François Goffinet

François Goffinet

Votre formateur Cisco

Objectifs de certification

ICND1 100-105

  • 4.1 Décrire les opérations de recherche DNS
  • 4.2 Dépanner des problèmes de connectivité client impliquant DNS
  • 5.3 Configurer et vérifier la configuration initiale d'un périphérique
  • 4.3 Configurer et vérifier DHCP sur un routeur sauf les réservations statiques Server, Relay, Client, TFTP, DNS, and gateway options
  • 4.4 Dépanner des problèmes de connectivité DHCP client et routeur
  • 4.7. Configurer, vérifier et dépanner inside source NAT Static, Pool, PAT
  • 3.2 Interpréter les composants d'une table de routage Prefix, Network mask, Next hop, Routing protocol code, Administrative distance, Metric, Gateway of last resort
  • 3.5 Comparer et mettre en contraste le routage statique et le routage dynamique
  • 3.6 Configurer, vérifier et dépanner le routage statique IPv4 et IPv6 Default route, Network route, Host route, Floating static
  • 5.6 Utilisation des outils Cisco IOS pour dépanner et résoudre des problèmes Ping et traceroute avec l'option extended,Terminal monitor, Log events, Local SPAN

CCNA R&S 200-125

  • 5.1 Décrire les opérations de recherche DNS
  • 5.2 Dépanner des problèmes de connectivité client impliquant DNS
  • 7.4 Configurer et vérifier la configuration initiale d'un périphérique
  • 5.3 Configurer et vérifier DHCP sur un routeur sauf les réservations statiques (Server, Relay, Client, TFTP, DNS, and gateway options)
  • 5.4 Dépanner des problèmes de connectivité DHCP client et routeur
  • 6.2 Décrire les techniques d'atténuation des menaces sur la couche d'accès (802.1x, DHCP snooping, Nondefault native VLAN)
  • 5.6 Configurer, vérifier et dépanner inside source NAT (Static, Pool, PAT)
  • 3.2 Interpréter les composants d'une table de routage (Prefix, Network mask, Next hop, Routing protocol code, Administrative distance, Metric, Gateway of last resort)
  • 3.5 Comparer et mettre en contraste le routage statique et le routage dynamique
  • 3.8 Configurer, vérifier et dépanner le routage statique IPv4 et IPv6 (Default route, Network route, Host route, Floating static)
  • 7.6 Utilisation des outils Cisco IOS pour dépanner et résoudre des problèmes (Ping et traceroute avec l'option extended, Terminal monitor, Log events, Local SPAN)

Lab passerelle Internet

Cet exercice pratique vise à configurer le routeur Cisco d’une toute petite infrastructure qui pourrait ressembler à un bureau distant, un situation domestique, une très petite entreprise. Il s’agit de déployer tous les services que l’on peut utiliser nativement avec une passerelle domestique bon marché : auto-configuration IPv6, DHCP, DNS, NAT44. Il ne manque que le pare-feu.

1. Topologie de lab

Topologie de lab

!!! ajouter l’adresse Link-local.

1.1. Composants

ComposantNomImageRôle
Routeurgatewayvios-adventerprisek9-m.vmdk.SPA.156-2.TPasserelle IPv4 entre l’Internet et le LAN avec services DHCP, DHCPv6, SLAAC, DNS Forwarder.
NuageInternetIntégré au logicielSimule un Internet IPv4
CommutateurSW1Intégré au logicielCommutateur du LAN
OrdinateurPC1ubuntu1604.qcow2PC client TCP/IP dans le LAN
OrdinateurPC2ubuntu1604.qcow2PC client TCP/IP dans le LAN

1.2. Connexions

Périphérique 1InterfaceInterfacePériphérique 2Réseau partagé
Internetnat0G0/1  
gatewayG0/1nat0InternetWAN
gatewayG0/0e0SW1LAN
SW1e0G0/0GatewayLAN
SW1e1ens3PC1LAN
SW1e1ens3PC2LAN

1.3. Plan d’adressage

Une seule interface dispose de paramètres IPv4 et IPv6 statiques : l’interface G0/0 du routeur “gateway”

  • Adresse IPv4 privée : 192.168.1.254 255.255.255.0
  • Adresse IPv6 Link-Local : fe80::1/64
  • Adresse IPv6 privée :fd00:192:168:1::/64

1.4. Services à déployer

En IPv4, le routeur “Gateway” connecte l’Internet et fait office de routeur NAT44. Un service DHCP distribue les adresses dans cette plage de 192.168.1.1 à 192.168.1.199. Celui-ci s’annonce en DHCP comme passerelle et comme résolveur de noms DNS dans le réseau local.

En IPv6, l’autoconfiguration automatique dans état et DHCPv6 Stateful est activé pour le préfixe fd00:192:168:1::/64. Il fait office de passerelle IPv6 et de résolveur DNS.

2. Démarrage du routeur

  Booting `IOSv'

Booted IOSv. Boot args: [/vios-adventerprisek9-m]

Smart Init is enabled

              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706



Cisco IOS Software, IOSv Software (VIOS-ADVENTERPRISEK9-M), Version 15.6(2)T, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 22-Mar-16 16:19 by prod_rel_team




This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco IOSv (revision 1.0) with  with 460033K/62464K bytes of memory.Installed image archive

Processor board ID 9LZIT3F3H77XUDNPC6QD9
4 Gigabit Ethernet interfaces
DRAM configuration is 72 bits wide with parity disabled.
256K bytes of non-volatile configuration memory.
2097152K bytes of ATA System CompactFlash 0 (Read/Write)
0K bytes of ATA CompactFlash 1 (Read/Write)
1024K bytes of ATA CompactFlash 2 (Read/Write)
0K bytes of ATA CompactFlash 3 (Read/Write)

SETUP: new interface GigabitEthernet0/0 placed in "shutdown" state
SETUP: new interface GigabitEthernet0/1 placed in "shutdown" state
SETUP: new interface GigabitEthernet0/2 placed in "shutdown" state
SETUP: new interface GigabitEthernet0/3 placed in "shutdown" state
% Applying bootstrap config from flash2:...
Building configuration...
[OK]


Press RETURN to get started!


*Mar  1 00:00:00.647: %ATA-6-DEV_FOUND: device 0x1F0
*Mar  1 00:00:02.830: %ATA-6-DEV_FOUND: device 0x1F1
*Mar  1 00:00:06.412: %NVRAM-5-CONFIG_NVRAM_NOT_FOUND: NVRAM configuration 'flash:/nvram' could not be found on disk.
*Apr 21 17:37:52.928: %PA-3-PA_INIT_FAILED: Performance Agent failed to initialize (Missing Data License)
*Apr 21 17:37:54.797: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up
*Apr 21 17:37:54.798: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
*Apr 21 17:37:54.798: %LINK-3-UPDOWN: Interface GigabitEthernet0/2, changed state to up
*Apr 21 17:37:54.799: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to up
*Apr 21 17:37:55.170: %CVAC-7-CONFIG_FOUND: Configuration file flash2:/ios_config.txt was found and will be applied to NVRAM.
*Apr 21 17:37:55.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to down
*Apr 21 17:37:55.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to down
*Apr 21 17:37:55.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/2, changed state to down
*Apr 21 17:37:55.847: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/3, changed state to down
*Apr 21 17:37:55.947: %CVAC-7-CONFIG_FOUND: Configuration file flash2:/ios_config.txt was found and will be applied to NVRAM.
*Apr 21 17:37:57.366: %LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to administratively down
*Apr 21 17:37:57.367: %LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to administratively down
*Apr 21 17:37:57.367: %LINK-5-CHANGED: Interface GigabitEthernet0/2, changed state to administratively down
*Apr 21 17:37:57.367: %LINK-5-CHANGED: Interface GigabitEthernet0/3, changed state to administratively down
*Apr 21 17:38:00.884: %GRUB-5-CONFIG_WRITING: GRUB configuration is being updated on disk. Please wait...
*Apr 21 17:38:02.132: %GRUB-5-CONFIG_WRITTEN: GRUB configuration was written to disk successfully.
*Apr 21 17:38:02.132: %CVAC-4-CONFIG_DONE: Configuration generated from file flash2:/ios_config.txt was applied and saved to NVRAM. See 'show running-config' or 'show startup-config' for more details.
*Apr 21 17:38:04.397: %SYS-5-RESTART: System restarted --
Cisco IOS Software, IOSv Software (VIOS-ADVENTERPRISEK9-M), Version 15.6(2)T, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2016 by Cisco Systems, Inc.
Compiled Tue 22-Mar-16 16:19 by prod_rel_team
*Apr 21 17:38:04.420: %CRYPTO-6-ISAKMP_ON_OFF: ISAKMP is OFF
*Apr 21 17:38:04.420: %CRYPTO-6-GDOI_ON_OFF: GDOI is OFF
*Apr 21 17:38:10.517: %PLATFORM-5-SIGNATURE_VERIFIED: Image 'flash0:/vios-adventerprisek9-m' passed code signing verification
**************************************************************************
* IOSv is strictly limited to use for evaluation, demonstration and IOS    *
* education. IOSv is provided as-is and is not supported by Cisco's        *
* Technical Advisory Center. Any use or disclosure, in whole or in part, *
* of the IOSv Software or Documentation to any third party for any         *
* purposes is expressly prohibited except as otherwise authorized by       *
* Cisco in writing.                                                        *
**************************************************************************

3. Configuration IPv4

3.1. Procédure de configuration IPv4

Router#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#! Définition du nom d'hôte
Router(config)#hostname gateway
gateway(config)#! Configuration de l'interface G0/0 (LAN)
gateway(config)#interface GigabitEthernet0/0
gateway(config-if)# description LAN interface
gateway(config-if)# ip address 192.168.1.254 255.255.255.0
gateway(config-if)# ip nat inside
gateway(config-if)# no shutdown
gateway(config-if)# ! Configuration de l'interface G0/1 (WAN)
gateway(config-if)#interface GigabitEthernet0/1
gateway(config-if)# description WAN interface
gateway(config-if)# ip address dhcp
gateway(config-if)# ip nat outside
gateway(config-if)# no shutdown
gateway(config-if)#! Création d'un ACL IPv4 standard nommé "lan"
gateway(config-if)#ip access-list standard lan
gateway(config-std-nacl)# permit 192.168.1.0 0.0.0.255
gateway(config-std-nacl)#! création d'une règle NAT overload
gateway(config-std-nacl)#ip nat inside source list lan interface GigabitEthernet0/1 overload     
gateway(config)#! Activation de la résolution de nom et du service DNS en IPv4
gateway(config)#ip domain lookup
gateway(config)#ip name-server 8.8.8.8
gateway(config)#ip dns server
gateway(config)#! Création du pool DHCP
gateway(config)#ip dhcp pool DHCP-LAN
gateway(dhcp-config)# network 192.168.1.0 255.255.255.0
gateway(dhcp-config)# default-router 192.168.1.254
gateway(dhcp-config)# dns-server 192.168.1.254
gateway(dhcp-config)#!
gateway(dhcp-config)#ip dhcp excluded-address 192.168.1.200 192.168.1.254
gateway(config)#!
gateway(config)#end
gateway#! Enregistrement de la configuration
gateway#wr
Building configuration...
[OK]
*Apr 22 13:58:36.243: %LINEPROTO-5-UPDOWN: Line protocol on Interface NVI0, changed state to up
*Apr 22 13:58:36.875: %SYS-5-CONFIG_I: Configured from console by console
gateway#
*Apr 22 13:58:37.448: %GRUB-5-CONFIG_WRITING: GRUB configuration is being updated on disk. Please wait...
*Apr 22 13:58:38.081: %GRUB-5-CONFIG_WRITTEN: GRUB configuration was written to disk successfully.
gateway#
*Apr 22 13:58:38.104: %LINK-3-UPDOWN: Interface GigabitEthernet0/0, changed state to up
*Apr 22 13:58:38.344: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
*Apr 22 13:58:39.104: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed state to up
gateway#
*Apr 22 13:58:39.344: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up
gateway#
*Apr 22 13:58:52.701: %DHCP-6-ADDRESS_ASSIGN: Interface GigabitEthernet0/1 assigned DHCP address 192.168.122.124, mask 255.255.255.0, hostname gateway

3.2. Configuration résumée IPv4

configure terminal
hostname gateway
interface GigabitEthernet0/0
 description LAN interface
 ip address 192.168.1.254 255.255.255.0
 ip nat inside
 no shutdown
interface GigabitEthernet0/1
 description WAN interface
 ip address dhcp
 ip nat outside
 no shutdown
ip access-list standard lan
 permit 192.168.1.0 0.0.0.255
ip nat inside source list lan interface GigabitEthernet0/1 overload
ip domain lookup
ip name-server 8.8.8.8
ip dns server
ip dhcp pool DHCP-LAN
 network 192.168.1.0 255.255.255.0
 default-router 192.168.1.254
 dns-server 192.168.1.254
ip dhcp excluded-address 192.168.1.200 192.168.1.254
end
wr

4. Configuration IPv6

4.1. Procédure de configuration IPv6

gateway#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
gateway(config)#hostname gateway
gateway(config)#! Activation du routage IPv6
gateway(config)#ipv6 unicast-routing
gateway(config)#! Création du pool DHCPv6
gateway(config)#ipv6 dhcp pool DHCPv6-LAN
gateway(config-dhcpv6)# address prefix FD00:192:168:1::/64
gateway(config-dhcpv6)# dns-server FD00:192:168:1::1
gateway(config-dhcpv6)#! Configuration de l'interface G0/0 (LAN)
gateway(config-dhcpv6)#interface GigabitEthernet0/0
gateway(config-if)# description LAN interface
gateway(config-if)# ipv6 address FE80::1 link-local
gateway(config-if)# ipv6 address FD00:192:168:1::1/64
gateway(config-if)# ipv6 nd managed-config-flag
gateway(config-if)# ipv6 nd other-config-flag
gateway(config-if)# ipv6 dhcp server DHCPv6-LAN
gateway(config-if)# no shutdown
gateway(config-if)#! Configuration de l'interface G0/1 (WAN)
gateway(config-if)#interface GigabitEthernet0/1
gateway(config-if)# description WAN interface
gateway(config-if)# ipv6 address dhcp
gateway(config-if)# no shutdown
gateway(config-if)#!
gateway(config-if)#end
gateway#!
gateway#wr
Building configuration...

*Apr 22 14:04:30.918: %SYS-5-CONFIG_I: Configured from console by console[OK]
gateway#
*Apr 22 14:04:33.009: %GRUB-5-CONFIG_WRITING: GRUB configuration is being updated on disk. Please wait...
*Apr 22 14:04:33.641: %GRUB-5-CONFIG_WRITTEN: GRUB configuration was written to disk successfully.

4.2. Configuration résumée IPv6

configure terminal
hostname gateway
ipv6 unicast-routing
ipv6 dhcp pool DHCPv6-LAN
 address prefix FD00:192:168:1::/64
 dns-server FD00:192:168:1::1
interface GigabitEthernet0/0
 description LAN interface
 ipv6 address FE80::1 link-local
 ipv6 address FD00:192:168:1::1/64
 ipv6 nd managed-config-flag
 ipv6 nd other-config-flag
 ipv6 dhcp server DHCPv6-LAN
 no shutdown
interface GigabitEthernet0/1
 description WAN interface
 ipv6 address dhcp
 no shutdown
end
wr

5. Vérifications IPv4 sur le routeur

5.1. Vérifications IPv4

# show ip interface brief

Interface                  IP-Address      OK? Method Status                Protocol
GigabitEthernet0/0         192.168.1.254   YES NVRAM  up                    up      
GigabitEthernet0/1         192.168.122.204 YES DHCP   up                    up      
GigabitEthernet0/2         unassigned      YES NVRAM  administratively down down    
GigabitEthernet0/3         unassigned      YES NVRAM  administratively down down    
NVI0                       192.168.1.254   YES unset  up                    up

5.2. Interface L2

# show interface g0/0

GigabitEthernet0/0 is up, line protocol is up
  Hardware is iGbE, address is 0059.fedc.e100 (bia 0059.fedc.e100)
  Description: LAN interface
  Internet address is 192.168.1.254/24
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Unknown, Unknown, link type is auto, media type is RJ45
  output flow-control is unsupported, input flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:04, output 00:00:01, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 675
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 7000 bits/sec, 8 packets/sec
  5 minute output rate 130000 bits/sec, 10 packets/sec
     3649 packets input, 428002 bytes, 0 no buffer
     Received 111 Broadcasts (0 IP multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     4533 packets output, 5922027 bytes, 0 underruns
     0 output errors, 0 collisions, 1 interface resets
     37 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

5.3. Interface L3

# show ip interface g0/0

GigabitEthernet0/0 is up, line protocol is up
  Internet address is 192.168.1.254/24
  Broadcast address is 255.255.255.255
  Address determined by non-volatile memory
  MTU is 1500 bytes
  Helper address is not set
  Directed Broadcast forwarding is disabled
  Outgoing access list is not set
  Inbound  access list is not set
  Proxy ARP is enabled
  Local Proxy ARP is disabled
  Security level is default
  Split horizon is enabled
  ICMP redirects are always sent
  ICMP unreachables are always sent
  ICMP mask replies are never sent
  IP fast switching is enabled
  IP fast switching on the same interface is disabled
  IP Flow switching is disabled
  IP CEF switching is enabled
  IP CEF switching turbo vector
  IP multicast fast switching is enabled
  IP multicast distributed fast switching is disabled
  IP route-cache flags are Fast, CEF
  Router Discovery is disabled
  IP output packet accounting is disabled
  IP access violation accounting is disabled
  TCP/IP header compression is disabled
  RTP/IP header compression is disabled
  Policy routing is disabled
  Network address translation is enabled, interface in domain inside
  BGP Policy Mapping is disabled
  Input features: Common Flow Table, Stateful Inspection, Virtual Fragment Reassembly, Virtual Fragment Reassembly After IPSec Decryption, MCI Check
  Output features: NAT Inside, Common Flow Table, Stateful Inspection, NAT ALG proxy
  IPv4 WCCP Redirect outbound is disabled
  IPv4 WCCP Redirect inbound is disabled
  IPv4 WCCP Redirect exclude is disabled

5.4. Table de routage

# show ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override, p - overrides from PfR

Gateway of last resort is 192.168.122.1 to network 0.0.0.0

S*    0.0.0.0/0 [254/0] via 192.168.122.1
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.1.0/24 is directly connected, GigabitEthernet0/0
L        192.168.1.254/32 is directly connected, GigabitEthernet0/0
      192.168.122.0/24 is variably subnetted, 2 subnets, 2 masks
C        192.168.122.0/24 is directly connected, GigabitEthernet0/1
L        192.168.122.204/32 is directly connected, GigabitEthernet0/1

5.5. Ping vers le WAN

#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/16/16 ms

5.6. Ping vers le LAN

#ping 192.168.1.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 3/3/5 ms

5.7. Ping étendu

#ping
Protocol [ip]:
Target IP address: 8.8.8.8
Repeat count [5]:
Datagram size [100]:
Timeout in seconds [2]:
Extended commands [n]: y
Ingress ping [n]:
Source address or interface: 192.168.1.254
Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0x0000ABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 192.168.1.254
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/16/17 ms

5.8. Vérification du NAT

#show ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.122.204:33018 192.168.1.1:33018 5.79.108.34:123  5.79.108.34:123
udp 192.168.122.204:34397 192.168.1.1:34397 83.162.251.163:123 83.162.251.163:123
udp 192.168.122.204:35239 192.168.1.1:35239 5.79.108.34:123  5.79.108.34:123
udp 192.168.122.204:37189 192.168.1.1:37189 178.239.61.38:123 178.239.61.38:123
udp 192.168.122.204:37553 192.168.1.1:37553 5.79.108.34:123  5.79.108.34:123
udp 192.168.122.204:40752 192.168.1.1:40752 82.161.207.47:123 82.161.207.47:123
udp 192.168.122.204:46784 192.168.1.1:46784 83.162.251.163:123 83.162.251.163:123
udp 192.168.122.204:49350 192.168.1.1:49350 178.239.61.38:123 178.239.61.38:123
udp 192.168.122.204:50651 192.168.1.1:50651 178.239.61.38:123 178.239.61.38:123
udp 192.168.122.204:50795 192.168.1.1:50795 5.79.108.34:123  5.79.108.34:123
udp 192.168.122.204:53305 192.168.1.1:53305 82.161.207.47:123 82.161.207.47:123
udp 192.168.122.204:53606 192.168.1.1:53606 5.79.108.34:123  5.79.108.34:123
udp 192.168.122.204:53804 192.168.1.1:53804 83.162.251.163:123 83.162.251.163:123
udp 192.168.122.204:53848 192.168.1.1:53848 82.161.207.47:123 82.161.207.47:123
udp 192.168.122.204:53900 192.168.1.1:53900 83.162.251.163:123 83.162.251.163:123
udp 192.168.122.204:54011 192.168.1.1:54011 82.161.207.47:123 82.161.207.47:123
udp 192.168.122.204:57110 192.168.1.1:57110 178.239.61.38:123 178.239.61.38:123
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.122.204:57993 192.168.1.1:57993 178.239.61.38:123 178.239.61.38:123
udp 192.168.122.204:58081 192.168.1.1:58081 82.161.207.47:123 82.161.207.47:123
udp 192.168.122.204:59517 192.168.1.1:59517 83.162.251.163:123 83.162.251.163:123
udp 192.168.122.204:33414 192.168.1.2:33414 91.148.192.49:123 91.148.192.49:123
udp 192.168.122.204:40216 192.168.1.2:40216 84.245.27.209:123 84.245.27.209:123
udp 192.168.122.204:40258 192.168.1.2:40258 46.243.26.34:123 46.243.26.34:123
udp 192.168.122.204:42136 192.168.1.2:42136 51.15.41.135:123 51.15.41.135:123
udp 192.168.122.204:46245 192.168.1.2:46245 178.239.61.38:123 178.239.61.38:123
udp 192.168.122.204:49456 192.168.1.2:49456 51.15.49.133:123 51.15.49.133:123
udp 192.168.122.204:52624 192.168.1.2:52624 85.255.214.66:123 85.255.214.66:123
udp 192.168.122.204:54325 192.168.1.2:54325 163.172.218.86:123 163.172.218.86:123
udp 192.168.122.204:54694 192.168.1.2:54694 128.199.50.51:123 128.199.50.51:123
udp 192.168.122.204:55131 192.168.1.2:55131 141.138.142.81:123 141.138.142.81:123
udp 192.168.122.204:56678 192.168.1.2:56678 213.154.229.24:123 213.154.229.24:123
udp 192.168.122.204:58935 192.168.1.2:58935 129.250.35.251:123 129.250.35.251:123
udp 192.168.122.204:59107 192.168.1.2:59107 163.172.216.210:123 163.172.216.210:123
Pro Inside global      Inside local       Outside local      Outside global
udp 192.168.122.204:60171 192.168.1.2:60171 213.136.0.252:123 213.136.0.252:123
udp 192.168.122.204:60196 192.168.1.2:60196 217.77.132.1:123 217.77.132.1:123
udp 192.168.122.204:60486 192.168.1.2:60486 87.233.197.123:123 87.233.197.123:123
tcp 192.168.122.204:49673 192.168.1.3:49673 40.77.229.47:443 40.77.229.47:443
tcp 192.168.122.204:49685 192.168.1.3:49685 40.77.229.43:443 40.77.229.43:443
tcp 192.168.122.204:49690 192.168.1.3:49690 40.77.229.36:443 40.77.229.36:443
tcp 192.168.122.204:49703 192.168.1.3:49703 40.77.229.54:443 40.77.229.54:443
udp 192.168.122.204:62735 192.168.1.3:62735 157.56.144.215:3544 157.56.144.215:3544
icmp 192.168.122.204:5 192.168.1.254:5    8.8.8.8:5          8.8.8.8:5

5.9. Access-lists

#show access-lists
Standard IP access list lan
    10 permit 192.168.1.0, wildcard bits 0.0.0.255 (105 matches)

5.10. Baux DHCP

#show ip dhcp binding
Bindings from all pools not associated with VRF:
IP address          Client-ID/	 	    Lease expiration        Type
		    Hardware address/
		    User name
192.168.1.1         0059.fe99.af00          Apr 23 2017 03:02 PM    Automatic
192.168.1.2         0059.fe6d.3b00          Apr 23 2017 03:02 PM    Automatic
192.168.1.3         0100.59fe.c24c.00       Apr 23 2017 03:03 PM    Automatic

6. Vérifications à partir des clients TCP/IPv4

6.1. Paramètres IPv4

user@ubuntu1604:~$ ip -4 add show dev ens3

2: ens3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 192.168.1.2/24 brd 192.168.1.255 scope global ens3
       valid_lft forever preferred_lft forever

user@ubuntu1604:~$ ip route

default via 192.168.1.254 dev ens3
192.168.1.0/24 dev ens3  proto kernel  scope link  src 192.168.1.2

user@ubuntu1604:~$ cat /etc/resolv.conf
#Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
#DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 192.168.1.254

6.2. Vérification de la connectivité

user@ubuntu1604:~$ ping -c 1 192.168.1.254

PING 192.168.1.254 (192.168.1.254) 56(84) bytes of data.
64 bytes from 192.168.1.254: icmp_seq=1 ttl=255 time=3.83 ms

--- 192.168.1.254 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 3.836/3.836/3.836/0.000 ms

user@ubuntu1604:~$ ping -c 1 8.8.8.8

PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=41 time=18.5 ms

--- 8.8.8.8 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 18.576/18.576/18.576/0.000 ms

user@ubuntu1604:~$ ping -c 1 www.google.com
PING www.google.com (172.217.20.68) 56(84) bytes of data.
64 bytes from www.google.com (172.217.20.68): icmp_seq=1 ttl=48 time=12.5 ms

--- www.google.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 12.517/12.517/12.517/0.000 ms

6.3. Vérification L7 résolution de noms DNS

user@ubuntu1604:~$ dig www.google.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> www.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63245
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.google.com.			IN	A

;; ANSWER SECTION:
www.google.com.		290	IN	A	172.217.20.68

;; Query time: 7 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Sat Apr 22 16:24:08 CEST 2017
;; MSG SIZE  rcvd: 48


user@ubuntu1604:~$ dig @8.8.8.8 www.google.com

; <<>> DiG 9.10.3-P4-Ubuntu <<>> @8.8.8.8 www.google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43348
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;www.google.com.			IN	A

;; ANSWER SECTION:
www.google.com.		203	IN	A	172.217.17.68

;; Query time: 20 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Sat Apr 22 16:24:18 CEST 2017
;; MSG SIZE  rcvd: 59

6.4. Vérification de la connectivité L7 HTTP

curl ipinfo.io/ip

6.5. Vérifications ARP

user@ubuntu1604:~$ arp -a

? (192.168.1.254) at 00:59:fe:dc:e1:00 [ether] on ens3

user@ubuntu1604:~$ ping -c 1 192.168.1.1

PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
64 bytes from 192.168.1.1: icmp_seq=1 ttl=64 time=6.63 ms

--- 192.168.1.1 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 6.636/6.636/6.636/0.000 ms

user@ubuntu1604:~$ arp -a

? (192.168.1.1) at 00:59:fe:99:af:00 [ether] on ens3
? (192.168.1.254) at 00:59:fe:dc:e1:00 [ether] on ens3

7. Vérifications IPv6 sur le routeur

8. Vérifications IPv6 à partir des clients

Laisser un commentaire

Vous pourriez aimer aussi

Quiz sur les calculs d’adresse IPv4

moins de 1 minutes de lecture

Deux questions simples sur l’adressage IPv4. Il s’agit de vérifier votre capacité à placer une adresse IP dans une plage d’adresses. A retenter à l’infini !