Info

PacketTracer

Onedrive

Apoyo

Calculadora VLSM 2.1- Agregacion de enlace EtherChannel 2.2- Protocolo de configuración dinámica de host DHCP 2.3- Protocolo de redundancia de primer salto FHRP 2.5- Seguridad de Capa 2 2.6- Conceptos de Seguridad de LAN

Notas

NOTA: No lleva IPv6, ni configuracion basica NOTA: Si la Ip es mayor a 256, se divide la ip que se necesita por 256, la parte entera se va al tercer octeto y la decimal se multiplica por 256 y se queda en el cuarto octeto NOTA: En todos los port-channel de los switch, debe ir el switchport mode trunk, las vlan allowed y el nonegotiate

VLSM

172.16.0.0/19

NombreHostsAddressMasMasc decimal
Vlan 30700172.16.0.0/22255.255.252.0
Vlan 20500172.16.4.0/23255.255.254.0
Vlan 40300172.16.6.0/23255.255.254.0
Vlan 10150172.16.8.0/24255.255.255.0

Configuracion

Dispositivos Finales

Server NTP

  • IPv4: 172.16.8.50
  • SubNet: 255.255.255.0
  • Default Gateway: 172.16.8.254
  • DNS: 209.50.0.2

PC Vlan20

  • Ipv4: 172.16.5.194
  • Subnet: 255.255.254.0
  • Default Gateway: 172.16.6.254
  • DNS: 209.50.0.2

PC VLan30

  • Ipv4: 172.16.2.158
  • Subnet: 255.255.252.0
  • Default Gateway: 172.16.3.254
  • DNS: 209.50.0.2

PC Vlan40 (DHCP)

  • Deverian ser sus valores

DNS Extremo

  • Activar DNS
  • IP: 209.50.0.2
  • Subnet: 255.255.255.248
  • Default Gateway: 209.50.0.1
  • DNS: 209.50.0.2

ISP

ntp server 172.16.8.50
!
ip route 0.0.0.0 0.0.0.0 200.200.1.2 
ip route 0.0.0.0 0.0.0.0 200.200.2.2 

MLS1

hostname MLS1
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
interface range fa0/21-22
channel-group 1 mode active
no shut
exit
!
interface Port-channel1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface fa0/24
no switchport
ip address 200.200.1.2 255.255.255.0
no shut
EXIT
!
ip routing
!
INT VLAN 10
ip address 172.16.8.2 255.255.255.0
standby version 2
standby 10 ip 172.16.8.254
standby 10 priority 120
standby 10 preempt
EXIT
!
INT VLAN 20
ip address 172.16.4.2 255.255.254.0
standby version 2
standby 20 ip 172.16.5.254
standby 20 priority 120
standby 20 preempt
EXIT
!
INT VLAN 30
ip address 172.16.0.2 255.255.252.0
standby version 2
standby 30 ip 172.16.3.254
standby 30 priority 90
standby 30 preempt
EXIT
!
INT VLAN 40
ip address 172.16.6.2 255.255.254.0
standby version 2
standby 40 ip 172.16.7.254
standby 40 priority 90
standby 40 preempt
EXIT
!
ip route 0.0.0.0 0.0.0.0 200.200.1.1
!
ntp server 172.16.8.50
!
spanning-tree mode rapid-pvst
spanning-tree vlan 10,20 ROOT PRIMARY
spanning-tree vlan 30,40 ROOT SECONDARY
!

MLS2

hostname MLS2
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
ip dhcp excluded-address 172.16.6.1 172.16.6.9
!
ip dhcp pool VLAN40
network 172.16.6.0 255.255.254.0
default-router 172.16.7.254
dns-server 209.50.0.2
exit
!
interface range fa0/21-22
channel-group 4 mode desirable
no shut
!
interface Port-channel4
switchport trunk encapsulation dot1q
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface FastEthernet0/24
no switchport
ip address 200.200.2.3 255.255.255.0
exit
!
ntp server 172.16.8.50
!
interface Vlan10
ip address 172.16.8.3 255.255.255.0
standby version 2
standby 10 ip 172.16.8.254
standby 10 priority 90
standby 10 preempt
exit
!
interface Vlan20
ip address 172.16.4.3 255.255.254.0
standby version 2
standby 20 ip 172.16.5.254
standby 20 priority 90
standby 20 preempt
exit
!
interface Vlan30
ip address 172.16.0.3 255.255.252.0
standby version 2
standby 30 ip 172.16.3.254
standby 30 priority 120
standby 30 preempt
exit
!
interface Vlan40
ip address 172.16.6.3 255.255.254.0
standby version 2
standby 40 ip 172.16.7.254
standby 40 priority 120
standby 40 preempt
exit
!
ip route 0.0.0.0 0.0.0.0 200.200.2.1 
!
!
ip routing
!
spanning-tree mode rapid-pvst
spanning-tree vlan 10,20 ROOT SECONDARY
spanning-tree vlan 30,40 ROOT PRIMARY
!

SWA

hostname SWA
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
int range fa0/5-9
switchport mode access
switchport access vlan 10
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky 
switchport port-security violation restrict 
ip dhcp snooping limit rate 2
spanning-tree portfast
spanning-tree bpduguard enable
exit
!
int range fa0/15-17
switchport mode access
switchport access vlan 20
switchport port-security
switchport port-security maximum 2
switchport port-security mac-address sticky 
switchport port-security violation restrict 
ip dhcp snooping limit rate 2
spanning-tree portfast
spanning-tree bpduguard enable
exit
!
interface range fa0/1-2
channel-group 2 mode desirable
no shut
exit
!
!
interface range fa0/21-22
channel-group 1 mode on
no shut
exit
!
interface range fa0/23-24
channel-group 4 mode active
no shut
exit
!
interface Port-channel1
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel2
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel4
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
spanning-tree mode rapid-pvst

SWB

hostname SWB
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
ip dhcp snooping
!
int range fa0/10-11
switchport mode access
switchport access vlan 30
switchport port-security
switchport port-security maximum 3
switchport port-security mac-address sticky 
switchport port-security violation protect
ip dhcp snooping limit rate 2
spanning-tree portfast
spanning-tree bpduguard enable
exit
!
int range fa0/8-9
switchport mode access
switchport access vlan 40
switchport port-security
switchport port-security maximum 3
switchport port-security mac-address sticky 
switchport port-security violation protect 
ip dhcp snooping limit rate 2
spanning-tree portfast
spanning-tree bpduguard enable
exit
!
interface range fa0/5-6
channel-group 5 mode desirable
no shut
exit
!
!
interface range fa0/21-22
channel-group 1 mode on
no shut
exit
!
interface range fa0/23-24
channel-group 3 mode active
no shut
exit
!
interface Port-channel1
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel5
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel3
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
spanning-tree mode rapid-pvst

SWC

hostname SWC
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
interface range fa0/3-4
channel-group 6 mode on	
no shut
exit
!
interface range fa0/5-6
channel-group 5 mode auto	
no shut
exit
!
interface range fa0/21-22
channel-group 1 mode passive
no shut
exit
!
interface range fa0/23-24
channel-group 4 mode passive
no shut
exit
!
interface Port-channel1
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel5
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel4
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel6
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
spanning-tree mode rapid-pvst
!

SWD

hostname SWD
!
vlan 10
name SERVIDORES
exit
!
vlan 20
name RRHH
exit
!
vlan 30
name VENTAS
exit
!
vlan 40
name CORPORATIVO
exit
!
interface range fa0/3-4
channel-group 6 mode on
no shut
exit
!
interface range fa0/1-2
channel-group 2 mode auto
no shut	
exit
!
interface range fa0/21-22
channel-group 4 mode AUTO
no shut
exit
!
interface range fa0/23-24
channel-group 3 mode passive
no shut
exit
!
interface Port-channel2
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel3
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel4
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
interface Port-channel6
switchport mode trunk
switchport trunk allowed vlan 10,20,30,40
switchport nonegotiate
no shut
exit
!
spanning-tree mode rapid-pvst
!