1.

Cu hnh PC NhanVien,ISP Router, RouterVPN:

***Note: Lm nh bnh thng, thm bc cui trn RouterVPN th mi thng t
RouterVPN sang PC NhanVien
Code:

ip route 0.0.0.0 0.0.0.0 f0/1

2 - Cu hnh VTP 3 Switch (SwitchCty1 s l Server, cn 2 ci cn li l Client)

Chi tit:
Code :

vtp mode server/client

vtp domain hung.com( ty )
check : show vtp status xem chun cha !!

3 - Cu hnh VLAN trn tng Switch:

3.1 Thm VLAN bng tay( c th code, ty )

3.2 Phn Vng VLAN (theo bi)

SwitchCty1: fa0/5 20
SwitchCty2: fa0/5 10
SwitchCty3: fa0/5 16
*** Code:

V d VLAN10:

int rang f0/5 20 ( tu Switch)

switchport mode access
switchport access vlan 10

4 - Cu hnh Trunk cho cc Switch:

***Code:

V d SwitchCty2:

int range f0/1-2

//Cc cng c Switch/Router kt ni ( SwitchCty2 l 2 cng f0/1 v f0/2)
switchport mode trunk
switchport trunk native vlan 1

5. Cu hnh DHCP,VLAN ti RouterVPN:

5.1. encapsulation VLAN:
***Code:

int f0/0.10
encapsulation dot1Q 10
ip add 172.16.10.1 255.255.255.192
no shut

Lm tng t vs VLAN20 v 30

//Truy cp Vlan10 @@

//sunet chia ng theo

5.2. Cu hnh DHCP:

***Code:

service dhcp

// Bt dch v DHCP

Ip dhcp ex(tab) 172.16.1.1 172.16.1.40

ip dhcp pool vlan-10
net 172.16.10.0 255.255.255.192
default-router 172.16.1.1

// D nhm 172.16.10.1

ip dhcp pool vlan-20

net 172.16.20.0 255.255.255.240
default-router 172.16.1.1

// D nhm 172.16.20.1

ip dhcp pool vlan-30

net 172.16.30.0 255.255.255.224
default-router 172.16.1.1

// D nhm 172.16.30.1

***Cho nhn IP ng cc my tnh + Server (CHECK DHCP lun), Gi th cc file t VLAN

ny sang VLAN khc xem thnh cng ko !!!

6. Cu hnh VPN trn RouterVPN:

***Code:

user admin pass hung

aaa new-model // Bt ch Accounting Authentication Authorization
aaa authentication login default local none
ip local pool VPNCLIENTS 172.16.1.20 172.16.1.40
aaa authentication network VPN local
crypto isakmp policy 10

(config-isakmp)authentication

pre-share
encryption aes 256
group 2
exit

(config-isakmp crypto
-group)

isakmp client configuration group vpngroup

key 123
pool VPNCLIENTS
netmask 255.255.255.0
exit
crypto ipsec transform-set key esp-3des esp-sha-hmac
crypto dynamic-map key2 10

(config-crypto
-map)

set transform-set key1

reverse-router
exit
crypto map key2 client conf address respond
crypto map key2 isakmp authorization list VPN
crypto map key2 10 ipsec-isakmp dynamic key2

aaa authentication login VPN local

username admin pass hung
crypto map key2 client authentication list VPN
int f0/1
crypto map key2
<========== cc bc r ! Khi hnh nh, mi tay cmnr ==========>

*** ng nhp VPN trn PC Nhan Vien tu xa

Groupname:
Group Key :
Host IP
:
Username :
Password :

vpngroup
123
192.168.20.2
admin
hung

*** Th gi file t PC Nhan Vien tu xa sang cc mtnh VLAN khc, ok l xong !