Scribd Logo
Încărcați

Bine ați venit la Scribd!

  • Ccna 4 Lab 1 VLAN

    Încărcat de

    thaifong
    24 vizualizări3 pagini
    This document contains configurations for several network devices to enable inter-VLAN routing, VPN connectivity using GRE tunnels, DHCP relay, VLANs, port security, and SSH access. The core router is configured with subinterfaces for each VLAN and static routes to remote networks over a GRE tunnel. A switch creates VLANs, applies port security, and acts as a DHCP relay. The remote router terminates the GRE tunnel and routes between VLANs and remote networks. The DHCP server enables PPP/CHAP authentication over a serial connection and configures SSH for secure management access.

    Descriere originală:

    Config code

    Titlu original

    ccna 4 lab 1 VLAN

    Drepturi de autor

    © © All Rights Reserved

    Formate disponibile

    TXT, PDF, TXT sau citiți online pe Scribd

    Vi se pare util acest document?

    Este necorespunzător acest conținut?

    Raportați acest document
    This document contains configurations for several network devices to enable inter-VLAN routing, VPN connectivity using GRE tunnels, DHCP relay, VLANs, port security, and SSH access. The core router is configured with subinterfaces for each VLAN and static routes to remote networks over a GRE tunnel. A switch creates VLANs, applies port security, and acts as a DHCP relay. The remote router terminates the GRE tunnel and routes between VLANs and remote networks. The DHCP server enables PPP/CHAP authentication over a serial connection and configures SSH for secure management access.

    Drepturi de autor:

    © All Rights Reserved
    Descărcați ca TXT, PDF, TXT sau citiți online pe Scribd
    Indicator pentru conținut neadecvat
    24 vizualizări3 pagini

    Ccna 4 Lab 1 VLAN

    Încărcat de

    thaifong
    This document contains configurations for several network devices to enable inter-VLAN routing, VPN connectivity using GRE tunnels, DHCP relay, VLANs, port security, and SSH access. The core router is configured with subinterfaces for each VLAN and static routes to remote networks over a GRE tunnel. A switch creates VLANs, applies port security, and acts as a DHCP relay. The remote router terminates the GRE tunnel and routes between VLANs and remote networks. The DHCP server enables PPP/CHAP authentication over a serial connection and configures SSH for secure management access.

    Drepturi de autor:

    © All Rights Reserved
    Descărcați ca TXT, PDF, TXT sau citiți online pe Scribd
    Indicator pentru conținut neadecvat
    din 3

    ------------------------------------------------------

    VLAN-RTR InterVLAN ROUTING, PPP/CHAP, GRE TUNNEL


    ------------------------------------------------------

    interface g0/0.105
    encapsulation dot1q 105
    ip address 10.1.3.254 255.255.252.0

    interface g0/0.205
    encapsulation dot1q 205
    ip address 10.1.5.254 255.255.254.0

    interface g0/0.12
    encapsulation dot1q 12 native
    ip address 10.1.12.254 255.255.255.0

    interface g0/0
    no shutdown
    exit

    !USER NAME FOR CHAP


    username DHCP-RTR password cisco

    int s0/0/0
    ip add 10.5.5.66 255.255.255.252
    clock rate 4000000
    encap ppp
    ppp authentication chap
    no shut
    exit

    int tunnel 0
    ip add 10.10.10.1 255.255.255.252
    tunnel source g0/1
    tunnel destination 95.1.1.2
    tunnel mode gre ip
    no shut
    exit

    !SPECIFY WHAT TRAFFIC SHOULD USE THE TUNNEL 0


    ip route 192.168.50.0 255.255.255.0 10.10.10.2

    !DHCP RELAY AGENT - IP HELPER ON SUB-INTERFACES

    int g0/0.105
    ip helper-address 10.5.5.65
    int g0/0.205
    ip helper-address 10.5.5.65
    exit

    --------------------------------------------
    BRANCH-RTR GRE TUNNEL
    --------------------------------------------

    conf t

    int tunnel 0
    ip add 10.10.10.2 255.255.255.252
    tunnel source g0/1
    tunnel destination 85.1.1.2
    tunnel mode gre ip
    no shut
    exit

    !SPECIFY WHAT TRAFFIC SHOULD USE THE TUNNEL 0


    ip route 10.1.4.0 255.255.254.0 10.10.10.1
    ip route 10.1.0.0 255.255.253.0 10.10.10.1
    ip route 172.16.50.0 255.255.255.0 10.10.10.1

    -----------------------------------
    SWITCH 2 VLANs and Port Security
    -----------------------------------

    conf t

    vlan 105
    name PC
    vlan 205
    name LT
    vlan 12
    name MGMT
    vlan 999
    name BLACKHOLE
    exit

    int range f0/1 - 23, g0/1-2


    switchport mode access
    switchport access vlan 999
    shutdown

    int f0/24
    switchport mode trunk
    switchport trunk native vlan 12
    no shut

    int f0/1
    switchport mode access
    switchport access vlan 105
    switchport port-security
    switchport port-security maximum 2
    switchport port-security mac-address sticky
    switchport port-security violation shutdown
    no shut

    int f0/10
    switchport mode access
    switchport access vlan 205
    switchport port-security
    switchport port-security maximum 1
    switchport port-security mac-address sticky
    switchport port-security violation shutdown
    no shut

    int vlan 12
    ip add 10.1.12.252 255.255.255.0
    no shut
    exit
    ip default-gateway 10.1.12.254
    -----------------------------------------------------
    DHCP-RTR PPP/CHAP and SSH Config
    ------------------------------------------------------

    conf t
    username admin password cisco
    username VLAN-RTR password cisco

    int s0/0/0
    ip add 10.5.5.65 255.255.255.252
    encap ppp
    ppp authentication chap
    no shut

    conf t
    ip domain-name CCNA4FinalExam.com
    crypto key generate rsa
    !
    !wait - manually enter 2048
    !
    !========================================================
    ! DO NOT PASTE THE LINES BELOW UNTIL YOU
    ! HAVE SPECIFIED the # of BITS IN KEY MODULUS
    !========================================================

    line vty 0 4
    transport input ssh
    login local
    exit
    ip ssh version 2
    ip ssh time-out 60
    ip ssh authentication-retries 2

    S-ar putea să vă placă și