Hi there.
This might have that here again.
So in this lecture, we have to do some physical security on the microplate crop.
So my lab is still the same.
I didn't change anything.
Still my router connected to my PC on his interface Ethernet too.
And we need now to start working on making the physical security on the micro crop.
So as you can see here, we have a lot of arguments.
Let's start with both.
Number one vault.
Number one, change the name of the router to rocker one.
So by default, the rocker has an identity or a name, which is micro.
It's always better that you change the name to put it the name that you want to.
I normally what I do for my customers, I say that this dropper is and for example, flaw number two
and it is for the marketing department.
So I just make something like marketing fraud to and then I can put for example the room number.
So that's something how I can normally put it the name for the rafters just to remember what the shocker
is.
In case you have many rafters in an organization or a company, then you can identify where the relative
is.
But for now, just to make it simple, we are going to make the name as our one.
So let's go directly to the one box and how to do that.
We just go to system and then we go to our identity and we can make it R one.
So once you do that, you can see here the name has changed to R1 if you want to use the command line,
that's possible.
So what you can do, you can just write here system identity, set, name equal, for example, let's
change it now to R2.
So once you do that, look, the name has changed to are two.
Now let's put it back around because that's what is needed for this box.
But number one is dump whatever to use safe mode on one box and on the command line.
What does it mean safe mode?
And that's something we can see it over here.
If we go to the router, you can see we have here safe mode.
So what is safe?
What exactly safe mode is just in case.
For example, you are doing some configuration on the router and you are not sure if this configuration
will be good for your router.
So say that for example, you are sitting at home and someone told you that my brother is not working
well.
Please log in and try to check if there is any problem.
So you want to be sure that in case you do some configuration from home, you don't lose connectivity
to the microcontroller.
Because if you lose connectivity, how can you continue your work?
So what you can do, you just can click on the safe mode and do the changes that you want in case you
lose your connectivity to the mechanic.
Rather so the mechanic itself, because it has the safe mode enabled, it will revert back to the configuration
which was on the router before you made the changes.
So once you make safe mode and you made the changes, starting from the point where you click on safe
mode and you were doing the changes.
So all of those, in case you lose connectivity to the relative so you don't have connection to the
wind box anymore, for example, then all of those configuration that you have made there will be wiped
and you will go back to the initial configuration that was on the make the problem very important,
especially when you are working on firewall because sometimes one filter rule that you are doing may
cause you to lose your connectivity to the microliter.
And if you don't have anyone who is on site able to assist you, then your customers had a big problem.
That's why I highly advise you always click on Save More.
So for this, let me show you how you can do that.
Let's do it.
Very simple.
So I now clicking on safe mode I look now the drop name as R1 let's change the router name.
We go to system identity, we make it R2.
All right.
So at this moment, the routing name is R2.
Very good.
So we made the change that we will now say that, for example, we lost connectivity, but with the
change, of course, changing the name will not let you lose the connectivity to the thereafter.
But let's imagine that we made a filter rule and we lost the connectivity.
Then that means the one box is disconnected now the other is router two, the name attached.
If we make this connect erasure, you are a safe mode.
Quitting under all changes.
Yes.
So we lost connectivity.
Now if we go back to the Mark Decatur loop, the name has gone to R1 again.
So you can see R2 is not dead because we had the safe mode to enable and because we lost connectivity
to the rumble, then that's why it has to be reverted back to R1.
So that's something very nice to do it on the one box.
But if you are working on the command line, I will show you also on the command line how you can do
that.
On a command line to make save mode, you have to make control with x, so control x she wants should
make console x.
You are on the safe mode.
Now let's change the name again to R2 system identity set name equals.
R2.
So now that name has changed to R2.
Now, once you lose connectivity to the command line, then in this case you have the drop of name back
to or after one, because it believed that after that you lost connectivity to the command line.
That means you lost connectivity to the Raptors.
How are we going to stop this terminal?
You can do control D, for example.
Look now is relative to if we macro control D, it's back to our one.
You can see that.
So that's very important that you always use safe mode whenever you are working remotely and you are
not having anyone who is having a direct contact to the mechanics of the show.
In case you lose connectivity, you are a big problem.
So that's why I always recommend to use the safe mode, make step by step, make your first configuration
in safe mode.
See if it's working.
If it's working, then remove the save mode, then put the safe mode again to do the second step.
And like this, you will be building up your configuration until you are sure that everything is working.
Then you remove the save mode and then to your other with the default configuration.
Both number two is done.
Path number three check what commands you have already written and thereafter.
All right.
So also, if we go to the router, we can see what we have done up to now.
We didn't do a match which were just changing the names, but how can we know what commas we have written
here?
So you can just go here and say it's just a story print.
So you can see with system history print.
We see that this is what you are doing.
So changing the name.
That's most of the things that we have done.
Changing the name.
Now that you and I are on Reloaded, Reloaded and floating undo.
So those have some meaning.
So those you can see them over here.
The most important one is the floating undo.
So let me just show you about the floating undo.
Let's go to the safe mode again.
So if we make here safe mode control X, we are on the safe mode.
Now, if I change the name to the router to be relative to again so system let's see if we can get recall
the comment are system identity set name is auto enter.
Now if I make the history print you see it is now f system identity change.
So that's what we have done.
F means floating undo.
That means you can do undo for that comment because that is a comment.
Inside is a safe mode.
So that means we can make it undo.
That's what is the f over here.
All right.
And reloaded.
We have seen also over here, we have seen reloaded and all that reload.
It means that it was on the safe mode and then you reload it back to what it was before.
So that's what that shows are.
And that means that you just enter the command that you were not on safe mode.
So it's on re loaded.
Now let's go out from the safe mode and do this.
Done.
And now if we go back to it here and you can see it is reloaded because we just reloaded now again the
Erato to go to one.
So these are the history that you can see over here.
You can see them from the command line port.
Number three is dump number four check how many switch chip are available on the router.
So what is this switch chip?
Let me just explain it to you on the drawing.
So some of the Raptors not all the Raptors know some of the Raptors, they have what is called switch
chip.
It is a a it is a chip.
It's inside the microchip crafter where it can make wiring between the interface.
So let's do it like this.
So let's say that we have that is the router and it has bought Ethernet WWAN Ethernet to a Treasury
Ethernet for Ethernet five.
So all of those ports will be inside a switch chip.
So it's a boarding circuit inside the router where you can wire all those ports, so they become like
a switch.
And what is the benefit of the switch, Chip?
The benefit is that the traffic which are going from one port to another so that you have one computer
here, you want to communicate with this computer here this computer is connected to that interface.
It's not two and that's one on Ethernet one.
So the traffic going from one interface to another, then they don't go to the sipo so they don't have
to go to the ship.
You show the ship, you can send them to the other interface as it was before.
So we don't have that anymore.
So that's all.
Why it together.
So it's all you go to the switch ship and the switch ship will open to wire to allow the traffic to
go from one or two fresh to another, which are inside the same switch ship.
And that's much faster because you don't take any more processing for the ship.
You it doesn't go to the ship you to go down.
So that's a very beautiful and that's something we can profit from it.
One, we want to make some of the ports to be like switch ship.
So remember we have here Ethernet wan connected to the Internet.
So that's one I don't want to put it on the switch ship.
I want that all the interfaces Ethernet to internationally four and five to be like a one switch port.
All right.
So what we need to do, we have to create a bridge interface and we put all those port inside this bridge
so they are like a switch.
And then what we can do this cable which is on Ethernet too, I can put it on the territory, then I
have Internet, I can put it on Ethernet port, then I have internet, I can put it on Ethernet five,
then I have internet.
So then in this case, once you put all the ports inside the bridge, then you are making bridging between
all those ports and we are using the switch chip.
So we have to make the ports as a hardware offload and then all the traffic which are going from one
floor to another, then they are wired together without the need to go to the CPU of the router.
All right.
So the question now, the change here, check how many switch chips are available on the Raptors?
How can we do that?
We can go to the router and over here we can see at this moment I'm using this have a C light, right?
So if we go to the switch we can see I have one switch chip which is 80 8227 and this switch has the
following ports inside of it.
Ethernet one, Ethernet two, it's initially four and five and it is the switch one should be.
So that means that all the ports of the routers, the Ethernet ports are inside the switch chip.
The wireless does not succeed, but we have here two wireless interfaces.
Those are not part of the switch chip.
So that means I can make all those ports to work as a switch, but I'm not going to make Ethernet one
because Internet one is the wire.
So we have to make all those remaining ports to be in a bridge.
So they are switching together.
Now, if you want to know how to do that on the command line, we can go from here and we can say interface,
Ethernet, switch, and then we can say print.
Should say print and not print.
And then here we go.
We can see that it is down at a 2 to 7.
And if we want to know what thoughts are inside this so we can support and say, here, print.
So again, we can see the net.
Want to return that five are inside this switch chip bond number four is done.
Number five, put it in at two to it, in at five in a bridge and rounded the picture over on the bridge
interface.
What does it mean if we go back to the picture?
Remember that in the last slide what we have done, we run the distribution of it on Ethernet two.
Now I want that Ethernet to three, four and five to all be inside a bridge interface.
So I'm going to bridge them together to be like, want to switch.
So that means the DSP is not going to be anymore running inside Ethernet two because Internet2 is becoming
like a slave to the bridge.
So I need to run the there should be server on the bridge interface that I'm going to create and then
what's going to happen that if I plug my computer to any of the other ports, three, four, five,
that and he will be able to go to the Internet.
So let's do that.
We go to the router and then first we have to create the bridge interface.
Let's create one bridge interface.
Let's call it bland.
All right.
We just put any name, so we call it lan.
Now I'm going to put the inside of it.
It is not to.
We will get disconnected now because once we put Ethernet to, it's going to be moving from area from
as being a physical interface to be like a slave interface.
Very important to keep hardware off road because when you make it hardware offload, that's where the
traffic will not go to the ship, which will use the switch chip to go to the other interfaces which
are inside this same switch ship.
Then I say, okay.
So as I said, it's going to be disconnected in a moment.
All right.
Let's go through it and actually.
I'm not sure why they didn't get disconnected, but that's fine.
It's ashtray.
It allows for
anything.
That's five.
So all the are now inside this bridge interface.
Now, what I need to do, I need to go to IP address and I need to remove this IP that I put it on the
internet to it to put it on the bridge, which is the LAN.
All right.
And the last step to do is to run the B server on the line, which is the bridge interface.
Excellent.
So now I'm connected to Ethernet too, if I open.
The comment prompt I make being educated there or let's do it for Google.
So always check all sort of the DNS is working so Google dot com it's working our move to cable now
so that is the router that is the cable on Internet.
I put it now on Ethernet, SRI.
There we go.
So I put it aside.
If that's true, let's check now if we have Internet.
So first if we get the address.
Yes, we did bring the Google account.
Here we go.
We have Internet.
We move the cable from it's an a SRI and let's put it on Ethernet for
let's check if we received the IP address.
Yes.
And Bank of Google.
Here we go.
And then finally, we do the same.
We move the cable, we put it on Internet five
and we check first IP config.
Yes.
Thank to Google.
Not yet.
Here we go.
It is working now.
Very good.
So that's what I wanted to show you.
So that is how you can profit from the bridging interface.
BLOCK number five is done.
So for this lab I will stop for now to not be too long.
I still have three other points to do, but I'm going to do with them and the upcoming video.
So I hope that by now all the definition that I have done for you are clear and I wish you in the upcoming
election.