- Konfigurasi Hostname
Untuk melakukan konfigurasi hostname harus dilakukan pada global EXEC Mode, berikut tahapannya :
--- System Configuration Dialog --- Continue with configuration dialog? [yes/no]: n Press RETURN to get started! Router>enable Router#conf term Enter configuration commands, one per line. End with CNTL/Z. Router(config)#hostname GW1 GW1(config)#exit GW1# %SYS-5-CONFIG_I: Configured from console by console GW1#
- Konfigurasi Password Router
GW1>enable GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#enable password RouterPassword12345
Jika ingin menerapkan password yang sudah dienkripsi pada saat akan memasuki privileged EXEC Mode, maka perintah yang digunakan adalah sebagai berikut :
GW1>enable Password: GW1#conf term Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#enable secret 1qaz2wsx GW1(config)#^Z GW1# %SYS-5-CONFIG_I: Configured from console by console GW1#
Jika "enable password" dan "enable secret" digunakan bersamaan, maka yang akan digunakan oleh router adalah password yang dikonfigurasikan oleh "enable secret".
Port Console yang sering digunakan untuk konfigurasi router juga dapat diberikan password dengan menggunakan perintah sebagai berikut :
GW1>enable Password: passwordsecret GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#line console 0 GW1(config-line)#password ConsolePass GW1(config-line)#login GW1(config-line)#exit GW1(config)#exit GW1# %SYS-5-CONFIG_I: Configured from console by console GW1#exit GW1 con0 is now available Press RETURN to get started.
Setelah konfigurasi ini, maka setiap terhubung ke IOS CLI akan dimintai password terlebih dahulu, contohnya akan diperlihatkan pada tahapan selanjutnya. Untuk akses konfigurasi yang menggunakan telnet dapat diberikan password dengan perintah berikut :
Press RETURN to get started. User Access Verification Password: PasswordConsole GW1>enable Password: passwordsecret GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#line vty 0 4 GW1(config-line)#password TelnetPass GW1(config-line)#login GW1(config-line)#exit GW1(config)#exit GW1# %SYS-5-CONFIG_I: Configured from console by console GW1#exit GW1 con0 is now available Press RETURN to get started.
Secara default, konfigurasi password pada line console maupun telnet tidak dienkripsi sehingga dapat dengan mudah dibaca, seperti output perintah di bawah ini :
Press RETURN to get started. User Access Verification Password: GW1>enable Password: GW1#show running-config Building configuration... Current configuration : 621 bytes ! version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname GW1 ! ! ! enable secret 5 $1$mERr$eEwd5j2IPMU5.11Y/g0fW. enable password RouterPassword12345 ! ! ! ! ! ! ! ! ! ! ! ! spanning-tree mode pvst ! ! ! ! interface FastEthernet0/0 no ip address duplex auto speed auto shutdown ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Vlan1 no ip address shutdown ! ip classless ! ! ! ! ! ! ! line con 0 password ConsolePass login ! line aux 0 ! line vty 0 4 password TelnetPass login ! ! ! end
Untuk membuat password terenkripsi dapat digunakan perintah berikut ini :
Press RETURN to get started. User Access Verification Password: GW1>enable Password: GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#service password-enc GW1(config)#service password-encryption
- Konfigurasi Banner
Press RETURN to get started. GW1>enable Password: passwordsecret GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#banner motd # Enter TEXT message. End with the character '#'. ************************************************************* PERINGATAN !!! Seseorang mencoba mengakses Router Anda ************************************************************* # GW1(config)#
- Konfigurasi Interface
GW1#show interface
FastEthernet0/0 is administratively down, line protocol is down (disabled)
Hardware is Lance, address is 00d0.975c.b101 (bia 00d0.975c.b101)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00,
Last input 00:00:08, output 00:00:05, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: fifo
Output queue :0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
FastEthernet0/1 is administratively down, line protocol is down (disabled)
Hardware is Lance, address is 00d0.975c.b102 (bia 00d0.975c.b102)
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00,
Last input 00:00:08, output 00:00:05, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0 (size/max/drops); Total output drops: 0
Queueing strategy: fifo
Output queue :0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 input packets with dribble condition detected
0 packets output, 0 bytes, 0 underruns
0 output errors, 0 collisions, 1 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out
Vlan1 is administratively down, line protocol is down
Hardware is CPU Interface, address is 00e0.f76b.b204 (bia 00e0.f76b.b204)
MTU 1500 bytes, BW 100000 Kbit, DLY 1000000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
ARP type: ARPA, ARP Timeout 04:00:00
Last input 21:40:21, output never, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 0 bits/sec, 0 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1682 packets input, 530955 bytes, 0 no buffer
Received 0 broadcasts (0 IP multicast)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
563859 packets output, 0 bytes, 0 underruns
0 output errors, 23 interface resets
0 output buffer failures, 0 output buffers swapped out
Topology yang digunakan adalah sebagai berikut :
Press RETURN to get started. ************************************************************* PERINGATAN !!! Seseorang mencoba mengakses Router Anda ************************************************************* GW1>enable Password: GW1#configure terminal Enter configuration commands, one per line. End with CNTL/Z. GW1(config)#interface faste GW1(config)#interface fastethernet 0/0 GW1(config-if)#ip address 192.168.0.1 255.255.255.0 GW1(config-if)#no shutdown GW1(config-if)# %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up GW1(config-if)#exit GW1(config)# GW1(config)#interface fast GW1(config)#interface fastEthernet 0/1 GW1(config-if)#ip address 192.168.1.1 255.255.255.0 GW1(config-if)#no shutdown GW1(config-if)# %LINK-5-CHANGED: Interface FastEthernet0/1, changed state to up GW1(config-if)#exit GW1(config)#
- Menyimpan Konfigurasi
Pada saat melakukan konfigurasi router, semua perintah konfigurasi disimpan pada Running Configuration File. Sehingga untuk mencegah kehilangan konfigurasi, maka konfigurasi yang tersimpan pada Running Configuration File harus di-copy ke Startup Configuration File. Perintah yang dapat digunakan yaitu :
GW1>enable Password: GW1#copy running GW1#copy running-config star GW1#copy running-config startup-config Destination filename [startup-config]? Building configuration... [OK]
Atau dapat juga menggunakan perintah "write" atau cukup "w" saja seperti dibawah ini :
GW1#w Building configuration... [OK]
- Tabel Routing
Yang akan ada didalam tabel routing adalah network address dari jaringan yang dapat dituju beserta bagaimana cara router tersebut mencapai jaringan tersebut. Entry pada tabel routing tersebut bisa berupa network yang terhubung langsung (directly connected network) maupun network yang dapat dituju melalui router lain (remote network).
Sebagai contoh, berikut adalah contoh entry tabel routing yang terdapat pada router yang sebelumnya telah kita konfigurasi :
GW1#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is not set
C 192.168.0.0/24 is directly connected, FastEthernet0/0
C 192.168.1.0/24 is directly connected, FastEthernet0/1
Tidak ada komentar:
Posting Komentar