Comandos

Question 1

Comandos para habilitar SSH

Answer 1

(config) # hostname “X”
(config) #ip domain-name “Y”
(config) #crypto key generate rsa 1024
(config) #line vty 0 15

(config-line)#login local

(config)#username “Z” password/secret “W”

Question 2

Comandos para habilitar “port-security static”

Answer 2

(config-if)# switchport mode access/trunk

(config-if)# switchport port-security

(config-if)# switchport port-security mac-address “x”

(config-if)# switchport port-security violation protect/restrict/shutdown

Question 3

Comandos para habilitar “port-security sticky”

Answer 3

(config-if)# switchport mode access/trunk

(config-if)# switchport port-security

(config-if)# switchport port-security mac-address sticky

(config-if)# switchport port-security violation protect/restrict/shutdown

Question 4

Comandos para habilitar “port-security maximum”

Answer 4

(config-if)# switchport mode access/trunk

(config-if)# switchport port-security

(config-if)# switchport port-security mac-address maximum “x”

(config-if)# switchport port-security violation protect/restrict/shutdown

Question 5

Comandos necesarios para hacer un puerto de acceso y vlan de voz

Answer 5

(config) # vlan “x”
(config) # vlan “y”

(config-if)# switchport mode access

(config-if)# switchport access vlan “x”

(config-if)# switchport voice vlan “y”

Question 6

Comandos necesarios para configurar un puerto troncala

Answer 6

(config-if)# switchport trunk encapsulation dot1q

(config-if)# switchport mode trunk

Question 7

Comandos para habilitar RIPv2

Answer 7

(config)# router rip

(config-router)# version 2

(config-router)# network 192.168.1.0

(config-router)# network 172.16.0.0

(config-router)# network 10.0.0.0

Question 8

Comandos para habilitar servidor DHCP

Answer 8

(config) # ip dhcp excluded-address x.x.x.x
(config) # ip dhcp pool “X”
(config) # network 192.168.1.0 255.255.255.0
(config) # default-router x.x.x.x
(config) # dns-server x.x.x.x

Question 9

Comando para indicar que el servidor DHCP es remoto(relay)

Answer 9

(config-if)# ip helper-address x.x.x.x

**El pool remoto que coincidir con la IP se la interfaz donde se configura el comando

Question 10

Comando para crear “numbered ACL” y asignarla a un puerto

Answer 10

(config) # access-list “x” permit/deny y.y.y.y wildmask
(config) # access-list “x” permit/deny y.y.y.y wildmask

(config-if)# ip access-group “x” in/out

Question 11

Comando para crear “named ACL” y asignarla a un puerto

Answer 11

(config)# ip access-list standard/extended “X”

(config-acl)# permit/deny “protocol” source src-port destination dst-port

(config-if)# ip access-group “number/name” in/out

Question 12

Comandos para habilitar “NAT estática”

Answer 12

###interfaz 1
(config-if)# ip nat inside

###interfaz 2
(config-if)# ip nat outside

###global command
(config)# ip nat inside source "static" "inside-local" "inside-global"

Question 13

Comandos para habilitar “NAT dinámica”

Answer 13

###interfaz 1
(config-if)# ip nat inside

###interfaz 2
(config-if)# ip nat outside

###global command
(config)# ip nat pool "x" "inside-global inside-global" netmask "w.w.w.w"

(config) # ip nat inside source list “A” pool “x”
(config) # access-list “A” permit “inside-local”

Question 14

Comandos para habilitar “NAT dinámica”

Answer 14

###interfaz 1
(config-if)# ip nat inside

###interfaz 2
(config-if)# ip nat outside

(config) # ip nat inside source list “A” interface G0/0 overload
(config) # access-list “A” permit “inside-local”

Question 15

Comando para habilitar ruteo IPv6

Answer 15

(config)# ipv6 unicast-routing

Question 16

Comando para habilitar CDP

Answer 16

(config)# cdp run

###habilitado por defecto
(config-if)# cdp enable

Question 17

Comando para encriptar contraseñas en texto claro

Answer 17

(config)# service password-encryption

Question 18

Comando para habilitar banner de login

Answer 18

(config)# banner motd/exec/login “lorem ipsum”

Question 19

Comando para definir una ACL con SSH o Telnet

Answer 19

(config)# line vty 0 15

(config-line)# access-class “number/name” in

Question 20

Comando para cambiar el valor exadecimal del registro para boot sin configuración

Answer 20

(config)# config-register 0x2142

Question 21

Comando para cambiar el valor exadecimal del registro para boot ROMMON

Answer 21

(config)# config-register 0x2100

Question 22

Comando para configurar valor normal del registro boot

Answer 22

(config)# config-register 0x2102

Question 23

Comandos para habilitar VTP

Answer 23

(config)# vtp mode server/client/transparent/off

Question 24

Comandos para habilitar PortFast en una sola interfaz

Answer 24

(config-if)# spanning-tree portfast enable

Question 25

Comandos para habilitar bpduguard en una sola interfaz

Answer 25

(config-if)# spanning-tree bpduguard enable

Question 26

Comandos necesarios para habilitar EtherChannel

Answer 26

``` ### interfaz uno (config-if)# channel-group "x" mode on ``` ``` ### interfaz dos (config-if)# channel-group "x" mode on ```

Question 27

Comandos necesarios para habilitar EtherChannel con PAgP

Answer 27

``` ### interfaz uno (config-if)# channel-group "x" mode desirable/auto ``` ``` ### interfaz dos (config-if)# channel-group "x" mode desirable/auto ```

Question 28

Comandos necesarios para habilitar EtherChannel con LACP

Answer 28

``` ### interfaz uno (config-if)# channel-group "x" mode active/pasive ``` ``` ### interfaz dos (config-if)# channel-group "x" mode active/pasive ```

Question 29

Comandos necesarios para configurar VTP

Answer 29

(config) # vtp domain "x" (config) # vtp password "y" (config) # vtp versión 1/2 (config) # vtp mode server/client/transparent/off

Question 30

Comandos necesarios para habilitar OSPF con "network"

Answer 30

(config-router)# network "id-de-red" "wildmask" area "area-id"

Question 31

Comando necesario para habilitar OSPF en una interfaz

Answer 31

(config-if)# ip ospf "process-id" area "area-id"

Question 32

Comando para definir manualmente router-id

Answer 32

(config-router)# router-id "x.x.x.x"

Question 33

Comando para definir una interfaz pasiva con OSPF

Answer 33

(config-router)# passive-interface "G0/0/0"

Question 34

Comandos para habilitar eBGP

Answer 34

``` ##R1 (config)# router bgp "local-ASN" ``` (config-router)# neighbor "x.x.x.x" remote-as "remote-ASN" (config-router)# network 192.168.1.0 255.255.255.0 ``` ##R2 (config)# router bgp "local-ASN" ``` (config-router)# neighbor "x.x.x.x" remote-as "remote-ASN" (config-router)# network 192.168.2.0 255.255.255.0

Question 35

Comandos para habilitar "PPP" en una interfaz serial con autenticación CHAP

Answer 35

(config-if)# encapsulation ppp (config-if)# ppp authentication chap ##R1 (config) # hostname "R1" (config) # username "R2" password "pass"

Question 36

Comandos para habilitar MLPPP

Answer 36

(config)# interface multilink "x" (config-if)# encapsulation ppp (config-if)# ppp multilink (config-if)# ip address x.x.x.x y.y.y.y (config-if)# ppp multilink group "x" (config)# interface serial 0/0/0 (config-if)# encapsulation ppp (config-if)# ppp multilink (config-if)# ppp multilink group "x"

Question 37

Comandos para habilitar GRE over WAN

Answer 37

(config)# interface tunnel "x" (config-if)# ip address x.x.x.x y.y.y.y (config-if)# tunnel source "s0/0/0" (config-if)# tunnel destination "X.X.X.X"

Question 38

Comandos para habilitar PPPoE cliente

Answer 38

(config)# interface dialer "x" (config-if)# ip address negotiated (config-if)# dialer pool "y" (config-if)# encapsulation ppp (config-if)# ppp chap hostname "name" (config-if)# ppp chap password "pass" (config-if)# mtu 1492 ########interfaz física (config)# interface G0/1 (config-if)# pppoe-client dial-pool-number "y" (config-if)# pppoe enable

Question 39

Comando para hacer un puerto independiente en switch L3

Answer 39

(config-if)# no switchport

Question 40

Comando para configurar interfaz de etherChannel

Answer 40

(config-if)# interface port-channel "x"

Question 41

Comando para habilitar HSRP

Answer 41

(config-if)# standby "x" ip "x.x.x.x" (config-if)# standby "x" priority "y" (config-if)# standby "x" preempt (config-if)# standby version 1/2

Question 42

Comandos para habilitar OSPF con IPv6

Answer 42

(config)# ipv6 router ospf "x" (config-router)# router-id x.x.x.x (config-if)# ipv6 ospf "x" area "y"

Question 43

Comandos para habilitar EIGRP con IPv6

Answer 43

(config)# ipv6 router eigrp "ASN" (config-if)# ipv6 eigrp "asn" (config-router)# eigrp router-id x.x.x.x (config-router)# passive-interface G0/0/0

Question 44

Comandos para habilitar ACLs con IPv6

Answer 44

(config)# ipv6 access-list "name" (cconfig-acl)# permit ipv6 x.x

Question 45

Comandos para habilitar SNMP v1 y v2 con trap e inform

Answer 45

(config)# snmp-server community "xxxx" RO/RW ``` ###trap (config)# snmp-server host "x.x.x.x" version 2c "community" ``` ``` ###inform (config)# snmp-server host "x.x.x.x" informs version 2c "community" ``` (config)# snmp-server enable traps

Question 46

Comandos para habilitar SPAN

Answer 46

(config) # monitor session "x" source interface/vlan "y" rx/tx/both (config) # monitor session "x" destination interface "z"