en
conf t
! BASIC
hostname DSW1
clock timezone UTC +8
ip domain-name qualifier2026.skill39.int
username admin privilege 15 algorithm-type sha256 secret Passw0rd!
enable algorithm-type sha256 secret Passw0rd!
crypto key generate rsa modulus 3072
ip ssh version 2
banner motd AUTHORIZED ACCESS ONLY.
ip access-list standard SSH
permit 10.10.30.0 0.0.0.255
permit 10.20.60.0 0.0.0.255
line vty 0 4
access-class SSH in
login local
transport input ssh
! VLAN
vlan 10
name USERS
vlan 20
name SERVICES
vlan 30
name MGMT
vlan 999
name PARKING
span mode mst
span mst con
name NB-REGION
revision 26
instance 1 vlan 10,30
instance 2 vlan 20
exit
spanning-tree mst 1 root pri
spanning-tree mst 2 root se
int loop0
ip add 10.255.1.11 255.255.255.255
ipv6 add 2001:db8:10:ff::11/128
no shu
int g0/3
no sw
ip add 10.10.200.2 255.255.255.252
ipv6 add 2001:db8:10:200::2/64
no nego auto
no shu
int g0/2
sw tr en dot
sw mode tr
sw tr all vlan 10,20,30
no nego auto
no shu
int range g0/0-1
sw tr en dot
channel-group 10 mode active
no nego auto
no shu
int po10
sw mode tr
sw tr all vlan 10,30
no shu
int g1/0
sw tr en dot
sw mode tr
sw tr all vlan 20,30
no nego auto
no shu
int range g1/1-3
shu
sw mode access
sw access vlan 999
no nego auto
! GLBP
track 1 interface g0/3 line-protocol
int vlan 10
ip add 10.10.10.2 255.255.255.0
glbp 10 ip 10.10.10.1
glbp 10 pre
glbp 10 prio 110
glbp 10 weighting 100 lower 90
glbp 10 wei track 1 dec 100
no shu
int vlan 20
ip add 10.10.20.2 255.255.255.0
glbp 20 ip 10.10.20.1
glbp 20 pre
glbp 20 prio 100
glbp 20 weighting 100 lower 90
glbp 20 wei track 1 dec 100
no shu
int vlan 30
ip add 10.10.30.2 255.255.255.0
glbp 30 ip 10.10.30.1
glbp 30 pre
glbp 30 prio 110
glbp 30 weighting 100 lower 90
glbp 30 wei track 1 dec 100
no shu
! HSRP
int vlan 20
ipv6 address 2001:db8:10:20::2/64
standby version 2
standby 20 ipv6 FE80::1
standby 20 preempt
standby 20 track 1 decrement 100
no shu
exit
! OSPFV2
router ospf 10
router-id 10.255.1.11
network 10.255.1.11 0.0.0.0 area 0
network 10.10.200.0 0.0.0.3 area 0
network 10.10.10.0 0.0.0.255 area 10
network 10.10.20.0 0.0.0.255 area 10
network 10.10.30.0 0.0.0.255 area 10
pass vlan 10
pass vlan 20
pass vlan 30
area 10 range 10.10.0.0 255.255.224.0
exit
! OSPFV3
ipv6 unicast-routing
router ospfv3 10
router-id 10.255.1.11
passive-interface vlan 20
int vlan 20
ipv6 ospf 10 area 20
int loop0
ipv6 ospf 10 area 0
int g0/3
ipv6 ospf 10 area 0
# DHCP
ip dhcp excluded-address 10.10.10.0 10.10.10.99
ip dhcp excluded-address 10.10.10.200 10.10.10.255
ip dhcp pool USERS
network 10.10.10.0 255.255.255.0
default-router 10.10.10.1
dns-server 10.10.20.10
DSW2
en
conf t
! BASIC
hostname DSW2
clock timezone UTC +8
ip domain-name qualifier2026.skill39.int
username admin privilege 15 algorithm-type sha256 secret Passw0rd!
enable algorithm-type sha256 secret Passw0rd!
crypto key generate rsa modulus 3072
ip ssh version 2
banner motd AUTHORIZED ACCESS ONLY.
ip access-list standard SSH
permit 10.10.30.0 0.0.0.255
permit 10.20.60.0 0.0.0.255
permit 127.0.0.1 0.0.0.0
line vty 0 4
access-class SSH in
login local
transport input ssh
! VLAN
vlan 10
name USERS
vlan 20
name SERVICES
vlan 30
name MGMT
vlan 999
name PARKING
span mode mst
span mst con
name NB-REGION
revision 26
instance 1 vlan 10,30
instance 2 vlan 20
exit
spanning-tree mst 1 root se
spanning-tree mst 2 root pri
int loop0
ip add 10.255.1.12 255.255.255.255
ipv6 add 2001:db8:10:ff::12/128
no shu
int g0/3
no sw
ip add 10.10.200.6 255.255.255.252
ipv6 add 2001:db8:10:204::2/64
no nego auto
no shu
int g0/2
sw tr en dot
sw mode tr
sw tr all vlan 10,20,30
no nego auto
no shu
int g0/0
sw tr en dot
sw mode tr
sw tr all vlan 10,30
no nego auto
no shu
int g1/0
sw tr en dot
sw mode tr
sw tr all vlan 20,30
no nego auto
no shu
int range g1/1-3, g0/1
shu
sw mode access
sw access vlan 999
no nego auto
! GLBP
track 1 interface g0/3 line-protocol
int vlan 10
ip add 10.10.10.3 255.255.255.0
glbp 10 ip 10.10.10.1
glbp 10 pre
glbp 10 prio 100
glbp 10 weighting 100 lower 90
glbp 10 wei track 1 dec 100
no shu
int vlan 20
ip add 10.10.20.3 255.255.255.0
glbp 20 ip 10.10.20.1
glbp 20 pre
glbp 20 prio 110
glbp 20 weighting 100 lower 90
glbp 20 wei track 1 dec 100
no shu
int vlan 30
ip add 10.10.30.3 255.255.255.0
glbp 30 ip 10.10.30.1
glbp 30 pre
glbp 30 prio 100
glbp 30 weighting 100 lower 90
glbp 30 wei track 1 dec 100
no shu
! HSRP
int vlan 20
ipv6 address 2001:db8:10:20::3/64
standby version 2
standby 20 ipv6 FE80::1
standby 20 preempt
standby 20 track 1 decrement 100
no shu
exit
! OSPF
router ospf 10
router-id 10.255.1.12
network 10.255.1.12 0.0.0.0 area 0
network 10.10.200.4 0.0.0.3 area 0
network 10.10.10.0 0.0.0.255 area 10
network 10.10.20.0 0.0.0.255 area 10
network 10.10.30.0 0.0.0.255 area 10
pass vlan 10
pass vlan 20
pass vlan 30
area 10 range 10.10.0.0 255.255.224.0
! OSPFv3
ipv6 unicast-routing
router ospfv3 10
router-id 10.255.1.12
passive-interface vlan 20
int vlan 20
ipv6 ospf 10 area 20
int loop0
ipv6 ospf 10 area 0
int g0/3
ipv6 ospf 10 area 0
ASW1
en
conf t
! BASIC
hostname ASW1
clock timezone UTC +8
ip domain-name qualifier2026.skill39.int
username admin privilege 15 algorithm-type sha256 secret Passw0rd!
enable algorithm-type sha256 secret Passw0rd!
crypto key generate rsa modulus 3072
ip ssh version 2
banner motd AUTHORIZED ACCESS ONLY.
ip access-list standard SSH
permit 10.10.30.0 0.0.0.255
permit 10.20.60.0 0.0.0.255
line vty 0 4
access-class SSH in
login local
transport input ssh
! VLAN
vlan 10
name USERS
vlan 20
name SERVERS
vlan 30
name MGMT
vlan 999
name PARKING
span mode mst
span mst con
name NB-REGION
revision 26
instance 1 vlan 10,30
instance 2 vlan 20
exit
spanning-tree mst 1 priority 40960
spanning-tree mst 2 priority 40960
int range g0/0-1
sw tr en dot
channel-group 10 mode active
no nego auto
no shu
int po10
sw mode tr
sw tr all vlan 10,30
no shu
int g0/2
sw tr en dot
sw mode tr
sw tr all vlan 10,30
no nego auto
no shu
int range g1/1-3,g0/3
shu
sw mode access
sw access vlan 999
no nego auto
int vlan 30
ip add 10.10.30.11 255.255.255.0
no shu
int g1/0
sw mode access
sw acc vlan 10
no shu
# Access
interface g1/0
sw mode access
sw access vlan 10
sw port-security
sw port-security max 2
sw port-security violation restrict
sw port-security mac-address sticky
no shu
exit
ip dhcp snooping
ip dhcp snooping vlan 10
no ip dhcp snooping information option
ip arp inspection vlan 10
int range g0/0-2, po1
ip dhcp snooping trust
ip arp inspection trust
exit
DC-SW
en
conf t
! BASIC
hostname DC-SW
clock timezone UTC +8
ip domain-name qualifier2026.skill39.int
username admin privilege 15 algorithm-type sha256 secret Passw0rd!
enable algorithm-type sha256 secret Passw0rd!
crypto key generate rsa modulus 3072
ip ssh version 2
banner motd AUTHORIZED ACCESS ONLY.
ip access-list standard SSH
permit 10.10.30.0 0.0.0.255
permit 10.20.60.0 0.0.0.255
line vty 0 4
access-class SSH in
login local
transport input ssh
! VLAN
vlan 10
name USERS
vlan 20
name SERVICES
vlan 30
name MGMT
vlan 999
name PARKING
span mode mst
span mst con
name NB-REGION
revision 26
instance 1 vlan 10,30
instance 2 vlan 20
exit
spanning-tree mst 1 priority 40960
spanning-tree mst 2 priority 40960
int range g0/0-1
sw tr en dot
sw mode tr
sw tr all vlan 20,30
no nego auto
no shu
int range g1/0-3,g0/3
shu
sw mode access
sw access vlan 999
no nego auto
int vlan 30
ip add 10.10.30.12 255.255.255.0
no shu
# Access
interface g0/2
sw mode access
sw acc vlan 20
sw port-security
sw port-security max 2
sw port-security violation restrict
sw port-security mac-address sticky
no shu