Information related to the VOICE and DATA Vlans are in green text. These two Vlans are for my voice lab from
CBT Nuggets (first lab). The other Vlans are for my home network and except for Internet access, they do not
enter mix.
SWITCH B
Cisco 3550-24-PWR IOS 12.2.44.SE6
Current configuration : 8584 bytes
!
! Last configuration change at 21:01:39 Eastern Wed Nov 7 2012 by mdurham
! NVRAM config last updated at 13:15:03 Eastern Wed Nov 7 2012 by mdurham
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Office_Switch
!
enable secret 5
!
username mdurham privilege 15 password 7
aaa new-model
!
aaa session-id common
clock timezone Eastern -5
clock summer-time est recurring
ip subnet-zero
ip routing
no ip domain-lookup
ip domain-name mtd.home
!
shutdown vlan 999
!
password encryption aes
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
description RED - Phone
switchport access vlan 30 (and vlan 20 for testing)
switchport mode access
switchport nonegotiate
switchport voice vlan 20
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/2
description YELLOW - Phone
switchport access vlan 30
switchport mode access
switchport nonegotiate
switchport voice vlan 20
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/3
description GREEN - Phone
switchport access vlan 30
switchport mode access
switchport nonegotiate
switchport voice vlan 20
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/4
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/5
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/18
description Access Point - North_AP 192.168.100.11000
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 69,100,200
switchport mode trunk
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/19
description Internet - accessed via Gateway-PC workstation using ICS
192.168.10.2
switchport access vlan 1000
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/20
description Printer - Dell 3000N Color laser 192.168.69.99
switchport access vlan 69
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/21
description Switch - Server_Switch 192.168.100.101 port fa0/1, Access
Point - South_AP 192.168.100.105 port Ethernet 0, Servers
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 1,20,30,50,69,100,125,200
switchport mode trunk
spanning-tree portfast
!
interface FastEthernet0/22
description Workstation - Dell FX160 192.168.69.160
switchport access vlan 69
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/23
description Router - CME 172.16.1.1 (Call Manager Express) port Gi0/01
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 20,100
switchport mode trunk
spanning-tree portfast
shutdown
!
interface FastEthernet0/24
description Workstation - Sixcore 192.168.69.150
switchport access vlan 69
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface GigabitEthernet0/1
switchport access vlan 999
switchport mode access
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface GigabitEthernet0/2
switchport access vlan 999
switchport mode access
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface Vlan1
description - Not used
no ip address
no ip route-cache cef
no ip route-cache
shutdown
! (do I really need these interfaces here for vlan 20 & 30 to work?)
interface Vlan20
ip address 172.16.1.254 255.255.255.0
ip helper-address 172.16.2.5
(I know this should not be here, had to try it)
!
interface Vlan30
ip address 172.16.2.254 255.255.255.0
!
interface Vlan69
ip address 192.168.69.2 255.255.255.0
ip helper-address 192.168.69.1
no ip route-cache cef
no ip route-cache
!
interface Vlan100
description - Management Vlan
ip address 192.168.100.102 255.255.255.0
no ip route-cache cef
no ip route-cache
!
interface Vlan200
ip address 192.168.200.2 255.255.255.0
ip helper-address 192.168.200.1
no ip route-cache cef
no ip route-cache
!
interface Vlan1000
description - Internet_Access Vlan
ip address 192.168.10.1 255.255.255.252
no ip route-cache cef
no ip route-cache
!
!
router eigrp 1577
no auto-summary
network 192.168.10.0 0.0.0.3
network 192.168.69.0
network 192.168.100.0
network 192.168.200.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.10.2
(Internet connection)
ip http server
!
!
!
control-plane
!
banner login ^CCCC
** W A R N I N G **
Unauthorized access prohibited. All access is
monitored, and trespassers shall be prosecuted
to the fullest extent of the law.
^C
!
line con 0
exec-timeout 0 0
password 7 13201307080D1023242A6C62
logging synchronous
line vty 0 4
exec-timeout 0 0
privilege level 15
password 7 13201307080D1023242A6C62
logging synchronous
line vty 5 15
exec-timeout 0 0
privilege level 15
password 7 047E0F130C20584706174146
!
ntp clock-period 17180188
ntp server 192.168.100.101
end
SWITCH A
Cisco 3550-24-PWR IOS 12.2.44.SE6
Current configuration : 9755 bytes
!
! Last configuration change at 20:00:37 Eastern Wed Nov 7 2012 by mdurham
! NVRAM config last updated at 13:15:11 Eastern Wed Nov 7 2012 by mdurham
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Server_Switch
!
enable secret 5
!
username mdurham privilege 15 password 7
aaa new-model
!
aaa session-id common
clock timezone Eastern -5
clock summer-time est recurring
mls qos map cos-dscp 0 8 16 24 32 46 48 56
mls qos min-reserve 5 170
mls qos min-reserve 6 85
mls qos min-reserve 7 51
mls qos min-reserve 8 34
mls qos
ip subnet-zero
ip routing
no ip domain-lookup
ip domain-name mtd.home
ip dhcp excluded-address 192.168.69.1 192.168.69.240
ip dhcp excluded-address 192.168.200.1 192.168.200.240
!
ip dhcp pool AirPark-WiFi
network 192.168.200.0 255.255.255.0
default-router 192.168.200.1
option 150 ip 192.168.200.1
domain-name mtd.home
dns-server 192.168.42.1
lease 0 12
!
ip dhcp pool Users
network 192.168.69.0 255.255.255.0
default-router 192.168.69.1
domain-name mtd.home
dns-server 192.168.42.1
option 150 ip 192.168.69.1
lease 0 12
!
shutdown vlan 999
!
password encryption aes
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
description BLUE - Switch - Office_Switch 192.168.100.102 port fa0/21
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 1,20,30,50,69,100,125,200
switchport mode trunk
spanning-tree portfast
!
interface FastEthernet0/2
description GRAY - Access Point - South_AP 192.168.100.105 port Ethernet
0
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 1,69,100,1002-1005
switchport mode trunk
spanning-tree portfast
!
interface FastEthernet0/3
description YELLOW - Not used
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/4
description ORANGE - Direct TV 192.168.125.2
switchport access vlan 125
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/5
description RED - Not used
switchport access vlan 69
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/6
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/7
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/8
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/9
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/10
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/11
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/12
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/13
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/14
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/15
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/16
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/17
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/18
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface FastEthernet0/19
description Router - 172.16.2.5 Voice/Data DHCP C2620 port Fa0/0
switchport access vlan 30
switchport mode access
spanning-tree portfast
!
interface FastEthernet0/20
description Router - 172.16.2.1 CME/TFTP/RoaS C2851 port Gi0/1
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport trunk allowed vlan 20,30,100
switchport mode trunk
spanning-tree portfast
!
interface FastEthernet0/21
description Server - G4 port 0
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/22
description Server - G4 port 1
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/23
description Server - G5 port 0
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface FastEthernet0/24
description Server - G5 port 1
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
spanning-tree portfast
!
interface GigabitEthernet0/1
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface GigabitEthernet0/2
switchport access vlan 999
switchport mode access
switchport nonegotiate
switchport port-security violation protect
switchport port-security mac-address sticky
shutdown
spanning-tree portfast
!
interface Vlan1
description - Not used
no ip address
no ip route-cache cef
no ip route-cache
shutdown
! (do I really need these interfaces here for vlan 20 & 30 to work?)
interface Vlan20
description - Phone Vlan
no ip address
ip helper-address 172.16.2.5
(I know this should not be here, had to try it)
no ip route-cache cef
no ip route-cache
!
interface Vlan30
no ip address
!
interface Vlan50
description - Server Vlan
ip address 192.168.50.14 255.255.255.240
ip helper-address 192.168.50.1
no ip route-cache cef
no ip route-cache
shutdown
!
interface Vlan69
description - User Vlan
ip address 192.168.69.1 255.255.255.0
ip helper-address 192.168.69.1
no ip route-cache cef
no ip route-cache
!
interface Vlan100
description - Management Vlan
ip address 192.168.100.101 255.255.255.0
no ip route-cache cef
no ip route-cache
ntp broadcast client
!
interface Vlan125
description - Media Vlan
no ip address
ip helper-address 192.168.200.1
no ip route-cache cef
no ip route-cache
shutdown
!
interface Vlan200
description - Guests Vlan
ip address 192.168.200.1 255.255.255.0
ip access-group 100 in
ip helper-address 192.168.200.1
no ip route-cache cef
no ip route-cache
!
interface Vlan999
description - Unused_Ports Vlan
no ip address
no ip route-cache cef
no ip route-cache
shutdown
!
interface Vlan1000
description - Internet_Access Vlan
no ip address
no ip route-cache cef
no ip route-cache
shutdown
!
router eigrp 1577
network 192.168.69.0
network 192.168.100.0
network 192.168.200.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.10.1
ip http server
!
access-list 100 permit ip any 192.168.42.0 0.0.0.255
access-list 100 permit ip any host 192.168.69.99
access-list 100 permit ip any 192.168.125.0 0.0.0.7
access-list 100 deny
ip any 192.168.0.0 0.0.255.255
access-list 100 permit ip any any
!
control-plane
!
banner login ^CCCC
** W A R N I N G **
Unauthorized access prohibited. All access is
monitored, and trespassers shall be prosecuted
to the fullest extent of the law.
^C
!
line con 0
exec-timeout 0 0
password 7 13201307080D1023242A6C62
logging synchronous
line vty 0 4
exec-timeout 0 0
privilege level 15
password 7 13201307080D1023242A6C62
logging synchronous
line vty 5 15
exec-timeout 0 0
privilege level 15
password 7 047E0F130C20584706174146
!
ntp clock-period 17180273
ntp server 64.90.182.55
ntp server 96.47.67.105
ntp server 72.14.177.132
end
CME/TFTP/RoaS Router
Cisco 2851 IOS 15.1(4)
Current configuration : 1519 bytes
!
! Last configuration change at 19:38:04 Eastern Wed Nov 7 2012
version 15.1
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname CME_Router
!
boot-start-marker
boot-end-marker
!
enable secret 5
!
no aaa new-model
!
clock timezone Eastern -5 0
clock summer-time DST recurring
!
crypto pki token default removal timeout 0
!
dot11 syslog
ip source-route
!
ip cef
!
no ipv6 cef
!
multilink bundle-name authenticated
!
voice-card 0
!
license udi pid CISCO2851 sn FTX1220A0LZ
!
redundancy
!
interface GigabitEthernet0/0
ip address 192.168.100.111 255.255.255.0
duplex auto
speed auto
shutdown
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.20
encapsulation dot1Q 20
ip address 172.16.1.1 255.255.255.0
ip helper-address 172.16.2.5
!
interface GigabitEthernet0/1.30
encapsulation dot1Q 30
ip address 172.16.2.1 255.255.255.0
ip helper-address 172.16.2.5
!
interface GigabitEthernet0/1.100
encapsulation dot1Q 100 native
ip address 192.168.100.111 255.255.255.0
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
control-plane
!
mgcp profile default
!
line con 0
exec-timeout 0 0
logging synchronous
line aux 0
line vty 0 4
exec-timeout 0 0
password Education$1
login
transport input all
!
scheduler allocate 20000 1000
ntp server 192.168.100.101
end
DHCP Router
Cisco 2620 IOS 12.2(29)
Current configuration : 1192 bytes
!
! Last configuration change at 20:05:41 Eastern Wed Nov 7 2012
! NVRAM config last updated at 14:16:37 Eastern Wed Nov 7 2012
!
version 12.2
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname RoaS
!
enable secret 5
!
clock timezone Eastern -5
clock summer-time DST date Mar 4 2012 2:00 Nov 3 2012 2:00
ip subnet-zero
!
ip dhcp excluded-address 172.16.2.1 172.16.2.10
ip dhcp excluded-address 172.16.1.1 172.16.1.10
!
ip dhcp pool Phones
network 172.16.1.0 255.255.255.0
default-router 172.16.1.1
option 150 ip 172.16.1.1
dns-server 4.2.2.2
!
ip dhcp pool Data
network 172.16.2.0 255.255.255.0
option 150 ip 172.16.1.1
default-router 172.16.2.1
dns-server 4.2.2.2
!
ip dhcp-server 4.2.2.2
ip dhcp-server 8.8.8.8
!
interface FastEthernet0/0
description Switch - Connects to switch 3550-24-PWR port fa0/19
ip address 172.16.2.5 255.255.255.0
duplex auto
speed auto
!
ip classless
ip http server
!
line con 0
line aux 0
line vty 0 4
exec-timeout 0 0
password 7 15370F19072B3F2D273D7173
logging synchronous
login
!
ntp clock-period 17179664
ntp server 192.168.100.101
end