SERVIDOR Dirección de Rango de direcciones IP Broadcast /

red disponibles

DHCP 200.0.0.0 200.0.0.1 200.0.0.2 200.0.0.3 30

FTP,WEB, 200.0.0.4 200.0.0.5 200.0.0.6 200.0.0.7 30

DNS,AD

PROXY 200.0.0.8 200.0.0.9 200.0.0.10 200.0.0.11 30

==================VALLEDUPAR============================

CONFIGURACIÓN DE LAS INTERFACES SERIALES Y GIGA ETHERNET

enable
configure terminal
hostname VALLEDUPAR

interface serial 0/0/0

ip address 12.0.0.13 255.255.255.252

no shutdown
exit
interface GIGA0/0
ip address 12.0.0.5 255.255.255.252
no shutdown
exit

interface GIGA0/1
ip address 12.0.0.1 255.255.255.252
no shutdown
clock rate 64000
exit
interface serial 0/0/1
ip addres 12.0.0.9 255.255.255.252
no shutdown
exit

CONFIGURACIÓN DEL PROTOCOLO OSPF AREA 0

router ospf 2
network 12.0.0.12 0.0.0.3 area 0
network 12.0.0.8 0.0.0.3 area 0
network 12.0.0.4 0.0.0.3 area 0
network 12.0.0.0 0.0.0.3 area 0
exit
exit

CONFIGURACIÓN DEL TELNET (CISCO es la contraseña-- El comando line vty 0 4, el numero

0 4 indica que se permiten 5 conexiones en simultaneo--
Si no ingresan el comando login no podrán acceder via telnet, ya que éste nos permite
logearnos.---El comando enable secret permite agregar
una contraseña encriptada que nos va a pedir ingresarla cada vez que ingresemos al router.
Es IMPORTANTE aclarar que si no configuramos una
contraseña no vamos a poder ingresar via telnet)

enable
configure terminal
line vty 0 4
password CISCO
login
exit
enable secret CISCO
login
exit
exit

===================BOGOTÁ=====================================
CONFIGURACIÓN DE LAS INTERFACES SERIALES Y GIGAETHERNET

enable
configure terminal
hostname BOGOTA
interface serial 0/0/0
ip addres 12.0.0.14 255.255.255.252
no shutdown
clock rate 64000
interface g0/1
ip address 200.0.0.1 255.255.255.252
no shutdown
CONFIGURACIÓN DEL PROTOCOLO OSPF AREA 0
router ospf 2
network 12.0.0.12 0.0.0.3 area 0
network 172.16.10.0 0.0.1.255 area 0
network 172.16.12.0 0.0.0.255 area 0
network 172.16.13.0 0.0.0.63 area 0
network 172.16.13.64 0.0.0.63 area 0
network 172.16.13.128 0.0.0.31 area 0
network 200.0.0.0 0.0.0.3 area 0​ (SERVIDOR DHCP)
exit
exit

ENCAPSULACIÓN DE LAS SUBINTERFACES CONFIGURADAS PARA LOS PUERTOS DE

LAS VLANs

configure terminal
interface g0/0
no shutdown
interface g0/0.20
encapsulation dot1Q 20
ip address 172.16.10.1 255.255.254.0
ip helper-address 200.0.0.2
no shutdown
interface g0/0.10
encapsulation dot1Q 10
ip address 172.16.12.1 255.255.255.0
ip helper-address 200.0.0.2
no shutdown
interface g0/0.50
encapsulation dot1Q 50
ip address 172.16.13.1 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/0.30
encapsulation dot1Q 30
ip address 172.16.13.65 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/0.99
encapsulation dot1Q 99
ip address 172.16.13.129 255.255.255.224
ip helper-address 200.0.0.2
no shutdown
exit

===================Switch BOGOTÁ=====================================

enable
configure terminal
VLAN 10
name VLAN_10
VLAN 20
name VLAN_20
VLAN 30
name VLAN_30
VLAN 50
name VLAN_50
VLAN 99
name VLAN_99
exit

CONFIGURACIÓN DE LA INTERFAZ CONECTADA DEL SWITCH AL ROUTER

int fa0/1
switchport mode trunk

=========================
Agregar Interfaces a VLAN
==========================

interface fa0/2
switchport mode access
switchport access VLAN 10
no shutdown

interface fa0/3
switchport mode access
switchport access VLAN 20
no shutdown

interface fa0/4
switchport mode access
switchport access VLAN 30
no shutdown

interface fa0/6
switchport mode access
switchport access VLAN 50
no shutdown

interface fa0/7
switchport mode access
switchport access VLAN 99
no shutdown
exit

SEGURIDAD EN LOS PUERTOS PARA SWITCH

interface fa0/2
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/3
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/4
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/5
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/6
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

===================BARRANQUILLA=====================================

enable
configure terminal
hostname BARRANQUILLA
interface serial 0/0/0
ip address 12.0.0.6 255.255.255.252
clock rate 64000
no shutdown

ENCAPSULACIÓN DE LAS SUBINTERFACES CONFIGURADAS PARA LOS PUERTOS DE

LAS VLANs

configure terminal
interface g0/0
no shutdown
interface g0/0.20
encapsulation dot1Q 20
ip address 172.16.4.193 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/0.10
encapsulation dot1Q 10
ip address 172.16.4.1 255.255.255.128
ip helper-address 200.0.0.2
no shutdown
interface g0/0.50
encapsulation dot1Q 50
ip address 172.16.0.1 255.255.252.0
ip helper-address 200.0.0.2
no shutdown
interface g0/0.30
encapsulation dot1Q 30
ip address 172.16.4.129 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/0.99
encapsulation dot1Q 99
ip address 172.16.5.1 255.255.255.224
ip helper-address 200.0.0.2
no shutdown
exit

CONFIGURACIÓN DEL PROTOCOLO OSPF AREA 0

router ospf 2
network 12.0.0.4 0.0.0.3 area 0
network 172.16.0.0 0.0.3.255 area 0
network 172.16.4.0 0.0.0.127 area 0
network 172.16.4.128 0.0.0.63 area 0
network 172.16.4.192 0.0.0.63 area 0
network 172.16.5.0 0.0.0.31 area 0
network 200.0.0.3 0.0.0.3 area 0 ​( SERVIDOR DNS,FTP, WEB)

===================Switch
BARRANQUILLA=====================================

enable
configure terminal
hostname BARRANQUILLA
VLAN 10
name VLAN_10
VLAN 20
name VLAN_20
VLAN 30
name VLAN_30
VLAN 50
name VLAN_50
VLAN 99
name VLAN_99

CONFIGURACIÓN DE LA INTERFAZ CONECTADA DEL SWITCH AL ROUTER

int fa0/1
switchport mode trunk

=========================
Agregar Interfaces a VLAN
==========================
interface fa0/3
switchport mode access
switchport access VLAN 10
no shutdown

interface fa0/4
switchport mode access
switchport access VLAN 20
no shutdown

interface fa0/2
switchport mode access
switchport access VLAN 30
no shutdown

interface fa0/5
switchport mode access
switchport access VLAN 50
no shutdown

interface fa0/6
switchport mode access
switchport access VLAN 99
no shutdown
exit
interface fa0/3
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/4
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/2
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/5
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/6
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
exit

===================CARTAGENA=====================================

enable
configure terminal
hostname CARTAGENA
interface serial 0/0/0
ip address 12.0.0.2 255.255.255.252
clock rate 64000
no shutdown

ENCAPSULACIÓN DE LAS SUBINTERFACES CONFIGURADAS PARA LOS PUERTOS DE

LAS VLANs

interface g0/1
no shutdown
interface g0/1.20
encapsulation dot1Q 20
ip address 192.168.0.65 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/1.10
encapsulation dot1Q 10
ip address 192.168.0.129 255.255.255.224
ip helper-address 200.0.0.2
no shutdown
interface g0/1.50
encapsulation dot1Q 50
ip address 192.168.0.1 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/1.30
encapsulation dot1Q 30
ip address 192.168.0.161 255.255.255.248
ip helper-address 200.0.0.2
no shutdown
interface g0/1.99
encapsulation dot1Q 99
ip address 192.168.0.169 255.255.255.248
ip helper-address 200.0.0.2
no shutdown
exit

CONFIGURACIÓN DEL PROTOCOLO OSPF AREA 0

router ospf 2
network 12.0.0.0 0.0.0.3 area 0
network 192.168.0.0 0.0.0.63 area 0
network 192.168.0.160 0.0.0.7 area 0
network 192.168.0.128 0.0.0.31 area 0
network 192.168.0.192 0.0.0.63 area 0
network 192.168.0.168 0.0.0.7 area 0
network 200.0.0.8 0.0.0.3 area 0
exit

===================Switch CARTAGENA=====================================

enable
configure terminal
hostname CARTAGENA
VLAN 10
name VLAN_10
VLAN 20
name VLAN_20
VLAN 30
name VLAN_30
VLAN 50
name VLAN_50
VLAN 99
name VLAN_99

CONFIGURACIÓN DE LA INTERFAZ CONECTADA DEL SWITCH AL ROUTER

int fa0/1
switchport mode trunk

=========================
Agregar Interfaces a VLAN
==========================
interface fa0/3
switchport mode access
switchport access VLAN 10
no shutdown

interface fa0/4
switchport mode access
switchport access VLAN 20
no shutdown

interface fa0/2
switchport mode access
switchport access VLAN 30
no shutdown

interface fa0/5
switchport mode access
switchport access VLAN 50
no shutdown

interface fa0/6
switchport mode access
switchport access VLAN 99
no shutdown
exit

interface fa0/3
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/4
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/5
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/2
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/6
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
exit

===================MEDELLIN=====================================

enable
configure terminal
hostname MEDELLIN
interface serial 0/0/0
ip addres 12.0.0.10 255.255.255.252
clock rate 64000
no shutdown
exit

ENCAPSULACIÓN DE LAS SUBINTERFACES CONFIGURADAS PARA LOS PUERTOS DE

LAS VLANs

interface g0/1
no shutdown

interface g0/1.20
encapsulation dot1Q 20
ip address 192.168.1.65 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/1.10
encapsulation dot1Q 10
ip address 192.168.1.129 255.255.255.224
ip helper-address 200.0.0.2
no shutdown
interface g0/1.50
encapsulation dot1Q 50
ip address 192.168.1.1 255.255.255.192
ip helper-address 200.0.0.2
no shutdown
interface g0/1.30
encapsulation dot1Q 30
ip address 192.168.1.161 255.255.255.248
ip helper-address 200.0.0.2
no shutdown
interface g0/1.99
encapsulation dot1Q 99
ip address 192.168.1.169 255.255.255.248
ip helper-address 200.0.0.2
no shutdown
exit

CONFIGURACIÓN DEL PROTOCOLO OSPF ÁREA 0

router ospf 2
network 12.0.0.8 0.0.0.3 area 0
network 192.168.1.0 0.0.0.63 area 0
network 192.168.1.160 0.0.0.7 area 0
network 192.168.1.128 0.0.0.31 area 0
network 192.168.1.192 0.0.0.63 area 0
network 192.168.1.168 0.0.0.7 area 0
exit

ACL (ESTÁNDAR NUMERADA )

En esta primera línea de la lista se especifica la dirección de red a la cual se quiere controlar el
tráfico.

access-list 10 deny 172.16.0.0 0.0.255.255

access-list 10 deny 172.16.4.0 0.0.0.127
access-list 10 deny 172.16.4.128 0.0.0.63
access-list 10 deny 172.16.4.192 0.0.0.63
access-list 10 deny 172.16.5.0 0.0.0.31

En esta segunda línea se coloca la otra sentencia donde permite cualquier otra dirección.
Para que toda las demás sedes se puedan conectar a internet utilizamos el comando ANY
(hace referencia a cualquier otra red que esté conectada al tráfico de medellín), esto a su vez
que permitirá que las demás sedes puedan acceder a la nube

access-list 10 permit any

exit
luego se agrega la lista que creamos a la interface donde indicaremos si se va aplicar la sentencia de
entrada o salida del router.
interface giga 0/1
ip access-group 10 out
exit

NAT

definimos una lista con la IP que queremos que se traduzca, en este caso se ha especificado toda
nuestra red local ​(192.168.0.0)

access-list 10 permit 192.168.1.0 0.0.0.255

definimos el NAT en sí, indicamos la Ip a traducir, que serán las de la lista de IP que hemos creado y a
continuación, le indicamos la IP pública a la que queremos que se traduzcan, en este caso la interfaz
f0/1. Para terminar, al final de la línea le indicamos que vamos hacer sobrecarga de NAT, por lo que
escribimos overload:

ip nat inside source list 10 interface g0/0 overload

definimos la dirección en la que se realizará la traducción. En este caso definimos la entrada en la

interfaz f0/0 que es la que conecta a nuestra red local y la salida en la interfaz f0/1 qué es la que
conecta con el ISP

interface g0/1
ip nat inside
exit
interface g0/0
ip nat outside
exit

===================Switch MEDELLÍN=====================================

enable
configure terminal
hostname MEDELLIN
VLAN 10
name VLAN_10
VLAN 20
name VLAN_20
VLAN 30
name VLAN_30
VLAN 50
name VLAN_50
VLAN 99
name VLAN_99

CONFIGURACIÓN DE LA INTERFAZ CONECTADA DEL SWITCH AL ROUTER

int fa0/1
switchport mode trunk

=========================
Agregar Interfaces a VLAN
==========================
interface fa0/3
switchport mode access
switchport access VLAN 10
no shutdown

interface fa0/4
switchport mode access
switchport access VLAN 20
no shutdown

interface fa0/2
switchport mode access
switchport access VLAN 30
no shutdown

interface fa0/5
switchport mode access
switchport access VLAN 50
no shutdown

interface fa0/6
switchport mode access
switchport access VLAN 99
no shutdown
exit
interface fa0/3
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/4
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/2
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit

interface fa0/5
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
interface fa0/6
switchport mode access
switchport port-security
switchport port-security maximum 1
switchport port-security violation shutdown
switchport port-security mac-address sticky
exit
exit
================================================================
Switch Raíz----- Configuración de STP

Es un protocolo de capa 2 que se ejecuta en bridges y switches. La especificación para

STP​ es IEEE 802.1D. El propósito principal de ​STP​ es garantizar que usted no cree
loops cuando tenga trayectorias redundantes en su red.

El switch con BID más bajo será el puente raíz de la topología de red. Para asignar el valor de
prioridad adecuado al switch designado por el administrador como puente raíz, se debe asociar
el switch con la VLAN administrativa (por defecto VLAN1) ejecutando el siguiente comando en
el modo de configuración global:
​ panning-tree vlan <VLAN> priority <valor>
switch (config)# s
No obstante, el CatOS puede asignar la menor prioridad automáticamente mediante la
ejecución del comando:
switch (config)# s​ panning-tree vlan 1 root primary

También se permite establecer el switch como puerto raíz alternativo:

​ panning-tree vlan <VLAN> root secondary
switch (config)# s

Lo primero que haremos será revisar ambos switches y ver cual de los dos es el switch
raíz. Luego de tener claro ese punto, comenzaremos nuestra configuración del
protocolo STP.

Configuración del switch raíz

Aquí especificaremos que el switch se le dará la ruta primaria o la prioridad.

enable

configure terminal

spanning-tree vlan 1 root primary

exit

exit

Configuración del switch secundario

Vamos a configurar el switch que está conectado al switch raíz, de modo que la ruta
quede como secundaria.
enable

configure terminal

spanning-tree vlan 1 root secondary

exit

exit

EN CASO DE DUDA AQUÍ ESTÁN DOS LINK:

1:​https://sites.google.com/site/redeslocalesyglobales/4-configuracion-de-red/3-configura
cion-de-conmutadores-switches/7-configuracion-del-protocolo-spanning-tree

2:​http://blog.juliopari.com/configuracion-del-protocolo-spanning-treee-n-un-switch-de-ca
pa-2/