CCNP Foundational Networking Labs - Lab 1 Complete Guide

📋 Lab 1.1: Cisco Device Familiarization & IOS Navigation

Lab Objectives

Understand Cisco device types and their roles in enterprise networks
Navigate Cisco IOS command-line interface (CLI)
Execute basic show commands to gather device information
Identify device capabilities based on IOS image type
Understand device hardware specifications

Scenario Overview: You are a network technician starting your first day at a mid-sized enterprise. Your supervisor asks you to conduct an inventory of existing network devices and document their specifications, software versions, and capabilities. You'll practice navigating Cisco CLI to gather this critical information.

Equipment Required

Equipment Type	Model (Example)	Quantity	Purpose	Notes
Router	Cisco ISR 4331 or ISR 4000 Series	1	Edge/Branch routing	Can use Cisco vLabs or GNS3 emulation
Switch	Catalyst 3650 or 9300	1	Access layer switching	Physical or emulated device
Console Cable	RJ-45 to DB-9 Serial	2	Initial device access (if physical)	Or use terminal emulation in vLabs
Ethernet Cables	Cat5e or Cat6	2	Device interconnection	Optional if using emulation
Terminal Emulation Software	PuTTY, Tera Term, or SecureCRT	1	Console connection management	For accessing device CLI
Network Documentation Tool	Cisco DNA Center or vLabs	1	Network inventory tracking	Optional: Excel or network documentation software

Step-by-Step Lab Configuration

1. Establish Console Connection to Router

Physical Setup (if using actual hardware):

Connect console cable from router's console port (RJ-45) to your PC's serial port
Set terminal emulation software to: 9600 baud, 8 data bits, 1 stop bit, no parity
Press Enter when connected; you should see a router prompt

For Emulation (GNS3/vLabs):

Open terminal window within the emulation platform
Select the router device
Click "Console" to access CLI

💡 If you're in User Executive mode (>) instead of Privileged mode (#), type enable to escalate privileges.

2. Execute show version Command

The show version command displays comprehensive device information including IOS version, hardware details, and running time.

Router# show version

Expected Output Example:


Cisco IOS XE Software, Version 17.3.1

Router uptime is 2 days, 5 hours, 30 minutes

System returned to ROM by power-on

System image file is "flash:/cat9k_iosxe.17.03.01.SPA.bin"

cisco ISR4331 (ARM) processor (revision A0) with 4194304K bytes of memory

Processor board ID FDO1234567A

4 Virtual Execution Environments

2 Virtual CPU cores

Router booted with ROM image

1 Gigabit Ethernet interfaces

1 Small Form-factor Pluggable (SFP) interfaces

License Level: ipbasek9

License Type: Subscription

Key Information to Document:

IOS Version: Version number and feature set
Uptime: How long device has been running
Model: Router/switch model (e.g., ISR4331, Catalyst 3650)
Memory: DRAM available on device
Processor Board ID: Unique device identifier
Interfaces: Number and types of physical interfaces
License Level: Feature set enabled (IP Base, Advanced IP Services, Enterprise Services)

3. Check Device Inventory

The show inventory command displays all hardware modules installed in the device, including line cards, power supplies, and memory modules.

Router# show inventory

Expected Output Example:


NAME: "Chassis", DESCR: "Cisco ISR4331 Integrated Services Router"

PID: ISR4331, VID: V01, SN: FDO1234567A

NAME: "Power Supply Module 0", DESCR: "ISR4331 Power Supply"

PID: ISR4330-PWR-1.6A, VID: V02, SN: PSU001234

NAME: "Clock FPGA", DESCR: "Clock FPGA Module"

SN: CLK001234

NAME: "GigabitEthernet0/0/0", DESCR: "GigabitEthernet0/0/0"

PID: ISR4331-GE, VID: V01, SN: GE001234

4. Examine Running Configuration

The show running-config command displays the currently active configuration on the device.

Router# show running-config

Key Configuration Elements to Examine:

Hostname: Device name for identification
Interface configurations: IP addresses, descriptions, enabled/disabled status
Routing protocols: EIGRP, OSPF, BGP configurations (if enabled)
Access Control Lists (ACLs): Security policies
AAA settings: Authentication, Authorization, Accounting

Router# show running-config | include hostname

Router# show running-config | include interface

5. View Interface Information

The show interfaces command provides detailed information about all interfaces on the device, including status, bandwidth, and statistics.

Router# show interfaces

Router# show interfaces brief

Router# show interfaces GigabitEthernet 0/0/0

Expected Output Example:


GigabitEthernet0/0/0 is up, line protocol is up (connected)

Hardware is ISR4330-onboard GE, address is a8ab.1234.5678

Internet address is 192.168.1.1/24

MTU 1500 bytes, BW 1000000 Kbit/sec

Encapsulation ARPA, loopback not set

Keepalive set (10 sec)

Half-duplex, 100Mb/s (Negotiated), 100BaseTX

Input queue: 0/75/0 (size/max/drops); Total output drops: 0

Queueing strategy: FIFO

5 minute input rate 0 bits/sec, 0 packets/sec

5 minute output rate 0 bits/sec, 0 packets/sec

6. Repeat Process for Switch Device

Connect to the Catalyst switch and execute the same commands to gather switch-specific information.

Switch# show version

Switch# show inventory

Switch# show flash:

Switch# show vlan brief

Additional Switch-Specific Commands:

Switch# show interfaces switchport

Switch# show mac address-table

Switch# show spanning-tree summary

Lab Deliverables

Device Inventory Report: Comprehensive documentation of all devices with model, IOS version, and capabilities
Configuration Snapshot: Exported running-config from both router and switch
Interface Status Documentation: Current status of all physical and logical interfaces
Hardware Specifications Sheet: CPU, memory, power supply details
Network Diagram: Visual representation of lab topology with device connections

✅ Verification Checklist

Successfully connected to router console
Executed show version and documented IOS version
Identified device model and serial number
Examined license level and feature set
Reviewed running-config and identified key settings
Documented all interface configurations
Repeated process for switch device
Created comprehensive inventory report

⚠️ Common Issues & Troubleshooting:

No Response on Console: Verify baud rate (9600), check cable connection, ensure device is powered on
Cannot Execute Commands: Ensure you're in Privileged mode (#). Type enable if needed
Partial Output: Command output may be long. Use | more to paginate, or | include to filter specific lines

📦 Lab 1.2: Cisco Flash Memory & Image Management

Lab Objectives

Understand Cisco IOS image types and their features
Navigate flash memory using CLI commands
Verify available flash space
Understand boot loader configuration
Prepare for software image upgrades

Scenario Overview: Your organization is planning a software upgrade across all routers and switches. Before proceeding, you need to verify that each device has sufficient flash memory, understand which IOS image type is currently running, and document compatibility requirements for the upgrade.

Equipment Required

Item	Specification	Purpose
Router Device	ISR 4000 Series	Primary device for flash memory inspection
New IOS Image File	.bin file (e.g., cat4k_iosxe.17.03.01.SPA.bin)	For simulating upgrade process
TFTP Server	Tftpd32 or Cisco TFTP Server	Image distribution
Network Connection	Ethernet interface configured	Communication to TFTP server

Cisco IOS Image Types Overview

IOS Image Type	Features Included	Use Case	Typical Size
IP Base	Entry-level Cisco IOS, basic routing, VLAN support	Small branches, entry-level deployment	~150-200 MB
Advanced IP Services	IPv6, Advanced Security (firewall, VPN, SSH), MPLS, Multi-Protocol support	Medium-sized enterprises with advanced routing needs	~200-300 MB
Enterprise Services	Full Cisco IOS Software, all security features, VPN, ATM, Voice services	Large enterprises requiring complete feature set	~300-400 MB
Service Provider Services	MPLS, BGP, advanced carrier-class features, IP Voice VoIP	Service providers and carrier networks	~250-350 MB

Step-by-Step Configuration

1. Check Available Flash Memory

The show flash: command displays the contents of flash memory and available space.

Router# show flash:

Expected Output:


Directory of flash:/

1 -rw- 536870912 Apr 12 2023 12:00:00 +00:00 cat4k_iosxe.17.03.01.SPA.bin

2 drw- 4096 Apr 12 2023 11:00:00 +00:00 .installer

11353194496 bytes total (5234567890 bytes free)

[Output shows: Total flash size = 11.35 GB, Used space, Free space available]

Key Information to Document:

Current IOS Image: Filename and size
Total Flash: Total capacity of flash memory (in bytes)
Used Space: Currently occupied by files
Free Space: Available capacity for new images
Calculate Free Percentage: Free / Total × 100

2. Identify Current IOS Image and Version

Extract the specific IOS image information from show flash and show version output.

Router# show version | include Cisco IOS

Router# show version | include System image

Analysis Points:

Identify feature set (IP Base, Advanced IP Services, Enterprise Services)
Note version number and release date
Document if image is compressed or uncompressed

3. Examine Boot Loader Configuration

The boot loader determines which IOS image loads on device startup. Use show boot to verify configuration.

Router# show boot

Expected Output:


Current Boot Variables:

BOOT variable = flash:cat4k_iosxe.17.03.01.SPA.bin;

Config Register = 0x2102



Boot variable shows the primary IOS image to load



Config Register:

0x2100 = Load from ROM monitor

0x2101 = Load first valid image in flash

0x2102 = Normal operation (load from BOOT variable)

4. Document Memory Upgrade Compatibility

Ensure sufficient flash space exists for the new IOS image. Create an upgrade assessment document.

💡 Flash Space Calculation:
Required Flash = Current Image Size + New Image Size + 10% buffer
Example: Current (500MB) + New (600MB) + 110MB buffer = 1.21GB minimum required

Pre-Upgrade Verification Commands:

Router# dir flash:

Router# show version | include image file

Router# verify /md5 flash:cat4k_iosxe.17.03.01.SPA.bin

5. Clean Up Old/Unnecessary Files (Optional)

If flash space is limited, remove old IOS images or unnecessary files to free up space.

⚠️ Warning: Only delete files if you have verified a backup exists. Never delete the currently running IOS image!

Router# delete flash:old_ios_image.bin

Lab Deliverables

Flash Memory Assessment Report: Total capacity, used space, available space, percentage utilized
IOS Image Documentation: Current version, feature set, filename
Upgrade Compatibility Checklist: Verification that new image will fit in available flash
Boot Configuration Snapshot: Current boot variable and config register settings
Pre-Upgrade Verification Worksheet: MD5 checksums, file sizes, version compatibility

✅ Verification Checklist

Executed show flash: and documented free space
Identified current IOS image name and size
Determined IOS feature set (IP Base, Advanced IP Services, Enterprise Services)
Verified boot configuration with show boot
Calculated available space for new image
Created comprehensive flash management report
Verified MD5 checksum of current image (optional)

🔐 Lab 1.3: Cisco Device Access & Initial Security Configuration

Lab Objectives

Configure basic device access security
Set up console line protection
Enable SSH for secure remote access
Configure privilege levels and user accounts
Enable basic device hardening

Scenario Overview: Your organization requires all network devices to have basic security controls implemented. You must configure console line passwords, enable SSH, and establish privilege levels to restrict unauthorized access to critical network infrastructure.

Basic Device Configuration Workflow

1. Enter Global Configuration Mode

Router# configure terminal

Router(config)# hostname CORP-R1

Router(config)# exit

2. Set Console Line Password

Router(config)# line console 0

Router(config-line)# password SECURE_PASSWORD

Router(config-line)# login

Router(config-line)# exec-timeout 10 0

Router(config-line)# exit

Lab Deliverables

Device Configuration Backup: Running configuration with security settings
Access Control Documentation: User accounts, privilege levels, authentication methods
Security Audit Report: Current access controls and recommendations

✅ Security Configuration Checklist

Configured hostname for device identification
Set console line password and login requirement
Configured exec timeout (10 0 = 10 minutes, 0 seconds)
Enabled SSH for secure remote access (if applicable)
Configured privilege levels for access control
Created user accounts with appropriate permissions
Documented all security settings
Tested access controls and verified functionality

📚 Resources & References

Cisco IOS Command Reference

Command	Purpose	Output Type
`show version`	Display IOS version, uptime, hardware details	Device Information
`show inventory`	List all hardware components and modules	Hardware Details
`show flash:`	Display flash memory contents and available space	Storage Information
`show running-config`	Display active device configuration	Configuration
`show interfaces`	Display detailed interface status and statistics	Interface Details
`show boot`	Display boot loader configuration	Boot Configuration

Recommended Study Materials

Cisco Official Documentation: Cisco IOS XE Configuration Guides
CCNP 350-401 ENCOR: Exam Study Guide - Coverage of enterprise architecture and device management
CCNP 300-410 ENARSI: Exam Study Guide - Advanced routing and service infrastructure
Cisco Learning Network: Community forums and resources
GNS3 Emulation Software: For practice without physical hardware

Understanding IOS Feature Sets

IP Base: Entry-level image with basic routing and switching capabilities
Advanced IP Services: Adds IPv6, Advanced Security (firewall, IPsec VPN, SSH), MPLS, multi-protocol support
Enterprise Services: Full feature set including VoIP, ATM, and comprehensive carrier-class services

🔐 Access Denied

📋 Lab 1.1: Cisco Device Familiarization & IOS Navigation

Lab Objectives

Equipment Required

Step-by-Step Lab Configuration

1. Establish Console Connection to Router

2. Execute show version Command

3. Check Device Inventory

4. Examine Running Configuration

5. View Interface Information

6. Repeat Process for Switch Device

Lab Deliverables

📦 Lab 1.2: Cisco Flash Memory & Image Management

Lab Objectives

Equipment Required

Cisco IOS Image Types Overview

Step-by-Step Configuration

1. Check Available Flash Memory

2. Identify Current IOS Image and Version

3. Examine Boot Loader Configuration

4. Document Memory Upgrade Compatibility

5. Clean Up Old/Unnecessary Files (Optional)

Lab Deliverables

🔐 Lab 1.3: Cisco Device Access & Initial Security Configuration

Lab Objectives

Basic Device Configuration Workflow

1. Enter Global Configuration Mode

2. Set Console Line Password

Lab Deliverables

📚 Resources & References

Cisco IOS Command Reference

Recommended Study Materials

Understanding IOS Feature Sets