Scribd Logo
Upload

Welcome to Scribd!

  • 58 views

    TP 1

    Uploaded by

    Arij Hmeydi
    The document configures two switches S1 and S2 and two routers R1 and R2. It sets passwords, banners, VLANs, interfaces, subinterfaces, IP addresses, routing and ACLs. Key configurations include setting up VLANs 20, 30, 40 on all devices for management, operations and sales networks. Trunk ports are configured between the switches and subinterfaces on the routers map the VLANs. ACLs 101 and 102 implement security policies between the sales and other networks.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd

    TP 1

    Uploaded by

    Arij Hmeydi
    58 views3 pages
    The document configures two switches S1 and S2 and two routers R1 and R2. It sets passwords, banners, VLANs, interfaces, subinterfaces, IP addresses, routing and ACLs. Key configurations include setting up VLANs 20, 30, 40 on all devices for management, operations and sales networks. Trunk ports are configured between the switches and subinterfaces on the routers map the VLANs. ACLs 101 and 102 implement security policies between the sales and other networks.

    Original Title

    tp1

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document configures two switches S1 and S2 and two routers R1 and R2. It sets passwords, banners, VLANs, interfaces, subinterfaces, IP addresses, routing and ACLs. Key configurations include setting up VLANs 20, 30, 40 on all devices for management, operations and sales networks. Trunk ports are configured between the switches and subinterfaces on the routers map the VLANs. ACLs 101 and 102 implement security policies between the sales and other networks.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    58 views3 pages

    TP 1

    Uploaded by

    Arij Hmeydi
    The document configures two switches S1 and S2 and two routers R1 and R2. It sets passwords, banners, VLANs, interfaces, subinterfaces, IP addresses, routing and ACLs. Key configurations include setting up VLANs 20, 30, 40 on all devices for management, operations and sales networks. Trunk ports are configured between the switches and subinterfaces on the routers map the VLANs. ACLs 101 and 102 implement security policies between the sales and other networks.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Download as txt, pdf, or txt
    You are on page 1of 3

    hostname R1

    no ip domain lookup
    enable secret class
    R1(config)# line console 0
    R1(config-line)# password cisco
    R1(config-line)# login

    R1(config)# line vty 0 4


    R1(config-line)# password cisco
    R1(config-line)# login

    R1(config)# service password-encryption

    R1(config)# banner motd $ Authorized Users Only! $

    R1# copy running-config startup-config

    switch(config)# hostname S1
    S1(config)# no ip domain-lookup
    S1(config)# enable secret class
    S1(config)# line console 0
    S1(config-line)# password cisco
    S1(config-line)# login
    S1(config)# line vty 0 15
    S1(config-line)# password cisco
    S1(config-line)# login

    S1(config)# service password-encryption


    S1(config)# banner motd $ Authorized Users Only! $
    S1(config)# exit
    S1# copy running-config startup-config

    S2(config)# vlan 20
    S2(config-vlan)# name Management
    S2(config-vlan)# vlan 30
    S2(config-vlan)# name Operations
    S2(config-vlan)# vlan 40
    S2(config-vlan)# name Sales
    S2(config-vlan)# vlan 999
    S2(config-vlan)# name ParkingLot
    S2(config-vlan)# vlan 1000
    S2(config-vlan)# name Native
    S2(config-vlan)# exit

    S1(config)# interface vlan 20


    S1(config-if)# ip address 10.20.0.2 255.255.255.0
    S1(config-if)# no shutdown
    S1(config-if)# exit
    S1(config)# ip default-gateway 10.20.0.1
    S1(config)# end

    S2(config)# interface vlan 20


    S2(config-if)# ip address 10.20.0.3 255.255.255.0
    S2(config-if)# no shutdown
    S2(config-if)# exit
    S2(config)# ip default-gateway 10.20.0.1
    S2(config)# end

    S1(config)# interface range f0/2 - 4, f0/7 - 24, g0/1 - 2


    S1(config-if-range)# switchport mode access
    S1(config-if-range)# switchport access vlan 999
    S1(config-if-range)# shutdown
    S1(config-if-range)# end

    S2(config)# interface range f0/2 - 17, f0/19 - 24, g0/1 - 2


    S2(config-if-range)# switchport mode access
    S2(config-if-range)# switchport access vlan 999
    S2(config-if-range)# shutdown
    S2(config-if-range)# end

    S1(config)# interface f0/6


    S1(config-if)# switchport mode access
    S1(config-if)# switchport access vlan 30

    S2(config)# interface f0/18


    S2(config-if)# switchport mode access
    S2(config-if)# switchport access vlan 40

    1(config)# interface f0/1


    S1(config-if)# switchport mode trunk

    S2(config)# interface f0/1


    S2(config-if)# switchport mode trunk

    S1(config-if)# switchport trunk native vlan 1000

    S2(config-if)# switchport trunk native vlan 1000


    S1(config-if)# switchport trunk allowed vlan 20,30,40,1000

    S2(config-if)# switchport trunk allowed vlan 20,30,40,1000

    S1(config)# interface f0/5


    S1(config-if)# switchport mode trunk
    S1(config-if)# switchport trunk native vlan 1000
    S1(config-if)# switchport trunk allowed vlan 20,30,40,1000

    R1(config)# interface g0/0/1.20


    R1(config-subif)# description Management Network
    R1(config-subif)# encapsulation dot1q 20
    R1(config-subif)# ip address 10.20.0.1 255.255.255.0
    R1(config-subif)# interface g0/0/1.30
    R1(config-subif)# encapsulation dot1q 30
    R1(config-subif)# description Operations Network
    R1(config-subif)# ip address 10.30.0.1 255.255.255.0
    R1(config-subif)# interface g0/0/1.40
    R1(config-subif)# encapsulation dot1q 40
    R1(config-subif)# description Sales Network
    R1(config-subif)# ip address 10.40.0.1 255.255.255.0
    R1(config-subif)# interface g0/0/1.1000
    R1(config-subif)# encapsulation dot1q 1000 native
    R1(config-subif)# description Native VLAN

    R1(config)# interface Loopback 1


    R1(config-if)# ip address 172.16.1.1 255.255.255.0

    R2(config)# interface g0/0/1


    R2(config-if)# ip address 10.20.0.4 255.255.255.0
    R2(config-if)# no shutdown
    R2(config-if)# exit
    R2(config)# ip route 0.0.0.0 0.0.0.0 10.20.0.1

    R1(config)# ip domain name ccna-lab.com


    R1(config)# crypto key generate rsa general-keys modulus 1024
    R1(config)# line vty 0 4
    R1(config-line)# transport input ssh
    R1(config-line)# login local
    R1(config-line)# exit

    R1(config)# access-list 101 remark ACL 101 fulfills policies 1, 2, and 3


    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.20.0.0 0.0.0.255 eq 22
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.20.0.0 0.0.0.255 eq 80
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.30.0.1 0.0.0.0 eq 80
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.40.0.1 0.0.0.0 eq 80
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.20.0.0 0.0.0.255 eq 443
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.30.0.1 0.0.0.0 eq 443
    R1(config)# access-list 101 deny tcp 10.40.0.0 0.0.0.255 10.40.0.1 0.0.0.0 eq 443
    R1(config)# access-list 101 deny icmp 10.40.0.0 0.0.0.255 10.20.0.0 0.0.0.255 echo
    R1(config)# access-list 101 deny icmp 10.40.0.0 0.0.0.255 10.30.0.0 0.0.0.255 echo
    R1(config)# access-list 101 permit ip any any
    R1(config)# interface g0/0/1.40
    R1(config-subif)# ip access-group 101 in

    R1(config)# access-list 102 remark ACL 102 fulfills policy 4


    R1(config)# access-list 102 deny icmp 10.30.0.0 0.0.0.255 10.40.0.0 0.0.0.255 echo
    R1(config)# access-list 102 permit ip any any
    R1(config)# interface g0/0/1.30
    R1(config-subif)# ip access-group 102 in

    You might also like

    pFad - Phonifier reborn

    Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

    Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


    Alternative Proxies:

    Alternative Proxy

    pFad Proxy

    pFad v3 Proxy

    pFad v4 Proxy