ISP ROUTER

en

conf t

hostname ISP

no ip domain-lookup

enable secret class

banner motd # unauthorized access prohibited!#

line con 0

exec-timeout 10 0

logging synchronous

password cisco

login

ip domain-name ccna-lab.com

username casestudy privilege 15 secret cisco1

line vty 0 15

exec-timeout 10 0

logging synchronous

transport input ssh

login local

service password-encryption

ipv6 unicast-routing
int s0/0/0
description link to ho router
ip address 100.1.1.1 255.255.255.252
ipv6 address 2001:100:1:1::1/64
clock rate 128000
no shut
exit
int lo0
ip address 11.11.11.11 255.255.255.255
Ipv6 address 2001:11:11:11::11/128
no shut
exit
ip route 0.0.0.0 0.0.0.0 200.20.1.2
ipv6 route ::/0 2001:200:1::2

Int s0/0/1
Ip address 100.1.2.1 255.255.255.252
Ipv6 address 2001:1:2::1/64
No shut
Exit

Int f0/0.50
encapsulation dot1q 50
ip address 100.10.50.1 255.255.255.0
ipv6 address 2001:100:10:50::1/64
no shut
exit

Int f0/0.177
encapsulation dot1q 177
ip address 100.10.177.1 255.255.255.252
ipv6 address 2001:100:10:177::1/64
no shut
exit

Int f0/0
No shut
Exit
Corp1 ROUTER

en

conf t

hostname Corp1 Router

no ip domain-lookup

enable secret class

banner motd # unauthorized access prohibited!#

line con 0

exec-timeout 10

logging synchronous

password cisco

login

ip domain-name ccna-lab.com

username admin privilege 15 secret cisco

line vty 0 15
exec-timeout 10
logging synchronous
transport input ssh
login local
service password-encryption
crypto key generate rsa

ipv6 unicast-routing

int F0/0
description link to sw1 switch
no shut
exit

int s0/0/0
description link to isp router
ip address 100.1.1.2 255.255.255.252
ipv6 address 2001:100:1:1::2/64
no shut
exit
ip route 0.0.0.0 0.0.0.0 100.1.1.1

router rip
version 2
network 100.1.1.0
exit

int f0/0.10
encapsulation dot1q 10
ip address 10.10.10.1 255.255.255.0
no shut
ipv6 address 2001:10:10:10::1/64
exit

int f0/0.20
encapsulation dot1q 20
ip address 10.10.20.2 255.255.255.0
no shut
ipv6 address 2001:10:10:20::2/64

exit

int f0/0.153
encapsulation dot1q 153
ip address 10.10.153.1 255.255.255.0
no shut
ipv6 address 2001:10:10:153::1/64
exit

int lo0
ip address 10.10.100.1 255.255.255.0
ipv6 address 2001:10:10:100::1/64
no shut
exit

ipv6 route ::/0 2001:100:1:1::1

access-list 1 remark allow Sw1 lans access

access-list 1 permit 100.1.1.0 0.0.0.255
access-list 1 permit 10.10.10.0 0.0.0.255
access-list 1 permit 10.10.20.0 0.0.0.255

access-list 1 deny any

int f0/0
ip access-group 1 out
exit
ip nat pool apricot 100.1.10.0 netmask 255.255.255.248
ip nat inside source list 1 pool Corp1 overload
int f0/0
ip nat inside
int s0/0/0
ip nat outside
exit

dhcp pool vlan10

network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dhcp excluded-address 10.10.10.1 10.10.10.5

BRANCH SWITCH 2

en

conf t

hostname brsw2

no ip domain-lookup

enable secret class

service password-encryption

banner motd # unauthorized access prohibited!#

line con 0

password cisco

login

logging synchronous
exit

ip domain-name ccna-lab.com

username casestudy privilege 15 secret cisco

line vty 0 15

password cisco

logging synchronous

exec-timeout 10 0

transport input ssh

login local

exit

crypto key generate rsa

int range f0/1

switchport mode trunk

switchport trunk allowed vlan 5,10,20,30,521

switchport trunk native vlan 133

exit

vlan 5

name executive

vlan 10

name sales

vlan 20
name accounts

vlan 30

name hr

vlan 133

name native

vlan 521

name management

vlan 721

name blackhole

exit

interfce f0/15

switchport mode access

switchport access vlan 5

interfce range f0/2-9

switchport mode access

switchport access vlan 10

interfce range f0/10-12

switchport mode access

switchport access vlan 20

interfce range f0/13-14

switchport mode access

switchport access vlan 30

interfce range f0/16

switchport mode access

switchport access vlan 521

interfce range f0/17-24

switchport mode access

switchport access vlan 721

exit

interfce vlan 1

no ip address

exit

int vlan 521

ip address 192.168.41.60 255.255.255.248

no shut

exit

ip defult-gateway 192.168.41.57

exit

Branch switch 1

en
conf t
hostname brsw1

no ip domain-lookup

enable secret class

service password-encryption

banner motd # unauthorized access prohibited!#

line con 0

password cisco

login

logging synchronous

exit

ip domain-name ccna-lab.com

username casestudy privilege 15 secret cisco1

line vty 0 15

password cisco

logging synchronous

exec-timeout 10 0

transport input ssh

login local

exit

crypto key generate rsa

interfce range f0/1-2

switchport mode trunk

switchport trunk allowed vlan 5,10,20,30,521

switchport trunk native vlan 133

exit
vlan 5

name executive

vlan 10

name sales

vlan 20

name accounts

vlan 30

name hr

vlan 133

name native

vlan 521

name management

vlan 721

name blackhole

exit

interfce f0/15

switchport mode access

switchport access vlan 5

interfce range f0/3-9

switchport mode access

switchport access vlan 10

interfce range f0/10-14

switchport mode access

switchport access vlan 20

interfce range f0/16-17

switchport mode access

switchport access vlan 30

interfce range f0/18

switchport mode access

switchport access vlan 521

interfce range f0/19-24

switchport mode access

switchport access vlan 721

exit

interfce vlan 1

no ip address

interfce vlan 521

ip address 192.168.41.58 255.255.255.252

exit

ip defult-gateway 192.168.41.57

exit

Branch router
En

Conf t

Hostname BO

no ip domain-lookup

enable secret class

banner motd # unauthorized access prohibited!#

line con 0

exec-timeout 10

logging synchronous

password cisco

login

exit

ip domain-name ccna-lab.com

username casestudy privilege 15 secret cisco1

line vty 0 15

exec-timeout 10

logging synchronous

transport input ssh

login local

service password-encryption

crypto key generate rsa

ipv6 unicast-routing

int s0/0/1

description link from bo router to ho router

ip address 192.168.36.234 255.255.255.252

no shut

ipv6 address fe80::1 link-local

ipv6 address 2001:acad:fee:b::2/64

exit

int g0/0

description link to bo switch

ip address 192.168.38.75 255.255.255.248

no shut

ipv6 address fe80::1 link-local

ipv6 address 2001:acad:fee:a::1/64

int g0/0.5
encapsulation dot1Q 5
ip address 192.168.41.49 255.255.255.248
ipv6 address fe80::1 link-local
ipv6 address 2001:acad:fee:d::/64
no shut
exit
int g0/0.10
encapsulation dot1Q 10
ip address 192.168.40.1 255.255.255.0
ipv6 address fe80::1 link-local
ipv6 address 2001:acad:fee:8::/64
no shut
exit

int g0/0.20
encapsulation dot1Q 20
ip address 192.168.41.1 255.255.255.224
ipv6 address fe80::1 link-local
ipv6 address 2001:acad:fee:9::/64
no shut
exit

int g0/0.30
encapsulation dot1Q 30
ip address 192.168.41.33 255.255.255.240
ipv6 address fe80::1 link-local
ipv6 address 2001:acad:fee:e::/64
no shut
exit
int g0/0.521
encapsulation dot1Q 521
ip address 192.168.41.57 255.255.255.252
ipv6 address fe80::1 link-local
ipv6 address 2001:acad:fee:c::/64
no shut
exit
int g0/0
no shutdown
exit

ip dhcp excluded-address 192.168.41.49 192.168.41.53

ip dhcp pool boexecutive
network 192.168.41.48 255.255.255.248
defult-router 192.168.41.49
exit
ip dhcp excluded-address 192.168.40.1 192.168.40.5
ip dhcp pool bosales
network 192.168.40.0 255.255.255.0
defult-router 192.168.40.1
exit
ip dhcp excluded-address 192.168.41.1 192.168.41.5
ip dhcp pool boaccounts
network 192.168.41.0 255.255.255.224
defult-router 192.168.41.1
exit
ip dhcp excluded-address 192.168.41.33 192.168.41.37
ip dhcp pool bohr
network 192.168.41.32 255.255.255.240
defult-router 192.168.41.33
exit
ip dhcp excluded-address 192.168.41.57 192.168.41.61ex
ip dhcp pool bomanagement
network 192.168.41.56 255.255.255.252
defult-router 192.168.41.57
exit

ip dhcp excluded-address 192.168.36.193 192.168.36.197

ip dhcp pool hoexecutive
network 192.168.36.192 255.255.255.224
defult-router 192.168.36.193
exit
ip dhcp pool 1
network 192.168.36.232 255.255.255.252
defult-router 192.168.36.233
exit
ip dhcp pool 2
network 192.168.36.224 255.255.255.248
defult-router 192.168.36.227
exit
ip dhcp excluded-address 192.168.32.1 192.168.32.5
ip dhcp pool hosales
network 192.168.32.0 255.255.252.0
defult-router 192.168.32.1
exit
ip dhcp excluded-address 192.168.36.1 192.168.36.5
ip dhcp pool hoaccounts
network 192.168.36.0 255.255.255.128
defult-router 192.168.36.1
exit
ip dhcp excluded-address 192.168.36.129 192.168.36.133
ip dhcp pool hohr
network 192.168.36.128 255.255.255.192
defult-router 192.168.36.129
exit
ip dhcp excluded-address 192.168.37.1 192.168.37.5
ip dhcp pool homanagement
network 192.168.37.0 255.255.255.252
defult-router 192.168.37.1
exit
ip route 0.0.0.0 0.0.0.0 192.168.36.233
ipv6 route ::/0 2001:acad:fee:b::1
router rip
version 2
network 192.168.36.0
exit

HO SWITCH

hostname HoSw
no ip domain-lookup
enable secret class
line con 0
exec-timeout 10 0
logging synchronous
password cisco
login
ip domain-name ccna-lab.com
username CaseStudy privilege 15 secret cisco1
line vty 0 15
exec-timeout 10
logging synchronous
transport input ssh
login local
service password-encryption
crypto key generate rsa
vlan 5
name executive
ex

vlan 10
name sales
ex
vlan 20
name accounts
ex
vlan 30
name hr
ex
vlan 521
name management
ex
int f0/1
switchport mode trunk

int f0/2
switchport mode access vlan 5
switchport mode access
switchport access vlan 5
exit
int f0/3
switchport mode access
switchport access vlan 30
ex
int f0/4
switchport mode access
switchport access vlan 10
ex
int f0/5
switchport mode access
switchport access vlan 521
ex
int f0/6
switchport mode access
switchport access vlan 20
ex
int vlan 1
no ip address
shutdown
ex
int vlan 521

ip address 192.168.37.2 255.255.255.252

no shut
ex
ip defult-gateway 192.168.37.1
ex
int f0/2
switchport mode trunk
exit