~Set the switch default gateway S1(config)#ip default-gateway 172.17.99.1 S1(config)#exit ~Configure Clock S1#clock set 12:12:12 ?

~Configure description Router1(config-if)#description connection to host1 ~Configure the system to boot using a different Cisco IOS image. In global configuration mode, issue this command. S1(config)#boot system flash:/c2960-lanbase-mz.122-25.SEE1.bin ~Configure Duplex and Speed S1(config)#interface fa0/18 S1(config-if)#duplex full S1(config-if)#speed 100

~Conf history buffer S1(config)#line console 0 S1(config-line)#history size 35 S1(config-line)#line vty 0 4 S1(config-line)#history size 35 ~Configure static MAC for the TFTP server. S1(config)#mac-address-table static 0060.3EDD.19A3 vlan 99 int fa0/24 ~Verify that the static MAC address is now in the MAC address table. S1#show mac-address-table ~Configure virtual terminal and console passwords and require users to login. S1(config)#line console 0 S1(config-line)#password cisco S1(config-line)#login S1(config-line)#line vty 0 15 S1(config-line)#password cisco S1(config-line)#login ~Configure MOTD banner S1(config)#banner motd &Authorized Access Only& S1(config)#end [or exit] ~Configure password encryption. S1(config)#service password-encryption

S1(config)# ~Conf secret password Router1(config)#enable secret class ~Configure Dynamic Port Security S1(config-if)#interface fa0/18 S1(config-if)#switchport port-security ~Configure the maximum number of MAC addresses. S1(config-if)#switchport port-security maximum <1-132> ~Cong static mac-address sticky S1(config)#mac-address-table static 0002.16E8.C285 vlan 99 interface fastethernet 0/18 ~Configure the port to add the MAC address to the running configuration. S1(config-if)#switchport port-security mac-address sticky ~Configure the port to automatically shut down if port security is violated. S1(config-if)#switchport port-security violation shutdown ~Confirm that S1 has learned the MAC address S1#show mac-address-table ~Clear an Existing Configuration on a Switch and Remove the VLAN database information file. Switch#delete flash:vlan.dat Delete filename [vlan.dat]? [Enter] Delete flash:vlan.dat? [confirm] [Enter] ~Remove the switch startup configuration file from NVRAM. Switch#erase startup-config Erasing the nvram filesystem will remove all configuration files! Continue? [confirm] [Enter] [OK] Erase of nvram: complete ~Verify the VLAN information was deleted. Switch#show vlan brief ~Reload the switch. Switch#reload Proceed with reload? [confirm] [Enter] ~Configure Vlan S1(config)#vlan 99 S1(config-vlan)#exit S1(config)#interface vlan99

S1(config-if)#ip address 172.17.99.11 255.255.255.0 S1(config-if)#no shutdown S1(config-if)#exit ~Assign ports to the switch VLAN. Assign Fastethernet 0/1, 0/8, and 0/18 to ports to VLAN 99. S1(config)#interface fa0/1 S1(config-if)#switchport access vlan 99 ~Verify the management LANs settings. Verify the interface settings on VLAN 99 with the show interface vlan 99 command. S1#show interface vlan 99 Vlan99 is up, line protocol ~Clear the MAC address table. To remove the existing MAC addresses, use the clear mac-address-table dynamic command from privileged EXEC mode. S1#clear mac-address-table dynamic ~Verify that the MAC address table was cleared. S1#show mac-address-table ~Set up a static MAC address. S1(config)#mac-address-table static 0002.16E8.C285 vlan 99 interface fastethernet 0/18 ~Configure VLANs S1(config)#vlan 10 S1(config-vlan)#name Faculty/Staff S1(config-vlan)#vlan 20 S1(config-vlan)#name Students S1(config-vlan)#vlan 30 S1(config-vlan)#name Guest(Default) S1(config-vlan)#vlan 99 S1(config-vlan)#name Management&Native ~Verify the VLAN configuration. S1#show vlan brief ~Assign VLANs to Ports S2(config)#interface fastEthernet 0/6 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 30e5 S2(config-if)#interface fastEthernet 0/11 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 10

S2(config-if)#interface fastEthernet 0/18 S2(config-if)#switchport mode access S2(config-if)#switchport access vlan 20 ~Configure Trunking S1(config)#interface FastEthernet 0/1 S1(config-if)#switchport mode trunk S1(config-if)#switchport trunk native vlan 99 S1(config-if)#interface FastEthernet 0/3 S1(config-if)#switchport mode trunk S1(config-if)#switchport trunk native vlan 99 ~Verify trunking is enabled S2#show interface fastEthernet 0/1 switchport ~Configure the VTP mode command. S1(config)#vtp mode server Device mode already VTP SERVER. S1(config)# ~Configure the VTP domain name. S1(config)#vtp domain CCNA Changing VTP domain name from NULL to CCNA S1(config)# ~Configure the VTP domain password. S1(config)#vtp password cisco ~Config STP/Ensure S1 is a root bridge: Must do to all Vlans S1(config)#spanning-tree vlan 99 priority 4096 S1(config)#exit ~Config sub interface on Router/ Router on a stick config W/802.1q encapsulation R1(config)#interface fa0/1.10 R1(config-subif)#encapsulation dot1Q 10 R1(config-subif)#ip address 172.17.10.1 255.255.255.0 R1(config-subif)#interface fa0/1.30 R1(config-subif)#encapsulation dot1Q 30 R1(config-subif)#ip address 172.17.30.1 255.255.255.0 R1(config-subif)#interface fastethernet 0/0.99 R1(config-subif)#encapsulation dot1q 99 native R1(config-subif)#ip address 172.17.99.1 255.255.255.0 ~Conifig OSPF Branch(config)router ospf 1 <1= area> Branch(config-router)#Exit ~Config OSPF passive interface command BRANCH(config)#router ospf 1

BRANCH(config-router)#passive-interface fa0/0.1 BRANCH(config-router)#network 172.17.1.1 0.0.0.255 area 0 BRANCH(config-router)#exit ~Config OSPF passive interface default command
CENTRAL(config)#router ospf 1 CENTRAL(config-router)#default-information originate CENTRAL(config-router)#end

~Sho OSPF
Router(config)# show ip ospf interface show interface serial show controllers serial 0/0/0

~Config HDLC encapsulation host1(config-if)#encapsulation hdlc ~Configure PAP Authentication R1(config)#username R2 password cisco123 R1(config)#interface s0/0/0 R1(config-if)#encapsulation ppp R1(config-if)#ppp authentication chap R1(config-if)#no shut R1(config-if)#end R1(config-if)#username ISP password cisco R1(config-if)#int ser 0/0/0 Config Frame Relay R1(config)#interface serial0/0/0 R1(config-if)#encapsulation frame-relay R1(config-if)#no shutdown config Static maps To reach router R2, use DLCI 102 located at IP address 10.1.1.2.
encapsulation frame-relay frame-relay map ip 10.1.1.2 102 broadcast cisco

Configure ANSI as the LMI type R1(config-if)#interface s0/0/0 R1(config-if)#frame-relay lmi-type ansi confi show frame-relay HQ#sho frame-relay map