You are on page 1of 2

PASO1:

SW1
===
vlan 100
name Native
exit

interface range g 0/1 - 2


switchport mode trunk
switchport nonegotiate
switchport trunk native vlan 100

SW2
===
vlan 100
name Native
exit

interface range g0/1 - 2


switchport mode trunk
switchport nonegotiate
switchport trunk native vlan 100

PASO2:
SW1
===
interface range f0/3-9,f0/11-23
shutdown
exit

vlan 999
name BlackHole
exit

interface range f0/3-9,f0/11-23


switchport mode access
switchport acces vlan 999

PASO 3:
SW1
===
interface range f0/1-2,f0/10,f0/24
switchport port-security
switchport port-security maximum 4
exit

interface f0/1
switchport port-security mac-address 0010.11E8.3CBB
exit

interface range f0/2,f0/10,f0/24


switchport port-security mac-address sticky
exit

interface range f0/1-2,f0/10,f0/24


switchport port-security violation restrict
exit

PASO 4:
SW1
===
ip dhcp snooping
interface range g0/1-2
ip dhcp snooping trust
exit

interface range f0/1-2,f0/10,f0/24


ip dhcp snooping limit rate 5
exit

SW2
===
ip dhcp snooping
ip dhcp snooping vlan 10,20,99

PASO 5:
SW1
===
interface range f0/1-2,f0/10,f0/24
spanning-tree portfast
spanning-tree bpduguard enable

SW2
===
spanning-tree portfast default

You might also like