COMANDOS DE SEGURIDAD CCNA 4

R1(config)#enable secret ciscoccna R1(config)#username ccna privilegio 5 passwor

d ciscoccna R1(config)#aaa new-model --- El comando aaa habilita la AAA (autenti
cacin, auto rizacin y contabilidad) globalmente en el router. Esto se utiliza para
conectarse al router. R1(config)#aaa authentication login LOCAL_AUTH local ---Puede crear una lista de autenticacin a la que pueda accederse cuando alguien in
tenta iniciar sesin en el dispositivo despus de aplicarla a las lneas vty y lneas de
consola. La palabra c lave local indica que la base de datos del usuario se enc
uentra almacenada en forma local en el ro uter. R1(config)#line console 0 R1(con
fig-lin)#login authentication LOCAL_AUTH R1(config-lin)#line vty 0 4 R1(config-l
in)#login authentication LOCAL_AUTH R1(config)#service password-encryption ---Para aplicar encriptacin simple a l as contraseas, ingrese el siguiente comando en
el modo de configuracin global: Puede hacer que el router desconecte una lnea que
ha estado inactiva durante un d eterminado perodo de tiempo. Si un ingeniero de
red estaba conectado a un dispositivo de red y tuv o que ausentarse repentinamen
te, este comando desconecta al usuario automticamente despus de un det erminado pe
rodo de tiempo. Los siguientes comandos hacen que la lnea se desconecte despus de 5
minutos. R1(config)#line console 0 R1(config-lin)#exec-timeout 5 0 R1(config-li
n)#line vty 0 4 R1(config-lin)#exec-timeout 5 0 El siguiente comando dificulta l
os intentos de conexin de fuerza bruta. El router bloquea los intentos de conexin
durante 5 minutos si una persona intenta sin xito conectarse 5 veces en 2 minutos
. R1(config)#login block-for 300 attempt 2 within 120 R1(config)#security authen
tication failure rate 5 log R1(config)#router rip R1(config-router)#passive-inte
rface default R1(config-router)#no passive-interface s0/0/0 --- El comando passi
ve-interface impide que los routers enven actualizaciones de enrutamiento a todas
las interfaces, excepto a aquellas que se configuraron para participar en las a
ctualizaciones de enrutamiento. Este comando se ejecuta como parte de la configu
racin RIP. El primer comando coloca todas las interfaces en modo pasivo (la inter
faz slo rec ibe actualizaciones RIP). El segundo comando hace que determinadas in
terfaces regresen del modo pasi vo al modo activo

(mediante el envo y la recepcin de actualizaciones RIP). El primer paso en la segu

ridad de RIP es impedir las actualizaciones RIP inneces arias hacia toda la red.
El prximo paso es proteger las actualizaciones RIP con contraseas. Para ello, pri
m ero se debe configurar la clave que se utilizar. R1(config)#key chain RIP_KEY R
1(config-keychain)#key 1 R1(config-keychain-key)#key-string cisco Para utilizar
la clave, debe configurarse cada interfaz que participe en las act ualizaciones
RIP. stas son las mismas interfaces que se habilitaron anteriormente mediante el
comando no pa ssive-interface. R1 R1(config)#int s0/0/0 R1(config-if)#ip rip aut
hentication mode md5 R1(config-if)#ip rip authentication key-chain RIP_KEY Utili
ce el comando logging para seleccionar la direccin IP del dispositivo al que se e
nviarn los mens ajes SNMP R1(config)#logging 192.168.10.10 El comando logging tra
p establece el nivel de gravedad. El nivel de gravedad inc luye el nivel especif
icado y cualquier otro nivel por debajo de ste (en cuanto a gravedad). Est ablezc
a R1 en el nivel 4 para capturar mensajes con niveles de gravedad 4, 5, 6 y 7. R
1(config)#logging trap warnings 4 Paso 2: Deshabilitar los servicios globales qu
e no se utilizan. La mayora de las redes modernas no necesitan muchos servicios.
Si se deja habilit ados los servicios que no se utilizan, se dejarn los puertos a
biertos que podrn utilizarse para poner en riesgo la red. Deshabilite cada uno de
estos servicios de R1. R1(config)#no service pad R1(config)#no service finger R
1(config)#no service udp-small-server R1(config)#no service tcp-small-server R1(
config)#no ip bootp server R1(config)#no ip http server R1(config)#no ip finger
R1(config)#no ip source-route R1(config)#no ip gratuitous-arps R1(config)#no cdp
run Paso 3: Desactivar los servicios de interfaz que no se utilizan. Estos coma
ndos se ingresan en el nivel de interfaz y deberan aplicarse a cada una de las in
terfaces del R1. R1(config-if)#no ip redirects R1(config-if)#no ip proxy-arp R1(
config-if)#no ip unreachables R1(config-if)#no ip directed-broadcast R1(config-i
f)#no ip mask-reply R1(config-if)#no mop enabled

Mediante funcin AutoSecure, se pueden aplicar a un router las mismas caracterstica

s de seguridad recin aplicadas (excepto la seguridad de RIP) de manera mucho ms rp
ida. Debido a qu e ya se estableci la seguridad de R1 R3#auto secure Puede utiliz
ar el comando dir all para mostrar todos los archivos en el router. R2#dir all D
esde R1, recupere el archivo y gurdelo en la memoria flash. R2#copy tftp flash Da
do que no se desea que los archivos sin utilizar ocupen espacio valioso en la me
moria, se deben eliminar ahora de la memoria flash de R1. Hay que tener mucho cu
idado al hacerlo . El ==========ROUTER 1========== enable configure terminal hos
tname R1 enable secret cisco username cisco password cisco line console 0 passwo
rd cisco login exit ip domain-name chile.cl crypto key generate rsa 1024 ip ssh
version 2 line vty 0 4 transport input ssh login local exit interface serial 0/0
/0 ip address 10.0.59.153 255.255.255.252 clock rate 128000 no shutdown exit int
erface fastethernet 0/1 ip address 10.0.59.161 255.255.255.252 no shutdown exit
interface fastethernet 0/0.91 encapsulation dot1q 91 native ip address 10.0.59.1
29 255.255.255.248 exit interface fastethernet 0/0.10 encapsulation dot1q 10 ip
address 10.0.59.1 255.255.255.128 exit interface fastethernet 0/0.20 encapsulati
on dot1q 20 ip address 10.0.58.1 255.255.255.0 exit interface fastethernet 0/0.3
0 encapsulation dot1q 30 ip address 10.0.56.1 255.255.254.0 exit interface faste
thernet 0/0.40 encapsulation dot1q 40 ip address 10.0.54.1 255.255.254.0 exit in
terface fastethernet 0/0.50 encapsulation dot1q 50 ip address 10.0.52.1 255.255.
254.0 exit

interface fastethernet 0/0.60 encapsulation dot1q 60 ip address 10.0.48.1 255.25

5.252.0 exit interface fastethernet 0/0 no shutdown exit router eigrp 65500 no a
uto-summary network 10.0.48.0 0.0.3.255 network 10.0.52.0 0.0.1.255 network 10.0
.54.0 0.0.1.255 network 10.0.56.0 0.0.1.255 network 10.0.58.0 0.0.0.255 network
10.0.59.0 0.0.0.127 network 10.0.59.128 0.0.0.7 network 10.0.59.160 0.0.0.3 netw
ork 10.0.59.152 0.0.0.3 end wr ==========ROUTER 2========== enable configure ter
minal hostname R2 enable secret cisco username cisco password cisco line console
0 password cisco login exit ip domain-name chile.cl crypto key generate rsa 102
4 ip ssh version 2 line vty 0 4 transport input ssh login local exit interface s
erial 0/0/0 ip address 10.0.59.157 255.255.255.252 clock rate 128000 no shutdown
exit interface serial 0/0/1 ip address 10.0.59.154 255.255.255.252 no shutdown
exit interface fastethernet 0/1 ip address 10.0.59.165 255.255.255.252

no shutdown exit interface fastethernet 0/0.92 encapsulation dot1q 92 native ip

address 10.0.59.137 255.255.255.248 exit interface fastethernet 0/0.70 encapsula
tion dot1q 70 ip address 10.0.44.1 255.255.252.0 exit interface fastethernet 0/0
.80 encapsulation dot1q 80 ip address 10.0.40.1 255.255.252.0 exit interface fas
tethernet 0/0.90 encapsulation dot1q 90 ip address 10.0.36.1 255.255.252.0 exit
interface fastethernet 0/0.100 encapsulation dot1q 100 ip address 10.0.32.1 255.
255.252.0 exit interface fastethernet 0/0.110 encapsulation dot1q 110 ip address
10.0.24.1 255.255.248.0 exit interface fastethernet 0/0 no shutdown exit router
eigrp 65500 no auto-summary network 10.0.24.0 0.0.7.255 network 10.0.32.0 0.0.3
.255 network 10.0.36.0 0.0.3.255 network 10.0.40.0 0.0.3.255 network 10.0.44.0 0
.0.3.255 network 10.0.59.136 0.0.0.7 network 10.0.59.164 0.0.0.3 network 10.0.59
.152 0.0.0.3 network 10.0.59.156 0.0.0.3 end wr ==========ROUTER 3========== ena
ble configure terminal hostname R3 enable secret cisco

username cisco password cisco line console 0 password cisco login exit ip domain
-name chile.cl crypto key generate rsa 1024 ip ssh version 2 line vty 0 4 transp
ort input ssh login local exit interface serial 0/0/1 ip address 10.0.59.158 255
.255.255.252 clock rate 128000 no shutdown exit interface fastethernet 0/1 ip ad
dress 10.0.59.169 255.255.255.252 no shutdown exit interface fastethernet 0/0.93
encapsulation dot1q 93 native ip address 10.0.59.145 255.255.255.248 exit inter
face fastethernet 0/0.120 encapsulation dot1q 120 ip address 10.0.16.1 255.255.2
48.0 exit interface fastethernet 0/0.130 encapsulation dot1q 130 ip address 10.0
.8.1 255.255.248.0 exit interface fastethernet 0/0.140 encapsulation dot1q 140 i
p address 10.0.0.1 255.255.248.0 exit interface fastethernet 0/0 no shutdown exi
t router eigrp 65500 no auto-summary network 10.0.0.0 0.0.7.255 network 10.0.8.0
0.0.7.255 network 10.0.16.0 0.0.7.255 network 10.0.59.144 0.0.0.7 network 10.0.
59.156 0.0.0.3 network 10.0.59.168 0.0.0.3 end

wr ==========SWITCH 1========== enable configure terminal hostname SW1 line cons

ole 0 password cisco login exit line vty 0 15 password cisco login exit enable s
ecret cisco vtp vtp vtp vtp version 2 mode server domain duoc1 password vtp1
vlan 10 name DIEZ exit vlan 20 name VEINTE exit vlan 30 name TREINTA exit vlan 4
0 name CUARENTA exit vlan 50 name CINCUENTA exit vlan 60 name SESENTA exit vlan
91 name ADM1 exit spanning-tree mode rapid-pvst interface fastethernet 0/3 switc
hport mode trunk switchport trunk native vlan 91 exit interface range fastethern
et 0/1 - 2 switchport mode trunk

switchport trunk native vlan 91 spanning-tree link-type point-to-point exit inte

rface range fastethernet 0/4 - 24 switchport mode access switchport access vlan
91 switchport port-security switchport port-security maximum 1 switchport port-s
ecurity violation shutdown shutdown exit interface fastethernet 0/24 switchport
port-security mac-address 0090.0C49.2C12 no shutdown exit interface vlan 91 ip a
ddress 10.0.59.130 255.255.255.248 no shutdown exit ip default-gateway 10.0.59.1
29 end wr ==========SWITCH 2========== enable configure terminal hostname SW2 li
ne console 0 password cisco login exit line vty 0 15 password cisco login exit e
nable secret cisco vtp vtp vtp vtp version 2 mode client domain duoc1 password v
tp1
spanning-tree mode rapid-pvst interface range fastethernet 0/1 - 2 switchport mo
de trunk switchport trunk native vlan 91 spanning-tree link-type point-to-point
exit interface range fastethernet 0/3 - 10 switchport mode access switchport acc
ess vlan 10

switchport port-security switchport port-security maximum 1 switchport port-secu

rity violation shutdown shutdown exit interface range fastethernet 0/11 - 20 swi
tchport mode access switchport access vlan 20 switchport port-security switchpor
t port-security maximum 1 switchport port-security violation shutdown shutdown e
xit interface range fastethernet 0/21 - 24 switchport mode access switchport acc
ess vlan 30 switchport port-security switchport port-security maximum 1 switchpo
rt port-security violation shutdown shutdown exit interface fastethernet 0/22 sw
itchport port-security mac-address 0007.ECE1.17AC no shutdown exit interface fas
tethernet 0/15 switchport port-security mac-address 0006.2ABB.B625 no shutdown e
xit interface fastethernet 0/5 switchport port-security mac-address 0040.0B43.13
C4 no shutdown exit interface vlan 91 ip address 10.0.59.131 255.255.255.248 no
shutdown exit ip default-gateway 10.0.59.129 end wr ==========SWITCH 3==========
enable configure terminal hostname SW3 line console 0 password cisco login exit

line vty 0 15 password cisco login exit enable secret cisco vtp vtp vtp vtp vers
ion 2 mode client domain duoc1 password vtp1
spanning-tree mode rapid-pvst spanning-tree spanning-tree spanning-tree spanning
-tree spanning-tree spanning-tree spanning-tree spanning-tree vlan vlan vlan vla
n vlan vlan vlan vlan 91 priority 4096 10 priority 4096 20 priority 4096 30 prio
rity 4096 40 priority 4096 50 priority 4096 60 priority 4096 1 priority 4096
interface range fastethernet 0/1 - 2 switchport mode trunk switchport trunk nati
ve vlan 91 spanning-tree link-type point-to-point exit interface range fastether
net 0/3 - 10 switchport mode access switchport access vlan 40 switchport port-se
curity switchport port-security maximum 1 switchport port-security violation shu
tdown shutdown exit interface range fastethernet 0/11 - 20 switchport mode acces
s switchport access vlan 50 switchport port-security switchport port-security ma
ximum 1 switchport port-security violation shutdown shutdown exit interface rang
e fastethernet 0/21 - 24 switchport mode access switchport access vlan 60 switch
port port-security switchport port-security maximum 1 switchport port-security v
iolation shutdown shutdown exit interface fastethernet 0/22 switchport port-secu
rity mac-address 0000.0CAA.3E68 no shutdown exit

interface fastethernet 0/15 switchport port-security mac-address 0002.4AE0.5D78

no shutdown exit interface fastethernet 0/5 switchport port-security mac-address
0002.179C.A2A6 no shutdown exit interface vlan 91 ip address 10.0.59.132 255.25
5.255.248 no shutdown exit ip default-gateway 10.0.59.129 end wr ==========SWITC
H 4========== enable configure terminal hostname SW4 line console 0 password cis
co login exit line vty 0 15 password cisco login exit enable secret cisco vtp vt
p vtp vtp version 2 mode server domain duoc2 password vtp2
vlan 70 name SETENTA exit vlan 80 name OCHENTA exit vlan 90 name NOVENTA exit vl
an 100 name CIEN exit vlan 110 name CIENTODIEZ exit

vlan 92 name ADM2 exit interface range fastethernet 0/1 - 3 switchport mode trun
k switchport trunk native vlan 92 exit interface range fastethernet 0/4 - 15 swi
tchport mode access switchport access vlan 70 switchport port-security switchpor
t port-security maximum 1 switchport port-security violation shutdown shutdown e
xit interface range fastethernet 0/16 - 24 switchport mode access switchport acc
ess vlan 80 switchport port-security switchport port-security maximum 1 switchpo
rt port-security violation shutdown shutdown exit interface fastethernet 0/5 swi
tchport port-security mac-address 00D0.97A2.0EE5 no shutdown exit interface fast
ethernet 0/22 switchport port-security mac-address 0090.2BB6.24CC no shutdown ex
it interface vlan 92 ip address 10.0.59.138 255.255.255.248 no shutdown exit ip
default-gateway 10.0.59.137 end wr ==========SWITCH 5========== enable configure
terminal hostname SW5 line console 0 password cisco login exit

line vty 0 15 password cisco login exit enable secret cisco vtp vtp vtp vtp vers
ion 2 mode client domain duoc2 password vtp2
interface range fastethernet 0/1 - 4 switchport mode trunk switchport trunk nati
ve vlan 92 exit interface range fastethernet 0/5 - 15 switchport mode access swi
tchport access vlan 90 switchport port-security switchport port-security maximum
1 switchport port-security violation shutdown shutdown exit interface range fas
tethernet 0/16 - 24 switchport mode access switchport access vlan 100 switchport
port-security switchport port-security maximum 1 switchport port-security viola
tion shutdown shutdown exit interface fastethernet 0/22 switchport port-security
mac-address 0090.2187.B06D no shutdown exit interface fastethernet 0/5 switchpo
rt port-security mac-address 00D0.D3D4.E967 no shutdown exit interface vlan 92 i
p address 10.0.59.139 255.255.255.248 no shutdown exit ip default-gateway 10.0.5
9.137 end wr ==========SWITCH 6========== enable configure terminal

hostname SW6 line console 0 password cisco login exit line vty 0 15 password cis
co login exit enable secret cisco vtp vtp vtp vtp version 2 mode client domain d
uoc2 password vtp2
interface range fastethernet 0/1 - 2 switchport mode trunk switchport trunk nati
ve vlan 92 exit interface range fastethernet 0/3 - 15 switchport mode access swi
tchport access vlan 110 switchport port-security switchport port-security maximu
m 1 switchport port-security violation shutdown shutdown exit interface fastethe
rnet 0/15 switchport port-security mac-address 0001.9715.4AC5 no shutdown exit i
nterface vlan 92 ip address 10.0.59.140 255.255.255.248 no shutdown exit ip defa
ult-gateway 10.0.59.137 end wr ==========SWITCH 7========== enable configure ter
minal hostname SW7 line console 0 password cisco login exit line vty 0 15 passwo
rd cisco login exit

enable secret cisco vlan 120 name CIENTOVEINTE exit vlan 130 name CIENTOTREINTA
exit vlan 140 name CIENTOCUARENTA exit vlan 93 name ADM3 exit spanning-tree vlan
120 root primary interface range fastethernet 0/1 - 3 switchport mode trunk swi
tchport trunk native vlan 93 exit interface range fastethernet 0/4 - 10 switchpo
rt mode access switchport access vlan 120 spanning-tree portfast switchport port
-security switchport port-security maximum 1 switchport port-security violation
shutdown shutdown exit interface range fastethernet 0/11 - 19 switchport mode ac
cess switchport access vlan 130 spanning-tree portfast switchport port-security
switchport port-security maximum 1 switchport port-security violation shutdown s
hutdown exit interface range fastethernet 0/20 - 24 switchport mode access switc
hport access vlan 140 spanning-tree portfast switchport port-security switchport
port-security maximum 1 switchport port-security violation shutdown shutdown ex
it interface fastethernet 0/22 switchport port-security mac-address 00E0.8F18.49
0C no shutdown exit

interface fastethernet 0/15 switchport port-security mac-address 000A.41C8.6330

no shutdown exit interface fastethernet 0/5 switchport port-security mac-address
0030.F287.0EA9 no shutdown exit interface vlan 93 ip address 10.0.59.146 255.25
5.255.248 no shutdown exit ip default-gateway 10.0.59.145 end wr ==========SWITC
H 8========== enable configure terminal hostname SW8 line console 0 password cis
co login exit line vty 0 15 password cisco login exit enable secret cisco vlan 1
20 name CIENTOVEINTE exit vlan 130 name CIENTOTREINTA exit vlan 140 name CIENTOC
UARENTA exit vlan 93 name ADM3 exit spanning-tree vlan 130 root primary interfac
e range fastethernet 0/1 - 2 switchport mode trunk switchport trunk native vlan
93 exit

interface range fastethernet 0/4 - 10 switchport mode access switchport access v

lan 120 spanning-tree portfast switchport port-security switchport port-security
maximum 1 switchport port-security violation shutdown shutdown exit interface r
ange fastethernet 0/11 - 19 switchport mode access switchport access vlan 130 sp
anning-tree portfast switchport port-security switchport port-security maximum 1
switchport port-security violation shutdown shutdown exit interface range faste
thernet 0/20 - 24 switchport mode access switchport access vlan 140 spanning-tre
e portfast switchport port-security switchport port-security maximum 1 switchpor
t port-security violation shutdown shutdown exit interface fastethernet 0/22 swi
tchport port-security mac-address 0001.6444.B7B2 no shutdown exit interface fast
ethernet 0/15 switchport port-security mac-address 00E0.A396.D365 no shutdown ex
it interface fastethernet 0/5 switchport port-security mac-address 0001.63C2.9DD
3 no shutdown exit interface vlan 93 ip address 10.0.59.147 255.255.255.248 no s
hutdown exit ip default-gateway 10.0.59.145 end wr ==========SWITCH 9==========
enable

configure terminal hostname SW9 line console 0 password cisco login exit line vt
y 0 15 password cisco login exit enable secret cisco vlan 120 name CIENTOVEINTE
exit vlan 130 name CIENTOTREINTA exit vlan 140 name CIENTOCUARENTA exit vlan 93
name ADM3 exit spanning-tree vlan 140 root primary interface range fastethernet
0/1 - 2 switchport mode trunk switchport trunk native vlan 93 exit interface ran
ge fastethernet 0/4 - 10 switchport mode access switchport access vlan 120 spann
ing-tree portfast switchport port-security switchport port-security maximum 1 sw
itchport port-security violation shutdown shutdown exit interface range fastethe
rnet 0/11 - 19 switchport mode access switchport access vlan 130 spanning-tree p
ortfast switchport port-security switchport port-security maximum 1 switchport p
ort-security violation shutdown shutdown exit interface range fastethernet 0/20
- 24 switchport mode access switchport access vlan 140 spanning-tree portfast sw
itchport port-security

switchport port-security maximum 1 switchport port-security violation shutdown s

hutdown exit interface fastethernet 0/22 switchport port-security mac-address 00
01.6473.8E80 no shutdown exit interface fastethernet 0/15 switchport port-securi
ty mac-address 00D0.58CB.4C7A no shutdown exit interface fastethernet 0/5 switch
port port-security mac-address 00E0.8FB7.5BD8 no shutdown exit interface vlan 93
ip address 10.0.59.148 255.255.255.248 no shutdown exit ip default-gateway 10.0
.59.145 end wr ==========EQUIPOS========== PC10 IP ADDRESS MASCARA GATEWAY SERV.
DNS PC20 IP ADDRESS MASCARA GATEWAY SERV. DNS PC30 IP ADDRESS MASCARA GATEWAY S
ERV. DNS PC40 IP ADDRESS MASCARA GATEWAY SERV. DNS = = = = = = = = = = = = = = =
= 10.0.59.10 255.255.255.128 10.0.59.1 10.0.59.170 10.0.58.10 255.255.255.0 10.
0.58.1 10.0.59.170 10.0.56.10 255.255.254.0 10.0.56.1 10.0.59.170 10.0.54.10 255
.255.254.0 10.0.54.1 10.0.59.170
PC50 IP ADDRESS = 10.0.52.10 MASCARA = 255.255.254.0

GATEWAY = 10.0.52.1 SERV. DNS = 10.0.59.170 PC60 IP ADDRESS MASCARA GATEWAY SERV
. DNS PC77 IP ADDRESS MASCARA GATEWAY SERV. DNS PC70 IP ADDRESS MASCARA GATEWAY
SERV. DNS PC80 IP ADDRESS MASCARA GATEWAY SERV. DNS PC90 IP ADDRESS MASCARA GATE
WAY SERV. DNS PC100 IP ADDRESS MASCARA GATEWAY SERV. DNS PC110 IP ADDRESS MASCAR
A GATEWAY SERV. DNS PC127 IP ADDRESS MASCARA GATEWAY SERV. DNS PC128 IP ADDRESS
MASCARA GATEWAY SERV. DNS = = = = = = = = = = = = = = = = = = = = = = = = = = =
= = = = = = = = = 10.0.48.10 255.255.252.0 10.0.48.1 10.0.59.170 10.0.59.133 255
.255.255.248 10.0.59.129 10.0.59.170 10.0.44.10 255.255.252.0 10.0.44.1 10.0.59.
170 10.0.40.10 255.255.252.0 10.0.40.1 10.0.59.170 10.0.36.10 255.255.252.0 10.0
.36.1 10.0.59.170 10.0.32.10 255.255.252.0 10.0.32.1 10.0.59.170 10.0.24.10 255.
255.248.0 10.0.24.1 10.0.59.170 10.0.16.7 255.255.248.0 10.0.16.1 10.0.59.170 10
.0.16.8 255.255.248.0 10.0.16.1 10.0.59.170
PC129 IP ADDRESS = 10.0.16.9 MASCARA = 255.255.248.0

GATEWAY = 10.0.16.1 SERV. DNS = 10.0.59.170 PC137 IP ADDRESS MASCARA GATEWAY SER
V. DNS PC138 IP ADDRESS MASCARA GATEWAY SERV. DNS PC139 IP ADDRESS MASCARA GATEW
AY SERV. DNS PC147 IP ADDRESS MASCARA GATEWAY SERV. DNS PC148 IP ADDRESS borrado
accidental de la memoria flash significar que se deber volver a instalar toda la
i magen de IOS para el router. Si el router indica que se borrase la memoria fla
sh (erase flash), signi fica que existe un error. Pocas veces se querr borrar tod
a la memoria flash. La nica ocasin legtima en que est o suceder es cuando se actuali
ce el IOS a una imagen de IOS grande. Si aparece al indicador e rase flash, tal
como se muestra en el ejemplo, DETNGASE DE INMEDIATO. NO presione Intro. Pida ayu
da al instructor DE INMEDIATO. Erase flash: ?[confirm] no R1#delete flash:testserver Delete filename [test-server]? Delete flash:test? [confirm] R1#delete fla
sh:test-router Delete filename [test-router]? Delete flash:test-router? [confirm
]