Conf Intervlan Sede Independencia

///////////////////////////////////////////////
ROUTER PRINCIPAL
///////////////////////////////////////////////
en
conf t
hostname ROUT_PRIN
ip domain-name cisco.com
username cisco privilege 15 password cisco
crypto key generate rsa
1024
ip ssh version 2
line vty 0 15
password cisco
login local
transport input all
logging synchronous
exit
line console 0
password cisco
login local
logging synchronous
exit
enable password cisco

service password-encryption
configure terminal
int gi0/0
description RED-WAN_ISP_01
ip add 192.168.0.2 255.255.255.0
ip nat outside
no sh
int gi0/1
description RED-WAN_ISP_02
ip add 192.168.1.2 255.255.255.0
ip nat outside
no sh
int gi0/2
no sh
int gi0/2.10
encapsulation dot1q 10
description RED-VLAN10
ip add 192.168.10.1 255.255.255.0
ip nat inside
no sh
int gi0/2.20
ip add 192.168.20.1 255.255.255.0
ip nat inside
no sh
int gi0/2.30
ip add 192.168.30.1 255.255.255.0
ip nat inside
no sh
exit
ip access-list standard restriccion_red-10

deny 192.168.20.0 0.0.0.253
deny 192.168.30.0 0.0.0.255
permit host 192.168.20.230
permit host 192.168.20.231
permit any

deny 192.168.10.0 0.0.0.253
deny 192.168.30.0 0.0.0.253
permit host 192.168.10.254
permit host 192.168.30.254
permit any

deny 192.168.10.0 0.0.0.255
deny 192.168.20.0 0.0.0.253
permit host 192.168.20.230
permit host 192.168.20.231
permit any
exit
int gi0/2.10
ip access-group restriccion_red-10 out
int gi0/2.20
int gi0/2.30
exit
ip access-list standard restriccion-ssh

permit host 192.168.20.230
permit host 192.168.20.231
deny any
exit
line vty 0 15
access-class restriccion-ssh in
ip dhcp excluded-address 192.168.10.1

ip dhcp excluded-address 192.168.10.250 192.168.10.254
ip dhcp excluded-address 192.168.30.1
ip dhcp pool LAN_VLAN10

network 192.168.10.0 255.255.255.0
default-router 192.168.10.1
dns-server 8.8.8.8

network 192.168.20.0 255.255.255.0
dns-server 8.8.8.8

network 192.168.30.0 255.255.255.0
dns-server 8.8.8.8
exit
ip access-list standard lan_02

permit 192.168.10.0 0.0.0.255
permit 192.168.20.0 0.0.0.255
permit 192.168.30.0 0.0.0.255
deny any
route-map isp1 permit 10

match ip address NAT
match interface FastEthernet0/0
ip nat inside source route-map isp1 interface FastEthernet0/0 overload
do wr
/////////////////////////////////////////
SW PRINCIPAL
//////////////////////////////////////////
en
conf t
hostname SW_PRINCIPAL
1024
ip ssh version 2
line vty 0 15
password cisco
login local
transport input all
logging synchronous
exit
line console 0
password cisco
login local
logging synchronous
exit

vlan 10
name vlan-10
vlan 20
name vlan_20
vlan 30
name vlan_30
exit
int vlan 20
ip add 192.168.20.240 255.255.255.0

permit host 192.168.20.230
permit host 192.168.20.231
deny any
exit
line vty 0 15
exit
int gi0/1
switchport mode trunk
int range fa0/1-2

ip default-gateway 192.168.20.1
int range fa0/23-24

switchport mode access
switchport access vlan 20
do wr
end
/////////////////////////////////////////
SW ACCESO - OPERACIONES
//////////////////////////////////////////
en
conf t
hostname SW_ACCE_OPER
1024
ip ssh version 2
line vty 0 15
password cisco
login local
transport input ssh
logging synchronous
exit
line console 0
password cisco
login local
logging synchronous
exit
vlan 10
name vlan-10
vlan 20
name vlan_20
vlan 30
name vlan_30
exit
int vlan 20
ip add 192.168.20.241 255.255.255.0
ip access-list standard restriccion_red_20

permit 192.168.20.0 0.0.0.255
deny any

permit host 192.168.20.230
permit host 192.168.20.231
exit
line vty 0 15
exit
int gi0/1
int range fa0/1-23

int range fa0/24

ip access-group restriccion_red_20 out
exit
int gi0/2
do wr
end
/////////////////////////////////////////
SW ACCESO - ADMINISTRACION
//////////////////////////////////////////
en
conf t
hostname SW_ACCE_ADM
1024
ip ssh version 2
line vty 0 15
password cisco
login local
transport input all
logging synchronous
exit
line console 0
password cisco
login local
logging synchronous
exit

vlan 10
name vlan-10
vlan 20
name vlan_20
vlan 30
name vlan_30
exit
int vlan 20
ip add 192.168.20.242 255.255.255.0

permit 192.168.30.0 0.0.0.255
deny any

permit host 192.168.20.230
permit host 192.168.20.231
exit
line vty 0 15
exit
int gi0/1
int range fa0/1-23

int range fa0/24

int gi0/2
exit
do wr
end
/////////////////////////////////////////
SW ACCESO - RR.HH
//////////////////////////////////////////
en
conf t
hostname SW_ACCE_RR.HH
1024
ip ssh version 2
line vty 0 15
password cisco
login local
transport input all
logging synchronous
exit
line console 0
password cisco
login local
logging synchronous
exit

vlan 10
name vlan-10
vlan 20
name vlan_20
vlan 30
name vlan_30
exit
int vlan 20
ip add 192.168.20.243 255.255.255.0

permit 192.168.20.0 0.0.0.255
deny any
exit

permit host 192.168.20.230
permit host 192.168.20.231
exit
line vty 0 15
exit
int gi0/1
int range fa0/1-23
int range fa0/24

int gi0/2
exit
do wr
end

Conf Intervlan Sede Independencia

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Conf Intervlan Sede Independencia

Uploaded by

Copyright:

Available Formats

///////////////////////////////////////////////

enable password cisco

ip access-list standard restriccion_red-10

ip access-list standard restriccion_red-20

ip access-list standard restriccion_red-30

ip access-list standard restriccion-ssh

ip dhcp excluded-address 192.168.10.1

ip dhcp pool LAN_VLAN10

ip dhcp pool LAN_VLAN20

ip dhcp pool LAN_VLAN30

ip access-list standard lan_02

route-map isp1 permit 10

ip nat inside source route-map isp1 interface FastEthernet0/0 overload

enable password cisco

ip access-list standard restriccion-ssh

int range fa0/1-2

int range fa0/23-24

ip access-list standard restriccion_red_20

ip access-list standard restriccion-ssh

int range fa0/1-23

int range fa0/24

enable password cisco

ip access-list standard restriccion_red_30

ip access-list standard restriccion-ssh

int range fa0/1-23

int range fa0/24

enable password cisco

ip access-list standard restriccion_red_20

ip access-list standard restriccion-ssh

int range fa0/24

You might also like