Scripts Acl
Scripts Acl
18 ######################
--R2 int serial0/0/0 -----
enable
conf t
access-list 1 deny 192.168.11.0 0.0.0.255
access-list 1 permit any
interface gigabitethernet 0/0
ip access-group 1 out
ftp 172.22.34.62
quit
enable
conf t
ip access-list extended HTTP_ONLY
10 permit tcp 172.22.34.96 0.0.0.15 host 172.22.34.62 eq www
20 permit icmp 172.22.34.96 0.0.0.15 host 172.22.34.62
interface gigabitEthernet 0/1
ip access-group HTTP_ONLY in
###################################################################################
################
###################################################################################
##########
############## NAT LAB 6.5.6 ######################
------ R2 nat ESTATICA --------------------
enable
conf t
ip nat inside source static 172.16.10.1 209.165.200.229
interface s0/0/0
ip nat outside
interface s0/0/1
ip nat inside
enable
conf t
ip nat pool ANY_POOL_NAME 209.165.200.229 209.165.200.230 netmask 255.255.255.252
access-list 1 permit 172.16.0.0 0.0.255.255
Ip nat inside source list 1 pool ANY_POOL_NAME
interface s0/0/0
ip nat outside
interface s0/0/1
ip nat inside
**ROUTER1**
enable
configure terminal
interface GigabitEthernet0/0/0
ip nat inside
interface GigabitEthernet0/0/1
ip nat inside
interface Serial0/1/0
ip nat outside
ip nat pool DYNAMIC 209.165.200.233 209.165.200.234 netmask 255.255.255.252
ip nat inside source list 1 pool DYNAMIC overload
access-list 1 permit 172.16.0.0 0.0.255.255
**ROUTER 2**
enable
configure terminal
interface GigabitEthernet0/0/0
ip nat inside
interface GigabitEthernet0/0/1
ip nat inside
interface Serial0/1/1
ip nat outside
ip nat inside source list 2 interface Serial0/1/1 overload
access-list 2 permit 172.17.0.0 0.0.255.255
end
R3
enable
config t
interface g0/0
standby version 2
standby 1 ip 192.168.1.254
end
sw1
enable
config t
ip default-gateway 192.168.1.254
end
sw3
enable
config t
ip default-gateway 192.168.1.254
end