Basic config
hostname (device)
enable secret skills39 (after)
ip domain-name l o m b a dot l k s
username admin privilege 15 secret skills39

L2
SW1
enable
configure terminal
in range f0 slash 23-24
channel-group 1 mode active
SW2
enable
configure terminal
in range f0 slash 23-24
channel-group 1 mode passive
SW1 trunk config
in port-channel 1
switchport mode trunk
in f0 slash 4
switchport mode trunk
in f0 slash 22
switchport mode trunk
SW2 trunk config
in port-channel 1
switchport mode trunk
in f0 slash 4
switchport mode trunk
in f0 slash 21
switchport mode trunk
SW 3 trunk config
in range f0 slash 21-22 switchport mode trunk
SW 3 VTP config
vtp version 2
vtp mode server
vtp domain l o m b a l k s dot i d vtp password skills40
SW3 vlan
vlan 10
name HQ10
vlan 20
name HQ20
in f0 slash 1
switchport mode access switchport access vlan 10
in f0 slash 2
switchport mode access switchport access vlan 20

SW3 B P D U & portfast config
in f0 slash 2
spanning-tree b p d u guard enable spanning-tree portfast
SW 1 & 2 vtp config
vtp version 2
vtp mode client
vtp domain l o m b a l k s dot i d vtp password skills39

SW1 STP config
spanning-tree vlan 10 root primary
spanning-tree vlan 20 root secondary

SW2 STP config
spanning-tree vlan 20 root primary
spanning-tree vlan 10 root secondary

ISP
router ospf 5
in range g0 slash 0-2
ip ospf 5 area 0
in s 0 slash 0 slash 0
ip ospf 5 area 0
in s 0 slash 0 slash 1
ip ospf 5 area 0

R4
router ospf 5
network 2 1 0 dot 1 0 3 dot 5 dot 8 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
network 2 1 0 dot 1 0 3 dot 7 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 255 area 0
passive-interface g0 slash 1

R3
router ospf 5
network 1 9 2 dot 1 6 8 dot 1 0 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 255 area 0
network 1 9 2 dot 1 6 8 dot 2 0 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 255 area 0
network 2 1 0 dot 1 0 3 dot 5 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
network 2 1 0 dot 1 0 3 dot 6 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
passive-interface g0 slash 1

R2
router ospf 5
network 1 9 2 dot 1 6 8 dot 1 0 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 2 5 5 area 0
network 1 9 2 dot 1 6 8 dot 2 0 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 2 5 5 area 0
network 2 1 0 dot 1 0 3 dot 5 dot 4 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
network 2 1 0 dot 1 0 3 dot 6 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
passive-interface g0 slash 1

R1
router ospf 5
network 2 1 0 dot 1 0 3 dot 5 dot 1 2 ((⏱️=100)) 0 dot 0 dot 0 dot 3 area 0
network 1 7 2 dot 1 6 dot 1 0 dot 0 ((⏱️=100)) 0 dot 0 dot 0 dot 255 area 0
passive-interface g0 slash 1

HSRP
R3
in g0 slash 1 dot 10
standby 104 ip 1 9 2 dot 1 6 8 dot 1 0 dot 2 5 4
standby 104 priority 255
standby 104 preempt

R2
in g0 slash 1 dot 10
standby 10 4 ip 1 9 2 dot 1 6 8 dot 1 0 dot 2 5 4

R3
in g0 slash 1 dot 20
standby version 2
standby 20 ip 1 9 2 dot 1 6 8 dot 2 0 dot 2 5 4
standby 20 priority 2 5 5
standby 20 preempt

R2
in g0 slash 1 dot 20 standby version 2
standby 20 ip 192 dot 168 dot 20 dot 254

DHCP
R3
ip dhcp excluded-address 192 dot 168 dot 20 dot 1 192 dot 168 dot 20 dot 10
ip dhcp pool VLAN20
network 192 dot 168 dot 20 dot 0 255 dot 255 dot 255 dot 0
default-router 192 dot 168 dot 20 dot 254


R1
ip dhcp excluded-address 172 dot 16 dot 10 dot 1 172 dot 16 dot 10 dot 10
ip dhcp pool BR-CLI
network 172 dot 16 dot 10 dot 0 255 dot 255 dot 255 dot 0
default-router 172 dot 16 dot 10 dot 254

PAT
R3
in g0 slash 1 dot 10
ip nat inside
in g0 slash 1 dot 20
ip nat inside
in s 0 slash 0 slash 0
ip nat outside
ip access-list standard INTERNET
permit 192 dot 168 dot 10 dot 0 0 dot 0 dot 0 dot 255
permit 192 dot 168 dot 20 dot 0 0 dot 0 dot 0 dot 255
ip nat inside source list INTERNET interface s 0 slash 0 slash 0 overload

R2
in g0 slash 1 dot 10
ip nat inside
in g0 slash 1 dot 20
ip nat inside
in s 0 slash 0 slash 1
ip nat outside
ip access-list standard INTERNET
permit 192 dot 168 dot 10 dot 0 0 dot 0 dot 0 dot 255
permit 192 dot 168 dot 20 dot 0 0 dot 0 dot 0 dot 255
ip nat inside source list INTERNET interface s 0 slash 0 slash 1 overload

R1
in g0 slash 0
ip nat outside
in g0 slash 1
ip nat inside
exit
ip access-list standar INTERNET
permit 172 dot 16 dot 10 dot 0 0 dot 0 dot 0 dot 255
ip nat inside source list INTERNET interface g0 slash 0 overload

FW1
object network NETWORK-INTERNAL subnet 172 dot 16 dot 20 dot 0 255 dot 255 dot 255 dot 0
nat (INSIDE,OUTSIDE) dynamic interface
access-list INTERNET extended permit icmp any any access-group INTERNET in interface OUTSIDE
R3
ip nat inside source static udp 192 dot 168 dot 10 dot 1 123 210 dot 103 dot 5 dot 1 123
ALL
configure terminal
crypto key generate rsa
1024
ip ssh version 2
line vty 0 4
transport input ssh
login local
exit
FW1
in g1 slash 1
security-level 0 in g1 slash 2
security-level 100 do sh run