Scribd Logo
Upload

Welcome to Scribd!

  • CN

    Uploaded by

    John Leonard Paual
    15 views2 pages
    This document contains configuration snippets for three routers: HQ, Branch, and Customer. The HQ router is configured for OSPF routing, BGP peering, and access control lists for HTTP and IPv6 traffic. The Branch router establishes a tunnel to the HQ router for OSPF routing. The Customer router applies an access list to its VTY lines to restrict administrative access.

    Original Description:

    Original Title

    cn.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    This document contains configuration snippets for three routers: HQ, Branch, and Customer. The HQ router is configured for OSPF routing, BGP peering, and access control lists for HTTP and IPv6 traffic. The Branch router establishes a tunnel to the HQ router for OSPF routing. The Customer router applies an access list to its VTY lines to restrict administrative access.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    15 views2 pages

    CN

    Uploaded by

    John Leonard Paual
    This document contains configuration snippets for three routers: HQ, Branch, and Customer. The HQ router is configured for OSPF routing, BGP peering, and access control lists for HTTP and IPv6 traffic. The Branch router establishes a tunnel to the HQ router for OSPF routing. The Customer router applies an access list to its VTY lines to restrict administrative access.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    Download as txt, pdf, or txt
    of 2

    On Router: HQ � Main � Corp (Note: Username & Password for CHAP authentication)

    en
    conf ter
    username ISP1 password cisco123 (or Cisco or cisco321)
    int s0/0/0
    encapsulation ppp
    ppp authentication chap
    exit

    interface tunnel 0
    ip address 172.16.1.1 255.255.255.252
    tunnel source s0/0/0
    tunnel destination 209.165.200.225
    exit

    router ospf 1
    network 192.168.2.0 0.0.0.255 area 0
    network 172.16.1.0 0.0.0.3 area 0
    exit

    router bgp 65020


    network 209.165.202.128 mask 255.255.255.224
    neighbor 209.165.200.230 remote-as 65001
    exit

    Access-list 1 permit 192.168.2.0 0.0.0.255

    ip access-list extended HTTP_ACCESS


    permit tcp 209.165.200.224 0.0.0.3 host 209.165.202.158 eq 80
    permit tcp 209.165.200.236 0.0.0.3 host 209.165.202.158 eq 80
    permit ip 192.168.2.0 0.0.0.255 any
    permit icmp any any echo-reply
    deny ip any any

    int g0/1
    ip access-group HTTP_ACCESS out
    exit

    ipv6 access-list HTTP6_ACCESS


    permit tcp 2001:DB8:ACAD::/63 host 2001:DB8:ACAD:B::158 eq 80
    permit tcp 2001:DB8:ACAD:3::/64 host 2001:DB8:ACAD:B::158 eq 80
    permit ipv6 2001:DB8:ACAD:2::/64 any
    permit icmp any any echo-reply
    deny ipv6 any any

    interface g0/1
    ipv6 traffic-filter HTTP6_ACCESS out

    On Router: Branch � Remote � Branch1 (Note: Username & Password for CHAP
    authentication)
    en
    conf ter
    username ISP1 password cisco123 (or Cisco or cisco321)
    int s0/0/0
    encapsulation ppp
    ppp authentication chap
    exit
    interface tunnel 0
    ip address 172.16.1.2 255.255.255.252
    tunnel source s0/0/0
    tunnel destination 209.165.200.229
    exit

    router ospf 1
    network 192.168.0.0 0.0.1.255 area 0
    network 172.16.1.0 0.0.0.3 area 0
    exit

    Access-list 1 permit 192.168.0.0 0.0.1.255

    On Router: Customer � Other � Branch2


    en
    conf ter
    Access-list 1 permit 192.168.3.0 0.0.0.255

    ip access-list standard VTY_ADMIN


    permit 192.168.3.0 0.0.0.255
    permit 209.165.200.225 0.0.0.3
    deny any
    Line vty 0 4
    Access-class VTY_ADMIN in

    You might also like