# 공통 설정
en
conf t
no ip domain lookup
line c 0
logg syn
exec-timeout 0
exit
ali exec c conf t
ali exec r sh run
ali exec i sh ip route
ali exec b sh ip int b
hostname
# MAC address & VTP
ISP]
en
conf t
int f1/0
shut
mac-add xxxx.xxxx.xxxx
no shut
ip add dhcp
DSW1 - S_SW]
conf t
vtp mode transparent
ASW1 - SSW]
no ip routing
# VLAN & trunk
DSW1 - 2]
vlan 10
exit
vlan 20
exit
vlan 30
exit
vlan 40
exit
vlan 50
exit
ASW1]
vlan 10
exit
vlan 20
exit
ASW2]
vlan 30
exit
vlan 40
exit
S_SW]
vlan 50
exit
R4]
vlan 70
exit
ASW1]
int f1/1
sw mode acc
sw acc vlan 10
exit
int f1/2
sw mode acc
sw acc vlan 20
exit
spanning-tree portfast bpduguard
int f1/1 - 2
spanning-tree portfast
ASW2]
int f1/3
sw mode acc
sw acc vlan 30
exit
int f1/4
sw mode acc
sw acc vlan 40
exit
spanning-tree portfast bpduguard
int range f1/3 - 4
spanning-tree portfast
S_SW]
int range f1/5 - 7
sw mode acc
sw acc vlan 50
spanning-tree portfast
exit
spanning-tree portfast bpduguard
int range f1/14 - 15
sw trunk encap dot1
sw mode trunk
# Trunk & ether channel
DSW1]
do show cdp nei
int f1/9 - 10
sw trunk encap dot1
sw mode trunk
channel-group 5 mode on
exit
int range f1/13 - 14
sw trunk encap dot1
sw mode trunk
channel-group 1 mode on
exit
int range f1/11 - 12
sw trunk encap dot1
sw mode trunk
channel-group 4 mode on
DSW2]
do show cdp nei
int range f1/9 - 10
sw trunk encap dot1
sw mode trunk
channel-group 5 mode on
exit
int range f1/13 - 14
sw trunk encap dot1
sw mode trunk
channel-group 3 mode on
exit
int range f1/11 - 12
sw trunk encap dot1
sw mode trunk
channel-group 2 mode on
ASW1]
do show cdp nei
int range f1/11 - 12
sw trunk encap dot1
sw mode trunk
channel-group 1 mode on
exit
int range f1/13 - 14
sw trunk encap dot1
sw mode trunk
channel-group 3 mode on
ASW2]
do show cdp nei
int range f1/11 - 12
sw trunk encap dot1
sw mode trunk
channel-group 2 mode on
exit
int range f1/13 - 14
sw trunk encap dot1
sw mode trunk
channel-group 4 mode on
# ip address & mapping
ISP]
int f1/0
shut
mac-address ffff.ffff.ffff
no shut
ip add dhcp
exit
int f0/1
no shut
ip add 1.1.100.5 255.255.255.252
exit
int f0/0
no shut
ip add 1.1.100.1 255.255.255.252
CE]
int f1/0
no shut
ip add 1.1.100.2 255.255.255.252
exit
do show frame-relay pvc | include DLCI
int s2/0
no shut
ip add 211.104.54.1 255.255.255.0
encap fram
no fram inver
clock rate 64000
fram map ip 211.104.54.2 102 br
exit
int f0/1
no shut
ip add 192.168.10.139 255.255.255.248
exit
int f0/0
no shut
ip add 192.168.10.131 255.255.255.248
DSW1]
int f0/0
no shut
ip add 192.168.10.132 255.255.255.248
exit
int vlan 10
ip add 192.168.10.29 255.255.255.224
exit
int vlan 20
ip add 192.168.10.61 255.255.255.224
exit
int vlan 30
ip add 192.168.10.93 255.255.255.224
exit
int vlan 40
ip add 192.168.10.125 255.255.255.224
exit
int vlan 50
ip add 192.168.50.251 255.255.255.0
DSW2]
int f0/1
no shut
ip add 192.168.10.140 255.255.255.248
exit
int vlan 10
ip add 192.168.10.30 255.255.255.224
exit
int vlan 20
ip add 192.168.10.62 255.255.255.224
exit
int vlan 30
ip add 192.168.10.94 255.255.255.224
exit
int vlan 40
ip add 192.168.10.126 255.255.255.224
exit
int vlan 50
ip add 192.168.50.252 255.255.255.0
HQ_CE]
do show frame-relay pvc | include DLCI
int s1/0
no shut
ip add 211.104.54.2 255.255.255.0
encap fram
no fram inver
clock rate 64000
fram map ip 211.104.54.1 201 br
exit
int f0/0
no shut
ip add 192.168.60.254 255.255.255.0
R4]
int vlan 70
ip add 2.2.70.254 255.255.255.0
exit
int f1/15
no sw
no shut
ip add 1.1.100.6 255.255.255.252
# ip routing & NAPT
ISP]
ip route 0.0.0.0 0.0.0.0 f1/0 10.0.0.1
ip route 2.2.70.0 255.255.255.0 f0/1 1.1.100.6
ip route 1.1.200.0 255.255.255.0 f0/0 1.1.100.2 =>nat ip routing
ip access-list standard BIBI
permit host 1.1.100.2
permit 2.2.70.0 0.0.0.255
permit 1.1.200.0 0.0.0.255
exit
ip nat inside source list BIBI int f1/0 overload
int f0/0
ip nat in
exit
int f0/1
ip nat in
exit
int f1/0
ip nat out
exit
CE]
ip access-list standard BIBI
permit 192.168.10.0 0.0.0.255
permit 192.168.60.0 0.0.0.255
exit
ip nat inside source list BIBI int f1/0 overload
int f0/0
ip nat in
exit
int f0/1
ip nat in
exit
int s2/0
ip nat in
exit
int f1/0
ip nat out
exit
ip nat inside source static 192.168.50.101 1.1.200.1
ip nat inside source static 192.168.50.102 1.1.200.2
ip route 0.0.0.0 0.0.0.0 f1/0 1.1.100.1
ip route 192.168.60.0 255.255.255.0 s2/0 211.104.54.2
HQ_CE]
ip route 0.0.0.0 0.0.0.0 s1/0 211.104.54.1
R4]
ip route 0.0.0.0 0.0.0.0 f1/15 1.1.100.5
#OSPF 17
CE]
router ospf 17
router-id 17.17.4.4
net 192.168.10.131 0.0.0.0 a 0
net 192.168.10.139 0.0.0.0 a 0
route-map S2_ONLY
match interface serial 2/0
exit
router ospf 17
redistribute connected route-map S2_ONLY subnets => S2/0만 재분배
default-information originate
DSW1]
router ospf 17
router-id 17.17.2.2
net 192.168.10.132 0.0.0.0 a 0
net 192.168.10.29 0.0.0.0 a 0
net 192.168.10.61 0.0.0.0 a 0
net 192.168.10.93 0.0.0.0 a 0
net 192.168.10.125 0.0.0.0 a 0
net 192.168.50.251 0.0.0.0 a 0
DSW2]
router ospf 17
router-id 17.17.3.3
net 192.168.10.140 0.0.0.0 a 0
net 192.168.10.30 0.0.0.0 a 0
net 192.168.10.62 0.0.0.0 a 0
net 192.168.10.94 0.0.0.0 a 0
net 192.168.10.126 0.0.0.0 a 0
net 192.168.50.252 0.0.0.0 a 0
# MHSRP
DSW1]
int vlan 10
standby 10 ip 192.168.10.28
standby 10 priority 110
standby 10 preempt delay minimum 5
standby 10 track f0/0 30
exit
int vlan 20
standby 20 ip 192.168.10.68
standby 20 priority 110
standby 20 preempt delay minimum 5
standby 20 track f0/0 30
exit
int vlan 50
standby 50 ip 192.168.50.100
standby 50 priority 110
standby 50 preempt delay minimum 5
standby 50 track f0/0 30
exit
int vlan 30
standby 30 ip 192.168.10.92
standby 30 preempt
exit
int vlan 40
standby 40 ip 192.168.10.124
standby 40 preempt
DSW2]
int vlan 10
standby 10 ip 192.168.10.28
standby 10 preempt
exit
int vlan 20
standby 20 ip 192.168.10.68
standby 20 preempt
exit
int vlan 50
standby 50 ip 192.168.50.100
standby 50 preempt
exit
int vlan 30
standby 30 ip 192.168.10.92
standby 30 priority 110
standby 30 preempt delay mini 5
standby 30 track f0/1 30
exit
int vlan 40
standby 40 ip 192.168.10.124
standby 40 priority 110
standby 40 preempt delay mini 5
standby 40 track f0/1 30
댓글남기기