R1:sh run Building configuration... Current configuration : 1279 bytes ! version 12.

4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname R1 ! ! ! enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1 ! ! ! ! ! ! ! ! ip ssh version 1 ! ! ! ! ! ! interface Loopback0 ip address 10.0.0.1 255.255.255.0 ! interface FastEthernet0/0 ip address 172.16.100.65 255.255.255.224 duplex auto speed auto ! interface FastEthernet0/1 ip address 172.16.100.113 255.255.255.248 ip ospf priority 10 duplex auto speed auto ! interface Serial0/0/0 ip address 172.16.100.122 255.255.255.252 ip ospf authentication message-digest ip ospf message-digest-key 5 md5 itsasecret ip access-group NO_INTERNET out ! interface Serial0/0/1 no ip address shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes

network network network network

172.16.100.64 0.0.0.31 area 0 172.16.100.64 0.0.0.63 area 0 172.16.100.120 0.0.0.3 area 0 10.0.0.1 0.0.0.0 area 0

! ip classless ! ! ip access-list standard NO_INTERNET deny 209.165.201.0 0.0.0.3 deny 172.16.100.96 0.0.0.25 permit any ! ! ! no cdp run ! banner motd ^CAuthorized Access Only!^C ! ! ! ! line con 0 password cisco login line vty 0 4 password cisco login line vty 5 15 password cisco login ! ! ! e sh run Building configuration... Current configuration : 1147 bytes ! version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname R2 ! ! ! enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1 ! ! ! ! ! ! ! ! ip ssh version 1 !

! ! ! ! ! interface FastEthernet0/0 ip address 172.16.100.1 255.255.255.192 duplex auto speed auto ! interface FastEthernet0/1 ip address 172.16.100.118 255.255.255.248 ip access-group 115 out duplex auto speed auto ! interface Serial0/0/0 bandwidth 384 ip address 172.16.100.126 255.255.255.252 ip ospf message-digest-key 5 md5 itsasecret ! interface Serial0/0/1 no ip address shutdown ! interface Vlan1 no ip address shutdown xi ! router ospf 1 log-adjacency-changes network 172.16.100.0 0.0.0.63 area 0 network 172.16.100.112 0.0.0.7 area 0 network 172.16.100.124 0.0.0.3 area 0 network 10.0.0.1 0.0.0.0 area 0 ! ip classless ! ! access-list 115 deny ip any 172.16.100.64 0.0.0.31 access-list 115 permit ip any any ! ! ! no cdp run ! banner motd ^CAuthorized Access Only!^C ! ! ! ! line con 0 password cisco login line vty 0 4 password cisco login line vty 5 15 password cisco login

! ! ! end nd HQ#sh run Building configuration... Current configuration : 1958 bytes ! version 12.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname HQ ! ! ! enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1 ! ! ! ! ! ! ! ! ip ssh version 1 ! ! ! ! ! ! interface Loopback0 ip address 10.0.0.3 255.255.255.255 ! interface FastEthernet0/0 description Link to Inside Web Server ip address 172.16.100.97 255.255.255.240 ip access-group 100 in ip nat inside duplex auto speed auto ! interface FastEthernet0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/0/0 description Link to R1 ip address 172.16.100.121 255.255.255.252 ip ospf message-digest-key 5 md5 itsasecret ip nat inside clock rate 2000000 !

interface Serial0/0/1 description Link to the Internet ip address 209.165.201.2 255.255.255.252 ip nat outside ! interface Serial0/1/0 description Link to R2 bandwidth 384 ip address 172.16.100.125 255.255.255.252 ip ospf message-digest-key 5 md5 itsasecret ip nat inside clock rate 2000000 ! interface Serial0/1/1 no ip address shutdown ! interface Vlan1 no ip address shutdown ! router ospf 1 log-adjacency-changes network 172.16.100.96 0.0.0.15 area 0 network 172.16.100.120 0.0.0.3 area 0 network 172.16.100.124 0.0.0.3 area 0 network 10.0.0.3 0.0.0.0 area 0 default-information originate ! ip nat inside source list NAT interface Serial0/0/1 overload ip nat inside source static 172.16.100.100 128.107.0.10 ip classless ip route 0.0.0.0 0.0.0.0 Serial0/0/1 ! ! ip access-list standard NAT permit 172.16.100.0 0.0.0.255 deny any access-list 100 permit tcp any any established access-list 100 permit icmp any any echo-reply access-list 100 permit icmp any any unreachable access-list 100 permit tcp host 128.107.0.10 any eq www ! ! ! no cdp run ! banner motd ^CAuthorized Access Only!^C ! ! ! ! line con 0 password cisco login line vty 0 4 password cisco login line vty 5 15 password cisco

login ! ! ! end