Routing

 Forwarding of packets from one network to another network

 Choosing the best path from the routing tables
 Routing is the act of moving information across an internetwork from a source to a
destination.

Three types:

1. Static Routing
2. Default Routing
3. Dynamic Routing

Static Routing

Routes to the different destination networks have to be entered manually on all the
routers by administrator.

Administrator has to update the routing table manually.

It is suitable for small networks.

Router CPU utilization is less.

Static Routing by using Two router

R1-router Configuration

Router> enable

Router# config t

Router(config)#hostname R1

R1(config)# int g0/0

R1(config-if)# ip add 192.168.1.100 255.255.255.0

R1(config-if)# no shut

R1(config-if)# int s0/3/0

R1(config-if)# ip add 10.0.0.1 255.0.0.0

R1(config-if)# clock rate 64000

R1(config-if)# no shut

R1(config-if)#exit

R1(config)# ip route 192.168.2.0 255.255.255.0 10.0.0.2

R1(config)#exit
R1# Sh ip int brief

R1# sh ip route

R2-Router configuration

Router> enable

Router# config t

Router(config)# hostname R2

R2(config)# int g0/0

R2(config-if)# ip add 192.168.2.100 255.255.255.0

R2(config-if)# no shut

R2(config-if)# int s0/2/0

R2(config-if)# ip add 10.0.0.2 255.0.0.0

R2(config-if)# no shut

R2(config-if)# exit

R2(config)# ip route 192.168.1.0 255.255.255.0 10.0.0.1

R2(config)# exit

R2# Sh ip int brief

R2# sh ip route

Static Routing by using Three router

R1-router Configuration

Router> enable

Router# config t

Router(config)#hostname R1

R1(config)# int g0/0

R1(config-if)# ip add 192.168.1.100 255.255.255.0

R1(config-if)# no shut

R1(config-if)# int s0/2/0

R1(config-if)# ip add 10.0.0.1 255.0.0.0

R1(config-if)# clock rate 64000

R1(config-if)# no shut

R1(config-if)#exit

R1(config)# ip route 192.168.2.0 255.255.255.0 10.0.0.2

R1(config)# ip route 192.168.3.0 255.255.255.0 10.0.0.2

 R1(config)# ip route 20.0.0.0 255.0.0.0 10.0.0.2

R1(config)#exit

R1# Sh ip int brief

R1# sh ip route

R2-Router configuration

Router> enable

Router# config t

Router(config)# hostname R2

R2(config)# int g0/0

R2(config-if)# ip add 192.168.2.100 255.255.255.0

R2(config-if)# no shut

R2(config-if)# int s0/2/0

R2(config-if)# ip add 10.0.0.2 255.0.0.0

R2(config-if)# no shut

R2(config-if)# exit

R2(config-if)# int s0/2/1

R2(config-if)# ip add 20.0.0.1 255.0.0.0

R2(config-if)# no shut

R2(config-if)# exit

R2(config)# ip route 192.168.1.0 255.255.255.0 10.0.0.1

R2(config)# ip route 10.0.0.0 255.0.0.0 10.0.0.1

R2(config)# ip route 192.168.3.0 255.255.255.0 20.0.0.2

R2(config)# ip route 20.0.0.0 255.0.0.0 20.0.0.2

R2(config)# exit

R2# Sh ip int brief

R2# sh ip route

R3-configuration

Router> enable

Router# config t

Router(config)#hostname R3

R3(config)# int g0/0

R3(config-if)# ip add 192.168.3.100 255.255.255.0

R3(config-if)# no shut

R3(config-if)# int s0/2/1

R3(config-if)# ip add 20.0.0.2 255.0.0.0

R3(config-if)# clock rate 64000

R3(config-if)# no shut

R3(config-if)#exit

R3(config)# ip route 192.168.2.0 255.255.255.0 20.0.0.1

R3(config)# ip route 192.168.1.0 255.255.255.0 20.0.0.1

R3(config)# ip route 10.0.0.0 255.0.0.0 20.0.0.1

R3(config)#exit

R3# Sh ip int brief

R3# sh ip route

Default Routing
We use default routing to send packets with a remote destination network not in the
routing table, but to the next-hop router.

You can only use default routing on stub networks (those with only one exit path out of
the network).

R1-router Configuration

Router> enable

Router# config t

Router(config)#hostname R1

R1(config)# int g0/0

R1(config-if)# ip add 192.168.1.100 255.255.255.0

R1(config-if)# no shut

R1(config-if)# int s0/2/0

R1(config-if)# ip add 10.0.0.1 255.0.0.0

R1(config-if)# clock rate 64000

R1(config-if)# no shut
 R1(config-if)#exit

R1(config)# ip route 0.0.0.0 0.0.0.0 10.0.0.2

R1(config)#exit

R1# Sh ip int brief

R1# sh ip route

R2-Router configuration

Router> enable

Router# config t

Router(config)# hostname R2

R2(config)# int g0/0

R2(config-if)# ip add 192.168.2.100 255.255.255.0

R2(config-if)# no shut

R2(config-if)# int s0/2/0

R2(config-if)# ip add 10.0.0.2 255.0.0.0

R2(config-if)# no shut

R2(config-if)# exit

R2(config-if)# int s0/2/1

R2(config-if)# ip add 20.0.0.1 255.0.0.0

R2(config-if)# no shut

R2(config-if)# exit

R2(config)# ip route 192.168.1.0 255.255.255.0 10.0.0.1

R2(config)# ip route 10.0.0.0 255.0.0.0 10.0.0.1

R2(config)# ip route 192.168.3.0 255.255.255.0 20.0.0.2

R2(config)# ip route 20.0.0.0 255.0.0.0 20.0.0.2

 R2(config)# exit

R2# Sh ip int brief

R2# sh ip route

R3-configuration

Router> enable

Router# config t

Router(config)#hostname R3

R3(config)# int g0/0

R3(config-if)# ip add 192.168.3.100 255.255.255.0

R3(config-if)# no shut

R3(config-if)# int s0/2/1

R3(config-if)# ip add 20.0.0.2 255.0.0.0

R3(config-if)# clock rate 64000

R3(config-if)# no shut

R3(config-if)#exit

R3(config)# ip route 0.0.0.0 0.0.0.0 20.0.0.1

R3(config)#exit

R3# Sh ip int brief

R3# sh ip route

RIPv2 LAB
Pre-Requisite :
Assign Ip addresses as per the topology
Configuration of EIGRP
Pre-Requisite :
Assign Ip addresses as per the topology

STANDARD ACL LAB

Pre-Requisite :
1.Assign Ip addresses as per the topology
2. configure Routing (RIP, EIGRP)

TASK :
1. Deny the host 192.168.1.1 communicating with 192.168.2.0
2. Dent the host 192.168.1.2 communicating with 192.168.2.0
3. Deny the network 192.168.3.0 communicating with 192.168.2.0
4. Permit all the remaining traffic

Standard ACL configuration on Router2

Router2(config)#access-list 15 deny host 192.168.1.1 0.0.0.0
Router2(config)#access-list 15 deny host 192.168.1.2
Router2(config)#access-list 15 deny 192.168.3.0 0.0.0.255
Router2(config)#access-list 15 permit any
Router2#sh access-list

Implementation of Standard Acl @Router2 interface Gig0/0

Router2(config)#interface g0/0
Router2(config-if)#ip access-group 15 out
Router2#sh access-list
EXTENDED ACL LAB
Pre-Requisite
1.Assign Ip addresses as per the topology
2. configure Routing (RIP, EIGRP)

TASK :
1.Deny the users on LAN 192.168.2.0 should not access 192.168.1.3 HTTP service
2.Deny the users on LAN 192.168.3.0 should not access 192.168.1.4 FTP service
3.Deny the users on LAN 192.168.3.1 should not access 192.168.1.3 HTTP service
4. Deny the user on LAN 192.168.2.0 should not access 192.168.1.4 DNS
5. Deny the users from the host between 192.168.3.2 and 192.168.1.2 should not be
able to send ICMP(PING/Trace) messages
6. Remaining

Extended ACL configuration on Router1

Router1(config)#access-list 145 deny tcp 192.168.2.0 0.0.0.255 host 192.168.1.3 eq www
Router1(config)#access-list 145 deny udp 192.168.2.0 0.0.0.255 host 192.168.1.4 eq domain
Router1(config)#access-list 145 deny tcp 192.168.3.0 0.0.0.255 host 192.168.1.4 eq ftp
Router1(config)#access-list 145 deny tcp host 192.168.3.1 host 192.168.1.3 eq 80
Router1(config)#access-list 145 deny icmp host 192.168.3.2 host 192.168.1.1
Router1(config)#access-list 145 permit ip any any
Implementation of Extended Acl @Router1 interface Gig0/0
Router1(config)#interface g0/0
Router1(config-if)#ip access-group 145 out
Router1#sh access-list

VERIFY from Other HOSTS

NAT
NAT Lab Pre-Requisite
1. Configure Ip addresses as per the Diagram
2. Configure Default Routing in Router R1
3. Configure Static Routing on ISP router

ROUTER1 configuration :
R1(config)#int G0/0
R1(config-if)#ip add 192.168.1.100 255.255.255.0
R1(config-if)#no shutdown
R1(config)# int s0/0/0
R1(config-if)#ip add 100.1.1.1 255.255.255.0
R1(config-if)#no shutdown
R1(config-if)#clock rate 64000
R1(config)#ip route 0.0.0.0 0.0.0.0 100.1.1.2
R1#sh ip route

ROUTER2(ISP) configuration :
ISP(config)#int G0/0
ISP (config-if)#ip add 200.1.1.100 255.255.255.0
ISP (config-if)#no shutdown
ISP (config)# int s0/0/0
ISP (config-if)#ip add 100.1.1.2 255.255.255.0
ISP (config-if)#no shutdown
ISP (config)#ip route 50.1.1.0 255.255.255.0 100.1.1.1
ISP #sh ip route static

Verify by Pinging from private network to public network

Static NAT Configuration:

R1(config)#ip NAT inside source static 192.168.1.1 50.1.1.1

R1(config)#ip NAT inside source static 192.168.1.2 50.1.1.2
R1(config)#ip NAT inside source static 192.168.1.3 50.1.1.3

R1(config)#int G0/0
R1(config-if)#ip nat inside

R1(config)#int s0/0/0
R1(config-if)#ip nat outside

R1#sh ip nat translations

R1#sh ip nat statistics

Verify by sending ping requests

Verification Commands:
 Show ip nat translation
 Clear ip nat translations
 Sh ip nat statistics

Dynamic NAT LAB

Dynamic NAT Lab Pre-Requisite
1. Configure Ip addresses as per the Diagram
2. Configure Default Routing in Router R1
3. Configure Static Routing on ISP router
Router configuration
R-1(config)#ip access-list standard private_ip
R-1(config-std-nacl)#permit 192.168.1.0 0.0.0.255
R-1(config-std-nacl)#exit
R-1(config)#ip nat pool pub_ip 50.1.1.1 50.1.1.200 netmask 255.255.255.0
R-1(config)#ip nat inside source list private_ip pool pub_ip

R-1(config)#int G0/0
R-1(config-if)#ip nat inside

R-1(config)#int s0/0/0
R-1(config-if)#ip nat outside

R-1#sh ip nat translations

R-1#sh ip nat statistics
PAT LAB(Port Address Translation)
Router configuration
R-1(config)#ip access-list standard private_ip
R-1(config-std-nacl)#permit 192.168.1.0 0.0.0.255
R-1(config-std-nacl)#exit
R-1(config)#ip nat pool pub_ip 50.1.1.1 50.1.1. netmask 255.255.255.252
R-1(config)#ip nat inside source list private_ip pool pub_ip overload

R-1(config)#int G0/0
R-1(config-if)#ip nat inside

R-1(config)#int s0/0/0
R-1(config-if)#ip nat outside

R-1#sh ip nat translations

R-1#sh ip nat statistics