Ernesto Guevara / eguevara@internetexperto.

com



InterVLAN Routing
Router CGR 2010

















Ernesto Guevara / eguevara@internetexperto.com
Configuracion de una interface GigaEthernet con el objetivo de levantar tres interfaces virtuales que
iran conectadas a un switch que reciba el trafico mediante TRUNK.
Configuracin Propuesta en CGR2010
Router-ORT#sh run
Building configuration...

Current configuration : 5913 bytes
!
! Last configuration change at 17:38:49 UTC Tue Jul 29 2014 by eguevara
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname Router-ORT
!
boot-start-marker
boot-end-marker
!
!
enable secret 4 HZ5rGGsTLt7wxUV.kmmh/mTwwPN/ouR/5aU5ZXsi6.A
!
aaa new-model
!
!
aaa authentication login default local
!
!
!
!
!
Ernesto Guevara / eguevara@internetexperto.com
aaa session-id common
!
!
!
!
!
!
!
no ip domain lookup
ip cef
no ipv6 cef
multilink bundle-name authenticated
!
!
!
crypto pki trustpoint TP-self-signed-2584153780
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2584153780
revocation-check none
rsakeypair TP-self-signed-2584153780
!
!
crypto pki certificate chain TP-self-signed-2584153780
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32353834 31353337 3830301E 170D3132 31303130 31383430
33395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35383431
35333738 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100AE1C 15B9B754 FF338D29 A34D6251 440E8FB2 DC4FEC48 6FA5EC21 3F72D0CB
Ernesto Guevara / eguevara@internetexperto.com
8FFF8B14 63939C42 43CEA8F8 9E917E1A 46B19C4C FCFDC9BF 8E00DEED 7E59E7EA
1F89D4D4 BC5F32FD 4BBB5206 9DD0F983 0BAA74CA 8DDA477A DA06B24D AFF62E48
23821C71 2EDAB336 04D2A0EE 1A2E3CAF 67513C43 2042D05C 73C3CDA2 834EEBA7
FEC50203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 144EF71C 4882EF46 A4AF729A C49B961E C6249085 C6301D06
03551D0E 04160414 4EF71C48 82EF46A4 AF729AC4 9B961EC6 249085C6 300D0609
2A864886 F70D0101 05050003 81810051 084514C2 E2C0CCC5 E863292C CCAA1FA1
51CD48A0 8B091F54 79521D23 146FE449 19B56239 4B7C6B3E DA1547BF 292DE029
20EDD4DA 5F98F447 DAF00341 9504C455 2B9A52EF 4BA6317C E0AA43E0 E0B9C2A0
E5943F25 44B48097 C5454317 100DA4BF 3F760F2A CD5803C6 B58D44E9 0B58A44C
B8B6DF4C D3D0E909 8295D6F9 D46193
quit
license udi pid CGR-2010/K9 sn FTX1641AJGM
!
!
username eguevara privilege 15 secret 4 Gl5a/lLS70XOgebzyGc6DnbWMz9Rcm8baUcqlZJWDVc
!
!
!
!
!
!
interface GigabitEthernet0/0
no ip address
duplex full
speed 1000
!
interface GigabitEthernet0/0.1
encapsulation dot1Q 1 native
ip address 10.1.17.21 255.255.255.0
ip access-group 101 in
Ernesto Guevara / eguevara@internetexperto.com
!
interface GigabitEthernet0/0.2
encapsulation dot1Q 2
ip address 10.202.0.54 255.255.255.224
ip access-group 102 in
!
interface GigabitEthernet0/0.3
encapsulation dot1Q 3
ip address 10.202.0.65 255.255.255.224
ip access-group 103 in
!
interface GigabitEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
ip forward-protocol nd
!
no ip http server
!
!
access-list 101 permit ip 10.1.17.0 0.0.0.255 10.1.17.0 0.0.0.255
access-list 101 permit ip 10.1.17.0 0.0.0.255 10.202.0.32 0.0.0.31
access-list 101 permit ip 10.1.17.0 0.0.0.255 10.202.0.64 0.0.0.31
access-list 101 permit tcp any any eq www
access-list 101 permit tcp any any eq telnet
access-list 101 permit tcp any any eq smtp
access-list 101 permit tcp any any eq pop3
access-list 101 permit tcp any any eq ftp
access-list 101 permit tcp any any eq ftp-data
Ernesto Guevara / eguevara@internetexperto.com
access-list 101 permit icmp any any echo-reply
access-list 101 permit udp any any eq domain
access-list 101 permit udp any eq domain any
access-list 101 permit tcp any any eq domain
access-list 102 permit ip 10.202.0.32 0.0.0.31 10.202.0.32 0.0.0.31
access-list 102 permit ip 10.202.0.32 0.0.0.31 10.202.0.64 0.0.0.31
access-list 102 permit ip 10.202.0.64 0.0.0.31 10.202.0.32 0.0.0.31
access-list 102 permit tcp any any eq www
access-list 102 permit tcp any any eq telnet
access-list 102 permit tcp any any eq smtp
access-list 102 permit tcp any any eq pop3
access-list 102 permit tcp any any eq ftp
access-list 102 permit tcp any any eq ftp-data
access-list 102 permit icmp any any echo-reply
access-list 102 permit udp any any eq domain
access-list 102 permit udp any eq domain any
access-list 102 permit tcp any any eq domain
access-list 102 permit tcp any eq domain any
access-list 103 permit ip 10.202.0.64 0.0.0.31 10.202.0.64 0.0.0.31
access-list 103 permit ip 10.202.0.64 0.0.0.31 10.202.0.32 0.0.0.31
access-list 103 permit ip 10.202.0.32 0.0.0.31 10.202.0.64 0.0.0.31
access-list 103 permit tcp any any eq www
access-list 103 permit tcp any any eq telnet
access-list 103 permit tcp any any eq smtp
access-list 103 permit tcp any any eq pop3
access-list 103 permit tcp any any eq ftp
access-list 103 permit tcp any any eq ftp-data
access-list 103 permit icmp any any echo-reply
access-list 103 permit udp any any eq domain
access-list 103 permit udp any eq domain any
access-list 103 permit tcp any any eq domain
Ernesto Guevara / eguevara@internetexperto.com
access-list 103 permit tcp any eq domain any
!
!
!
!
!
control-plane
!
!
banner exec ^C Usted ha ingresado a un Enrutador Propiedad de la NASA ^C
banner login ^C Propiedad de la NASA ^C
!
line con 0
line aux 0
line vty 0 4
transport input telnet ssh
line vty 5
transport input telnet ssh
line vty 6 1370
transport input all
!
scheduler allocate 20000 1000
!
end

Router-ORT#





Ernesto Guevara / eguevara@internetexperto.com
: Router-ORT#sh capability feature routing
Displaying capability information for all available features:
L3VPN Inter-AS Hybrid: Enabled
L3VPN PE-CE Link Protection: Enabled
OSPF nssa-only: Enabled
OSPF Connected prefix suppression: Enabled
OSPF support of RFC3101: Enabled
OSPFv3 IPsec auth/encr: Enabled
OSPFv3 BFD: Enabled
OSPFv3 Graceful Restart: Enabled
OSPFv3 Address Families: Enabled
OSPFv3 PE-CE: Enabled
OSPFv3 external path preference: Enabled
OSPFv3 Stub Router Advertisement: Enabled
BGP Remove Private AS all: Enabled
BGP Route Target Constraint: Enabled
BGPv4 Prefix Independent Convergence: Enabled
BGP Diverse Path: Enabled
BGP Dynamic Neighbors: Enabled
Multicast Live-Live: Enabled
BGP Slow peer: Enabled
BGP Consistency Checker: Enabled
BGP Selective Address Tracking (bgp nexthop route-map): Enabled
IPv4 static BFD: Enabled
ISIS IPV6 admin tag and advertise passive-only: Enabled
BGPv6 Prefix Independent Convergence: Enabled
BGPv6 BFD: Enabled
BGP MIB Version 2 Support: Enabled
BGP Enhanced Refresh: Enabled
BGP BFD GSHUT: Enabled
Route Tag in Dotted Decimal Notation: Enabled