!

HQ-Sw
enable
configure terminal
!
service password-encryption
!
ip domain-name cisco.com
username CAdmin password itsasecret
!
crypto key generate rsa
1024
!
ip ssh version 2
ip ssh authentication-retries 2
ip ssh time-out 60
!
line vty 0 15
login local
transport input ssh
!
vlan 15
name Servers
exit
!
vlan 30
name PCs
exit
!
vlan 45
name Native
exit
!
vlan 60
name Management
exit
!
interface range F0/11 - F0/20
switchport mode access
switchport access vlan 15
!
interface range F0/1 - F0/10
switchport mode access
switchport access vlan 30
!
interface VLAN 60
ip address 192.168.45.34 255.255.255.240
!
interface fastEthernet 0/1
switchport port-security
switchport port-security mac-address sticky
switchport port-security maximum 2
switchport port-security violation restrict
!
interface range fastEthernet0/21-24
shutdown
!
interface gigabit 0/1
switchport mode trunk native
switchport trunk native vlan 45
!

interface gigabit 0/2

shutdown
!
ip default-gateway 192.168.45.33
!
end
wr
!HQ
!
enable
configure terminal
!
service dhcp
ip dhcp excluded- address 192.168.45.129
ip dhcp pool LAN
network 192.168.45.128 255.255.255.192
default-router 192.168.45.129
exit
!
router ospf 1
router-id 1.1.1.1
network 192.168.45.0 0.0.0.255 area 0
passive-interface gigabit 0/0
exit
!
ip route 0.0.0.0 0.0.0.0 serial 0/1/0
!
access-list 1 permit 192.168.45.0 0.0.0.255
ip nat inside source static 192.168.45.66 64.100.32.58
ip nat pool NAT 64.100.32.56 64.100.32.57 netmask 255.255.255.252
ip nat inside source list 1 pool NAT
!
interface serial 0/0/0
ip nat inside
!
interface serial 0/0/1
ip nat inside
!
interface serial 0/1/0
ip nat outside
!
interface gigabit 0/0
ip nat inside
!
interface gigabit 0/0
no shutdown
!
interface gigabit 0/0.15
encapsulation dot1q 15
ip nat inside
ip address 192.168.45.65 255.255.255.192
!
interface gigabit 0/0.30
encapsulation dot1q 30
ip nat inside
ip address 192.168.45.129 255.255.255.192
!
interface gigabit 0/0.45

encapsulation dot1q 45 native

ip address 192.168.45.17 255.255.255.240
!
interface gigabit 0/0.60
encapsulation dot1q 60
ip address 192.168.45.33 255.255.255.240
!
end
wr