Networking and Command Line Interfaces

Overview of Telnet and SSH

  • Telnet: An easy but insecure method for remote command line access.
  • SSH (Secure Shell): A more secure alternative to Telnet, encrypting session data.

Wireshark Demonstration

  • Wireshark: A network protocol analyzer useful for capturing live traffic.
    • Telnet Session Capture: Exposes all data in plain text, including usernames and passwords.
    • SSH Session Capture: Displays encrypted data, making it unreadable.

Console Connections

  • Auxiliary Port: Also known as console port, often used with a NULL modem cable for serial connections.
  • Terminal Emulation Software: Necessary for remote access.
    • Popular choices include:
    • Putty (Hutty)
    • Tera Term Pro
    • Secure CRT
    • Linux Terminal
    • Windows Command Prompt

User Modes in CLI

  • User Mode: Basic access to view information; represented by > in command prompt.
  • Privilege Mode: Access to configuration commands; indicated by # in the command prompt.
    • To enter: Type enable.
  • Exit vs Disable commands:
    • exit clears the session history.
    • disable keeps the command history but returns to user mode.

Command Structure

  • Command Format: command [keywords] [arguments]
    • Examples include:
    • show ip protocols
  • Help Feature:
    • ?: Displays available commands in current mode.
    • do: Executes commands available only in privilege mode without switching contexts.
  • Command History: Use the Up and Down arrows to navigate through the last 10 commands.

Fundamental Commands

  • control commands:
    • Control + Z: Jump back to privilege mode.
    • Control + C: Stop ongoing commands.
    • Control + A/E: Navigate to beginning/end of line.
  • Basic Commands:
    • hostname [name]: Set device hostname.
    • Password configuration commands.

Password Management

  • Console Password: Set with password [your_password] login to enforce a login requirement.
  • VTY Passwords: Similar to console but should always end with login command.
  • Password Encryption: Use service password-encryption to encrypt passwords in the configuration.
    • Two types:
    • Enable Secret: Higher encryption level (MD5).
    • Regular Passwords: Less secure (Level 7).

Message of the Day (MOTD)

  • Configuration:
    • banner motd #message#: Sets a display message upon access to the console.

Saving Configurations

  • Copy Commands:
    • copy running-config startup-config: Saves current configurations.
    • copy startup-config running-config: Loads saved configurations from NVRAM.

VLAN Configuration

  • VLAN: Data traffic separation for enhanced security and performance in networks.
    • Standard VLANs: 1-1005 stored in flash memory.
    • Extended VLANs: 1006-4095 saved in running configurations.

Network Design Fundamentals

  • Three Layer Model:
    • Access Layer: Direct user connections.
    • Distribution Layer: Aggregates data.
    • Core Layer: Connects to external networks (e.g., Internet).

Switches Overview

  • Layer 2 vs Layer 3 Switches: Layer 2 performs data forwarding based on MAC addresses; Layer 3 includes routing capabilities based on IP addresses.
  • Configuration Best Practices:
    • Duplex Settings: Use full duplex to maximize performance; set manually if needed.
    • Cable Types:
    • Straight-through: Connect different types of devices (PC to Switch).
    • Crossover: Connect similar devices (PC to PC).
    • Rollover: Used for console connections (1 to 8, 2 to 7, etc.).

Conclusion and Further Study

  • Current Challenges: Auto-configurations can lead to errors—manual configurations preferred.
  • Next Topics: VLANs and their management, followed by deeper network configuration.