Introduction/overview in this lab I Use Cisco ConfigMaker, create a network architecture with three LANs. I added some routers, switches, and hosts to a simple network.

summary inconclusion I learned how to connect host to a switch to a router and then a network to another network using hdlc which is is a bit-oriented synchronous data link layer protocol developed by the International Organization for Standardization (ISO). Then I used frame relay to connect the networks to the internet . Frame Relay was a good choose because Frame Relay is a standardized wide area network technology that specifies the physical and logical link layers of digital telecommunications channels using a packet switching methodology over. all I learned a great deal of in formation

Data: for screenshots amd other data please read below

6. Print out the IOS configuration for your routers and your switches that’s not an option for the switch

step 6 print outs :

! ******************************************************************

! Dallas1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 10:50:15 AM

!

! Hostname: Dallas1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname Dallas1

!

enable password pledger

!

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

interface Ethernet 0/0

no shutdown

description connected to Dallas1_Switch

ip address 200.200.10.1 255.255.255.240

keepalive 10

!

interface Serial 0/0

no shutdown

description connected to chicago1

ip address 200.200.20.1 255.255.255.240

encapsulation hdlc

!

interface Serial 0/1

no shutdown

description connected to Boston1

ip address 200.200.60.1 255.255.255.240

encapsulation hdlc

!

voice-port 1/0/0

shutdown

no description

!

voice-port 1/0/1

shutdown

no description

!

router rip

version 2

network 200.200.10.0

network 200.200.20.0

network 200.200.60.0

no auto-summary

!

!

ip classless

no ip http server

snmp-server community public RO

no snmp-server location

no snmp-server contact

!

line console 0

exec-timeout 0 0

password keith

login

!

line vty 0 4

password keith

login

!

End

! ******************************************************************

! chicago1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 10:58:44 AM

!

! Hostname: chicago1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname chicago1

!

enable secret pledger

!

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

interface Ethernet 0/0

no shutdown

description connected to Chicago1_Switch

ip address 200.200.30.1 255.255.255.248

keepalive 10

!

interface Serial 0/0

no shutdown

description connected to Dallas1

ip address 200.200.20.2 255.255.255.240

encapsulation hdlc

!

interface Serial 0/1

no shutdown

description connected to Boston1

ip address 200.200.40.1 255.255.255.248

encapsulation hdlc

!

voice-port 1/0/0

shutdown

no description

!

voice-port 1/0/1

shutdown

no description

! ******************************************************************

! Boston1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 11:00:04 AM

!

! Hostname: Boston1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname Boston1

!

enable secret pledger

!

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

interface Ethernet 0/0

no shutdown

description connected to Boston_Switch

ip address 200.200.50.1 255.255.255.224

keepalive 10

!

interface Serial 0/0

no shutdown

description connected to chicago1

ip address 200.200.40.2 255.255.255.248

encapsulation hdlc

!

interface Serial 0/1

no shutdown

description connected to Dallas1

ip address 200.200.60.2 255.255.255.240

encapsulation hdlc

!

voice-port 1/0/0

shutdown

no description

!

voice-port 1/0/1

shutdown

no description

!

router rip

version 2

network 200.200.50.0

network 200.200.40.0

network 200.200.60.0

no auto-summary

!

!

ip classless

no ip http server

snmp-server community public RO

no snmp-server location

no snmp-server contact

!

line console 0

exec-timeout 0 0

password alijah

login

!

line vty 0 4

password alijah

login

!

end

step 11

! ******************************************************************

! Dallas1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 11:54:51 AM

!

! Hostname: Dallas1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname Dallas1

!

enable secret pledger

!

ip source-route

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

! Context-Based Access Control

!

no ip inspect audit-trail

ip inspect tcp synwait-time 30

ip inspect tcp finwait-time 5

ip inspect tcp idle-time 3600

ip inspect udp idle-time 30

ip inspect dns-timeout 5

ip inspect one-minute low 900

ip inspect one-minute high 1100

ip inspect max-incomplete low 900

ip inspect max-incomplete high 1100

ip inspect tcp max-incomplete host 50 block-time 0

!

! Internet Key Exchange (IKE)

!

crypto isakmp enable

crypto isakmp identity address

!

crypto isakmp policy 1

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

!

crypto isakmp policy 2

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

crypto isakmp key 1 address 200.200.40.1

crypto isakmp key 2 address 200.200.70.1

!

! IPSec

!

crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac

crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac

crypto map cm-cryptomap local-address Serial 0/0.1

!

crypto map cm-cryptomap 1 ipsec-isakmp

match address 100

set peer 200.200.40.1

set transform-set cm-transformset-1

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

crypto map cm-cryptomap 2 ipsec-isakmp

match address 101

set peer 200.200.70.1

set transform-set cm-transformset-2

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

interface Ethernet 0/0

no shutdown

description connected to Dallas1_Switch

ip address 192.168.0.1 255.255.255.240

ip nat inside

ip access-group 102 in

keepalive 10

!

interface Serial 0/0

no shutdown

no description

mtu 512

no ip address

encapsulation frame-relay

frame-relay lmi-type cisco

!

interface Serial 0/0.1 point-to-point

no shutdown

description connected to Internet

crypto map cm-cryptomap

ip address 200.200.60.1 255.255.255.240

ip nat outside

no ip route-cache

ip access-group 105 in

frame-relay interface-dlci 16

frame-relay ip rtp header-compression

ip rtp reserve 16384 100 12

traffic-shape rate 9600000 1200000 1200000

!

interface Serial 0/1

no description

no ip address

shutdown

!

voice-port 1/0/0

no shutdown

description connected to Phone (7777777)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/0/1

no shutdown

description connected to Phone_1 (8888888)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/0

no shutdown

description connected to Phone_2 (9999999)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/1

no shutdown

no description

!

dial-peer voice 1 pots

port 1/0/0

destination-pattern 7777777

!

dial-peer voice 2 pots

port 1/0/1

destination-pattern 8888888

!

dial-peer voice 3 pots

port 1/1/0

destination-pattern 9999999

!

dial-peer voice 5 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 1111111

!

dial-peer voice 6 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 2222222

!

dial-peer voice 7 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 3333333

!

dial-peer voice 8 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 4444444

!

dial-peer voice 9 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 5555555

!

dial-peer voice 10 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 6666666

!

! Access Control List 1

!

no access-list 1

access-list 1 permit 192.168.0.0 0.0.0.15

!

! Access Control List 100

!

no access-list 100

access-list 100 permit ip host 200.200.60.1 host 200.200.40.1

!

! Access Control List 101

!

no access-list 101

access-list 101 permit ip host 200.200.60.1 host 200.200.70.1

!

! Access Control List 102

!

no access-list 102

access-list 102 permit udp any eq rip any eq rip

!

! Access Control List 103

!

no access-list 103

access-list 103 deny ip 192.168.0.0 0.0.0.15 any

access-list 103 permit udp any eq rip any eq rip

!

! Access Control List 104

!

no access-list 104

access-list 104 deny ip 192.168.0.0 0.0.0.15 any

access-list 104 permit udp any eq rip any eq rip

!

! Access Control List 105

!

no access-list 105

access-list 105 permit udp host 200.200.60.1 eq 500 host 200.200.60.1

access-list 105 permit ahp host 200.200.60.1 host 200.200.60.1

access-list 105 permit esp host 200.200.60.1 host 200.200.60.1

!

! Access Control List 106

!

no access-list 106

access-list 106 deny ip 192.168.0.0 0.0.0.15 any

access-list 106 permit udp any eq rip any eq rip

!

! Access Control List 107

!

no access-list 107

access-list 107 deny ip 192.168.0.0 0.0.0.15 any

access-list 107 permit udp any eq rip any eq rip

!

! Access Control List 108

!

no access-list 108

access-list 108 deny ip 192.168.0.0 0.0.0.15 any

access-list 108 permit udp any eq rip any eq rip

!

! Dynamic NAT

!

ip nat translation timeout 86400

ip nat translation tcp-timeout 86400

ip nat translation udp-timeout 300

ip nat translation dns-timeout 60

ip nat translation finrst-timeout 60

ip nat inside source list 1 interface Serial 0/0.1 overload

!

router rip

version 2

network 192.168.0.0

passive-interface Serial 0/0.1

no auto-summary

!

!

ip classless

!

! IP Static Routes

ip route 0.0.0.0 0.0.0.0 Serial 0/0.1

no ip http server

snmp-server community public RO

no snmp-server location

no snmp-server contact

!

line console 0

exec-timeout 0 0

password keith

login

!

line vty 0 4

password keith

login

!

end

! ******************************************************************

! chicago1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 11:59:09 AM

!

! Hostname: chicago1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname chicago1

!

enable secret pledger

!

ip source-route

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

! Context-Based Access Control

!

no ip inspect audit-trail

ip inspect tcp synwait-time 30

ip inspect tcp finwait-time 5

ip inspect tcp idle-time 3600

ip inspect udp idle-time 30

ip inspect dns-timeout 5

ip inspect one-minute low 900

ip inspect one-minute high 1100

ip inspect max-incomplete low 900

ip inspect max-incomplete high 1100

ip inspect tcp max-incomplete host 50 block-time 0

!

! Internet Key Exchange (IKE)

!

crypto isakmp enable

crypto isakmp identity address

!

crypto isakmp policy 1

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

!

crypto isakmp policy 2

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

crypto isakmp key 1 address 200.200.60.1

crypto isakmp key 4 address 200.200.70.1

!

! IPSec

!

crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac

crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac

crypto map cm-cryptomap local-address Serial 0/0.1

!

crypto map cm-cryptomap 1 ipsec-isakmp

match address 100

set peer 200.200.60.1

set transform-set cm-transformset-1

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

crypto map cm-cryptomap 2 ipsec-isakmp

match address 101

set peer 200.200.70.1

set transform-set cm-transformset-2

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

interface Ethernet 0/0

no shutdown

description connected to Chicago1_Switch

ip address 192.168.1.1 255.255.255.240

ip nat inside

ip access-group 102 in

keepalive 10

!

interface Serial 0/0

no shutdown

no description

mtu 512

no ip address

encapsulation frame-relay

frame-relay lmi-type cisco

!

interface Serial 0/0.1 point-to-point

no shutdown

description connected to Internet

crypto map cm-cryptomap

ip address 200.200.40.1 255.255.255.240

ip nat outside

no ip route-cache

ip access-group 105 in

frame-relay interface-dlci 17

frame-relay ip rtp header-compression

ip rtp reserve 16384 100 12

traffic-shape rate 9600000 1200000 1200000

!

interface Serial 0/1

no description

no ip address

shutdown

!

voice-port 1/0/0

no shutdown

description connected to Phone_3 (1111111)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/0/1

no shutdown

description connected to Phone_4 (2222222)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/0

no shutdown

description connected to Phone_5 (3333333)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/1

no shutdown

no description

!

dial-peer voice 1 pots

port 1/0/0

destination-pattern 1111111

!

dial-peer voice 2 pots

port 1/0/1

destination-pattern 2222222

!

dial-peer voice 6 pots

port 1/1/0

destination-pattern 3333333

!

dial-peer voice 3 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 7777777

!

dial-peer voice 4 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 8888888

!

dial-peer voice 5 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 9999999

!

dial-peer voice 8 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 4444444

!

dial-peer voice 9 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 5555555

!

dial-peer voice 10 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.2.1

vad

destination-pattern 6666666

!

! Access Control List 1

!

no access-list 1

access-list 1 permit 192.168.1.0 0.0.0.15

!

! Access Control List 100

!

no access-list 100

access-list 100 permit ip host 200.200.40.1 host 200.200.60.1

!

! Access Control List 101

!

no access-list 101

access-list 101 permit ip host 200.200.40.1 host 200.200.70.1

!

! Access Control List 102

!

no access-list 102

access-list 102 permit udp any eq rip any eq rip

!

! Access Control List 103

!

no access-list 103

access-list 103 deny ip 192.168.1.0 0.0.0.15 any

access-list 103 permit udp any eq rip any eq rip

!

! Access Control List 104

!

no access-list 104

access-list 104 deny ip 192.168.1.0 0.0.0.15 any

access-list 104 permit udp any eq rip any eq rip

!

! Access Control List 105

!

no access-list 105

access-list 105 permit udp host 200.200.40.1 eq 500 host 200.200.40.1

access-list 105 permit ahp host 200.200.40.1 host 200.200.40.1

access-list 105 permit esp host 200.200.40.1 host 200.200.40.1

!

! Access Control List 106

!

no access-list 106

access-list 106 deny ip 192.168.1.0 0.0.0.15 any

access-list 106 permit udp any eq rip any eq rip

!

! Access Control List 107

!

no access-list 107

access-list 107 deny ip 192.168.1.0 0.0.0.15 any

access-list 107 permit udp any eq rip any eq rip

!

! Access Control List 108

!

no access-list 108

access-list 108 deny ip 192.168.1.0 0.0.0.15 any

access-list 108 permit udp any eq rip any eq rip

!

! Dynamic NAT

!

ip nat translation timeout 86400

ip nat translation tcp-timeout 86400

ip nat translation udp-timeout 300

ip nat translation dns-timeout 60

ip nat translation finrst-timeout 60

ip nat inside source list 1 interface Serial 0/0.1 overload

!

router rip

version 2

network 192.168.1.0

passive-interface Serial 0/0.1

no auto-summary

!

!

ip classless

!

! IP Static Routes

ip route 0.0.0.0 0.0.0.0 Serial 0/0.1

no ip http server

snmp-server community public RO

no snmp-server location

no snmp-server contact

!

line console 0

exec-timeout 0 0

password latoya

login

!

line vty 0 4

password latoya

login

!

End

! ******************************************************************

! Boston1.cfg - Cisco router configuration file

! Automatically created by Cisco ConfigMaker v2.6 Build 6

! Sunday, June 03, 2012, 12:00:51 PM

!

! Hostname: Boston1

! Model: 3620

! ******************************************************************

!

service timestamps debug uptime

service timestamps log uptime

service password-encryption

no service tcp-small-servers

no service udp-small-servers

!

hostname Boston1

!

enable secret pledger

!

ip source-route

no ip name-server

!

ip subnet-zero

no ip domain-lookup

ip routing

!

! Context-Based Access Control

!

no ip inspect audit-trail

ip inspect tcp synwait-time 30

ip inspect tcp finwait-time 5

ip inspect tcp idle-time 3600

ip inspect udp idle-time 30

ip inspect dns-timeout 5

ip inspect one-minute low 900

ip inspect one-minute high 1100

ip inspect max-incomplete low 900

ip inspect max-incomplete high 1100

ip inspect tcp max-incomplete host 50 block-time 0

!

! Internet Key Exchange (IKE)

!

crypto isakmp enable

crypto isakmp identity address

!

crypto isakmp policy 1

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

!

crypto isakmp policy 2

encryption des

hash md5

authentication pre-share

group 1

lifetime 86400

crypto isakmp key 2 address 200.200.60.1

crypto isakmp key 4 address 200.200.40.1

!

! IPSec

!

crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac

crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac

crypto map cm-cryptomap local-address Serial 0/0.1

!

crypto map cm-cryptomap 1 ipsec-isakmp

match address 100

set peer 200.200.60.1

set transform-set cm-transformset-1

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

crypto map cm-cryptomap 2 ipsec-isakmp

match address 101

set peer 200.200.40.1

set transform-set cm-transformset-2

set security-association lifetime seconds 3600

set security-association lifetime kilobytes 4608000

!

interface Ethernet 0/0

no shutdown

description connected to Boston_Switch

ip address 192.168.2.1 255.255.255.240

ip nat inside

ip access-group 102 in

keepalive 10

!

interface Serial 0/0

no shutdown

no description

mtu 512

no ip address

encapsulation frame-relay

frame-relay lmi-type cisco

!

interface Serial 0/0.1 point-to-point

no shutdown

description connected to Internet

crypto map cm-cryptomap

ip address 200.200.70.1 255.255.255.240

ip nat outside

no ip route-cache

ip access-group 105 in

frame-relay interface-dlci 18

frame-relay ip rtp header-compression

ip rtp reserve 16384 100 12

traffic-shape rate 9600000 1200000 1200000

!

interface Serial 0/1

no description

no ip address

shutdown

!

voice-port 1/0/0

no shutdown

description connected to Phone_6 (4444444)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/0/1

no shutdown

description connected to Phone_7 (5555555)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/0

no shutdown

description connected to Phone_8 (6666666)

comfort-noise

cptone US

signal loopStart

!

voice-port 1/1/1

no shutdown

no description

!

dial-peer voice 1 pots

port 1/0/0

destination-pattern 4444444

!

dial-peer voice 2 pots

port 1/0/1

destination-pattern 5555555

!

dial-peer voice 9 pots

port 1/1/0

destination-pattern 6666666

!

dial-peer voice 3 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 7777777

!

dial-peer voice 4 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 8888888

!

dial-peer voice 5 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.0.1

vad

destination-pattern 9999999

!

dial-peer voice 6 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 1111111

!

dial-peer voice 7 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 2222222

!

dial-peer voice 8 voip

codec g729r8

ip precedence 5

session target ipv4:192.168.1.1

vad

destination-pattern 3333333

!

! Access Control List 1

!

no access-list 1

access-list 1 permit 192.168.2.0 0.0.0.15

!

! Access Control List 100

!

no access-list 100

access-list 100 permit ip host 200.200.70.1 host 200.200.60.1

!

! Access Control List 101

!

no access-list 101

access-list 101 permit ip host 200.200.70.1 host 200.200.40.1

!

! Access Control List 102

!

no access-list 102

access-list 102 permit udp any eq rip any eq rip

!

! Access Control List 103

!

no access-list 103

access-list 103 deny ip 192.168.2.0 0.0.0.15 any

access-list 103 permit udp any eq rip any eq rip

!

! Access Control List 104

!

no access-list 104

access-list 104 deny ip 192.168.2.0 0.0.0.15 any

access-list 104 permit udp any eq rip any eq rip

!

! Access Control List 105

!

no access-list 105

access-list 105 permit udp host 200.200.70.1 eq 500 host 200.200.70.1

access-list 105 permit ahp host 200.200.70.1 host 200.200.70.1

access-list 105 permit esp host 200.200.70.1 host 200.200.70.1

!

! Access Control List 106

!

no access-list 106

access-list 106 deny ip 192.168.2.0 0.0.0.15 any

access-list 106 permit udp any eq rip any eq rip

!

! Access Control List 107

!

no access-list 107

access-list 107 deny ip 192.168.2.0 0.0.0.15 any

access-list 107 permit udp any eq rip any eq rip

!

! Access Control List 108

!

no access-list 108

access-list 108 deny ip 192.168.2.0 0.0.0.15 any

access-list 108 permit udp any eq rip any eq rip

!

! Dynamic NAT

!

ip nat translation timeout 86400

ip nat translation tcp-timeout 86400

ip nat translation udp-timeout 300

ip nat translation dns-timeout 60

ip nat translation finrst-timeout 60

ip nat inside source list 1 interface Serial 0/0.1 overload

!

router rip

version 2

network 192.168.2.0

passive-interface Serial 0/0.1

no auto-summary

!

!

ip classless

!

! IP Static Routes

ip route 0.0.0.0 0.0.0.0 Serial 0/0.1

no ip http server

snmp-server community public RO

no snmp-server location

no snmp-server contact

!

line console 0

exec-timeout 0 0

password alijah

login

!

line vty 0 4

password alijah

login

!

end