shor int port 1 swicthport

sho ip dhcp snopping binding

---------------diatribucion----------------
service dhcp

ip access-list standar ACL-VTY

permit 10.0.20.0 0.0.0.255
permit 10.0.110.0 0.0.0.255

line vty 0 15
ip access-class ACL-VTY in

banner motd "acceso permitido solo a personal autorizado"

ip dhcp pool v20

network 10.0.20.0 /24
default-router 10.0.20.254

ip dhcp pool v30

network 10.0.30.0 /24
default-router 10.0.40.254

ip dhcp pool v40

network 10.0.40.0 /24
default-router 10.0.40.254

ip dhcp pool v45

network 10.0.45.0 /24
default-router 10.0.45.254

ip dhcp pool v50

network 10.0.50.0 /24
default-router 10.0.50.254

ip dhcp excluded-address 10.0.20.0 10.0.20.9

ip dhcp excluded-address 10.0.30.0 10.0.30.9
ip dhcp excluded-address 10.0.40.0 10.0.40.9
ip dhcp excluded-address 10.0.45.0 10.0.45.9
ip dhcp excluded-address 10.0.50.0 10.0.50.9
ip dhcp excluded-address 10.0.20.254
ip dhcp excluded-address 10.0.20.100
ip dhcp excluded-address 10.0.20.50

ip domain-name lab.test
no ip domain-lookup
line console 0
password labconsole
 login
enable password labenable
username remoteadm password labvty
cripto key generate rsa
1024
ip ssh version 2
line vty 0 15
transport imput ssh
login local

show vlan private-vlan

vlan 110
private-vlan primary
private-vlan association 111 , 112
vlan 111
private-vlan isolated
vlan 112
private-vlan comunity

int ra g2/0 , g 2/1

switcport access vlan 20
spanning port fast
switchport mode access
switchport no negotiate
swicthport port-security
swicthport port-security maximun 2
swicthport port-security violation restrict

int ra g1/0 , g1/1

switchport private-vlan host-association 110 111
switchport mode private-vlan host

spann portfast
switchport nonegotiate

int ra g2/2 , g 2/3

switchport mode access
switchport access vlan 30
swicthpot nonegotiate
spann port fast

int ra g1/2 , g 1/3

switchport mode private-vlan host
switchport private-vlan host-association 110 112
spann portfast
switchport nonegotiate

int ra g0/0 , g0/1

channel-group mode active
int port 1
switchport trun enc do1q
switcport mode trunk
switchport nonegotiate
int ra g0/2 , g0/3
channel-group 2 mode passive
int port 2
switchport trunk enc do1q
switchport mode trunk
swicthport nonegotiate

vtp mode server

vtp domain gas
vlan 20 name suport
vlan 30
name services
vlan 40
name sales
vlan 45
name store
vlan 50
name wlan
vlan 110
name private
vlan 111
name gttp
vlan 112
name erp

ip routing

int vlan 20
ip add 10.0.20.254 255.255.255.0
no shut

int vlan 30
ip add 10.0.30.254 255.255.255.0
no shut

int vlan 40
ip add 10.0.40.254 255.255.255.0
no shut

int vlan 45
ip add 10.0.45.254 255.255.255.0
no shut

int vlan 50
ip add 10.0.50.254 255.255.255.0
no shut
int vlan 110
ip add 10.0.110.254 255.255.255.0
no shut
private-vlan mapping 111, 112

vtp mode server

vtp domain gas
vtp mode off (para no tener que crear las vlan en todos los switches)

--------------------------accesss 1-----------------------
ip defaul-gateway 10.0.20.254
int vlan 20
ip add 10.0.20.50 255.255.255.0

int ra g0/0 , g 0/ 1
channel-group 1 mode pasive

int port 1
switchport trunk enc dot1q
switchport mode trunk
switchport nonegotiate
ip dhcp spooping trust

int ra g0/3 , g 0/2

channel-group 3 mode on
int port 3
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
ip dhcp spooping trust

vtp mode server

vtp domain gas
vtp mode off (para no tener que crear las vlan en todos los switches)

int g 1/0 , g1/1

switchport mode access
swicthport acces vlan 40
swicthport nonegotiate
spann port-fast
swicthport port-security
swicthport port-security maximun 2
swicthport port-security violation shutdown

in ra g1/2 , g1/3

switchport mode access

swicthport acces vlan 45
swicthport nonegotiate
spann port-fast
switchport protected
swicthport port-security
swicthport port-security maximun 2
swicthport port-security violation shutdown

int ra g2/0 , g 2/1

switchport mode access
swinctport acces vlan 20
spannport fast
switchport nonegotiate
swicthport port-security
swicthport port-security maximun 2
swicthport port-security violation restrict

ip dhcp snooping
ip dhcp snooping vlan 40 , 45 , 20
no ip dhcp snoopong information option

-------------------acl2-------

ip default-gateway 10.0.20.254

int vlan 20
ip add 10.0.20.100 255.255.255.0
no shut

int ra g0/3 g0/2

channel-group 3 mode on
int port 3
switchport trun enc dot1q
swtchport mode trunk
swichtport nonegotiate
ip dhcp spooping trust

int ra g0/0 , g0/1

channel-group 2 mode active
int port 2
switchport trunk en dot1q
switchport mode trunk
swicthport nonegotiate
ip dhcp spooping trust

vtp mode server

vtp domain gas
vtp mode off

int ra g1/0 , g 1/1

spann port-fast
swcthport mode acces
swtchort access vlan 50
swicthport nonegotiate

ip dhcp snooping
ip dhcp snooping vlan 50
no ip dhcp snoopong information option

----------------------------