API tools faq
paste
Advertisement
Guest User

OPT B

a guest
Dec 5th, 2016
432
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.09 KB | None | 0 0
raw download clone embed print report
  1. Router(config)#hostname Site-1
  2. Site-1(config)# no ip domain look up
  3. Site-1(config)# enable secret class
  4. Site-1(config)#line console 0
  5. Site-1(config-line)#password cisco
  6. Site-1(config-line)#login
  7.  
  8. Site-1(config)#line vty 0 4
  9. Site-1(config-line)#password cisco
  10. Site-1(config-line)#login
  11.  
  12. Site-1(config)#line aux 0
  13. Site-1(config-line)#password cisco
  14. Site-1(config-line)#login
  15.  
  16. Site-1(config)#line console 0
  17. Site-1(config-line)#logging synchronous
  18.  
  19. Site-1(config)#banner motd “Authorized Access Only”
  20. Site-1(config)#service password-encryption
  21.  
  22. #####–SITE 1
  23.  
  24. hostname East
  25. no ip domain-lookup
  26. enable secret cisco
  27. line console 0
  28. logging synchronous
  29. password cisco
  30. login
  31. line aux 0
  32. password cisco
  33. login
  34. line vty 0 15
  35. password cisco
  36. login
  37. service password-encryption
  38. banner motd @Authorized acces only!@
  39.  
  40. interface serial 0/0/0
  41. bandwidth 128
  42. clock rate 12800
  43. ip address 192.168.100.22 255.255.255.252
  44. description 2-Central
  45. ip ospf cost 7500
  46. ip ospf message-digest-key 1 md5 xyz_OSPF
  47. ip ospf authentication message-digest
  48. no shutdown
  49. exit
  50.  
  51. interface gi 0/0
  52. ip address 192.168.8.1 255.255.255.0
  53. description Manage-1A
  54. no shutdown
  55. interface gi 0/1
  56. ip address 192.168.9.1 255.255.255.0
  57. description Clerk-1C
  58. no shutdown
  59. exit
  60.  
  61. — OSPF
  62. router ospf 1
  63. router-id 1.1.1.1
  64. area 0 authentication message-digest
  65. network 192.168.100.20 0.0.0.3 area 0
  66. network 192.168.8.0 0.0.0.255 area 1
  67. network 192.168.9.0 0.0.0.255 area 1
  68. passive-interface GigabitEthernet0/0
  69. passive-interface GigabitEthernet0/1
  70. no auto-summary
  71. exit
  72.  
  73. ####################
  74. ########–HQ
  75.  
  76. hostname Central
  77. no ip domain-lookup
  78. enable secret cisco
  79. line console 0
  80. logging synchronous
  81. password cisco
  82. login
  83. line aux 0
  84. password cisco
  85. login
  86. line vty 0 15
  87. password cisco
  88. login
  89. service password-encryption
  90. banner motd @Authorized acces only @
  91.  
  92. ip route 0.0.0.0 0.0.0.0 s0/1/0
  93. interface serial 0/0/0
  94. bandwidth 128
  95. ip address 192.168.100.21 255.255.255.252
  96. description 2-East
  97. ip ospf cost 7500
  98. ip ospf message-digest-key 1 md5 xyz_OSPF
  99. ip ospf authentication message-digest
  100. no shutdown
  101. exit
  102.  
  103. interface serial 0/0/1
  104. bandwidth 128
  105. ip address 192.168.100.37 255.255.255.252
  106. description 2-West
  107. clock rate 128000
  108. ip ospf message-digest-key 1 md5 xyz_OSPF
  109. ip ospf authentication message-digest
  110. no shutdown
  111. exit
  112.  
  113. interface serial 0/1/0
  114. bandwidth 128
  115. ip address 203.0.113.18 255.255.255.248
  116. description 2-INTERNET
  117. no shutdown
  118. exit
  119.  
  120. — OSPF
  121. router ospf 1
  122. router-id 2.2.2.2
  123. area 0 authentication message-digest
  124. default-information originate
  125. network 192.168.100.20 0.0.0.3 area 0
  126. network 192.168.100.36 0.0.0.3 area 0
  127. passive-interface Serial0/1/0
  128. no auto-summary
  129. exit
  130.  
  131. –ACCESS LIST
  132. ip access-list standard TELNET-BLOCK
  133. permit host 198.51.100.5
  134. line vty 0 15
  135. access-class TELNET-BLOCK in
  136.  
  137. interface serial 0/1/0
  138. ip access-group 101 in
  139. exit
  140.  
  141. #######################
  142. ###### –SITE 2
  143.  
  144. hostname West
  145. no ip domain-lookup
  146. enable secret cisco
  147. line console 0
  148. logging synchronous
  149. password cisco
  150. login
  151. line vty 0 15
  152. password cisco
  153. login
  154. service password-encryption
  155. banner motd @Authorized acces only.@
  156.  
  157. interface serial 0/0/1
  158. bandwidth 128
  159. ip address 192.168.100.38 255.255.255.252
  160. description 2-Central
  161. ip ospf message-digest-key 1 md5 xyz_OSPF
  162. ip ospf authentication message-digest
  163. no shutdown
  164.  
  165. interface gi 0/1
  166. no shutdown
  167.  
  168. interface gi 0/1.2
  169. encapsulation dot1q 2
  170. ip address 10.10.2.1 255.255.255.0
  171. interface gi 0/1.4
  172. encapsulation dot1q 4
  173. ip address 10.10.4.1 255.255.255.0
  174. interface gi 0/1.8
  175. encapsulation dot1q 8
  176. ip address 10.10.8.1 255.255.255.0
  177. interface gi 0/1.15
  178. encapsulation dot1q 15
  179. ip address 10.10.15.1 255.255.255.0
  180. interface gi 0/1.25
  181. encapsulation dot1q 25
  182. ip address 10.10.25.1 255.255.255.0
  183. exit
  184.  
  185. — OSPF
  186. router ospf 1
  187. router-id 3.3.3.3
  188. passive-interface GigabitEthernet0/1
  189. network 192.168.100.36 0.0.0.3 area 0
  190. network 10.10.2.0 0.0.0.255 area 2
  191. network 10.10.4.0 0.0.0.255 area 2
  192. network 10.10.8.0 0.0.0.255 area 2
  193. network 10.10.15.0 0.0.0.255 area 2
  194. no auto-summary
  195. passive-interface g0/1.2
  196. passive-interface g0/1.4
  197. passive-interface g0/1.8
  198. passive-interface g0/1.15
  199. exit
  200.  
  201. – ROUTE SUMMARIZATION
  202. interface serial 0/0/1
  203. ip summary-address eigrp 100 10.10.0.0 255.255.240.0
  204.  
  205. – DHCP
  206. ip dhcp excluded-address 10.10.2.1 10.10.2.5
  207. ip dhcp excluded-address 10.10.4.1 10.10.4.5
  208. ip dhcp excluded-address 10.10.8.1 10.10.8.5
  209. ip dhcp pool vlan2pool
  210. network 10.10.2.0 255.255.255.0
  211. default-router 10.10.2.1
  212. dns-server 192.168.200.225
  213. ip dhcp pool vlan4pool
  214. network 10.10.4.0 255.255.255.0
  215. default-router 10.10.4.1
  216. dns-server 192.168.200.225
  217. ip dhcp pool vlan8pool
  218. network 10.10.8.0 255.255.255.0
  219. default-router 10.10.8.1
  220. dns-server 192.168.200.225
  221. exit
  222.  
  223. –ACCESS LIST
  224. access-list 1 permit 10.10.15.0 0.0.0.255
  225. interface gi0/1.25
  226. ip access-group 1 out
  227.  
  228. #######–SW-A
  229.  
  230. hostname Bldg1
  231. no ip domain-lookup
  232. enable secret cisco
  233. line console 0
  234. logging synchronous
  235. password cisco
  236. login
  237. line vty 0 15
  238. password cisco
  239. login
  240. service password-encryption
  241. banner motd @Authorized acces only!@
  242.  
  243. ip default-gateway 10.10.25.1
  244. vlan 2
  245. name sales
  246. vlan 4
  247. name prod
  248. vlan 8
  249. name acct
  250. vlan 15
  251. name admin
  252. vlan 25
  253. name SVI-NET
  254. vlan 99
  255. name null
  256. interface vlan 25
  257. ip address 10.10.25.254 255.255.255.0
  258. no shutdown
  259.  
  260. interface fa0/5
  261. switchport mode acces
  262. switchport acces vlan 2
  263.  
  264. interface fa0/10
  265. switchport mode acces
  266. switchport acces vlan 4
  267.  
  268. interface fa0/15
  269. switchport mode acces
  270. switchport acces vlan 8
  271.  
  272. interface fa0/24
  273. switchport mode acces
  274. switchport acces vlan 15
  275.  
  276. interface range fa0/6-9,fa0/11-14,fa0/16-23
  277. switchport mode acces
  278. switchport acces vlan 99
  279. shutdown
  280.  
  281. interface range gi1/1-2
  282. switchport mode acces
  283. switchport acces vlan 99
  284. shutdown
  285.  
  286. – ETHERCHANNEL
  287. interface range fa0/1-2
  288. channel-group 1 mode active
  289. interface port-channel 1
  290. switchport mode trunk
  291. interface range fa0/3-4
  292. channel-group 2 mode active
  293. interface port-channel 2
  294. switchport mode trunk
  295. exit
  296.  
  297. –PVST+
  298. spanning-tree mode rapid-pvst
  299. spanning-tree vlan 2 root primary
  300. spanning-tree vlan 4 root primary
  301. spanning-tree vlan 8 root secondary
  302. spanning-tree vlan 15 root secondary
  303.  
  304. –SECURITY
  305. interface fa0/5
  306. switchport port-security
  307. switchport port-security violation restrict
  308. switchport port-security maximum 2
  309. switchport port-security mac-address sticky
  310.  
  311. interface fa0/10
  312. switchport port-security
  313. switchport port-security violation restrict
  314. switchport port-security maximum 2
  315. switchport port-security mac-address sticky
  316.  
  317. interface fa0/15
  318. switchport port-security
  319. switchport port-security violation restrict
  320. switchport port-security maximum 2
  321. switchport port-security mac-address sticky
  322.  
  323. interface fa0/24
  324. switchport port-security
  325. switchport port-security violation restrict
  326. switchport port-security maximum 2
  327. switchport port-security mac-address sticky
  328.  
  329. #######–SW-B
  330.  
  331. hostname Bldg2
  332. no ip domain-lookup
  333. enable secret cisco
  334. line console 0
  335. logging synchronous
  336. password cisco
  337. login
  338. line vty 0 15
  339. password cisco
  340. login
  341. service password-encryption
  342. banner motd @Authorized acces only!@
  343.  
  344. – SSH
  345. ip ssh version 2
  346. ip domain-name ccnaPTSA.com
  347. crypto key generate rsa
  348. username netadmin password SSH_secret9
  349. line vty 0 4
  350. login local
  351. transport input ssh
  352. line vty 5 15
  353. login local
  354. transport input ssh
  355.  
  356. ip default-gateway 10.10.25.1
  357. vlan 2
  358. name sales
  359. vlan 4
  360. name prod
  361. vlan 8
  362. name acct
  363. vlan 15
  364. name admin
  365. vlan 25
  366. name SVI-NET
  367. vlan 99
  368. name null
  369. interface vlan 25
  370. ip address 10.10.25.253 255.255.255.0
  371. no shutdown
  372. interface gi 1/1
  373. switchport mode trunk
  374.  
  375. – ETHERCHANNEL
  376. interface range fa0/3-4
  377. channel-group 2 mode active
  378. interface port-channel 2
  379. switchport mode trunk
  380. interface range fa0/5-6
  381. channel-group 3 mode active
  382. interface port-channel 3
  383. switchport mode trunk
  384.  
  385. –PVST+
  386. spanning-tree mode rapid-pvst
  387.  
  388. #########– SW-C
  389.  
  390. hostname Bldg3
  391. no ip domain-lookup
  392. enable secret cisco
  393. line console 0
  394. logging synchronous
  395. password cisco
  396. login
  397. line vty 0 15
  398. password cisco
  399. login
  400. service password-encryption
  401. banner motd @Authorized acces only !@
  402.  
  403. ip default-gateway 10.10.25.1
  404. vlan 2
  405. name sales
  406. vlan 4
  407. name prod
  408. vlan 8
  409. name acct
  410. vlan 15
  411. name admin
  412. vlan 25
  413. name SVI-NET
  414. vlan 99
  415. name null
  416. interface vlan 25
  417. ip address 10.10.25.252 255.255.255.0
  418. no shutdown
  419.  
  420. interface fa0/7
  421. switchport mode acces
  422. switchport acces vlan 2
  423.  
  424. interface fa0/10
  425. switchport mode acces
  426. switchport acces vlan 4
  427.  
  428. interface fa0/15
  429. switchport mode acces
  430. switchport acces vlan 8
  431.  
  432. interface fa0/24
  433. switchport mode acces
  434. switchport acces vlan 15
  435.  
  436. – ETHERCHANNEL
  437. interface range fa0/1-2
  438. channel-group 1 mode active
  439. no shutdown
  440. interface port-channel 1
  441. switchport mode trunk
  442.  
  443. interface range fa0/5-6
  444. channel-group 3 mode passive
  445. no shutdown
  446. interface port-channel 3
  447. switchport mode trunk
  448.  
  449. –PVST+
  450. spanning-tree mode rapid-pvst
  451. spanning-tree vlan 2 root secondary
  452. spanning-tree vlan 4 root secondary
  453. spanning-tree vlan 8 root primary
  454. spanning-tree vlan 15 root primary
  455.  
  456. –Port Fast BPDU Guard
  457. interface range fa0/7, fa0/10, fa0/15, fa0/24
  458. spanning-tree portfast
  459. spanning-tree bpduguard enable
  460. no shutdown
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!