![](https://img.laitimes.com/img/_0nNw4CM6IyYiwiM6ICdiwiInBnauczMxgjQOB1Nzs2MEFUQzJUTzFUYYJVbTFDTvl2S39CXEZ0LcdTNvwFMw00LcJDMzZWe39CXt92Yu8GdjFTNuMzcvw1LcpDc0RHaiojIsJye.jpg)
R1:
HQ#sh run
Building configuration...
Current configuration : 2433 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname HQ
boot-start-marker
boot-end-marker
enable secret 5 $1$Y6K/$lir0fGeg6iG58JyQ7A0lP.
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
ip tcp synwait-time 5
ip cef
no ip domain lookup
no ip dhcp use vrf connected
ip dhcp excluded-address 10.1.10.1 10.1.10.99
ip dhcp excluded-address 10.1.20.1 10.1.20.99
ip dhcp pool VLAN10
network 10.1.10.0 255.255.255.0
default-router 10.1.10.254
dns-server 8.8.8.8
ip dhcp pool VLAN20
network 10.1.20.0 255.255.255.0
default-router 10.1.20.254
username PC2 password 0 cisco
bba-group pppoe Cisco
virtual-template 1
interface Loopback0
ip address 172.16.1.1 255.255.255.0
interface Ethernet0/0
no ip address
half-duplex
!
interface Ethernet0/1
pppoe enable group Cisco
interface Ethernet0/2
shutdown
interface Ethernet0/3
interface FastEthernet1/0
interface FastEthernet1/1
interface FastEthernet1/2
interface FastEthernet1/3
interface FastEthernet1/4
interface FastEthernet1/5
interface FastEthernet1/6
interface FastEthernet1/7
interface FastEthernet1/8
interface FastEthernet1/9
interface FastEthernet1/10
interface FastEthernet1/11
interface FastEthernet1/12
interface FastEthernet1/13
interface FastEthernet1/14
interface FastEthernet1/15
interface Serial2/0
serial restart-delay 0
interface Serial2/1
interface Serial2/2
interface Serial2/3
interface Virtual-Template1
ip address 192.168.1.2 255.255.255.0
peer default ip address pool Ender
ppp authentication chap
interface Vlan1
ip local pool Ender 192.168.1.1
no ip http server
no ip http secure-server
access-list 1 permit 10.1.10.100
access-list 1 permit 10.1.20.100
no cdp log mismatch duplex
control-plane
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
line vty 0 4
access-class 1 in
login local
end
R2:
Branch#sh ip n
*Mar 1 04:55:34.362: %SYS-5-CONFIG_I: Configured from console by console
Branch#sh ip nat tr
Branch#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
tcp 192.168.1.1:23 10.1.20.100:23 192.168.1.2:18695 192.168.1.2:18695
--- 192.168.1.1 10.1.20.100 --- ---
Branch#
Branch#sh run
Current configuration : 2528 bytes
hostname Branch
enable secret 5 $1$KcbH$slizQI6tuxAGXQ4cGl2ex/
enable password zhang
username branch password 0 cisco
!
interface Ethernet0/0.10
encapsulation dot1Q 10
ip address 10.1.10.254 255.255.255.0
ip helper-address 172.16.1.1
ip nat inside
ip virtual-reassembly
interface Ethernet0/0.20
encapsulation dot1Q 20
ip address 10.1.20.254 255.255.255.0
pppoe enable group global
pppoe-client dial-pool-number 1
interface Dialer1
mtu 1492
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
ppp chap hostname PC2
ppp chap password 0 cisco
ip route 0.0.0.0 0.0.0.0 Dialer1
ip nat inside source list 10 interface Dialer1 overload
ip nat inside source static 10.1.20.100 192.168.1.1
access-list 10 permit 10.1.20.0 0.0.0.255
access-list 10 permit 10.1.10.0 0.0.0.255
password cisco
login
R3:
PC1#sh run
Current configuration : 1897 bytes
hostname PC1
enable secret 5 $1$CbKj$FXp.bX34xG.QA5dfJuF9l0
no ip routing
no ip cef
ip address dhcp
no ip route-cache
R4:
PC2#sh run
Current configuration : 1895 bytes
hostname PC2
enable secret 5 $1$oQKK$zahYrRDP3azvF8lWXddy9.
R5:
PC3#sh run
Current configuration : 1832 bytes
hostname PC3
SW1:
SW1#sh run
Current configuration : 3147 bytes
no service dhcp
hostname SW1
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
multilink bundle-name authenticated
macro name add_vlan
vlan database
vlan $v
exit
@
macro name del_vlan
no vlan $v
vtp file nvram:vlan.dat
archive
log config
hidekeys
interface Port-channel1
switchport mode trunk
interface FastEthernet0/0
description *** Unused for Layer2 EtherSwitch ***
duplex auto
speed auto
interface FastEthernet0/1
duplex full
speed 100
switchport access vlan 10
spanning-tree portfast
channel-group 1 mode on
ip forward-protocol nd
banner exec ^C
***************************************************************
This is a normal Router with a Switch module inside (NM-16ESW)
It has been pre-configured with hard-coded speed and duplex
To create vlans use the command "vlan database" in exec mode
After creating all desired vlans use "exit" to apply the config
To view existing vlans use the command "show vlan-switch brief"
Alias(exec) : vl - "show vlan-switch brief" command
Alias(configure): va X - macro to add vlan X
Alias(configure): vd X - macro to delete vlan X
^C
alias configure va macro global trace add_vlan $v
alias configure vd macro global trace del_vlan $v
alias exec vl show vlan-switch brief
SW2:
SW2(config)#do sh run
Current configuration : 3124 bytes
hostname SW2
switchport access vlan 20
SW2(config)#end
SW2#sh run
*Mar 1 05:22:50.106: %SYS-5-CONFIG_I: Configured from console by console
endSW2(config)#do sh run