Req:
- Private IP Address plan (eg. 192.168.1.0/24)
- Public IP Address plan (eg.100.1.2.3/30)
- Web Server (port 80) IP Address (eg.192.168.1.10)
- Standard NAT Config work properly

All incoming web traffic from the Internet that comes to 100.1.2.3 will be forwarded to 192.168.1.10

hostname CiscoNAT
!
enable secret 5 KjhKJGkj$57JHkkl98KJH
!
ip subnet zero
!
interface FastEthernet0/0
description LAN Interface
ip address 192.168.1.254 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface Serial0
description WAN Interface
ip address 100.1.2.3 255.255.255.248
ip nat outside
ip access-group 101 in
!
ip nat inside source static 192.168.1.10 80 interface Serial0
!
access-list 101 deny ip any host 255.255.255.255
access-list 101 permit tcp any any eq 80
!
line con0
line vty 0 4
login
password cisco
!
end

Software: Hyperterminal
Platform: IBM Compatible
OS: Windows XP
Key: Ctrl-Break

Software: Hyperterminal
Platform: IBM Compatible
OS: Windows 2000
Key: Ctrl-Break

Software: Hyperterminal
Platform: IBM Compatible
OS: Windows 98
Key: Ctrl-Break

Software: SecureCRT
Platform: IBM Compatible
OS: Windows
Key: Ctrl-Break

Software: Minicom
Platform: IBM Compatible
OS: Linux
Key: Ctrl-a f

Software: Dumb Terminal
Platform: IBM
OS:
Key: Break

Software: Z-TERMINAL
Platform: Apple
OS: Mac
Key: Command-b

Quickterm

Quickterm Port Setting

Limitations and Bugs

QuickTerm does not understand any control codes, and will not emulate an ANSI or VT100 terminal. It does accept control code data as valid input, but does not display or otherwise act on unprintable characters. I looked into implementing this, but I don’t think it can be done easily without replacing the NSTextView that makes up the main window with a completely new control class. NSTextView (and its ancestor NSText) seem to be too focused on document-type data to be well adapted to this screen-based application.

QuickTerm only supports a single terminal window, so only one session can be active at a time.

No file transfer protocols are supported, although you could do a text transfer by copying from and pasting to the terminal window.

Preferences are not implemented. If you look at the source code, you’ll see that there is some commented-out code for adjusting the background and font colors. I didn’t finish the implementation.

QuickTerm will not disconnect if a data write is pending on the serial port when hardware flow control is enabled. It will disconnect after the write is done. If it never finishes, the app will hang and have to be force quit.

USB to Serial adapter

USB to Serial adapter can solve this problem. With this “small” device you can create a serial RS232 port with easy and you can use it to access your cisco console via hyperterminal.

Router_A
!
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Router_A
!
resource policy
!
ip subnet-zero
ip cef
!
class-map match-all data
match ip precedence 3
class-map match-all voice
match ip precedence 5
!
policy-map serial
class voice
bandwidth percent 32
set ip precedence 5
class data
bandwidth percent 63
set ip precedence 3
class class-default
fair-queue
random-detect
!
interface FastEthernet0/0
description “LAN A”
ip address 192.168.1.254 255.255.255.0
duplex auto
speed auto
!
interface Serial0/2/0
description “WAN Link to B”
ip address 10.1.1.1 255.255.255.252
service-policy output serial
!
ip classless
ip route 192.168.2.0 255.255.255.0 10.1.1.2
!
line con 0
line vty 0 4
password hidden
login
!
end

Router>
Router>enable
Password:
Router#
Router#config terminal
Router(config)#enable secret new_password_here
Router(config)#exit
Router#copy running start
Router#exit

Requirement:
- Cisco ASA/PIX with 2 network interface
- IP Public/Outside IP Address (ie: 65.1.1.x)
- IP Private/Inside IP Address (ie: 192.168.1.x)
- Next hop/Gateway IP Address (ie: 65.1.1.1)
- PIX/ASA ver.7.x or above

Firewall> enable
Password:
Firewall#
Firewall# config terminal
Firewall(config)# interface Ethernet0
Firewall(config-if)# nameif outside
Firewall(config-if)# security-level 0
Firewall(config-if)# ip address 65.1.1.2 255.255.255.0
Firewall(config-if)# speed 100
Firewall(config-if)# duplex full
Firewall(config-if)# exit

Firewall(config)# interface Ethernet1
Firewall(config-if)# nameif inside
Firewall(config-if)# security-level 100
Firewall(config-if)# ip address 192.168.1.1 255.255.255.0
Firewall(config-if)# speed 100
Firewall(config-if)# duplex full

Firewall(config)# nat (inside) 1 0.0.0.0 0.0.0.0
Firewall(config)# global (outside) 1 65.1.1.3 netmask 255.255.255.224

Firewall(config)# route outside 0.0.0.0 0.0.0.0 65.1.1.1

Requirement:
- PC with TFTP Server that have IOS (IP Address 192.168.1.1 and IOS image file d1600.bin).
- Network connection to Cisco Router.
- Make sure your new IOS is match for your Cisco Router version.

Router>
Router>enable
Password:
Router#
Router#copy tftp flash
Address or name of remote host []? 192.168.1.1
Source filename []? d1600.bin
Destination filename [d1600.bin]?
Accessing tftp://192.168.1.21/d1600.bin…
Erase flash: before copying? [confirm]
Erasing the flash filesystem will remove all files! Continue? [confirm]
Erasing device… eeeeeeeeeeeeeeee …erased
Erase of flash: complete
Loading d1600.bin from 192.168.1.1 (via Ethernet0): !!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
[OK - 3289170/6578176 bytes]
Verifying checksum… OK (0xB6BD)
3289170 bytes copied in 89.272 secs (36956 bytes/sec)
Router#

Finish

Requirement:
- PC with TFTP Server (IP Address 192.168.1.1)
- Network connection to Cisco Router

Router>
Router>enable
 Password:
Router#copy flash tftp
Source filename []? d2600.bin
Address or name of remote host []? 192.168.1.1
Destination filename [d2600.bin]? backup_d2600.bin
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
3289170 bytes copied in 47.668 secs (69982 bytes/sec)
Router#

Finish

Requirement
- Cisco router with ISDN BRI interface
- ISDN line each site
- ISDN NT1

Hostname RouterA
!
enable secret ciscopass
!
username isdnpppuser password 7 isdnppppass
ip subnet-zero
!
isdn switch-type basic-net3
!
interface FastEthernet0
 ip address 192.168.1.254 255.255.255.0
 no shutdown
!
interface BRI0
 ip address 10.1.1.1 255.255.255.252
 encapsulation ppp
 dialer idle-timeout 60
 dialer map ip 10.1.1.2 name isdnpppuser 123456789 <= remote isdn number
 dialer load-threshold 128 either
 dialer-group 1
 isdn switch-type basic-net3
 random-detect
 ppp authentication chap
 ppp multilink
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.2
!
access-list 101 deny ip any host 255.255.255.255
access-list 101 permit any any
!
dialer-list 1 protocol ip list 101
!
line con 0
 exec-timeout 0 0
!
end

===

Hostname RouterB
!
enable secret ciscopass
!
username isdnpppuser password 7 isdnppppass
ip subnet-zero
!
isdn switch-type basic-net3
!
interface FastEthernet0
 ip address 192.168.2.254 255.255.255.0
 no shutdown
!
interface BRI0
 ip address 10.1.1.2 255.255.255.252
 encapsulation ppp
 dialer idle-timeout 60
 dialer map ip 10.1.1.1 name isdnpppuser 987654321 <= remote isdn number
 dialer load-threshold 128 either
 dialer-group 1
 isdn switch-type basic-net3
 random-detect
 ppp authentication chap
 ppp multilink
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.1.1.2
!
access-list 101 deny ip any host 255.255.255.255
access-list 101 permit any any
!
dialer-list 1 protocol ip list 101
!
line con 0
 exec-timeout 0 0
!
end

Activate ASDM and enable http server.

pixfirewall(Config)# asdm image flash:/asdm.bin.
pixfirewall(Config)# http server enable.

Open a connection for your PC. Example your pc IP address is 192.168.1.2

pixfirewall(Config)# http 192.168.1.2 255.255.255.255 inside

Make sure all your config running properly.

pixfirewall(Config)# show running http
http server enabled
http 192.168.1.2 255.255.255.255 inside
pixfirewall(Config)#

Now your Cisco ASA/PIX can be access from your PC.
Make sure your PC and Firewall has connected and open your web browser then enter this address https://192.168.1.1/admin

Router>enable
Password:
Router#config terminal
Router(config)#

For Fast Ethernet 0

Router(config)#interface Fast 0
Router(config-if)#ip address 192.168.1.1 255.255.255.0

And for Serial 0

Router(config)#interface Serial 0
Router(config-if)#ip address 10.11.12.1 255.255.255.252

Yes, finish. Don’t forget to save your config.
Don’t know how to do it? see below.

Router(config-if)#Ctrl-Z
Router#copy running start

Press enter if your router ask some question
Finish.

Requirement:

• Internet connection each sites.
• 2 Cisco router with 1 LAN interface (Ethernet) and 1 WAN interface (Serial).
• IOS with IPSec.
• IP address plan each site network, eg. SIteA 192.168.1.0/24 and SiteB 192.168.2.0/24
• Public IP each site that assigned by your ISP, eg. SiteA 10.10.10.1 and SiteB 11.11.11.1

SITE A

hostname RouterA
!
enable password 123
!
crypto isakmp enable
crypto isakmp identity address
!
crypto isakmp policy 1
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
crypto isakmp key secretkey address 11.11.11.1
!
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac
crypto map cm-cryptomap local-address Serial 0
!
crypto map cm-cryptomap 1 ipsec-isakmp
match address 100
set peer 11.11.11.1
set transform-set cm-transformset-1
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
interface FastEthernet 0
description connected to EthernetLAN
ip address 192.168.1.1 255.255.255.0
!
interface Serial 0
description connected to Internet
crypto map cm-cryptomap
ip address 10.10.10.1 255.255.255.252
!
no access-list 100
access-list 100 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
!
ip route 0.0.0.0 0.0.0.0 Serial 0
!
line console 0
exec-timeout 0 0
password 123
login
!
line vty 0 4
password 123
login
!
end
===

SITE B

hostname RouterB
!
enable password 123
!
crypto isakmp enable
crypto isakmp identity address
!
crypto isakmp policy 1
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
crypto isakmp key secretkey address 10.10.10.1
!
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac
crypto map cm-cryptomap local-address Serial 0
!
crypto map cm-cryptomap 1 ipsec-isakmp
match address 100
set peer 10.10.10.1
set transform-set cm-transformset-1
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
interface FastEthernet 0
description connected to EthernetLAN_1
ip address 192.168.2.1 255.255.255.0
!
interface Serial 0
description connected to Internet
crypto map cm-cryptomap
ip address 11.11.11.1 255.255.255.252
!
no access-list 100
access-list 100 permit ip 192.168.2.0 0.0.0.255 192.168.1.0 0.0.0.255
!
ip route 0.0.0.0 0.0.0.0 Serial 0
!
line console 0
exec-timeout 0 0
password 123
login
!
line vty 0 4
password 123
login
!
end

Requirement:
- 2 units Cisco router with 1 VIC2FXS and 1 WAN interface
- WAN link
- 1 Analog Phone Handset (2 wire) each site
- IOS voice support
- Phone numbering plan, eg. 1001 and 2001

SITE A

hostname RouterA
!
enable password 123
!
interface FastEthernet 0
 no description
 no ip address
 shutdown
!
interface Serial 0
 no shutdown
 description connected to RouterB
 ip address 10.10.10.1 255.255.255.252
 encapsulation hdlc
 ip rtp header-compression
!
voice-port 1/0
 no shutdown
 description connected to Phone (1001)
 comfort-noise
 cptone US
 signal loopStart
!
voice-port 1/1
 no shutdown
 no description
!
dial-peer voice 1 pots
 port 1/0
 destination-pattern 1001
!
dial-peer voice 3 voip
 codec g729r8
 ip precedence 5
 session target ipv4:10.10.10.2
 vad
 destination-pattern 2001
!
ip route 0.0.0.0 0.0.0.0 10.10.10.2
!
line console 0
 exec-timeout 0 0
 password 123
 login
!
line vty 0 4
 password 123
 login
!
end

===

SITE B

hostname RouterB
!
enable password 123
!
interface FastEthernet 0
 no description
 no ip address
 shutdown
!
interface Serial 0
 no shutdown
 description connected to RouterA
 ip address 10.10.10.2 255.255.255.252
 encapsulation hdlc
 ip rtp header-compression
!
voice-port 1/0
 no shutdown
 description connected to Phone_1 (2001)
 comfort-noise
 cptone US
 signal loopStart
!
voice-port 1/1
 no shutdown
 no description
!
dial-peer voice 1 pots
 port 1/0
 destination-pattern 2001
!
dial-peer voice 3 voip
 codec g729r8
 ip precedence 5
 session target ipv4:10.10.10.1
 vad
 destination-pattern 1001
!
ip route 0.0.0.0 0.0.0.0 10.10.10.1
!
line console 0
 exec-timeout 0 0
 password 123
 login
!
line vty 0 4
 password 123
 login
!
end

Requirement:
- Cisco Router with 1 LAN Interface (Ethernet) and 1 WAN Interface (Serial).
- Internet connection.

hostname InternetRouter
!
enable password 123
!
no ip name-server
!
interface Ethernet 0
 description connected to EthernetLAN
 ip address 192.168.1.1 255.255.255.0
 ip nat inside
!
interface Serial 0
 description connected to Internet
 ip address 123.123.123.1 255.255.255.252
 ip nat outside
!
no access-list 1
access-list 1 permit 192.168.1.0 0.0.0.255
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Serial 0 overload
!
ip route 0.0.0.0 0.0.0.0 Serial 0
!
line console 0
 exec-timeout 0 0
 password 123
 login
!
line vty 0 4
 password 123
 login
!
end

Download here:
Old windows platform click here.
Windows XP platform click here.

Example:
Router> enable
Password: [type password and enter]
Router#

disable or exit
Log out from privileged EXEC mode and go to user mode.

Example:
Router# exit
Router>

show running config
Display running configuration.

Example:
Router# show running config

show startup config
Display saved config that load every time cisco startup.

Example:
Router# show startup config

enable secret new password
Create new password to access privileged EXEC mode.

Example:
Router# enable secret mysecretword

configure terminal
Change to Global config mode.
In this mode you can configure entire interface.

Example:
Router# configure terminal
Router(config)#

interface interface name and number
Go to interface setup.

Example:
Router(config)# interface fast 0
Router(config-if)#

ip address ip_number musk_number
Assign an ip address to related interface.

Example:
Router(config-if)#ip address 192.168.10.1 255.255.255.0
Router(config-if)#

no shutdown
Activate related interface.

Example:
Router(config-if)#no shutdown
[message of interface change status appear]

ip route remote_network musk_filter ip_wan_interface_remote_router
Create a static routing. This coomand assign at Global config mode.

Router(config-if)#exit
Router(config)# ip route 192.168.100.0 255.255.255.0 10.10.10.2

copy running start
Saved existing configuration to flash memory.

Router(config)#copy run start
[answer yes for the question]

?
Display all related command. Please do some experiment with this command.

Example:
Router>?
or
Router#?
or
Router#show ?
or
Router#configure ?

Or

 +

No additional accessories needed, with this cable your cisco console can be access and appear in your PC/Windows Hyper Terminal.

Cisco 806, 826, 827, 828, 831, 836 and 837 Series Routers

• Use the power switch in order to turn off the router, and then turn the router back on.
• Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.
• boot#set ios-conf = 142
• boot#boot
  The router reboots, but ignores the saved configuration.
  Type no after each setup question.
• Router>enable
  Once the Router# prompt appears, you are in enable mode.
• Router#copy startup-config running-config
• hostname#configure terminal
• hostname(config)#enable secret your_new_password_here
  Issue the no shutdown command on every interface that you use.
• hostname(config)#config-register 0×2102
• hostname(config)#end
• hostname#copy running-config startup-config
• hostname#reload

Cisco SOHO 76, 77, 78, 91, 96, and 97 Routers.
Cisco 801, 802, 803, 804, 805, 811, and 813 Series Routers.
Cisco 1700, 1800, 2600, 2800, 3600, 3700, 3800 Series Routers.
Cisco 7100, 7200, 7500, 12000 Series Router.

• Use the power switch in order to turn off the router, and then turn the router back on.
• Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.
• rommon 1>confreg 0×2142
  This step bypasses the startup configuration where the passwords are stored.
• rommon 2>reset
  Type no after each setup question.
• Router>enable
  You are in enable mode and should see the Router# prompt.
• Router#copy startup-config running-config 
• Router#configure terminal
• hostname(config)#enable secret your_new_password_here
  Issue the no shutdown command on every interface that you use.
• hostname(config)#config-register 0×2102
• hostname(config)#end
• hostname#copy running-config startup-config
• hostname#reload

Cisco 2000, 2500, 3000, 4000, AccessPro, 7000(RP), AGS+, IGS, STS-10X AS

• Use the power switch in order to turn off the router, and then turn the router back on.
• Press Break or Ctrl-Break on the terminal keyboard within 60 seconds of power up in order to put the router into ROMMON.
• >o/r 0×2142
  Press Enter at Prompt.
  The router reboots, but ignores the saved configuration.
  Type no after each setup question.
• Router>enable
  Once the Router# prompt appears, you are in enable mode.
• Router#copy startup-config running-config 
• Router#configure terminal
• hostname(config)#enable secret your_new_password_here
  Issue the no shutdown command on every interface that you use.
• hostname(config)#config-register 0×2102
• hostname(config)#Ctrl-Z
• hostname#copy running-config startup-config
• hostname#reload

Requirement:
- Cisco router with serial interface (support async mode).
- Analog modem (RS232 interface).
- Serial cable (DB60 to RS232).
- PSTN line.

ROUTER A

hostname Router-A
!
enable password cisco
!
username ciscouser1 password ciscopass
!
chat-script dial “” “atdtT” TIMEOUT 60 CONNECT c
!
interface Ethernet 0
 ip address 10.0.33.250 255.255.255.0
!
interface Serial 0 <= plug modem here
 physical-layer async
 ip address 10.0.253.30 255.255.255.252
 encapsulation ppp
 async dynamic address
 async dynamic routing
 async mode dedicated
 dialer in-band
 dialer idle-timeout 60
 dialer wait-for-carrier-time 200
 dialer map ip 10.0.253.29 name ciscouser1 modem-script dial +10218560620 <= remote number
 dialer-group 1
 peer default ip address 10.0.253.29
 ppp authentication chap pap
!
router eigrp 1
 network 10.0.0.0
!
no ip classless
ip route 10.0.2.0 255.255.255.0 10.0.253.29 150
access-list 103 deny eigrp any host 255.255.255.255
access-list 103 permit ip any any
dialer-list 1 protocol ip list 103
!
line con 0
 line 2
 exec-timeout 0 0
 modem InOut
 modem autoconfigure discovery
 speed 115200
 flowcontrol hardware
!
line vty 0 4
 password cisco
 login
!
end

===

ROUTER B

hostname Router-B
!
enable password cisco
!
username ciscouser2 password ciscopass
chat-script dial “” “atdtT” TIMEOUT 60 CONNECT c
!
interface Ethernet 0
 ip address 10.0.2.251 255.255.255.0
!
interface Serial 0 <= plug modem here
 physical-layer async
 ip address 10.0.253.29 255.255.255.252
 encapsulation ppp
 async dynamic address
 async dynamic routing
 async mode dedicated
 dialer in-band
 dialer idle-timeout 60
 dialer wait-for-carrier-time 200
 dialer map ip 10.0.253.30 name ciscouser1 modem-script dial +10218195240 <= remote number
 dialer-group 1
 peer default ip address 10.0.253.30
 ppp authentication chap pap
!
router eigrp 1
 network 10.0.0.0
!
no ip classless
ip route 10.0.33.0 255.255.255.0 10.0.253.30 150
access-list 103 deny eigrp any host 255.255.255.255
access-list 103 permit ip any any
dialer-list 1 protocol ip list 103
!
line con 0
 line 2
 exec-timeout 0 0
 modem InOut
 modem autoconfigure discovery
 speed 115200
 flowcontrol hardware
!
line vty 0 4
 password cisco
 login
!
end

Below links to cisco simulator vendor,
   Commercial (demo available):
   - RouterSim
   - NetworkSims
   - CertExams
   - Boson

   Freeware:
   - JimSim

Don’t forget to visit this link:
   - Ciscosim

Below is links to some website that can help you to understand the TCP/IP concept. Please go there and never comeback here except you get tcp/ip concept in you brain

1. Tcpipguide
2. Wikipedia
3. YaleEdu

ROUTER-A

hostname Router-A
!
enable password cisco
!
ip cef
!
interface Ethernet 0
ip address 10.10.1.1 255.255.255.0
!
interface Serial0
ip address 10.10.253.1 255.255.255.252
ip load-sharing per-packet
!
interface Serial1
ip address 10.10.253.5 255.255.255.252
ip load-sharing per-packet
!
no ip classless
no ip route-cache
ip route 10.10.2.0 255.255.255.0 Serial0
ip route 10.10.2.0 255.255.255.0 Serial1
!
line con 0
!
line vty 0 4
password cisco
login
!
end

===

ROUTER-B

hostname Router-B
!
enable password cisco
!
ip cef
!
interface Ethernet 0
ip address 10.10.2.1 255.255.255.0
!
interface Serial0
ip address 10.10.253.2 255.255.255.252
ip load-sharing per-packet
!
interface Serial1
ip address 10.10.253.6 255.255.255.252
ip load-sharing per-packet
!
no ip classless
no ip route-cache
ip route 10.10.1.0 255.255.255.0 Serial0
ip route 10.10.1.0 255.255.255.0 Serial1
!
line con 0
!
line vty 0 4
password cisco
login
!
end

ROUTING & SWITCHING
Associate: CCNA/CCENT
Professional: CCNP
Expert: CCIE Routing & Switching

DESIGN
Associate: CCNA & CCDA
Professional: CCDP
Expert: CCDE

NETWORK SECURITY
Associate: CCNA
Professional: CCSP
Expert: CCIE Security

STORAGE NETWORKING
Associate: CCNA
Professional: none
Expert: CCIE Storage Networking

VOICE
Associate: CCNA
Professional: CCVP
Expert: CCIE Voice

Source: Cisco website

Once Hyper Terminal window open, type in a name for connection name (example: Cisco) then click OK.

Under “Connect using” select “Com1″ if you use Com1 otherwise select the appropriate com port, then click OK.

Next,
Set “Bits per second” to 9600
Set “Data Bits” to 8
Set “Parity” to None
Set “Stop Bits” to 1
Set “Flow control” to Hardware

Then click OK and Hyper Terminal screen should appear.

Note: Sometimes cisco console not apear in your hyper terminal screen, try to push enter twice.

You need a console cable to access your cisco console, click here.