R1

Yêu cầu 1: Cấu hình cơ bản trên các thiết bị

hostname R1
!
servion password-encryption
enable password Abc@123
!
line console 0
password Abc@123
login
!
line vty 0 4
password Abc@123
login local
transport input telnet
!
int lo0
ip add 172.16.10.1 255.255.255.0
!
int e0/0
no sh
!
int e0/0.12
encapsulation dot1q 12
ip add 172.16.12.1 255.255.255.0
!
int e0/0.13
encapsulation dot1q 13
ip add 172.16.12.1 255.255.255.0
!
int s1/0
no sh
ip add 10.1.13.1 255.255.255.0
!
Yêu cầu 2: Cấu hình vtp

Yêu cầu 3: Hiệu chỉnh STP

Yêu cầu 4: Định tuyến giữa các vlan

Yêu cầu 5: Point-to-point data link: xác thực pap
user R1R3 password CISCOPAP
!
int s1/0
no sh
encapsulation ppp
ppp authentication pap
!
Yêu cầu 6: Cấu hình định tuyến
int e0/1
no sh
ip add dhcp
!
router ospf 100
router-id 1.1.1.1
network 172.16.0.0 0.255.255 area 0
network 10.1.0.0 0.0.255.255 area 0
default-information originate
!
int e0/0.12
ip ospf priority 255
!
int e0/0.13
ip ospf priority 255
!
access-list 1 permit 10.1.10.0 0.0.0.255
access-list 1 permit 10.1.20.0 0.0.0.255
access-list 1 permit 10.1.30.0 0.0.0.255
!
ip nat inside source list 1 interface e0/1 overload
!
int e0/0.12
ip nat inside
!
int e0/0.13
ip nat inside
!
int s1/0
ip nat inside
!
int e0/1
ip nat outside
!
Yêu cầu 7: ACL
access-list 101 permit ip 10.1.20.0 0.0.0.255 172.16.10.0 0.0.0.255
access-list 101 deny ip any 172.16.10.0 0.0.0.255
acess-list 101 permit ip any any
!
int e0/0.12
ip access-group 101 in
!
ip e0/0.13
ip access-group 101 in
!
int s1/0
ip access-group 101 in
!
int e0/1
ip access-group 101 in
!
Yêu cầu 8: DHCP
ip excluded-address 10.1.10.1
ip excluded-address 10.1.20.1
ip excluded-address 10.1.30.1
!
ip dhcp pool VLAN 10
network 10.1.10.0 255.255.255.0
default-router 10.1.10.1
dns-server 8.8.8.8
!
ip dhcp pool VLAN 20
network 10.1.20.0 255.255.255.0
default-router 10.1.20.1
dns-server 8.8.8.8
!
ip dhcp pool VLAN 30
network 10.1.30.0 255.255.255.0
default-router 10.1.30.1
dns-server 8.8.8.8
!
Yêu cầu 9: IPV6
int s1/0
ipv6 enable
ipv6 address 2001:1:13::1/64
!
int lo0
ipv6 enable
ipv6 address 2001:1111::1/64
!
ipv6 route 2001:3333::/64 2001:1:13::3
R2

hostname R2
!
servion password-encryption
enable password Abc@123
!
line console 0
password Abc@123
login
!
line vty 0 4
password Abc@123
login
transport input telnet
!

int e0/0
no sh
!
int e0/0.12
encapsulation dot1q 12
ip add 172.16.121.2 255.255.255.0
!
router ospf 100
router-id 2.2.2.2
network 172.16.0.0 0.0.255.255 area 0
network 10.1.0.0 0.0.255.255 area 0
acess-list 30 permit 10.1.30.0 0.0.0.255
!
line vty 0 4
access-class 30 in

no ip excluded-address 10.1.10.1
no ip excluded-address 10.1.20.1
no ip excluded-address 10.1.30.1
!
no ip dhcp pool LAN10
!
no ip dhcp pool LAN20
!
no ip dhcp pool LAN30
!
int e0/0.10
ip helper-address 172.16.12.1
int e0/0.20
ip helper-address 172.16.12.1
int e0/0.30
ip helper-address 172.16.12.1
R3 SW1

hostname R3 hostname SW1

! !
servion password-encryption servion password-encryption
enable password Abc@123 enable password Abc@123
! !
line console 0 line console 0
password Abc@123 password Abc@123
login login
! !
line vty 0 4 line vty 0 4
password Abc@123 password Abc@123
login login
transport input telnet transport input telnet
! !
int lo0
ip add 172.16.30.1 255.255.255.0
!
int e0/0 int range e0/0-2
no sh no sh
! switchport
sw trunk encapsulation dot1q
sw mode trunk

int e0/0.13
encapsulation dot1q 13
ip add 172.16.13.3 255.255.255.0
!
int s1/0 int vlan 10
no sh ip add 10.1.10.251 255.255.255.0
ip add 10.1.13.3 255.255.255.0 !
!

vtp domain CNNA_NTP

vtp password cisco
!
vtp mode server
!
vlan 10
name CCNA
!
vlan 20
name Route
!

spanning-tree vlan 20 priority 4096

spanning-tree vlan 30 priority 4096
 int e0/1
no sh
!
int e0/1.10
encapsulation dot1q 10
ip add 10.1.10.1 255.255.255.0
!
int e0/1.20
encapsulation dot1q 20
ip add 10.1.20.1 255.255.255.0
!
int e0/1.30
encapsulation dot1q 30
ip add 10.1.30.1 255.255.255.0
!

int s1/0
no sh
encapsulation ppp
ppp pap sent-username R1R3 password CISCOPAP
!

router ospf 100

router-id 3.3.3.3
network 172.16.0.0 0.0.255.255 area 0
network 10.1.0.0 0.0.255.255 area 0
!
int e0/0.13
ip ospf priority 255
int s1/0
ipv6 enable
ipv6 address 2001:1:13::3/64
!
int lo0
ipv6 enable
ipv6 address 2001:3333::1/64
!
ipv6 route 2001:1111::/64 2001:1:13::1
SW2 SW3

hostname SW2 hostname SW3

! !
servion password-encryption servion password-encryption
enable password Abc@123 enable password Abc@123
! !
line console 0 line console 0
password Abc@123 password Abc@123
login login
! !
line vty 0 4 line vty 0 4
password Abc@123 password Abc@123
login login
transport input telnet transport input telnet
! !

int range e0/1-2 int range e0/1-2

no sh no sh
switchport switchport
sw trunk encapsulation dpot1q sw trunk encapsulation dpot1q
sw mode trunk sw mode trunk
! !
int e0/3 int e0/3
no sh no sh
switchport switchport
sw acc vlan 20 sw acc vlan 30
sw mode acc sw mode acc
! !
int vlan 10 int vlan 10
ip add 10.1.10.252 255.255.255.0 ip add 10.1.10.253 255.255.255.0

vtp domain CCNA_NTP vtp domain CCNA_NTP

vtp password cisco vtp password cisco
! !
vtp mode client vtp mode client
! !

spanning-tree vlan 10 priority 4096 spanning-tree vlan 10 priority 8192

spanning-tree vlan 20 priority 8192
spanning-tree vlan 30 priority 8196
Xác thực CHAP giữa R1 và R2: thỏa mãn quy tắc: username của router này là hostname của router kia và pasw
R1: username R2 password cisco
int es0/0/0
encapsulation ppp
ppp authentication chap
R2: username R1 password cisco
SW4

hostname SW4
!
servion password-encryption
enable password Abc@123
!
line console 0
password Abc@123
login
!
line vty 0 4
password Abc@123
login
transport input telnet
!

int range e0/0-2

no sh
switchport
sw trunk encapsulation dpot1q
sw mode trunk
!

int vlan 123

ip add 172.16.123.4 255.255.255.0
ame của router kia và pasword được sử dụng giống nhau.