Pages

network cisco ccna gns3 certification arteq

network cisco ccna gns3 certification arteq
a network runs through it

Search insearchofthecert

Monday, May 7, 2012

switch lab cont....

1. set up hsrp on this network...



dls1#sh standby brie                                                                      
                     P indicates configured to preempt.                                   
                     |                                                                    
Interface   Grp Prio P State    Active          Standby         Virtual IP                
Vl1              1   110  P Active   local           172.16.1.2        172.16.1.5                
Vl100          1   110  P Active   local           172.16.100.2    172.16.100.5              
Vl200          1   110  P Active   local           172.16.200.2    172.16.200.5              
dls1#

what is the gateway ip?

have i mentioned yet today that i dislike acl's? from a philosophical standpoint, i'm in this business to provide connectivity, not to limit it or take it away... but things as they are, there are countless reasons to inhibit connections. this is the life we have chosen, but i don't have to agree with all of it...

2. create an acl to disallow users from 200 to 100, but 100 can access 200


dls1#sh access-list                                                                       
Extended IP access list 101                                                               
    10 permit tcp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 established               
    20 permit icmp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 echo-reply               
    30 deny ip 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255                              
    40 permit ip any any (166 matches)                                                    
dls1#sh ip int vlan 100                                                                   
Vlan100 is up, line protocol is up                                                        
  Internet address is 172.16.100.1/24                                                     
  Broadcast address is 255.255.255.255                                                    
  Address determined by setup command                                                     
  MTU is 1500 bytes                                                                       
  Helper address is not set                                                               
  Directed broadcast forwarding is disabled                                               
  Multicast reserved groups joined: 224.0.0.2                                             
  Outgoing access list is not set                                                         
  Inbound  access list is 101                                                             
  Proxy ARP is enabled                           

  omitted

dls1#sh run int vlan 200                                                                  
Building configuration...                                                                 
                                                                                          
Current configuration : 158 bytes                                                         
!                                                                                         
interface Vlan200                                                                         
 ip address 172.16.200.1 255.255.255.0                                                    
 ip access-group 101 in                                                                   
 standby 1 ip 172.16.200.5                                                                
 standby 1 priority 110                                                                   
 standby 1 preempt                                                                        
end

3. do the same for dls2

4. set up a host for 200 on als2, and a host for 100 on als1... ensure conectivity for hosts first, then pull the plug... be sure to set the gateway addresses as the hsrp virtual gateways




                   

1 comment:

  1. Is it GNS3 configuration or simulation ? I want to know more about this simulation.
    telephony leased line

    ReplyDelete