examen de entrada ccna4 - solucion
TRANSCRIPT
SOLUCIÓN EJERCICIO DE ENTRADA CCNA4
VLAN 10PORTS 2 - 10
VLAN 10PORTS 3 - 10
SW1Fa 0/1
SW2Fa 0/1
SW4Fa 0/1
SW4Fa 0/2
SW4Fa 0/3
SW2Fa 0/2
SW3Fa 0/1Trunk
TrunkTrunk
SISTEMAS ADMINISTRACION SISTEMAS ADMINISTRACION LOGISTICA SISTEMAS ADMINISTRACION
VLAN 20PORTS 11 -20
VLAN 20PORTS 11 -20
VLAN 10PORTS 2 - 10
VLAN 20PORTS 11 -20
VLAN 30PORTS 21 - 24
Fa0/010.120.130.1
Trunk
R1R2Fa0/0
S0/0:DCE.1 S0/0
.2
10.1.1.0/30
VLAN 40PORTS 24 -28
SERVERS
20.1.1.0/30S0/1:DCE
.1ASBR1
S0/0.2
R3
ASBR2
100Base T172.16.16.0/24Fa 0/0
.1
Fa 0/0.2
Fa 0/0.3
R4
LAN 15 USERS
Fa0/1LAN 3
11 USERS
Fa 0/0.4
LAN 412 USERS
Fa 0/1
Internet0.0.0.0/0PSI
S0/0:DCE.1
IP Publicas200.1.1.0/25
AS OSPFAREA 0
oBACKBONE
RIP versión 2
LAN 266 USERS
Fa 0/1
Fa0/1LAN 5
172.16.16.0/25
Caso de Estudio del Módulo III del CCNA
Lo 0: 1.1.64.1/25Lo 1: 1.1.70.1/26Lo 2: 1.1.75.1/27Lo 3: 1.1.80.1/29
VTP SERVER
VTP CLIENTVTP CLIENT VTP CLIENT
VLAN 10PORTS 2 - 10
VLAN 10PORTS 3 - 10
SW1Fa 0/1
SW2Fa 0/1
SW4Fa 0/1
SW4Fa 0/2
SW4Fa 0/3
SW2Fa 0/2
SW3Fa 0/1Trunk
TrunkTrunk
SISTEMAS ADMINISTRACION SISTEMAS ADMINISTRACION LOGISTICA SISTEMAS ADMINISTRACION
VLAN 20PORTS 11 -20
VLAN 20PORTS 11 -20
VLAN 10PORTS 2 - 10
VLAN 20PORTS 11 -20
VLAN 30PORTS 21 - 24
Fa0/010.120.130.1
Trunk
R1R2Fa0/0
S0/0:DCE.1 S0/0
.2
10.1.1.0/30
VLAN 40PORTS 24 -28
SERVERS
20.1.1.0/30S0/1:DCE
.1ASBR1
S0/0.2
R3
ASBR2
100Base T172.16.16.0/24Fa 0/0
.1
Fa 0/0.2
Fa 0/0.3
R4
LAN 15 USERS
Fa0/1LAN 3
11 USERS
Fa 0/0.4
LAN 412 USERS
Fa 0/1
Internet0.0.0.0/0PSI
S0/0:DCE.1
IP Publicas200.1.1.0/25
AS OSPFAREA 0
oBACKBONE
RIP versión 2
LAN 266 USERS
Fa 0/1
Fa0/1LAN 5
172.16.16.0/25
Caso de Estudio del Módulo III del CCNA
Lo 0: 1.1.64.1/25Lo 1: 1.1.70.1/26Lo 2: 1.1.75.1/27Lo 3: 1.1.80.1/29
VTP SERVER
VTP CLIENTVTP CLIENT VTP CLIENT
PAUTAS:
El Sistema Autónomo RIP v 2 necesita salir a Internet a través del Sistema Autónomo OSPF área 0 y debe configurar adecuadamente para cumplir dicho objetivo.
Si se sabe que VLAN 10 : 192.168.10.0/24 VLAN 20 : 192.168.20.0/24 VLAN 30: 192.168.30.0/24 VLAN 40: 192.168.40.64/28
Configurar las VLAN y los troncales respectivos según se muestra en la figura.
En cada LAN se necesita IP PUBLICAS tal como se indica en la figura y Ud. debe hallar y asignar de manera optima a partir de 200.10.10.128/25.
Sumariar en los casos que sea necesario.
OBJETIVO 1: El Sistema Autónomo RIP v 2 necesita salir a Internet a través del Sistema Autónomo OSPF área 0 y debe configurar adecuadamente para cumplir dicho objetivo.
Para cumplir con este objetivo es necesario configurar los routers ASBR1 y ASBR2 correctamente.
El router ASBR1 forma parte de dos sistemas autónomos por lo que es necesario el uso de la opción de redistribución entre SAs.Considere usar la opción de métrica transparente; para ello se usa la siguiente codificación:
ASBR1router ospf 10 log-adjacency-changes redistribute rip subnets network 172.16.16.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 10 metric transparent network 20.0.0.0
Así mismo con el objetivo de que la red con SA RIP v2 pueda salir a Internet se debe configurar el router ASBR2 como Gateway de último recurso.
Para ello se usa el comando de configuración de router default-information originate el mismo que genera una ruta por defecto a RIP desde OSPF.
También debe usar la ruta por defecto 0.0.0.0 0.0.0.0 para poder enviar paquetes a redes que no se encuentren listadas en las tablas de enrutamiento hacia el SA RIP.
ASBR2router ospf 10 log-adjacency-changes network 172.16.16.0 0.0.0.255 area 0 network 200.1.1.0 0.0.0.127 area 0 default-information originate!ip classlessip route 0.0.0.0 0.0.0.0 200.1.1.2no ip http server
OBJETIVO 2:Configurar las VLAN y los troncales respectivos según se muestra en la figura.
Lo mas significante de este objetivo es la configuración en el R1 y en el SW4. En el R1 se dede configurar a nivel de sub-interfases para que las VLANs puedan comunicarse entre si y en el SW4 al ser el considerado con el VTP Server del dominio se definieron todas las VLANs a usar.
Un paso importante dentro de la configuración de las VLANs son los enlaces troncales, los mismos que permiten establecer puntos de conexión directa entre Switches y routers que forman parte de la VLAN.
R1interface FastEthernet0/0 no ip address speed auto!interface FastEthernet0/0.1 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0!
interface FastEthernet0/0.2 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0!interface FastEthernet0/0.3 encapsulation dot1Q 30 ip address 192.168.30.1 255.255.255.0!interface FastEthernet0/0.4 encapsulation dot1Q 40 ip address 192.168.40.1 255.255.255.0!interface FastEthernet0/0.5 encapsulation dot1Q 1 native ip address 192.168.1.5 255.255.255.0!router rip version 2 network 10.0.0.0 network 20.0.0.0 network 192.168.1.0 network 192.168.10.0 network 192.168.20.0 network 192.168.30.0 network 192.168.40.0
OBJETIVO 3:En cada LAN se necesita IP PUBLICAS tal como se indica en la figura y Ud. debe hallar y asignar de manera optima a partir de 200.10.10.128/25.
De acuerdo a la información proporcionada y en base al requerimiento se obtienen las siguientes redes, usando VLSM
Sub Red 200.10.10.128/25Rango de IP: 200.10.10.128 – 200.10.10.255 = 127 HostRequerimiento:
LAN 1: 5 host LAN 2: 66 host LAN 3: 11 host LAN 4: 12 host Total = 94 host < 128 disponibles
División de la subred 200.10.10.128/25 en dos subredes de 64 host cada uno 200.10.10.128/26 Asignado a la LAN 2 200.10.10.192/26 Se sigue subdividiendo
Puesto que la LAN 2 requiere de 66 host y de acuerdo a esta subdivisión solo obtendríamos 64 host haremos uso de otra subred menor para completar los 66 hosts necesarios y luego se sumarizan las redes.
Nuestro siguiente requerimiento es de 12 host el cual se obtiene con 4 bits por lo que las subredes serian:
200.10.10.192/28 Asignado a LAN 3 200.10.10.208/28 Asignado a LAN 4 200.10.10.224/28 A partir de aquí se sigue subdividiendo
Ahora se presenta el requerimiento de 5 host como máximo, por lo que usaremos solo 3 bits para ello 200.10.10.224/29 Asignado a LAN 2 200.10.10.232/29 Asignado a LAN 1
200.10.10.240/29 A partir de aquí se puede seguir subdividiendo para los enlaces punto a punto por ejemplo con mascara de /30 que no es nuestro caso
Cuadro resumen:
Red Rango IP Mascara Host requeridosLAN 1 200.10.10.232 – 200.10.10.239 /29 255.255.255.248 5
LAN 2200.10.10.128 – 200.10.10.191200.10.10.224 – 200.10.10.231
/26 255.255.255.192/29 255.255.255.248
642
LAN 3 200.10.10.192 – 200.10.10.207 /28 255.255.255.240 11LAN 4 200.10.10.208 – 200.10.10.223 /28 255.255.225.240 12
CODIFICACIÓN DE DISPOSITIVOS:Por efectos prácticos, los equipos consignados como SW3 y R4 no se listan.Así mismo no se listan los procesos de creación de las VLAN en los respectivos Switches.
******************** ROUTER R1 ********************
Current configuration : 1477 bytes!! Last configuration change at 13:47:14 UTC Mon May 16 2005! NVRAM config last updated at 13:51:09 UTC Mon May 16 2005!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R1!boot-start-markerboot-end-marker!enable secret 5 $1$tbXr$fGB4aQSaTZmmsQ0E5T7RW1!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ip domain lookupno ftp-server write-enable!!!!interface FastEthernet0/0 no ip address speed auto!interface FastEthernet0/0.1 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0!interface FastEthernet0/0.2 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0!interface FastEthernet0/0.3 encapsulation dot1Q 30 ip address 192.168.30.1 255.255.255.0!interface FastEthernet0/0.4 encapsulation dot1Q 40 ip address 192.168.40.1 255.255.255.0!interface FastEthernet0/0.5 encapsulation dot1Q 1 native ip address 192.168.1.5 255.255.255.0!interface Serial0/0 ip address 10.1.1.2 255.255.255.252!interface Serial0/1 ip address 20.1.1.1 255.255.255.252 clockrate 56000!
router rip version 2 network 10.0.0.0 network 20.0.0.0 network 192.168.1.0 network 192.168.10.0 network 192.168.20.0 network 192.168.30.0 network 192.168.40.0!ip classlessno ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
******************** ROUTER R2 ********************
Current configuration : 1041 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R2!boot-start-markerboot-end-marker!enable secret 5 $1$TEy8$h6tdfpBN48BBXzVnax/TJ.!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ip domain lookupno ftp-server write-enable!!!!interface Loopback0 ip address 1.1.64.1 255.255.255.128!interface Loopback1 ip address 1.1.70.1 255.255.255.192!interface Loopback2 ip address 1.1.75.1 255.255.255.224!interface Loopback3 ip address 1.1.80.1 255.255.255.248!interface FastEthernet0/0 no ip address
shutdown speed auto!interface Serial0/0 ip address 10.1.1.1 255.255.255.252 no fair-queue clockrate 56000!interface Serial0/1 no ip address shutdown!router rip version 2 network 1.0.0.0 network 10.0.0.0 no auto-summary!ip classlessno ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
********************* ROUTER ASBR1 *********************
Current configuration : 1035 bytes!! Last configuration change at 12:34:12 UTC Wed Jun 1 2005! NVRAM config last updated at 12:34:21 UTC Wed Jun 1 2005!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname ASBR1!boot-start-markerboot-end-marker!enable secret 5 $1$x3RW$jXlzUcGALDNdvY7PSRsac0!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ftp-server write-enable!!!!interface FastEthernet0/0 ip address 172.16.16.1 255.255.255.0 ip ospf priority 5 speed auto
!interface Serial0/0 ip address 20.1.1.2 255.255.255.252 no fair-queue!interface Serial0/1 no ip address shutdown!router ospf 10 log-adjacency-changes redistribute rip subnets network 172.16.16.0 0.0.0.255 area 0!router rip version 2 redistribute ospf 10 metric transparent network 20.0.0.0!ip classlessno ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
********************* ROUTER ASBR2 *********************
Current configuration : 934 bytes!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname ASBR2!boot-start-markerboot-end-marker!enable secret 5 $1$8sqK$qc.PtJxbCURkEoKtJWalH/enable password cisco!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ftp-server write-enable!!!!interface FastEthernet0/0 ip address 172.16.16.3 255.255.255.0 ip ospf priority 50 speed auto
!interface Serial0/0 ip address 200.1.1.1 255.255.255.128 clockrate 56000!interface Serial0/1 no ip address shutdown!router ospf 10 log-adjacency-changes network 172.16.16.0 0.0.0.255 area 0 network 200.1.1.0 0.0.0.127 area 0 default-information originate!ip classlessip route 0.0.0.0 0.0.0.0 200.1.1.2no ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
********************* ROUTER R3 *********************
Current configuration : 871 bytes!! Last configuration change at 04:27:53 UTC Fri Jun 3 2005! NVRAM config last updated at 04:27:59 UTC Fri Jun 3 2005!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname R3!boot-start-markerboot-end-marker!enable password cisco!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ftp-server write-enable!!!!interface FastEthernet0/0
ip address 172.16.16.2 255.255.255.0 ip ospf priority 0 speed auto!interface Serial0/0 no ip address shutdown!interface Serial0/1 no ip address shutdown!router ospf 10 log-adjacency-changes network 172.16.16.0 0.0.0.255 area 0!ip classlessno ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
********************* ROUTER PSI *********************
Current configuration : 802 bytes!! Last configuration change at 21:58:33 UTC Fri Jul 1 2005! NVRAM config last updated at 21:58:39 UTC Fri Jul 1 2005!version 12.3service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname PSI!boot-start-markerboot-end-marker!!mmi polling-interval 60no mmi auto-configureno mmi pvcmmi snmp-timeout 180no aaa new-modelip subnet-zeroip cef!!!no ftp-server write-enable!!!!interface FastEthernet0/0 no ip address shutdown speed auto!interface Serial0/0
ip address 200.1.1.2 255.255.255.128 no fair-queue!interface Serial0/1 no ip address shutdown!ip classlessip route 0.0.0.0 0.0.0.0 200.1.1.1no ip http server!!line con 0 password cisco loginline aux 0line vty 0 4 password cisco login!!end
********************* SWITCH SW4 *********************
Current configuration : 1846 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW4!enable password cisco!ip subnet-zero!no ip domain-lookup!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-id!!interface FastEthernet0/1 switchport mode trunk no ip address!interface FastEthernet0/2 switchport mode trunk no ip address!interface FastEthernet0/3 switchport mode trunk no ip address!interface FastEthernet0/4 no ip address!interface FastEthernet0/5 no ip address!interface FastEthernet0/6 no ip address!interface FastEthernet0/7 no ip address!
interface FastEthernet0/8 no ip address!interface FastEthernet0/9 no ip address!interface FastEthernet0/10 no ip address!interface FastEthernet0/11 no ip address!interface FastEthernet0/12 no ip address!interface FastEthernet0/13 no ip address!interface FastEthernet0/14 no ip address!interface FastEthernet0/15 no ip address!interface FastEthernet0/16 no ip address!interface FastEthernet0/17 no ip address!interface FastEthernet0/18 no ip address!interface FastEthernet0/19 no ip address!interface FastEthernet0/20 switchport access vlan 40 switchport mode access no ip address!interface FastEthernet0/21 switchport access vlan 40 switchport mode access no ip address!interface FastEthernet0/22 switchport access vlan 40 switchport mode access no ip address!interface FastEthernet0/23 switchport access vlan 40 switchport mode access no ip address!interface FastEthernet0/24 switchport access vlan 40 switchport mode access no ip address!interface Vlan1 ip address 192.168.1.1 255.255.255.0 no ip route-cache!interface Vlan10 no ip address no ip route-cache shutdown!ip http server!!line con 0 password cisco
loginline vty 0 4 password cisco loginline vty 5 15 password cisco login!end
********************* SWITCH SW2 *********************
Current configuration : 2588 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW2!enable password cisco!ip subnet-zero!!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-id!!interface FastEthernet0/1 switchport mode trunk no ip address!interface FastEthernet0/2 switchport mode trunk no ip address!interface FastEthernet0/3 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/4 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/5 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/6 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/7 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/8 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/9
switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/10 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/11 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/12 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/13 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/14 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/15 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/16 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/17 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/18 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/19 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/20 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/21 switchport access vlan 30 switchport mode access no ip address!interface FastEthernet0/22 no ip address!interface FastEthernet0/23 no ip address!interface FastEthernet0/24 no ip address!interface Vlan1 ip address 192.168.1.2 255.255.255.0
no ip route-cache!ip default-gateway 192.168.10.1ip http server!!line con 0 password cisco loginline vty 0 4 password cisco loginline vty 5 15 password cisco login!end
********************* SWITCH SW3 *********************
Current configuration : 2073 bytes!version 12.1no service padservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname SW3!enable password cisco!ip subnet-zero!!spanning-tree mode pvstno spanning-tree optimize bpdu transmissionspanning-tree extend system-id!!interface FastEthernet0/1 switchport mode trunk no ip address!interface FastEthernet0/2 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/3 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/4 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/5 switchport access vlan 10 switchport mode access no ip address!interface FastEthernet0/6 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/7 switchport access vlan 20
switchport mode access no ip address!interface FastEthernet0/8 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/9 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/10 switchport access vlan 20 switchport mode access no ip address!interface FastEthernet0/11 no ip address!interface FastEthernet0/12 no ip address!interface FastEthernet0/13 no ip address!interface FastEthernet0/14 no ip address!interface FastEthernet0/15 no ip address!interface FastEthernet0/16 no ip address!interface FastEthernet0/17 no ip address!interface FastEthernet0/18 no ip address!interface FastEthernet0/19 no ip address!interface FastEthernet0/20 no ip address!interface FastEthernet0/21 no ip address!interface FastEthernet0/22 no ip address!interface FastEthernet0/23 no ip address!interface FastEthernet0/24 no ip address!interface Vlan1 ip address 192.168.1.3 255.255.255.0 no ip route-cache!ip default-gateway 192.168.10.1ip http server!!line con 0 exec-timeout 0 0 password cisco loginline vty 0 4 password cisco login
line vty 5 15 password cisco login!end