CCNA6-5

The IP Routing Process 357
I clicked Finish, and the commands were uploaded to my R3 router. (I’m going to configure
both the F0/0 and F0/1 interfaces the same way.)
After choosing the FastEthernet 0/1 interface from the same location from where I
started to configure the s0/0/1 interface. I chose Create New Connection and was taken
to the LAN Wizard.
358 Chapter 6  IP Routing
The LAN Wizard allows you to either choose straight routing (which is what we want
to do here) or configure 802.1Q trunking, which I’ll discuss in detail in Chapter 9, “Virtual
LANs.” I configured the IP address and mask and then clicked Next.
What’s cool about the SDM at this point is that it would build a DHCP server for this LAN
if I wanted it too. Man, this is easy.
The IP Routing Process 359
Since I accidentally entered the wrong IP address for F0/1, the only way to change it now
is to choose Configure and Edit Interface/Connection in the SDM, or use the CLI.
From here, I can double-click on the FastEthernet 0/1 interface and change the IP address.
After using the LAN Wizard to set up F0/0, I had to save the configuration and then reconfigure
my PC into the right network and reconnect to SDM to verify my configuration.
We’re good—R3 is now configured! Even though my console and VTY password get configured
automatically when I set up the user todd, I still had to choose Configure and then
Additional Tasks and then Router Properties to set the hostname and enable secret password.
871W Configuration
Although I can configure the 871 router with SDM, I’ll configure it using the CLI. First, I need
to erase the default configuration and reload it, as I did with the other routers (except R3).
Router>en
Router#config t
Router(config)#hostname 871W
871W(config)#int vlan 1
871W(config-if)#ip address 10.1.11.2 255.255.255.0
360 Chapter 6  IP Routing
871W(config-if)#no shut
871W(config-if)#int dot11radio 0
871W(config-if)#ip address 10.1.12.1 255.255.255.0
871W(config-if)#no shut
871W(config-if)#ssid R3WLAN
871W(config-if-ssid)#guest-mode
871W(config-if-ssid)#authentication open
871W(config-if-ssid)#infrastructure-ssid
871W(config-if-ssid)#line con 0
871W(config-line)#password console
871W(config-line)#logging sync
871W(config-line)#exec-timeout 0 0
871W(config-line)#exit
871W(config)#line vty 0 ?
<1-4> Last Line number

871W(config)#line vty 0 4
871W(config-line)#password telnet
871W(config-line)#login
871W(config-line)#ip dhcp pool R3WLAN
871W(dhcp-config)#network 10.1.12.0 255.255.255.0
871W(dhcp-config)#default-router 10.1.12.1
871W(dhcp-config)#exit
871W(config)#ip dhcp excluded-address 10.1.12.1
871W(config)#exit
871W#copy run start
Destination filename [startup-config]?[enter]
Building configuration...
[OK]
871W#
The 871W has a four-port switch, which means that you’ve got to place the IP address
under the management VLAN interface. You just can’t get away with simply putting IP
addresses on layer 2 switch interfaces.
To be totally honest, I think this was a faster configuration than using SDM. But I guess,
in production, the SDM with HTTPS would really be a more secure way to administer the
router. And as promised, I’ll show you soon (in Chapter 12) why using SDM is the easier way
to go when you want to set up wireless security.
Let’s take a look at the routing table now:
871W#sh ip route
10.0.0.0/24 is subnetted, 2 subnets
The IP Routing Process 361
C 10.1.11.0 is directly connected, Vlan1
C 10.1.12.0 is directly connected, Dot11Radio0
We have both our networks showing directly connected. Let’s configure our last device,
and then we’ll start configuring routing.
1242AP Configuration
Configuring the 1242AP is a bit different because it’s an access point (again, think hub), not
a router. I’ll configure this device from the CLI, but you can use an HTTP interface as well.
But you can’t use SDM. The HTTP interface will be easier to use when we start adding security
and when we get into some more complex configurations.
Check out the output:
ap>en
Password:
ap#config t
ap(config)#hostname 1242AP
1242AP(config)#enable secret todd
242AP(config)#int dot11Radio 0
1242AP(config-if)#description CORPWLAN
1242AP(config-if)#no shutdown
1242AP(config-if)#ssid CORPWLAN
1242AP(config-if-ssid)#guest-mode
1242AP(config-if-ssid)#authentication open
1242AP(config-if-ssid)#infrastructure-ssid
1242AP(config-if-ssid)#exit
1242AP(config-if)#exit
1242AP(config)#line con 0
1242AP(config-line)#password console
1242AP(config-line)#login
1242AP(config-line)#logging synchronous
1242AP(config-line)#exec-timeout 0 0
1242AP(config-line)#exit
1242AP(config)#line vty 0 ?
<1-15> Last Line number

1242AP(config)#line vty 0 15
1242AP(config-line)#password telnet
1242AP(config-line)#login
1242AP(config-line)#int bvi 1
1242AP(config-if)#ip address 10.1.1.2 255.255.255.0
1242AP(config-if)#no shut
1242AP(config-if)#exit