Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

Script Class LAB (24!4!2024)

Download as txt, pdf, or txt
Download as txt, pdf, or txt
You are on page 1of 5

----------------------- NAT/PAD Port Forwording ---------------------------

-------------------------------- Router-A Config ----------------------------------

en
debug ip packet
conf t
hostname Router-A
clock timezone PST 5

!---------------------------- All BANNER-Configuration.

banner motd #
----------------------------- Hello! Wellcome-To-My_Topology ----------------------
==>>> Just Below User Access the Network.
1) admin
-----------------------------------------------------------------------------------
-#

banner login #
===>>> Just Valid User Login Now! ---
#
!-------------------------- Clear BANNER-Configuration.

!----------------->>>>>>>>>> User-Configuration.

username admin privilege 15 password cisco

enable secret cisco

!------------------------- Line Console 0- Configuration.

line cons 0
password cisco
login local
exit
do wr

!------------------------ Line VTY Configuration.

line vty 0 4
password cisco
login local
exit
do wr

!-------------------------- >>> Interface FastEthernet0/0

int fa0/0
ip nat inside
no shutdown
desc ====>>>> Router-A LAN Network.
ip address 192.168.1.1 255.255.255.0
do wr
exit

!---------------------------- >>> Interface Serial 0/0/0

int ser0/0/0
ip nat outside
no shutdown
descr =====>>> Router-B Network IP is
ip address 1.1.1.1 255.0.0.0
keepalive 10
encap hdlc
clock rate 4000000
ip access-group http out
exit

!---------------------------------- Extended ACL Configeration

ip access-list extended http


deny tcp 192.168.1.8 0.0.0.3 192.168.2.6 0.0.0.1 eq www
deny icmp 192.168.1.10 0.0.0.1 192.168.2.4 0.0.0.1 echo
permit ip any any

!---------------------------- >>> IP-Route in Router-A

ip route 192.168.2.0 255.255.255.0 ser0/0/0


do wr

-------------------------------- Router-B Config ----------------------------------

en
debug ip packet
conf t
hostname Router-B
clock timezone PST 5

!---------------------------- All BANNER-Configuration.

banner motd #
----------------------------- Hello! Wellcome-To-My_Topology ----------------------
==>>> Just Below User Access the Network.
1) admin
-----------------------------------------------------------------------------------
-#

banner login #
===>>> Just Valid User Login Now! ---
#
!-------------------------- Clear BANNER-Configuration.

!----------------->>>>>>>>>> User-Configuration.

username admin privilege 15 password cisco

enable secret cisco

!------------------------- Line Console 0- Configuration.

line cons 0
password sexit
login local
exit
do wr

!------------------------ Line VTY Configuration.


line vty 0 4
password cisco
login local
exit
do wr

!-------------------------- >>> Interface FastEthernet0/0

int fa0/0
ip nat inside
no shutdown
desc ====>>>> Router-B LAN Network.
ip address 192.168.2.1 255.255.255.0
do wr
exit

!---------------------------- >>> Interface Serial 0/0/0

int ser0/0/0
ip nat outside
no shutdown
descr =====>>> Router-A Network IP is
ip address 1.1.1.2 255.0.0.0
keepalive 10
encap hdlc
clock rate 4000000
exit

!---------------------------- >>> IP-Route in Router-B

ip route 192.168.1.0 255.255.255.0 ser0/0/0


do wr

!---------------------------- >>> Define ACL with Overlode NAT/ Extended NAT

ip nat inside source static/list (inside-Network-ID)(Outside- Network-ID.)

ip nat inside source static 19

-------------------------------- Router-C Config ----------------------------------

en
conf t
int fa0/0
desc ====>>> Router-A LAN Network.
ip address 192.168.1.12 255.255.255.0
no shutdown
do wr
exit

! ================= Default Route


ip route 0.0.0.0 0.0.0.0 192.168.1.1
do wr

-------------------------------- Router-D Config ----------------------------------

en
conf t
int fa0/0
desc ====>>> Router-A LAN Network.
ip address 192.168.1.13 255.255.255.0
no shutdown
do wr
exit

! ================= Default Route


ip route 0.0.0.0 0.0.0.0 192.168.1.1
do wr

-------------------------------- Router-E Config ----------------------------------

en
conf t
int fa0/0
desc ====>>> Router-B LAN Network.
ip address 192.168.2.10 255.255.255.0
no shutdown
do wr
exit

! ================= Default Route

ip route 0.0.0.0 0.0.0.0 192.168.2.1


do wr

-------------------------------- Router-F Config ----------------------------------

en
conf t
int fa0/0
desc ====>>> Router-B LAN Network.
ip address 192.168.2.11 255.255.255.0
no shutdown
do wr
exit

! ================= Default Route

ip route 0.0.0.0 0.0.0.0 192.168.2.1


do wr

===================================================================================
====

!---------------------------- >>> Define Standard ACL

ip access-list standard telnet


permit 192.168.1.8 0.0.0.1
!---------------------------- >>> Define Standard ACL with the Help of Number on
Router-B LAN Network
For Standard ACL No Write ip.
access-list 80 deny 192.168.2.4 0.0.0.0 (OR)
access-list 80 deny host 192.168.2.4
access-list 80 permit 0.0.0.0 255.255.255.255
access-list 80 permit any

!---------------------------- >>> Define Standard ACL with Name on Router-B LAN


Network

ip access-list standard Pak


deny host 192.168.2.4
permit any !(Than Apply any Interface that you want.)

!---------------------------- >>> Define Extended ACL with Number on Router-B LAN


Network
(Source IP + Destination IP + Port-No/Protocol Name)

access-list 100 deny tcp 192.168.2.4 0.0.0.0 1.1.1.1 0.0.0.0 eq telnet


access-list 100 deny tcp host 192.168.2.4 host 1.1.1.1 eq 80 !(HTTP)
access-list 100 permit ip any any

!---------------------------- >>> Define Extended ACL with Name on Router-B LAN


Network
(Source IP + Destination IP + Port No/Protocol Name)

ip access-list ext Pak


deny tcp host 192.168.2.4 host 192.168.1.15 eq 80 !(HTTP)
deny tcp 192.168.2.4 0.0.0.0 1.1.1.1 0.0.0.0 eq telnet !(23)
permit ip any any

You might also like