R1

SEGURIDAD PARA CADA ROUTER

Router>ena
Router# conf t
Router(config)#hostname HQ
HQ(config)#enable secret Ci$co
HQ(config)#line console 0
HQ(config-line)#pasword ci$co.
HQ(config-line)#password ci$co
HQ(config-line)#login
HQ(config-line)#exit
HQ(config)#banner motd # acceso no autorizado#
HQ(config)#ip domain-name redes2.local
HQ(config)#crypto key generate rsa
The name for the keys will be: HQ.redes2.local
Choose the size of the key modulus in the range of 360 to 2048 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

HQ(config)#user name admin

HQ(config)#username admin password ci$co
HQ(config)#ip ssh version 2
HQ(config)#line vty 0 15
HQ(config-line)#transport input ssh
HQ(config-line)#login local
HQ(config-line)#exit
HQ(config)#service password-encryption

HQ(config)#int s0/0/0
HQ(config-if)#ip add 172.16.19.1 255.255.255.252
HQ(config-if)#description To_Norte
HQ(config-if)#bandwidth 2048
HQ(config-if)#no sh
HQ(config-if)#exit
HQ(config)#do wr

HQ(config)#int s0/0/1
HQ(config-if)#ip add 172.16.19.9 255.255.255.252
HQ(config-if)#description To_Sur
HQ(config-if)#bandwidth 2048
HQ(config-if)#clock rate 2000000
HQ(config-if)#no sh
HQ(config-if)#exit
HQ(config)# do wr

HQ(config)#int g0/0
HQ(config-if)#ip add 172.16.0.1 255.255.240.0
HQ(config-if)#description To_redA
HQ(config-if)#no sh
HQ(config-if)#exit
HQ(config)#do wr

Dhcp
HQ(config)#ip dhcp pool redA
HQ(dhcp-config)#net
HQ(dhcp-config)#network 172.16.0.0 255.255.240.0
HQ(dhcp-config)#def
HQ(dhcp-config)#default-router 172.16.0.1
HQ(dhcp-config)#dns
HQ(dhcp-config)#dns-server 172.16.0.2
HQ(dhcp-config)#exit
HQ(config)# ip dhcp excluded-address 172.16.0.1
HQ(config)# ip dhcp excluded-address 172.16.0.2
HQ(config)#do wr

HQ(config)#ip route 0.0.0.0 0.0.0.0 0.0.0.0

HQ(config)#ip route 0.0.0.0 0.0.0.0 209.10.10.2
HQ(config)#ip route 0.0.0.0 0.0.0.0 10.10.10.2

ROUTE RIP
HQ(config)#router rip
HQ(config-router)#version 2
HQ(config-router)#net
HQ(config-router)#network 172.16.19.0
HQ(config-router)#network 172.16.0.0
HQ(config-router)#network 172.16.19.8
HQ(config-router)#defaut-in
HQ(config-router)#default-information originate
HQ(config-router)#exit

HQ(config)#int s0/1/1
HQ(config-if)#ip add 209.10.10.1 255.255.255.252
HQ(config-if)#description To_ISPclaro
HQ(config-if)#no sh
HQ(config-if)#exit
HQ(config)#do wr
HQ(config)#int s0/1/0
HQ(config-if)#ip add 10.10.10.1 255.255.255.252
HQ(config-if)#description To_ISPtigo
HQ(config-if)#no sh
HQ(config-if)#exit
HQ(config)#do wr

R2
Router>ena
Router# conf t
Router(config)#hostname Norte
Norte(config)#enable secret Ci$co
Norte(config)#line console 0
Norte(config-line)#password ci$co
Norte(config-line)#login
Norte(config-line)#exit
Norte(config)#banner motd #acceso no autorizado#
Norte(config)#ip domain-name redes2.local
Norte(config)#crypto key generate rsa
The name for the keys will be: Norte.redes2.local
Choose the size of the key modulus in the range of 360 to 2048 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

Norte(config)#username admin password ci$co

Norte(config)#ip ssh version 2
Norte(config)#line vty 0 15
Norte(config-line)#transport input ssh
Norte(config-line)#login local
Norte(config-line)#exit
Norte(config)#service password-encryption
Norte(config)#int s0/0/1
Norte(config-if)#ip add 172.16.19.2 255.255.255.252
Norte(config-if)#des
Norte(config-if)#description To_HQ
Norte(config-if)#band
Norte(config-if)#bandwidth 2048
Norte(config-if)#clock r
Norte(config-if)#no ip add 172.16.19.2 255.255.255.252
Norte(config-if)#ip add 172.16.19. 255.255.255.252
^
% Invalid input detected at '^' marker.
Norte(config-if)#ip add 172.16.19.5 255.255.255.252
Norte(config-if)#description To_Sur
Norte(config-if)#no description To_HQ
Norte(config-if)# no sh

%LINK-5-CHANGED: Interface Serial0/0/1, changed state to down

Norte(config-if)#exit
Norte(config)# do wr
Building configuration...
[OK]
Norte(config)#int s0/0/0
Norte(config-if)#ip add 172.16.19.2 255.255.255.252
Norte(config-if)#des
Norte(config-if)#description To_HQ
Norte(config-if)#bandwidth 2048
Norte(config-if)#clock rate 2000000
Norte(config-if)#no sh

Norte(config)# do wr
Norte(config)#int g0/0
Norte(config-if)#ip add 172.16.16.1 255.255.254.0
Norte(config-if)#description To_redB
Norte(config-if)#no sh
Norte(config)#do wr

Norte(config)#ip dhcp pool redB

Norte(dhcp-config)#netwo
Norte(dhcp-config)#network 172.16.16.0 255.255.254.0
Norte(dhcp-config)#dfau
Norte(dhcp-config)#dfault
Norte(dhcp-config)#dfault-
Norte(dhcp-config)#dfault-
Norte(dhcp-config)#default-
Norte(dhcp-config)#default-router 172.16.16.1
Norte(dhcp-config)#dns
Norte(dhcp-config)#dns-server 172.16.0.2
Norte(dhcp-config)#do wr
Norte(dhcp-config)#exit
Norte(config)#ip dhcp ex
Norte(config)#ip dhcp excluded-address 172.16.16.1
Norte(config)#do wr
Building configuration...
[OK]
Norte(config)#router rip
Norte(config-router)#version 2
Norte(config-router)#net
Norte(config-router)#network 172.16.19.0
Norte(config-router)#network 172.16.16.0
Norte(config-router)#network 172.16.19.4
Norte(config-router)#do wr
Building configuration...
[OK]
Norte(config-router)#exit

R3
Router>ena
Router# conf t
Router(config)#hostname Sur
Sur(config)#enable secret Ci$co
Sur(config)#line console 0
Sur(config-line)#password ci$co
Sur(config-line)#login
Sur(config-line)#exit
Sur(config)#banner motd #acceso no autorizado#
Sur(config)#ip domain-name redes2.local
Sur(config)#crypto key generate rsa
The name for the keys will be: Sur.redes2.local
Choose the size of the key modulus in the range of 360 to 2048 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys, keys will be non-exportable...[OK]

Sur(config)#username admin password ci$co

*mar. 1 0:24:35.480: %SSH-5-ENABLED: SSH 1.99 has been enabled
Sur(config)#username admin password ci$co
Sur(config)#ip ssh version 2
Sur(config)#line vty 0 15
Sur(config-line)#transport input ssh
Sur(config-line)#login local
Sur(config-line)#exit
Sur(config)#service password-encryption
Sur(config)#do wr
Sur(config)#exit

Sur(config)#int s0/0/1
Sur(config-if)#ip add 172.16.19.10 255.255.255.252
Sur(config-if)#des
Sur(config-if)#description To_HQ
Sur(config-if)#ban
Sur(config-if)#bandwidth 2048
Sur(config-if)#no sh

Sur(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/1, changed state to up

Sur(config-if)#exit
Sur(config)#do wr
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to
up

Building configuration...
[OK]
Sur(config)#int s0/0/0
Sur(config-if)#int 172.16.19.6 255.255.255.252
^
% Invalid input detected at '^' marker.
Sur(config-if)#ip add 172.16.19.6 255.255.255.252
Sur(config-if)#des
Sur(config-if)#description To_Norte
Sur(config-if)#ban
Sur(config-if)#bandwidth 2048
Sur(config-if)#clock rate 2000000
Sur(config-if)#no sh

Sur(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/0, changed state to up

Sur(config-if)#exit
Sur(config)#do wr
Building configuration...
[OK]
Sur(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to
up

Sur(config)#
Sur(config)#int g0/0
Sur(config-if)#ip add 172
^
% Invalid input detected at '^' marker.
Sur(config-if)#ip add 172.16.18.1 255.255.255.0
Sur(config-if)#des
Sur(config-if)#description To_redC
Sur(config-if)#no sh

Sur(config-if)#
%LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0, changed

state to up

Sur(config-if)#exit
Sur(config)#do wr
Building configuration...
[OK]
Sur(config)#
Sur(config)#ip dhcp pool redC
Sur(dhcp-config)#ne
Sur(dhcp-config)#network 172.16.18.0 255.255.255.0
Sur(dhcp-config)#de
Sur(dhcp-config)#default-router 172.16.18.1
Sur(dhcp-config)#dns
Sur(dhcp-config)#dns-server 172.16.0.2
Sur(dhcp-config)#exit
Sur(config)#do wr
Building configuration...
[OK]

Sur(config)#ip dhcp excluded-address 172.16.18.1

Sur(config)#
Sur(config)#route rip
Sur(config-router)#version 2
Sur(config-router)#net
Sur(config-router)#network 172.16.19.4
Sur(config-router)#network 172.16.18.0
Sur(config-router)#network 172.16.19.8
Sur(config-router)#do wr
Building configuration...
[OK]
Sur(config-router)#exit
Sur(config)#

RED CLARO
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname claro
claro(config)#int s0/0/0
claro(config-if)#ip add 209.10.10.2 255.255.255.252
claro(config-if)#des
claro(config-if)#description To?
LINE
claro(config-if)#description To_HQ
claro(config-if)#band
claro(config-if)#bandwidth 2048
claro(config-if)#clock rate 2000000
claro(config-if)#no sh

claro(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/0, changed state to up

claro(config-if)#exit
claro(config)#do wr
Building configuration...
[OK]
claro(config)#int s
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to
up

% Incomplete command.
claro(config)#
claro(config)#int s0/0/1
claro(config-if)#ip add 10.10.11.1 255.255.255.252
claro(config-if)#des
claro(config-if)#description To_Internet
claro(config-if)#no sh

%LINK-5-CHANGED: Interface Serial0/0/1, changed state to down

claro(config-if)#exit
claro(config)#do wr
Building configuration...
[OK]
claro(config)#ip route 172.16.0.0 255.255.224.0 209.10.10.1
claro(config)#ip route 10.10.10.0 255.255.255.252 209.10.10.1
claro(config)#ip route 10.10.12.0 255.255.255.252 209.10.11.2
claro(config)#

RED TIGO
Router>
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname tigo
tigo(config)#int s0/0/0
tigo(config-if)#ip add 10.10.10.2 255.255.255.252
tigo(config-if)#des
tigo(config-if)#description To_HQ
tigo(config-if)#band
tigo(config-if)#bandwidth 2048
tigo(config-if)#clock rate 2000000
tigo(config-if)#no sh

tigo(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/0, changed state to up

tigo(config-if)#exit
tigo(config)#do qr
Translating "qr"...domain server (255.255.255.255)
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to
up
% Unknown command or computer name, or unable to find computer address

tigo(config)#do wr
Building configuration...
[OK]
tigo(config)#int s0/0/1
tigo(config-if)#ip add 10.10.12.1 255.255.255.252
tigo(config-if)#des
tigo(config-if)#description To_Internet
tigo(config-if)#no sh

%LINK-5-CHANGED: Interface Serial0/0/1, changed state to down

tigo(config-if)#exit
tigo(config)#do wr
Building configuration...
[OK]
tigo(config)#
tigo(config)#ip route 172.16.0.0 255.255.224.0 10.10.10.1
tigo(config)#ip route 172.10.10.0 255.255.255.252 10.10.10.1
tigo(config)#ip route 209.10.10.0 255.255.255.252 10.10.10.1
tigo(config)#no ip route 172.10.10.0 255.255.255.252 10.10.10.1
tigo(config)#ip route 10.10.11.0 255.255.255.252 10.10.12.2
tigo(config)#do wr
Building configuration...
[OK]
tigo(config)#

INTERNET

Router>
Router>ena
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname Internet
Internet(config)#int s0/0/0
Internet(config-if)#ip add 10.10.11.2 255.255.255.252
Internet(config-if)#des
Internet(config-if)#description To_claro
Internet(config-if)#no sh

Internet(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/0, changed state to up

Internet(config-if)#exit
Internet(config)#do wr
Building configuration...
[OK]
Internet(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/0, changed state to
up

Internet(config)#int s0/0/1
Internet(config-if)#ip add 10.10.12.2 255.255.255.252
Internet(config-if)#des
Internet(config-if)#description To_tigo
Internet(config-if)#no sh

Internet(config-if)#
%LINK-5-CHANGED: Interface Serial0/0/1, changed state to up

Internet(config-if)#exit
Internet(config)#do wr
Building configuration...
[OK]
Internet(config)#
%LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0/1, changed state to
up

Internet(config)#ip route 209.10.10.0 255.255.255.252 10.10.11.1

Internet(config)#ip route 10.10.10.0 255.255.255.252 10.10.12.1
Internet(config)#ip route 172.16.0.0 255.255.224.0 10.10.11.1
Internet(config)#ip route 172.16.0.0 255.255.224.0 10.10.12.1
Internet(config)#