Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

GNS3 - Create GRE Tunnel Lab Using 3640 IOS

7/6/2021

0 Comments

 
GNS3 - Create GRE Tunnel Lab Using 3640 IOS

This post is a quick sum up how to get GNS3 VM running in your VMWare environment. A basic GRE tunnel lab has been created for demonstrating the configuration. 


Download & Start GNS3 VM

https://ift.tt/3gbeuIN

The GNS3 VM is recommended for most situations when you are using Windows or Mac OS. The GNS3 development team have worked hard to create a lightweight, robust way of creating GNS3 topologies that avoids multiple common issues experienced when using a local install of GNS3.

It is about 1GB file. After unzipped the file, you will get a "GNS3 VM.ova" file, which you can double click on it to import it into your VMWare workstation. 

For better performance, I gave this VM 8G Ram and 4 vCoure CPU. 



Adding Cisco IOS Dynamips Routers

By default, you can add virtual pcs, switches, hub, frame relay switch, nat cloud, atm switch, etc. You will need to manual add cisco ios routers. 

Go to preferences -> Dynamips -> Add IOS router template. 


You can find out which image is best for GNS3: 

https://ift.tt/3qQgdK9



C3620

The c3620 supports up to 2 Network Modules (maximum of 8 Ethernet ports, 32 FastEthernet ports or 8 serial ports). Note that tt shouldn’t be used since the latest available IOS image is very old.

IOS version 12.2.26c#

File name: c3620-a3jk8s-mz.122-26c.bin MD5: dd34b958ad362ef54ba48b187f4c97b4 Minimum RAM: 64MB Proposed idle-PC value: 0x603a8bac


C3640#

The c3640 supports up to 4 Network Modules (maximum of 16 Ethernet ports, 32 FastEthernet ports or 16 serial ports).

IOS version 12.4.25d (Mainline)#

File name: c3640-a3js-mz.124-25d.bin MD5: db9f63ca1b46d18fb835496bfffe608a Minimum RAM: 128MB Proposed idle-PC value: 0x6050b114


From: https://ift.tt/2UskTK0

r Cisco IOS Image Name Size Description Download
1 c1710-bk9no3r2sy-mz.124-23.image 36MB For EVE-NG Download
2 c1700-adventerprisek9-mz.124-25d.image and
c1700-adventerprisek9-mz.124-25d.image.md5sum
55MB For GNS3 &
EVE-NG
Download
3 c2600-adventerprisek9-mz.124-15.T14.image and
c2600-adventerprisek9-mz.124-15.T14.image.md5sum
83MB For GNS3 &
EVE-NG
Download
4 c2691-adventerprisek9-mz.124-15.T14.image and
c2691-adventerprisek9-mz.124-15.T14.image.md5sum
92MB For GNS3 &
EVE-NG
Download
5 c3620-a3jk8s-mz.122-26c.image
and
c3620-a3jk8s-mz.122-26c.image.md5sum
37MB For GNS3 &
EVE-NG
Download
6 c3640-a3js-mz.124-25d.image
and
c3640-a3js-mz.124-25d.image.md5sum
63MB For GNS3 &
EVE-NG
Download
7 c3660-a3jk9s-mz.124-15.T14.image
and
c3660-a3jk9s-mz.124-15.T14.image.md5sum
86MB For GNS3 &
EVE-NG
Download
8 c3725-adventerprisek9-mz.124-15.T14.image and
c3725-adventerprisek9-mz.124-15.T14.image.md5sum
93MB For GNS3 &
EVE-NG
Download
9 c3745-adventerprisek9-mz.124-25d.image and
c3745-adventerprisek9-mz.124-25d.image.md5sum
78MB For GNS3 &
EVE-NG
Download
10 c7200-adventerprisek9-mz.153-3.XB12.image and
c7200-adventerprisek9-mz.153-3.XB12.image.md5sum
125 MB For GNS3 &
EVE-NG
Download
11 c7200-adventerprisek9-mz.152-4.S6.image 89MB For GNS3 &
EVE-NG
Download
12 c7200-adventerprisek9-mz.124-24.T5.image and
c7200-adventerprisek9-mz.124-24.T5.image.md5sum
98MB For GNS3 &
EVE-NG
Download
Above mentioned IOS size is the actual size of image. but it will be show less size when you will download the image. Because files will be download in compressed format


Create a simple GRE Lab topology

R1 and R2 are 3640. 


Create vlan in 3640 switch module:

R1# vlan database
R1(vlan)#show
R1(vlan)#vlan 3
R1(vlan)#exit
R1(config)# interface fastethernet3/11
R1(config-if)# switchport mode access
R1(config-if)# switchport access vlan 3
R1(config-if)# end


Basic GRE configuration on R1 router:


@R1
interface Tunnel1
 ip address 10.102.255.254 255.255.255.0
 ip mtu 1400
 tunnel source Ethernet1/0
 tunnel destination 192.168.3.2
 tunnel path-mtu-discovery
!
interface FastEthernet0/0
 ip address 192.168.100.1 255.255.255.0
 duplex auto
 speed auto
!
interface Ethernet1/0
 ip address 192.168.3.1 255.255.255.0
 half-duplex
!
ip route 192.168.101.0 255.255.255.0 Tunnel1




The Process for Cisco Router Debugging IP Traffic

Note: PLEASE make sure to use this commands very carefully. If there's a lot of traffic between hosts you may crash the router.

1) Turn "on" process switching under both interfaces in the router.

Router(config)#interface e1/0

Router(config-if)#no ip route-cache

Router(config)#interface f0/0

Router(config-if)#no ip route-cache

2) Create an access-list. Define specific traffic you want to monitor between hosts. 

For example:

Router(config)#access-list 199 permit tcp host x.x.x.x eq 

Router(config)#access-list 199 permit tcp host y.y.y.y eq 

3) If you are in a telnet session into the router turn "terminal monitor" on.

Router#term mon

If you are in a console session into the router, then the "logging console" command.

Router(config)#logging console

4)Finally the debug command.

Router#debug ip packet 199 detail

Where 199 is the access-list # we created.

5)Use the "un all" command to turn it off.

Router#un all

Here is a link also where you can find this procedure: Using the Debug  Command. http://www.cisco.com/warp/public/63/ping_traceroute.html#usingdbg

If you turn on "process switching" on only one interface, you will only be able to debug traffic on that particular interface as well.











via Blogger https://ift.tt/3dP6tKP
July 06, 2021 at 09:19AM Network
0 Comments



Leave a Reply.

    Categories

    All
    Architecture
    Blog
    Checkpoint
    Cisco
    Cloud
    CyberArk
    F5
    Fortigate
    Guardium
    Juniper
    Linux
    Network
    Others
    Palo Alto
    Qualys
    Raspberry Pi
    Security
    SIEM
    Software
    Vmware
    VPN
    Wireless

    Archives

    March 2024
    February 2024
    January 2024
    December 2023
    November 2023
    October 2023
    September 2023
    August 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    October 2019
    September 2019
    June 2019
    July 2018
    May 2018
    December 2017
    August 2017
    April 2017
    March 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Print Page:

    RSS Feed

    Email Subscribe
Powered by Create your own unique website with customizable templates.
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org