en
conf t
hostname DSW1
enable secret P@ssw0rd!
username admin secret P@ssw0rd! pri 15
line vty 0 4
login local
transport input ssh
banner "Authorized access only"
ip domain-name local
crypto key gen rsa mod 1024
ip ssh version 2
int g0/3
no sw
ip add 10.10.200.2 255.255.255.252
no shu
! vlan
vlan 10
name USERS
vlan 20
name SERVERS
vlan 30
name MGMT
vlan 99
name NATIVE
vlan 999
name BLACKHOLE
spanning-tree mode mst
spanning-tree mst configuration
instance 1 vlan 10, 30
instance 2 vlan 20
spanning-tree mst 1 root primary
spanning-tree mst 2 root secondary
! INT VLAN
track 1 interface g0/3 line-protocol
int vlan 10
ip add 10.10.10.1 255.255.255.0
standby 1 ip 10.10.10.254
standby 1 priority 101
standby 1 preempt
standby 1 track 1 decrement 100
no shu
int vlan 20
ip add 10.10.20.1 255.255.255.0
standby 2 ip 10.10.20.254
standby 2 priority 100
standby 2 preempt
standby 2 track 1 decrement 100
no shu
int vlan 30
ip add 10.10.30.1 255.255.255.0
standby 3 ip 10.10.30.254
standby 3 priority 101
standby 3 preempt
standby 3 track 1 decrement 100
no shu
! LACP and TRUNK
int range g0/0-1
no shu
channel-group 1 mode active
int range g0/0-2, g1/0, po1
sw tr en dot
sw mode tr
sw tr nat vlan 99
no shu
! DHCP
ip dhcp excluded-address 10.10.10.0 10.10.10.49
ip dhcp excluded-address 10.10.10.150 10.10.10.255
ip dhcp pool VLAN10
network 10.10.10.0 255.255.255.0
default-router 10.10.10.254
! EIGRP
key chain EIGRP
key 100
key-string P@ssw0rd!
router eigrp CORP
address-family ipv4 unicast autonomous-system 100
af-interface g0/3
authentication key-chain EIGRP
authentication mode md5
exit-af-interface
network 10.10.200.0 0.0.0.3
network 10.10.10.0 0.0.0.255
network 10.10.20.0 0.0.0.255
network 10.10.30.0 0.0.0.255
exit-address-family
DSW2
en
conf t
hostname DSW2
enable secret P@ssw0rd!
username admin secret P@ssw0rd! pri 15
line vty 0 4
login local
transport input ssh
banner "Authorized access only"
ip domain-name local
crypto key gen rsa mod 1024
ip ssh version 2
int g0/3
no sw
ip add 10.10.200.6 255.255.255.252
no shu
! vlan
vlan 10
name USERS
vlan 20
name SERVERS
vlan 30
name MGMT
vlan 99
name NATIVE
vlan 999
name BLACKHOLE
spanning-tree mode mst
spanning-tree mst configuration
instance 1 vlan 10, 30
instance 2 vlan 20
spanning-tree mst 1 root secondary
spanning-tree mst 2 root primary
! INT VLAN
track 1 interface g0/3 line-protocol
int vlan 10
ip add 10.10.10.2 255.255.255.0
standby 1 ip 10.10.10.254
standby 1 priority 100
standby 1 preempt
standby 1 track 1 decrement 100
no shu
int vlan 20
ip add 10.10.20.2 255.255.255.0
standby 2 ip 10.10.20.254
standby 2 priority 101
standby 2 preempt
standby 2 track 1 decrement 100
no shu
int vlan 30
ip add 10.10.30.2 255.255.255.0
standby 3 ip 10.10.30.254
standby 3 priority 100
standby 3 preempt
standby 3 track 1 decrement 100
no shu
! TRUNK
int range g0/0, g0/2, g1/0
sw tr en dot
sw mode tr
sw tr all vlan 10,20,30,99
sw tr nat vlan 99
no shu
! DHCP
ip dhcp excluded-address 10.10.10.0 10.10.10.149
ip dhcp excluded-address 10.10.10.254
ip dhcp pool VLAN10
network 10.10.10.0 255.255.255.0
default-router 10.10.10.254
! EIGRP
key chain EIGRP
key 100
key-string P@ssw0rd!
router eigrp CORP
address-family ipv4 unicast autonomous-system 100
af-interface g0/3
authentication key-chain EIGRP
authentication mode md5
exit-af-interface
network 10.10.200.4 0.0.0.3
network 10.10.10.0 0.0.0.255
network 10.10.20.0 0.0.0.255
network 10.10.30.0 0.0.0.255
exit-address-family
ASW1
en
conf t
hostname ASW1
enable secret P@ssw0rd!
username admin secret P@ssw0rd! pri 15
line vty 0 4
login local
transport input ssh
banner "Authorized access only"
ip domain-name local
crypto key gen rsa mod 1024
ip ssh version 2
! vlan
vlan 10
name USERS
vlan 20
name SERVERS
vlan 30
name MGMT
vlan 99
name NATIVE
vlan 999
name BLACKHOLE
spanning-tree mode mst
spanning-tree vlan 10,20,30
int vlan 30
ip add 10.10.30.10 255.255.255.0
no shu
! LACP and TRUNK
int range g0/0-1
no shu
channel-group 1 mode active
int range g0/0-2, po1
sw tr en dot
sw mode tr
sw tr all vlan 10,20,30,99
sw tr nat vlan 99
no shu
# Access
interface GigabitEthernet1/0
switchport mode access
switchport access vlan 10
switchport port-security maximum 10
switchport port-security violation restrict
switchport port-security
no shu
ip dhcp snooping
ip dhcp snooping vlan 10
no ip dhcp snooping information option
ip arp inspection vlan 10
int range g0/0-2, po1
ip dhcp snooping trust
ip arp inspection trust
exit
DC-SW
en
conf t
hostname DC-SW
enable secret P@ssw0rd!
username admin secret P@ssw0rd! pri 15
line vty 0 4
login local
transport input ssh
banner "Authorized access only"
ip domain-name local
crypto key gen rsa mod 1024
ip ssh version 2
! vlan
vlan 10
name USERS
vlan 20
name SERVERS
vlan 30
name MGMT
vlan 99
name NATIVE
vlan 999
name BLACKHOLE
spanning-tree mode mst
spanning-tree vlan 10,20,30
int vlan 30
ip add 10.10.30.11 255.255.255.0
no shu
! TRUNK
int range g0/0-1
sw tr en dot
sw mode tr
sw tr all vlan 10,20,30,99
sw tr nat vlan 99
no shu
# Access
interface GigabitEthernet1/0
switchport mode access
switchport access vlan 20
switchport port-security maximum 10
switchport port-security violation restrict
switchport port-security
no shu