no ip domain-l

line con 0
logg s
exi

ACC 2
-------------------------
vlan 10
name DSN
vlan 20
name MHS
int f0/1
sw mode access
switchport access vlan 10
int f0/2
sw mode access
switchport access vlan 20
exi
int f0/3
sw mode trunk
exi
vlan 88
name admin
int vlan 88
ip address 172.16.88.1 255.255.255.0
no sh
exi
line vty 0 4
pass tekom
login
line con 0
pass 123
login
exi

-----
int vlan 88
ip default-gateway 172.16.88.254
exi

ACC 1
----------------------------
vlan 30
name DSN
vlan 40
name MHS
int f0/1
sw mode access
switchport access vlan 30
int f0/2
sw mode access
switchport access vlan 40
exi
int f0/3
sw mode trunk
exi
vlan 99
name admin
int vlan 99
ip address 172.16.99.1 255.255.255.0
no sh
exi
line vty 0 4
pass tekom
login
line con 0
pass 123
login
exi

-----
int vlan 99
ip default-gateway 172.16.99.254
exi

DIST 2
------------------------------
vlan 10
name DSN
vlan 20
name MHS
vlan 88
name admin
exi
int f0/1
switchport trunk encapsulation dot1q
switchport mode trunk
int vlan 10
ip address 172.16.10.1 255.255.255.0
int vlan 20
ip address 172.16.20.1 255.255.255.0
exi
int f0/2
no sw
ip address 172.16.0.2 255.255.255.252
no sh
exi

ip dhcp pool vlan10

net 172.16.10.0 255.255.255.0
default-router 172.16.10.1
ip dhcp pool vlan20
net 172.16.20.0 255.255.255.0
default-router 172.16.20.1
exi
ip dhcp excluded-address 172.16.10.1 172.16.10.3
ip dhcp excluded-address 172.16.20.1 172.16.20.3

ip routing

-----
int vlan 88
ip address 172.168.88.254 255.255.255.0
no sh
exi

router ospf 1
net 172.16.0.0 0.0.255.255 area 0
exi

DIST 1
----------------------------------
vlan 30
name DSN
vlan 40
name MHS
vlan 99
name admin
exi

int f0/1
switchport trunk encapsulation dot1q
switchport mode trunk

int f0/2
no sw
ip address 172.16.0.6 255.255.255.252
no sh

int vlan 30
ip address 172.16.30.1 255.255.255.0

int vlan 40
ip address 172.16.40.1 255.255.255.0

exi
ip dhcp pool vlan30
net 172.16.30.0 255.255.255.0
default-router 172.16.30.1
ip dhcp pool vlan40
net 172.16.40.0 255.255.255.0
default-router 172.16.40.1
exi
ip dhcp excluded-address 172.16.30.1 172.16.30.3
ip dhcp excluded-address 172.16.40.1 172.16.40.3

ip routing

----
int vlan 99
ip address 172.168.99.254 255.255.255.0
no sh
exi
router ospf 1
net 172.16.0.0 0.0.255.255 area 0
exi

CORE
-----------------------------
int g1/0/1
no sw
ip address 172.16.0.1 255.255.255.252
no sh
int g1/0/2
no sw
ip address 172.16.0.5 255.255.255.252
no sh
int g1/0/3
no sw
ip address 172.16.0.10 255.255.255.252
no sh
exi

-----
ip routing

router ospf 1
net 172.16.0.0 0.0.255.255 area 0
default information originate
exi

ip route 0.0.0.0 0.0.0.0 172.16.0.9

Firewall
-----------------------------
int g0/0
ip address 172.16.0.9 255.255.255.252
no sh
int g0/1
ip address 192.168.10.2 255.255.255.252
no sh
exi

----
int g0/2
ip address 192.168.20.1 255.255.255.0
no sh
exi
ip route 172.16.0.0 255.255.0.0 172.16.0.10
// static nat
ip nat inside source static 192.168.20.2 209.100.100.1
int g0/2
ip nat inside
int g0/1
ip nat outside
exi

//dinamic nat dengan PAT

ip access-list standard USER-INT
permit 172.16.0.0 0.0.255.255
exi
ip nat pool USER-POOL 209.200.200.1 209.200.200.254 netmask 255.255.255.0
ip nat inside source list USER-INT pool USER-POOL overload

int g0/0
ip nat inside
exi

ip route 0.0.0.0 0.0.0.0 192.168.10.1

Border
-------------------------------
int g0/0
ip address 192.168.10.1 255.255.255.252
no sh
int s0/3/0
clock rate 64000
ip address 209.165.100.1 255.255.255.252
no sh
int s0/3/1
clock rate 64000
ip address 209.165.100.5 255.255.255.252
no sh
exi

----
router bgp 100
neighbor 209.165.100.2 remote-as 200
neighbor 209.165.100.6 remote-as 300
net 209.100.100.0
net 209.200.200.0
exi

ip route 209.100.100.0 255.255.255.0 192.168.10.2

ip route 209.200.200.0 255.255.255.0 192.168.10.2

ISP1
----------------------------------
int s0/1/0
ip address 209.165.100.2 255.255.255.252
no sh
int s0/2/0
ip address 209.165.100.9 255.255.255.252
clock rate 64000
no sh
int s0/1/1
ip address 209.165.100.13 255.255.255.252
clock rate 64000
no sh
exi

----
int Loopback0
ip address 10.2.2.1 255.255.255.0
exi

router bgp 200

neighbor 209.165.100.1 remote-as 100
neighbor 209.165.100.10 remote-as 300
neighbor 209.165.100.14 remote-as 400
net 10.2.2.0 mask 255.255.255.0
exi

ISP2
-----------------------------
int s0/2/0
ip address 209.165.100.10 255.255.255.252
no sh
int s0/1/0
ip address 209.165.100.6 255.255.255.252
no sh
int s0/1/1
ip address 209.165.100.17 255.255.255.252
clock rate 64000
no sh
exi

-----
int Loopback0
ip address 10.3.3.1 255.255.255.0
exi

router bgp 300

neighbor 209.165.100.5 remote-as 100
neighbor 209.165.100.9 remote-as 200
neighbor 209.165.100.18 remote-as 500
net 10.3.3.0 mask 255.255.255.0
exi
ISP3
-------------------------------
int s0/1/0
ip address 209.165.100.14 255.255.255.252
no sh
int s0/2/0
ip address 209.165.100.21 255.255.255.252
clock rate 64000
no sh
int s0/1/1
clock rate 64000
ip address 209.165.100.25 255.255.255.252
no sh
exi

----
int Loopback0
ip address 10.4.4.1 255.255.255.0
exi

router bgp 400

neighbor 209.165.100.13 remote-as 200
neighbor 209.165.100.22 remote-as 500
neighbor 209.165.100.26 remote-as 600
net 10.4.4.0 mask 255.255.255.0
exi

ISP4
----------------------------------
int s0/1/0
ip address 209.165.100.18 255.255.255.252
no sh
int s0/2/0
ip address 209.165.100.22 255.255.255.252
no sh
int s0/1/1
ip address 209.165.100.29 255.255.255.252
clock rate 64000
no sh
exi

----
int Loopback0
ip address 10.5.5.1 255.255.255.0
exi

router bgp 500

neighbor 209.165.100.17 remote-as 300
neighbor 209.165.100.21 remote-as 400
neighbor 209.165.100.30 remote-as 600
net 10.5.5.0 mask 255.255.255.0
exi

XYZ
------------------------------------
int s0/1/1
ip address 209.165.100.30 255.255.255.252
no sh
int s0/1/0
ip address 209.165.100.26 255.255.255.252
no sh
int g0/0
ip address 209.150.100.1 255.255.255.0
no sh
exi

---
int loopback0
ip address 10.6.6.1 255.255.255.0
exi

router bgp 600

neighbor 209.165.100.25 remote-as 400
neighbor 209.165.100.29 remote-as 500
net 10.6.6.0 mask 255.255.255.0
net 209.150.100.0 mask 255.255.255.0
exi