Content is user-generated and unverified.

Complete Network Configuration CLI Commands

TASK 1: IP Configuration (All devices except Internet & Shah Alam)

ISP1 Router:

cisco

enable
configure terminal
interface serial 0/1/0
ip address 209.165.200.1 255.255.255.252
no shutdown
exit
interface serial 0/1/1
ip address 209.165.200.5 255.255.255.252
no shutdown
exit
interface gigabitethernet 0/0/0
ip address 202.10.1.1 255.255.255.252
no shutdown
exit

ISP2 Router:

cisco

enable
configure terminal
interface serial 0/1/0
ip address 209.165.200.2 255.255.255.252
no shutdown
exit
interface gigabitethernet 0/0/1
ip address 202.20.2.1 255.255.255.252
no shutdown
exit

D1 Multilayer Switch:

cisco

enable
configure terminal
ip routing
interface gigabitethernet 0/0/1
no switchport
ip address 202.10.1.2 255.255.255.252
no shutdown
exit

D2 Multilayer Switch:

cisco

enable
configure terminal
ip routing
interface gigabitethernet 0/0/2
no switchport
ip address 202.20.2.2 255.255.255.252
no shutdown
exit

S_ALAM Router:

cisco

enable
configure terminal
interface gigabitethernet 0/0/0
ip address 202.40.1.2 255.255.255.252
no shutdown
exit
interface gigabitethernet 0/0/1
ip address 202.30.1.2 255.255.255.252
no shutdown
exit
interface gigabitethernet 0/0/2
ip address 10.10.10.1 255.255.255.0
no shutdown
exit

TASK 2: VLAN Configuration on D1 & D2

D1 Multilayer Switch:

cisco

enable
configure terminal
ip routing
vlan 10
name Operations
exit
vlan 20
name Branding
exit
vlan 30
name Accounting
exit
vlan 40
name Sales
exit

interface vlan 10
ip address 192.168.10.1 255.255.255.0
no shutdown
exit
interface vlan 20
ip address 192.168.20.1 255.255.255.0
no shutdown
exit
interface vlan 30
ip address 192.168.30.1 255.255.255.0
no shutdown
exit
interface vlan 40
ip address 192.168.40.1 255.255.255.0
no shutdown
exit

D2 Multilayer Switch:

cisco

enable
configure terminal
ip routing
vlan 10
name Operations
exit
vlan 20
name Branding
exit
vlan 30
name Accounting
exit
vlan 40
name Sales
exit

interface vlan 10
ip address 192.168.10.2 255.255.255.0
no shutdown
exit
interface vlan 20
ip address 192.168.20.2 255.255.255.0
no shutdown
exit
interface vlan 30
ip address 192.168.30.2 255.255.255.0
no shutdown
exit
interface vlan 40
ip address 192.168.40.2 255.255.255.0
no shutdown
exit

Verification:

cisco

show ip interface brief
show vlan brief

TASK 3: BPDU Guard and Portfast on Switch A2

Switch A2:

cisco

enable
configure terminal
spanning-tree portfast bpduguard default
interface range fastethernet 0/1-24
spanning-tree portfast
spanning-tree bpduguard enable
switchport mode access
switchport access vlan 30
exit

TASK 4: HSRP Configuration

D1 Multilayer Switch (Primary for VLANs 10 & 20):

cisco

enable
configure terminal
interface vlan 10
standby 10 ip 192.168.10.254
standby 10 priority 150
standby 10 preempt
exit
interface vlan 20
standby 20 ip 192.168.20.254
standby 20 priority 150
standby 20 preempt
exit
interface vlan 30
standby 30 ip 192.168.30.254
standby 30 priority 100
standby 30 preempt
exit
interface vlan 40
standby 40 ip 192.168.40.254
standby 40 priority 100
standby 40 preempt
exit

D2 Multilayer Switch (Primary for VLANs 30 & 40):

cisco

enable
configure terminal
interface vlan 10
standby 10 ip 192.168.10.254
standby 10 priority 100
standby 10 preempt
exit
interface vlan 20
standby 20 ip 192.168.20.254
standby 20 priority 100
standby 20 preempt
exit
interface vlan 30
standby 30 ip 192.168.30.254
standby 30 priority 150
standby 30 preempt
exit
interface vlan 40
standby 40 ip 192.168.40.254
standby 40 priority 150
standby 40 preempt
exit

Verification:

cisco

show standby brief

TASK 5: Static Routes on ISP1 & ISP2

ISP1 Router:

cisco

enable
configure terminal
ip route 192.168.10.0 255.255.255.0 gigabitethernet 0/0/0
ip route 192.168.20.0 255.255.255.0 gigabitethernet 0/0/0
ip route 192.168.30.0 255.255.255.0 gigabitethernet 0/0/0
ip route 192.168.40.0 255.255.255.0 gigabitethernet 0/0/0

ISP2 Router:

cisco

enable
configure terminal
ip route 192.168.10.0 255.255.255.0 gigabitethernet 0/0/1
ip route 192.168.20.0 255.255.255.0 gigabitethernet 0/0/1
ip route 192.168.30.0 255.255.255.0 gigabitethernet 0/0/1
ip route 192.168.40.0 255.255.255.0 gigabitethernet 0/0/1

Verification:

cisco

show ip route

TASK 6: DHCP Server Configuration on D2

D2 Multilayer Switch:

cisco

enable
configure terminal
ip dhcp excluded-address 192.168.40.1 192.168.40.10
ip dhcp pool SALES_POOL
network 192.168.40.0 255.255.255.0
default-router 192.168.40.254
dns-server 8.8.8.8
domain-name www.technovision.my
exit
service dhcp

Verification:

cisco

show ip dhcp binding
show ip dhcp pool

TASK 7: VTP Configuration

D1 Multilayer Switch (VTP Server):

cisco

enable
configure terminal
vtp mode server
vtp domain technovision
vtp version 2
vtp password technovision

D2 Multilayer Switch (VTP Client):

cisco

enable
configure terminal
vtp mode client
vtp domain technovision
vtp version 2
vtp password technovision

Verification:

cisco

show vtp status

TASK 8: OSPF Configuration

D1 Multilayer Switch:

cisco

enable
configure terminal
router ospf 10
network 192.168.10.0 0.0.0.255 area 0
network 192.168.20.0 0.0.0.255 area 0
network 192.168.30.0 0.0.0.255 area 0
network 192.168.40.0 0.0.0.255 area 0
network 202.10.1.0 0.0.0.3 area 0
redistribute static
exit

D2 Multilayer Switch:

cisco

enable
configure terminal
router ospf 10
network 192.168.10.0 0.0.0.255 area 0
network 192.168.20.0 0.0.0.255 area 0
network 192.168.30.0 0.0.0.255 area 0
network 192.168.40.0 0.0.0.255 area 0
network 202.20.2.0 0.0.0.3 area 0
redistribute static
exit

TASK 9: Default Route Configuration

D1 Multilayer Switch:

cisco

enable
configure terminal
ip route 0.0.0.0 0.0.0.0 gigabitethernet 0/0/1
router ospf 10
default-information originate
exit

D2 Multilayer Switch:

cisco

enable
configure terminal
ip route 0.0.0.0 0.0.0.0 gigabitethernet 0/0/2
router ospf 10
default-information originate
exit

TASK 10: NAT Configuration on Shah Alam Router

Shah Alam Router:

cisco

enable
configure terminal
access-list 1 permit 10.10.10.0 0.0.0.255
interface gigabitethernet 0/0/2
ip nat inside
exit
interface gigabitethernet 0/0/1
ip nat outside
exit
ip nat inside source list 1 interface gigabitethernet 0/0/1 overload

Verification:

cisco

show ip nat translations

TASK 11: NTP Configuration

Internet Router (Master Clock):

cisco

enable
configure terminal
ntp master 1

ISP1 Router:

cisco

enable
configure terminal
ntp server 209.165.200.4

ISP2 Router:

cisco

enable
configure terminal
ntp server 209.165.200.4

Verification:

cisco

show ntp associations
show ntp status

TASK 12: Privilege Levels and User Configuration on D1

D1 Multilayer Switch:

cisco

enable
configure terminal
privilege exec level 6 configure terminal
privilege configure level 6 interface
privilege interface level 6 ip address
privilege interface level 6 no shutdown
username tech1 privilege 6 secret technovision

Verification:

cisco

show privilege
show users

Content is user-generated and unverified.