############## ACL ESTANDAR NUMERADA LAB 5.
18 ######################
--R2 int serial0/0/0 -----
enable
conf t
access-list 1 deny 192.168.11.0 0.0.0.255
access-list 1 permit any
interface gigabitethernet 0/0
ip access-group 1 out
--R3 int g0/0 -----
enable
conf t
access-list 1 deny 192.168.10.0 0.0.0.255
access-list 1 permit any
interface g 0/0
ip access-group 1 out
########### ACL ESTANDAR NOMBRADA LAB 5.19 ########################
--R1 int fast 0/1 -----
enable
conf t
ip access-list standard File_Server_Restrictions
permit host 192.168.20.4
permit host 192.168.100.100
deny any
interface FastEthernet 0/1
ip access-group File_Server_Restrictions out
############## ACL EXTENDIDA LAB 5.4.12 ######################
------ PERMITIMOS PING Y FTP DESDE LA RED 172.22.34.64/27 --------------------
enable
conf t
access-list 100 permit tcp 172.22.34.64 0.0.0.31 host 172.22.34.62 eq ftp
access-list 100 permit icmp 172.22.34.64 0.0.0.31 host 172.22.34.62
interface gigabitEthernet 0/0
ip access-group 100 in
ftp 172.22.34.62
quit
enable
conf t
ip access-list extended HTTP_ONLY
10 permit tcp 172.22.34.96 0.0.0.15 host 172.22.34.62 eq www
20 permit icmp 172.22.34.96 0.0.0.15 host 172.22.34.62
interface gigabitEthernet 0/1
ip access-group HTTP_ONLY in
###################################################################################
################
###################################################################################
##########
############## NAT LAB 6.5.6 ######################
------ R2 nat ESTATICA --------------------
enable
conf t
ip nat inside source static 172.16.10.1 209.165.200.229
interface s0/0/0
ip nat outside
interface s0/0/1
ip nat inside
------ R2 nat dinamica --------------------
enable
conf t
ip nat pool ANY_POOL_NAME 209.165.200.229 209.165.200.230 netmask 255.255.255.252
access-list 1 permit 172.16.0.0 0.0.255.255
Ip nat inside source list 1 pool ANY_POOL_NAME
interface s0/0/0
ip nat outside
interface s0/0/1
ip nat inside
------ R2 PAT LAB 6.6.7 --------------------
**ROUTER1**
enable
configure terminal
interface GigabitEthernet0/0/0
ip nat inside
interface GigabitEthernet0/0/1
ip nat inside
interface Serial0/1/0
ip nat outside
ip nat pool DYNAMIC 209.165.200.233 209.165.200.234 netmask 255.255.255.252
ip nat inside source list 1 pool DYNAMIC overload
access-list 1 permit 172.16.0.0 0.0.255.255
**ROUTER 2**
enable
configure terminal
interface GigabitEthernet0/0/0
ip nat inside
interface GigabitEthernet0/0/1
ip nat inside
interface Serial0/1/1
ip nat outside
ip nat inside source list 2 interface Serial0/1/1 overload
access-list 2 permit 172.17.0.0 0.0.255.255
end
show ip nat translations
################################# hsrp ##########################################
R1
enable
config t
interface g0/1
standby version 2
standby 1 ip 192.168.1.254
standby 1 priority 150
standby 1 preempt
end
R3
enable
config t
interface g0/0
standby version 2
standby 1 ip 192.168.1.254
end
sw1
enable
config t
ip default-gateway 192.168.1.254
end
sw3
enable
config t
ip default-gateway 192.168.1.254
end
PC-A and PC-B
Change the default gateway to 192.168.1.254
