R1: service password-encryption security passwords min-length 10 ! hostname R1 ! no logging on login block-for 120 attempts 2 within 30 ! !

enable secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. ! ! ! ! ! aaa new-model ! ! ! ! ! ! ! ! username admin privilege 15 secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. username rouadmin privilege 15 secret 5 $1$mERr$8Wqs9IvDbo6qTZhbXXQKk0 ! ! ! ! ! ip ssh authentication-retries 2 ip ssh time-out 30 no ip domain-lookup ip domain-name ccnasec.com ! ! spanning-tree mode pvst ! no ip ips notify log class-map type inspect match-all IN-CLASS-MAP match access-group 100 ! policy-map type inspect IN-OUT-PMAP class type inspect IN-CLASS-MAP inspect ! ! ! zone security IN-ZONE zone security OUT-ZONE zone-pair security IN-OUT-ZPAIR source IN-ZONE destination OUT-ZONE service-policy type inspect IN-OUT-PMAP ! interface FastEthernet0/0 no ip address zone-member security IN-ZONE duplex auto speed auto

! interface FastEthernet0/0.1 encapsulation dot1Q 1 native ip address 192.168.1.1 255.255.255.0 ! interface FastEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 ! interface FastEthernet0/0.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 ! interface FastEthernet0/0.50 encapsulation dot1Q 50 ip address 192.168.50.1 255.255.255.0 ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 12.12.12.1 255.255.255.252 zone-member security OUT-ZONE clock rate 64000 ! interface Serial0/0/1 no ip address shutdown ! interface Serial0/1/0 no ip address shutdown ! interface Serial0/1/1 no ip address shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 192.168.1.0 0.0.0.255 area 0 network 192.168.10.0 0.0.0.255 area 0 network 192.168.20.0 0.0.0.255 area 0 network 192.168.50.0 0.0.0.255 area 0 network 12.12.12.0 0.0.0.3 area 0 ! ip classless ! ! ip access-list extended sl_def_acl deny tcp any any eq telnet deny tcp any any eq www deny tcp any any eq 22 permit tcp any any eq 22

! banner motd ^CSolo acceso a usuarios autorizados^C ! radius-server host 192.168.50.10 auth-port 1645 key WinRadius radius-server host 192.168.50.10 auth-port 3020 key WinRadius ! ! ! logging trap debugging logging 172.16.1.10 line con 0 password 7 082243400A150404015A5E57 logging synchronous ! line aux 0 ! line vty 0 4 password 7 083758570A150404015A5E57 logging synchronous transport input ssh privilege level 15 ! ! ! end

R2: service password-encryption security passwords min-length 10 ! hostname R2 ! login block-for 120 attempts 2 within 30 ! ! enable secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. ! ! ! ! ! ! username admin privilege 15 secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. ! ! ! ! ! ip ssh time-out 30 no ip domain-lookup ip domain-name ccnasec.com ! ! spanning-tree mode pvst ! !

! ! interface FastEthernet0/0 ip address 172.16.2.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 ip address 12.12.12.2 255.255.255.252 ! interface Serial0/0/1 ip address 23.23.23.1 255.255.255.252 clock rate 64000 ! interface Serial0/1/0 no ip address shutdown ! interface Serial0/1/1 no ip address shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 172.16.2.0 0.0.0.255 area 0 network 12.12.12.0 0.0.0.3 area 0 network 23.23.23.0 0.0.0.3 area 0 ! ip classless ! ! ip access-list extended sl_def_acl deny tcp any any eq telnet deny tcp any any eq www deny tcp any any eq 22 permit tcp any any eq 22 ! banner motd ^CSolo acceso a usuarios autorizados^C ! ! ! ! logging trap debugging logging 172.16.1.10 line con 0 password 7 082243400A150404015A5E57 logging synchronous login ! line aux 0

! line vty 0 4 password 7 083758570A150404015A5E57 logging synchronous login local transport input ssh privilege level 15 ! ! ! end R3: service password-encryption security passwords min-length 10 ! hostname R3 ! login block-for 120 attempts 2 within 30 ! ! enable secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. ! ! ! ! ! ! username admin privilege 15 secret 5 $1$mERr$WvpW0n5HghRrqnrwXCUUl. ! ! ! ! ! ip ssh time-out 30 no ip domain-lookup ip domain-name ccnasec.com ! ! spanning-tree mode pvst ! ip ips name iosips ip ips signature-category category all retired true category ios_ips basic retired false ! ! ! interface FastEthernet0/0 ip address 172.16.1.1 255.255.255.0 duplex auto speed auto ! interface FastEthernet0/1 no ip address duplex auto

speed auto shutdown ! interface Serial0/0/0 no ip address shutdown ! interface Serial0/0/1 ip address 23.23.23.2 255.255.255.252 ip ips iosips in ! interface Serial0/1/0 no ip address shutdown ! interface Serial0/1/1 no ip address shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 172.16.1.0 0.0.0.255 area 0 network 23.23.23.0 0.0.0.3 area 0 ! ip classless ! ! ip access-list extended sl_def_acl deny tcp any any eq telnet deny tcp any any eq www deny tcp any any eq 22 permit tcp any any eq 22 ! banner motd ^CSolo accesoo a usuarios autorizados^C ! ! ! ! logging trap debugging logging 172.16.1.10 line con 0 password 7 082243400A150404015A5E57 logging synchronous login ! line aux 0 ! line vty 0 4 password 7 083758570A150404015A5E57 logging synchronous login local transport input ssh privilege level 15 ! ! !

end S1: no service password-encryption ! hostname S1 ! ! ! ip ssh version 2 ip ssh authentication-retries 2 ip ssh time-out 30 no ip domain-lookup ip domain-name ccnasec.com ! username swadmin secret 5 $1$mERr$b2pXP.7GnV9M7cGL7RNEt1 ! spanning-tree mode pvst ! interface FastEthernet0/1 switchport mode trunk ! interface FastEthernet0/2 shutdown ! interface FastEthernet0/3 shutdown ! interface FastEthernet0/4 shutdown ! interface FastEthernet0/5 switchport access vlan 10 switchport mode access ! interface FastEthernet0/6 switchport access vlan 10 switchport mode access ! interface FastEthernet0/7 switchport access vlan 10 switchport mode access ! interface FastEthernet0/8 switchport access vlan 10 switchport mode access ! interface FastEthernet0/9 switchport access vlan 10 switchport mode access ! interface FastEthernet0/10 switchport access vlan 10 switchport mode access ! interface FastEthernet0/11 shutdown !

interface FastEthernet0/12 shutdown ! interface FastEthernet0/13 shutdown ! interface FastEthernet0/14 shutdown ! interface FastEthernet0/15 shutdown ! interface FastEthernet0/16 shutdown ! interface FastEthernet0/17 shutdown ! interface FastEthernet0/18 shutdown ! interface FastEthernet0/19 shutdown ! interface FastEthernet0/20 shutdown ! interface FastEthernet0/21 shutdown ! interface FastEthernet0/22 shutdown ! interface FastEthernet0/23 shutdown ! interface FastEthernet0/24 shutdown ! interface GigabitEthernet1/1 switchport mode trunk ! interface GigabitEthernet1/2 shutdown ! interface Vlan1 no ip address shutdown ! interface Vlan10 ip address 192.168.10.2 255.255.255.0 ! ip default-gateway 192.168.10.1 ! banner motd ^CSolo acceso a usuarios autorizados^C ! line con 0 ! line vty 0 4 logging synchronous

login local transport input ssh privilege level 15 line vty 5 15 login ! ! end S2: no service password-encryption ! hostname S2 ! ! ! ip ssh version 2 ip ssh authentication-retries 2 ip ssh time-out 30 no ip domain-lookup ip domain-name ccnasec.com ! username swadmin secret 5 $1$mERr$b2pXP.7GnV9M7cGL7RNEt1 ! spanning-tree mode pvst spanning-tree vlan 10,20,50 priority 24576 ! interface FastEthernet0/1 shutdown ! interface FastEthernet0/2 shutdown ! interface FastEthernet0/3 shutdown ! interface FastEthernet0/4 shutdown ! interface FastEthernet0/5 shutdown ! interface FastEthernet0/6 shutdown ! interface FastEthernet0/7 shutdown ! interface FastEthernet0/8 shutdown ! interface FastEthernet0/9 shutdown ! interface FastEthernet0/10 shutdown ! interface FastEthernet0/11

switchport access vlan 50 switchport mode access ! interface FastEthernet0/12 switchport access vlan 50 switchport mode access ! interface FastEthernet0/13 switchport access vlan 50 switchport mode access ! interface FastEthernet0/14 switchport access vlan 50 switchport mode access ! interface FastEthernet0/15 switchport access vlan 50 switchport mode access ! interface FastEthernet0/16 shutdown ! interface FastEthernet0/17 shutdown ! interface FastEthernet0/18 shutdown ! interface FastEthernet0/19 shutdown ! interface FastEthernet0/20 shutdown ! interface FastEthernet0/21 shutdown ! interface FastEthernet0/22 shutdown ! interface FastEthernet0/23 shutdown ! interface FastEthernet0/24 shutdown ! interface GigabitEthernet1/1 switchport mode trunk ! interface GigabitEthernet1/2 shutdown ! interface Vlan1 no ip address shutdown ! interface Vlan50 ip address 192.168.50.3 255.255.255.0 ! ip default-gateway 192.168.50.1

! banner motd ^CSolo acceso a usuarios autorizados^C ! line con 0 ! line vty 0 4 logging synchronous login local transport input none privilege level 15 line vty 5 15 login ! ! end