Teknologisk videncenter - User contributions [en]

Mobile og trådløse systemer - GPRS

2010-08-24T08:50:25Z

Mdp: /* Coding Schemes */

= GPRS =

== Indledning ==

General packet radio service (GPRS) er en pakke orienteret mobil data service. GPRS er en udvidelse til GSM som køre på 2G nettet.

Da mobiltelefonerne for alvor begyndt at vinde frem blev GSM teknologien efterhånden for langsom til services så som download af ringetoner, små billeder osv. Derfor udviklede man GPRS som en teknologi man relativt nemt kunne bygge oven på GSM. Grundet dette var det også en teknologi mobilselskaberne kunne implementere uden de store udfordringer. Det medvirkede til at teknologien hurtigt blev udbredt. GPRS muliggjorde blandt andet de første MMS beskeder. Det var også GPRS der grundlagde muligheden for internet på mobilen. Med GPRS fik man muligheden for at gå ind på WAP baserede sider med en hastighed der svarede til et opkaldsmodem.

Nogle gange er det billigere at opgradere et eksisterende system frem for at udvikle et helt nyt. Dette er tilfældet når man snakker om GSM og GPRS. For at forlænge levetiden af GSM standarten, blev GPRS implementeret sammen men dens features og nye muligheder. Dette tillod det aldrende GSM net at leve lidt længere da GPRS kunne kompensere for det øgede behov der blev på GSM nettet. Behovet er dog siden da vokset endnu mere og derfor har man nu implementeret det nye 3G net.

Når man bruger GPRS fra mobil telefoner betaler man ofte pr megabyte, hvor man sammenlignet med en normal modem opkobling betaler pr minut. GPRS data køre som bedst-effort , hvorimod almindelig modem trafik (circuit switching) er sikret en hvis kvalitet (QoS).

2G systemer kombineret med GPRS er ofte også beskrevet som 2,5G der er en teknologi mellem 2G og tredje generation af mobil telefoni - 3G. GPRS opnår sin moderate hastighed ved at bruge, ubrugte TDMA (time division multiple access) kanaler i for eksempel GSM systemet. Oprindelig var det tænkt at GPRS også skulle implementeres i andre standarter, men disse netværk er i stedet blevet konverteret til at bruge GSM standarten. Det betyder at GSM er den eneste form for netværk, hvor GPRS er i brug.

[[Image:2GEvo.jpg]]

GPRS er en videreudvikling af GSM, og er bagudkompatibelt. Der er også lavet endnu en udbygning på GPRS, kaldet EDGE. I dag har 3G teknologierne overtaget størstedelen af dataoverførslerne på det mobile marked, mens EDGE og GPRS stadig bruges til ældre telefoner – og områder hvor der endnu ikke er et tilstrækkeligt dækkende 3G net.

Adressering for GPRS enheder er opbygget i 2 dele, som kaldes et Access Point Name (APN). Network Identifier og Operator Identifier, hvor kun Network Identifier er obligatorisk.
Network identifier er navnet på det netværk som en enhed kan tilgå ved udbyderen, fx internet eller wap.
Operator Identifier består af en Mobile Network Code samt en Mobile County Code, som tilsammen giver en slags domænenavn.
Eks. Internet.mnc010.mmc100

== Services og protokoller ==

=== MMS ===
Er standarden som tillader afsendelse og modtagelse af multimedia indhold på mobilen. Billede, video og lyd. MMS er en videreudvikling af sms’en som bekendt kun kan indeholde tekst. MMS bruges for det meste i forbindelse med billeder taget med en kamera mobil. MMS havde en del børnesygdomme i starten, og var blandt andet plaget af fejl i selve afsendelse/modtagelses processen. Problematikken kunne fx ligge i manglende lyd eller video ved afsendelse af et videoklip.

=== Push to talk ===
Push to talk tillader walkie talkie funktionalitet over det mobile netværk.
Der benyttes half dublex, hvilket i praksis betyder at der kun kan være en afsender af gangen. Push to talk vil i nogle tilfælde være lettere at benytte i forbindelse med simple konference kald, da man ikke skal bruge tid på, at samle alle parter sammen vha. Telefonnumre mv. Push to talk vil typisk være en service man betaler ekstra for. Servicen er aldrig rigtigt slået igennem i Danmark, og er langt fra lige så populært som det er i fx USA.

=== Instant messaging ===
IM har efterhånden en del år på bagen, og blev i sin tid opfundet med det formål, at lade to personer chatte sammen uden forsinkelse. Senere blev det ligeledes muligt, at chatte med mere end en person af gangen. Udviklingen af både mobiltelefonen og det mobile net, har betydet at det nu også er muligt at bruge IM via mobilen.

=== WAP ===

Wireless application protocol. Opfindelsen af WAP muliggjorde tilgangen til mobile netværk fra mobilen. Datidens hastigheder på det mobile netværk, lagde en begrænsning i hvad der kunne vises på mobilen. Der blev derfor lavet specielle simplificerede udgaver af hjemmesiderne kaldet WML (Wireless Markup Language) Udbredelsen af WAP gav mulighed for at få email, sports resultater, nyheds overskrifter, aktiekurser mm. ud på mobilen. WAP hjemmesider kan sammenlignes med nutidens RSS Feeds.

=== Point-to-point ===

Point to point tele kommunikation er overførelse af data sendt mellem to parter. De to computere er ansvarlige for al kommunikationen, og den data formatering der måtte finde sted. Forbindelsen mellem de to computere skabes typisk igennem et RS-232 kabel, hvilket svarer til nutiden serial port. Computere som står indenfor for fysisk kort afstand, vil typisk blive forbundet vha. kabel, men er afstanden for stor bruges der en trådløs forbindelse. Hver computer vil således blive udstyret med et modem til, at konvertere den analoge telekommunikation til det digitale som computerne bruger.

Hastighedsforskellen i afsendelse af sms på henholdsvis GSM og GPRS er, 8-10 stk. pr. minut mod 30 stk. pr. minut på GPRS.

=== Protokoller ===

GPRS understøtter følgende protokoller:

IP – Typisk vil en mobilenhed benytte sig af IP til internetadgang. Oftest i form af TCP/IP, for at undgå pakketab når enheden bevæger sig mellem cells.

PPP – Ved hjælp af PPP kan mobile enheder bruges som modem til en PC.

X.25 – Typisk brugt til f.eks. trådløse betalingsterminaler. Er ikke længere en del af standarden, men kan stadig bruges.

GPRS har i sig selv rigtigt meget overhead. Bare noget så simpelt som en HTTP request kræver en protokol stack på omkring 11 headers, selvfølgelig alt afhængig af netværkets opbygning og opsætning. Det kan løbe op omkring de 50 bytes, selv for små pakker som TCP SYN. Et eksempel kunne være:

HTTP<->TCP<->IP<->PPP<->SNDCP<->LLC<->BSSGP<->NS<->UDP<->IP<->Ethernet

== Hardware ==

Enheder der understøtter GPRS er delt op i tre klasser:

"Klasse A"

Kan både bruge GPRS og GSM på samme tid, hvilket vil sige at man f.eks kan være på nettet samme tid med at man ringer ..

"Klasse B"

Når en klasse B enhed modtager et opkald og begynder at bruge GSM lukker den for GPRS forbindelsen, men tænder så selv for forbindelsen efter opkaldet.

"Klasse C"

I modsætning til klasse B enheden, skal man på denne enhed selv manuelt skifte om den skal bruge GPRS eller GSM.

Dog er telefoner nu til dages i stand til at både håndtere GSM og GPRS, i modsætning til før tid hvor telefoner normalt var en Klasse B.. I dag har telefoner DTM ( Dual Transfer Mode ). Hvilket giver dem evnen til at transmittere flere frekvenser på en gang, derfor gør dem det til en klasse A.

== Coding Schemes ==

Coding Scheme Speed ( kbit/s )

CS - 1 8.0
CS - 2 12.0
CS - 3 14.4
CS - 4 20.0

CS - 4 er uden tvivl den hurtigst metode men også den mest ustabile. Denne metode er kun tilgængelig tæt på en Base Transceiver Station idet denne metode bruger meget korte radiobølger og derfor kan de ikke når langt, hvorimod CS - 1 køre meget langsomt men bruger så store radiobølger at de når meget længere væk fra Base Tranceiver Stationen.

== Multislot Class ==

Alle GPRS enheder tilhører en Multislot klasser mellem 1-45. Klassen afgør hvor mange radio timeslots som enheden får tildelt, hvilket delvis afgør hvor hurtig enheden kan uploade og downloade. 

Multislot klassen bliver brugt af netværket til at finde ud af hvor mange upload og download radio kanaler enheden skal have tildelt. 

F.eks hvis man ser på klasse 10 har den 4 download timeslots, og 2 upload timeslots, og den kan udnytte 5 adgangen. Netværket vil selv konfigurer enheden til 3+2 hvis man uploader meget, eller 4+1 hvis man downloader meget. 

Hver timeslot kan maximum overføre med 59.2kbit/s, så hvis man har 4 download timeslots kan man download med 4*59,2kbit/s = 236,8kbit/s. Og uploaden vil så være 1*59,2kbit/s = 59.2kbits

=== Tabel over multislot klasser ===

:

{| class="wikitable FCK__ShowTableBorders"
|-
!  Multislot Class 
!  Downlink TS 
!  Uplink TS 
!  Active TS 
|- align="center"
| 1
| 1
| 1
| 2
|- align="center"
| 2
| 2
| 1
| 3
|- align="center"
| 3
| 2
| 2
| 3
|- align="center"
| 4
| 3
| 1
| 4
|- align="center"
| 5
| 2
| 2
| 4
|- align="center"
| 6
| 3
| 2
| 4
|- align="center"
| 7
| 3
| 3
| 4
|- align="center"
| 8
| 4
| 1
| 5
|- align="center"
| 9
| 3
| 2
| 5
|- align="center"
| 10
| 4
| 2
| 5
|- align="center"
| 11
| 4
| 3
| 5
|- align="center"
| 12
| 4
| 4
| 5
|- align="center"
| 30
| 5
| 1
| 6
|- align="center"
| 31
| 5
| 2
| 6
|- align="center"
| 32
| 5
| 3
| 6
|- align="center"
| 33
| 5
| 4
| 6
|- align="center"
| 34
| 5
| 5
| 6
|}

Mobile og trådløse systemer - GPRS

2010-08-24T08:49:28Z

Mdp: /* Hardware */

= GPRS =

== Indledning ==

General packet radio service (GPRS) er en pakke orienteret mobil data service. GPRS er en udvidelse til GSM som køre på 2G nettet.

Da mobiltelefonerne for alvor begyndt at vinde frem blev GSM teknologien efterhånden for langsom til services så som download af ringetoner, små billeder osv. Derfor udviklede man GPRS som en teknologi man relativt nemt kunne bygge oven på GSM. Grundet dette var det også en teknologi mobilselskaberne kunne implementere uden de store udfordringer. Det medvirkede til at teknologien hurtigt blev udbredt. GPRS muliggjorde blandt andet de første MMS beskeder. Det var også GPRS der grundlagde muligheden for internet på mobilen. Med GPRS fik man muligheden for at gå ind på WAP baserede sider med en hastighed der svarede til et opkaldsmodem.

Nogle gange er det billigere at opgradere et eksisterende system frem for at udvikle et helt nyt. Dette er tilfældet når man snakker om GSM og GPRS. For at forlænge levetiden af GSM standarten, blev GPRS implementeret sammen men dens features og nye muligheder. Dette tillod det aldrende GSM net at leve lidt længere da GPRS kunne kompensere for det øgede behov der blev på GSM nettet. Behovet er dog siden da vokset endnu mere og derfor har man nu implementeret det nye 3G net.

Når man bruger GPRS fra mobil telefoner betaler man ofte pr megabyte, hvor man sammenlignet med en normal modem opkobling betaler pr minut. GPRS data køre som bedst-effort , hvorimod almindelig modem trafik (circuit switching) er sikret en hvis kvalitet (QoS).

2G systemer kombineret med GPRS er ofte også beskrevet som 2,5G der er en teknologi mellem 2G og tredje generation af mobil telefoni - 3G. GPRS opnår sin moderate hastighed ved at bruge, ubrugte TDMA (time division multiple access) kanaler i for eksempel GSM systemet. Oprindelig var det tænkt at GPRS også skulle implementeres i andre standarter, men disse netværk er i stedet blevet konverteret til at bruge GSM standarten. Det betyder at GSM er den eneste form for netværk, hvor GPRS er i brug.

[[Image:2GEvo.jpg]]

GPRS er en videreudvikling af GSM, og er bagudkompatibelt. Der er også lavet endnu en udbygning på GPRS, kaldet EDGE. I dag har 3G teknologierne overtaget størstedelen af dataoverførslerne på det mobile marked, mens EDGE og GPRS stadig bruges til ældre telefoner – og områder hvor der endnu ikke er et tilstrækkeligt dækkende 3G net.

Adressering for GPRS enheder er opbygget i 2 dele, som kaldes et Access Point Name (APN). Network Identifier og Operator Identifier, hvor kun Network Identifier er obligatorisk.
Network identifier er navnet på det netværk som en enhed kan tilgå ved udbyderen, fx internet eller wap.
Operator Identifier består af en Mobile Network Code samt en Mobile County Code, som tilsammen giver en slags domænenavn.
Eks. Internet.mnc010.mmc100

== Services og protokoller ==

=== MMS ===
Er standarden som tillader afsendelse og modtagelse af multimedia indhold på mobilen. Billede, video og lyd. MMS er en videreudvikling af sms’en som bekendt kun kan indeholde tekst. MMS bruges for det meste i forbindelse med billeder taget med en kamera mobil. MMS havde en del børnesygdomme i starten, og var blandt andet plaget af fejl i selve afsendelse/modtagelses processen. Problematikken kunne fx ligge i manglende lyd eller video ved afsendelse af et videoklip.

=== Push to talk ===
Push to talk tillader walkie talkie funktionalitet over det mobile netværk.
Der benyttes half dublex, hvilket i praksis betyder at der kun kan være en afsender af gangen. Push to talk vil i nogle tilfælde være lettere at benytte i forbindelse med simple konference kald, da man ikke skal bruge tid på, at samle alle parter sammen vha. Telefonnumre mv. Push to talk vil typisk være en service man betaler ekstra for. Servicen er aldrig rigtigt slået igennem i Danmark, og er langt fra lige så populært som det er i fx USA.

=== Instant messaging ===
IM har efterhånden en del år på bagen, og blev i sin tid opfundet med det formål, at lade to personer chatte sammen uden forsinkelse. Senere blev det ligeledes muligt, at chatte med mere end en person af gangen. Udviklingen af både mobiltelefonen og det mobile net, har betydet at det nu også er muligt at bruge IM via mobilen.

=== WAP ===

Wireless application protocol. Opfindelsen af WAP muliggjorde tilgangen til mobile netværk fra mobilen. Datidens hastigheder på det mobile netværk, lagde en begrænsning i hvad der kunne vises på mobilen. Der blev derfor lavet specielle simplificerede udgaver af hjemmesiderne kaldet WML (Wireless Markup Language) Udbredelsen af WAP gav mulighed for at få email, sports resultater, nyheds overskrifter, aktiekurser mm. ud på mobilen. WAP hjemmesider kan sammenlignes med nutidens RSS Feeds.

=== Point-to-point ===

Point to point tele kommunikation er overførelse af data sendt mellem to parter. De to computere er ansvarlige for al kommunikationen, og den data formatering der måtte finde sted. Forbindelsen mellem de to computere skabes typisk igennem et RS-232 kabel, hvilket svarer til nutiden serial port. Computere som står indenfor for fysisk kort afstand, vil typisk blive forbundet vha. kabel, men er afstanden for stor bruges der en trådløs forbindelse. Hver computer vil således blive udstyret med et modem til, at konvertere den analoge telekommunikation til det digitale som computerne bruger.

Hastighedsforskellen i afsendelse af sms på henholdsvis GSM og GPRS er, 8-10 stk. pr. minut mod 30 stk. pr. minut på GPRS.

=== Protokoller ===

GPRS understøtter følgende protokoller:

IP – Typisk vil en mobilenhed benytte sig af IP til internetadgang. Oftest i form af TCP/IP, for at undgå pakketab når enheden bevæger sig mellem cells.

PPP – Ved hjælp af PPP kan mobile enheder bruges som modem til en PC.

X.25 – Typisk brugt til f.eks. trådløse betalingsterminaler. Er ikke længere en del af standarden, men kan stadig bruges.

GPRS har i sig selv rigtigt meget overhead. Bare noget så simpelt som en HTTP request kræver en protokol stack på omkring 11 headers, selvfølgelig alt afhængig af netværkets opbygning og opsætning. Det kan løbe op omkring de 50 bytes, selv for små pakker som TCP SYN. Et eksempel kunne være:

HTTP<->TCP<->IP<->PPP<->SNDCP<->LLC<->BSSGP<->NS<->UDP<->IP<->Ethernet

== Hardware ==

Enheder der understøtter GPRS er delt op i tre klasser:

"Klasse A"

Kan både bruge GPRS og GSM på samme tid, hvilket vil sige at man f.eks kan være på nettet samme tid med at man ringer ..

"Klasse B"

Når en klasse B enhed modtager et opkald og begynder at bruge GSM lukker den for GPRS forbindelsen, men tænder så selv for forbindelsen efter opkaldet.

"Klasse C"

I modsætning til klasse B enheden, skal man på denne enhed selv manuelt skifte om den skal bruge GPRS eller GSM.

Dog er telefoner nu til dages i stand til at både håndtere GSM og GPRS, i modsætning til før tid hvor telefoner normalt var en Klasse B.. I dag har telefoner DTM ( Dual Transfer Mode ). Hvilket giver dem evnen til at transmittere flere frekvenser på en gang, derfor gør dem det til en klasse A.

== Coding Schemes ==

== Multislot Class ==

Alle GPRS enheder tilhører en Multislot klasser mellem 1-45. Klassen afgør hvor mange radio timeslots som enheden får tildelt, hvilket delvis afgør hvor hurtig enheden kan uploade og downloade. 

Multislot klassen bliver brugt af netværket til at finde ud af hvor mange upload og download radio kanaler enheden skal have tildelt. 

F.eks hvis man ser på klasse 10 har den 4 download timeslots, og 2 upload timeslots, og den kan udnytte 5 adgangen. Netværket vil selv konfigurer enheden til 3+2 hvis man uploader meget, eller 4+1 hvis man downloader meget. 

Hver timeslot kan maximum overføre med 59.2kbit/s, så hvis man har 4 download timeslots kan man download med 4*59,2kbit/s = 236,8kbit/s. Og uploaden vil så være 1*59,2kbit/s = 59.2kbits

=== Tabel over multislot klasser ===

:

{| class="wikitable FCK__ShowTableBorders"
|-
!  Multislot Class 
!  Downlink TS 
!  Uplink TS 
!  Active TS 
|- align="center"
| 1
| 1
| 1
| 2
|- align="center"
| 2
| 2
| 1
| 3
|- align="center"
| 3
| 2
| 2
| 3
|- align="center"
| 4
| 3
| 1
| 4
|- align="center"
| 5
| 2
| 2
| 4
|- align="center"
| 6
| 3
| 2
| 4
|- align="center"
| 7
| 3
| 3
| 4
|- align="center"
| 8
| 4
| 1
| 5
|- align="center"
| 9
| 3
| 2
| 5
|- align="center"
| 10
| 4
| 2
| 5
|- align="center"
| 11
| 4
| 3
| 5
|- align="center"
| 12
| 4
| 4
| 5
|- align="center"
| 30
| 5
| 1
| 6
|- align="center"
| 31
| 5
| 2
| 6
|- align="center"
| 32
| 5
| 3
| 6
|- align="center"
| 33
| 5
| 4
| 6
|- align="center"
| 34
| 5
| 5
| 6
|}

Datacenter CCNP 3 - december 2009

2009-12-14T13:24:48Z

Mdp:

[[Image:Datacenter V2.png|thumb|none|800px|Datacenter CCNP 3]]

[[Image:IP.PNG|thumb|none|800px|Ip Tabel]]

[[Image:Setup1.JPG|thumb|none|800px|Al magt til hp]]

[[category:Cisco]][[category:IOS]]
= Access Layer =

== Lokale 1 ==
<pre>
Building configuration...

Current configuration : 4993 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale1
!
enable secret 5 $1$uw0B$hEkCpsrPMRzcE5hX5UGo90
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.11 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 2 ==
<pre>
Building configuration...

Current configuration : 5556 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale2
!
enable secret 5 $1$2P6t$ucjfqPwCMeUBxZyTLav3i.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.12 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 3 ==
<pre>
Building configuration...

Current configuration : 4981 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale3
!
enable secret 5 $1$LOyI$LS5WuzEu24t1OzAwUJP6/.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
description Management vlan 100
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.13 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 4 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale4
!
enable secret 5 $1$KOZv$LdtOuJqvW3nmYPoYysh7R1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
ip name-server 172.16.4.77
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan4
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.14 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Lokale 5 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale5
!
enable secret 5 $1$I6yz$c61ibt/0Ifi.QQhsjBPFj1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
no ip domain-lookup
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGRION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan5
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.15 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

== Lokale 6 ==
<pre>
Building configuration...

Current configuration : 5084 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale6
!
enable secret 5 $1$Srka$tMOedwmQMi4WzrGo.b2YX/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 6
switchport mode access
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan6
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.16 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

= Distribution Layer =

== Distribution 1 ==
<pre>
Building configuration...

Current configuration : 5273 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$6Cq4$2JJ2WoEIpkhErwkOkQFwb.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.2.1 192.168.2.20
!
ip dhcp pool Lokale1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.3
dns-server 172.16.4.77
!
ip dhcp pool Lokale2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-201700352
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-201700352
revocation-check none
rsakeypair TP-self-signed-201700352
!
!
crypto pki certificate chain TP-self-signed-201700352
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32303137 30303335 32301E17 0D393330 33303130 30303130
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3230 31373030
33353230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C037C167 F4C36547 30273FA3 A9F114E7 2987E23C 45C63C19 B728D92F 3F0F5D81
FA590DAD 5CB8A9F1 410A7775 BA4C8C46 99A375E7 BB4501AD 1E5EA063 BDD657C9
71B08A7F 480DBA2D A1FE403E F6DB281E ED66CB2E AF2AA97C 53B93EEB 50CF3745
327851B9 6D6AA1FE 985D9654 45B4F445 70729C77 93ECA5CE 3F7356F2 E256BC8B
02030100 01A36E30 6C300F06 03551D13 0101FF04 05300301 01FF3019 0603551D
11041230 10820E44 69737472 69627574 696F6E31 2E301F06 03551D23 04183016
8014C42D FB57C926 B42FA71E BE55D5D7 13A7D8B0 1821301D 0603551D 0E041604
14C42DFB 57C926B4 2FA71EBE 55D5D713 A7D8B018 21300D06 092A8648 86F70D01
01040500 03818100 4953F22D D2BD99DE 3BFE27EB 9501FB2C BDF39899 07C2932A
023F7F71 56190673 81803DB9 76DF3FAE 74A24B5F 9628BF08 3315D673 E5741E10
8255C041 BEC57E3E AAD42992 8B299643 8930DC2D 08A68953 068AEF34 B4BE4BE1
F5C8F31D 0A20310F 5C31A5B9 B69FAD5E EEC99907 1CD0CDBE EBBE9A00 6705E270
AC2F7077 AAFC0B48
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 24576
spanning-tree mst 2 priority 28672
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel5
no switchport
ip address 10.0.0.46 255.255.255.252
!
interface Port-channel7
no switchport
ip address 10.0.0.2 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 200
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 2 ip 192.168.2.3
standby 2 priority 200
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 3 ip 192.168.3.3
standby 3 priority 150
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 100 ip 192.168.100.3
standby 100 priority 150
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.44 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Distribution 2 ==
<pre>
Building configuration...

Current configuration : 6251 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution2
!
enable secret 5 $1$pEkP$V/sE.K6gTww6uBWPNRK060
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip dhcp excluded-address 192.168.3.1 192.168.3.20
ip dhcp excluded-address 192.168.100.1 192.168.100.20
!
ip dhcp pool Lokale3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.100.0 255.255.255.0
default-router 192.168.100.3
dns-server 172.16.4.77
!
!
!
crypto pki trustpoint TP-self-signed-1708353664
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1708353664
revocation-check none
rsakeypair TP-self-signed-1708353664
!
!
crypto pki certificate chain TP-self-signed-1708353664
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373038 33353336 3634301E 170D3933 30333031 30303031
30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37303833
35333636 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB1C 4EB2426C 154FE1EC A921C666 B8A7B001 5B32CC4A 5AEFDF28 AD1163EC
99A0BD35 C035EB94 6EB3E5EF F8EF6F79 72E2C2E0 DEC9E587 5AFE353F 5A3100F2
890BD9EA D189A010 1B352DF0 03F477A7 A23ACFAF D6743C5E 08FCBE6D 44EF3E4D
04BFEA58 573F5ECC 6F3509D8 6B603D74 296FE485 7EDD39D8 318DD050 D2A871E8
68110203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E322E30 1F060355 1D230418
30168014 DB7110DA F3D5436A 80BA951B F015E53C 446E2C32 301D0603 551D0E04
160414DB 7110DAF3 D5436A80 BA951BF0 15E53C44 6E2C3230 0D06092A 864886F7
0D010104 05000381 81000A06 CB3DB008 64B56E19 2DAD6A83 22B538B5 1CD5B0D7
DE7D83B9 5F64337C 0F42ED1B 3B2075C2 6A3F2A36 DE873A8F FA5546A1 EAED43DB
4F7B9186 A71BA26B 8689FB18 B5E923D7 649548EE 79EB2E9B 41D542C5 2C6C18FC
D9BF10E8 E66065A0 1D67F658 B837D2D8 8A5E218F E89A1D62 85029DB0 8CB27D76
EC50335C 9F70886C 32DF
quit
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel4
no switchport
ip address 10.0.0.6 255.255.255.252
!
interface Port-channel6
no switchport
ip address 10.0.0.50 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport mode dynamic desirable
!
interface FastEthernet0/24
switchport mode dynamic desirable
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 150
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
standby 2 ip 192.168.2.3
standby 2 timers msec 150 msec 500
standby 2 priority 150
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
standby 3 ip 192.168.3.3
standby 3 timers msec 150 msec 500
standby 3 priority 200
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.1 255.255.255.0
standby 100 ip 192.168.100.3
standby 100 timers msec 150 msec 500
standby 100 priority 200
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
ip access-list extended EXTERN
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended INTERN
permit ip any 10.0.0.0 0.255.255.255
permit ip any 192.168.0.0 0.0.255.255
deny ip any any
!
route-map tester permit 10
!
route-map INTERNET permit 10
match ip address INTERN
!
route-map INTERNET permit 20
match ip address EXTERN
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
end
</pre>

== Distribution 3 ==
<pre>

Building configuration...

Current configuration : 5220 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution3
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$36zr$fFbFrAnE1AxVLaskUDIQD0
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
ip name-server 172.16.4.77
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.4.1 192.168.4.20
ip dhcp excluded-address 192.168.5.1 192.168.5.20
!
ip dhcp pool Lokale4
network 192.168.4.0 255.255.255.0
dns-server 172.16.4.77
default-router 192.168.4.3
!
ip dhcp pool Lokale5
network 192.168.5.0 255.255.255.0
dns-server 172.16.4.77
default-router 192.168.5.3
!
!
!
!
crypto pki trustpoint TP-self-signed-410825728
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-410825728
revocation-check none
rsakeypair TP-self-signed-410825728
!
!
crypto pki certificate chain TP-self-signed-410825728
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34313038 32353732 38301E17 0D393330 33303130 30303035
375A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3431 30383235
37323830 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
E8DB7DE8 3C07C5D1 3D6049B8 DC0094CD 71D511F2 78B9A43D D0F5E49E 40814DAF
2373C9A1 DC611C26 1B180668 E627A4BE AFC6A372 92879186 CFCF36E7 FC6FDA3F
FCF8C9C4 EF116036 60470590 09190B6B 982A3DA6 DA7B88CB 0EF93063 CD52301C
E33A3217 C59114B9 3C20FFFD 1EF08197 F1C0A28F CDBE2EE2 34323521 5CA41B83
02030100 01A36E30 6C300F06 03551D13 0101FF04 05300301 01FF3019 0603551D
11041230 10820E44 69737472 69627574 696F6E33 2E301F06 03551D23 04183016
80140A7F 8FAB416A B162C720 BCE7FFCA E02F3B74 A63A301D 0603551D 0E041604
140A7F8F AB416AB1 62C720BC E7FFCAE0 2F3B74A6 3A300D06 092A8648 86F70D01
01040500 03818100 3C73A52B 612FDA78 C5FF0E2E 6B46CAF6 9A2D6124 1CC557A7
6ABB3C6E 3FEE163A 4AEB1048 4E45D624 5FB62290 237E51EF 435366D2 7A8C1F0C
02563314 400970F4 084F20D0 88C37F70 D4BF2678 CFEA2506 09EF05FE 9682FA84
1F37E1FF F017DB0E 26733D14 525CBC67 711422F9 B9124797 C70F04A6 CB9E4164
4567DD47 DB5B34E7
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
spanning-tree mst 1 priority 24576
spanning-tree mst 2 priority 28672
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel2
no switchport
ip address 10.0.0.42 255.255.255.252
!
interface Port-channel8
no switchport
ip address 10.0.0.26 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan4
ip address 192.168.4.2 255.255.255.0
standby 4 ip 192.168.4.3
standby 4 timers msec 150 msec 500
standby 4 priority 200
standby 4 preempt
!
interface Vlan5
ip address 192.168.5.2 255.255.255.0
standby 5 ip 192.168.5.3
standby 5 timers msec 150 msec 500
standby 5 priority 200
standby 5 preempt
!
interface Vlan6
ip address 192.168.6.2 255.255.255.0
standby 6 ip 192.168.6.3
standby 6 timers msec 150 msec 500
standby 6 priority 150
standby 6 preempt
!
interface Vlan101
ip address 192.168.101.2 255.255.255.0
standby 101 ip 192.168.101.3
standby 101 timers msec 150 msec 500
standby 101 priority 150
standby 101 preempt
!
router ospf 1
log-adjacency-changes
network 10.0.0.24 0.0.0.3 area 20
network 10.0.0.40 0.0.0.3 area 20
network 192.168.4.0 0.0.0.255 area 20
network 192.168.5.0 0.0.0.255 area 20
network 192.168.6.0 0.0.0.255 area 20
network 192.168.101.0 0.0.0.255 area 20
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end

Distribution3#

</pre>

== Distribution 4 ==
<pre>
Building configuration...

Current configuration : 5295 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$xp9V$.44zXpqSHz6qF52fkXu9T.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
ip name-server 172.16.4.77
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.6.1 192.168.6.20
ip dhcp excluded-address 192.168.101.1 192.168.101.20
!
ip dhcp pool Lokale6
network 192.168.6.0 255.255.255.0
default-router 192.168.6.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.101.0 255.255.255.0
default-router 192.168.101.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-3566145536
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3566145536
revocation-check none
rsakeypair TP-self-signed-3566145536
!
!
crypto pki certificate chain TP-self-signed-3566145536
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33353636 31343535 3336301E 170D3933 30333031 30303031
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 35363631
34353533 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CE09 DBDE13D1 3C071CB5 0C7242ED 6C030B46 A861E78F 12321E15 37C4F9CC
BFA848E5 B67F9CE4 A4EA8B3B 937A1A6F 9E864A37 BBC54F78 E43B0455 CBB26B58
33F2E5BC 03CE1615 51E8E8DA B18F2126 682F0D26 AD5D62B4 31A26B18 5F29A54D
90CEF185 C8AD0CC4 0A7CCCC3 757C1655 A872C303 01D64A02 9632C40F 9BFDC544
66A30203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E342E30 1F060355 1D230418
30168014 3ADDFEC4 95C6E919 93FE7E64 C24CBD8E 65AE4DDE 301D0603 551D0E04
1604143A DDFEC495 C6E91993 FE7E64C2 4CBD8E65 AE4DDE30 0D06092A 864886F7
0D010104 05000381 810073B3 E87E0B0E 471CF94D 2864E4C5 8FD24940 EECF8E29
BE029B2C 5A41332F 737230AB A601DF9D 6E6537A8 8F15B2A6 0721201F BFEE8EE6
51A5F253 960B6046 D44D4ADD 3FD06E0D E5556AA0 1EAFF320 BBC39DF2 DC475E40
D8D30835 05FFD99C 6098224D FAB9A1BE B69E9C68 F4BC09C1 FCDAB18B A167A4A2
0E116E1B 5D9BC026 EBE1
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel3
no switchport
ip address 10.0.0.22 255.255.255.252
!
interface Port-channel9
no switchport
ip address 10.0.0.38 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan4
ip address 192.168.4.1 255.255.255.0
standby 4 ip 192.168.4.3
standby 4 timers msec 150 msec 500
standby 4 priority 150
standby 4 preempt
!
interface Vlan5
ip address 192.168.5.1 255.255.255.0
standby 5 ip 192.168.5.3
standby 5 timers msec 150 msec 500
standby 5 priority 150
standby 5 preempt
!
interface Vlan6
ip address 192.168.6.1 255.255.255.0
standby 6 ip 192.168.6.3
standby 6 timers msec 150 msec 500
standby 6 priority 200
standby 6 preempt
!
interface Vlan101
ip address 192.168.101.1 255.255.255.0
standby 101 ip 192.168.101.3
standby 101 timers msec 150 msec 500
standby 101 priority 200
standby 101 preempt
!
router ospf 1
log-adjacency-changes
network 10.0.0.20 0.0.0.3 area 20
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.56 0.0.0.3 area 20
network 192.168.4.0 0.0.0.255 area 20
network 192.168.5.0 0.0.0.255 area 20
network 192.168.6.0 0.0.0.255 area 20
network 192.168.101.0 0.0.0.255 area 20
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

= Core Layer =

== Core 1 ==
<pre>

Building configuration...

Current configuration : 3530 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core1
!
enable secret 5 $1$BXJI$n2TaAv/v.uCcaK5s7Uuu60
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.13 255.255.255.252
!
interface Port-channel3
no switchport
ip address 10.0.0.21 255.255.255.252
ip policy route-map internet
!
interface Port-channel4
no switchport
ip address 10.0.0.5 255.255.255.252
ip policy route-map internet
!
interface Port-channel7
no switchport
ip address 10.0.0.1 255.255.255.252
ip policy route-map internet
!
interface Port-channel8
no switchport
ip address 10.0.0.25 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
no switchport
ip address 10.0.0.9 255.255.255.252
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
ip address 10.0.0.17 255.255.255.252
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/13
no switchport
no ip address
!
interface FastEthernet0/14
no switchport
no ip address
!
interface FastEthernet0/15
no switchport
no ip address
!
interface FastEthernet0/16
no switchport
no ip address
!
interface FastEthernet0/17
no switchport
no ip address
!
interface FastEthernet0/18
no switchport
no ip address
!
interface FastEthernet0/19
no switchport
no ip address
!
interface FastEthernet0/20
no switchport
no ip address
!
interface FastEthernet0/21
no switchport
no ip address
!
interface FastEthernet0/22
no switchport
no ip address
!
interface FastEthernet0/23
no switchport
no ip address
!
interface FastEthernet0/24
no switchport
no ip address
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.20 0.0.0.3 area 20
network 10.0.0.24 0.0.0.3 area 20
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.18
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

Core1#

</pre>

== Core 2 ==
<pre>

Building configuration...

Current configuration : 3574 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core2
!
enable secret 5 $1$8LPE$BNGBYpQDx1Jey86SO5.zu.
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip host dist1 10.0.0.2
ip host core1 10.0.0.1
ip host gw1 10.0.0.10
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host ac1 192.168.100.11
ip host dist4 10.0.0.38
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core2 10.0.0.29
ip host gw2 10.0.0.18
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.14 255.255.255.252
!
interface Port-channel2
no switchport
ip address 10.0.0.41 255.255.255.252
ip policy route-map internet
!
interface Port-channel5
no switchport
ip address 10.0.0.45 255.255.255.252
ip policy route-map internet
!
interface Port-channel6
no switchport
ip address 10.0.0.49 255.255.255.252
ip policy route-map internet
!
interface Port-channel9
no switchport
ip address 10.0.0.37 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
ip address 10.0.0.29 255.255.255.252
!
interface FastEthernet0/2
no switchport
ip address 10.0.0.33 255.255.255.252
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/5
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 1
log-adjacency-changes
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.28 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.40 0.0.0.3 area 20
network 10.0.0.44 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.30
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.34
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
!
end

Core2#

</pre>

= Gateways =

== Gateway 1 ==
<pre>

Building configuration...

Current configuration : 2317 bytes
!
! Last configuration change at 09:09:32 UTC Mon Dec 14 2009
! NVRAM config last updated at 13:00:01 UTC Fri Dec 11 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$SVTy$kFFE8ZQHYNjdhokEH84Gn0
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
no ip domain lookup
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host dist4 10.0.0.38
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host ac1 192.168.100.11
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.30 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1/0
switchport access vlan 20
!
interface FastEthernet0/1/1
shutdown
!
interface FastEthernet0/1/2
shutdown
!
interface FastEthernet0/1/3
shutdown
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan20
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.28 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan20 overload
ip nat inside source static tcp 10.254.0.1 23 interface Vlan20 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway1#

</pre>

== Gateway 2 ==
<pre>

Building configuration...

Current configuration : 2228 bytes
!
! No configuration change since last restart
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$vuPD$gxv5UIIr85nInRV.U0A4y/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host dist2 10.0.0.50
ip host dist3 10.0.0.26
ip host dist4 10.0.0.38
ip host ac1 192.168.100.11
ip host ac2 192.168.100.12
ip host ac3 192.168.100.13
ip host ac5 192.168.101.15
ip host ac6 192.168.101.16
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.2 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.34 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.18 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport access vlan 10
!
interface FastEthernet0/3/1
shutdown
!
interface FastEthernet0/3/2
shutdown
!
interface FastEthernet0/3/3
shutdown
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 192.168.138.1
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan10 overload
ip nat inside source static tcp 10.254.0.2 23 interface Vlan10 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway2#

</pre>

File:Setup1.JPG

2009-12-14T13:20:27Z

Mdp: uploaded a new version of "Image:Setup1.JPG"

File:Setup1.JPG

2009-12-14T13:15:55Z

Mdp:

Datacenter CCNP 3 - december 2009

2009-12-14T13:09:17Z

Mdp: /* Distribution 4 */

[[Image:Datacenter V2.png|thumb|none|800px|Datacenter CCNP 3]]

[[Image:IP.PNG|thumb|none|800px|Ip Tabel]]
[[category:Cisco]][[category:IOS]]
= Access Layer =

== Lokale 1 ==
<pre>
Building configuration...

Current configuration : 4993 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale1
!
enable secret 5 $1$uw0B$hEkCpsrPMRzcE5hX5UGo90
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.11 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 2 ==
<pre>
Building configuration...

Current configuration : 5556 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale2
!
enable secret 5 $1$2P6t$ucjfqPwCMeUBxZyTLav3i.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.12 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 3 ==
<pre>
Building configuration...

Current configuration : 4981 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale3
!
enable secret 5 $1$LOyI$LS5WuzEu24t1OzAwUJP6/.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
description Management vlan 100
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.13 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 4 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale4
!
enable secret 5 $1$KOZv$LdtOuJqvW3nmYPoYysh7R1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
ip name-server 172.16.4.77
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan4
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.14 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Lokale 5 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale5
!
enable secret 5 $1$I6yz$c61ibt/0Ifi.QQhsjBPFj1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
no ip domain-lookup
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGRION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan5
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.15 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

== Lokale 6 ==
<pre>
Building configuration...

Current configuration : 5084 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale6
!
enable secret 5 $1$Srka$tMOedwmQMi4WzrGo.b2YX/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 6
switchport mode access
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan6
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.16 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

= Distribution Layer =

== Distribution 1 ==
<pre>
Building configuration...

Current configuration : 5273 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$6Cq4$2JJ2WoEIpkhErwkOkQFwb.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.2.1 192.168.2.20
!
ip dhcp pool Lokale1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.3
dns-server 172.16.4.77
!
ip dhcp pool Lokale2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-201700352
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-201700352
revocation-check none
rsakeypair TP-self-signed-201700352
!
!
crypto pki certificate chain TP-self-signed-201700352
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32303137 30303335 32301E17 0D393330 33303130 30303130
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3230 31373030
33353230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C037C167 F4C36547 30273FA3 A9F114E7 2987E23C 45C63C19 B728D92F 3F0F5D81
FA590DAD 5CB8A9F1 410A7775 BA4C8C46 99A375E7 BB4501AD 1E5EA063 BDD657C9
71B08A7F 480DBA2D A1FE403E F6DB281E ED66CB2E AF2AA97C 53B93EEB 50CF3745
327851B9 6D6AA1FE 985D9654 45B4F445 70729C77 93ECA5CE 3F7356F2 E256BC8B
02030100 01A36E30 6C300F06 03551D13 0101FF04 05300301 01FF3019 0603551D
11041230 10820E44 69737472 69627574 696F6E31 2E301F06 03551D23 04183016
8014C42D FB57C926 B42FA71E BE55D5D7 13A7D8B0 1821301D 0603551D 0E041604
14C42DFB 57C926B4 2FA71EBE 55D5D713 A7D8B018 21300D06 092A8648 86F70D01
01040500 03818100 4953F22D D2BD99DE 3BFE27EB 9501FB2C BDF39899 07C2932A
023F7F71 56190673 81803DB9 76DF3FAE 74A24B5F 9628BF08 3315D673 E5741E10
8255C041 BEC57E3E AAD42992 8B299643 8930DC2D 08A68953 068AEF34 B4BE4BE1
F5C8F31D 0A20310F 5C31A5B9 B69FAD5E EEC99907 1CD0CDBE EBBE9A00 6705E270
AC2F7077 AAFC0B48
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 24576
spanning-tree mst 2 priority 28672
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel5
no switchport
ip address 10.0.0.46 255.255.255.252
!
interface Port-channel7
no switchport
ip address 10.0.0.2 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 200
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 2 ip 192.168.2.3
standby 2 priority 200
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 3 ip 192.168.3.3
standby 3 priority 150
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 100 ip 192.168.100.3
standby 100 priority 150
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.44 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Distribution 2 ==
<pre>
Building configuration...

Current configuration : 6251 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution2
!
enable secret 5 $1$pEkP$V/sE.K6gTww6uBWPNRK060
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip dhcp excluded-address 192.168.3.1 192.168.3.20
ip dhcp excluded-address 192.168.100.1 192.168.100.20
!
ip dhcp pool Lokale3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.100.0 255.255.255.0
default-router 192.168.100.3
dns-server 172.16.4.77
!
!
!
crypto pki trustpoint TP-self-signed-1708353664
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1708353664
revocation-check none
rsakeypair TP-self-signed-1708353664
!
!
crypto pki certificate chain TP-self-signed-1708353664
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373038 33353336 3634301E 170D3933 30333031 30303031
30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37303833
35333636 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB1C 4EB2426C 154FE1EC A921C666 B8A7B001 5B32CC4A 5AEFDF28 AD1163EC
99A0BD35 C035EB94 6EB3E5EF F8EF6F79 72E2C2E0 DEC9E587 5AFE353F 5A3100F2
890BD9EA D189A010 1B352DF0 03F477A7 A23ACFAF D6743C5E 08FCBE6D 44EF3E4D
04BFEA58 573F5ECC 6F3509D8 6B603D74 296FE485 7EDD39D8 318DD050 D2A871E8
68110203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E322E30 1F060355 1D230418
30168014 DB7110DA F3D5436A 80BA951B F015E53C 446E2C32 301D0603 551D0E04
160414DB 7110DAF3 D5436A80 BA951BF0 15E53C44 6E2C3230 0D06092A 864886F7
0D010104 05000381 81000A06 CB3DB008 64B56E19 2DAD6A83 22B538B5 1CD5B0D7
DE7D83B9 5F64337C 0F42ED1B 3B2075C2 6A3F2A36 DE873A8F FA5546A1 EAED43DB
4F7B9186 A71BA26B 8689FB18 B5E923D7 649548EE 79EB2E9B 41D542C5 2C6C18FC
D9BF10E8 E66065A0 1D67F658 B837D2D8 8A5E218F E89A1D62 85029DB0 8CB27D76
EC50335C 9F70886C 32DF
quit
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel4
no switchport
ip address 10.0.0.6 255.255.255.252
!
interface Port-channel6
no switchport
ip address 10.0.0.50 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport mode dynamic desirable
!
interface FastEthernet0/24
switchport mode dynamic desirable
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 150
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
standby 2 ip 192.168.2.3
standby 2 timers msec 150 msec 500
standby 2 priority 150
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
standby 3 ip 192.168.3.3
standby 3 timers msec 150 msec 500
standby 3 priority 200
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.1 255.255.255.0
standby 100 ip 192.168.100.3
standby 100 timers msec 150 msec 500
standby 100 priority 200
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
ip access-list extended EXTERN
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended INTERN
permit ip any 10.0.0.0 0.255.255.255
permit ip any 192.168.0.0 0.0.255.255
deny ip any any
!
route-map tester permit 10
!
route-map INTERNET permit 10
match ip address INTERN
!
route-map INTERNET permit 20
match ip address EXTERN
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
end
</pre>

== Distribution 3 ==
<pre>

</pre>

== Distribution 4 ==
<pre>
Building configuration...

Current configuration : 5295 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$xp9V$.44zXpqSHz6qF52fkXu9T.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
ip name-server 172.16.4.77
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.6.1 192.168.6.20
ip dhcp excluded-address 192.168.101.1 192.168.101.20
!
ip dhcp pool Lokale6
network 192.168.6.0 255.255.255.0
default-router 192.168.6.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.101.0 255.255.255.0
default-router 192.168.101.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-3566145536
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3566145536
revocation-check none
rsakeypair TP-self-signed-3566145536
!
!
crypto pki certificate chain TP-self-signed-3566145536
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33353636 31343535 3336301E 170D3933 30333031 30303031
30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 35363631
34353533 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CE09 DBDE13D1 3C071CB5 0C7242ED 6C030B46 A861E78F 12321E15 37C4F9CC
BFA848E5 B67F9CE4 A4EA8B3B 937A1A6F 9E864A37 BBC54F78 E43B0455 CBB26B58
33F2E5BC 03CE1615 51E8E8DA B18F2126 682F0D26 AD5D62B4 31A26B18 5F29A54D
90CEF185 C8AD0CC4 0A7CCCC3 757C1655 A872C303 01D64A02 9632C40F 9BFDC544
66A30203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E342E30 1F060355 1D230418
30168014 3ADDFEC4 95C6E919 93FE7E64 C24CBD8E 65AE4DDE 301D0603 551D0E04
1604143A DDFEC495 C6E91993 FE7E64C2 4CBD8E65 AE4DDE30 0D06092A 864886F7
0D010104 05000381 810073B3 E87E0B0E 471CF94D 2864E4C5 8FD24940 EECF8E29
BE029B2C 5A41332F 737230AB A601DF9D 6E6537A8 8F15B2A6 0721201F BFEE8EE6
51A5F253 960B6046 D44D4ADD 3FD06E0D E5556AA0 1EAFF320 BBC39DF2 DC475E40
D8D30835 05FFD99C 6098224D FAB9A1BE B69E9C68 F4BC09C1 FCDAB18B A167A4A2
0E116E1B 5D9BC026 EBE1
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel3
no switchport
ip address 10.0.0.22 255.255.255.252
!
interface Port-channel9
no switchport
ip address 10.0.0.38 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan4
ip address 192.168.4.1 255.255.255.0
standby 4 ip 192.168.4.3
standby 4 timers msec 150 msec 500
standby 4 priority 150
standby 4 preempt
!
interface Vlan5
ip address 192.168.5.1 255.255.255.0
standby 5 ip 192.168.5.3
standby 5 timers msec 150 msec 500
standby 5 priority 150
standby 5 preempt
!
interface Vlan6
ip address 192.168.6.1 255.255.255.0
standby 6 ip 192.168.6.3
standby 6 timers msec 150 msec 500
standby 6 priority 200
standby 6 preempt
!
interface Vlan101
ip address 192.168.101.1 255.255.255.0
standby 101 ip 192.168.101.3
standby 101 timers msec 150 msec 500
standby 101 priority 200
standby 101 preempt
!
router ospf 1
log-adjacency-changes
network 10.0.0.20 0.0.0.3 area 20
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.56 0.0.0.3 area 20
network 192.168.4.0 0.0.0.255 area 20
network 192.168.5.0 0.0.0.255 area 20
network 192.168.6.0 0.0.0.255 area 20
network 192.168.101.0 0.0.0.255 area 20
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

= Core Layer =

== Core 1 ==
<pre>

Building configuration...

Current configuration : 3530 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core1
!
enable secret 5 $1$BXJI$n2TaAv/v.uCcaK5s7Uuu60
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.13 255.255.255.252
!
interface Port-channel3
no switchport
ip address 10.0.0.21 255.255.255.252
ip policy route-map internet
!
interface Port-channel4
no switchport
ip address 10.0.0.5 255.255.255.252
ip policy route-map internet
!
interface Port-channel7
no switchport
ip address 10.0.0.1 255.255.255.252
ip policy route-map internet
!
interface Port-channel8
no switchport
ip address 10.0.0.25 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
no switchport
ip address 10.0.0.9 255.255.255.252
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
ip address 10.0.0.17 255.255.255.252
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/13
no switchport
no ip address
!
interface FastEthernet0/14
no switchport
no ip address
!
interface FastEthernet0/15
no switchport
no ip address
!
interface FastEthernet0/16
no switchport
no ip address
!
interface FastEthernet0/17
no switchport
no ip address
!
interface FastEthernet0/18
no switchport
no ip address
!
interface FastEthernet0/19
no switchport
no ip address
!
interface FastEthernet0/20
no switchport
no ip address
!
interface FastEthernet0/21
no switchport
no ip address
!
interface FastEthernet0/22
no switchport
no ip address
!
interface FastEthernet0/23
no switchport
no ip address
!
interface FastEthernet0/24
no switchport
no ip address
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.20 0.0.0.3 area 20
network 10.0.0.24 0.0.0.3 area 20
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.18
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

Core1#

</pre>

== Core 2 ==
<pre>

Building configuration...

Current configuration : 3574 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core2
!
enable secret 5 $1$8LPE$BNGBYpQDx1Jey86SO5.zu.
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip host dist1 10.0.0.2
ip host core1 10.0.0.1
ip host gw1 10.0.0.10
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host ac1 192.168.100.11
ip host dist4 10.0.0.38
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core2 10.0.0.29
ip host gw2 10.0.0.18
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.14 255.255.255.252
!
interface Port-channel2
no switchport
ip address 10.0.0.41 255.255.255.252
ip policy route-map internet
!
interface Port-channel5
no switchport
ip address 10.0.0.45 255.255.255.252
ip policy route-map internet
!
interface Port-channel6
no switchport
ip address 10.0.0.49 255.255.255.252
ip policy route-map internet
!
interface Port-channel9
no switchport
ip address 10.0.0.37 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
ip address 10.0.0.29 255.255.255.252
!
interface FastEthernet0/2
no switchport
ip address 10.0.0.33 255.255.255.252
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/5
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 1
log-adjacency-changes
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.28 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.40 0.0.0.3 area 20
network 10.0.0.44 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.30
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.34
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
!
end

Core2#

</pre>

= Gateways =

== Gateway 1 ==
<pre>

Building configuration...

Current configuration : 2317 bytes
!
! Last configuration change at 09:09:32 UTC Mon Dec 14 2009
! NVRAM config last updated at 13:00:01 UTC Fri Dec 11 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$SVTy$kFFE8ZQHYNjdhokEH84Gn0
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
no ip domain lookup
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host dist4 10.0.0.38
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host ac1 192.168.100.11
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.30 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1/0
switchport access vlan 20
!
interface FastEthernet0/1/1
shutdown
!
interface FastEthernet0/1/2
shutdown
!
interface FastEthernet0/1/3
shutdown
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan20
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.28 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan20 overload
ip nat inside source static tcp 10.254.0.1 23 interface Vlan20 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway1#

</pre>

== Gateway 2 ==
<pre>

Building configuration...

Current configuration : 2228 bytes
!
! No configuration change since last restart
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$vuPD$gxv5UIIr85nInRV.U0A4y/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host dist2 10.0.0.50
ip host dist3 10.0.0.26
ip host dist4 10.0.0.38
ip host ac1 192.168.100.11
ip host ac2 192.168.100.12
ip host ac3 192.168.100.13
ip host ac5 192.168.101.15
ip host ac6 192.168.101.16
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.2 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.34 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.18 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport access vlan 10
!
interface FastEthernet0/3/1
shutdown
!
interface FastEthernet0/3/2
shutdown
!
interface FastEthernet0/3/3
shutdown
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 192.168.138.1
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan10 overload
ip nat inside source static tcp 10.254.0.2 23 interface Vlan10 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway2#

</pre>

Datacenter CCNP 3 - december 2009

2009-12-14T13:08:00Z

Mdp: /* Lokale 4 */

[[Image:Datacenter V2.png|thumb|none|800px|Datacenter CCNP 3]]

[[Image:IP.PNG|thumb|none|800px|Ip Tabel]]
[[category:Cisco]][[category:IOS]]
= Access Layer =

== Lokale 1 ==
<pre>
Building configuration...

Current configuration : 4993 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale1
!
enable secret 5 $1$uw0B$hEkCpsrPMRzcE5hX5UGo90
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.11 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 2 ==
<pre>
Building configuration...

Current configuration : 5556 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale2
!
enable secret 5 $1$2P6t$ucjfqPwCMeUBxZyTLav3i.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.12 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 3 ==
<pre>
Building configuration...

Current configuration : 4981 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale3
!
enable secret 5 $1$LOyI$LS5WuzEu24t1OzAwUJP6/.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
description Management vlan 100
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.13 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 4 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale4
!
enable secret 5 $1$KOZv$LdtOuJqvW3nmYPoYysh7R1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
ip name-server 172.16.4.77
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan4
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.14 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Lokale 5 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale5
!
enable secret 5 $1$I6yz$c61ibt/0Ifi.QQhsjBPFj1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
no ip domain-lookup
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGRION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan5
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.15 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

== Lokale 6 ==
<pre>
Building configuration...

Current configuration : 5084 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale6
!
enable secret 5 $1$Srka$tMOedwmQMi4WzrGo.b2YX/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 6
switchport mode access
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan6
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.16 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

= Distribution Layer =

== Distribution 1 ==
<pre>
Building configuration...

Current configuration : 5273 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$6Cq4$2JJ2WoEIpkhErwkOkQFwb.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.2.1 192.168.2.20
!
ip dhcp pool Lokale1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.3
dns-server 172.16.4.77
!
ip dhcp pool Lokale2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-201700352
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-201700352
revocation-check none
rsakeypair TP-self-signed-201700352
!
!
crypto pki certificate chain TP-self-signed-201700352
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32303137 30303335 32301E17 0D393330 33303130 30303130
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3230 31373030
33353230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C037C167 F4C36547 30273FA3 A9F114E7 2987E23C 45C63C19 B728D92F 3F0F5D81
FA590DAD 5CB8A9F1 410A7775 BA4C8C46 99A375E7 BB4501AD 1E5EA063 BDD657C9
71B08A7F 480DBA2D A1FE403E F6DB281E ED66CB2E AF2AA97C 53B93EEB 50CF3745
327851B9 6D6AA1FE 985D9654 45B4F445 70729C77 93ECA5CE 3F7356F2 E256BC8B
02030100 01A36E30 6C300F06 03551D13 0101FF04 05300301 01FF3019 0603551D
11041230 10820E44 69737472 69627574 696F6E31 2E301F06 03551D23 04183016
8014C42D FB57C926 B42FA71E BE55D5D7 13A7D8B0 1821301D 0603551D 0E041604
14C42DFB 57C926B4 2FA71EBE 55D5D713 A7D8B018 21300D06 092A8648 86F70D01
01040500 03818100 4953F22D D2BD99DE 3BFE27EB 9501FB2C BDF39899 07C2932A
023F7F71 56190673 81803DB9 76DF3FAE 74A24B5F 9628BF08 3315D673 E5741E10
8255C041 BEC57E3E AAD42992 8B299643 8930DC2D 08A68953 068AEF34 B4BE4BE1
F5C8F31D 0A20310F 5C31A5B9 B69FAD5E EEC99907 1CD0CDBE EBBE9A00 6705E270
AC2F7077 AAFC0B48
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 24576
spanning-tree mst 2 priority 28672
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel5
no switchport
ip address 10.0.0.46 255.255.255.252
!
interface Port-channel7
no switchport
ip address 10.0.0.2 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 200
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 2 ip 192.168.2.3
standby 2 priority 200
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 3 ip 192.168.3.3
standby 3 priority 150
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 100 ip 192.168.100.3
standby 100 priority 150
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.44 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Distribution 2 ==
<pre>
Building configuration...

Current configuration : 6251 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution2
!
enable secret 5 $1$pEkP$V/sE.K6gTww6uBWPNRK060
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip dhcp excluded-address 192.168.3.1 192.168.3.20
ip dhcp excluded-address 192.168.100.1 192.168.100.20
!
ip dhcp pool Lokale3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.100.0 255.255.255.0
default-router 192.168.100.3
dns-server 172.16.4.77
!
!
!
crypto pki trustpoint TP-self-signed-1708353664
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1708353664
revocation-check none
rsakeypair TP-self-signed-1708353664
!
!
crypto pki certificate chain TP-self-signed-1708353664
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373038 33353336 3634301E 170D3933 30333031 30303031
30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37303833
35333636 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB1C 4EB2426C 154FE1EC A921C666 B8A7B001 5B32CC4A 5AEFDF28 AD1163EC
99A0BD35 C035EB94 6EB3E5EF F8EF6F79 72E2C2E0 DEC9E587 5AFE353F 5A3100F2
890BD9EA D189A010 1B352DF0 03F477A7 A23ACFAF D6743C5E 08FCBE6D 44EF3E4D
04BFEA58 573F5ECC 6F3509D8 6B603D74 296FE485 7EDD39D8 318DD050 D2A871E8
68110203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E322E30 1F060355 1D230418
30168014 DB7110DA F3D5436A 80BA951B F015E53C 446E2C32 301D0603 551D0E04
160414DB 7110DAF3 D5436A80 BA951BF0 15E53C44 6E2C3230 0D06092A 864886F7
0D010104 05000381 81000A06 CB3DB008 64B56E19 2DAD6A83 22B538B5 1CD5B0D7
DE7D83B9 5F64337C 0F42ED1B 3B2075C2 6A3F2A36 DE873A8F FA5546A1 EAED43DB
4F7B9186 A71BA26B 8689FB18 B5E923D7 649548EE 79EB2E9B 41D542C5 2C6C18FC
D9BF10E8 E66065A0 1D67F658 B837D2D8 8A5E218F E89A1D62 85029DB0 8CB27D76
EC50335C 9F70886C 32DF
quit
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel4
no switchport
ip address 10.0.0.6 255.255.255.252
!
interface Port-channel6
no switchport
ip address 10.0.0.50 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport mode dynamic desirable
!
interface FastEthernet0/24
switchport mode dynamic desirable
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 150
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
standby 2 ip 192.168.2.3
standby 2 timers msec 150 msec 500
standby 2 priority 150
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
standby 3 ip 192.168.3.3
standby 3 timers msec 150 msec 500
standby 3 priority 200
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.1 255.255.255.0
standby 100 ip 192.168.100.3
standby 100 timers msec 150 msec 500
standby 100 priority 200
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
ip access-list extended EXTERN
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended INTERN
permit ip any 10.0.0.0 0.255.255.255
permit ip any 192.168.0.0 0.0.255.255
deny ip any any
!
route-map tester permit 10
!
route-map INTERNET permit 10
match ip address INTERN
!
route-map INTERNET permit 20
match ip address EXTERN
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
end
</pre>

== Distribution 3 ==
<pre>

</pre>

== Distribution 4 ==
<pre>

</pre>

= Core Layer =

== Core 1 ==
<pre>

Building configuration...

Current configuration : 3530 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core1
!
enable secret 5 $1$BXJI$n2TaAv/v.uCcaK5s7Uuu60
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.13 255.255.255.252
!
interface Port-channel3
no switchport
ip address 10.0.0.21 255.255.255.252
ip policy route-map internet
!
interface Port-channel4
no switchport
ip address 10.0.0.5 255.255.255.252
ip policy route-map internet
!
interface Port-channel7
no switchport
ip address 10.0.0.1 255.255.255.252
ip policy route-map internet
!
interface Port-channel8
no switchport
ip address 10.0.0.25 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
no switchport
ip address 10.0.0.9 255.255.255.252
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
ip address 10.0.0.17 255.255.255.252
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 3 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 8 mode on
!
interface FastEthernet0/13
no switchport
no ip address
!
interface FastEthernet0/14
no switchport
no ip address
!
interface FastEthernet0/15
no switchport
no ip address
!
interface FastEthernet0/16
no switchport
no ip address
!
interface FastEthernet0/17
no switchport
no ip address
!
interface FastEthernet0/18
no switchport
no ip address
!
interface FastEthernet0/19
no switchport
no ip address
!
interface FastEthernet0/20
no switchport
no ip address
!
interface FastEthernet0/21
no switchport
no ip address
!
interface FastEthernet0/22
no switchport
no ip address
!
interface FastEthernet0/23
no switchport
no ip address
!
interface FastEthernet0/24
no switchport
no ip address
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.20 0.0.0.3 area 20
network 10.0.0.24 0.0.0.3 area 20
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.18
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

Core1#

</pre>

== Core 2 ==
<pre>

Building configuration...

Current configuration : 3574 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core2
!
enable secret 5 $1$8LPE$BNGBYpQDx1Jey86SO5.zu.
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip host dist1 10.0.0.2
ip host core1 10.0.0.1
ip host gw1 10.0.0.10
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host ac1 192.168.100.11
ip host dist4 10.0.0.38
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core2 10.0.0.29
ip host gw2 10.0.0.18
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.14 255.255.255.252
!
interface Port-channel2
no switchport
ip address 10.0.0.41 255.255.255.252
ip policy route-map internet
!
interface Port-channel5
no switchport
ip address 10.0.0.45 255.255.255.252
ip policy route-map internet
!
interface Port-channel6
no switchport
ip address 10.0.0.49 255.255.255.252
ip policy route-map internet
!
interface Port-channel9
no switchport
ip address 10.0.0.37 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
ip address 10.0.0.29 255.255.255.252
!
interface FastEthernet0/2
no switchport
ip address 10.0.0.33 255.255.255.252
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/5
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 1
log-adjacency-changes
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.28 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.40 0.0.0.3 area 20
network 10.0.0.44 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.30
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.34
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
!
end

Core2#

</pre>

= Gateways =

== Gateway 1 ==
<pre>

Building configuration...

Current configuration : 2317 bytes
!
! Last configuration change at 09:09:32 UTC Mon Dec 14 2009
! NVRAM config last updated at 13:00:01 UTC Fri Dec 11 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$SVTy$kFFE8ZQHYNjdhokEH84Gn0
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
no ip domain lookup
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host dist4 10.0.0.38
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host ac1 192.168.100.11
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.30 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1/0
switchport access vlan 20
!
interface FastEthernet0/1/1
shutdown
!
interface FastEthernet0/1/2
shutdown
!
interface FastEthernet0/1/3
shutdown
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan20
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.28 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan20 overload
ip nat inside source static tcp 10.254.0.1 23 interface Vlan20 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway1#

</pre>

== Gateway 2 ==
<pre>

Building configuration...

Current configuration : 2228 bytes
!
! No configuration change since last restart
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$vuPD$gxv5UIIr85nInRV.U0A4y/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host dist2 10.0.0.50
ip host dist3 10.0.0.26
ip host dist4 10.0.0.38
ip host ac1 192.168.100.11
ip host ac2 192.168.100.12
ip host ac3 192.168.100.13
ip host ac5 192.168.101.15
ip host ac6 192.168.101.16
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.2 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.34 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.18 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport access vlan 10
!
interface FastEthernet0/3/1
shutdown
!
interface FastEthernet0/3/2
shutdown
!
interface FastEthernet0/3/3
shutdown
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 192.168.138.1
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan10 overload
ip nat inside source static tcp 10.254.0.2 23 interface Vlan10 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway2#

</pre>

Datacenter CCNP 3 - december 2009

2009-12-14T13:06:43Z

Mdp: /* Lokale 5 */

[[Image:Datacenter V2.png|thumb|none|800px|Datacenter CCNP 3]]

[[Image:IP.PNG|thumb|none|800px|Ip Tabel]]
[[category:Cisco]][[category:IOS]]
= Access Layer =

== Lokale 1 ==
<pre>
Building configuration...

Current configuration : 4993 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale1
!
enable secret 5 $1$uw0B$hEkCpsrPMRzcE5hX5UGo90
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.11 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 2 ==
<pre>
Building configuration...

Current configuration : 5556 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale2
!
enable secret 5 $1$2P6t$ucjfqPwCMeUBxZyTLav3i.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport access vlan 2
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.12 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 3 ==
<pre>
Building configuration...

Current configuration : 4981 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale3
!
enable secret 5 $1$LOyI$LS5WuzEu24t1OzAwUJP6/.
enable password cisco
!
ip subnet-zero
!
ip dhcp snooping vlan 1 100
ip dhcp snooping
ip ssh time-out 120
ip ssh authentication-retries 3
!
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
!
!
!
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
description Management vlan 100
switchport access vlan 100
switchport mode access
switchport port-security
switchport port-security maximum 2
switchport port-security aging time 60
spanning-tree portfast
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
interface Vlan100
ip address 192.168.100.13 255.255.255.0
no ip route-cache
!
ip http server
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
!
end
</pre>

== Lokale 4 ==
<pre>

</pre>

== Lokale 5 ==
<pre>
Building configuration...

Current configuration : 5080 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale5
!
enable secret 5 $1$I6yz$c61ibt/0Ifi.QQhsjBPFj1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
ip dhcp snooping
no ip domain-lookup
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGRION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan5
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.15 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

== Lokale 6 ==
<pre>
Building configuration...

Current configuration : 5084 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Lokale6
!
enable secret 5 $1$Srka$tMOedwmQMi4WzrGo.b2YX/
enable password cisco
!
no aaa new-model
ip subnet-zero
!
ip dhcp snooping vlan 4-6,101
!
!
!
no file verify auto
!
spanning-tree mode mst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION2
revision 2
instance 1 vlan 4-5
instance 2 vlan 6, 101
!
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/2
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/3
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 6
switchport mode access
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 6
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/7
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/8
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/9
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/10
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/11
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/12
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/13
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/14
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/15
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/16
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/17
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/18
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/19
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/20
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/21
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/22
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/23
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface FastEthernet0/24
switchport access vlan 101
switchport mode access
switchport port-security maximum 2
switchport port-security
switchport port-security aging time 60
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
!
interface Vlan6
no ip address
no ip route-cache
!
interface Vlan101
ip address 192.168.101.16 255.255.255.0
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end
</pre>

= Distribution Layer =

== Distribution 1 ==
<pre>
Building configuration...

Current configuration : 5273 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$6Cq4$2JJ2WoEIpkhErwkOkQFwb.
enable password cisco
!
no aaa new-model
system mtu routing 1500
ip subnet-zero
ip routing
no ip domain-lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.1.1 192.168.1.20
ip dhcp excluded-address 192.168.2.1 192.168.2.20
!
ip dhcp pool Lokale1
network 192.168.1.0 255.255.255.0
default-router 192.168.1.3
dns-server 172.16.4.77
!
ip dhcp pool Lokale2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.3
dns-server 172.16.4.77
!
!
!
!
crypto pki trustpoint TP-self-signed-201700352
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-201700352
revocation-check none
rsakeypair TP-self-signed-201700352
!
!
crypto pki certificate chain TP-self-signed-201700352
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32303137 30303335 32301E17 0D393330 33303130 30303130
305A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3230 31373030
33353230 819F300D 06092A86 4886F70D 01010105 0003818D 00308189 02818100
C037C167 F4C36547 30273FA3 A9F114E7 2987E23C 45C63C19 B728D92F 3F0F5D81
FA590DAD 5CB8A9F1 410A7775 BA4C8C46 99A375E7 BB4501AD 1E5EA063 BDD657C9
71B08A7F 480DBA2D A1FE403E F6DB281E ED66CB2E AF2AA97C 53B93EEB 50CF3745
327851B9 6D6AA1FE 985D9654 45B4F445 70729C77 93ECA5CE 3F7356F2 E256BC8B
02030100 01A36E30 6C300F06 03551D13 0101FF04 05300301 01FF3019 0603551D
11041230 10820E44 69737472 69627574 696F6E31 2E301F06 03551D23 04183016
8014C42D FB57C926 B42FA71E BE55D5D7 13A7D8B0 1821301D 0603551D 0E041604
14C42DFB 57C926B4 2FA71EBE 55D5D713 A7D8B018 21300D06 092A8648 86F70D01
01040500 03818100 4953F22D D2BD99DE 3BFE27EB 9501FB2C BDF39899 07C2932A
023F7F71 56190673 81803DB9 76DF3FAE 74A24B5F 9628BF08 3315D673 E5741E10
8255C041 BEC57E3E AAD42992 8B299643 8930DC2D 08A68953 068AEF34 B4BE4BE1
F5C8F31D 0A20310F 5C31A5B9 B69FAD5E EEC99907 1CD0CDBE EBBE9A00 6705E270
AC2F7077 AAFC0B48
quit
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 24576
spanning-tree mst 2 priority 28672
!
vlan internal allocation policy ascending
!
!
!
!
interface Port-channel5
no switchport
ip address 10.0.0.46 255.255.255.252
!
interface Port-channel7
no switchport
ip address 10.0.0.2 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 7 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.1.2 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 200
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 2 ip 192.168.2.3
standby 2 priority 200
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 3 ip 192.168.3.3
standby 3 priority 150
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.2 255.255.255.0
standby 1 timers msec 150 msec 500
standby 100 ip 192.168.100.3
standby 100 priority 150
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.0 0.0.0.3 area 10
network 10.0.0.44 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
login
line vty 5 15
password cisco
login
!
end
</pre>

== Distribution 2 ==
<pre>
Building configuration...

Current configuration : 6251 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Distribution2
!
enable secret 5 $1$pEkP$V/sE.K6gTww6uBWPNRK060
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip dhcp excluded-address 192.168.3.1 192.168.3.20
ip dhcp excluded-address 192.168.100.1 192.168.100.20
!
ip dhcp pool Lokale3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.3
dns-server 172.16.4.77
!
ip dhcp pool Management
network 192.168.100.0 255.255.255.0
default-router 192.168.100.3
dns-server 172.16.4.77
!
!
!
crypto pki trustpoint TP-self-signed-1708353664
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1708353664
revocation-check none
rsakeypair TP-self-signed-1708353664
!
!
crypto pki certificate chain TP-self-signed-1708353664
certificate self-signed 01
30820246 308201AF A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373038 33353336 3634301E 170D3933 30333031 30303031
30385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37303833
35333636 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BB1C 4EB2426C 154FE1EC A921C666 B8A7B001 5B32CC4A 5AEFDF28 AD1163EC
99A0BD35 C035EB94 6EB3E5EF F8EF6F79 72E2C2E0 DEC9E587 5AFE353F 5A3100F2
890BD9EA D189A010 1B352DF0 03F477A7 A23ACFAF D6743C5E 08FCBE6D 44EF3E4D
04BFEA58 573F5ECC 6F3509D8 6B603D74 296FE485 7EDD39D8 318DD050 D2A871E8
68110203 010001A3 6E306C30 0F060355 1D130101 FF040530 030101FF 30190603
551D1104 12301082 0E446973 74726962 7574696F 6E322E30 1F060355 1D230418
30168014 DB7110DA F3D5436A 80BA951B F015E53C 446E2C32 301D0603 551D0E04
160414DB 7110DAF3 D5436A80 BA951BF0 15E53C44 6E2C3230 0D06092A 864886F7
0D010104 05000381 81000A06 CB3DB008 64B56E19 2DAD6A83 22B538B5 1CD5B0D7
DE7D83B9 5F64337C 0F42ED1B 3B2075C2 6A3F2A36 DE873A8F FA5546A1 EAED43DB
4F7B9186 A71BA26B 8689FB18 B5E923D7 649548EE 79EB2E9B 41D542C5 2C6C18FC
D9BF10E8 E66065A0 1D67F658 B837D2D8 8A5E218F E89A1D62 85029DB0 8CB27D76
EC50335C 9F70886C 32DF
quit
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
!
spanning-tree mst configuration
name REGION1
revision 1
instance 1 vlan 1-2
instance 2 vlan 3, 100
!
spanning-tree mst 1 priority 28672
spanning-tree mst 2 priority 24576
!
vlan internal allocation policy ascending
!
!
!
!
!
!
interface Port-channel4
no switchport
ip address 10.0.0.6 255.255.255.252
!
interface Port-channel6
no switchport
ip address 10.0.0.50 255.255.255.252
!
interface FastEthernet0/1
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/2
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 4 mode on
!
interface FastEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
spanning-tree mst pre-standard
!
interface FastEthernet0/9
switchport mode dynamic desirable
!
interface FastEthernet0/10
switchport mode dynamic desirable
!
interface FastEthernet0/11
switchport mode dynamic desirable
!
interface FastEthernet0/12
switchport mode dynamic desirable
!
interface FastEthernet0/13
switchport mode dynamic desirable
!
interface FastEthernet0/14
switchport mode dynamic desirable
!
interface FastEthernet0/15
switchport mode dynamic desirable
!
interface FastEthernet0/16
switchport mode dynamic desirable
!
interface FastEthernet0/17
switchport mode dynamic desirable
!
interface FastEthernet0/18
switchport mode dynamic desirable
!
interface FastEthernet0/19
switchport mode dynamic desirable
!
interface FastEthernet0/20
switchport mode dynamic desirable
!
interface FastEthernet0/21
switchport mode dynamic desirable
!
interface FastEthernet0/22
switchport mode dynamic desirable
!
interface FastEthernet0/23
switchport mode dynamic desirable
!
interface FastEthernet0/24
switchport mode dynamic desirable
!
interface GigabitEthernet0/1
switchport mode dynamic desirable
!
interface GigabitEthernet0/2
switchport mode dynamic desirable
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
standby 1 ip 192.168.1.3
standby 1 timers msec 150 msec 500
standby 1 priority 150
standby 1 preempt
!
interface Vlan2
ip address 192.168.2.1 255.255.255.0
standby 2 ip 192.168.2.3
standby 2 timers msec 150 msec 500
standby 2 priority 150
standby 2 preempt
!
interface Vlan3
ip address 192.168.3.1 255.255.255.0
standby 3 ip 192.168.3.3
standby 3 timers msec 150 msec 500
standby 3 priority 200
standby 3 preempt
!
interface Vlan100
ip address 192.168.100.1 255.255.255.0
standby 100 ip 192.168.100.3
standby 100 timers msec 150 msec 500
standby 100 priority 200
standby 100 preempt
!
router ospf 10
log-adjacency-changes
network 10.0.0.4 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
network 192.168.1.0 0.0.0.255 area 10
network 192.168.2.0 0.0.0.255 area 10
network 192.168.3.0 0.0.0.255 area 10
network 192.168.100.0 0.0.0.255 area 10
!
ip classless
ip http server
ip http secure-server
!
!
ip access-list extended EXTERN
permit ip 192.168.0.0 0.0.255.255 any
permit ip 10.0.0.0 0.255.255.255 any
ip access-list extended INTERN
permit ip any 10.0.0.0 0.255.255.255
permit ip any 192.168.0.0 0.0.255.255
deny ip any any
!
route-map tester permit 10
!
route-map INTERNET permit 10
match ip address INTERN
!
route-map INTERNET permit 20
match ip address EXTERN
set ip next-hop 10.0.0.10
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
logging synchronous
login
!
end
</pre>

== Distribution 3 ==
<pre>

</pre>

== Distribution 4 ==
<pre>

</pre>

= Core Layer =

== Core 1 ==
<pre>

</pre>

== Core 2 ==
<pre>

Building configuration...

Current configuration : 3574 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Core2
!
enable secret 5 $1$8LPE$BNGBYpQDx1Jey86SO5.zu.
enable password cisco
!
no aaa new-model
ip subnet-zero
ip routing
ip host dist1 10.0.0.2
ip host core1 10.0.0.1
ip host gw1 10.0.0.10
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host ac1 192.168.100.11
ip host dist4 10.0.0.38
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core2 10.0.0.29
ip host gw2 10.0.0.18
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
no switchport
ip address 10.0.0.14 255.255.255.252
!
interface Port-channel2
no switchport
ip address 10.0.0.41 255.255.255.252
ip policy route-map internet
!
interface Port-channel5
no switchport
ip address 10.0.0.45 255.255.255.252
ip policy route-map internet
!
interface Port-channel6
no switchport
ip address 10.0.0.49 255.255.255.252
ip policy route-map internet
!
interface Port-channel9
no switchport
ip address 10.0.0.37 255.255.255.252
ip policy route-map internet
!
interface FastEthernet0/1
no switchport
ip address 10.0.0.29 255.255.255.252
!
interface FastEthernet0/2
no switchport
ip address 10.0.0.33 255.255.255.252
!
interface FastEthernet0/3
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/4
no switchport
no ip address
channel-group 9 mode on
!
interface FastEthernet0/5
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/6
no switchport
no ip address
channel-group 2 mode on
!
interface FastEthernet0/7
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/8
no switchport
no ip address
channel-group 1 mode on
!
interface FastEthernet0/9
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/10
no switchport
no ip address
channel-group 5 mode on
!
interface FastEthernet0/11
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/12
no switchport
no ip address
channel-group 6 mode on
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
router ospf 1
log-adjacency-changes
network 10.0.0.12 0.0.0.3 area 0
network 10.0.0.28 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
network 10.0.0.36 0.0.0.3 area 20
network 10.0.0.40 0.0.0.3 area 20
network 10.0.0.44 0.0.0.3 area 10
network 10.0.0.48 0.0.0.3 area 10
!
ip classless
ip http server
!
!
ip access-list extended test
deny ip 192.168.3.0 0.0.0.255 10.0.0.0 0.0.0.255
deny ip 192.168.3.0 0.0.0.255 192.168.0.0 0.0.255.255
permit ip 192.168.3.0 0.0.0.255 any
!
!
ip prefix-list DEFAULT seq 5 permit 0.0.0.0/0
route-map internet permit 5
match ip address test
set ip next-hop 10.0.0.30
!
route-map internet permit 10
match ip address prefix-list DEFAULT
set ip next-hop 10.0.0.34
!
!
control-plane
!
!
line con 0
line vty 0 4
exec-timeout 0 0
password cisco
logging synchronous
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
!
end

Core2#

</pre>

= Gateways =

== Gateway 1 ==
<pre>

Building configuration...

Current configuration : 2317 bytes
!
! Last configuration change at 09:09:32 UTC Mon Dec 14 2009
! NVRAM config last updated at 13:00:01 UTC Fri Dec 11 2009
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$SVTy$kFFE8ZQHYNjdhokEH84Gn0
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
no ip domain lookup
ip host dist3 10.0.0.26
ip host dist2 10.0.0.50
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host ac3 192.168.100.13
ip host ac2 192.168.100.12
ip host dist4 10.0.0.38
ip host ac6 192.168.101.16
ip host ac5 192.168.101.15
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host ac1 192.168.100.11
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.1 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.10 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.30 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1/0
switchport access vlan 20
!
interface FastEthernet0/1/1
shutdown
!
interface FastEthernet0/1/2
shutdown
!
interface FastEthernet0/1/3
shutdown
!
interface Serial0/2/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan20
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.8 0.0.0.3 area 30
network 10.0.0.28 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 dhcp
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan20 overload
ip nat inside source static tcp 10.254.0.1 23 interface Vlan20 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway1#

</pre>

== Gateway 2 ==
<pre>

Building configuration...

Current configuration : 2228 bytes
!
! No configuration change since last restart
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Gateway2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$vuPD$gxv5UIIr85nInRV.U0A4y/
enable password cisco
!
no aaa new-model
!
resource policy
!
ip cef
!
!
!
!
ip host ac4 192.168.101.14
ip host gw1 10.0.0.10
ip host gw2 10.0.0.18
ip host core1 10.0.0.1
ip host core2 10.0.0.29
ip host dist1 10.0.0.2
ip host dist2 10.0.0.50
ip host dist3 10.0.0.26
ip host dist4 10.0.0.38
ip host ac1 192.168.100.11
ip host ac2 192.168.100.12
ip host ac3 192.168.100.13
ip host ac5 192.168.101.15
ip host ac6 192.168.101.16
!
!
!
voice-card 0
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
ip address 10.254.0.2 255.255.255.255
!
interface FastEthernet0/0
ip address 10.0.0.34 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface FastEthernet0/1
ip address 10.0.0.18 255.255.255.252
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
switchport access vlan 10
!
interface FastEthernet0/3/1
shutdown
!
interface FastEthernet0/3/2
shutdown
!
interface FastEthernet0/3/3
shutdown
!
interface Serial0/1/0
no ip address
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address dhcp
ip nat outside
ip virtual-reassembly
!
router ospf 1
log-adjacency-changes
network 10.0.0.16 0.0.0.3 area 30
network 10.0.0.32 0.0.0.3 area 30
default-information originate
!
ip route 0.0.0.0 0.0.0.0 192.168.138.1
!
!
ip http server
no ip http secure-server
ip nat inside source list Internet interface Vlan10 overload
ip nat inside source static tcp 10.254.0.2 23 interface Vlan10 23
!
ip access-list extended Internet
permit ip 10.0.0.0 0.0.0.255 any
permit ip 192.168.0.0 0.7.255.255 any
permit ip 192.168.100.0 0.0.0.255 any
permit ip 192.168.101.0 0.0.0.255 any
!
!
!
!
!
!
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

Gateway2#

</pre>

Datacenter CCNP 3 - december 2009

2009-12-14T13:05:26Z

Mdp: /* Lokale 6 */

Datacenter CCNP 3 - december 2009

2009-12-14T13:03:12Z

Mdp: /* Distribution 1 */

Datacenter CCNP 3 - december 2009

2009-12-14T13:01:43Z

Mdp: /* Distribution 2 */

Datacenter CCNP 3 - december 2009

2009-12-14T12:58:51Z

Mdp: /* Lokale 3 */

2009-12-14T12:34:29Z

Mdp:

CCNP øveuge

2009-03-27T11:10:17Z

Mdp: /* Router 6 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===
<pre>
R6#show run
Building configuration...

Current configuration : 2757 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Kojb$.6WNyP1fOj3ahInp7IL8m0
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
no ip domain lookup
ip audit po max-events 100
!
username R3 password 0 cisco
!
interface Loopback0
ip address 192.168.10.6 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.6.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.6.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.99.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 192.168.4.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface Serial0/0
no ip address
no fair-queue
!
interface Serial0/1
ip address 172.16.100.18 255.255.255.252
encapsulation ppp
clock rate 128000
ppp authentication chap
!
interface Serial0/2
no ip address
shutdown
!
router isis 1
net 49.0001.1921.6801.0006.00
!
router bgp 200
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 10.6.4.0 mask 255.255.255.0
network 10.6.5.0 mask 255.255.255.0
network 192.168.2.0
network 192.168.10.6 mask 255.255.255.255
aggregate-address 10.6.0.0 255.255.0.0 summary-only
neighbor 172.16.100.17 remote-as 100
neighbor 172.16.100.17 update-source Serial0/1
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
banner motd ^C I hate myself ^C
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end
</pre>

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

CCNP øveuge

2009-03-27T11:09:32Z

Mdp: /* Router 6 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===
<pre>
R6#show run
Building configuration...

Current configuration : 2757 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Kojb$.6WNyP1fOj3ahInp7IL8m0
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
username R3 password 0 cisco
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.6.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.6.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.99.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 192.168.4.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface Serial0/0
no ip address
no fair-queue
!
interface Serial0/1
ip address 172.16.100.18 255.255.255.252
encapsulation ppp
clock rate 128000
ppp authentication chap
!
interface Serial0/2
no ip address
shutdown
!
router isis 1
net 49.0001.1921.6801.0006.00
!
router bgp 200
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 10.6.4.0 mask 255.255.255.0
network 10.6.5.0 mask 255.255.255.0
network 192.168.2.0
network 192.168.10.6 mask 255.255.255.255
aggregate-address 10.6.0.0 255.255.0.0 summary-only
neighbor 172.16.100.17 remote-as 100
neighbor 172.16.100.17 update-source Serial0/1
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
banner motd ^C I hate myself ^C
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end
</pre>

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

CCNP øveuge

2009-03-27T11:09:06Z

Mdp: /* Router 6 */

= CCNP øveuge =

[[Image:Øvelsesuge.png|thumb|none|1000px]]

Anders, Jacob, Mikkel, Peder

== OSPF netværk ==

=== Router 1 ===

<PRE>

ip dhcp excluded-address 192.168.1.1 192.168.1.10
!
ip dhcp pool testuge
import all
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 172.16.4.77
!
!
username R4 password 0 cisco
!
interface Loopback0
ip address 192.168.10.1 255.255.255.255
!
interface Loopback1
ip address 10.1.1.1 255.255.255.0
!
interface Loopback2
ip address 10.1.2.1 255.255.255.0
!
interface Loopback3
ip address 10.1.3.1 255.255.255.0
!
interface Loopback4
ip address 10.1.4.1 255.255.255.0
!
interface Loopback5
ip address 10.1.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.1 255.255.255.252
ip nat inside
ip virtual-reassembly
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/1/0
ip address 172.16.100.9 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface Serial0/1/1
no ip address
shutdown
clock rate 125000
!
interface Serial0/2/0
no ip address
shutdown
clock rate 2000000
!
router ospf 1
log-adjacency-changes
passive-interface FastEthernet0/1
network 10.1.1.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.10.1 0.0.0.0 area 0
default-information originate always
!
router bgp 100
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.1.1.0 mask 255.255.255.0
network 10.1.2.0 mask 255.255.255.0
network 10.1.3.0 mask 255.255.255.0
network 10.1.4.0 mask 255.255.255.0
network 10.1.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.10.1 mask 255.255.255.255
aggregate-address 10.1.0.0 255.255.0.0 summary-only
neighbor 172.16.100.10 remote-as 200
neighbor 172.16.100.10 update-source Serial0/1/0
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
neighbor 192.168.10.3 next-hop-self
no auto-summary
!
ip route 0.0.0.0 0.0.0.0 FastEthernet0/1
!
!
ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1 overload
!
access-list 1 permit 192.168.1.0 0.0.0.255
!
control-plane
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 2 ===
<PRE>

hostname R2
!
enable secret 5 $1$WQha$7yhAdoRtJxu.Pvc6iKObY.
enable password cisco
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.2 255.255.255.255
!
interface Loopback1
ip address 10.2.1.1 255.255.255.0
!
interface Loopback2
ip address 10.2.2.1 255.255.255.0
!
interface Loopback3
ip address 10.2.3.1 255.255.255.0
!
interface Loopback4
ip address 10.2.4.1 255.255.255.0
!
interface Loopback5
ip address 10.2.5.1 255.255.255.0
!
interface FastEthernet0/0
ip address 172.16.100.2 255.255.255.252
speed auto
full-duplex
no mop enabled
!
interface Serial0/0
no ip address
shutdown
no fair-queue
!
interface FastEthernet0/1
ip address 192.168.1.1 255.255.255.0
ip helper-address 172.16.100.1
duplex auto
speed auto
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.2.1.0 0.0.0.255 area 0
network 10.2.2.0 0.0.0.255 area 0
network 10.2.3.0 0.0.0.255 area 0
network 10.2.4.0 0.0.0.255 area 0
network 10.2.5.0 0.0.0.255 area 0
network 172.16.100.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.2 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.2.1.0 mask 255.255.255.0
network 10.2.2.0 mask 255.255.255.0
network 10.2.3.0 mask 255.255.255.0
network 10.2.4.0 mask 255.255.255.0
network 10.2.5.0 mask 255.255.255.0
network 172.16.100.0 mask 255.255.255.252
network 192.168.1.0
network 192.168.10.2 mask 255.255.255.255
aggregate-address 10.2.0.0 255.255.0.0 summary-only
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.3 remote-as 100
neighbor 192.168.10.3 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
</PRE>

=== Router 3 ===
<PRE>

hostname R3
!
enable secret 5 $1$pIBL$bSJ2ONNGoeWWxBX7gwSm71
enable password cisco
!
ip audit po max-events 100
!
username R6 password 0 cisco
!
interface Loopback0
ip address 192.168.10.3 255.255.255.255
!
interface Loopback1
ip address 10.3.1.1 255.255.255.0
!
interface Loopback2
ip address 10.3.2.1 255.255.255.0
!
interface Loopback3
ip address 10.3.3.1 255.255.255.0
!
interface Loopback4
ip address 10.3.4.1 255.255.255.0
!
interface Loopback5
ip address 10.3.5.1 255.255.255.0
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 172.16.100.17 255.255.255.252
encapsulation ppp
no fair-queue
ppp authentication chap
!
interface BRI0/0
no ip address
encapsulation hdlc
shutdown
!
interface FastEthernet0/1
ip address 192.168.1.2 255.255.255.0
speed auto
full-duplex
no mop enabled
!
interface Serial0/1
no ip address
shutdown
!
router ospf 1
log-adjacency-changes
network 10.3.1.0 0.0.0.255 area 0
network 10.3.2.0 0.0.0.255 area 0
network 10.3.3.0 0.0.0.255 area 0
network 10.3.4.0 0.0.0.255 area 0
network 10.3.5.0 0.0.0.255 area 0
network 192.168.1.0 0.0.0.255 area 0
network 192.168.10.3 0.0.0.0 area 0
!
router bgp 100
no synchronization
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.0
network 10.3.2.0 mask 255.255.255.0
network 10.3.3.0 mask 255.255.255.0
network 10.3.4.0 mask 255.255.255.0
network 10.3.5.0 mask 255.255.255.0
network 192.168.1.0
network 192.168.10.3 mask 255.255.255.255
aggregate-address 10.3.0.0 255.255.0.0 summary-only
neighbor 172.16.100.18 remote-as 200
neighbor 172.16.100.18 update-source Serial0/0
neighbor 172.16.100.18 route-map prove in
neighbor 192.168.10.1 remote-as 100
neighbor 192.168.10.1 update-source Loopback0
neighbor 192.168.10.1 next-hop-self
neighbor 192.168.10.2 remote-as 100
neighbor 192.168.10.2 update-source Loopback0
neighbor 192.168.10.2 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
access-list 10 permit 10.6.0.0 0.0.255.255
!
route-map prove permit 10
match ip address 10
set local-preference 1000
!
route-map prove permit 20
!
line con 0
line aux 0
line vty 0 4
password cisco
login

</PRE>

=== Switch 1 ===

<PRE>

Current configuration : 1333 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW1
!
enable secret 5 $1$3BEJ$gjcaPkd2T6grrMreIYp0t0
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
!
interface FastEthernet0/2
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
no ip route-cache
shutdown
!
ip http server
!
control-plane
!
!
line con 0
exec-timeout 0 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

== IS-IS netværk ==

=== Router 4 ===

<PRE>

Current configuration : 2476 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R4
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$N9CQ$mZ.iguA.akbgLkjNKihA21
enable password cisco
!
no aaa new-model
ip cef
!
username R1 password 0 cisco
!
interface Loopback0
ip address 192.168.10.4 255.255.255.255
ip router isis
!
interface Loopback1
ip address 10.4.1.1 255.255.255.0
ip router isis
!
interface Loopback2
ip address 10.4.2.1 255.255.255.0
ip router isis
!
interface Loopback3
ip address 10.4.3.1 255.255.255.0
ip router isis
!
interface Loopback4
ip address 10.4.4.1 255.255.255.0
ip router isis
!
interface Loopback5
ip address 10.4.5.1 255.255.255.0
ip router isis
!
interface FastEthernet0/0
ip address 172.16.100.5 255.255.255.252
ip router isis
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/2/0
ip address 172.16.100.10 255.255.255.252
encapsulation ppp
no fair-queue
clock rate 128000
ppp authentication chap
!
interface Serial0/2/1
no ip address
shutdown
clock rate 125000
!
router isis
net 49.1921.6801.0004.00
is-type level-2-only
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.4.1.0 mask 255.255.255.0
network 10.4.2.0 mask 255.255.255.0
network 10.4.3.0 mask 255.255.255.0
network 10.4.4.0 mask 255.255.255.0
network 10.4.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 172.16.100.8 mask 255.255.255.252
network 192.168.10.4 mask 255.255.255.255
aggregate-address 10.4.0.0 255.255.0.0 summary-only
neighbor 172.16.100.9 remote-as 100
neighbor 172.16.100.9 update-source Serial0/2/0
neighbor 172.16.100.9 route-map proeve in
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
neighbor 192.168.10.6 next-hop-self
no auto-summary
!
ip http server
no ip http secure-server
!
access-list 20 permit 10.1.0.0 0.0.255.255
snmp-server community public RO
!
route-map proeve permit 10
match ip address 20
set local-preference 1000
!
route-map proeve permit 20

!
control-plane
!

!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
scheduler allocate 20000 1000
end

</PRE>

=== Router 5 ===

<PRE>

Current configuration : 3016 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R5
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$qWE/$4qiW1cUB8aGIAkC3q2meZ1
enable password cisco
!
memory-size iomem 10
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
ip dhcp excluded-address 192.168.2.1 192.168.2.10
ip dhcp excluded-address 192.168.3.1 192.168.3.10
ip dhcp excluded-address 192.168.4.1 192.168.4.10
!
ip dhcp pool ISIS-DHCP
import all
network 192.168.2.0 255.255.255.0
default-router 192.168.2.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP1
import all
network 192.168.4.0 255.255.255.0
default-router 192.168.4.1
dns-server 172.16.4.77
!
ip dhcp pool ISIS-DHCP2
import all
network 192.168.3.0 255.255.255.0
default-router 192.168.3.1
dns-server 172.16.4.77
!
ip audit po max-events 100
!
interface Loopback0
ip address 192.168.10.5 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.5.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.5.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.5.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.5.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.5.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
ip address 172.16.100.6 255.255.255.252
ip router isis 1
speed auto
full-duplex
!
interface FastEthernet0/1
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/1.1
encapsulation dot1Q 1 native
ip address 192.168.99.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.2.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.3.1 255.255.255.0
ip router isis
no snmp trap link-status
!
interface FastEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.4.1 255.255.255.0
ip router isis
no snmp trap link-status
!
router isis 1
net 40.0001.1921.6801.0005.00
!
router isis
is-type level-1
!
router bgp 200
no synchronization
bgp log-neighbor-changes
network 10.5.1.0 mask 255.255.255.0
network 10.5.2.0 mask 255.255.255.0
network 10.5.3.0 mask 255.255.255.0
network 10.5.4.0 mask 255.255.255.0
network 10.5.5.0 mask 255.255.255.0
network 172.16.100.4 mask 255.255.255.252
network 192.168.2.0
network 192.168.10.5 mask 255.255.255.255
aggregate-address 10.5.0.0 255.255.0.0 summary-only
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.6 remote-as 200
neighbor 192.168.10.6 update-source Loopback0
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
end

</PRE>

=== Router 6 ===
R6#show run
Building configuration...

Current configuration : 2757 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R6
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$Kojb$.6WNyP1fOj3ahInp7IL8m0
enable password cisco
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
ip cef
!
!
!
no ip domain lookup
ip audit po max-events 100
!
!
!
!
!
!
!
!
!
!
!
!
username R3 password 0 cisco
!
!
!
!
!
!
!
!
interface Loopback0
ip address 192.168.10.6 255.255.255.255
ip router isis 1
!
interface Loopback1
ip address 10.6.1.1 255.255.255.0
ip router isis 1
!
interface Loopback2
ip address 10.6.2.1 255.255.255.0
ip router isis 1
!
interface Loopback3
ip address 10.6.3.1 255.255.255.0
ip router isis 1
!
interface Loopback4
ip address 10.6.4.1 255.255.255.0
ip router isis 1
!
interface Loopback5
ip address 10.6.5.1 255.255.255.0
ip router isis 1
!
interface FastEthernet0/0
no ip address
speed auto
full-duplex
no mop enabled
!
interface FastEthernet0/0.1
encapsulation dot1Q 1 native
ip address 192.168.99.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface FastEthernet0/0.4
encapsulation dot1Q 4
ip address 192.168.4.2 255.255.255.0
ip router isis 1
no snmp trap link-status
!
interface Serial0/0
no ip address
no fair-queue
!
interface Serial0/1
ip address 172.16.100.18 255.255.255.252
encapsulation ppp
clock rate 128000
ppp authentication chap
!
interface Serial0/2
no ip address
shutdown
!
router isis 1
net 49.0001.1921.6801.0006.00
!
router bgp 200
no synchronization
bgp default local-preference 200
bgp log-neighbor-changes
network 10.6.1.0 mask 255.255.255.0
network 10.6.2.0 mask 255.255.255.0
network 10.6.3.0 mask 255.255.255.0
network 10.6.4.0 mask 255.255.255.0
network 10.6.5.0 mask 255.255.255.0
network 192.168.2.0
network 192.168.10.6 mask 255.255.255.255
aggregate-address 10.6.0.0 255.255.0.0 summary-only
neighbor 172.16.100.17 remote-as 100
neighbor 172.16.100.17 update-source Serial0/1
neighbor 192.168.10.4 remote-as 200
neighbor 192.168.10.4 update-source Loopback0
neighbor 192.168.10.4 next-hop-self
neighbor 192.168.10.5 remote-as 200
neighbor 192.168.10.5 update-source Loopback0
neighbor 192.168.10.5 next-hop-self
no auto-summary
!
ip classless
!
ip http server
no ip http secure-server
!
!
!
!
!
!
!
!
!
banner motd ^C I hate myself ^C
!
line con 0
line aux 0
line vty 0 4
password cisco
login
!
!
end

=== Switch 2 ===

<PRE>
Current configuration : 2626 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW2
!
enable secret 5 $1$YqCY$l6FXVLpSE8p/mWoS5Lwn71
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/24
switchport access vlan 4
switchport mode access
!
interface GigabitEthernet0/1
switchport mode trunk
!
interface GigabitEthernet0/2
switchport mode trunk
!
interface Vlan1
ip address 192.168.99.12 255.255.255.0
no ip route-cache
!
interface Vlan2
no ip address
no ip route-cache
!
interface Vlan3
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
end

</PRE>

=== Switch 3 ===

=== Switch 4 ===

<PRE>

Current configuration : 2587 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname SW4
!
enable secret 5 $1$rom0$uHDgDlJHC.sjIFOFVjJcV1
enable password cisco
!
no aaa new-model
ip subnet-zero
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/2
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/3
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/4
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/5
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/6
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/7
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/8
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/9
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/10
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/11
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/12
switchport access vlan 2
switchport mode access
!
interface FastEthernet0/13
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/14
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/15
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/16
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/17
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/18
switchport access vlan 3
switchport mode access
!
interface FastEthernet0/19
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/20
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/21
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/22
switchport access vlan 4
switchport mode access
!
interface FastEthernet0/23
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
ip address 192.168.99.14 255.255.255.0
!
interface Vlan2
no ip address
!
ip classless
ip http server
!
!
!
control-plane
!
!
line con 0
line vty 0 4
password cisco
no login
line vty 5 15
password cisco
no login
!
!
end

</PRE>

Mdp ccnp 1

2009-02-18T10:15:05Z

Mdp ccnp 1

2009-02-11T15:00:19Z

Mdp:

= CCNP 1 =

== Ospf Challange Lab Noter ==

Hvis man skal lave en restribute, mellem ospf og eigrp skal man sætte en default metric på eigrp siden.