNS · FTP · Gopher ·

HTTP · NFS · NTP · SMPP · SMTP · DHCP ·

SNMP · Telnet · (more)

6. Presentation Layer

MIME · XDR · TLS · SSL

5. Session Layer

Named Pipes · NetBIOS · SAP · SIP

4. Transport Layer

TCP · UDP · SCTP · DCCP

3. Network Layer

IP · ICMP · IPsec · IGMP · IPX · AppleTalk

2. Data Link Layer

ARP · CSLIP · SLIP · Ethernet · Frame relay ·

ITU-T G.hn DLL · L2TP · PPP · PPTP

1. Physical Layer



RS-232 · RS-449 · V.35 · V.34 · I.430 · I.431 ·

T1 · E1 · POTS · SONET/SDH · OTN · DSL ·

802.11a/b/g/n PHY · ITU-T G.hn PHY · Ethernet

· USB · Bluetooth

This box: view • talk • edit

The Open Systems Interconnection model (OSI model) is a product of the OpenSystems Interconnection effort at the International Organization for Standardization. It is

a way of sub-dividing a communications system into smaller parts called layers. A layer

is a collection of conceptually similar functions that provide services to the layer above itand receives services from the layer below it. On each layer an instance provides services

to the instances at the layer above and requests service from the layer below.

For example, a layer that provides error-free communications, across a network provides

the path needed by applications above it, while it calls the next lower layer to send andreceive packets that make up the contents of the path. Conceptually two instances at one

layer are connected by a horizontal protocol connection on that layer.

History

In 1978, work on a layered model of network architecture was started and the

International Organization for Standardization (ISO) began to develop its OSI framework

architecture. OSI has two major components: an abstract model of networking, called theBasic Reference Model or seven-layer model, and a set of specific protocols.

Note: The standard documents that describe the OSI model can be freely downloaded

from the ITU-T as the X.200-series of recommendations.[1] A number of the protocol

specifications are also available as part of the ITU-T X series. The equivalent ISO andISO/IEC standards for the OSI model are available from ISO, but only some of them at

no charge.[2]



The concept of a 7 layer model was provided by the work of Charles Bachman, then of

Honeywell. Various aspects of OSI design evolved from experiences with theARPANET, the fledgling Internet, NPLNET, EIN, CYCLADES network and the work in

IFIP WG6.1. The new design was documented in ISO 7498 and its various addenda. In

this model, a networking system is divided into layers. Within each layer, one or moreentities implement its functionality. Each entity interacts directly only with the layer

immediately beneath it, and provides facilities for use by the layer above it.

Protocols enable an entity in one host to interact with a corresponding entity at the samelayer in another host. Service definitions abstractly describe the functionality provided toan (N)-layer by an (N-1) layer, where N is one of the seven layers of protocols operating

in the local host.

Description of OSI layers

OSI Model

Data unit Layer Function

Host

layers

Data

7. Application Network process to application

6. Presentation Data representation,encryption and decryption

5. Session Interhost communication

Segments 4. Transport End-to-end connections and reliability,Flow control

Media

layers

Packet 3. Network Path determination and logical addressing

Frame 2. Data Link Physical addressing

Bit 1. Physical Media, signal and binary transmission

Lately the OSI model has been taught using a Mnemonic, to help in understanding the

complex model, such are from layer 1 to 7, and going from layer 7 to 1:

Layer 1: Physical Layer

Main article: Physical Layer

The Physical Layer defines the electrical and physical specifications for devices. In

particular, it defines the relationship between a device and a physical medium. This



includes the layout of pins, voltages, cable specifications, hubs, repeaters, network

adapters, host bus adapters (HBAs used in storage area networks) and more.

To understand the function of the Physical Layer, contrast it with the functions of the

Data Link Layer. Think of the Physical Layer as concerned primarily with the interaction

of a single device with a medium, whereas the Data Link Layer is concerned more with

the interactions of multiple devices (i.e., at least two) with a shared medium. Standardssuch as RS-232 do use physical wires to control access to the medium.

The major functions and services performed by the Physical Layer are:

• Establishment and termination of a connection to a communications medium.

• Participation in the process whereby the communication resources are effectivelyshared among multiple users. For example, contention resolution and flow

control.

• Modulation, or conversion between the representation of digital data in user equipment and the corresponding signals transmitted over a communications

channel. These are signals operating over the physical cabling (such as copper and

optical fiber) or over a radio link.

Parallel SCSI buses operate in this layer, although it must be remembered that the logicalSCSI protocol is a Transport Layer protocol that runs over this bus. Various Physical

Layer Ethernet standards are also in this layer; Ethernet incorporates both this layer and

the Data Link Layer. The same applies to other local-area networks, such as token ring,

FDDI, ITU-T G.hn and IEEE 802.11, as well as personal area networks such as Bluetoothand IEEE 802.15.4.

Layer 2: Data Link Layer

Main article: Data Link Layer

The Data Link Layer provides the functional and procedural means to transfer data

between network entities and to detect and possibly correct errors that may occur in the

Physical Layer. Originally, this layer was intended for point-to-point and point-to-

multipoint media, characteristic of wide area media in the telephone system. Local areanetwork architecture, which included broadcast-capable multiaccess media, was

developed independently of the ISO work in IEEE Project 802. IEEE work assumed

sublayering and management functions not required for WAN use. In modern practice,only error detection, not flow control using sliding window, is present in data link

protocols such as Point-to-Point Protocol (PPP), and, on local area networks, the IEEE

802.2 LLC layer is not used for most protocols on the Ethernet, and on other local areanetworks, its flow control and acknowledgment mechanisms are rarely used. Sliding

window flow control and acknowledgment is used at the Transport Layer by protocols

such as TCP, but is still used in niches where X.25 offers performance advantages.

The ITU-T G.hn standard, which provides high-speed local area networking over existingwires (power lines, phone lines and coaxial cables), includes a complete Data Link Layer



which provides both error correction and flow control by means of a selective repeat

Sliding Window Protocol.

Both WAN and LAN service arrange bits, from the Physical Layer, into logical

sequences called frames. Not all Physical Layer bits necessarily go into frames, as some

of these bits are purely intended for Physical Layer functions. For example, every fifth bit

of the FDDI bit stream is not used by the Layer.

WAN Protocol architecture

Connection-oriented WAN data link protocols, in addition to framing, detect and may

correct errors. They are also capable of controlling the rate of transmission. A WAN Data

Link Layer might implement a sliding window flow control and acknowledgmentmechanism to provide reliable delivery of frames; that is the case for SDLC and HDLC,

and derivatives of HDLC such as LAPB and LAPD.

IEEE 802 LAN architecture

Practical, connectionless LANs began with the pre-IEEE Ethernet specification, which isthe ancestor of IEEE 802.3. This layer manages the interaction of devices with a shared

medium, which is the function of a Media Access Control sublayer. Above this MAC

sublayer is the media-independent IEEE 802.2 Logical Link Control (LLC) sublayer,which deals with addressing and multiplexing on multiaccess media.

While IEEE 802.3 is the dominant wired LAN protocol and IEEE 802.11 the wireless

LAN protocol, obsolescent MAC layers include Token Ring and FDDI. The MAC

sublayer detects but does not correct errors.

Layer 3: Network Layer

Main article: Network Layer

The Network Layer provides the functional and procedural means of transferring variable

length data sequences from a source to a destination via one or more networks, whilemaintaining the quality of service requested by the Transport Layer. The Network Layer

performs network routing functions, and might also perform fragmentation and

reassembly, and report delivery errors. Routers operate at this layer—sending datathroughout the extended network and making the Internet possible. This is a logical

addressing scheme – values are chosen by the network engineer. The addressing schemeis hierarchical.

Careful analysis of the Network Layer indicated that the Network Layer could have atleast 3 sublayers: 1.Subnetwork Access - that considers protocols that deal with the

interface to networks, such as X.25; 2.Subnetwork Dependent Convergence - when it is

necessary to bring the level of a transit network up to the level of networks on either side;

3.Subnetwork Independent Convergence - which handles transfer across multiple



networks. The best example of this latter case is CLNP, or IPv7 ISO 8473. It manages the

connectionless transfer of data one hop at a time, from end system to ingress router,router to router, and from egress router to destination end system. It is not responsible for

reliable delivery to a next hop, but only for the detection of errored packets so they may

be discarded. In this scheme, IPv4 and IPv6 would have to be classed with X.25 asSubnet Access protocols because they carry interface addresses rather than node

addresses.

A number of layer management protocols, a function defined in the Management Annex,ISO 7498/4, belong to the Network Layer. These include routing protocols, multicastgroup management, Network Layer information and error, and Network Layer address

assignment. It is the function of the payload that makes these belong to the Network

Layer, not the protocol that carries them.

Layer 4: Transport Layer

Main article: Transport Layer

The Transport Layer provides transparent transfer of data between end users, providing

reliable data transfer services to the upper layers. The Transport Layer controls thereliability of a given link through flow control, segmentation/desegmentation, and error

control. Some protocols are state and connection oriented. This means that the Transport

Layer can keep track of the segments and retransmit those that fail.

Although not developed under the OSI Reference Model and not strictly conforming tothe OSI definition of the Transport Layer, typical examples of Layer 4 are the

Transmission Control Protocol (TCP) and User Datagram Protocol (UDP).

Of the actual OSI protocols, there are five classes of connection-mode transport protocols

ranging from class 0 (which is also known as TP0 and provides the least features) to class4 (TP4, designed for less reliable networks, similar to the Internet). Class 0 contains no

error recovery, and was designed for use on network layers that provide error-free

connections. Class 4 is closest to TCP, although TCP contains functions, such as thegraceful close, which OSI assigns to the Session Layer. Also, all OSI TP connection-

mode protocol classes provide expedited data and preservation of record boundaries, both

of which TCP is incapable. Detailed characteristics of TP0-4 classes are shown in the

following table:[3]

Feature Name TP0 TP1 TP2 TP3 TP4

Connection oriented network Yes Yes Yes Yes Yes

Connectionless network No No No No Yes

Concatenation and separation No Yes Yes Yes Yes

Segmentation and reassembly Yes Yes Yes Yes Yes

Error Recovery No Yes No Yes Yes

http://en.wikipedia.org/wiki/OSI_model#cite_note-2

http://en.wikipedia.org/wiki/OSI_model#cite_note-2



Reinitiate connection (if an excessive number of PDUs are

unacknowledged) No Yes No Yes No

Multiplexing and demultiplexing over a single virtual circuit No No Yes Yes Yes

Explicit flow control No No Yes Yes Yes

Retransmission on timeout No No No No Yes

Reliable Transport Service No Yes No Yes Yes

Perhaps an easy way to visualize the Transport Layer is to compare it with a Post Office,which deals with the dispatch and classification of mail and parcels sent. Do remember,

however, that a post office manages the outer envelope of mail. Higher layers may have

the equivalent of double envelopes, such as cryptographic presentation services that can be read by the addressee only. Roughly speaking, tunneling protocols operate at the

Transport Layer, such as carrying non-IP protocols such as IBM's SNA or Novell's IPX

over an IP network, or end-to-end encryption with IPsec. While Generic RoutingEncapsulation (GRE) might seem to be a Network Layer protocol, if the encapsulation of

the payload takes place only at endpoint, GRE becomes closer to a transport protocol that

uses IP headers but contains complete frames or packets to deliver to an endpoint. L2TP

carries PPP frames inside transport packet.

Layer 5: Session Layer

Main article: Session Layer

The Session Layer controls the dialogues (connections) between computers. Itestablishes, manages and terminates the connections between the local and remote

application. It provides for full-duplex, half-duplex, or simplex operation, and establishes

checkpointing, adjournment, termination, and restart procedures. The OSI model made

this layer responsible for graceful close of sessions, which is a property of theTransmission Control Protocol, and also for session checkpointing and recovery, which is

not usually used in the Internet Protocol Suite. The Session Layer is commonly

implemented explicitly in application environments that use remote procedure calls.

Layer 6: Presentation Layer

Main article: Presentation Layer

The Presentation Layer establishes a context between Application Layer entities, in

which the higher-layer entities can use different syntax and semantics, as long as the presentation service understands both and the mapping between them. The presentation

service data units are then encapsulated into Session Protocol data units, and moveddown the stack.

This layer provides independence from differences in data representation (e.g.,encryption) by translating from application to network format, and vice versa. The

presentation layer works to transform data into the form that the application layer can

accept. This layer formats and encrypts data to be sent across a network, providingfreedom from compatibility problems. It is sometimes called the syntax layer.



The original presentation structure used the basic encoding rules of Abstract Syntax

Notation One (ASN.1), with capabilities such as converting an EBCDIC-coded text fileto an ASCII-coded file, or serialization of objects and other data structures from and to

XML.

Layer 7: application layer

This layer supports application and end-user processes. Communication partners are identified,quality of service is identified, user authentication and privacy are considered, and anyconstraints on data syntax are identified. Everything at this layer is application-specific. This layer provides application services for file transfers, e-mail, and other network software services. Telnet

and FTP are applications that exist entirely in the application level. Tiered applicationarchitectures are part of this layer.

Examples with protocols

Layer

OSI

protocols

TCP/IP

protocols

Signali

ng

System

7[4]

AppleT

alk IPX SNA UMTS

Misc.

examples# Name

7Applicati

on

FTAM,X.400,

X.500,

DAP,ROSE,

RTSE,

ACSE

NNTP,SIP, SSI,

DNS,

FTP,Gopher,

HTTP,

NS, NTP,DHCP,

SMPP,

SMTP,SNMP,

Telnet,

RIP, BGP

INAP,

MAP,

TCAP,ISUP,

TUP

AFP,

ZIP,

RTMP, NBP

RIP,

SAP

APP

C

HL7,

Modbus

6Presentat

ion

ISO/IEC 8823,

X.226,

ISO/IEC 9

576-1,X.236

MIME,

SSL,

TLS,

XDR

AFP

TDI, ASCII,

EBCDIC,

MIDI, MPEG

5 Session ISO/IEC 8 Sockets. ASP, NWLi DLC Named



327,X.225,

ISO/IEC 9

548-1,X.235

Sessionestablish

ment in

TCP, SIP,RTP

ADSP,

PAPnk ?

pipes,

NetBIOS,SAP, half

duplex,

fullduplex,

simplex,

SDP, RPC

4Transpor

t

ISO/IEC 8073, TP0,

TP1, TP2,

TP3, TP4

(X.224),ISO/IEC 8

602, X.234

TCP,

UDP,

SCTP,DCCP

DDP,

SPX NBF

3 Network

ISO/IEC 8

208, X.25(PLP),

ISO/IEC 8878,X.223,

ISO/IEC 8

473-1,CLNP

X.233.

IP, IPsec,ICMP,IGMP,

OSPF

SCCP,MTP

ATP

(TokenTalk or

EtherTal

k)

IPX

RRC (Radio

ResourceControl)

Packet DataConvergenceProtocol

(PDCP) and

BMC(Broadcast/Mu

lticast Control)

NBF,

Q.931, IS-IS

Leaky

bucket,token

bucket

2 Data

Link

ISO/IEC 7

666, X.25(LAPB),

Token

Bus,X.222,ISO/IEC 8

802-2 LLC

Type 1 and2

PPP,

SLIP,PPTP,

L2TP

MTP,

Q.710

LocalTa

lk,AppleTa

lk

RemoteAccess,PPP

IEEE

802.3framin

g,

Ethernet IIframin

g

SDL

C

LLC (Logical

Link Control),MAC (Media

Access

Control)

802.3

(Ethernet),802.11a/b/

g/n

MAC/LLC, 802.1Q(VLAN),

ATM,

HDP,FDDI,

Fibre

Channel,Frame

Relay,

HDLC,

ISL, PPP,Q.921,

Token

Ring,CDP, ARP

(maps

layer 3 tolayer 2



address),

ITU-TG.hn DLL

CRC, Bit

stuffing,ARQ,

Data Over

Cable

ServiceInterface

Specificati

on(DOCSIS)

1 Physical

X.25(X.21bis,

EIA/TIA-

232,EIA/TIA-

449, EIA-

530,G.703)

MTP,Q.710

RS-232,

RS-422,

STP,

PhoneNet

Twinax

UMTS

Physical Layer

or L1

RS-232,

Full

duplex,RJ45,

V.35,

V.34,I.430,

I.431, T1,

E1,

10BASE-T,

100BASE-

TX,POTS,

SONET,

SDH,DSL,

802.11a/b/

g/n PHY,ITU-T

G.hn

PHY,

Controller Area

Network,

Data Over Cable

Service

InterfaceSpecificati

on

(DOCSIS)

Comparison with TCP/IP



In the TCP/IP model of the Internet, protocols are deliberately not as rigidly designed

into strict layers as the OSI model.[5] RFC 3439 contains a section entitled "Layeringconsidered harmful." However, TCP/IP does recognize four broad layers of functionality

which are derived from the operating scope of their contained protocols, namely the

scope of the software application, the end-to-end transport connection, theinternetworking range, and lastly the scope of the direct links to other nodes on the local

network.

Even though the concept is different from the OSI model, these layers are neverthelessoften compared with the OSI layering scheme in the following way: The InternetApplication Layer includes the OSI Application Layer, Presentation Layer, and most of

the Session Layer. Its end-to-end Transport Layer includes the graceful close function of

the OSI Session Layer as well as the OSI Transport Layer. The internetworking layer (Internet Layer) is a subset of the OSI Network Layer (see above), while the Link Layer

includes the OSI Data Link and Physical Layers, as well as parts of OSI's Network Layer.

These comparisons are based on the original seven-layer protocol model as defined in

ISO 7498, rather than refinements in such things as the internal organization of the Network Layer document.

The presumably strict peer layering of the OSI model as it is usually described does not present contradictions in TCP/IP, as it is permissible that protocol usage does not followthe hierarchy implied in a layered model. Such examples exist in some routing protocols

(e.g., OSPF), or in the description of tunneling protocols, which provide a Link Layer for

an application, although the tunnel host protocol may well be a Transport or even an

Application Layer protocol in its own right.

Wan devices:



Routers

A router is a network communication device that is used to connect two or more logicallyand physically different networks. A router can be used to connect a LAN to LAN, LAN

to WAN and LAN to internet. A router acts as a post office where sorting and

distribution of the posts (packets in case of routers) is done. A router works on the basis

of an IP address. Every router has built-in operating system known as IOS. A router works on the network layer of the OS model and it routes the data towards the optimal

path. Router uses the header information of the packets and forwarding table to definethe best shortest possible path of the data.

ISDN Adaptors

ISDN (Integrated Services Digital Network) is a data communication method and it is

used over the regular telephone lines. To use the ISDN lines, you need to install add-on

adapters known as ISDN terminal adapters. ISDN Terminal Adapter works like a digitalmodem i.e. it converts the signals from digital to analog and vice versa. ISDN Terminal

adapter is plugged into the serial port of the system. Some ISDN adapters have the

feature of switching between digital and analog modes.

CSU/DSU

CSU/DSU stands for channel service unit and data service unit. CSU is used to connect aterminal to a digital line. DSU is used to perform the protective and diagnostic functions

of the telecommunication line. CSU/DSU is a network device of the size of an external

modem. The Channel service unit receives and transmits the signals from the wide areanetwork line. CSU/DSU are two separate devices and they are sometimes used in

conjunction with the T1 LAN cards.

Bridges

A bridge is a network communication device that is used to connect two segments of aLAN that uses the same protocol. Bridge is like a router but it doesn’t analyze the data

before sending. A bridge operates at the data link layer of the OSI model and it can be

used to connect the physically different networks and the networks that use the different

protocols such as Ethernet and Token Ring.

Modems

A modem is communication device that performs two different functions such as

modulation and demodulation i.e. it converts the digital data into analog and analog into

digital. The faster types of the modems are used by the internet such as DSL modem,cable modem and optical modems. The features like BPS, auto answer, data

compression, voice/data, fax capability and flash memory distinguish one modem from

the other.

Brouter

Network bridge and router combined together to form a device known as brouter.



Now we are ready to understand and work on WAN technology with the help of frame-relay technology

Now we are going to communicate between two branches.

Now we are going to connecting both braches by using Frame relay Technology.

Frame Relay

It is a standardized wide area networking technology that specifies the physical and

logical link layers of digital telecommunications channels using a packet switching

methodology. Originally designed for transport across Integrated Services Digital Network (ISDN) infrastructure, it may be used today in the context of many other

network interfaces. Network providers commonly implement Frame Relay for voice

(VoFR) and data as an encapsulation technique, used between local area networks

(LANs) over a wide area network (WAN). Each end-user gets a private line (or leasedline) to a frame-relay node. The frame-relay network handles the transmission over a

frequently-changing path transparent to all end-users.

With the advent of MPLS, VPN and dedicated broadband services such as cable modem

and DSL, the end may loom for the Frame Relay protocol and encapsulation.[citation needed

However many rural areas remain lacking DSL and cable modem services. In such cases

the least expensive type of "always-on" connection remains a 64-kbit/s frame-relay line.

Thus a retail chain, for instance, may use Frame Relay for connecting rural stores intotheir corporate WAN.

The designers of Frame Relay aimed to a telecommunication service for cost-efficient

data transmission for intermittent traffic between local area networks (LANs) and between end-points in a wide area network (WAN). Frame Relay puts data in variable-

size units called "frames" and leaves any necessary error-correction (such as re-

transmission of data) up to the end-points. This speeds up overall data transmission. For most services, the network provides a permanent virtual circuit (PVC), which means that

the customer sees a continuous, dedicated connection without having to pay for a full-

time leased line, while the service-provider figures out the route each frame travels to itsdestination and can charge based on usage.

An enterprise can select a level of service quality - prioritizing some frames and making

others less important. Frame Relay can run on fractional T-1 or full T-carrier system

carriers. Frame Relay complements and provides a mid-range service between basic rateISDN, which offers bandwidth at 128 kbit/s, and Asynchronous Transfer Mode (ATM),

which operates in somewhat similar fashion to frame Relay but at speeds from 155.520

Mbit/s to 622.080 Mbit/s.

Frame Relay has its technical base in the older X.25 packet-switching technology,designed for transmitting data on analog voice lines. Unlike X.25, whose designers



expected analog signals, Frame Relay offers a fast packet technology, which means that

the protocol does not attempt to correct errors. When a Frame Relay network detects anerror in a frame, it simply drops that frame. The end points have the responsibility for

detecting and retransmitting dropped frames. (However, digital networks offer an

incidence of error extraordinarily small relative to that of analog networks.)

Frame Relay often serves to connect local area networks (LANs) with major backbonesas well as on public wide-area networks (WANs) and also in private network

environments with leased lines over T-1 lines. It requires a dedicated connection duringthe transmission period. Frame Relay does not provide an ideal path for voice or videotransmission, both of which require a steady flow of transmissions. However, under

certain circumstances, voice and video transmission do use Frame Relay.

Frame Relay relays packets at the data link layer (layer 2) of the Open Systems

Interconnection (OSI) model rather than at the network layer (layer 3). A frame canincorporate packets from different protocols such as Ethernet and X.25. It varies in size

up to a thousand bytes or more.

Frame Relay originated as an extension of Integrated Services Digital Network (ISDN).

Its designers aimed to enable a packet-switched network to transport the circuit-switchedtechnology. The technology has become a stand-alone and cost-effective means of

creating a WAN.

Frame Relay switches create virtual circuits to connect remote LANs to a WAN. The

Frame Relay network exists between a LAN border device, usually a router, and thecarrier switch. The technology used by the carrier to transport the data between the

switches is variable and changes between carrier (i.e. Frame Relay does not rely directly

on the transportation mechanism to function).

The sophistication of the technology requires a thorough understanding of the terms used

to describe how Frame Relay works. Without a firm understanding of Frame Relay, it isdifficult to troubleshoot its performance.

Frame Relay has become one of the most extensively-used WAN protocols. Its cheapness(compared to leased lines) provided one reason for its popularity. The extreme simplicity

of configuring user equipment in a Frame Relay network offers another reason for Frame

Relay's popularity.

Frame-relay frame structure essentially mirrors almost exactly that defined for LAP-D.Traffic analysis can distinguish Frame Relay format from LAP-D by its lack of a control

field.

Each Frame Relay Protocol data unit (PDU) consists of the following fields:

1. Flag Field. The flag is used to perform high-level data link synchronization

which indicates the beginning and end of the frame with the unique pattern01111110. To ensure that the 01111110 pattern does not appear somewhere inside

the frame, bit stuffing and destuffing procedures are used.



2. Address Field. Each address field may occupy either octet 2 to 3, octet 2 to 4, or

octet 2 to 5, depending on the range of the address in use. A two-octet addressfield comprises the EA=ADDRESS FIELD EXTENSION BITS and the

C/R=COMMAND/RESPONSE BIT.

1. DLCI-Data Link Connection Identifier Bits. The DLCI serves to identifythe virtual connection so that the receiving end knows which information

connection a frame belongs to. Note that this DLCI has only local

significance. A single physical channel can multiplex several different

virtual connections.2. FECN, BECN, DE bits. These bits report congestion:

FECN=Forward Explicit Congestion Notification bit

BECN=Backward Explicit Congestion Notification bit DE=Discard Eligibility bit

3. Information Field. A system parameter defines the maximum number of data

bytes that a host can pack into a frame. Hosts may negotiate the actual maximumframe length at call set-up time. The standard specifies the maximum information

field size (supportable by any network) as at least 262 octets. Since end-to-end

protocols typically operate on the basis of larger information units, Frame Relayrecommends that the network support the maximum value of at least 1600 octets

in order to avoid the need for segmentation and reassembling by end-users.4. Frame Check Sequence (FCS) Field. Since one cannot completely ignore the bit

error-rate of the medium, each switching node needs to implement error detectionto avoid wasting bandwidth due to the transmission of err ed frames. The error

detection mechanism used in Frame Relay uses the cyclic redundancy check

(CRC) as its basis.

The Frame Relay network uses a simplified protocol at each switching node. It achievessimplicity by omitting link-by-link flow-control. As a result, the offered load has largely

determined the performance of Frame Relay networks. When offered load is high, due to

the bursts in some services, temporary overload at some Frame Relay nodes causes a

collapse in network throughput. Therefore, frame-relay networks require some effectivemechanisms to control the congestion.

Congestion control in frame-relay networks includes the following elements:

1. Admission Control. This provides the principal mechanism used in Frame Relayto ensure the guarantee of resource requirement once accepted. It also serves

generally to achieve high network performance. The network decides whether to

accept a new connection request, based on the relation of the requested trafficdescriptor and the network's residual capacity. The traffic descriptor consists of a

set of parameters communicated to the switching nodes at call set-up time or at

service-subscription time, and which characterizes the connection's statistical properties. The traffic descriptor consists of three elements:

2. Committed Information Rate (CIR). The average rate (in bit/s) at which the

network guarantees to transfer information units over a measurement interval T.

This T interval is defined as: T = Bc/CIR.3. Committed Burst Size (BC). The maximum number of information units

transmittable during the interval T.



4. Excess Burst Size (BE). The maximum number of uncommitted information units

(in bits) that the network will attempt to carry during the interval.

Once the network has established a connection, the edge node of the Frame Relay

network must monitor the connection's traffic flow to ensure that the actual usage of

network resources does not exceed this specification. Frame Relay defines some

restrictions on the user's information rate. It allows the network to enforce the end user'sinformation rate and discard information when the subscribed access rate is exceeded.

Explicit congestion notification is proposed as the congestion avoidance policy. It tries to

keep the network operating at its desired equilibrium point so that a certain Quality of

Service (QoS) for the network can be met. To do so, special congestion control bits have been incorporated into the address field of the Frame Relay: FECN and BECN. The basic

idea is to avoid data accumulation inside the network. FECN means Forward Explicit

Congestion Notification. The FECN bit can be set to 1 to indicate that congestion wasexperienced in the direction of the frame transmission, so it informs the destination that

congestion has occurred. BECN means Backwards Explicit Congestion Notification. The

BECN bit can be set to 1 to indicate that congestion was experienced in the network inthe direction opposite of the frame transmission, so it informs the sender that congestion

has occurred.

DLCI number- data link connection identifier It is a set of numbers that is used to identify a set of particular

connection on WAN. It is used to identify the lines of connection

There is a change in putting the IP at the serial port while using

frame relay

See the commands

Router(config)#int s2/0

Router(config-if)#no shut Router(config-if)#encapsulation frame-relay

Router(config)#int s2/0.1 point

upRouter(config-subif)#ip address 30.0.0.2 255.0.0.0

Router(config-subif)#frame-relay int

Router(config-subif)#frame-relay interface-dlci 102 Router(config-subif)#^Z

Virtual circuit



n telecommunications and computer networks, a virtual circuit (VC), synonymous with

virtual connection and virtual channel, is a connection oriented communication servicethat is delivered by means of packet mode communication. After a connection or virtual

circuit is established between two nodes or application processes, a bit stream or byte

stream may be delivered between the nodes; a virtual circuit protocol allows higher level protocols to avoid dealing with the division of data into segments, packets, or frames.

Virtual circuit communication resembles circuit switching, since both are connection

oriented, meaning that in both cases data is delivered in correct order, and signallingoverhead is required during a connection establishment phase. However, circuit switching provides constant bit rate and latency, while these may vary in a virtual circuit service

because of reasons such as:

• varying packet queue lengths in the network nodes,

• varying bit rate generated by the application,

• varying load from other users sharing the same network resources by means of

statistical multiplexing, etc.

Many virtual circuit protocols, but not all, provide reliable communication service, by

means of data retransmissions because of error detection and automatic repeat request(ARQ).

Permanent and switched virtual circuits in ATM, frame

relay

Switched virtual circuits (SVCs) are generally set up on a per-call basis and are

disconnected when the call is terminated; however, a permanent virtual circuit (PVC)

can be established as an option to provide a dedicated circuit link between two facilities.PVC configuration is usually preconfigured by the service provider. Unlike SVCs, PVC

are usually very seldom broken/disconnected.

A switched virtual circuit (SVC) is a virtual circuit that is dynamically established on

demand and is torn down when transmission is complete, for example after a phone callor a file download. SVCs are used in situations where data transmission is sporadic

and/or not always between the same data terminal equipment (DTE) endpoints.

A permanent virtual circuit (PVC) is a virtual circuit established for repeated/continuous

use between the same DTE. In a PVC, the long-term association is identical to the datatransfer phase of a virtual call. Permanent virtual circuits eliminate the need for repeated

call set-up and clearing.

Frame relay is typically used to provide PVCs. ATM provides both switched virtual

connections and permanent virtual connections, as they are called in ATMterminology

Device used in frame relay



CSU/DSU

A CSU/DSU (Channel Service Unit/Data Service Unit) is a digital-interface device usedto connect a Data Terminal Equipment device or DTE, such as a router, to a digital circuit

(for example a T1 or T3 line).

A CSU/DSU operates at the physical layer (layer 1) of the OSI model. CSU/DSUs are

also made as separate physical products; CSUs and DSUs. The DSU or both functions

may be included as part of an interface card inserted into a DTE. If the CSU/DSU isexternal, the DTE interface is usually compatible with the V.xx or RS-232C or similar

serial interface.

Digital lines require both a channel service unit (CSU) and a data service unit (DSU):

• connection to a DTE device and provides timing to each end.

WIC (Wan Interface Card)

The WIC (WAN Interface Card) may contain an integrated CSU/DSU that can beinserted into a router slot. An example of a WIC is the 1-port 56/64-kbit/s DSU/CSUWIC (WIC-1DSU-56K4) from Cisco.

Well our network is ready to communicate between each other…we have some

application which we can implement on our networks

Branch 1 Serial IP

To set ip at serial port Router(config)#int s2/0 Router(config-if)#no shut

Router(config-if)#clock rate 64000

Router(config-if)#encapsulation frame-relay Router(config)#int s2/0.1 point

Router(config-subif)#ip address 30.0.0.1 255.0.0.0


Router#sh ip int brief

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 10.0.0.1 YES manual up up



FastEthernet1/0 unassigned YES manual administratively down down

Serial2/0 unassigned YES manual up up

Serial2/0.1 30.0.0.1 YES manual up up

Serial3/0 unassigned YES manual administratively down down

FastEthernet4/0 unassigned YES manual administratively down down FastEthernet5/0 unassigned YES manual administratively down down

To provide the IP to the computers connected we use the DHCP service

Branch 2 Serial IP

To set ip at serial port:-

Router(config)#int s2/0 Router(config-if)#no shut

Router(config-if)#clock rate 64000

Router(config-if)#encapsulation frame-relay

Router(config)#int s2/0.1 point upRouter(config-subif)#ip address 30.0.0.2 255.0.0.0


Router#sh ip int brief Interface IP-Address OK? Method Status Protocol



FastEthernet0/0 20.0.0.1 YES manual up up


Serial2/0 unassigned YES manual up up

Serial2/0.1 30.0.0.2 YES manual up up

Serial3/0 unassigned YES manual administratively down down FastEthernet4/0 unassigned YES manual administratively down down


To provide the IP to the computers connected we use the DHCP service

Routing

Now to start communication we need to introduce the ROUTING

Routing (or routeing) is the process of selecting paths in a network along which to sendnetwork traffic. Routing is performed for many kinds of networks, including the

telephone network, electronic data networks (such as the Internet), and transportation

networks. This article is concerned primarily with routing in electronic data networksusing packet switching technology.

In packet switching networks, routing directs packet forwarding, the transit of logically

addressed packets from their source toward their ultimate destination through

intermediate nodes; typically hardware devices called routers, bridges, gateways,firewalls, or switches. General-purpose computers can also forward packets and perform

routing, though they are not specialized hardware and may suffer from limited

performance. The routing process usually directs forwarding on the basis of routing

tables which maintain a record of the routes to various network destinations. Thus,



constructing routing tables, which are held in the routers' memory, is very important for

efficient routing. Most routing algorithms use only one network path at a time, butmultipath routing techniques enable the use of multiple alternative paths.

Routing, in a more narrow sense of the term, is often contrasted with bridging in its

assumption that network addresses are structured and that similar addresses imply

proximity within the network. Because structured addresses allow a single routing tableentry to represent the route to a group of devices, structured addressing (routing, in the

narrow sense) outperforms unstructured addressing (bridging) in large networks, and has become the dominant form of addressing on the Internet, though bridging is still widelyused within localized environments.

Types of routing

1. Default routing - A router is a device that decides where to send a data

packet in order to get it one step closer to its destination, and then sends it there.

In order to make this decision, the router looks at the destination address on the packet

and then consults a list of rules programmed into the router by the person who set it up.

If there is no explicit rule covering this packet - if the router hasn't been programmed

with a rule on how to route packets to this particular destination - then the router send the packet to the default route.

In other words, the default route is the destination that a packet is sent to if the router doesn't have instructions to send it somewhere else.

As an example, consider a simple home router that connects your home network to theInternet. This router will have two routing rules - one for computers on your internal

network, and a default route. The default route will send packets upstream to your ISP.

So any packet that's not going to another computer at your house will always be sent outto the Internet.

Command

ROUTER#conf t ROUTER(config)# ip route 0.0.0.0 insert gateway address here

ROUTER(config)#end ROUTER#exit..

2. Static routing - Static routing is a data communication concept describing

one way of configuring path selection of routers in computer networks. It is the type of

routing characterized by the absence of communication between routers regarding the

current topology of the network.[1] This is achieved by manually adding routes to therouting table. The opposite of static routing is dynamic routing, sometimes also referred

to as adaptive routing .



In these systems, routes through a data network are described by fixed paths (statically).

These routes are usually entered into the router by the system administrator. An entirenetwork can be configured using static routes, but this type of configuration is not fault

tolerant. When there is a change in the network or a failure occurs between two statically

defined nodes, traffic will not be rerouted. This means that anything that wishes to takean affected path will either have to wait for the failure to be repaired or the static route to

be updated by the administrator before restarting its journey. Most requests will time out

(ultimately failing) before these repairs can be made. There are, however, times when

static routes make sense and can even improve the performance of a network. Some of these include stub networks and default routes.

Example

To configure a static route to network 10.10.20.0/24, pointing to a next-hop router withthe IP address of 192.168.100.1, type: (Note that this example is written in the Cisco IOS

command line syntax and will only work on certain Cisco routers)

Router> enable

Router# configure terminal

Router(config)# ip route 10.10.20.0 255.255.255.0 192.168.100.1

The other option is to define a static route with reference to the outgoing interface which

is connected to the next hop towards the destination network.

Router> enable

Router# configure terminal

Router(config)# ip route 10.10.20.0 255.255.255.0 Serial 0/0

3. Dynamic routing/adaptive routing- Adaptive routing describes the

capability of a system, through which routes are characterized by their destination, to

alter the path that the route takes through the system in response to a change inconditions. The adaptation is intended to allow as many routes as possible to remain valid

(that is, have destinations that can be reached) in response to the change.

People using a transport system can display adaptive routing. For example, if a local

railway station is closed, people can alight from a train at a different station and useanother method, such as a bus, to reach their destination.

The term is commonly used in data networking to describe the capability of a network to

'route around' damage, such as loss of a node or a connection between nodes, so long as

other path choices are available. There are several protocols used to achieve this:

• RIP• OSPF

• IS-IS

• IGRP/EIGRP



Systems that do not implement adaptive routing are described as using static routing,

where routes through a network are described by fixed paths (statically). A change, suchas the loss of a node, or loss of a connection between nodes, is not compensated for. This

means that anything that wishes to take an affected path will either have to wait for the

failure to be repaired before restarting its journey, or will have to fail to reach itsdestination and give up the journey.

As in our project we have used the rip routing which is a dynamic routing so

the commands to implement it are

Initial route when routing is not done shown by the router

Router# sh ip route <privilege mode>

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Routing on Branch 1 Router:-

Gateway of last resort is not set

C 10.0.0.0/8 is directly connected, FastEthernet0/0

C 30.0.0.0/8 is directly connected, Serial2/0.1

Now routing process,

Router(config)#router rip Router(config-router)#network 10.0.0.0 Router(config-router)#network 30.0.0.0

Router(config-router)#^Z

To see the result:-

Router#sh ip route



Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - candidate default, U - per-user static route, o - ODR



C 10.0.0.0/8 is directly connected, FastEthernet0/0 R 20.0.0.0/8 [120/1] via 30.0.0.2, 00:00:22, Serial2/0.1


Routing on Branch 2 Router:-


C 20.0.0.0/8 is directly connected, FastEthernet0/0


Now routing process,

outer(config)#router rip Router(config-router)#network 20.0.0.0

Router(config-router)#network 30.0.0.0

Router(config-router)#^Z

To see the result:- Router#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter areaN1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area* - candidate default, U - per-user static route, o - ODR





R 10.0.0.0/8 [120/1] via 30.0.0.1, 00:00:18, Serial2/0.1

C 20.0.0.0/8 is directly connected, FastEthernet0/0C 30.0.0.0/8 is directly connected, Serial2/0.1

Now first see what is the real network on which

we are working



Securing Network

Access control list-



It is the set of the commands by which we can filter a network, group together or leave

any interference. An access control list (ACL), with respect to a computer file system,

is a list of permissions attached to an object. An ACL specifies which users or system

processes are granted access to objects, as well as what operations are allowed on given

objects. Each entry in a typical ACL specifies a subject and an operation. For instance, if a file has an ACL that contains (Alice, delete), this would give Alice permission to

delete the file.

Types of access list

a) Standard access list: It is generally used when we want 1 pc of

branch 1 stops communication with all other pc of branch 2 networks.

Numbered Standard Access Control Lists

Numbers between 1 and 99, or any number between 1300 and 1999 can be used in aStandard ACL. The number used in this range doesn't affect how the ACL is processed or

which ACL is more important to the router. A standard ACL is concerned with only onefactor, the source IP address of the packet. The destination is not considered. The number takes the place of a name you might give to a specific rule. The number in no way

corresponds to a list of pre-defined ACL's

Access List Rules

Regardless of the type of access list you create, standard or extended, you must followcertain rules. For instance, you must create and apply access lists sequentially. Also, as

stated earlier, access lists end with an implicit deny.

Router A(config)#access-list 1 deny 172.16.5.2 0.0.0.0

Router A(config)#access-list 1 deny 172.16.5.3 0.0.0.0

Router A(config)#access-list 1 permit any

The previous example is a standard IP access list that denies the hosts 172.16.5.2 and

172.16.5.3, while allowing all other traffic. The list is applied sequentially from the top

down as the router checks the packets arriving at the interface where this access list isapplied, in order to check if the packets match the permit and deny statements.

In the process of applying access lists, the router first checks an arriving packet to

determine if it matches the deny 172.16.5.2 0.0.0.0 statement. If it does, the router

discards the packet. If it does not, the router applies the second statement, deny172.16.5.3 0.0.0.0. If the packet matches the second statement, the router discards the

packet. Once again, if the packet does not meet the rules of the first two lines, the router

applies the final permit any statement, and the packet is forwarded through the interface.

If you wish to remove an access-list, you use the no access-list (list #) command. For example, to remove the above list, you enter global configuration mode and type the no



access-list command. The information below shows the correct procedure for typing this

command.

Configuration of Named and Standard Access Control

Lists

Creating Numbered Standard Access Control Lists

From Global Configuration mode, type in:

access-list [access-list-number] [deny/permit] [source-ip-address]

[ wildcard mask]

interface [interface-number]

ip access-group [number of list] in/out

As done in our network

b) Extended access list:Extended Access Control is a mechanism

specified to allow only authorized Inspection system (system used to

read e-passport) to read sensitive biometric data such as fingerprints

from ePassports. EAC is mentioned in ICAO Doc 9303 but the description

there is not very clear.

There are several different implementation of the mechanism, that must be implemented

along with the Basic Access Control which is mandatory in the EU. The European

Commission in its decision No 2909 from the 28 June 2006 described what technology

will be used to protect fingerprints in the Member States e-passports. The deadline for themember states to start fingerprint enabled e-passport issuing was set to be 28 June 2009.

The specification selected for the EU e-passports was prepared by the German Federal

Office for Information Security (BSI) in their technical report TR 3110[1]

. Several other countries implement their own EAC.

r1(config)#access-list 101 deny ip host 10.0.0.2 20.0.0.2 0.0.0.0

r1(config)#access-list 101 permit ip any any

r1(config)#int f0/0

r1(config-if)#ip access-group 101 in

r1(config-if)#^Z

here we have done that the pc (0) of branch 1 will not communicate with the pc (0) of

branch 2 but they both will communicate with all other pc’s of the network



Numbered Standard Access Control Lists

Numbers between 100 and 199, or any number between 1300 and 1999 can be used in aextended ACL. The number used in this range doesn't affect how the ACL is processed or

which ACL is more important to the router. A extended ACL is concerned with only one

factor, the source IP address of the packet. The destination is not considered. The number takes the place of a name you might give to a specific rule. The number in no way

corresponds to a list of pre-defined ACL's



Configuration of Named and Standard Access Control

Lists

Creating Numbered Standard Access Control Lists

From Global Configuration mode, type in:

access-list [access-list-number] [deny/permit] [source-ip-address][ wildcard mask]

interface [interface-number]

ip access-group [access-list-number] in

COMMANDS:

outer(config)#access-list 101 deny ip host 10.0.0.3

20.0.0.1 0.0.0.0

Router(config)#access-list 101 permit ip any any

Router(config)#int f0/0

Router(config-if)#ip access-group 101 in

Router(config-if)#^Z



Remotely Working On Cisco Router

Telnet:

TELNET (TELe-NETwork) is a network protocol used on the Internet or local area

networks to provide a bidirectional interactive text-oriented communications facility via a

virtual terminal connection. User data is interspersed in-band with TELNET controlinformation in an 8-bit byte oriented data connection over the Transmission Control

Protocol (TCP).

Telnet was developed in 1969 beginning with RFC 15, extended in RFC 854, and

standardized as Internet Engineering Task Force (IETF) Internet Standard STD 8, one of the first Internet standards.

Historically, telnet provided access to a command-line interface (usually, of an operating

system) on a remote host. Most network equipment and operating systems with a TCP/IPstack support a Telnet service for remote configuration (including systems based on

Windows NT). Because of security issues with Telnet, its use for this purpose has wanedin favor of SSH.

The term telnet may also refer to the software that implements the client part of the protocol. Telnet client applications are available for virtually all computer platforms.

Telnet is also used as a verb. To telnet means to establish a connection with the Telnet

protocol, either with command line client or with a programmatic interface. For example,a common directive might be: "To change your password, telnet to the server, login and

run the passwd command." Most often, a user will be telnetting to a Unix-like server

system or a network device such as a router and obtain a login prompt to a command line

text interface or a character-based full-screen manager.

Security

When Telnet was initially developed in 1969, most users of networked computers were in

the computer departments of academic institutions, or at large private and government

research facilities. In this environment, security was not nearly as much of a concern as it became after the bandwidth explosion of the 1990s. The rise in the number of people with

access to the Internet, and by extension, the number of people attempting to crack other

people's servers made encrypted alternatives much more of a necessity.

Experts in computer security, such as SANS Institute, recommend that the use of Telnet

for remote logins should be discontinued under all normal circumstances, for thefollowing reasons:

• Telnet, by default, does not encrypt any data sent over the connection (including

passwords), and so it is often practical to eavesdrop on the communications anduse the password later for malicious purposes; anybody who has access to a routr,

switch, hub or gateway located on the network between the two hosts where

Telnet is being used can intercept the packets passing by and obtain login and



password information (and whatever else is typed) with any of several common

utilities like tcpdump and Wireshark.

• Most implementations of Telnet have no authentication that would ensure

communication is carried out between the two desired hosts and not intercepted in

the middle.

• Commonly used Telnet daemons have several vulnerabilities discovered over the

years.

These security-related shortcomings have seen the usage of the Telnet protocol droprapidly, especially on the public Internet, in favor of the Secure Shell (SSH) protocol,first released in 1995. SSH provides much of the functionality of telnet, with the addition

of strong encryption to prevent sensitive data such as passwords from being intercepted,

and public key authentication, to ensure that the remote computer is actually who itclaims to be. As has happened with other early Internet protocols, extensions to the

Telnet protocol provide Transport Layer Security (TLS) security and Simple

Authentication and Security Layer (SASL) authentication that address the above issues.

However, most Telnet implementations do not support these extensions; and there has been relatively little interest in implementing these as SSH is adequate for most purposes.

The main advantage of TLS-Telnet would be the ability to use certificate-authority signed

server certificates to authenticate a server host to a client that does not yet have the server key stored. In SSH, there is a weakness in that the user must trust the first session to a

host when it has not yet acquired the server key.

Current status

As of the mid-2000s, the Telnet protocol itself has been mostly superseded for remotelogin. Telnet is popular in various application areas:

• Enterprise networks to access host applications, e.g., on IBM Mainframes.

• Administration of network elements, e.g., in commissioning, integration and

maintenance of core network elements in mobile communication networks, andmany industrial control systems.

• MUD games played over the Internet, as well as talkers, MUSHes, MUCKs,

MOOes, and the resurgent BBS community.

• Internet game clubs, like the Internet Chess Club, the Free Internet Chess Server

and the Internet Go server.

• Embedded systems.

• Mobile data collection applications where telnet runs over secure networks

• Collaboration of multiple users where the capability of session transfer, swap,

sharing, and recovery of disconnected sessions is needed. [4]

Also note that Telnet is a component of FTP protocol. FTP control data are transmitted inTelnet format, although some software implements it incorrectly.



Commands to use the telnet service:

Here we want to login branch 2 from branch 1.

In privilege mode which is:

r1#telnet 30.0.0.2

Trying 30.0.0.2 ...Open

User Access Verification

Password: <we need to type the telnet password here>

r2> <we are now in branch 2>

Telnet can only be applied when branch 2 has enabled telnet security

and you must know the entire password to login into branch 2

Documents

Cisco Infrastructure