vlanip codip a
100192.168.10.0/24192.168.110.0/24
200192.168.20.0/24192.168.120.0/24
300192.168.30.0/24192.168.130.0/24
400192.168.40.0/24192.168.140.0/24
500192.168.50.0/24192.168.150.0/24
ПровайдерАдрес IPv4/МаскаШлюз IPv4AS
GIGAFON COD178.207.179.4/29178.207.179.131133
GIGAFON A178.207.179.28/29178.207.179.2531133

sw1-cod

en
conf t
ntp server 192.168.10.10
hostname sw1-cod.cod.ssa2026

username netuser pri 15 secret P@ssw0rd
line con 0
	login local
line vty 0 4
	transport input ssh
	login local
	exit

vlan 100
name SRV-COD
vlan 200
name DATA
vlan 300
name MGMT-COD
vlan 400 
name CLI
vlan 500
name VOIP
vlan 999
name NATIVE
exit

int range g1/1-2
	channel-group 1 mode active 
	no shu

int range g1/1-2, g0/0
	switchport trunk allowed vlan 100,200,300,400,500,999
	switchport trunk encapsulation dot1q
	switchport trunk native vlan 999
	switchport mode trunk
	no shu

interface g0/1
 switchport access vlan 300
 switchport mode access
 no shu
 
interface g0/2
 switchport access vlan 100
 switchport mode access
 no shu
interface g0/3
 switchport access vlan 200
 switchport mode access
 no shu
 exit
 
 int vlan 300
	 ip add 192.168.30.1 255.255.255.0
	 no shu
	 exit

ip route 0.0.0.0 0.0.0.0 192.168.30.254

aaa new-model
aaa authorization exec default group radius local
aaa authentication login default group radius local
aaa authorization console 

radius server SRV
	address ipv4 192.168.10.10 auth-port 1812 acct-port 1813
	key cisco
	exit

sw2-cod


en
conf t
ntp server 192.168.10.10
hostname sw2-cod.cod.ssa2026

username netuser pri 15 secret P@ssw0rd
line con 0
	login local
line vty 0 4
	transport input ssh
	login local
	exit

vlan 100
name SRV-COD
vlan 200
name DATA
vlan 300
name MGMT-COD
vlan 400 
name CLI
vlan 500
name VOIP
vlan 999
name NATIVE
exit

int range g1/1-2
	channel-group 1 mode active 
	no shu

int range g1/1-2, po1
	switchport trunk allowed vlan 100,200,300,400,500,999
	switchport trunk encapsulation dot1q
	switchport trunk native vlan 999
	switchport mode trunk
	no shu

interface g0/0
 switchport access vlan 100
 switchport mode access
 no shu
 
interface g0/1
 switchport access vlan 200
 switchport mode access
 no shu
interface g0/2
 switchport access vlan 500
 switchport mode access
 no shu
interface g0/3
 switchport access vlan 400
 switchport mode access
 no shu
 exit

int vlan 300
 ip add 192.168.30.2 255.255.255.0
 no shu
 exit
 

ip route 0.0.0.0 0.0.0.0 192.168.30.254

aaa new-model
aaa authorization exec default group radius local
aaa authentication login default group radius local
aaa authorization console 

radius server SRV
	address ipv4 192.168.10.10 auth-port 1812 acct-port 1813
	key cisco
	exit

sw1-a

en
conf t
ntp server 192.168.10.10
hostname sw1-a.office.ssa2026

 
vlan 100
name SRV-a
vlan 200
name CLI
vlan 300
name MGMT
vlan 999
name NATIVE
exit

int range g1/1-2, g0/0
	switchport trunk allowed vlan 100,200,300,999
	switchport trunk encapsulation dot1q
	switchport trunk native vlan 999
	switchport mode trunk
	no shu

interface g0/1
 switchport access vlan 100
 switchport mode access
 no shu
 exit
 
 int vlan 300
	 ip add 192.168.130.1 255.255.255.0
	 no shu
	 exit
 
ip route 0.0.0.0 0.0.0.0 192.168.130.254
span mode rapid
span vlan 100,200,300,999 prio 4096

sw2-a


en
conf t
ntp server 192.168.10.10
hostname sw2-a.office.ssa2026
 
vlan 100
name SRV-a
vlan 200
name CLI
vlan 300
name MGMT
vlan 999
name NATIVE
exit

int range g1/1-2
	switchport trunk allowed vlan 100,200,300,999
	switchport trunk encapsulation dot1q
	switchport trunk native vlan 999
	switchport mode trunk
	no shu

interface range g0/0-1
 switchport access vlan 200
 switchport mode access
 no shu
 exit

 
 int vlan 300
	 ip add 192.168.130.2 255.255.255.0
	 no shu
	 exit
 
ip route 0.0.0.0 0.0.0.0 192.168.130.254
span mode rapid
span vlan 100,200,300,999 prio 8192