CLICommandLineInterface

Switch:Clicarpressionarenter(entranoswitch).
Router:CTRL+CParacancelaredarenter(entranorouter).SlotHWIC
CTRL+SHIFT+6Destrava.

>
MODOEXEC.
#
MODOENABLE.
(config)#
MODODECONFIGURAOGLOBAL.
(configline)#
MODOCONSOLE/ModoVTY
(configif)#
DentrodeumaINTERFACE
(configifrange)#
DentrodeumaRANGE
(dhcpconfig)#
DentrodeumPOOLDHCP.
(configvlan)#
DentrodeumaVLAN.
(configsubif)#
DentrodeumaSubInterface.
(configrouter)#
DentrodeumprotocolodeRoteamento.
(configstdnacl)#
DentrodeumaACLPadroNomeada
.
(configextnacl)#
DentrodeumaACLEstendidaNomeada
.

MODOENABLE
#

>
enable
Saidomodoexece
entranomodoenable
.
#
reload
+enterReiniciaoequipamento.
#
disable
Saidomodoenablee
voltaparaomodoexec
.
#
exit
+enterRetornaaomodoexec.

#
?
Exibeoscomandosdisponveisnomodoenable.
#
conf?
Exibeoscomandoscomoprefixoconf.
#
show?
Exibeosargumentosdocomandoshow.
#
showlogging
Exibeoslogsdoequipamento.
#
showversion
Exibeinformaesdoequipamento.
#
showinterfaces
[
interface
(fastEthernet0/1)]Exibedetalhesdeumainterface.
#
showipinterfacebrief
Exibeinformaesresumidasdasinterfaces.
#
showclock
Exibeadataeahora.
#
showcdp
ExibeostimersdoCDP.
#
showcdpneighbors
ExibeinformaesdosvizinhosCDP.
#
showcdpentry
[
nomedoequipamento
(Rio)]Exibedetalhesdeumequipamento.
#
showflash:
Exibeocontedodamemriaflash.64016384bytestotal(60958336bytes
free).Converterparamegaesubtrair=3058048(2986.38KB.2.91638MB).
#
showstartupconfig
Exibeoarquivostartupconfig.
#
showrunningconfig
Exibeoarquivorunningconfig.
#
showmacaddresstable
ExibeatabelaCAMdoswitch.
#
showarp
ExibeatabelaARP.
#
showrun
Exibedetalhesdasinterfaces.

#
clockset
[
hh:mm:ss
][
july
][
10
][
2013
]Alteraadataeahora.
#
copyrunningconfigstartupconfig
ou
wr
Salvaasalteraes.

MODODECONFIGURAOGLOBAL
(config)#

#
configureterminal
Entranomododeconfiguraoglobal.
#
conft
configureterminalabreviado.
#
conft
+
TAB
Autocompletaocomandoconfigureterminal.
(config)#
exit
ou
CTRL
+
Z
+enterVoltaparaomodoenable.

(config)#
hostname
[
nome
]Alteraonomedoequipamento.
(config)#
bannermotd
[caracter(
$
)][mensagem(
Somentepessoalautorizado!
)][caracter(
$
)]
Insereumbannernoequipamento.

(config)#
nocdprun
DesativaoprocessoCDP.
(config)#
cdprun
AtivaoprocessoCDP.

DentrodeumaINTERFACE
(configif)#

(config)#
interface
[nomedainterface(
fastEthernet0/5
)]Entranainterface(porta).
(configif)#
shutdown
Desativaumainterface.
(configif)#
no

shutdown
Ativaumainterface.
(configif)#
speed
[
10
/
100
/
1000
(100)]Defineumavelocidademanualmente.
(configif)#
duplex
[
full
/
half
(full)]Defineoduplexmanualmente
.
(configif)#
ipaddress
[ip][mscara]Insereipemscaranainterface.
(configif)#
noipaddress
Removeoipdainterface.
(configif)#
description
[
descrio
(gateway)]Inseredescrionainterface.
(configif)#
exit
Saidaportaeretornaaomododeconfiguraoglobal.

DentrodeumaRANGE
(configifrange)#

>
enable
#
configureterminal
(config)#
interfacerange
[interfaceinicial(
fastEthernet0/5
)]

[nmerofinal(
24
)].
(configifrange)#
speed
[velocidade(10/
100
/1000)]Alteraavelocidadedarange.
(configifrange)#
duplex
[
full
/half]Alteraomododetransmissodarange.
(configifrange)#
shutdown
Desativaasinterfacesdarange.
(configifrange)#
noshutdown
Ativaasinterfacesdarange.
(configifrange)#
exit
Saidarangeeretornaaomododeconfiguraoglobal.
#
showrunningconfig
Paraverificarasalteraes
.

VLAN
(configif)#
Switch>
enable
Switch#
configureterminal
Switch#
showvlanbrief
ExibetodasasVLANS
.
Switch(config)#
interfacevlan1
EntranainterfaceVlan1.
Switch(configif)#
noshutdown
Habilitaainterface.
Switch(configif)#
ipaddress192.168.0.1255.255.255.248
Insereipnainterface.
Switch(configif)#
exit
Switch(config)#
exit

Switch#
ping192.168.0.2
efetuapingcontraumalvo(seder.!!!=ok,seder.=deuruim).

CriandoVLANS:
VLAN

(configvlan)#
DentrodeumaVlan.
Switch>
enable
Switch#
configureterminal
Switch(config)#
vlan
[nmerodavlan(
2
)]CriaumaVLAN.
Switch(configvlan)#
name
[nome(
Vlan2
)]InserenomenaVLAN.
Switch(configif)#
switchportaccessvlan
[nmero(
2
)]InsereaportanaVLAN
.
Switch(config)#
novlan
[nmerodavlan(
2
)]RemoveaVLAN.
Switch#
deleteflash:vlan.dat
RemoveoarquivoVlan.dat/ZeraoSwitch.

Password
(config)#
EnablePassword
(config)#
>
enable
#
configureterminal
(config)#
enablepassword123
Inseresenhaenableplana.
(config)#
enablesecret321
Inseresenhaenablesecreta
.
Obs.:AsenhadeenableumprrequisitoparaoTELNETfuncionar.

LocalPasswordandLogin
(config)#
>
enable
#
configureterminal
(config)#
usernameCiscopassword2013
Inseriloginesenhalocais.

ConsolePassword
(configline)#
>
enable
#
configureterminal
(config)#
lineconsole0
Entranomodoconsole.
(configline)#
password123
Insereasenhaconsole.
(configline)#
login
Habilitaasenhaconsole.

VTYPassword
(configline)#
>
enable
#
configureterminal
(config)#
linevty015
EntranomodoVTY(Telnet).
(configline)#
password123
InsereasenhaVTY
.
(configline)#
login
HabilitaasenhaVTY.
Obs.:De0a15=16interfaceshabilitadas,omximosuportadoporessemodo.Asenhade
enabletemqueestarhabilitadaparaorecursodetelnetfuncionar.
Sshl[usurio][ip]AcessaoEquipamentoviatelnet.

Encription

(config)#
>
enable
#
configureterminal
(config)#
cryptokeygeneratersa
Geraachavedecriptografiade512bits.

PasswordEncription

(config)#

>
enable
#
configureterminal
(config)#
servicepasswordencryption
Criptografatodasassenhas.

Timeout

Syslog

(configline)#
>
enable
#
configureterminal
(config)#
lineconsole0
/
linevty015
(configline)#
exectimeout60
Alteraotimeout(tempodeespera).
(configline)#
loggingsynchronous
Sincronizaasmensagenssyslog.

SSH
(configline)#
>
enable
#
configureterminal
(config)#
hostname
[nomedoequipamento

(
Mcury
)]

Alteraonomedoequipamento.
(config)#
ipdomainname
[nomedeDomnio(
Mcury
)]

Inseriumdomnionoequipamento.
(config)#
username
[usurio

(
mcury
)]password[senha

(
cisco
)]

Insereumloginesenhalocais
.
(config)#
cryptokeygeneratersa
GeraachavedecriptografiaRSA
.
(config)#
linevty015
EntranomodoVTY
.
(configline)#
loginlocal
Habilitaologinlocalnoequipamento.
(configline)#
transportinputssh
PermiteotrfegoSSH.
OBS.:
sshL
[
usurio
][
ip
]Acessaoequipamentoviatelnet.

Name
(config)#
>
enable
#
configureterminal
(config)#
hostname
[nomedoequipamento

(
Mcury
)]

Alteraonomedoequipamento.

PoolDHCP

(dhcpconfig)#
Router>
enable
Router#
configureterminal
Router(config)#
ipdhcppool[nome]
CriaumPollDHCP.
Router(dhcpconfig)#
network192.168.10.1255.255.255.248
Definearedeaserdistribuda.
Router(dhcpconfig)#
defaultrouter192.168.10.254
InseriumGatewaynoPool.
Router(dhcpconfig)#
dnsserver192.168.10.254
InseriumDNSnoPoll.
Router(dhcpconfig)#
lease[dias]
Alteraotempodeconcesso.(Snoequipamentoreal,no
packettracer6.0noaceitaocomando).
Router(dhcpconfig)#
ipdhcpexcludedaddress192.168.10.1
Inseriumaexclusodeip.
Obs.:TransformaumroteadoremumDHCP.

SpanningTreeProtocol
(config)#
Switch>
enable
Switch#
showspanningtree
ExibeinformaesdoSpanningTree.
Switch(config)#
spanningtreevlan1priority30
Paravisualizarosvaloresaceitveis.Depois
bastarepetirocomandoesubstituironmero30porumvalor<32768.Alteraovalorda
prioridade.

Switch(config)#
spanningtreeportfast
Desativaostimersdospanningtree(SodaCisco).


Switch(config)#
spanningtreemoderapidpvst
AlteraparaoRapidPVST(SpanningTreeda
Cisco).

Ports
(configif)#
AccessPort
AssociasesomenteaumaVLAN.Definidaparacontextoemdispositivosfinais.
TrunkPort
UsadaparapermitirotrfegodemaisdeumaVLAN.NoseassociaaumaVLAN
especfica,deveserplugadaaequipamentoscomsuporteao802.1Q(dot1Q/.1Q).
Switch>
enable
Switch#
configureterminal
Switch(config)#
interface
[interface(
fastEthernet0/24
)]Entranainterface24.
Switch(configif)#
switchportmode
[
access
ou
trunk
]DefineaportacomoAccessouTrunk.
Switch#
showrunningconfig
Paravisualizarasinterfacesnomodoaccess.
Switch#
showvlanbrief
Paravisualizarasinterfaces.

SubInterfaces
(configsubif)#
Router>
enable
Router#
configureterminal
Router(config)#
interfacefastEthernet0/0.10
CriaumaSubInterface.
Router(configsubif)#
encapsulationdot1Q10
AmarraaSubInterfaceVLAN.
Router(configsubif)#
ipaddress10.1.1.2255.255.255.252
InsereIPeMscara
.

VTPProtocol
(configif)#
Switch>
enable
Switch#
configureterminal
Switch(config)#
vtpmode
[
server
/
client
/

transparent
]DefineomododeoperaoVTP.
*Server=Cria,defineeexcluiVLAN.Client=SvVLAN.Transparent=VaVLAN,masno
associaocaminhodaVTP.
Switch(config)#
vtpdomain
[nomedodomnio(
mcury
)]DefineonomedoDomnio.
Switch(config)#
vtppassword
[senha(
123
)]DefineumasenhaVTP.
Switch#
show

vtppassword
ExibeasenhaVTP
.
Switch#
show

vtpstatus
ExibeinformaessobreoVTP.

Etherchannel
(configifrange)#
Switch>
enable
Switch#
configureterminal
Switch(config)#
interfacerangefastEthernet0/524
Switch(configifrange)#
channelgroup
[nmero

(
1
)]
modeon
CriaumPortChannelna
Range.*Nomximoat6agregaescom8portasporagregao.*Sempretemqueserfeito
emportassequenciais:2,3,4...
Switch(configifrange)#
interfaceportchannel
[n

(
1
)]Entranaportavirtualcriadapelo
ChannelGroup.
Switch#
showipinterfacebrief
Verificaasinterfaces.

ZerandooSwitch
#
Switch>
enable
Switch#
deletevlan.dat
ExcluioarquivoVLAN.DATdamemriaFlash(Zerandooswitch).
Switch#
reload
ReiniciaoSwitch.

ZerandooRouter
#

Router>
enable
Router#
erasestartupconfig
ZeraoRouter.
Router#
reload
ReiniciaoRouter.*OBS:Responder
NO
perguntasenoelesalvadenovo.

Routes
(config)#
Router>
enable
Router#
configureterminal
Router(config)#
iproute
[rededestino(
192.168.20.0
)][mscaradestino(
255.255.255.252
)][ip
prximosalto(
200.10.10.2
)]Criaumarota.*OBS.:Podeser:Esttica(manualmente),
Conectada(automticaoudiretamenteconectada)eDinmica(protocoloderoteamento=RIP,
BGP,OSPF...).*Rotaespecfica=CriaumarotaespecficaparaumnicoPC.
Router#
showiproute
Exibeatabeladerotas.
Router#
showiprouteconnected
ExibeasrotasConectadas.
Router#
showiproutestatic
ExibeasrotasEstticas.

PortSecurity
(configif)#
Switch>
enable
Switch#
configureterminal
Switch(config)#
Switch(config)#
interface
[interface(
fastEthernet0/24
)]Paraentrarnainterface.
Switch(configif)#
switchportportsecurity
HabilitaoProtocoloPortSecurity.
Switch(configif)#
switchportportsecuritymacaddresssticky
Amarraomac
dinamicamente.*IrnoPCepingarparagerartrfegodepacotesparaoreconhecimento.
Switch(configif)#
switchportportsecuritymacaddress
[xxxx.xxxx.xxxx]Amarraomac
manualmente.*Definequaisso.
Switch(configif)#
switchportportsecuritymaximum
[nquevocquer(
4
)]

Alteraa
quantidadedemacsnaporta.*Definequantosso.
Switch#
showrun
Paravisualizardetalhesdasinterfaces.
Switch#
showportsecurity
ExibeinformaesdecontroledoPortSecurity.
Switch#
showportsecurityaddress
ExibeinformaesdoPortSecurity.
Switch#
showportsecurityinterface
[interface(
fastethernet0/1
)]

Exibeinformaesdo
PortSecuritynainterface.

RIPProtocolodeRoteamento
(configrouter)#
Router>
enable
Router#
configureterminal
Router(config)#
routerrip
HabilitaoRIPnoRouter.
Router(configrouter)#
network
[redeconectada(
192.168.10.0
)]Anunciaasrotasconectadas.
Router(configrouter)#
ripversion2
AlteraoRIPparaaverso2.
Router(configrouter)#
noautosummary
Desabilitaaautosumarizao.*Sumarizar=
Englobarmaisdeumaredenumanicarota.
Router(configrouter)#
passiveinterface
[interface(
fastethernet0/0
)]Desabilitaosupdates
RIPnaporta.
Router#
showiprouterip
ExibeasrotasdoProtocoloRIP.
Router#
showipprotocols
Exibeosprotocolosinstaladosnorouter.
Router#
debugiprip
HabilitaoseventosdoprotocoloRIP.

Router#
no

debugiprip
DesabilitaoseventosdoprotocoloRIP.
Router#
debugip?
ExibeasopesdoDebugIP.
Router#
nodebugall
DesabilitatodososmonitoramentosdoDebug.

EIGRPProtocolodeRoteamento
(configrouter)#
Router>
enable
Router#
configureterminal
Router(config)#
routereigrp
[ndeAS=SistemaAutnomo(
100
)]HabilitaoEIGRPnoRouter.
*AS=Seaempresaestivernainternetverificaron,seno,podeserqualquerumdesdequeo
mesmonescolhidosejaconfiguradoemtodososRouters.
Router(configrouter)#
network
[redeconectada(
192.168.10.0
)][wildcard(
0.0.0.3
)]Anuncia
asrotasconectadas.
Router#
showiprouteeigrp
ExibeatabeladerotasdoEIGRP.
Router(configrouter)#
noautosummary
Desabilitaaautosumarizao.*Sumarizar=
Englobarmaisdeumaredenumanicarota.
Router(configif)#
bandwidth
[bandaemkbps(
2048
)]Insereinformaesdebandana
interface.*Menorbanda=MaioroCusto|Maiorbanda=MenoroCusto.
Router#
showiprouteeigrp
ExibeasrotasdoProtocoloEIGRP.
Router#
showipeigrpneighbor
Exibeatabeladevizinhos.
Router#
showipeigrptopology
Exibeomapatopolgico.
ProtocolosLayer2ParaLinksSeriais
(configif)#
*HDLCPadroCISCO,fazcontroledefluxo,odefaultdasinterfacesseriais.
*PPPPadroIEEE,omaisusadoemlinksseriaisnomundo,fazcontroledefluxo,permite
autenticaoesuportamltiplosprotocoloslayer3.
Router#
showinterfaces
[interfaceserial(
serial0/0/0
)]Exibedetalhesdainterface.
Router(configif)#
encapsulationppp
AlteraoencapsulamentodainterfaceparaPPP.

OSPFProtocolodeRoteamento
(configrouter)#

OSPFRedePointtoPoint
(configrouter)#
Router>
enable
Router#
configureterminal
Router(config)#
routerospf
[ndeProcessamento(
10
)]HabilitaoOSPFnoRouter.
Router(configrouter)#
network
[rede(
10.1.1.0
)][wildcard(
0.0.0.7
)]
area
[ndaarea(
10
)]
Anunciaaredeespecificada.
Router(configrouter)#
passiveinterface
[interface(
fastethernet0/0
)]Desabilitaosupdates
doOSPFnainterface.
Router(configif)#
bandwidth
[bandaemkbps(
100
)]Insereinformaesdebandana
interface.*Menorbanda=MaioroCusto|Maiorbanda=MenoroCusto.
Router#
showiprouteospf
ExibeasrotasdoProtocoloOSPF.
Router#
showipospfinterface
[interface(
serial0/0/0
)]ExibeinformaesdoOSPFna
interface.
Router#
showipospfneighbor
ExibeosvizinhosOSPF.*(DR/BDR/DROther).
Router#
showipospfdatabase
ExibeatabelaTopolgica.
*RedesMulticast:Ethernet=PossuisuporteaotrfegodebroadcasteFramerelay=No
possuisuporteaotrfegodebroadcast.

OSPFRedePointtoMultipoint
(configrouter)#

*DR=RoteadorDesignado.FechaadjacnciacomosdemaisRouters.Responsvelporpropagar
asrotasnaredemultiacesso.(ORoutercomomaiorIDeleito).

*BDR=RoteadorDesignadoBackup.ResponsvelporsubstituiroDR,casoelevenhaafalharna
rede.(ORoutercomo2maiorIDseroeleito).

*DROther=SotodososoutrosRoteadoresdarede.

ForaaEleiodoDR

(configrouter)#
Router>
enable
Router#
configureterminal
Router(config)#
routerospf
[ndeProcessamento(
10
)]HabilitaoOSPFnoRouter.
Router(configrouter)#
routerid
[id(
255.255.255.252
)]DefineoRouterIDdoOSPF.
Router#
clearipospfprocess
ReiniciaoprocessoOSPF.

ACL(AccessControlLists)

ACLPadroNumerada
(config)#

Router>
enable
Router#
configureterminal
Router(config)#
accesslist
[ndeACLde1at99(
10
)][permit/deny(
deny
)][IPorigem
(
10.1.1.1
)][Wildcard(
0 .0.0.0
quandoforhost,casosejapararedecalculareusaro
correspondente)]ou
Accesslist[10][deny]host[10.1.1.1]
CriaumaACLPadroNumerada
.
Router(config)#
accesslist
[ndaACL(
10
)]remark[Mensagem(
Teste_ACL_Numerada
)]
InsereumtextonaACLNumerada
.
Router(config)#
accesslist
[ndaACL(
10
)][permit/deny(
permit
)]anyHabilitaoacessoa
todasasdemaisrotas
.
Router(configif)#
ipaccessgroup
[ndaACL(
10
)][in/out(
out
)]AplicaaACLNumeradana
interface.
Router#
showAccesslists
ExibeinformaesdasACLs.
Router(config)#
noaccesslist
[ndaACL(
10
)]RemoveumaACLNumerada
.

ACLPadroNomeada
(configstdnacl)#

Router>
enable
Router#
configureterminal
Router(config)#
ipaccessliststandard
[nomedaACL(
dez
)]CriaumaACLPadroNomeada
.
Router(configstdnacl)#[permit/deny(
deny
)][IPorigem(
10.1.1.1
)][Wildcard(
0 .0.0.0
)]ou
[
deny
]
host
[
10.1.1.1
]CriaumaRegranaACLNomeada
.
Router(configstdnacl)#
remark
[Mensagem(
Teste_ACL_Nomeada
)]InsereumaMensagem
naACLNomeada
.
Router(configstdnacl)#[permit/deny(
permit
)]anyHabilitaoacessonasdemaisrotas.
Router(configif)#
ipaccessgroup
[nomedaACL(
dez
)][in/out(
out
)]AplicaaACLNomeada
nainterface.
Router#
showaccesslists
ExibeinformaesdasACLs.
Router(config)#
noipaccessliststandard
[nomedaACL(
dez
)]RemoveumaACLNomeada
.

ACLEstendidaNumerada
(config)#

Router>
enable
Router#
configureterminal
Router(config)#
accesslist
[ndeACLde100at199(
100
)][permit/deny(
deny
)][protocolo
(
tcp
)][IPOrigem(
10.1.1.1
)][WildcardOrigem(
0.0.0.7
)][IPDestino(
20.1.1.1
)][WildcardDestino
(
0.0.0.7
)]
eq
[porta(
80
)]ou
accesslist
[
100
][
deny
][
tcp
]host[
10.1.1.1
]host[
20.1.1.1
]eq[
80
]
CriaumaACLEstendidaNumerada
.
Router(configif)#
ipaccessgroup
[ndeACL(
100
)][in/out(
in
)]AplicaaACLNumeradana
interface.
Router(config)#
noaccesslist
[ndeACL(
100
)]RemoveumaACLNumerada.

ConfiguraodeExemplo:
Router(config)#
accesslist

100

deny

tcphost10.1.1.1host20.1.1.1eq80
Cria
.
Router(config)#
accesslist

100

permit

icmphost10.1.1.2host20.1.1.2
Cria.
Router(config)#
accesslist

100

deny

icmphost10.1.1.
0
0.
0 .0.
720.1.1.00.0.0.7
Cria.
Router(config)#
accesslist

100

permit

ipanyany
Permiteoacessonasdemaisrotas.
Router(config)#
accesslist

100

remarkACL_Estendida_Numerada
InsereMensagem.
Router(configif)#
ipaccessgroup

100

in
AplicaaACLnainterface.
Router#
showaccesslists
ExibeasACLs.

ACLEstendidaNomeada
(configextnacl)#

Router>
enable
Router#
configureterminal
Router(config)#
ipaccesslistextended
[nomedaACL(
Virgem
)]CriaumaACLEstendida
Nomeada.
Router(configextnacl)#[permit/
deny
][
protocolo
][
IPOrigem
][
WildcardOrigem
][
IPDestino
]
[
WildcardDestino
]
eq
[
porta
]CriaumaregranaACLNomeada.
Router(configextnacl)#
remark
[
mensagem
]InseredescrionaACLNomeada.

ConfiguraodeExemplo:
Router(config)#
ipaccesslist

extended

Virgem
CriaaACL.
Router(configextnacl)#
deny

tcphost10.1.1.1host20.1.1.1eq80
CriaaRegra
.
Router(configextnacl)#
permit

icmphost10.1.1.2host20.1.1.2
CriaaRegra
.
Router(configextnacl)#
deny

icmp10.1.1.00.0.0.720.1.1.00.0.0.7
CriaaRegra.
Router(configextnacl)#
permit

ipanyany
Permiteoacessonasdemaisrotas.
Router(configextnacl)#
remarkACL_Estendida_Nomeada
InsereMensagem.
Router(configif)#
ipaccessgroup

Virgem

in
AplicaaACLnainterface
.
Router#
showaccesslists
ExibeasACLs.

LiberandooacessoTelnetparaumnicohost

(configline)#

Router>
enable
Router#
configureterminal
Router(config)#
accesslist

20permit

host20.1.1.3
Cria
.
Router(config)#
linevty015
HabilitaoTelnet
.
Router(configline)#
accessclass

20in
AplicaaACLnomodoTelnet
.

NAT
(configif)#
/
(config)#

NATStatic
(configif)#
/
(config)#

Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
ipnatinside
DefineaInterfacePrivada(RedeInterna).
Router(configif)#
ipnatoutside
DefineaInterfacePblica(RedeExterna{Internet}).
Router(config)#
ipnatinsidesourcestatic
[
IPPrivadodoHost
][
IPPblicodoRouterdefinidona
portaoutside
]

CriaoNATEsttico
.
Router#
ipnatstatistics
ExibeinformaesdoNAT
.
Router(config)#
noipnatinsidesourcestatic192.168.10.1201.144.66.2
RemoveoNAT
Esttico.

ConfiguraodeExemplo:
Router(config)#
interfaceFastEthernet0/1
Entra.
Router(configif)#
ipnatinside
DefinecomoPrivada.
Router(config)#
interfaceFastEthernet0/0
Entra.
Router(configif)#
ipnatoutside
DefinecomoPblica.
Router(config)#
ipnatinsidesourcestatic192.168.10.1201.144.66.2
Cria.
Router#
ipnatstatistics
Exibe.

NATDynamic
(configif)#
/
(config)#

Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
ipnatinside
DefineaInterfacePrivada(RedeInterna).
Router(configif)#
ipnatoutside
DefineaInterfacePblica(RedeExterna{Internet}).
Router(config)#
accesslist
[
1at99
]
permit
[
RedePrivada
][
Wildcard
]

NestaACLdevero
estarosIPsPrivadosquesairoparaaInternet
.
Router(config)#
ipnatpool
[
nomedoPool
][
IPInicial
][
IPFinal
]
netmask
[
mscara
]Neste
PooldeveroestarosIPsPblicos
.
Router(config)#
ipnatinsidesourcelist
[
ndaACL
]
pool
[
nomedoPoll
]

CriaumNAT
Dinmico
.
Router#
ipnatstatistics
ExibeinformaesdoNAT
.
Router(config)#
noipnatinsidesourcelist
[
ndaACL
]
pool
[
nomedoPoll
]

RemoveoPool
.
Router(config)#
noipnatpool
[
nomedoPool
][
IPInicial
][
IPFinal
]
netmask
[
mscara
]
RemoveoPooldeIPsPblicos
.
Router(config)#
noaccesslist
[
1at99
]
permit
[
RedePrivada
][
Wildcard
]

RemoveaACL
.

ConfiguraodeExemplo:
Router(config)#
interfaceFastEthernet0/
0

Entra.
Router(configif)#
ipnatinside
DefinecomoPrivada
.
Router(config)#
interfaceSerial0/0
Entra.
Router(configif)#
ipnatoutside
DefinecomoPblica
.

Router(config)#
accesslist2
0

permit

192.168.10.00.
0 .0.
7
CriaaACL.
Router(config)#
ipnatpoolpublico200.200.50.3200.200.50.6netmask255.255.255.248

DefinindoIPsdoPool.
Router(config)#
ipnatinsidesourcelist20

poolpublico
]

CriaoNATDinmico
.

NATOverload
(configif)#
/
(config)#

Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
ipnatinside
DefineaInterfacePrivada(RedeInterna).
Router(configif)#
ipnatoutside
DefineaInterfacePblica(RedeExterna{Internet}).
Router(config)#
accesslist
[
1at99
]
permit
[
RedePrivada
][
Wildcard
]

NestaACLdevero
estarosIPsPrivadosquesairoparaaInternet
.
Router(config)#
ipnatinsidesourcelist
[
ndaACL
]
interface
[
interfaceoutside
]
overload

CriaumNATOverload
.
Router#
ipnatstatistics
ExibeinformaesdoNAT
.
Router(config)#
noipnatinsidesourcelist
[
ndaACL
]
interface
[
interfaceoutside
]
overload

RemoveoNATOverload.
Router(config)#
noaccesslist
[
1at99
]
permit
[
RedePrivada
][
Wildcard
]

RemoveaACL
.

ConfiguraodeExemplo:
Router(config)#
interfaceFastEthernet0/
0

Entra
.
Router(configif)#
ipnatinside
DefinecomoPrivada
.
Router(config)#
interfaceSerial0/0
Entra
.
Router(configif)#
ipnatoutside
DefinecomoPblica
.
Router(config)#
accesslist1
0

permit

192.168.0.00.
0 .0.
255
CriaaACL.
Router(config)#
ipnatinsidesourcelist1
0

interfaceserial0/0overload
]

CriaoNATOverload.

FrameRelay
(configif)#
Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
encapsulationframerelay
DefineoFrameRelayCisco.
Router(configif)#
encapsulationframerelayietf
DefineoFrameRelayIETF.
Router(configif)#
framerelaylmitype
[
ansi
/
cisco
/
q933a
]DefineotipodeLMI.
Router(configif)#
framerelayinterfacedlci
[
dlci
]InsereoDLCIdoCircuitoVirtual.

ConfiguraodeExemplo:
SPO:
Router(configif)#
encapsulationframerelay
DefineoFrameRelayCisco.
Router(configif)#
framerelayinterfacedlci110
InsereoDLCIdoCircuitoVirtual.
Router(configif)#
ipaddress200.10.10.1255.255.255.252
InsereIPnaInterface
.

BH:
Router(configif)#
encapsulationframerelay
DefineoFrameRelayCisco.
Router(configif)#
framerelayinterfacedlci210
InsereoDLCIdoCircuitoVirtual.
Router(configif)#
ipaddress200.20.20.1255.255.255.252
InsereIPnaInterface
.


Central:
Router(config)#
interface
[
serial
]
.
[
subinterface
]
pointtopoint
CriaumaSubInterface.

1naSerialRouter(configif)#
encapsulationframerelay
DefineoFrameRelayCisco.OBS.:
AplicarsomentenaSerialFsica.
2Router(configif)#
interfaceserial0/0/0.100pointtopoint
CriaumaSubInterface.
3Router(configif)#
framerelayinterfacedlci100
InsereoDLCIdoCircuitoVirtual.
4Router(configif)#
ipaddress200.10.10.2255.255.255.252
InsereIPnaInterface
.

Router(configif)#
interfaceserial0/0/0.200pointtopoint
CriaumaSubInterface.
Router(configif)#
framerelayinterfacedlci200
InsereoDLCIdoCircuitoVirtual.
Router(configif)#
ipaddress200.20.20.2255.255.255.252
InsereIPnaInterface.

WANProtocolPPP
(configif)#

AuthenticationCHAP
Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
encapsulationppp
DefineoProtocoloPPPnoLinkSerial.
Router(configif)#
pppauthenticationchap
DefineaAutenticaoCHAPnoLink.
Router(config)#
username
[
hostnamerouterremoto
]
password
[
senhaemcomum
]Insere
nomeesenhaparaaAutenticao.
Router#
showinterfaces
[
nomedainterfaceserial
]Exibeinformaessobreainterface.

ConfiguraodeExemplo:
RA:
Router(configif)#
encapsulationppp
DefineoProtocoloPPP.
Router(configif)#
pppauthenticationchap
DefineaAutenticaoCHAP.
Router(configif)#
usernameRB

password

cisco
InserenomeesenhaparaaAutenticao.

ConfiguraodeExemplo:
RB:
Router(configif)#
encapsulationppp
DefineoProtocoloPPP.
Router(configif)#
pppauthenticationchap
DefineaAutenticaoCHAP.
Router(configif)#
usernameRA

password

cisco
InserenomeesenhaparaaAutenticao.

OBS.:ConfiguraroProtocoloEIGRPemTodasasRotas.

AuthenticationPAP
Router>
enable
Router#
configureterminal
Router(config)#
interface
[
nomedainterface
]

Entranainterface.
Router(configif)#
encapsulationppp
DefineoProtocoloPPPnoLinkSerial.
Router(configif)#
pppauthenticationpap
DefineaAutenticaoPAPnoLink.
Router(configif)#
ppppapsentusername
[
nomedohostlocal
]
password
[
senha
]Enviaseu
nomeesenhanoPAP.

Router(config)#
username
[
hostnamerouterremoto
]
password
[
senhaemcomum
]Usurio
doRouterRemoto+senhaemcomumdaAutenticao.
Router#
showinterfaces
[
nomedainterfaceserial
]Exibeinformaessobreainterface.

ConfiguraodeExemplo:
RC:
Router(configif)#
encapsulationppp
DefineoProtocoloPPP.
Router(configif)#
pppauthenticationpap
DefineaAutenticaoPAP.
Router(configif)#
ppppapsentusernameRC

password

cisco
Enviaseunomeesenhano
PAP.
Router(configif)#
usernameRB

password

cisco
InserenomeesenhaparaaAutenticao.

ConfiguraodeExemplo:
RB:
Router(configif)#
encapsulationppp
DefineoProtocoloPPP.
Router(configif)#
pppauthenticationpap
DefineaAutenticaoPAP.
Router(configif)#
ppppapsentusernameRB

password

cisco
Enviaseunomeesenhano
PAP.
Router(configif)#
usernameRC

password

cisco
InserenomeesenhaparaaAutenticao.

RedesConvergentes
NAT
RotaPadro=RotaEsttica
ACL
OSPF
HabilitaroTelnetedepois:
(config)#
accesslist50permit
linevty015
accessclass50in

ColocarBannerNosEquipamentosCisco
(configif)#

Router(config)#
bannermotd
[usarumcaracterparaindicaroterminodobanner
$
]insere
umbannernainicializaodoSWITCH/ROUTERat40linhas

SitesparafazerbanneremASCII

http://patorjk.com/software/taag/#p=display&f=Old%20Banner&t=Testando%20

http://picascii.com/