LearnLinux › LessonPlans › LP

Intermediate & Advanced Cisco Network Device Commands

Hands-on teaching plan with practical examples for Cisco IOS/IOS-XE.

Module 1: VLAN Configuration & Switching

Objectives:

Commands:

vlan [vlan-id]
interface vlan [vlan-id]
switchport mode trunk/access
switchport access vlan [vlan-id]
vtp domain [domain-name]
vtp server/client
vtp version 3

Example Configuration:

            
                configure terminal
                vlan 10
                name Sales
                exit
                interface GigabitEthernet0/1
                switchport mode access
                switchport access vlan 10
                exit
                interface GigabitEthernet0/2
                switchport mode trunk
                switchport trunk allowed vlan 10,20

Exercise 1:

Create VLAN 20 (HR), assign port Gi0/3 to VLAN 20, and configure VTP domain "NETWORKLAB".

Module 2: Routing Protocols (OSPF, EIGRP, BGP)

Objectives:

Commands:

router ospf [process-id]
network [network] area [area-id]
router eigrp [as-number]
router bgp [as-number]
neighbor [ip] remote-as [as-number]
show ip ospf neighbor

Example Configuration:

            
                configure terminal
                router ospf 1
                network 192.168.1.0 0.0.0.255 area 0
                exit
                router bgp 65001
                neighbor 10.0.0.1 remote-as 65002
                network 192.168.2.0 mask 255.255.255.0

Exercise 2:

Configure EIGRP between two routers with AS 100 and advertise 192.168.3.0/24.

Module 3: Advanced Routing

Commands:

ip route [network] [mask] [next-hop]
ip nat inside/outside
ip nat source list [acl] interface [interface] overload
show ip nat translations

Example Configuration:

            
                configure terminal
                interface FastEthernet0/0
                ip nat inside
                exit
                interface FastEthernet0/1
                ip nat outside
                exit
                ip route 0.0.0.0 0.0.0.0 192.168.1.1
                ip access-list extended NAT_ACL
                permit ip 192.168.2.0 0.0.0.255 any

Exercise 3:

Set up static route to 172.16.1.0/24 via 10.10.10.1 and enable NAT.

Module 4: Access Control Lists (ACLs)

Commands:

ip access-list extended [acl-name]
permit/deny [protocol] host/source wildcard
ip access-group [acl-name] in/out
show ip access-lists

Example Configuration:

            
                configure terminal
                ip access-list extended SECURE_ACLS
                permit tcp 192.168.1.0 0.0.0.255 any eq 80
                deny ip any 10.10.10.0 0.0.0.255
                exit
                interface GigabitEthernet0/1
                ip access-group SECURE_ACLS in

Exercise 4:

Create an ACL blocking traffic from 172.16.0.0/16 to all ports except SSH.

Module 5: GRE Tunnels & QoS

Commands:

interface Tunnel [number]
tunnel source [ip]
tunnel destination [ip]
mls qos
class-map [name]
policy-map [name]

Example Configuration:

            
                configure terminal
                interface Tunnel0
                ip address 192.168.255.1 255.255.255.252
                tunnel source 10.0.0.1
                tunnel destination 10.0.0.2
                exit
                class-map match-all VOICE
                match access-group name VOICE_ACL
                policy-map QOS_POLICY
                class VOICE
                priority percent 50

Exercise 5:

Configure a GRE tunnel between two routers with IP 192.168.254.0/30.

Module 6: Network Management

Commands:

snmp-server community [community] RO
ntp server [ip]
logging host [ip]
show snmp
show ntp status

Example Configuration:

            
                configure terminal
                snmp-server community NETWORKLABRO RO
                ntp server 192.168.1.254
                logging host 192.168.1.100

Exercise 6:

Configure NTP with server 10.10.10.254 and set SNMP community "READONLY".

Module 7: Troubleshooting Tools

Commands:

debug ip ospf adj
ping [ip] source [interface]
traceroute [ip]
show ip interface brief
show cdp neighbors

Exercise 7:

Use debug commands to troubleshoot an OSPF neighbor adjacency issue.

Final Assessment

Complete the following tasks:

  1. Configure a VLAN with VTP and verify trunking.
  2. Set up BGP peering between two routers and verify routes.
  3. Implement a GRE tunnel and apply QoS policies.
  4. Create an ACL blocking HTTPS traffic from a subnet.
  5. Configure NTP and verify time synchronization.