conf t

host HCM
conf t
ho R1
int e0/0
ip add 172.16.1.1 255.255.255.0
no shut
exit
int e0/0.10
encap dot 10
ip add 172.16.10.1 255.255.255.0
ip helper-address 192.168.1.1
exit
int e0/0.20
encap dot 20
ip add 172.16.20.1 255.255.255.0
ip helper-address 192.168.1.1
exit
int e0/0.30
encap dot 30
ip add 172.16.30.1 255.255.255.0
exit
int e0/1
ip add 192.168.1.2 255.255.255.0
no shut
exit

ip route 0.0.0.0. 0.0.0.0 192.168.1.1

ip route 172.16.2.0 255.255.255.0 192.168.1.1
ip route 192.168.2.0 255.255.255.0 192.168.1.1
ip route 172.16.3.0 255.255.255.0 192.168.1.1
conf t
host HANOI
int e0/0
ip add 192.168.1.1 255.255.255.0
no shut
exit
int e0/1
ip add 192.168.2.2 255.255.255.0
no shut
exit
int lo 0
ip add 172.16.2.1 255.255.255.0
exit

Cau hinh DHCP cho VLAN 10 va VLAN 20

ip dhcp pool 10
network 172.16.10.0 255.255.255.0
default-router 172.16.10.1
dns-server 8.8.8.8
exit

ip dhcp pool 20
network 172.16.20.0 255.255.255.0
default-router 172.16.20.1
dns-server 8.8.8.8
exit

ip route 0.0.0.0. 0.0.0.0 192.168.2.1

ip route 172.16.10.0 255.255.255.0 192.168.1.2
ip route 172.16.20.0 255.255.255.0 192.168.1.2
ip route 172.16.30.0 255.255.255.0 192.168.1.2
conf t
ho DANANG
int lo 0
ip add 172.16.3.1 255.255.255.0
ip nat insite
exit
int e0/0
ip add 192.168.2.1 255.255.255.0
ip nat insite
no sh
exit
int e0/1
ip add dhcp
ip nat outsite
no sh
exit

CHO TELNET DEN

enable secret cisco

line vty 0 4
password cisco
login
transport input telnet

ip route 0.0.0.0 0.0.0.0 e0/1

ip route 172.16.10.0 255.255.255.0 192.168.2.2
ip route 172.16.20.0 255.255.255.0 192.168.2.2
ip route 172.16.30.0 255.255.255.0 192.168.2.2
ip route 172.16.2.0 255.255.255.0 192.168.2.2
ip route 192.168.1.0 255.255.255.0 192.168.2.2

access-list 2 permit 172.16.10.0 0.0.0.255

access-list 2 permit 172.16.20.0 0.0.0.255
access-list 2 permit 172.16.30.0 0.0.0.255
ip nat inside source list 2 interface Ethernet0/0 overload
DANANG#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 200.0.0.10:41556 172.16.10.2:41556 8.8.8.8:41556 8.8.8.8:41556
icmp 200.0.0.10:41812 172.16.10.2:41812 8.8.8.8:41812 8.8.8.8:41812
icmp 200.0.0.10:42068 172.16.10.2:42068 8.8.8.8:42068 8.8.8.8:42068
icmp 200.0.0.10:42324 172.16.10.2:42324 8.8.8.8:42324 8.8.8.8:42324
icmp 200.0.0.10:42580 172.16.10.2:42580 8.8.8.8:42580 8.8.8.8:42580
DANANG#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 200.0.0.10:41556 172.16.10.2:41556 8.8.8.8:41556 8.8.8.8:41556
icmp 200.0.0.10:41812 172.16.10.2:41812 8.8.8.8:41812 8.8.8.8:41812
icmp 200.0.0.10:42068 172.16.10.2:42068 8.8.8.8:42068 8.8.8.8:42068
icmp 200.0.0.10:42324 172.16.10.2:42324 8.8.8.8:42324 8.8.8.8:42324
icmp 200.0.0.10:42580 172.16.10.2:42580 8.8.8.8:42580 8.8.8.8:42580
icmp 200.0.0.10:48724 172.16.20.2:48724 8.8.8.8:48724 8.8.8.8:48724
icmp 200.0.0.10:48980 172.16.20.2:48980 8.8.8.8:48980 8.8.8.8:48980
icmp 200.0.0.10:49236 172.16.20.2:49236 8.8.8.8:49236 8.8.8.8:49236
icmp 200.0.0.10:49492 172.16.20.2:49492 8.8.8.8:49492 8.8.8.8:49492
icmp 200.0.0.10:49748 172.16.20.2:49748 8.8.8.8:49748 8.8.8.8:49748
conf t
host SWCORE
int range e0/0-2
switchport trunk encapsulation dot1q
switchport mode trunk
exit
int e0/3
switchport mode access
switchport access vlan 30
exit

int vlan 1
ip add 172.16.1.251 255.255.255.0
no sh
exit
vtp mode ser
vtp domain HCM
vtp pass HCMPassword

vlan 10
name KinhDoanh
exit
vlan 20
name Ketoan
exit
vlan 30
name Kythuat
exit
conf t
host ASW1
int e0/1
switchport trunk encapsulation dot1q
switchport mode trunk
exit
int e0/3
switchport mode access
switchport access vlan 10
exit

int vlan 1
ip add 172.16.1.252 255.255.255.0
no sh
exit

vtp mode client

vtp domain HCM
vtp pass HCMPassword

vtp domain vnpro

vtp pass cisco
conf t
host ASW2
int e0/2
switchport trunk encapsulation dot1q
switchport mode trunk
exit
int e0/3
switchport mode access
switchport access vlan 20
exit

int vlan 1
ip add 172.16.1.253 255.255.255.0
no sh
exit

vtp mode client

vtp domain HCM
vtp pass HCMPassword

vtp mode client

vtp domain vnpro
vtp pass cisco
Host1> ping 1.1.1.1

*192.168.10.1 icmp_seq=1 ttl=255 time=0.657 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.10.1 icmp_seq=2 ttl=255 time=0.752 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.10.1 icmp_seq=3 ttl=255 time=0.679 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.10.1 icmp_seq=4 ttl=255 time=0.658 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.10.1 icmp_seq=5 ttl=255 time=1.086 ms (ICMP type:3, code:13, Communication administratively prohibited)

Host1> ping 1.1.1.1 -p 80 -P 6

Connect 80@1.1.1.1 seq=1 ttl=254 time=2.311 ms

SendData 80@1.1.1.1 seq=1 ttl=254 time=1.104 ms
Close 80@1.1.1.1 seq=1 ttl=254 time=2.194 ms
Connect 80@1.1.1.1 seq=2 ttl=254 time=2.180 ms
SendData 80@1.1.1.1 seq=2 ttl=254 time=1.121 ms
Close 80@1.1.1.1 seq=2 ttl=254 time=2.160 ms
Connect 80@1.1.1.1 seq=3 ttl=254 time=2.246 ms
SendData 80@1.1.1.1 seq=3 ttl=254 time=1.098 ms
Close 80@1.1.1.1 seq=3 ttl=254 time=2.264 ms
Connect 80@1.1.1.1 seq=4 ttl=254 time=2.225 ms
SendData 80@1.1.1.1 seq=4 ttl=254 time=1.086 ms
Close 80@1.1.1.1 seq=4 ttl=254 time=2.172 ms
Connect 80@1.1.1.1 seq=5 ttl=254 time=2.318 ms
SendData 80@1.1.1.1 seq=5 ttl=254 time=1.090 ms
Close 80@1.1.1.1 seq=5 ttl=254 time=2.155 ms
Host2> ping 1.1.1.1 -P 6 -p 80

Connect 80@1.1.1.1 seq=1 ttl=254 time=2.227 ms

SendData 80@1.1.1.1 seq=1 ttl=254 time=2.210 ms
Close 80@1.1.1.1 seq=1 ttl=254 time=3.319 ms
Connect 80@1.1.1.1 seq=2 ttl=254 time=2.253 ms
SendData 80@1.1.1.1 seq=2 ttl=254 time=1.079 ms
Close 80@1.1.1.1 seq=2 ttl=254 time=2.306 ms
Connect 80@1.1.1.1 seq=3 ttl=254 time=2.209 ms
SendData 80@1.1.1.1 seq=3 ttl=254 time=1.107 ms
Close 80@1.1.1.1 seq=3 ttl=254 time=2.311 ms
Connect 80@1.1.1.1 seq=4 ttl=254 time=2.198 ms
SendData 80@1.1.1.1 seq=4 ttl=254 time=1.119 ms
Close 80@1.1.1.1 seq=4 ttl=254 time=3.339 ms
Connect 80@1.1.1.1 seq=5 ttl=254 time=2.229 ms
SendData 80@1.1.1.1 seq=5 ttl=254 time=2.186 ms
Close 80@1.1.1.1 seq=5 ttl=254 time=3.309 ms

Host2> ping 1.1.1.1 -P 6 -p 23

*192.168.20.1 tcp_seq=1 ttl=255 time=2.286 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 tcp_seq=3 ttl=255 time=1.107 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 tcp_seq=5 ttl=255 time=2.144 ms (ICMP type:3, code:13, Communication administratively prohibited)

Host2> ping 1.1.1.1

*192.168.20.1 icmp_seq=1 ttl=255 time=1.323 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 icmp_seq=2 ttl=255 time=1.126 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 icmp_seq=3 ttl=255 time=1.252 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 icmp_seq=4 ttl=255 time=1.181 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.20.1 icmp_seq=5 ttl=255 time=1.497 ms (ICMP type:3, code:13, Communication administratively prohibited)
Host3> ping 1.1.1.1 -P 6 -p 80

Connect 80@1.1.1.1 seq=1 ttl=254 time=2.225 ms

SendData 80@1.1.1.1 seq=1 ttl=254 time=1.121 ms
Close 80@1.1.1.1 seq=1 ttl=254 time=3.269 ms
Connect 80@1.1.1.1 seq=2 ttl=254 time=2.287 ms
SendData 80@1.1.1.1 seq=2 ttl=254 time=1.143 ms
Close 80@1.1.1.1 seq=2 ttl=254 time=2.226 ms
Connect 80@1.1.1.1 seq=3 ttl=254 time=2.181 ms
SendData 80@1.1.1.1 seq=3 ttl=254 time=2.227 ms
Close 80@1.1.1.1 seq=3 ttl=254 time=3.263 ms
Connect 80@1.1.1.1 seq=4 ttl=254 time=2.272 ms
SendData 80@1.1.1.1 seq=4 ttl=254 time=1.090 ms
Close 80@1.1.1.1 seq=4 ttl=254 time=3.387 ms
Connect 80@1.1.1.1 seq=5 ttl=254 time=2.225 ms
SendData 80@1.1.1.1 seq=5 ttl=254 time=1.066 ms
Close 80@1.1.1.1 seq=5 ttl=254 time=3.186 ms

Host3> ping 1.1.1.1 -P 6 -p 23

*192.168.30.1 tcp_seq=1 ttl=255 time=2.260 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 tcp_seq=3 ttl=255 time=2.180 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 tcp_seq=5 ttl=255 time=1.266 ms (ICMP type:3, code:13, Communication administratively prohibited)

Host3> ping 1.1.1.1 -P 6

*192.168.30.1 tcp_seq=1 ttl=255 time=1.109 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 tcp_seq=3 ttl=255 time=1.163 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 tcp_seq=5 ttl=255 time=1.178 ms (ICMP type:3, code:13, Communication administratively prohibited)

Host3> ping 1.1.1.1

*192.168.30.1 icmp_seq=1 ttl=255 time=1.453 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 icmp_seq=2 ttl=255 time=1.205 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 icmp_seq=3 ttl=255 time=1.281 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 icmp_seq=4 ttl=255 time=1.428 ms (ICMP type:3, code:13, Communication administratively prohibited)
*192.168.30.1 icmp_seq=5 ttl=255 time=1.099 ms (ICMP type:3, code:13, Communication administratively prohibited)