Introduction :

La Maison des Ligues (M2L) dsire dvelopper des nouveaux services et des
capacits dhbergements pour les ligues sportives tels que laccs lintranet
et lextranet, galement laccs au rseau wifi pour les postes nomades.
Pour ce faire linfrastructure rseau doit intgrer les fonctionnalits suivantes :
1.
2.
3.
4.

Les sous rseaux de lassociation M2L

Les sous rseaux des ligues
Le rseau Backbone
Le rseau daccs Internet

Tous les serveurs sont installs dans une baie du service Informatique situ dans
le rseau M2L. Les serveurs hbergent principalement des applications de base
de donnes, WEB, Sauvegarde, ainsi que que les services rseaux, gestions et
supervision du parc informatique.
Afin dassurer la continuit de service une liaison de secours reliera les
commutateurs daccs entre eux. Au niveau du routeur M2L nous utiliserons les
rgles de filtrages en utilisant les ACL Cisco. Afin dassurer la tolrance aux
pannes, nous installerons un deuxime serveur DHCP install sous Linux Debian.
Mission 1 :
Dans le cadre du dploiement du rseau M2L nous devrons :
1. Etablir le plan dadressage IP pour les dpartements M2L uniquement les
trois premires Ligues (Tennis, Basket Ball et Athltisme).
2. Procder linstallation du rseau de linfrastructure de commutation des
ligues et de M2L. Nous maquetterons linfrastructure via le support Cisco
Packet Tracer Student.
3. Installer le rseau Backbone et les services rseau.
4. Installer le service daccs Internet.
5. Raliser les test et valider la maquette
DOCUMENTATION TECHNIQUE
Equipements :
Switch 2960 24 Ports
Router 2621 XM
PC Windows 7
Serveur Windows 2008 Server
Serveur Debian

Tableau dadressage :

TABLEAUX DE BRASSAGE
Switch :

SWITCH
LIGUE 3

POR
TS

VLAN
BASKET

1
10

TRUNK

11

ETHER
CHANNEL

12 13

SWITCH
M2L

POR
TS

VLAN
INFO

1
10

VLAN
ADMIN

11 21

TRUNK

22

Routeur :

RLIGUES

INTERFA
CES

CONNEXION ROUTEUR M2L

Fa 0/0

CONNEXION SOUS RESEAU

LIGUE

Fa0/1

RM2L

INTERFACES

CONNEXION AU ROUTEUR LIGUE

Fa 0/0

CONNEXION SOUS RESEAU M2L

Eth 1/1

CONNEXION DMZ

Eth 1/0

CONNEXION FAI

Fa 0/1

RFAI

INTERFA
CES

CONNEXION AU ROUTEUR
M2L

Fa 0/0

CONNEXION AU ROUTEUR
INTERNET

Fa 0/1

RInternet

INTERFA
CES

CONNEXION AU
ROUTEUR RFAI

Fa 0/1

CONNEXION AU RESEAU
PUBLIC

Fa 0/0

FICHIER DE CONFIGURATIONS :

SW1LIGUE
en
conf t
hostname SW1LIGUE
no ip domain-lookup
no logging console
service password-encryption
no cdp run
vtp mode transparent
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa
512
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
VLAN 10
name TENNIS
exit
VLAN 11
name ATHLE
exit
VLAN 12
name BASKET
exit
int fa 0/1
switchport mode trunk
switchport nonegotiate
exit

int range fa 0/2 -3

channel-group 1 mode active
exit
int port-channel1
switchport mode trunk
switchport nonegotiate
exit
int range fa 0/4 -5
channel-group 2 mode active
exit
int port-channel2
switchport mode trunk
switchport nonegotiate
exit
spanning-tree vlan 1 root primary
spanning-tree vlan 10-12 root primary
spanning-tree vlan 99 root primary
int vlan 99
ip address 172.16.99.1 255.255.255.240
no shutdown
exit
ip default-gateway 172.16.99.14
logging console
ip domain-lookup
ip name-server 172.16.2.61
exit
SW2LIGUE
en
conf t
hostname SW2LIGUE
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa

512
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
no cdp run
vtp mode transparent
enable secret cisco
VLAN 10
name TENNIS
exit
VLAN 11
name ATHLE
exit
VLAN 12
name BASKET
exit
int range fa0/4- 13
switchport mode access
switchport access vlan 10
no shutdown
exit
int range fa0/14- 23
switchport mode access
switchport access vlan 11
no shutdown
exit
int fa 0/1
switchport mode trunk
switchport nonegotiate
exit
int range fa 0/2 -3
channel-group 1 mode active
exit
int port-channel1
switchport mode trunk
switchport nonegotiate
exit
int vlan 99
ip address 172.16.99.2 255.255.255.240
no shutdown
exit
ip default-gateway 172.16.99.14

logging console
ip domain-lookup
ip name-server 172.16.2.61
exit
SW3LIGUE
en
conf t
hostname SW3LIGUE
no ip domain-lookup
no logging console
service password-encryption
no cdp run
vtp mode transparent
enable secret cisco
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa
512
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
VLAN 10
name TENNIS
exit
VLAN 11
name ATHLE
exit
VLAN 12
name BASKET
exit
int range fa0/4- 13
switchport mode access
switchport access vlan 12
no shutdown
exit
int fa 0/1
switchport mode trunk
switchport nonegotiate
exit

int range fa 0/2 -3

channel-group 2 mode active
exit
int port-channel2
switchport mode trunk
switchport nonegotiate
exit
int vlan 99
ip address 172.16.99.3 255.255.255.240
no shutdown
exit
ip default-gateway 172.16.99.14
logging console
ip domain-lookup
ip name-server 172.16.2.61
exit
SWM2L
en
conf t
hostname SW1M2L
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa
512
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
no cdp run
vtp mode transparent
enable secret cisco
VLAN 2
name INFO
exit
VLAN 3
name ADMIN

exit
VLAN 99
name GESTION
exit
int range fa0/23 -24
switchport mode trunk
switchport nonegotiate
exit
int range fa 0/1 -14
switchport mode access
switchport access VLAN 2
spanning-tree portfast
exit
int vlan 99
ip address 172.16.99.17 255.255.255.240
no shutdown
exit
ip default-gateway 172.16.99.30
ip http server
ip http authentication local
no ip http secure-server
logging console
ip domain-lookup
ip name-server 172.16.2.61
exit
ROUTEUR M2L
en
conf t
hostname RM2L
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa
512
ip ssh version 2
ip ssh time-out 60

ip ssh authentication-retries 2
! Interconnexion avec RLIG
int fa 0/0
ip address 10.0.0.9 255.255.255.248
no shutdown
exit
! Interconnexion avec RFAI
int fa 0/1
ip address 10.0.0.1 255.255.255.248
no shutdown
exit
! Interconnexion avec DMZ
int e1/0
ip address 192.168.0.14 255.255.255.240
no shutdown
exit
! Sous reseaux VLAN M2L
int e1/1
no shutdown
exit
! Service Rseau
int e1/1.2
encapsulation dot1Q 2
ip address 172.16.2.62 255.255.255.192
exit
! Service Commercial
int e1/1.3
encapsulation dot1Q 3
ip address 172.16.3.62 255.255.255.192
exit
router ospf 1
network 172.16.2.0 0.0.0.63 area 0
network 172.16.3.0 0.0.0.63 area 0
network 172.16.99.16 0.0.0.15 area 0
network 192.168.0.0 0.0.0.15 area 0
network 10.0.0.0 0.0.0.7 area 0
network 10.0.0.8 0.0.0.7 area 0
default-information originate
passive-interface e1/0
passive-interface e1/1.2
passive-interface e1/1.3
exit
ip route 0.0.0.0 0.0.0.0 10.0.0.6
! Relais DHCP

int eth1/1.2
ip helper-address 172.16.2.61
exit
int eth1/1.3
ip helper-address 172.16.2.61
exit

ROUTEUR LIGUES
en
conf t
hostname RLIGUES
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
ip domain-name m2l.fr
user admin privilege 15 password admin
line vty 0 4
password cisco
login local
transport input ssh
exit
crypto key generate rsa
512
ip ssh version 2
ip ssh time-out 60
ip ssh authentication-retries 2
! Interconnexion avec RM2L
int Fa 0/1
ip address 10.0.0.10 255.255.255.248
no shutdown
exit
! Sous Reseaux LIGUES
int Fa 0/0
no shutdown
exit
! TENNIS
int Fa 0/0.10
encapsulation dot1Q 10
ip address 172.16.10.62 255.255.255.192
exit
! ATHLE
int Fa 0/0.11
encapsulation dot1Q 11

ip address 172.16.11.62 255.255.255.192

exit
! BASKET
int Fa 0/0.12
encapsulation dot1Q 12
ip address 172.16.12.62 255.255.255.192
exit
!Gestion
int Fa 0/0.99
encapsulation dot1Q 99
ip address 172.16.99.14 255.255.255.240
exit
router ospf 1
network 172.16.10.0 0.0.0.63 area
network 172.16.11.0 0.0.0.63 area
network 172.16.12.0 0.0.0.63 area
network 172.16.99.0 0.0.0.15 area
network 10.0.0.8 0.0.0.7 area 0
passive-interface fa0/0.10
passive-interface fa0/0.11
passive-interface fa0/0.12
exit
! Relais DHCP
int fa0/0.10
ip helper-address 172.16.2.61
exit
int fa0/0.11
ip helper-address 172.16.2.61
exit
int fa0/0.12
ip helper-address 172.16.2.61
exit

logging console
ip domain-lookup
ip name-server 172.16.2.61
RHSRP1
en
conf t
hostname RHSRPRI
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco

0
0
0
0

int fa 0/0
ip address 10.0.0.2 255.255.255.248
ip nat inside
no shutdown
exit
int fa 0/1
ip address 221.87.149.1 255.255.255.252
ip nat outside
no shutdown
exit
access-list 10 permit 172.16.0.0 0.0.255.255
access-list 10 permit 192.168.0.0 0.0.0.255
ip nat inside source list 10 interface fa0/1 overload
logging console
ip domain-lookup
exit
RHSRP2
en
conf t
hostname RHSRSEC
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
int fa 0/0
ip address 10.0.0.3 255.255.255.248
ip nat inside
no shutdown
exit
int fa 0/1
ip address 183.44.71.1 255.255.255.252
ip nat outside
no shutdown
exit
access-list 10 permit 172.16.0.0 0.0.255.255
access-list 10 permit 192.168.0.0 0.0.0.255
ip nat inside source list 10 interface fa0/1 overload
logging console
ip domain-lookup
exit
RFAI

en
conf t
hostname RFAI
no ip domain-lookup
no logging console
service password-encryption
int Fa0/0
ip address 10.0.0.6 255.255.255.248
no shutdown
exit
int Fa0/1
ip address 221.87.149.1 255.255.255.252
no shutdown
exit
! NAT
! Les rseaux autoriss
access-list 10 permit 172.16.0.0 0.0.255.255
access-list 10 permit 192.168.0.0 0.0.0.255
! Configuration interface du routeur (ct public)
ip nat inside source list 10 interface FastEthernet0/1 overload
! Dclarer les interfaces du routeur
int fa0/0
ip nat inside
exit
int fa0/1
ip nat outside
exit
! Port Forwarding
ip nat inside source static tcp 192.168.0.11 80 221.87.149.1 80
ip nat inside source static tcp 192.168.0.11 443 221.87.149.1 443
ip nat inside source static tcp 192.168.0.12 21 221.87.149.1 21
! Route par dfaut (autorisation rseaux internes sortant vers Internet)
ip route 0.0.0.0 0.0.0.0 221.87.149.2
! Route static (autorisation rsaux externes entrants vers rseaux
internes)
ip route 172.16.0.0 255.255.0.0 10.0.0.1
ip route 192.168.0.0 255.255.255.0 10.0.0.1
RInternet
en
conf t
hostname RInternet
no ip domain-lookup
no logging console
service password-encryption
enable secret cisco
int fa 0/0
ip address 80.0.0.1 255.255.255.248

no shutdown
exit
int fa 0/1
ip address 221.87.149.2 255.255.255.252
no shutdown
exit
! Configuration route par dfaut ( fa0/1 interface Switch)
ip route 0.0.0.0 0.0.0.0 Fa0/1
logging console
ip domain-lookup
exit

No Type scnario Environnement

test
1

Test de
communication

Date
23/02/2016

M2L

Description du test
Ping dune machine du mme sous rseau
(LIGUES)

Rsultats attendus

Description technique