en

conf t
line vty 04
logging synchronous
line console 0
logging synchronous

CREACION DE VLANS

S1#(config)# vlan 10
S1#(config-vlan)# name Faculty/Staff
S1#(config-vlan)# vlan 20
S1#(config-vlan)# name Students
S1#(config-vlan)# vlan 30
S1#(config-vlan)# name Guest(Default)
S1#(config-vlan)# vlan 99
S1#(config-vlan)# name Management&Native
S1#(config-vlan)# vlan 150
S1#(config-vlan)# name VOICE

VERIFICACION
S1# show vlan brief

ASIGNAR LAS VLANS A LOS PUERTOS

S2(config)# interface f0/11

S2(config-if)# switchport mode access
S2(config-if)# switchport access vlan 10
S2(config-if)# interface f0/18
S2(config-if)# switchport mode access
S2(config-if)# switchport access vlan 20
S2(config-if)# interface f0/6
S2(config-if)# switchport mode access
S2(config-if)# switchport access vlan 30

INTERVLAN ROUTING
R1# conf t
R1(config)#int g0/0.10
R1(config-subif)#encapsulation dot1Q 10 (10 numero de vlan)
R1(config-subif)#ip address 172.31.10.1 255.255.255.0
R1(config)#int g0/0
R1(config-if)#no sh

##############
# vlan nativa#
##############
R1# conf t
R1(config)#int g0/0.99
R1(config-subif)#encapsulation dot1Q 99 native (10 numero de vlan)
R1(config-subif)#ip address 172.31.10.1 255.255.255.0

CONFIGURACION DE TRUNKING EN SW
S1(config)#int g0/1
S1(config-if)#switchport mode trunk
S1(config-if)#switchport trunk native vlan 99

CONFIGURACION DE RUTAS ESTATICAS

HQ(config)#ip route 172.31.10.0 255.255.255.0 s0/0/0
HQ(config)#ip route 172.31.20.0 255.255.255.0 s0/0/0
HQ(config)#ip route 172.31.30.0 255.255.255.0 s0/0/0
HQ(config)#ip route 172.31.88.0 255.255.255.0 s0/0/0

##############################
#con distancia administrativa#
#############################
HQ(config)#ip route 209.165.200.0 255.255.255.224 s0/1/1 10(10 es la distancia
administrativa

VTP
MODO SERVER
Switch#conf t
Switch(config)#vtp mode server
Switch(config)#vtp domain cisco
Switch(config)#vtp password cisco

MODO CLIENT
Switch(config)#VTP MOde client
Switch(config)#vtp domain cisco
Switch(config)#vtp password cisco

ENLACES TRONCALES
S1(config)#interface range fa0/1-4
S1(config-if-range)#switchport mode trunk
S1(config-if-range)#switchport trunk native vlan 99
S1(config-if-range)#no shutdown
S1(config-if-range)#end

EN EL SERVIDOR SE CREAN LAS VLANS

S1(config)#vlan 99
S1(config-vlan)#name management
S1(config-vlan)#exit
S1(config)#vlan 10
S1(config-vlan)#name faculty-staff
S1(config-vlan)#exit
S1(config)#vlan 20
S1(config-vlan)#name students
S1(config-vlan)#exit
S1(config)#vlan 30
S1(config-vlan)#name guest
S1(config-vlan)#exit

SE PONE LAS DIRECCIONES EN CADA SW

S1(config)#interface vlan99
S1(config-if)#ip address 172.17.99.11 255.255.255.0
S1(config-if)#no shutdown

ASIGNAR LAS VLANS A LOS PUERTOS

S2(config)#interface range fa0/5-10
S2(config-if-range)#switchport access vlan 30
S2(config-if-range)#interface range fa0/11-17
S2(config-if-range)#switchport access vlan 10
S2(config-if-range)#interface range fa0/18-24
S2(config-if-range)#switchport access vlan 20
S1(config)#spanning-tree vlan 1 priority 4096
S1(config)#spanning-tree vlan 10 priority 4096
S1(config)#spanning-tree vlan 20 priority 4096
S1(config)#spanning-tree vlan 30 priority 4096

PORTSECURITY
Switch#configure terminal
Switch(config)#interface fastEthernet 0/2
Switch(config-if)#switchport mode access
Switch(config-if)#switchport port-security
Switch(config-if)#switchport port-security maximum 1
Switch(config-if)#switchport port-security violation restrict
Switch(config-if)#switchport port-security mac-address 00E0.F9E4.611C
Switch(config-if)#switchport port-security mac-address sticky
Switch(config-if)#end
Switch#show port-security address

HSRP
Switch(config)#int range g0/1-2
Switch(config-if)#channel-group 1 mode active
Switch(config-if)#interface port-channel 1
Switch(config-if)#switchport mode trunk
Switch(config-if)#switchport trunk native vlan 99