# Cisco Networking/CCENT/Remote Management

This lesson covers remote management, including over WANs with serial connections.

## Objectives and Skills

Objectives and skills for the WANs portion of Cisco CCENT certification include:
* Select the components required to meet a given network specification
* Predict the data flow between two hosts across a network
* Configure and verify utilizing the CLI to set basic Router configuration
** Console & VTY logins
** Interface IP Address
*** loopback
* Configure and verify initial switch configuration including remote access management
* Verify network status and switch operation using basic utilities such as
** ping
** telnet
** SSH

## Readings

* Wikipedia: Out-of-band management
* Wikipedia: Wide area network
* Cisco: Telnet, Console and AUX Port Passwords on Cisco Routers Configuration Example
* Cisco: Configuring Secure Shell on Routers and Switches Running Cisco IOS
* Cisco: WAN Technologies

## Multimedia

* YouTube: Setting Console and VTY Passwords
* YouTube: Router Configuration
* YouTube: Configure the Serial Interface of a Cisco Router
* YouTube: SSH and CLI Tips

## Examples
### Line Configuration
#### show line

To display parameters of a terminal line, use the show line command in EXEC mode.

#### line

To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.

#### Command Sequence

A command sequence to configure line access with passwords might be similar to the following.
A command sequence to configure line access with usernames and passwords might be similar to the following.

### Interface Configuration
#### show ip interface

To display the usability status of interfaces that are configured for IP, use the show ip interface command.

#### show ip interface brief

To display the usability status of interfaces configured for various IP addresses, use the show ip interface brief command in privileged EXEC mode.

#### shutdown

Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface.

#### ip address

To assign an IP address and subnet mask to an interface, use the ip address command.

#### interface loopback

To specify a loopback interface and enter interface configuration mode, use the interface loopback in global configuration mode. A loopback interface is a virtual interface that is always up and allows selected protocols to stay up even if other interfaces are down.

#### clock rate

To configure the clock rate for the hardware connections on serial interfaces to an acceptable bit rate, use the clock rate command in interface configuration mode. The desired clock rate, in bits per second (bps) may be: 1200, 2400, 4800, 9600, 19200, 38400, 56000, 64000, 72000, 125000, 148000, 250000, 500000, 800000, 1000000, 1300000, 2000000, 4000000, or 8000000.

#### bandwidth

To set and communicate the current bandwidth value for an interface to higher-level protocols, use the bandwidth command in interface configuration mode.

#### encapsulation

To set the encapsulation method used by the interface, use the encapsulation command in interface configuration mode.

#### Command Sequence

A command sequence to assign interface ip addresses would be similar to the following.

### SSH Configuration
#### crypto key generate rsa

To generate Rivest, Shamir, and Adelman (RSA) key pairs, use the crypto key generate rsa command in global configuration mode.

#### ip ssh version

To specify the version of Secure Shell (SSH) to be run on a router, use the ip ssh version command in global configuration mode. If this command is not configured, SSH operates in compatibility mode, that is, Version 1 and Version 2 are both supported.

#### transport input

To define which protocols to use to connect to a specific line of the router, use the transport input command in line configuration mode.

#### Command Sequence

A command sequence to configure SSH access might be similar to the following.

### Status
#### ping

To diagnose basic network connectivity on a variety of networks, use the ping privileged EXEC command.

### Remote Management
#### telnet

To log in to a host that supports Telnet, use the telnet command in EXEC mode.

#### ssh

To start an encrypted session with a remote networking device, use the ssh user EXEC command.

## Activities

* Configure router aux line password security.
** Add a router to a new GNS3 project and start the device.
** Open the console for the router and practice using the following commands.
*** enable
*** configure terminal
*** line aux 0
*** password
*** login
*** exit
** Verify the configuration using the following command.
*** show running-config
** Exit the router console session and open a console on the aux line to test the configuration.
* Configure router IP addresses.
** Add a router to a new GNS3 project and start the device.
** Set the router IP addresses and subnet masks using the following commands.
*** R1 FastEthernet0/0: 192.168.1.1 255.255.255.0
*** R1 FastEthernet0/1: 192.168.2.1 255.255.255.0
*** enable
*** configure terminal
*** show ip interface brief
*** interface <interface>
*** ip address <address> <subnet>
*** no shutdown
*** exit
** Verify the configuration using the following commands.
*** show running-config
*** show ip interface brief
* Connect a second router to the first router from above and configure IP addresses.
** Add a router to the GNS3 project above and start the device.
** Add a link to connect the following.
*** R1 FastEthernet0/0 <-> R2 FastEthernet0/0
** Set the following IP addresses and subnet masks.
*** R2 FastEthernet0/0: 192.168.1.2 255.255.255.0
*** R2 FastEthernet0/1: 192.168.3.1 255.255.255.0
** If using serial ports for the connection, use the following commands if necessary.
*** clock rate
*** encapsulation
** Verify the configuration using the following commands on both routers.
*** show ip interface brief
*** ping
* Configure router vty username and password security.
** Use the routers from above and practice using the following commands on both routers.
*** enable
*** configure terminal
*** username
*** line vty 0 4
*** login local
*** exit
** Verify the configuration using the following command on both routers.
*** show running-config
** Test the configuration using the following command to remotely manage one router from the other.
*** telnet
* Configure router SSH access.
** Use the routers from above and practice using the following commands on both routers.
*** enable
*** configure terminal
*** hostname
*** ip domain-name
*** crypto key generate rsa
*** ip ssh version 2
*** line vty 0 4
*** transport input ssh
** Verify the configuration using the following command on both routers.
*** show running-config
** Test the configuration using the following command to verify that telnet access is no longer supported.
*** telnet
** Test the configuration using the following command to remotely manage one router from the other.
*** ssh

## Lesson Summary

* Cisco IOS supports line connections for the console (CTY), auxiliary port (AUX), and virtual ports (VTY).
* Console ports are used for direct local system access using a console terminal.
* Auxiliary ports are used for out-of-band management through a modem connection.
* Virtual lines are used for inbound Telnet or SSH connections over a network connection.
* Historically, serial ports were used to support WAN connections over a variety of technologies, including: Frame Relay, High-Speed Serial Interface, Integrated Services Digital Network, Point-to-Point Protocol, Switched Multimegabit Data Service, Synchronous Data Link Control and Derivatives, X.25, and Digital Subscriber Line. Many WAN connectivity devices now support direct Ethernet connections rather than requiring serial ports.
* To display parameters of a terminal line, use the show line command in EXEC mode.
* To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.
* To display the usability status of interfaces that are configured for IP, use the show ip interface command.
* To display the usability status of interfaces configured for various IP addresses, use the show ip interface brief command in privileged EXEC mode.
* Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface.
* To assign an IP address and subnet mask to an interface, use the ip address command.
* To specify a loopback interface and enter interface configuration mode, use the interface loopback command in global configuration mode.
* To configure the clock rate for the hardware connections on serial interfaces to an acceptable bit rate, use the clock rate command in interface configuration mode.
* To set and communicate the current bandwidth value for an interface to higher-level protocols, use the bandwidth command in interface configuration mode.
* To set the encapsulation method used by the interface, use the encapsulation command in interface configuration mode.
* To generate Rivest, Shamir, and Adelman (RSA) key pairs, use the crypto key generate rsa command in global configuration mode.
* To specify the version of Secure Shell (SSH) to be run on a router, use the ip ssh version command in global configuration mode.
* To define which protocols to use to connect to a specific line of the router, use the transport input command in line configuration mode.
* To diagnose basic network connectivity on a variety of networks, use the ping privileged EXEC command.
* To log in to a host that supports Telnet, use the telnet command in EXEC mode.
* To start an encrypted session with a remote networking device, use the ssh user EXEC command.

## Key Terms
### out-of-band management

    The use of a dedicated channel for managing network devices.

### Secure Shell (SSH)

    A cryptographic network protocol to allow remote login and other network services to operate securely over an insecure network.

### Telnet

    A session layer protocol used on the Internet or local area networks to provide a bidirectional interactive text-oriented communication facility using a virtual terminal connection.

## Review Questions

* Cisco IOS supports line connections for _____. Cisco IOS supports line connections for the console (CTY), auxiliary port (AUX), and virtual ports (VTY).
* Console ports are used for _____. Console ports are used for direct local system access using a console terminal.
* Auxiliary ports are used for _____. Auxiliary ports are used for out-of-band management through a modem connection.
* Virtual lines are used for _____. Virtual lines are used for inbound Telnet or SSH connections over a network connection.
* Historically, serial ports were used to support WAN connections over a variety of technologies, including: _____. Many WAN connectivity devices now support _____ rather than requiring serial ports. Historically, serial ports were used to support WAN connections over a variety of technologies, including: Frame Relay, High-Speed Serial Interface, Integrated Services Digital Network, Point-to-Point Protocol, Switched Multimegabit Data Service, Synchronous Data Link Control and Derivatives, X.25, and Digital Subscriber Line. Many WAN connectivity devices now support direct Ethernet connections rather than requiring serial ports.
* To display parameters of a terminal line, use _____. To display parameters of a terminal line, use the show line command in EXEC mode.
* To identify a specific line for configuration and enter line configuration collection mode, use _____. To identify a specific line for configuration and enter line configuration collection mode, use the line command in global configuration mode.
* To display the usability status of interfaces that are configured for IP, use _____. To display the usability status of interfaces that are configured for IP, use the show ip interface command.
* To display the usability status of interfaces configured for various IP addresses, use _____. To display the usability status of interfaces configured for various IP addresses, use the show ip interface brief command in privileged EXEC mode.
* Use the _____ interface configuration command to disable an interface. Use the _____ form of this command to restart a disabled interface. Use the shutdown interface configuration command to disable an interface. Use the no form of this command to restart a disabled interface.
* To assign an IP address and subnet mask to an interface, use _____. To assign an IP address and subnet mask to an interface, use the ip address command.
* To specify a loopback interface and enter interface configuration mode, use _____. To specify a loopback interface and enter interface configuration mode, use the interface loopback command in global configuration mode.
* To configure the clock rate for the hardware connections on serial interfaces to an acceptable bit rate, use _____. To configure the clock rate for the hardware connections on serial interfaces to an acceptable bit rate, use the clock rate command in interface configuration mode.
* To set and communicate the current bandwidth value for an interface to higher-level protocols, use _____. To set and communicate the current bandwidth value for an interface to higher-level protocols, use the bandwidth command in interface configuration mode.
* To set the encapsulation method used by the interface, use _____. To set the encapsulation method used by the interface, use the encapsulation command in interface configuration mode.
* To generate Rivest, Shamir, and Adelman (RSA) key pairs, use _____. To generate Rivest, Shamir, and Adelman (RSA) key pairs, use the crypto key generate rsa command in global configuration mode.
* To specify the version of Secure Shell (SSH) to be run on a router, use _____. To specify the version of Secure Shell (SSH) to be run on a router, use the ip ssh version command in global configuration mode.
* To define which protocols to use to connect to a specific line of the router, use _____. To define which protocols to use to connect to a specific line of the router, use the transport input command in line configuration mode.
* To diagnose basic network connectivity on a variety of networks, use _____. To diagnose basic network connectivity on a variety of networks, use the ping privileged EXEC command.
* To log in to a host that supports Telnet, use _____. To log in to a host that supports Telnet, use the telnet command in EXEC mode.
* To start an encrypted session with a remote networking device, use _____. To start an encrypted session with a remote networking device, use the ssh user EXEC command.

## Assessments

* Flashcards: Quizlet: CCENT - Remote Management
* Quiz: Quizlet: CCENT - Remote Management

## See Also

* SSH