security lab config (not copy paste)

!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Internal_RTR
!
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
!
license udi pid CISCO2911/K9 sn FTX15248396
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
 ip address 10.64.0.3 255.255.255.248
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet0/2
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
router ospf 10
 log-adjacency-changes
 network 10.64.0.0 0.0.0.7 area 0
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end


--------------Internal_RTR CONFIG-----------------------------

service password-encryption
hostname Internal_RTR
enable secret cisco
enable password cisco1
username sshuser password 0 sshpassword
!
ip domain-name cy350.com
crypto key generate rsa
1024
ip ssh version 2
!
interface GigabitEthernet0/0
 ip address 10.64.0.3 255.255.255.248
 no shutdown
!
interface GigabitEthernet0/1
 description TO INT_SW
 no shutdown
!
interface GigabitEthernet0/1.11
 description VLAN 11
 encapsulation dot1q 11
 ip address 10.64.3.126 255.255.255.128
!
interface GigabitEthernet0/1.12
 description VLAN 12
 encapsulation dot1q 12
 ip address 10.64.3.190 255.255.255.192
!
interface GigabitEthernet0/1.13
 description VLAN 13
 encapsulation dot1q 13
 ip address 10.10.10.62 255.255.255.192
 ip nat inside
!
interface GigabitEthernet 0/1.14
 description VLAN 40
 encapsulation dot1q 40
 ip address 10.64.3.230 255.255.255.248
!
router ospf 10
 network 10.64.0.0 0.0.0.7 area 0
 network 10.64.3.0 0.0.0.127 area 0
 network 10.64.3.128 0.0.0.63 area 0
 network 10.10.10.0 0.0.0.63 area 0
 network 10.64.3.224 0.0.0.15 area 0
!
banner login # This is the remote login for Internal_RTR #
banner motd # Welcome to Internal_RTR #
!
line con 0
 password cisco
line vty 0 15
 password cisco
 login local
 transport input ssh
end


--------------Internal_SW CONFIG-----------------------------

service password-encryption
hostname Internal_SW
enable secret cisco
enable password cisco1
username sshuser password 0 sshpassword
!
ip domain-name cy350.com
crypto key generate rsa
1024
ip ssh version 2
!
vlan 11
 name Sales
vlan 12
 name Engineering
vlan 13
 name HR
vlan 14
 name MGMT
!
interface vlan 14
 description vlan self
 ip address 10.64.3.225 255.255.255.240
 no shutdown
!
interface FastEthernet0/1
 description to IntRTR
 switchport mode trunk
 switchport trunk allowed vlan 11,12,13,14
!
interface FastEthernet0/2
 description to PC2
 switchport mode access
 switchport access vlan 11
!
interface FastEthernet0/3
 description to PC3
 switchport mode access
 switchport access vlan 12
!
interface FastEthernet0/4
 description to PC4
 switchport mode access
 switchport access vlan 13
!
interface FastEthernet0/5
 description to PC5
 switchport mode access
 switchport access vlan 14
!
banner login # This is the remote login for Internal_SW #
banner motd # Welcome to Internal_SW #
!
line con 0
 password cisco
line vty 0 15
 password cisco
 login local
 transport input ssh
end