Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

14-Cisco ISE Lab

Download as pdf or txt
Download as pdf or txt
You are on page 1of 4

Cisco ISE Lab:

SW1 Configuration
SW(config)#hostname SW1
SW1(config)#vlan 10
SW1(config-vlan)#name EMP
SW1(config-vlan)#vlan 20
SW1(config-vlan)#name CONT
SW1(config-vlan)#vlan 30
SW1(config-vlan)#name GUST
SW1(config-vlan)#vlan 40
SW1(config-vlan)#name LIMT
SW1(config-vlan)#vlan 100
Sw1(config-vlan)#name MGMT
SW1(config)#interface Ethernet0/0
SW1(config-if)#switchport trunk encapsulation dot1q
SW1(config-if)#switchport trunk native vlan 100
SW1(config-if)#switchport mode trunk
SW1(config-if)#exit
SW1(config)#interface Ethernet0/1
SW1(config-if)#description connected to ISE1
SW1(config-if)#switchport access vlan 100
SW1(config-if)#exit

1 | P a g e Prepared By Ahmad Ali, Email: ahmadalimsc@gmail.com , Mobile# 0564303717


SW1(config)#interface Ethernet0/2
SW1(config-if)#description connected to ISE2
SW1(config-if)#switchport access vlan 100
SW1(config-if)#exit
SW1(config)#interface Ethernet0/3
SW1(config-if)#description connected to AD
SW1(config-if)#switchport access vlan 100
SW1(config-if)#exit
SW1(config)#interface Ethernet1/0
SW1(config-if)#description connected to WLC
SW1(config-if)#switchport access vlan 100
SW1(config-if)#exit
SW1(config)#interface Ethernet1/1
SW1(config-if)#description connected to MGM-PC
SW1(config-if)#switchport access vlan 100
SW1(config-if)#exit

Router R Configuration
Router(config)#hostname R
R(config)#ip name-server 8.8.8.8
R(config)#interface FastEthernet0/0
R(config-if)#ip address 192.168.99.1 255.255.255.0
R(config-if)#ip nat inside
R(config-if)#no shutdown
R(config-if)#exit
R(config)#interface FastEthernet1/0
R(config-if)#ip address dhcp
R(config-if)#ip nat outside
R(config-if)#no shutdown
R(config-if)#exit
R(config)#ip route 192.168.0.0 255.255.0.0 192.168.99.254
R(config)#access-list 1 permit 192.168.0.0 0.0.255.255
R(config)#ip nat inside source list 1 interface FastEthernet1/0 overload

2 | P a g e Prepared By Ahmad Ali, Email: ahmadalimsc@gmail.com , Mobile# 0564303717


SW2 Configuration
SW(config)#hostname SW2
SW2(config)#vlan 10
SW2(config-vlan)#name EMP
SW2(config-vlan)#vlan 20
SW2(config-vlan)#name CONT
SW2(config-vlan)#vlan 30
SW2(config-vlan)#name GUST
SW2(config-vlan)#vlan 40
SW2(config-vlan)#name LIMT
SW2(config-vlan)#vlan 100
Sw2(config-vlan)#name MGMT
SW2(config)#interface Ethernet0/0
SW2(config-if)#description connected to SW1
SW2(config-if)#switchport trunk encapsulation dot1q
SW2(config-if)#switchport trunk native vlan 100
SW2(config-if)#switchport mode trunk
SW2(config-if)#no shutdown
SW2(config)#interface Ethernet0/3
SW2(config-if)#description connect to Firewall
SW2(config-if)#no switchport
SW2(config-if)#ip address 192.168.99.254 255.255.255.0
SW2(config-if)#no shutdown
SW2(config)#interface Vlan10
SW2(config-if)#ip address 192.168.10.1 255.255.255.0
SW2(config-if)#ip helper-address 192.168.100.230
SW2(config-if)#no shutdown
SW2(config)#interface Vlan20
SW2(config-if)#ip address 192.168.20.1 255.255.255.0
SW2(config-if)#ip helper-address 192.168.100.230
SW2(config-if)#no shutdown
SW2(config)#interface Vlan30
SW2(config-if)#ip address 192.168.30.1 255.255.255.0
SW2(config-if)#ip helper-address 192.168.100.230
SW2(config-if)#no shutdown
SW2(config)#interface Vlan40
SW2(config-if)#ip address 192.168.40.1 255.255.255.0
SW2(config-if)#ip helper-address 192.168.100.230
SW2(config-if)#no shutdown
SW2(config)#interface Vlan100
SW2(config-if)#ip address 192.168.100.254 255.255.255.0
SW2(config-if)#no shutdown

3 | P a g e Prepared By Ahmad Ali, Email: ahmadalimsc@gmail.com , Mobile# 0564303717


SW2(config)#ip routing
SW2(config)#ip name-server 8.8.8.8
SW2(config)#ip route 0.0.0.0 0.0.0.0 192.168.99.1

Testing and Verification:


Configure DNS Forwarder, If not configure in DNS Server.

4 | P a g e Prepared By Ahmad Ali, Email: ahmadalimsc@gmail.com , Mobile# 0564303717

You might also like