hq

conf t
ip domain-name CCNASkills.com
crypto key generate rsa
2048
username admin password adminoly
line vty 0 15
transport input ssh
exit
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
int s0/0/0
encapsulation frame-relay
int s0/0/0.41
int s0/0/0.41 point-to-point
ip address 10.255.255.1 255.255.255.252
frame-relay interface-dlci 41
exit
int s0/0/0
frame-relay lmi-type q933a
no shut
B1
conf t
int s0/0/0
encapsulation frame-relay
frame-relay lmi-type q933a
HQ
int s0/1/0
encapsulation ppp
ppp authentication chap
exit
username ISP password cisco
int s0/0/1
encapsulation ppp
ppp authentication pap
ppp pap sent-username HQ password cisco
clock rate 128000
exit
username NewB password cisco
ip access-list standard NAT
permit 10.0.0.0 0.255.255.255
exit
ip nat pool HQ 209.165.200.241 209.165.200.246 netmask 255.255.255.248
ip nat inside source list NAT pool HQ
ip nat inside source static 10.0.1.2 209.165.200.246
int s0/0/0.41
ip nat inside
int s0/0/1
ip nat inside
int g0/0
ip nat inside
int s0/1/0

ip nat outside
B1
exit
int g0/0.10
encapsulation dot1Q 10
ip address 10.1.10.1 255.255.255.0
int g0/0.20
encapsulation dot1Q 20
ip address 10.1.20.1 255.255.255.0
int g0/0.30
encapsulation dot1Q 30
ip address 10.1.30.1 255.255.255.0
int g0/0.99
encapsulation dot1Q 99 native
ip address 10.1.99.1 255.255.255.0
exit
ip dhcp excluded-address 10.1.20.1 10.1.20.10
ip dhcp pool VLAN20
network 10.1.20.0 255.255.255.0
default-router 10.1.20.1
dns-server 10.0.1.4
Ir Ate o pc Escritorio de Vendas e coloca DHCP
HQ
exit
ip route 0.0.0.0 0.0.0.0 s0/1/0
ip route 10.4.5.0 255.255.255.0 s0/0/1
router eigrp 100
network 10.0.0.0 0.255.255.255
no auto-summary
redistribute static
passive-interface g0/0
passive-interface s0/0/1
passive-interface s0/1/0
B1
exit
router eigrp 100
network 10.0.0.0 0.255.255.255
no auto-summary
passive-interface g0/0.10
passive-interface g0/0.20
passive-interface g0/0.30
passive-interface g0/0.99
exit
int s0/0/0
ip summary-address eigrp 100 10.1.0.0 255.255.0.0
B1
exit
int g0/0
no shut

HQ
end
conf t
line vty 0 15
login local
end
B1S2
conf t
vlan 10
name Admin
vlan 20
name Sales
vlan 30
name Production
vlan 99
name Mgmt&Native
vlan 999
name BlackHole
exit
int vlan 99
ip address 10.1.99.22 255.255.255.0
exit
ip default-gateway 10.1.99.1
int fa0/6
switchport mode access
switchport access vlan 10
int fa0/11
switchport mode access
switchport access vlan 20
int fa0/16
switchport mode access
switchport access vlan 30
in range fa0/1-4
switchport mode trunk
switchport trunk native vlan 99
exit
int range fa0/5,fa0/7-10, fa0/12-15,fa0/17-24, g0/1-2
switchport mode access
switchport access vlan 999
shutdown
exit
int range fa0/6,fa0/11, fa0/16
switchport port-security
switchport port-security maximum 1
switchport port-security mac-address sticky
switchport port-security violation shutdown
HQ
conf t
ip access-list extended HQINBOUND
permit tcp any host 209.165.200.246 eq www
permit tcp any any established
permit icmp any any echo-reply
deny ip any any
exit
int s0/1/0
ip access-group HQINBOUND in