Introduction/overview

in this lab I Use Cisco ConfigMaker, create a

network architecture with three LANs. I added some routers, switches, and hosts to
a simple network.

summary

inconclusion I learned how to connect host to a switch to a router

and then a network to another network using hdlc which is is a bit-oriented
synchronous data link layer protocol developed by the International Organization for
Standardization (ISO). Then I used frame relay to connect the networks to the
internet . Frame Relay was a good choose because Frame Relay is a standardized
wide area network technology that specifies the physical and logical link layers of
digital telecommunications channels using a packet switching methodology over. all
I learned a great deal of in formation

Data: for screenshots amd other data please read below

6.

Print out the IOS configuration for your routers and your switches

not an option for the switch

step 6 print outs :

! ******************************************************************
! Dallas1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 10:50:15 AM
!

thats

! Hostname: Dallas1
! Model: 3620
! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname Dallas1
!
enable password pledger
!
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface Ethernet 0/0
no shutdown
description connected to Dallas1_Switch
ip address 200.200.10.1 255.255.255.240
keepalive 10
!

interface Serial 0/0

no shutdown
description connected to chicago1
ip address 200.200.20.1 255.255.255.240
encapsulation hdlc
!
interface Serial 0/1
no shutdown
description connected to Boston1
ip address 200.200.60.1 255.255.255.240
encapsulation hdlc
!
voice-port 1/0/0
shutdown
no description
!
voice-port 1/0/1
shutdown
no description
!
router rip
version 2
network 200.200.10.0
network 200.200.20.0
network 200.200.60.0
no auto-summary

!
!
ip classless
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password keith
login
!
line vty 0 4
password keith
login
!
End

! ******************************************************************
! chicago1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 10:58:44 AM
!
! Hostname: chicago1

! Model: 3620
! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname chicago1
!
enable secret pledger
!
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface Ethernet 0/0
no shutdown
description connected to Chicago1_Switch
ip address 200.200.30.1 255.255.255.248
keepalive 10
!
interface Serial 0/0

no shutdown
description connected to Dallas1
ip address 200.200.20.2 255.255.255.240
encapsulation hdlc
!
interface Serial 0/1
no shutdown
description connected to Boston1
ip address 200.200.40.1 255.255.255.248
encapsulation hdlc
!
voice-port 1/0/0
shutdown
no description
!
voice-port 1/0/1
shutdown
no description

! ******************************************************************
! Boston1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 11:00:04 AM
!
! Hostname: Boston1
! Model: 3620

! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname Boston1
!
enable secret pledger
!
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
interface Ethernet 0/0
no shutdown
description connected to Boston_Switch
ip address 200.200.50.1 255.255.255.224
keepalive 10
!
interface Serial 0/0
no shutdown

description connected to chicago1

ip address 200.200.40.2 255.255.255.248
encapsulation hdlc
!
interface Serial 0/1
no shutdown
description connected to Dallas1
ip address 200.200.60.2 255.255.255.240
encapsulation hdlc
!
voice-port 1/0/0
shutdown
no description
!
voice-port 1/0/1
shutdown
no description
!
router rip
version 2
network 200.200.50.0
network 200.200.40.0
network 200.200.60.0
no auto-summary
!
!

ip classless
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password alijah
login
!
line vty 0 4
password alijah
login
!
end

step 11
! ******************************************************************
! Dallas1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 11:54:51 AM
!
! Hostname: Dallas1
! Model: 3620

! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname Dallas1
!
enable secret pledger
!
ip source-route
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
! Context-Based Access Control
!
no ip inspect audit-trail
ip inspect tcp synwait-time 30
ip inspect tcp finwait-time 5
ip inspect tcp idle-time 3600
ip inspect udp idle-time 30

ip inspect dns-timeout 5
ip inspect one-minute low 900
ip inspect one-minute high 1100
ip inspect max-incomplete low 900
ip inspect max-incomplete high 1100
ip inspect tcp max-incomplete host 50 block-time 0
!
! Internet Key Exchange (IKE)
!
crypto isakmp enable
crypto isakmp identity address
!
crypto isakmp policy 1
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
!
crypto isakmp policy 2
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
crypto isakmp key 1 address 200.200.40.1

crypto isakmp key 2 address 200.200.70.1

!
! IPSec
!
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac
crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac
crypto map cm-cryptomap local-address Serial 0/0.1
!
crypto map cm-cryptomap 1 ipsec-isakmp
match address 100
set peer 200.200.40.1
set transform-set cm-transformset-1
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
crypto map cm-cryptomap 2 ipsec-isakmp
match address 101
set peer 200.200.70.1
set transform-set cm-transformset-2
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
interface Ethernet 0/0
no shutdown
description connected to Dallas1_Switch
ip address 192.168.0.1 255.255.255.240

ip nat inside
ip access-group 102 in
keepalive 10
!
interface Serial 0/0
no shutdown
no description
mtu 512
no ip address
encapsulation frame-relay
frame-relay lmi-type cisco
!
interface Serial 0/0.1 point-to-point
no shutdown
description connected to Internet
crypto map cm-cryptomap
ip address 200.200.60.1 255.255.255.240
ip nat outside
no ip route-cache
ip access-group 105 in
frame-relay interface-dlci 16
frame-relay ip rtp header-compression
ip rtp reserve 16384 100 12
traffic-shape rate 9600000 1200000 1200000
!
interface Serial 0/1

no description
no ip address
shutdown
!
voice-port 1/0/0
no shutdown
description connected to Phone (7777777)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/0/1
no shutdown
description connected to Phone_1 (8888888)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/1/0
no shutdown
description connected to Phone_2 (9999999)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/1/1

no shutdown
no description
!
dial-peer voice 1 pots
port 1/0/0
destination-pattern 7777777
!
dial-peer voice 2 pots
port 1/0/1
destination-pattern 8888888
!
dial-peer voice 3 pots
port 1/1/0
destination-pattern 9999999
!
dial-peer voice 5 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.1.1
vad
destination-pattern 1111111
!
dial-peer voice 6 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.1.1

vad
destination-pattern 2222222
!
dial-peer voice 7 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.1.1
vad
destination-pattern 3333333
!
dial-peer voice 8 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 4444444
!
dial-peer voice 9 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 5555555
!
dial-peer voice 10 voip
codec g729r8

ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 6666666
!
! Access Control List 1
!
no access-list 1
access-list 1 permit 192.168.0.0 0.0.0.15
!
! Access Control List 100
!
no access-list 100
access-list 100 permit ip host 200.200.60.1 host 200.200.40.1
!
! Access Control List 101
!
no access-list 101
access-list 101 permit ip host 200.200.60.1 host 200.200.70.1
!
! Access Control List 102
!
no access-list 102
access-list 102 permit udp any eq rip any eq rip
!
! Access Control List 103

!
no access-list 103
access-list 103 deny ip 192.168.0.0 0.0.0.15 any
access-list 103 permit udp any eq rip any eq rip
!
! Access Control List 104
!
no access-list 104
access-list 104 deny ip 192.168.0.0 0.0.0.15 any
access-list 104 permit udp any eq rip any eq rip
!
! Access Control List 105
!
no access-list 105
access-list 105 permit udp host 200.200.60.1 eq 500 host 200.200.60.1
access-list 105 permit ahp host 200.200.60.1 host 200.200.60.1
access-list 105 permit esp host 200.200.60.1 host 200.200.60.1
!
! Access Control List 106
!
no access-list 106
access-list 106 deny ip 192.168.0.0 0.0.0.15 any
access-list 106 permit udp any eq rip any eq rip
!
! Access Control List 107
!

no access-list 107
access-list 107 deny ip 192.168.0.0 0.0.0.15 any
access-list 107 permit udp any eq rip any eq rip
!
! Access Control List 108
!
no access-list 108
access-list 108 deny ip 192.168.0.0 0.0.0.15 any
access-list 108 permit udp any eq rip any eq rip
!
! Dynamic NAT
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Serial 0/0.1 overload
!
router rip
version 2
network 192.168.0.0
passive-interface Serial 0/0.1
no auto-summary
!
!

ip classless
!
! IP Static Routes
ip route 0.0.0.0 0.0.0.0 Serial 0/0.1
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password keith
login
!
line vty 0 4
password keith
login
!
end

! ******************************************************************
! chicago1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 11:59:09 AM
!
! Hostname: chicago1

! Model: 3620
! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname chicago1
!
enable secret pledger
!
ip source-route
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
! Context-Based Access Control
!
no ip inspect audit-trail
ip inspect tcp synwait-time 30
ip inspect tcp finwait-time 5
ip inspect tcp idle-time 3600

ip inspect udp idle-time 30

ip inspect dns-timeout 5
ip inspect one-minute low 900
ip inspect one-minute high 1100
ip inspect max-incomplete low 900
ip inspect max-incomplete high 1100
ip inspect tcp max-incomplete host 50 block-time 0
!
! Internet Key Exchange (IKE)
!
crypto isakmp enable
crypto isakmp identity address
!
crypto isakmp policy 1
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
!
crypto isakmp policy 2
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400

crypto isakmp key 1 address 200.200.60.1

crypto isakmp key 4 address 200.200.70.1
!
! IPSec
!
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac
crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac
crypto map cm-cryptomap local-address Serial 0/0.1
!
crypto map cm-cryptomap 1 ipsec-isakmp
match address 100
set peer 200.200.60.1
set transform-set cm-transformset-1
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
crypto map cm-cryptomap 2 ipsec-isakmp
match address 101
set peer 200.200.70.1
set transform-set cm-transformset-2
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
interface Ethernet 0/0
no shutdown
description connected to Chicago1_Switch

ip address 192.168.1.1 255.255.255.240

ip nat inside
ip access-group 102 in
keepalive 10
!
interface Serial 0/0
no shutdown
no description
mtu 512
no ip address
encapsulation frame-relay
frame-relay lmi-type cisco
!
interface Serial 0/0.1 point-to-point
no shutdown
description connected to Internet
crypto map cm-cryptomap
ip address 200.200.40.1 255.255.255.240
ip nat outside
no ip route-cache
ip access-group 105 in
frame-relay interface-dlci 17
frame-relay ip rtp header-compression
ip rtp reserve 16384 100 12
traffic-shape rate 9600000 1200000 1200000
!

interface Serial 0/1

no description
no ip address
shutdown
!
voice-port 1/0/0
no shutdown
description connected to Phone_3 (1111111)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/0/1
no shutdown
description connected to Phone_4 (2222222)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/1/0
no shutdown
description connected to Phone_5 (3333333)
comfort-noise
cptone US
signal loopStart
!

voice-port 1/1/1
no shutdown
no description
!
dial-peer voice 1 pots
port 1/0/0
destination-pattern 1111111
!
dial-peer voice 2 pots
port 1/0/1
destination-pattern 2222222
!
dial-peer voice 6 pots
port 1/1/0
destination-pattern 3333333
!
dial-peer voice 3 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.0.1
vad
destination-pattern 7777777
!
dial-peer voice 4 voip
codec g729r8
ip precedence 5

session target ipv4:192.168.0.1

vad
destination-pattern 8888888
!
dial-peer voice 5 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.0.1
vad
destination-pattern 9999999
!
dial-peer voice 8 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 4444444
!
dial-peer voice 9 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 5555555
!
dial-peer voice 10 voip

codec g729r8
ip precedence 5
session target ipv4:192.168.2.1
vad
destination-pattern 6666666
!
! Access Control List 1
!
no access-list 1
access-list 1 permit 192.168.1.0 0.0.0.15
!
! Access Control List 100
!
no access-list 100
access-list 100 permit ip host 200.200.40.1 host 200.200.60.1
!
! Access Control List 101
!
no access-list 101
access-list 101 permit ip host 200.200.40.1 host 200.200.70.1
!
! Access Control List 102
!
no access-list 102
access-list 102 permit udp any eq rip any eq rip
!

! Access Control List 103

!
no access-list 103
access-list 103 deny ip 192.168.1.0 0.0.0.15 any
access-list 103 permit udp any eq rip any eq rip
!
! Access Control List 104
!
no access-list 104
access-list 104 deny ip 192.168.1.0 0.0.0.15 any
access-list 104 permit udp any eq rip any eq rip
!
! Access Control List 105
!
no access-list 105
access-list 105 permit udp host 200.200.40.1 eq 500 host 200.200.40.1
access-list 105 permit ahp host 200.200.40.1 host 200.200.40.1
access-list 105 permit esp host 200.200.40.1 host 200.200.40.1
!
! Access Control List 106
!
no access-list 106
access-list 106 deny ip 192.168.1.0 0.0.0.15 any
access-list 106 permit udp any eq rip any eq rip
!
! Access Control List 107

!
no access-list 107
access-list 107 deny ip 192.168.1.0 0.0.0.15 any
access-list 107 permit udp any eq rip any eq rip
!
! Access Control List 108
!
no access-list 108
access-list 108 deny ip 192.168.1.0 0.0.0.15 any
access-list 108 permit udp any eq rip any eq rip
!
! Dynamic NAT
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Serial 0/0.1 overload
!
router rip
version 2
network 192.168.1.0
passive-interface Serial 0/0.1
no auto-summary
!

!
ip classless
!
! IP Static Routes
ip route 0.0.0.0 0.0.0.0 Serial 0/0.1
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password latoya
login
!
line vty 0 4
password latoya
login
!
End
! ******************************************************************
! Boston1.cfg - Cisco router configuration file
! Automatically created by Cisco ConfigMaker v2.6 Build 6
! Sunday, June 03, 2012, 12:00:51 PM
!
! Hostname: Boston1

! Model: 3620
! ******************************************************************
!
service timestamps debug uptime
service timestamps log uptime
service password-encryption
no service tcp-small-servers
no service udp-small-servers
!
hostname Boston1
!
enable secret pledger
!
ip source-route
no ip name-server
!
ip subnet-zero
no ip domain-lookup
ip routing
!
! Context-Based Access Control
!
no ip inspect audit-trail
ip inspect tcp synwait-time 30
ip inspect tcp finwait-time 5
ip inspect tcp idle-time 3600

ip inspect udp idle-time 30

ip inspect dns-timeout 5
ip inspect one-minute low 900
ip inspect one-minute high 1100
ip inspect max-incomplete low 900
ip inspect max-incomplete high 1100
ip inspect tcp max-incomplete host 50 block-time 0
!
! Internet Key Exchange (IKE)
!
crypto isakmp enable
crypto isakmp identity address
!
crypto isakmp policy 1
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400
!
crypto isakmp policy 2
encryption des
hash md5
authentication pre-share
group 1
lifetime 86400

crypto isakmp key 2 address 200.200.60.1

crypto isakmp key 4 address 200.200.40.1
!
! IPSec
!
crypto ipsec transform-set cm-transformset-1 ah-md5-hmac esp-des esp-md5-hmac
crypto ipsec transform-set cm-transformset-2 ah-md5-hmac esp-des esp-md5-hmac
crypto map cm-cryptomap local-address Serial 0/0.1
!
crypto map cm-cryptomap 1 ipsec-isakmp
match address 100
set peer 200.200.60.1
set transform-set cm-transformset-1
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
crypto map cm-cryptomap 2 ipsec-isakmp
match address 101
set peer 200.200.40.1
set transform-set cm-transformset-2
set security-association lifetime seconds 3600
set security-association lifetime kilobytes 4608000
!
interface Ethernet 0/0
no shutdown
description connected to Boston_Switch

ip address 192.168.2.1 255.255.255.240

ip nat inside
ip access-group 102 in
keepalive 10
!
interface Serial 0/0
no shutdown
no description
mtu 512
no ip address
encapsulation frame-relay
frame-relay lmi-type cisco
!
interface Serial 0/0.1 point-to-point
no shutdown
description connected to Internet
crypto map cm-cryptomap
ip address 200.200.70.1 255.255.255.240
ip nat outside
no ip route-cache
ip access-group 105 in
frame-relay interface-dlci 18
frame-relay ip rtp header-compression
ip rtp reserve 16384 100 12
traffic-shape rate 9600000 1200000 1200000
!

interface Serial 0/1

no description
no ip address
shutdown
!
voice-port 1/0/0
no shutdown
description connected to Phone_6 (4444444)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/0/1
no shutdown
description connected to Phone_7 (5555555)
comfort-noise
cptone US
signal loopStart
!
voice-port 1/1/0
no shutdown
description connected to Phone_8 (6666666)
comfort-noise
cptone US
signal loopStart
!

voice-port 1/1/1
no shutdown
no description
!
dial-peer voice 1 pots
port 1/0/0
destination-pattern 4444444
!
dial-peer voice 2 pots
port 1/0/1
destination-pattern 5555555
!
dial-peer voice 9 pots
port 1/1/0
destination-pattern 6666666
!
dial-peer voice 3 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.0.1
vad
destination-pattern 7777777
!
dial-peer voice 4 voip
codec g729r8
ip precedence 5

session target ipv4:192.168.0.1

vad
destination-pattern 8888888
!
dial-peer voice 5 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.0.1
vad
destination-pattern 9999999
!
dial-peer voice 6 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.1.1
vad
destination-pattern 1111111
!
dial-peer voice 7 voip
codec g729r8
ip precedence 5
session target ipv4:192.168.1.1
vad
destination-pattern 2222222
!
dial-peer voice 8 voip

codec g729r8
ip precedence 5
session target ipv4:192.168.1.1
vad
destination-pattern 3333333
!
! Access Control List 1
!
no access-list 1
access-list 1 permit 192.168.2.0 0.0.0.15
!
! Access Control List 100
!
no access-list 100
access-list 100 permit ip host 200.200.70.1 host 200.200.60.1
!
! Access Control List 101
!
no access-list 101
access-list 101 permit ip host 200.200.70.1 host 200.200.40.1
!
! Access Control List 102
!
no access-list 102
access-list 102 permit udp any eq rip any eq rip
!

! Access Control List 103

!
no access-list 103
access-list 103 deny ip 192.168.2.0 0.0.0.15 any
access-list 103 permit udp any eq rip any eq rip
!
! Access Control List 104
!
no access-list 104
access-list 104 deny ip 192.168.2.0 0.0.0.15 any
access-list 104 permit udp any eq rip any eq rip
!
! Access Control List 105
!
no access-list 105
access-list 105 permit udp host 200.200.70.1 eq 500 host 200.200.70.1
access-list 105 permit ahp host 200.200.70.1 host 200.200.70.1
access-list 105 permit esp host 200.200.70.1 host 200.200.70.1
!
! Access Control List 106
!
no access-list 106
access-list 106 deny ip 192.168.2.0 0.0.0.15 any
access-list 106 permit udp any eq rip any eq rip
!
! Access Control List 107

!
no access-list 107
access-list 107 deny ip 192.168.2.0 0.0.0.15 any
access-list 107 permit udp any eq rip any eq rip
!
! Access Control List 108
!
no access-list 108
access-list 108 deny ip 192.168.2.0 0.0.0.15 any
access-list 108 permit udp any eq rip any eq rip
!
! Dynamic NAT
!
ip nat translation timeout 86400
ip nat translation tcp-timeout 86400
ip nat translation udp-timeout 300
ip nat translation dns-timeout 60
ip nat translation finrst-timeout 60
ip nat inside source list 1 interface Serial 0/0.1 overload
!
router rip
version 2
network 192.168.2.0
passive-interface Serial 0/0.1
no auto-summary
!

!
ip classless
!
! IP Static Routes
ip route 0.0.0.0 0.0.0.0 Serial 0/0.1
no ip http server
snmp-server community public RO
no snmp-server location
no snmp-server contact
!
line console 0
exec-timeout 0 0
password alijah
login
!
line vty 0 4
password alijah
login
!
end