Configuracin Bsica Router

enable
configure terminal
hostname [Nombre Router]
enable secret [Contrasea Secret]
no ip domain-lookup
banner motd #[mensaje del da]#
line vty 0 4
password [contrasea VTY]
login
exit
line console 0
password [contrasea consola]
login
exit
service password-encryption
interface fastethernet [N Interface]
ip address [IP] [Mscara]
no shutdown
exit
interface serial [N Interface]
ip address [IP] [Mscara]
clock rate [Velocidad de reloj, si es DCE, tpicamente 128000]
no shutdown
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin Interfaces Loopback (Interfaces virtuales)
interface loopback [N]
ip address [IP] [Mscara]
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin Enrutamiento Esttico
ip route [Red Destino] [Mscara Red Destino] [Interface de Salida]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin Enrutamiento Esttico por defecto
ip route 0.0.0.0 0.0.0.0 [Interface de salida]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin Enrutamiento EIGRP
router eigrp [N AS]
network [Red 1]
network [Red 2]
no auto-summary
exit
interface [nombre] [N]
bandwidth [Ancho de banda en kbps]
ip hello-interval eigrp [N AS] [Tiempo Segundos]
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin enrutamiento OSPF
router ospf [ID Proccess(1 - 65535)]
network [IP Red 1] [Wildcard] area [ID area, tpicamente 0]
network [IP Red 2] [Wildcard] area [ID area, tpicamente 0]
router-id [IP ID]
exit
interface [nombre] [N]
bandwidth [Ancho de Banda en kbps]
ip ospf cost [costo enlace]
ip ospf hello-interval [Intervalo saludo en segundos]
ip ospf dead-interval [intervalo muestro, hello x 4]
ip ospf priority [prioridad interface dentro del proceso de seleccin del DR]

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin VLAN y enrutamiento inter-vlan en switch
configure terminal
vlan 10
name [nombre vlan 10]
exit
vlan 20
name [nombre vlan 20]
exit
interface fastethernet 0/[N Interface, si se trata de una sola]
switchport mode access
switchport access vlan [Nmero de VLAN]
exit
interface range fastethernet 0/[N Inicial] - [N Final, si es un rango]
switchport mode access
switchport access vlan [N VLAN]
exit
interface fastethernet 0/0
switchport mode trunk
exit
En el router
configure terminal
interface fastethernet 0/0
no shutdown
exit
interface fasethernet 0/0.[N Subinterface, generalmente el mismo de la VLAN]
encapsulation dot1q [N VLAN]
ip address [IP VLAN] [Mscara de red]
exit
interface fasethernet 0/0.[N Subinterface para la siguiente VLAN]
encapsulation dot1q [N VLAN]
ip address [IP VLAN] [Mscara de red]
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin DHCP
configure terminal
ip dhcp pool [Nombre DHCP]
network [IP Grupo DHCP] [Mscara de Red]
default-router [IP Puerta de Enlace]
dns-server [IP Servidor DNS]
exit
ip dhcp excluded-address [IP Excluida del Servidor DHCP]
Cuando es necesario configurar un reenvio (relay-dhcp) para convertir
un broadcast DHCP a un unicast DHCP en servidores DHCP remotos, en la
interface que recibe las peticiones DHCP se ejecuta:
ip helper-address [IP Servidor DHCP]
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin SSH, el nombre del router debe ser distinto del por defecto
configure terminal
hostname [nombre router]
username [nombre usuario] password [contrasea]
ip domain-name [nombre de dominio]
crypto key generate rsa

[ingresar longitud clave rsa, en bits, tpicamente 512]

ip ssh version 2
line vty 0 4
transport input ssh
login local
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Configuracin de proteccin de acceso vty solo a un PC especfico
access-list 1 permit host [IP Host Admin]
line vty 0 4
access-class 1 in
exit
%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
Red
Host
Bits
Mscara
Wildcard
VLAN 30 750
10
/22 (255.255.252.0)
0.0.3.255
VLAN 20 200
8
/24 (255.255.255.0)
0.0.0.255
VLAN 10 50
6
/26 (255.255.255.192) 0.0.0.63
VLAN 50 20
5
/27 (255.255.255.224) 0.0.0.31
VLAN 40 10
4
/28 (255.255.255.240) 0.0.0.15
Serv
10
4
/28 (255.255.255.240) 0.0.0.15
Central 4
3
/29 (255.255.255.248) 0.0.0.7
ADMIN
2
2
/30 (255.255.255.252) 0.0.0.3
WAN 1
2
2
/30 (255.255.255.252) 0.0.0.3
WAN 2
2
2
/30 (255.255.255.252) 0.0.0.3
WAN 3
2
2
/30 (255.255.255.252) 0.0.0.3
WAN 4
2
2
/30 (255.255.255.252) 0.0.0.3
WAN 5
2
2
/30 (255.255.255.252) 0.0.0.3
VLAN 30
172.16.128.0 /22
172.16.131.255 /22
VLAN 20
172.16.132.0 /24
172.16.132.255 /24
VLAN 10
172.16.133.0 /26
172.16.133.63 /26
VLAN 50
172.16.133.64 /27
172.16.133.95 /27
VLAN 40
172.16.133.96 /28
172.16.133.111 /28
Red Servidores
172.16.133.112 /28
172.16.133.127 /28
Red Central
172.16.133.128 /29
172.16.133.135 /29
Red ADMIN
172.16.133.136 /30
172.16.133.139 /30

WAN
WAN
WAN
WAN
WAN

1
2
3
4
5

172.16.133.140
172.16.133.144
172.16.133.148
172.16.133.152
172.16.133.156

/30
/30
/30
/30
/30