Pre-APAC Nov, 2009

Topology

Requirements +Inside users can access the Internet via the router GATE located in the domain; and can access the servers in both the domains +Internet users can access the WEB servers in the both domains +The DNS servers must be used locally +Frame Relay: don't use the sub-interfaces +Router HANOI, TpHCM denies ICMP traffic, DNS request; and permits other traffic +Internet users can not PING into the domain HANOI, TpHCM + Domain HANOI and TpHCM use the leased line as the primary route, and frame-relay as the backup route + Router HANOI, TpHCM open SSH service for inside users; username=technician, password=ciscox + Enable PAP authentication on the serial links between the router GATE and router INTERNET; username=customer, password=ciscoz

Domain HANOI +VTP ver2; domain: hanoi; password:hanoi12345 +Vlan10:staff; vlan20:dmz; vlan30: wan +IP address for vlans: 172.16.X.0/24 +The DHCP server provides IP addresses for all PC clients +Router GATE: enable RIP ver2 on Fa0/1; S* 0.0.0.0/0 via Internet; PAP client on the serial link; NAT/PAT +Router HANOI: enable RIP ver2 on Fa0/1,OSPF (single area 0) on Se0/0/0; disable any dynamic routing protocols on Fa0/0 Domain TpHCM +VTP ver2; domain:tphcm; password:tphcm12345 +Vlan40:staff; vlan50:dmz; vlan60:wan +IP address for vlans:172.16.X.0/24 +Router TpHCM is a DHCP server providing IP addresses for all PC clients +Router GATE: enable RIP ver2 on Fa0/1;S*0.0.0.0/0 via the Internet; PAP client on the serial link; NAT/PAT +Router TpHCM: enable RIP ver2 on Fa0/1;OSPF (single ares 0) on Se0/0/0; disable any dynamic routing protocols on Fa0/0