MC LC

Cau hinh ip ........................................................................................................... 2

Gate1: ......................................................................................................................... 2
wan1 ........................................................................................................................... 2
core1 ........................................................................................................................... 3
gate2: .......................................................................................................................... 3
core2 ........................................................................................................................... 4
cau hinh etherchannel ......................................................................................... 5
core1 ........................................................................................................................... 5
acc1............................................................................................................................. 6
acc2............................................................................................................................. 6
sw1.............................................................................................................................. 7
sw2.............................................................................................................................. 7
DHCP.................................................................................................................... 8
Core1 .......................................................................................................................... 8
core2 ........................................................................................................................... 9
frame relay and ppp ............................................................................................ 9
wan1 ........................................................................................................................... 9
core2 ........................................................................................................................... 9
gate1 ........................................................................................................................... 9
gate2 ........................................................................................................................... 9
NAT..................................................................................................................... 10
gate 1 ........................................................................................................................ 10
gate2 ......................................................................................................................... 10
GRE .................................................................................................................... 11
gate1 ......................................................................................................................... 11
gate2 ......................................................................................................................... 11
IPSEC ................................................................................................................. 11
gate1 ......................................................................................................................... 11
gate2 ......................................................................................................................... 12
ROUTING .......................................................................................................... 13
Dotheanhptit91@gmail.com

Trang 1

gate1 ......................................................................................................................... 13
wan1 ......................................................................................................................... 13
core1 ......................................................................................................................... 13
gate2: ........................................................................................................................ 14
core2 ......................................................................................................................... 14
END..................................................................................................................... 14

Cau hinh ip
Gate1:
int s 0/0/0
ip add 200.0.0.1 255.255.255.248
no shut

int g 0/0
ip add 10.0.17.2 255.255.255.0
no shut

int g 0/1
ip add 10.2.2.2 255.255.255.0
no shut

wan1

int s 0/0/0
ip add 10.1.1.1 255.255.255.252
no shut
int g 0/0
Dotheanhptit91@gmail.com

Trang 2

ip add 10.0.16.2 255.255.255.0

no shut

core1
ip routing
int g0/1
no sw
no shut
ip add 10.0.17.1 255.255.255.0

int g 0/2
no sw
ip add 10.0.16.1 255.255.255.0
no shut
int vlan 11
ip add 10.0.11.1 255.255.255.0
int vlan 12
ip add 10.0.12.1 255.255.255.0
int vlan 13
ip add 10.0.13.1 255.255.255.0
int vlan 15
ip add 10.0.15.1 255.255.255.0
int vlan 99
ip add 10.0.99.1 255.255.255.0

gate2:
int s 0/3/0
Dotheanhptit91@gmail.com

Trang 3

no shut
ip add 200.0.0.22 255.255.255.252

int s 0/0/0
no shut
ip add 10.1.0.2 255.255.255.252

core2
int s 0/0/0
no shut
ip add 10.1.1.2 255.255.255.252

int s 0/0/1
ip add 10.1.0.1 255.255.255.252
no shut

int g 0/2
no shut
int g0/2.22
encap dot 22
ip add 10.1.22.2 255.255.255.0

int g0/2.33
encap dot 33
ip add 10.1.33.2 255.255.255.0

int g0/2.44
Dotheanhptit91@gmail.com

Trang 4

encap dot 44
ip add 10.1.44.2 255.255.255.0

int g0/2.99
encap dot 99
ip add 10.1.99.2 255.255.255.0

cau hinh etherchannel

core1
int ran f 0/1-2
sw trun encap dot
sw mode trun
channel-p la
channel-g 1 mode ac
int port 1
sw mode trun

int ran f 0/3-4

sw trun encap dot
sw mode trun
channel-p pa
channel-g 2 mode de
int port 2
sw mode trun

int f 0/5
Dotheanhptit91@gmail.com

Trang 5

sw mode acc
sw acc vlan 15

acc1
int f 0/1
sw mode acc
sw acc vlan 11

int ran f 0/21-22

sw mode trun
channel-p la
channel-g 1 mode ac
int port 1
sw mode trun

int ran f 0/23-24

sw mode trun
channel-p pa
channel-g 3 mode de
int port 3
sw mode trun

acc2
int ran f 0/21-22
sw mode trun
channel-p la
Dotheanhptit91@gmail.com

Trang 6

channel-g 1 mode ac
int port 1
sw mode trun

int ran f 0/23-24

sw mode trun
channel-p pa
channel-g 3 mode de
int port 3
sw mode trun

sw1
int ran f 0/1-2
sw mode trun
channel-p la
channel-g 1 mode ac
int por 1
sw mode trun

int g 1/1
sw mode trun
int f 0/3
sw mode acc
sw acc vlan 22

sw2
Dotheanhptit91@gmail.com

Trang 7

int ran f 0/1-2

sw mode trun
channel-p la
channel-g 1 mode ac
int por 1
sw mode trun

int f 0/4
sw mode acc
sw acc vlan 44
int f 0/3
sw mode acc
sw acc vlan 33

DHCP
Core1
ip dhcp exclude 10.0.11.1 10.0.11.9
ip dhcp exclude 10.0.11.211 10.0.11.255
ip dhcp exclude 10.0.12.1 10.0.12.9
ip dhcp exclude 10.0.12.211 10.0.12.255
ip dhcp pool INS
net 10.0.11.0 255.255.255.0
dns 10.0.15.8
defa 10.0.11.1
exit
ip dhcp pool Student
Dotheanhptit91@gmail.com

Trang 8

net 10.0.12.0 255.255.255.0

dns 10.0.15.8
defa 10.0.12.1

core2
int g 0/0.22
ip help 10.1.44.10
int g 0/0.33
ip help 10.1.44.10
sau do cai 2 pool tai DHCP server

frame relay and ppp

wan1
int s 0/0/0
encap fram

core2
int s 0/0/0
encap fram

gate1
host Gate1
user ISP pass bkacad
int s 0/0/0
encap ppp
ppp authen chap

gate2
Dotheanhptit91@gmail.com

Trang 9

int s 0/3/0
encap ppp
ppp pap sent Site2 pass bkacad

NAT
gate 1
ip nat in sou sta 10.2.2.3 200.0.0.3
ip nat in sou sta 10.2.2.4 200.0.0.4
ip acc stan NATOVERLOAD-ACL
permit 10.0.0.0 0.0.255.255
exit
ip nat in sou list NATOVERLOAD-ACL int s 0/0/0 over
int s 0/0/0
ip nat out
int g 0/1
ip nat in
int g 0/0
ip nat in

gate2

ip acc stan NATOVERLOAD-ACL

permit 10.1.0.0 0.0.255.255
exit
ip nat in sou list NATOVERLOAD-ACL int s 0/3/0 over
Dotheanhptit91@gmail.com

Trang 10

int s 0/3/0
ip nat out
int s 0/0/0
ip nat in

GRE

gate1

int tun0
ip add 10.3.3.1 255.255.255.252
tun sou s 0/0/0
tun des 200.0.0.33

gate2

int tun0
ip add 10.3.3.2 255.255.255.252
tun sou s 0/3/0
tun des 200.0.0.1

IPSEC
gate1
cry isa po 10
encr 3des
hash sha
grou 2
Dotheanhptit91@gmail.com

Trang 11

authen pre
exit
cry isa key cisco@123 add 200.0.0.33
cry ipsec tran SITE1SITE2-VPN esp-aes esp-sha-hmac

acc 100 permit gre host 200.0.0.1 host 200.0.0.33

cry map VPNSITETOSITE 10 ip
match add 100
set tran SITE1SITE2-VPN
set peer 200.0.0.33
exit
int s 0/0/0
cry map VPNSITETOSITE

gate2
cry isa po 10
encr 3des
hash sha
grou 2
authen pre
exit
cry isa key cisco@123 add 200.0.0.1
cry ipsec tran SITE1SITE2-VPN esp-aes esp-sha-hmac
acc 100 permit gre host 200.0.0.33 host 200.0.0.1
cry map VPNSITETOSITE 10 ip
match add 100
set tran SITE1SITE2-VPN
Dotheanhptit91@gmail.com

Trang 12

set peer 200.0.0.1

exit
int s 0/3/0
cry map VPNSITETOSITE

ROUTING

gate1
router ei 100
no auto
net 10.2.2.0
net 10.0.17.0
net 10.3.3.0
redis sta
exit
ip route 0.0.0.0 0.0.0.0 s 0/0/0

wan1
router ei 100
no auto
net 10.0.16.0
net 10.1.1.0

core1
router ie 100
no auto
net 10.0.17.0
net 10.0.16.0
net 10.0.11.0
Dotheanhptit91@gmail.com

Trang 13

net 10.0.12.0
net 10.0.13.0
net 10.0.15.0
net 10.0.99.0

gate2:
router ei 100
no auto
net 10.3.3.0
net 10.1.0.0
redis sta
exit
ip route 0.0.0.0 0.0.0.0 s 0/3/0

core2
router ei 100
no auto
net 10.1.1.0
net 10.1.0.0
net 10.1.22.0
net 10.1.33.0
net 10.1.99.0

END

Dotheanhptit91@gmail.com

Trang 14