El presente documento tiene recomendaciones que les

ayuda con la idea de que deben de aplicar o tener en

cuenta en la comunicación de una red.
En los ejercicios se tienen ya la dirección Ip que se requiere a menos que soliciten adicionar más redes o conocer la
direcciones de cada una de la red deben de hacer un Subneteo (https://www.seaccna.com/calculo-de-subredes-ipv4/)

Calculadoras:
https://www.aprendaredes.com/cgi-bin/ipcalc/ipcalc_cgi
https://www.calculadora-redes.com/

Configurar VLAN
https://www.mikroways.net/2009/08/05/configuracion-de-vlans-con-cisco/
https://www.tadoinformatica.com/2016/09/cisco-ccna-como-crear-y-configurar.html

Ahora como en el desarrollo del curso cada uno de usted tuvo la posibilidad de hacer los ejercicios prácticos, donde se
vieron temáticas que son necesarias para esta actividad fina de practica de habilidades, por ello de recomiendan algunas
guías donde se tienen varias indicaciones que les puede ser útil para entender que comandos aplicar.

Actividades realizadas en el desarrollo del Curso

Unidad 1 6.4.3.3 Packet Tracer - Connect a Router to a LAN Instructions IG
Unidad 1 2.2.3.3 Packet Tracer - Configuring Initial Switch Settings Instructions IG
Unidad 2 9.1.4.6 Packet Tracer - Subnetting Scenario 1 Instructions IG
Unidad 2 9.1.4.7 Packet Tracer - Subnetting Scenario 2 Instructions IG
Unidad 3 3.2.2.5 Lab - Configuring VLANs and Trunking
Unidad 3 3.3.2.2 Lab - Implementing VLAN Security
Unidad 3 5.1.3.6 Packet Tracer - Configuring Router-on-a-Stick Inter-VLAN Routing
Unidad 3 6.5.1.3 Packet Tracer - Layer 2 VLAN Security_Instructor
Unidad 4 7.3.2.4 Lab - Configuring Basic RIPv2 and RIPng
Unidad 4 8.2.4.5 Lab - Configuring Basic Single-Area OSPFv2
Unidad 4 8.3.3.6 Lab - Configuring Basic Single-Area OSPFv3
Unidad 4 11.2.2.6 Lab - Configuring Dynamic and Static NAT
Unidad 4 11.2.3.7 Lab - Configuring NAT Pool Overload and PAT
Unidad 4 4.4.1.2 Packet Tracer - Configure IP ACLs to Mitigate Attacks
Unidad 4 9.2.1.10 Packet Tracer Configuring Standard ACLs
Unidad 4 9.2.1.11 Packet Tracer - Configuring Named Standard ACLs
Unidad 4 9.2.3.3 Packet Tracer - Configuring an ACL on VTY Lines
Unidad 4 9.5.2.6 Packet Tracer - Configuring IPv6 ACLs
 escenario 1
Se registra unas configuraciones de Routers que les puede facilitar el desarrollo del , aunque
falta tener en cuenta las VLAN, una gran parte de los comandos de estos router que consideran a continuación les pude
ser muy útil, tengan muy en cuenta que las direcciones Ip ya las tiene en la guía de trabajo, faltaría identificar algunas
pero la base ya está. Por favor leer cada pregunta, identifique el comando que se puede considerar o que estén
solicitando, identiquillo consúltelo y aplíquelo.

Router (Medellin)
Config terminal
Hostname XXXXXX
Interface fastEternet 0/0
Ip address 172.16.X.X que mascara 255.255.
Duplex Auto
Speed auto

Interface serial 0/0

Ip address 172.16.X.X que mascara 255.255.

Router eiqrp 200

Network 172.16.0.0
No auto-summary

Router (Cartagena)
Config terminal
Hostname XXXXXXXX
Interface fastEternet 0/0
Ip address 172.16.X.192 que mascara 255.255.
Duplex Auto
Speed auto

Interface fastEternet 0/1

Ip address 172.16.X.1 que mascara 255.255.
Duplex Auto
Speed auto

Router eiqrp 200

Network 172.16.0.0
No auto-summary

Router (ISP)
Config terminal
Hostname XXXXXXXX

Interface Loopback0
Ip address 10.10.10.1 255.255.255.0

Interface serial 0/0

Ip address 200.1.1.2 255.255..255.252
Clock rate 64000

Ip classless
Ip route 192.18.1.0 255.255.255.0 Serial 0/0
Ip route 172.16.0.0 255.255.0.0

Router (Neiva)
Config terminal
Hostname XXXXXXXX

Interface Loopback0
Ip address 205.5.5.5 255.255.255.255

Interface fastEternet 0/0

Ip address 192.168.X.3 que mascara 255.255.255.
Duplex Auto
Speed auto

Interface fastEternet 0/1

Ip address 192.168.X.65 que mascara 255.255.255.
Duplex Auto
Speed auto

Router eiqrp 1
Log-adjacency-changes
Network 192.168.1.0 0.0.031 area 0
Network 192.168.1.64 0.0.031 area 0

Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname BOGOTA
BOGOTA(config)#interface fastethernet 0/0
BOGOTA(config-if)#ip address 192.168.1.1 255.255.255.224
BOGOTA(config-if)#no shutdown
BOGOTA(config-if)#exit
BOGOTA(config)#interface serial 0/0
BOGOTA(config-if)#ip address 192.168.1.98 255.255.255.224
BOGOTA(config-if)#no shutdown
BOGOTA(config-if)#exit
BOGOTA(config)#interface serial0/1
BOGOTA(config-if)#ip address 192.168.1.130 255.255.255.224
BOGOTA(config-if)#no shutdown
BOGOTA(config-if)#exit
BOGOTA(config)#end

BOGOTA>enable
BOGOTA#config terminal
BOGOTA(config)#enable secret cisco
BOGOTA(config)#line consol 0
BOGOTA(config-line)#password cisco
BOGOTA(config-line)#login
BOGOTA(config-line)#exit

Router (ibague)
Config terminal
Hostname XXXXXXXX

Interface Loopback0
Ip address 205.5.5.5 255.255.255.255

Interface fastEternet 0/0

Ip address 192.168.X.2 que mascara 255.255.255.
Ip ospf priority 200
Duplex Auto
Speed auto

Interface fastEternet 0/1

Ip address 192.168.X.33 que mascara 255.255.255.
Duplex Auto
Speed auto

Router eiqrp 1
Log-adjacency-changes
Network 192.168.1.0 0.0.031 area 0
Network 192.168.1.32 0.0.031 area 0

Router (Bogota)
Config terminal
Hostname XXXXXXXX
Interface Loopback0
Ip address 203.3.3.3 255.255.255.0

Interface fastEternet 0/0

Ip address 192.168.1.1 que mascara 255.255.255.224
Ip ospf priority 255
Ip nat inside
Duplex Auto
Speed auto

Interface serial 0/0

Ip address 172.16.1.X 255.255.255.252
Ip nat inside
Clock rate 64000

Interface serial 0/1

Ip address 200.1.1.X 255.255.255.252
Ip nat uotside

Interface serial 0/2

Ip address 172.16.2.X 255.255.255.252
Ip nat inside
Clock rate 64000

Router eiqrp 200

Redistribute ospf 1 metric 64 1 255 1 1500
Redistribute static

Network 172.16.2.0 0.0.0.3

Network 172.16.2.4 0.0.0.3
No auto-sumary

Router ospf 1
Log-adjacency-changes
Redistribute eigrp 200
Network 192.168.1.0 0.0.0.31 area 0
Defauld-information originate

Ip nat inside source list 30 interface serial 0/0 overload

Ip classless
Ip route 0.0.0.0 0.0.0.0 serial 0/1

Access-list 30 permit 192.168.X.0 0.0.0.255

Access-list 30 permit 172.16.0.0 0.0.0.255
Para elescenario 2 es posible que las configuraciones que se comparten de los routers se mas cercana a lo
que requiere, revisen bien las direcciones Ip. Las Vlan deben de revisar bien para que las configuren, no se está
estableciendo solo configuración para los routers

Configurar VLAN
https://www.mikroways.net/2009/08/05/configuracion-de-vlans-con-cisco/
https://www.tadoinformatica.com/2016/09/cisco-ccna-como-crear-y-configurar.html

POSIBLE configuración del escenario 2.

Router (Bucaramanga)
Config terminal
Hostname XXXXXXXX

Login block-for 240 attempts 4 within 120

Enable secret 5*****

Aaa new-model
Aaa authentication logion LOCAL_AUTH local

Username TUNJA privilege 7 password 0 network

Username Ubucaramanga password 0 Ubucaramanga
Username Utunja password 0 Utunja
Username Ucundinamarca password 0 Ucundinamarca
Interface fastEternet 0/0
No ip address
Duplex Auto
Speed auto

Interface fastEternet 0/0.1

Encapsulation dot1Q 1 native
Ip address 172.31.2.1 255.255.255.248

Interface fastEternet 0/0.10

Encapsulation dot1Q 10
Ip address 172.31.0.X 255.255.255.192
Ip helper-address 172.31.2.34
Ip Access-group 101 in

Interface fastEternet 0/0.30

Encapsulation dot1Q 30
Ip address 172.31.0.X 255.255.255.192
Ip helper-address 172.31.2.34
Ip Access-group 103 in

Interface serial 0/0/0

Ip address 172.31.2.33 255.255.255.252
Ip ospf message-digest-key 1 md5 7 network

SWITCH – CUNDINAMARCA

Switch(config)#no ip domain-lookup
Switch(config)#hostname SC
SC(config)#enable password class
SC(config)#Line console 0
SC(config-line)#Password cisco
SC(config-line)#login
SC(config-line)#Line vty 0 15
SC(config-line)#Password cisco
SC(config-line)#login
SC(config-line)#exit
SC(config)#Line console 0
SC(config-line)#Logging synchronous
SC(config-line)#interface VLAN1
SC(config-if)#Ip address 172.31.2.X 255.255.255.248
SC(config-if)#Ip default-gateway 172.31.2.1
SC(config-if-range)#Int range fa0/X-X
SC(config-if-range)#shut
SC(config-if-range)#exit
SC(config)#interface VLAN1
SC(config-if)#no shutdown
SC(config-if)#exit
SC(config)#exit

Router ospf 1
Log-adjacency-changes
Área 0 authentication message-digest
Network 172.31.0.X 0.0.0.63 area 0
Network 172.31.0.X 0.0.0.63 area 0
Network 172.31.2.X 0.0.0.7 area 0
Network 172.31.2.X 0.0.0.7 area 0

Ip classless

Access-list 101 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Access-list 101 permit ip 172.31.X 0.0.0.63 172.31.0.128 0.0.0.63
Access-list 101 permit ip 172.31.X 0.0.0.63 172.31.1.0 0.0.0.63
Access-list 103 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Access-list 103 deny ip 172.31.0.64 0.0.0.63 172.31.0.0 0.0.255.255
Access-list 103 permit ip 172.31.0.64 0.0.0.63 any

Line 0
Exec-timeout 5 0
Logging synchronous
Login
Login authentication LOCAL_AUTH
Line vty 0 4
Exec-timeout 5 0
Login
Login authentication LOCAL_AUTH
End

ROUTER TUNJA

Config terminal
Hostname XXXXXXXX
Login block-for 240 attempts 4 within 120
Enable secret 5*****
Aaa new-model
Aaa authentication logion LOCAL_AUTH local

Username TUNJA privilege 7 password 0 network

Username Ubucaramanga password 0 Ubucaramanga
Username Utunja password 0 Utunja
Username Ucundinamarca password 0 Ucundinamarca
Interface fastEternet 0/0
ip address 209.17.220.220 255.255.255.0
ip nat outside
Duplex Auto
Speed auto

Interface fastEternet 0/1

No ip address
ip nat outside
Duplex Auto
Speed auto

Interface fastEternet 0/1.1

Encapsulation dot1Q 1 native
Ip address 172.31.2.9 255.255.255.248

Interface fastEternet 0/1.20

Encapsulation dot1Q 20
Ip address 172.31.0.129 255.255.255.192
Ip Access-group 102 in

Interface fastEternet 0/1.30

Encapsulation dot1Q 30
Ip address 172.31.0.X 255.255.255.192
Ip Access-group 103 in

Interface serial 0/0/0

Ip address 172.31.2.34 255.255.255.252
Ip ospf message-digest-key 1 md5 7 network
Ip nat inside
Clock rate 64000

Interface serial 0/0/1

Ip address 172.31.2.38 255.255.255.252
Ip ospf message-digest-key 1 md5 7 network
Ip nat inside
Clock rate 64000

Interface Vlan1
No ip address
shutdown

SWITCH – TUNJA

Switch(config)#no ip domain-lookup
Switch(config)#hostname ST
ST(config)#enable password class
ST(config)#Line console 0
ST(config-line)#Password cisco
ST(config-line)#login
ST(config-line)#Line vty 0 15
ST(config-line)#Password cisco
ST(config-line)#login
ST(config-line)#exit
ST(config)#Line console 0
ST(config-line)#Logging synchronous
ST(config-line)#interface VLAN1
ST(config-if)#Ip address 172.31.2.X 255.255.255.248
ST(config-if)#Ip default-gateway 172.31.2.1
ST(config-if-range)#Int range fa0/X-X
ST(config-if-range)#shut
ST(config-if-range)#exit
ST(config)#interface VLAN1
ST(config-if)#no shutdown
ST(config-if)#exit
ST(config)#exit

Asigne el puerto TRONCAL

ST(config)#interface f0/X
ST(config-if)#switchport mode trunk

Asigne el puerto de acceso para la PC

ST(config-if)#interface f0/X
ST(config-if)#switchport mode access
ST(config-if)#switchport access VLAN1
ST(config-if)#exit
ST(config)#exit

Router ospf 1
Log-adjacency-changes
Área 0 authentication message-digest
Network 172.31.0.128 0.0.0.63 area 0
Network 172.31.0.19X 0.0.0.63 area 0
Network 172.31.2.8 0.0.0.7 area 0
Network 172.31.2.32 0.0.0.7 area 0
Defaul-information originate

Ip nat inside source list 20 interfase fastEthernet 0/0 overload

Ip nat inside source static 172.31.2.26 209.17.220.10
Ip classless
Ip route 0.0.0.0 0.0.0.0 FastEthernet 0/0
Access-list 20 permit 172.31.0.0 0.0.31.255
Access-list 102 permit ip 172.31.0.128 0.0.0.63 172.31.0.0 0.0.0.63
Access-list 102 permit ip 172.31.0.128 0.0.0.63 172.31.1.0 0.0.0.63
Access-list 103 permit tcp 172.31.0.192 0.0.0.63 any eq www
Access-list 103 permit tcp 172.31.0.192 0.0.0.63 any eq ftp

Ip dhcp excluded-address 172.31.1.65 172.31.1.70

Ip dhcp excluded-address 192.31.1.1 172.31.1.5
Ip dhcp excluded-address 172.31.0.1 172.31.0.5
Ip dhcp excluded-address 172.31.065 172.31.0.70

Ip dchp pool bucaramanga-30

Network 172.31.0.64 255.255.255.192
Defaul_router 172.31.0.65
Ip dchp Pool t-10
Network 172.31.1.0 255.255.255.192
Defaul_router 172.31.1.1
Ip dchp Pool t-20
Network 172.31.1.64 255.255.255.192
Defaul_router 172.31.1.65
Ip dchp Pool bucaramanga-10
Network 172.31.0.0 255.255.255.192
Defaul_router 172.31.0.1

Line 0
Exec-timeout 5 0
Logging synchronous
Login
Login authentication LOCAL_AUTH
Line vty 0 4
Exec-timeout 5 0
Login
Login authentication LOCAL_AUTH
End

NAT EN EL ROUTER TUNJA

Ip nat inside source static 172.31.2.26 209.17.220.10

Nat de sobrecarga (PAT)
Ip nat inside source list 20 interfaces fastEthernet0/0 overload
Acces-list 20 permit 172.31.0.0 0.0.31.255

Router Cundinamarca

Config terminal
Hostname XXXXXXXX
Login block-for 240 attempts 4 within 120
Enable secret 5*****
Aaa new-model
Aaa authentication logion LOCAL_AUTH local

Username Ubucaramanga password 0 Ubucaramanga

Username Utunja password 0 Utunja
Username Ucundinamarca password 0 Ucundinamarca

Interface fastEternet 0/0

No ip address
Duplex Auto
Speed auto

Interface fastEternet 0/0.1

Encapsulation dot1Q 1 native
Ip address 172.31.2.17 255.255.255.248

Interface fastEternet 0/0.10

Encapsulation dot1Q 10
Ip address 172.31.1.65 255.255.255.192
Ip helper-address 172.31.2.38
Ip Access-group 101 in

Interface fastEternet 0/1.20

Encapsulation dot1Q 20
Ip address 172.31.1.1 255.255.255.192
Ip helper-address 172.31.2.38
Ip Access-group 102 in

Interface fastEternet 0/0.88

Encapsulation dot1Q 88 native
Ip address 172.31.2.25 255.255.255.248

Interface serial 0/0/0

Ip address 172.31.2.37 255.255.255.252
Ip ospf message-digest-key 1 md5 7 network
Router ospf 1
Area 0 authentication messag-digest

SWITCH – BUCARAMANGA

Switch(config)#no ip domain-lookup
Switch(config)#hostname SB
SB(config)#enable password class
SB(config)#Line console 0
SB(config-line)#Password cisco
SB(config-line)#login
SB(config-line)#Line vty 0 15
SB(config-line)#Password cisco
SB(config-line)#login
SB(config-line)#exit
SB(config)#Line console 0
SB(config-line)#Logging synchronous
SB(config-line)#interface VLAN1
SB(config-if)#Ip address 172.31.2.X 255.255.255.248
SB(config-if)#Ip default-gateway 172.31.2.1
SB(config-if-range)#Int range fa0/X-X
SB(config-if-range)#shut
SB(config-if-range)#exit
SB(config)#interface VLAN1
SB(config-if)#no shutdown
SB(config-if)#exit
SB(config)#exit

Asigne el puerto TRONCAL

SB(config)#interface f0/X
SB(config-if)#switchport mode trunk

Asigne el puerto de acceso para la PC

SB(config-if)#interface f0/X
SB(config-if)#switchport mode access
SB(config-if)#switchport access VLAN1
SB(config-if)#exit
SB(config)#exit

Router ospf 1
Log-adjacency-changes
Área 0 authentication message-digest
Network 172.31.1.0 0.0.0.63 area 0
Network 172.31.1.64 0.0.0.63 area 0
Network 172.31.2.16 0.0.0.7 area 0
Network 172.31.2.36 0.0.0.3 area 0
Network 172.31.2.24 0.0.0.7 area 0

Ip classless

Access-list 102 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Access-list 102 permit ip 172.31.1.0 0.0.0.63 172.31.0.128 0.0.0.63
Access-list 102 permit ip 172.31.1.0 0.0.0.63 172.31.0.0 0.0.0.63
Access-list 101 permit udp host 0.0.0.0 eq bootpc host 255.255.255.255 eq bootps
Access-list 101 deny ip 172.31.1.64 0.0.0.63 172.31.0.0 0.0.255.255
Access-list 101 permit ip 172.31.1.64 0.0.0.63 any
Line 0
Exec-timeout 6 0
Logging synchronous
Login
Login authentication LOCAL_AUTH
Line vty 0 4
Exec-timeout 6 0
Login
Login authentication LOCAL_AUTH
Line vty 5
Exec-timeout 6 0
login
End

Router ISP

Interface fastEternet 0/0

ip address 209.17.220.254 255.255.255.0
Duplex Auto
Speed auto

Ip classless
Ip route 172.31.0.0 255.255.224.0 209.17.220.200