cau hinh
-
Upload
duc-nguyen -
Category
Documents
-
view
39 -
download
0
Transcript of cau hinh
![Page 1: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/1.jpg)
1)Basic configuration
R1(Config)#line vty 0 4
R1(Config-line)#pass cisco
R1( Config-line )#login.
R2(config)#line vty 0 4
R2(config-line)#pass cisco
R2(config-line)#login
R3(config)#line vty 0 4
R3(config-line)#pass cisco
R3(config-line)#login
3)VTP,Vlan,Trunking,Inter vlan Routing,STP
a)BranchOffice
S31(config)#vtp m ser
S31(config)#vtp do BranchOffice
S31(config)#vtp pass BRP@ss
S31(config)#vtp version 2
S31(config)#vlan 10
S31(config-vlan)#name Tech
S31(config)#vlan 20
S31(config-vlan)#name Sale
S31(config)#vlan 30
S31(config-vlan)#name Admin
S31(config)#int range f0/5-10
S31(config-if-range)#sw m acc
S31(config-if-range)#sw acc vlan 10
![Page 2: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/2.jpg)
S31(config)#int range f0/11-15
S31(config-if-range)#sw m acc
S31(config-if-range)#sw acc vlan 20
S31(config)#int range f0/16-20
S31(config-if-range)#sw m acc
S31(config-if-range)#sw acc vlan 30
S31(config)#int range f0/1-3
S31(config-if-range)#sw m tr
S32(config)#vtp m cli
S32(config)#vtp do BranchOffice
S32(config)#vtp pass BRP@ss
S32(config)#vtp version 2
S32(config)#vlan 10
S32(config-vlan)#name Tech
S32(config)#vlan 20
S32(config-vlan)#name Sale
S32(config)#vlan 30
S32(config-vlan)#name Admin
S32(config)#int range f0/5-10
S32(config-if-range)#sw m acc
S32(config-if-range)#sw acc vlan 10
S32(config)#int range f0/11-15
S32(config-if-range)#sw m acc
S32(config-if-range)#sw acc vlan 20
S32(config)#int range f0/16-20
![Page 3: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/3.jpg)
S32(config-if-range)#sw m acc
S32(config-if-range)#sw acc vlan 30
S32(config)#int range f0/1-2
S32(config-if-range)#sw m tr
S33(config)#vtp m cli
S3(config)#vtp do BranchOffice
S33(config)#vtp pass BRP@ss
S33(config)#vtp version 2
S33(config)#vlan 10
S33(config-vlan)#name Tech
S33(config)#vlan 20
S33(config-vlan)#name Sale
S33(config)#vlan 30
S33(config-vlan)#name Admin
S33(config)#int range f0/5-10
S33(config-if-range)#sw m acc
S33(config-if-range)#sw acc vlan 10
S33(config)#int range f0/11-15
S33(config-if-range)#sw m acc
S33(config-if-range)#sw acc vlan 20
S33(config)#int range f0/16-20
S33(config-if-range)#sw m acc
S33(config-if-range)#sw acc vlan 30
S33(config)#int range f0/1-2
S33(config-if-range)#sw m tr
![Page 4: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/4.jpg)
b)HeadQuarter
S21(config)#vtp m ser
S21(config)#vtp do HeadQuarter
S31(config)#vtp pass HQP@ss
S21(config)#vtp version 2
S21(config)#vlan 10
S21(config-vlan)#name Tech
S21(config)#vlan 20
S21(config-vlan)#name Sale
S21(config)#vlan 30
S21(config-vlan)#name Admin
S21(config)#int range f0/5-10
S21(config-if-range)#sw m acc
S21(config-if-range)#sw acc vlan 10
S21(config)#int range f0/11-15
S21(config-if-range)#sw m acc
S21(config-if-range)#sw acc vlan 20
S21(config)#int range f0/16-20
S21(config-if-range)#sw m acc
S21(config-if-range)#sw acc vlan 30
S21(config)#int range f0/1-3
S21(config-if-range)#sw m tr
S22(config)#vtp m cli
S22(config)#vtp do HeadQuarter
S22(config)#vtp pass HQP@ss
S22(config)#vtp version 2
![Page 5: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/5.jpg)
S22(config)#vlan 10
S22(config-vlan)#name Tech
S22(config)#vlan 20
S22(config-vlan)#name Sale
S22(config)#vlan 30
S22(config-vlan)#name Admin
S22(config)#int range f0/5-10
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 10
S22(config)#int range f0/11-15
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 20
S22(config)#int range f0/16-20
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 30
S22(config)#int range f0/1-2
S22(config-if-range)#sw m tr
S22(config)#vtp m cli
S22(config)#vtp do HeadQuarter
S22(config)#vtp pass HQP@ss
S22(config)#vtp version 2
S22(config)#vlan 10
S22(config-vlan)#name Tech
S22(config)#vlan 20
S22(config-vlan)#name Sale
S22(config)#vlan 30
![Page 6: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/6.jpg)
S22(config-vlan)#name Admin
S22(config)#int range f0/5-10
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 10
S22(config)#int range f0/11-15
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 20
S22(config)#int range f0/16-20
S22(config-if-range)#sw m acc
S22(config-if-range)#sw acc vlan 30
S22(config)#int range f0/1-2
S22(config-if-range)#sw m tr
3.4 Inter-vlan Routing
R3(config)#int f0/0
R3(config-if)#no shut
R3(config)#int f0/0.10
R3(config-subif)#en do 10
R3(config-subif)#ip add 10.0.10.3 255.255.255.0
R3(config)#int f0/0.20
R3(config-subif)#en do 20
R3(config-subif)#ip add 10.0.20.3 255.255.255.0
R3(config)#int f0/0.30
R3(config-subif)#en do 30
R3(config-subif)#ip add 10.0.30.3 255.255.255.0
![Page 7: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/7.jpg)
R2(config)#int f0/0
R2(config-if)#no shut
R2(config)#int f0/0.10
R2(config-subif)#en do 10
R2(config-subif)#ip add 172.16.10.2 255.255.255.0
R2(config-subif)#ip help 172.16.1.6 ////DHCP Relay
R2(config)#int f0/0.20
R2(config-subif)#en do 20
R2(config-subif)#ip add 172.16.20.2 255.255.255.0
R2(config-subif)#ip help 172.16.1.6 ////DHCP Relay
R2(config)#int f0/0.30
R2(config-subif)#en do 30
R2(config-subif)#ip add 172.16.30.2 255.255.255.0
R2(config-subif)#ip help 172.16.1.6 ////DHCP Relay
4)Routing
4.1
R3(config)#int s0/0/1
R3(config-if)#no shut
R3(config-if)#ip add 200.20.2.19 255.255.255.248
R3(config-if)#en fra
R3(config-if)#ip ospf net po
R1(config)#int s0/0/1
R1(config-if)#no shut
R1(config-if)#ip add 200.20.2.17 255.255.255.248
R1(config-if)#en fra
R1(config-if)#ip ospf net po
![Page 8: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/8.jpg)
4.2
- OSPF
R1(config)#int s0/0/0
R1(config-if)#no shut
R1(config-if)#ip add 200.20.2.1 255.255.255.248
R1(config)#int s0/1/0
R1(config-if)#ip add 172.16.12.1 255.255.255.0
R1(config-if)#clock rate 64000
R1(config-if)#no shut
R1(config)#int f0/0
R1(config-if)#ip add 172.16.1.1 255.255.255.0
R1(config-if)#no shut
R1(config)#router ospf 1
R1(config-router)# net 172.16.1.0 0.0.0.0255 area 0
R1(config-router)# net 200.20.2.16 0.0.0.7 area 0
R1(config-router)# net 172.16.12.0 0.0.0.255 area 0
R1(config-router)# re eigrp 12 subnets
R1(config)#int s0/0/1
R1(config-if)#ip ospf authentication me
R1(config-if)#ip os me 13 md5 cisco13
R3(config)#int s0/0/0
R3(config-if)#no shut
R3(config-if)#ip add 200.20.2.11 255.255.255.248
R3(config)#router ospf 1
R3(config-router)# net 10.0.10.0 0.0.0.0255 area 0
R3(config-router)# net 10.0.20.0 0.0.0.0255 area 0
![Page 9: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/9.jpg)
R3(config-router)# net 10.0.30.0 0.0.0.0255 area 0
R3(config-router)# net 200.20.2.16 0.0.0.7 area 0
R3(config-router)#default-information originate /////quang ba duong mac dinh
R3(config)#int s0/0/1
R3(config-if)#ip ospf authentication me
R3(config-if)#ip os me 13 md5 cisco13
-EIGRP giua R1 va R2
R1(config)#router eigrp 12
R1(config-router)#no auto
R1(config-router)#net 200.20.2.16 0.0.0.7
R1(config-router)#net 172.16.1.0 0.0.0.255
R1(config-router)#net 172.16.12.0 0.0.0.255
R1(config-router)#net 200.20.2.0 0.0.0.7
R1(config-router)#redistribute static ////quang ba duong mac dinh
R1(config-router)#re ospf 1 metric 1544 100 255 1 1500
R2(config)#int s0/0/0
R2(config-if)#ip add 172.16.12.2 255.255.255.0
R2(config-if)#no shut
R2(config)#router eigrp 12
R2(config-router)#no auto
R2(config-router)#net 172.16.12.0 255.255.255.0
R2(config-router)#net 172.16.10.0 255.255.255.0
R2(config-router)#net 172.16.20.0 255.255.255.0
R2(config-router)#net 172.16.30.0 255.255.255.0
4.3 Quang ba duong mac dinh
![Page 10: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/10.jpg)
R1(config)#ip route 0.0.0.0 0.0.0.0 s0/0/0
R3(config)#ip route 0.0.0.0 0.0.0.0 s0/0/0
5 PAP/CHAP
-PAP 1 chieu tren R1 va R3 toi ISP
R3(config)#int s0/0/0
R3(config-if)#en ppp
R3(config-if)#ppp pap sent BR passBRP
R1(config)#int s0/0/0
R1(config-if)#en ppp
R1(config-if)#ppp pap sent HQ pass HQP
-PAP 2 chieu giua R1 va R2
R1(config)#username R2_HQ pass R2Pass
R1(config)#int s0/1/0
R1(config-if)#encap ppp
R1(config-if)#ppp authen pap
R1(config-if)#ppp pap sent-username R1_HQ pass R1Pass
R2(config)#username R1_HQ pass R1Pass
R2(config)#int s0/1/0
R2(config-if)#encap ppp
R2(config-if)#ppp authen pap
R2(config-if)#ppp pap sent-username R2_HQ pass R2Pass
6 NAT
R1(config)# access-list 1 permit 172.16.0.0 0.0.0.255.255
![Page 11: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/11.jpg)
R1(config)#ip nat inside source list 1 int s0/0/0 overload
R1(config)#int s0/1/0
R1(config-if)#ip nat inside
R1(config)#int s0/0/0
R1(config-if)#ip nat outside
R1(config-if)#ex
R1(config)#ip nat inside source static 172.16.1.5 200.20.2.5
R3(config)#access-list 3 permit 10.0.0.0 0.0.0.255
R3(config)#ip nat inside source list 3 int s0/0/0 overload
R3(config)#int f0/0
R3(config-if)#ip nat inside
R3(config)#int s0/0/0
R3(config-if)#ip nat outside
7 DHCP
![Page 12: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/12.jpg)
Chị làm tương tự cho Sale,Admin nhe!
7.2 Cau hinh R3 nhu DHCP server
R3(config)#ip dhcp excluded-address 10.0.10.3
R3(config)#ip dhcp excluded-address 10.0.20.3
R3(config)#ip dhcp excluded-address 10.0.30.3
R3(config)#ip dhcp pool Tech
R3(dhcp-config)#net 10.0.10.0 255.255.255.0
R3(dhcp-config)#default-router 10.0.10.3
R3(dhcp-config)#exit
R3(config)#ip dhcp pool Sale
![Page 13: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/13.jpg)
R3(dhcp-config)#net 10.0.20.0 255.255.255.0
R3(dhcp-config)#default-router 10.0.20.3
R3(dhcp-config)#exit
R3(config)#ip dhcp pool Admin
R3(dhcp-config)#net 10.0.10.0 255.255.255.0
R3(dhcp-config)#default-router 10.0.30.3
R3(dhcp-config)#exit
8. ACL
R2(config)#access-list 100 permit tcp 172.16.10.0 0.0.0.255 any eq telnet
R2(config)#access-list 100 deny tcp any any ep telnet
R2(config)# access-list 100 permit ip any any
R2(config)#int f0/0
R2(config-if)#ip access-group 100 in
R1(config)#access-list 100 permit tcp 172.16.10.0 0.0.0.255 any eq telnet
R1(config)#access-list 100 deny tcp any any ep telnet
R1(config)# access-list 100 permit ip any any
R1(config)#int s0/1/0
R1(config-if)#ip access-group 100 in
R3(config)#access-list 100 permit tcp 10.0.10.0 0.0.0.255 any eq telnet
R3(config)#access-list 100 deny tcp any any ep telnet
R3(config)# access-list 100 permit ip any any
R3(config)#int f0/0
R3(config-if)#ip access-group 100 in
![Page 14: cau hinh](https://reader035.fdocuments.in/reader035/viewer/2022081717/553e7b474a795966358b48df/html5/thumbnails/14.jpg)