1. set up hsrp on this network...
dls1#sh standby brie
P indicates configured to preempt.
|
Interface Grp Prio P State Active Standby Virtual IP
Vl1 1 110 P Active local 172.16.1.2 172.16.1.5
Vl100 1 110 P Active local 172.16.100.2 172.16.100.5
Vl200 1 110 P Active local 172.16.200.2 172.16.200.5
dls1#
what is the gateway ip?
have i mentioned yet today that i dislike acl's? from a philosophical standpoint, i'm in this business to provide connectivity, not to limit it or take it away... but things as they are, there are countless reasons to inhibit connections. this is the life we have chosen, but i don't have to agree with all of it...
2. create an acl to disallow users from 200 to 100, but 100 can access 200
dls1#sh access-list
Extended IP access list 101
10 permit tcp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 established
20 permit icmp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 echo-reply
30 deny ip 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255
40 permit ip any any (166 matches)
dls1#sh ip int vlan 100
Vlan100 is up, line protocol is up
Internet address is 172.16.100.1/24
Broadcast address is 255.255.255.255
Address determined by setup command
MTU is 1500 bytes
Helper address is not set
Directed broadcast forwarding is disabled
Multicast reserved groups joined: 224.0.0.2
Outgoing access list is not set
Inbound access list is 101
Proxy ARP is enabled
omitted
dls1#sh run int vlan 200
Building configuration...
Current configuration : 158 bytes
!
interface Vlan200
ip address 172.16.200.1 255.255.255.0
ip access-group 101 in
standby 1 ip 172.16.200.5
standby 1 priority 110
standby 1 preempt
end
3. do the same for dls2
4. set up a host for 200 on als2, and a host for 100 on als1... ensure conectivity for hosts first, then pull the plug... be sure to set the gateway addresses as the hsrp virtual gateways
Is it GNS3 configuration or simulation ? I want to know more about this simulation.
ReplyDeletetelephony leased line