· 8 years ago · Oct 02, 2017, 05:46 PM
1
2
3User Access Verification
4
5Username: smartbit
6Password:
7Router#sho run
8Building configuration...
9
10Current configuration : 5688 bytes
11!
12! Last configuration change at 08:02:09 UTC Wed Apr 27 2011
13!
14version 15.1
15service timestamps debug datetime msec
16service timestamps log datetime msec
17service password-encryption
18!
19hostname Router
20!
21boot-start-marker
22boot-end-marker
23!
24!
25enable secret 5 $1$IKkQ$ixgSRo2AHqS9ZSbsq1Lk.0
26!
27no aaa new-model
28!
29no ipv6 cef
30ip source-route
31ip cef
32!
33!
34!
35!
36!
37ip name-server 8.8.8.8
38ip name-server 8.8.4.4
39multilink bundle-name authenticated
40!
41crypto pki token default removal timeout 0
42!
43!
44license udi pid CISCO1941/K9 sn FGL150428AM
45!
46!
47username smartbit privilege 15 secret 5 $1$KGJ4$ILwAx8Tvux2Cc97zhcvDS1
48!
49!
50!
51!
52!
53!
54interface GigabitEthernet0/0
55 ip address 192.168.10.1 255.255.255.0
56 ip virtual-reassembly in
57 duplex auto
58 speed auto
59!
60interface GigabitEthernet0/0.1
61 encapsulation dot1Q 11
62 ip address 192.168.11.1 255.255.255.0
63 ip access-group vlan11 in
64 ip nat inside
65 ip virtual-reassembly in
66!
67interface GigabitEthernet0/0.2
68 encapsulation dot1Q 12
69 ip address 192.168.12.1 255.255.255.0
70 ip access-group vlan12 in
71 ip nat inside
72 ip virtual-reassembly in
73!
74interface GigabitEthernet0/0.3
75 encapsulation dot1Q 13
76 ip address 192.168.13.1 255.255.255.0
77 ip access-group vlan13 in
78 ip nat inside
79 ip virtual-reassembly in
80!
81interface GigabitEthernet0/0.4
82 encapsulation dot1Q 14
83 ip address 192.168.14.1 255.255.255.0
84 ip access-group vlan14 in
85 ip nat inside
86 ip virtual-reassembly in
87!
88interface GigabitEthernet0/0.5
89 encapsulation dot1Q 15
90 ip address 192.168.15.1 255.255.255.0
91 ip access-group vlan15 in
92 ip nat inside
93 ip virtual-reassembly in
94!
95interface GigabitEthernet0/0.6
96 encapsulation dot1Q 16
97 ip address 192.168.16.1 255.255.255.0
98 ip access-group vlan16 in
99 ip nat inside
100 ip virtual-reassembly in
101!
102interface GigabitEthernet0/0.7
103 encapsulation dot1Q 17
104 ip address 192.168.17.1 255.255.255.0
105 ip access-group vlan17 in
106 ip nat inside
107 ip virtual-reassembly in
108!
109interface GigabitEthernet0/0.8
110 encapsulation dot1Q 18
111 ip address 192.168.18.1 255.255.255.0
112 ip access-group vlan18 in
113 ip nat inside
114 ip virtual-reassembly in
115!
116interface GigabitEthernet0/0.9
117 encapsulation dot1Q 19
118 ip address 192.168.19.1 255.255.255.0
119 ip access-group vlan19 in
120 ip nat inside
121 ip virtual-reassembly in
122!
123interface GigabitEthernet0/1
124 ip address 192.168.1.250 255.255.255.0
125 ip access-group inet in
126 ip nat outside
127 ip virtual-reassembly in
128 duplex auto
129 speed auto
130!
131ip default-gateway 192.168.1.251
132no ip classless
133ip forward-protocol nd
134!
135no ip http server
136no ip http secure-server
137!
138ip nat inside source list 10 interface GigabitEthernet0/1 overload
139ip route 0.0.0.0 0.0.0.0 192.168.1.251
140!
141ip access-list extended inet
142 permit ip any host 192.168.11.11
143 permit ip any host 192.168.11.21
144 permit ip any host 192.168.11.22
145 permit ip any host 192.168.12.21
146 permit ip any host 192.168.13.12
147 permit ip any host 192.168.14.11
148 permit ip any host 192.168.15.12
149 permit ip any host 192.168.11.41
150 permit ip any host 192.168.17.2
151 permit ip any host 192.168.11.2
152 permit ip any host 192.168.13.22
153 permit ip any host 192.168.12.12
154 permit ip any host 192.168.11.33
155 permit ip any host 192.168.14.12
156 permit ip any host 192.168.13.11
157ip access-list extended vlan11
158 deny ip 192.168.11.0 0.0.0.255 192.168.12.0 0.0.0.255
159 deny ip 192.168.11.0 0.0.0.255 192.168.13.0 0.0.0.255
160 deny ip 192.168.11.0 0.0.0.255 192.168.14.0 0.0.0.255
161 deny ip 192.168.11.0 0.0.0.255 192.168.15.0 0.0.0.255
162 deny ip 192.168.11.0 0.0.0.255 192.168.16.0 0.0.0.255
163 permit ip 192.168.11.0 0.0.0.255 any
164ip access-list extended vlan12
165 deny ip 192.168.12.0 0.0.0.255 192.168.11.0 0.0.0.255
166 deny ip 192.168.12.0 0.0.0.255 192.168.13.0 0.0.0.255
167 deny ip 192.168.12.0 0.0.0.255 192.168.14.0 0.0.0.255
168 deny ip 192.168.12.0 0.0.0.255 192.168.15.0 0.0.0.255
169 deny ip 192.168.12.0 0.0.0.255 192.168.16.0 0.0.0.255
170 permit ip 192.168.12.0 0.0.0.255 any
171ip access-list extended vlan13
172 deny ip 192.168.13.0 0.0.0.255 192.168.11.0 0.0.0.255
173 deny ip 192.168.13.0 0.0.0.255 192.168.12.0 0.0.0.255
174 deny ip 192.168.13.0 0.0.0.255 192.168.14.0 0.0.0.255
175 deny ip 192.168.13.0 0.0.0.255 192.168.15.0 0.0.0.255
176 permit ip host 192.168.13.21 host 192.168.16.2
177 permit ip host 192.168.13.21 host 192.168.16.3
178 deny ip 192.168.13.0 0.0.0.255 192.168.16.0 0.0.0.255
179 permit ip 192.168.13.0 0.0.0.255 any
180ip access-list extended vlan14
181 deny ip 192.168.14.0 0.0.0.255 192.168.11.0 0.0.0.255
182 deny ip 192.168.14.0 0.0.0.255 192.168.12.0 0.0.0.255
183 deny ip 192.168.14.0 0.0.0.255 192.168.13.0 0.0.0.255
184 deny ip 192.168.14.0 0.0.0.255 192.168.15.0 0.0.0.255
185 deny ip 192.168.14.0 0.0.0.255 192.168.16.0 0.0.0.255
186 permit ip 192.168.14.0 0.0.0.255 any
187ip access-list extended vlan15
188 deny ip 192.168.15.0 0.0.0.255 192.168.11.0 0.0.0.255
189 deny ip 192.168.15.0 0.0.0.255 192.168.12.0 0.0.0.255
190 deny ip 192.168.15.0 0.0.0.255 192.168.13.0 0.0.0.255
191 deny ip 192.168.15.0 0.0.0.255 192.168.14.0 0.0.0.255
192 deny ip 192.168.15.0 0.0.0.255 192.168.16.0 0.0.0.255
193 permit ip 192.168.15.0 0.0.0.255 any
194ip access-list extended vlan16
195 deny ip 192.168.16.0 0.0.0.255 192.168.11.0 0.0.0.255
196 deny ip 192.168.16.0 0.0.0.255 192.168.12.0 0.0.0.255
197 deny ip 192.168.16.0 0.0.0.255 192.168.14.0 0.0.0.255
198 deny ip 192.168.16.0 0.0.0.255 192.168.15.0 0.0.0.255
199 permit ip host 192.168.16.2 host 192.168.13.21
200 permit ip host 192.168.16.3 host 192.168.13.21
201 deny ip 192.168.16.0 0.0.0.255 192.168.13.0 0.0.0.255
202 permit ip 192.168.16.0 0.0.0.255 any
203ip access-list extended vlan17
204 permit ip any any
205!
206!
207!
208!
209control-plane
210!
211!
212!
213line con 0
214line aux 0
215line vty 0 4
216 password 7 121702180004210532392B3D273030
217 login local
218 transport input telnet ssh
219!
220scheduler allocate 20000 1000
221end