Skip to content
This repository was archived by the owner on Dec 16, 2022. It is now read-only.

Latest commit

 

History

History
executable file
·
605 lines (570 loc) · 17.8 KB

l3switchnataclsdhcp17.md

File metadata and controls

executable file
·
605 lines (570 loc) · 17.8 KB

l3switchdhcp17hkh

Variablen

    lu2
    htl.com
    Kids
    susu
    unprivileged
    restricted
    server
    management
    10.162

Anleitung

  1. Replace variables
  2. Paste config
  3. Enable DHCP on all PCs
  4. Set IPs on all servers (See section: server IPs )
  5. Enable HTTPS (only) on all servers
  6. Enable DNS on intranet.lu2.com
  7. Set DNS entries (See section: DNS server)

DNS server

Name Adresse

dmz.lu2.com 10.162.100.2 intranet.lu2.com 10.162.50.3 wgs2.lu2.com 10.162.50.2 wgs3.lu2.com 10.162.50.253

wan.internet.com 193.170.149.254

server IPs

Name NW-Adresse IP-Adresse Subnetzmaske Gateway DNS

wgs2.lu2.com 10.162.50.0 10.162.50.2 255.255.255.0 10.162.50.1 10.162.50.3 wgs3.lu2.com 10.162.50.0 10.162.50.253 255.255.255.0 10.162.50.1 10.162.50.3 intranet.lu2.com 10.162.50.0 10.162.50.3 255.255.255.0 10.162.50.1 10.162.50.3 dmz.lu2.com 10.162.100.0 10.162.100.2 255.255.255.0 10.162.100.1 10.162.50.3 wan.internet.com 193.170.149.0 193.170.149.254 255.255.255.0 193.170.149.1 193.170.149.254

Router0

enable
    conf t
        hostname Router0
        ip route 0.0.0.0 0.0.0.0 se0/3/0
        int s0/3/1
            no shutdown
            ip addr 193.70.193.253 255.255.255.248
         int s0/3/0
            no shutdown
            ip addr 10.1.5.2 255.255.255.0
        int gig0/0
            ip addr 193.170.149.1 255.255.255.0
            no shutdown
        router eigrp 101
            network 193.70.193.252 0.0.0.7
            network 193.70.193.248 0.0.0.7
            network 193.170.149.0 0.0.0.255
            redistribute static
            exit
        exit
    cop ru st

BorderRouter

enable
    conf t
        hostname BorderRouter
        ip name-server 10.162.50.3
        ip route 0.0.0.0 0.0.0.0 se0/2/0
        spanning-tree vlan 10
        spanning-tree vlan 20
        spanning-tree vlan 30
        spanning-tree vlan 40
        spanning-tree vlan 50
        spanning-tree vlan 99
        ip access-list extended nat
            permit ip 10.162.0.0 0.0.255.255 any
            exit
        ip nat inside source list nat interface serial 0/2/0 overload
        ip nat inside source static tcp 10.162.100.2 22 193.70.193.252 22
        ip nat inside source static tcp 10.162.100.2 80 193.70.193.252 80
        ip nat inside source static tcp 10.162.100.2 443 193.70.193.252 443
        int fa0/0
            ip nat inside
            no shutdown
        int fa0/0.10
            ip nat inside
            no shutdown
            encapsulation dot1q 10
            ip addr 10.162.10.254 255.255.255.0
            ip access-group list in
        int fa0/0.20
            ip nat inside
            no shutdown
            encapsulation dot1q 20
            ip addr 10.162.20.254 255.255.255.0
            ip access-group list in
        int fa0/0.30
            ip nat inside
            no shutdown
            encapsulation dot1q 30
            ip addr 10.162.30.254 255.255.255.0
            ip access-group list in
        int fa0/0.50
            ip nat inside
            no shutdown
            encapsulation dot1q 50
            ip addr 10.162.50.254 255.255.255.0
            ip access-group list in
        int fa0/1
            ip nat inside
            ip addr 10.162.100.1 255.255.255.0
            no shutdown
        int se0/2/0
            no shutdown
            ip addr 193.70.193.252 255.255.255.248
            ip nat outside
        router eigrp 101
            network 10.162.0.0
            redistribute static
            exit
        exit
    cop ru st

VTP/DHCP-L3Switch

enable
    conf t
        ip name-server 10.162.50.3
        ip routing
        hostname VTP/DHCP-L3Switch
        vtp domain lu2
        vtp mode server
        ip domain htl.com
        ip dhcp excluded-address 10.162.10.1
        ip dhcp excluded-address 10.162.10.254
        ip dhcp excluded-address 10.162.20.1
        ip dhcp excluded-address 10.162.20.254
        ip dhcp excluded-address 10.162.30.1
        ip dhcp excluded-address 10.162.30.254
        ip dhcp excluded-address 10.162.40.1
        ip dhcp excluded-address 10.162.50.1
        ip dhcp excluded-address 10.162.50.2
        ip dhcp excluded-address 10.162.50.3
        ip dhcp excluded-address 10.162.50.253
        ip dhcp excluded-address 10.162.50.254
        ip dhcp excluded-address 10.162.99.1
        ip dhcp pool VLAN10
            network 10.162.10.0 255.255.255.0
            default-router 10.162.10.1
            dns-server 10.162.50.3
        ip dhcp pool VLAN20
            network 10.162.20.0 255.255.255.0
            default-router 10.162.20.1
            dns-server 10.162.50.3
        ip dhcp pool VLAN30
            network 10.162.30.0 255.255.255.0
            default-router 10.162.30.1
            dns-server 10.162.50.3
        ip dhcp pool VLAN40
            network 10.162.40.0 255.255.255.0
            default-router 10.162.40.1
            dns-server 10.162.50.3
        ip dhcp pool VLAN50
            network 10.162.50.0 255.255.255.0
            default-router 10.162.50.1
            dns-server 10.162.50.3
        ip dhcp pool VLAN99
            network 10.162.99.0 255.255.255.0
            default-router 10.162.99.1
            dns-server 10.162.50.3
        vlan 10
            name Kids
        vlan 20
            name susu
        vlan 30
            name unprivileged
        vlan 40
            name restricted
        vlan 50
            name server
        vlan 99
            name management
        interface fa0/1
            no shutdown
            switchport trunk encapsulation dot1q
            switchport mode trunk
            switchport trunk native vlan 99
        interface gig0/1
            no shutdown
            switchport trunk encapsulation dot1q
            switchport mode trunk
            switchport trunk native vlan 99
        interface gig0/2
            no shutdown
            switchport trunk encapsulation dot1q
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/13
            switchport mode access
            switch access vlan 50
        interface vlan 10
            no shutdown
            ip address 10.162.10.1 255.255.255.0
        interface vlan 20
            no shutdown
            ip address 10.162.20.1 255.255.255.0
        interface vlan 30
            no shutdown
            ip address 10.162.30.1 255.255.255.0
        interface vlan 50
            no shutdown
            ip address 10.162.50.1 255.255.255.0
        router eigrp 101
            network 10.162.0.0
            exit
        spanning-tree vlan 10
        spanning-tree vlan 20
        spanning-tree vlan 30
        spanning-tree vlan 40
        spanning-tree vlan 50
        spanning-tree vlan 99
        ip route 0.0.0.0 0.0.0.0 fa0/1
        exit
    cop ru st

Switch1

enable
    conf t
        hostname SW1
        vtp domain lu2
        vtp mode client
        interface gig0/1
            switchport mode trunk
            switchport trunk native vlan 99
        interface gig0/2
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/20
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/21
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 2 mode active
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 2 mode active
        interface fastethernet0/23
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface fastethernet0/24
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface port-channel 2
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        spanning-tree vlan 10 root primary
        exit
    cop ru st

Switch2

enable
    conf t
        hostname SW2
        vtp domain lu2
        vtp mode client
        interface gig0/1
            switchport mode trunk
            switchport trunk native vlan 99
        interface gig0/2
            switchport mode trunk
            switchport trunk native vlan 99
        interface range fastethernet0/17 - 20
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/21
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 2 mode active
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 2 mode active
        interface fastethernet0/23
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface fastethernet0/24
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface port-channel 2
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        spanning-tree vlan 20 root primary
        exit
    cop ru st

Switch3

enable
    conf t
        hostname SW3
        vtp domain lu2
        vtp mode client
        interface gig0/1
            switchport mode trunk
            switchport trunk native vlan 99
        interface gig0/2
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/20
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/21
            channel-group 1 mode active
        interface fastethernet0/22
            channel-group 2 mode active
        interface fastethernet0/23
            channel-group 2 mode active
        interface fastethernet0/24
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface port-channel 2
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        spanning-tree vlan 30 root primary
        exit
    cop ru st

SW-A

enable
    conf t
        hostname SW-A
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
        interface fastethernet0/13
            switchport mode access
            switch access vlan 50
            exit
        exit
    cop ru st

SW-B

enable
    conf t
        hostname SW-B
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            channel-group 2 mode active
        interface port-channel 2
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
            exit
        exit
    cop ru st

SW-C

enable
    conf t
        hostname SW-C
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
        interface fastethernet0/13
            switchport mode access
            switch access vlan 50
            exit
        exit
    cop ru st

SW-D

enable
    conf t
        hostname SW-D
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            channel-group 2 mode active
        interface port-channel 2
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
            exit
        exit
    cop ru st

SW-E

enable
    conf t
        hostname SW-E
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
        interface fastethernet0/13
            switchport mode access
            switch access vlan 50
            exit
        exit
    cop ru st

SW-F

enable
    conf t
        hostname SW-F
        vtp domain lu2
        vtp mode client
        interface range fastethernet0/23 - 24
            switchport mode trunk
            switchport trunk native vlan 99
            channel-group 1 mode active
        interface port-channel 1
            no shutdown
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/22
            switchport mode trunk
            switchport trunk native vlan 99
        interface fastethernet0/1
            switchport mode access
            switch access vlan 10
        interface fastethernet0/2
            switchport mode access
            switch access vlan 20
        interface fastethernet0/3
            switchport mode access
            switch access vlan 30
        interface fastethernet0/4
            switchport mode access
            switch access vlan 40
        interface fastethernet0/13
            switchport mode access
            switch access vlan 50
            exit
        exit
    cop ru st