{"id":181,"date":"2018-02-16T15:28:58","date_gmt":"2018-02-16T14:28:58","guid":{"rendered":"https:\/\/ccna.louviaux.org\/?p=181"},"modified":"2018-03-02T13:43:56","modified_gmt":"2018-03-02T12:43:56","slug":"les-commandes","status":"publish","type":"post","link":"https:\/\/ccna.louviaux.org\/index.php\/2018\/02\/16\/les-commandes\/","title":{"rendered":"Les commandes"},"content":{"rendered":"

1\/La config de base<\/h1>\n
enable\r\nconfigure terminal\r\n    hostname R1<\/span>\r\n    no ip domain-lookup\r\n    security password min-length 10<\/span>\r\n    enable secret class<\/span>\r\n    line con 0\r\n        password cisco<\/span>\r\n        exec-timeout 50<\/span>\r\n        login\r\n        logging synchronous\r\n        exit\r\n    line vty 0 15\r\n        password cisco<\/span>\r\n        exec-timeout 50<\/span>\r\n        login\r\n        exit\r\n    service password-encryption\r\n    banner motd #Unauthorized Access is prohibited!<\/span>#\r\n    int g0\/0\r\n        description Connection to R2<\/span>\r\n        ip address 192.168.0.1 255.255.255.0<\/span>\r\n        no shutdown\r\n        speed auto\r\n        duplex auto\r\n        exit\r\n    exit\r\nclock set 17:00:00 18 Feb 2018<\/span>\r\ncopy running-config startup-config\r\n\r\n<\/span><\/pre>\n
2\/SSH<\/h1>\n
configure terminal\r\n\tsecurity-password min-length 10<\/span>\r\n\tlogin block-for 60<\/span> attempts 5<\/span> within 60<\/span>\r\n\tusername Admin<\/span> privilege 15<\/span> secret AdminPass<\/span>\r\n\tip domain-name CCNA-lab.com<\/span>\r\n\tcrypto key generate rsa general-key modulus 1024<\/span>\r\n\tip ssh version 2\r\n\tline con 0\r\n\t\tlogin local\r\n\t\tno password\r\n\t\texec-timeout 10<\/span>\r\n\t\ttransport preferred ssh\r\n\t\texit\t\t\r\n\tline vty 0 4\r\n\t\tlogin local\r\n\t\tno password\r\n\t\texec-timeout 5\r\n\t\ttransport input ssh\r\n\t\texit\r\n\tshow ip ssh<\/span>\r\n\tip ssh timeout 75<\/span>\r\n\tip ssh authentication-retries 2\r\n\t\r\n<\/span><\/span><\/pre>\n
3\/HTTP Server<\/h1>\n
configure terminal\r\n\tip http server\r\n\tusername webuser<\/span> privilege 15<\/span> secret webpass<\/span>\r\n\tip http authentication local\r\n<\/span><\/pre>\n
4\/IPv6<\/h1>\n
configure terminal\r\n\tinterface g0\/0\r\n\t\tipv6 address 2001:db8:acad:a::1\/64<\/span> (eui-64)\r\n\t\tipv6 address FE80::1<\/span> link-local\r\n\t\tno shutdown\r\n\t\texit\r\n\tipv6 unicast-routing\r\n\texit\r\n<\/span><\/pre>\n
5\/Clock Rate<\/h1>\n
sur l’interface DCE<\/p>\n
configure terminal\r\n\tinterface s0\/0\/0\r\n\t\tip address 10.1.1.2 255.255.255.252<\/span>\r\n\t\tclock rate 128000<\/span>\r\n\t\tno shutdown\r\n\t\texit\r\n<\/span><\/pre>\n
6\/Port Security<\/h1>\n
configure terminal\r\n\tinterface s0\/0\/1\r\n\t\tshutdown\r\n\t\texit\r\n\tinterface range f0\/1 - 8\r\n\t\tshutdown\r\n\t\texit\r\n\tshow ip interface brief<\/span>\r\n\tno ip http server\r\n\tshow ip http server status<\/span>\r\n\tinterface f0\/5\r\n\t\tshutdown\r\n\t\tswitchport port-security\r\n\t\tswitchport port-security mac-address (sticky) xxxx.xxxx.xxxx<\/span>\r\n\t\tswitchport port-security maximum 10<\/span>\r\n\t\tswitchport port-security violation {protect | restrict | shutdown}\r\n\t\tshow interfaces<\/span>\r\n\t\texit\r\n\tinterface f0\/5\r\n\t\tshutdown\r\n\t\tno shutdown\r\n\t\texit\r\n\tshow port-security<\/span>\r\n\tshow port-security address<\/span>\r\n<\/span><\/pre>\n
7\/Routes Statiques<\/h1>\n
configure terminal\r\n\tip route 192.168.10.0 255.255.255.0<\/span> {192.168.1.2<\/span>(recursive)<\/span> &| g0\/1<\/span>(Directly-connected)<\/span>}\r\n\tip route 0.0.0.0 0.0.0.0<\/span> s0\/0\/1<\/span>\r\n\tipv6 route 2001:db8:acad:a::\/64<\/span> {FC00::2<\/span>(recursive)<\/span> | g0\/0<\/span>(Directly-connected)<\/span>}\r\n\tipv6 route ::\/0<\/span> S0\/0\/1\r\n<\/span><\/span><\/pre>\n
8\/Rip V2<\/h1>\n
configure terminal\r\n\trouter rip\r\n\t\tversion 2\r\n\t\tpassive-interface g0\/1<\/span>\r\n\t\tnetwork 172.30.0.0<\/span>\r\n\t\tnetwork 10.0.0.0<\/span>\r\n\t\tno auto-summary\r\n\t\tdefault-information originate\r\n\t\tclear ip route *\r\n\t\tdebug ip rip\r\n\t\tshow ip route\r\n\t\tshow ip protocols\r\n<\/span>\texit<\/span><\/pre>\n
9\/Vlan<\/h1>\n
configure terminal\r\n\tvlan 99<\/span>\r\n\t\tname Management<\/span>\r\n\tinterface vlan99\r\n\t\tip address 192.168.1.2 255.255.255.0<\/span>\r\n\t\tno shutdown\r\n\t\texit\r\n\tinterface range f0\/1 - 24, g0\/1 - 2\r\n\t\tswitchport mode access\r\n\t\tswitchport access vlan99\r\n\t\texit\r\n\tshow vlan brief<\/span>\r\n\tip default-gateway 192.168.1.1<\/span>\r\n\tshow vlan <name<\/span>>\r\n\tshow vlan <id<\/span>><\/span>\r\n\tip routing (sur les switches Layer 3)\r\n<\/span><\/span><\/pre>\n
10\/Mac Address Table<\/h1>\n
configure terminal\r\n\tmac address-table static 0050.56BE.6C89<\/span> vlan 99<\/span> interface f0\/6<\/span>\r\n\tshow mac address table<\/span> (dynamic)(<\/span>xxxx.xxxx.xxxx<\/span>)<\/span>\r\n\tclear mac address table<\/span> (dynamic)\r\n<\/span><\/span><\/pre>\n
11\/Trunk<\/h1>\n
configure terminal\r\n\tinterface f0\/6\r\n\t\tswitchport mode trunk\r\n\t\tswitchport trunk native vlan\r\n\t\tswitchport trunk allowed vlan\r\n\t\tend\r\n\tshow interface f0\/6 switchport\r\n\tshow switchport trunk native vlan\r\n<\/span>\t\r\n\tinterface f0\/1\r\n\t\tswitchport mode dynamic desirable\r\n<\/span><\/pre>\n
12\/Router-on-a-Stick<\/h1>\n
configure terminal\r\n\tinterface g0\/0.10<\/span>\r\n\t\tencapsulation dot1q 10<\/span>\r\n\t\tip address 172.17.10.1 255.255.255.0<\/span>\r\n\t\texit\r\n\tinterface g0\/0.30<\/span>\r\n\t\tencapsulation dot1q 30<\/span>\r\n\t\tip address 172.17.30.1 255.255.255.0<\/span>\r\n\t\texit\r\n\tinterface g0\/0\r\n\t\tno shutdown (ou no shutdown sur chaque sous-interface)<\/span>\r\n\t\texit\r\n\tshow vlan\r\n\tshow ip route\r\n<\/span><\/span><\/pre>\n
13\/ACL<\/h1>\n
configure terminal\r\n\taccess-list 1<\/span> remark Allow R1 Lan Access<\/span>\r\n\taccess-list 1<\/span> permit 192.168.10.0 0.0.0.255<\/span>\r\n\taccess-list 1<\/span> permit 192.168.30.0 0.0.0.255<\/span>\r\n\taccess-list 1<\/span> deny any\r\n\t\r\n\tinterface g0\/1\r\n\t\tip access-group 1<\/span> out\r\n\t\tshow access-list 1<\/span>\r\n\t\tshow ip interface\r\n\t\tshow access-lists<\/span>\r\n\t\texit\r\n\t\r\n\tip access-list standard Branch-Office<\/span>\r\n\t\tpermit host 192.168.20.3<\/span>\r\n\t\tpermit 192.168.40.0 0.0.0.255<\/span>\r\n\t\tend\r\n\tinterface g0\/1\r\n\t\tip access-group Branch-Office<\/span> out\r\n\t\texit\r\n\t\t\r\n\tip access-list Branch-Office<\/span>\r\n\t\t30<\/span> permit 209.165.200.224 0.0.0.31<\/span>\r\n\t\t40<\/span> deny any\r\n\t\tend\r\n\tip interface g0\/1\r\n\t\tip access-group Branch-Office<\/span> out\r\n\t\texit\r\n\t\r\n\tshow ip access-lists<\/span><\/span>\r\n\t\r\nSur les lines VTY, c'est \"access-class<\/span>\" !\r\n<\/pre>\n
14\/DHCP<\/h1>\n
IPv4<\/h2>\n
1\/ Configurer un routeur comme serveur DHCP:<\/h3>\n
configure terminal\r\n\tip dhcp excluded-address 192.168.0.1 192.168.0.9<\/span>\r\n\tip dhcp excluded-address 192.168.1.1 192.168.1.9<\/span>\r\n\tip dhcp pool R1G1<\/span>\r\n\t\tnetwork 192.168.1.0 25.255.255.0<\/span>\r\n\t\tdefault-router 192.168.1.1<\/span>\r\n\t\tdns-server 209.165.200.225<\/span>\r\n\t\tdomain-name ccna-lab.com<\/span>\r\n\t\tlease 2<\/span>\r\n\t\texit\r\n\tip dhcp pool R1G0<\/span>\r\n\t\tnetwork 192.168.0.0 255.255.255.0<\/span>\r\n\t\tdefault-router 192.168.0.1<\/span>\r\n\t\tdns-server 209.165.200.225<\/span>\r\n\t\tdomain-name ccna-lab.com<\/span>\r\n\t\tlease 2<\/span>\r\n\t\texit<\/span>\r\n\tshow ip dhcp {binding | pool | server statistics}\r\n<\/span>\tdebug ip dhcp server event<\/span>\r\n\tundebug all<\/span>\r\n\tno service dhcp\r\n<\/span><\/pre>\n
2\/ Configurer un routeur comme client DHCP:<\/h3>\n
configure terminal\r\n\tinterface g0\/1\r\n\t\tip address dhcp\r\n\t\tno shutdown\r\n\t\tend<\/span>\r\n\tshow ip dhcp conflict<\/span>\r\n<\/pre>\n
3\/ Configurer un routeur comme relay DHCP:<\/h3>\n
configure terminal\r\n\tinterface g0\/0\r\n\t\tip helper-address 192.168.2.254<\/span>\r\n\t\texit\r\n\tinterface g0\/1\r\n\t\tip helper-address 192.168.2.254<\/span>\r\n\t\texit\r\n<\/span><\/pre>\n
IPv6<\/h2>\n
Rappel:
\n-Adresse link-local de tous les routeurs ipv6: FE02::2
\n-Adresse link-local de tous les noeuds ipv6: FE02::1<\/p>\n
1\/ Configurer un routeur comme server DHCPv6 Stateless:<\/h3>\n
configure terminal\r\n\tipv6 unicast-routing\r\n\tipv6 dhcp pool POOLv6<\/span>\r\n\t\tdns-server <address<\/span>>\r\n\t\tipv6 dhcp server POOLv6<\/span>\r\n\t\tipv6 nd managed-config-flag\r\n\t\texit<\/span>\r\n<\/pre>\n
2\/ Configurer un routeur comme client DHCPv6 Stateless:<\/h3>\n
configure terminal\r\n\tinterface g0\/0\r\n\t\tipv6 enable\r\n\t\tipv6 address autoconfig\r\n<\/span><\/pre>\n
3\/ Configurer un routeur comme server DHCPv6 Statefull:<\/h3>\n
configure terminal\r\n\tipv6 unicast-routing\r\n\tipv6 dhcp pool POOLv6<\/span>\r\n\t\taddress 2001:db8:acad:1::\/64<\/span>\r\n\t\tlifetime infinite\r\n\t\tdns-server <address<\/span>>\r\n ipv6 dhcp server POOLv6\r\n ipv6 nd managed-config-flag\r\n exit\r\n<\/span><\/pre>\n
4\/ Configurer un routeur comme client DHCPv6 Statefull:<\/h3>\n
configure terminal\r\n\tinterface g0\/1\r\n\t\tipv6 enable\r\n\t\tipv6 address dhcp\r\n\r\n\tshow ipv6 dhccppool\r\n\tshow ipv6 interfaces\r\n\tdebug ipv6 dhcp detail\r\n\tshow ipv6 dhcp binding\r\n<\/span><\/span><\/pre>\n
5\/Configurer un routeur comme relay DHCPv6:<\/h3>\n
configure terminal\r\n\tinterface g0\/1\r\n\t\tipv6 dhcp relay destination <address<\/span>>\r\n\t\tend\r\n<\/span><\/pre>\n
\u00a0<\/address>\n
15\/NAT-PAT<\/h1>\n
 <\/p>\n
NAT Statique:<\/h2>\n
configure terminal\r\n\tip nat inside source static 192.168.1.20 209.165.200.225<\/span>\r\n\tinterface g0\/1\r\n\t\tip nat inside\r\n\t\texit\r\n\tinterface s0\/0\/1\r\n\t\tip nat outside\r\n\t\texit\r\n\tshow ip nat translations<\/span>\r\n\t\r\n\tclear ip nat translation *\r\n\tclear ip nat statistics\r\n<\/span><\/span><\/pre>\n
Nat Dynamique (et PAT si \u00ab\u00a0overload\u00a0\u00bb):<\/h2>\n
configure terminal\r\n\taccess-list 1<\/span> permit 192.168.0.1 0.0.0.255<\/span>\r\n\tip nat pool ACCESS<\/span> 209.165.200.242 209.165.200.254 <\/span>netmask 255.255.255.224<\/span>\r\n\tip nat inside source list 1<\/span> pool ACCESS<\/span> (overload)\r\n<\/span><\/pre>\n
16\/CDP & LLDP<\/h1>\n
 <\/p>\n
CDP<\/h2>\n
show cdp\r\n(no) cdp run\r\n\tend\r\nshow cdp interfaces\r\nshow cdp neighbors (detail)\r\nno cdp enable (sur un routeur de bordure)<\/span>\r\n\tend\r\n<\/span><\/pre>\n
LLDP<\/h2>\n
show lldp\r\nlldp run\r\nshow lldp neighbors (detail)\r\n<\/span><\/pre>\n
17\/Syslog<\/h1>\n
E-A-C-E-W-N-I-D<\/p>\n
d’abord:<\/p>\n
show running-config | include timestamp\r\n<\/span><\/pre>\n
Si timestamp n’est pas actif:<\/p>\n
configure terminal\r\n\tservice timestamp log dateline mse\r\n<\/span><\/pre>\n
ensuite:<\/p>\n
configure terminal\r\n\tlogging host 172.16.2.3<\/span>\r\n\t(show logging)\r\n\t(logging trap ?)\r\n\tlogging trap {4<\/span> | warnings<\/span>}\r\n<\/span><\/pre>\n
18\/NTP<\/h1>\n
 <\/p>\n
show clock\r\nclock set<\/span> 17:00:00 18 Feb 2018\r\n<\/span><\/pre>\n
Master<\/h2>\n
configure terminal\r\n\tntp master<\/span> 5\r\n<\/span><\/pre>\n
Client<\/h2>\n
configure terminal\r\n\tntp server 10.1.1.1<\/span>\r\n\tntp update-calendar<\/span>\r\n\t\r\n\tshow ntp associations<\/span>\r\n<\/pre>\n
19\/R\u00e9cup\u00e9ration du mot de passe<\/h1>\n
1\/D\u00e9brancher l’appareil<\/p>\n
2\/Au cours du reboot, coupure franche (Alt+B sous TeraTerm)<\/p>\n
puis:<\/p>\n
\tconfreg 0x2142\r\n\treset\r\n<\/span><\/pre>\n
3\/Apr\u00e8s reboot:<\/p>\n
\tcopy startup-config running-config\r\n\tno password\r\n\tno secret\r\n\tconfig-register 0x2102\r\n\tcopy running-config startup-config\r\n\treload\r\n<\/span><\/pre>\n","protected":false},"excerpt":{"rendered":"
1\/La config de base enable configure terminal hostname R1 no ip domain-lookup security password min-length 10 enable secret class line con 0 password cisco exec-timeout 50 login logging synchronous exit line vty 0 15 password cisco exec-timeout 50 login exit service password-encryption banner motd #Unauthorized Access is prohibited!# int g0\/0 description Connection to R2 ip … Continuer la lecture de Les commandes<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0},"categories":[5],"tags":[],"_links":{"self":[{"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/posts\/181"}],"collection":[{"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/comments?post=181"}],"version-history":[{"count":29,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/posts\/181\/revisions"}],"predecessor-version":[{"id":221,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/posts\/181\/revisions\/221"}],"wp:attachment":[{"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/media?parent=181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/categories?post=181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ccna.louviaux.org\/index.php\/wp-json\/wp\/v2\/tags?post=181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}