Cisco | Full LAB Network for ISE Project
Berikut konfigurasi masing-masing perangkat
1. SW-ACC-01
conf t
hostname SW-ACC-01
!
username admin privilege 15 password 0 123
no aaa new-model
clock timezone WIB 7 0
!
no ip routing
!
ip domain-name training.lab
!
interface Ethernet0/0
description LINK-TO-DIST-01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet0/1
switchport access vlan 10
switchport mode access
!
interface Ethernet0/2
switchport access vlan 20
switchport mode access
!
interface Vlan999
description Mgmt
ip address 10.99.99.2 255.255.255.0
no ip route-cache
!
ip default-gateway 10.99.99.1
!
line vty 0 4
exec-timeout 10 5
login
transport input all
!
SW-ACC-01#
1. SW-DISTI-01
conf t
hostname SW-DISTI-01
!
username admin privilege 15 password 0 123
clock timezone WIB 7 0
!
ip domain-name training.lab
!
interface Loopback0
ip address 192.168.254.2 255.255.255.255
!
interface Ethernet0/0
description linkt-to-ACC-01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet0/3
description LINK-TO-CORE-01
no switchport
ip address 10.1.1.1 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
!
interface Vlan10
ip address 10.87.10.1 255.255.255.0
ip ospf 1 area 0
!
interface Vlan20
ip address 10.87.20.1 255.255.255.0
ip ospf 1 area 0
!
interface Vlan999
ip address 10.99.99.1 255.255.255.0
ip ospf 1 area 0
!
router ospf 1
!
line vty 0 4
login
transport input all
!
SW-DISTI-01#
1. SW-CORE-01
conf t
hostname SW-CORE-01
!
username admin privilege 15 password 0 123
!
ip domain-name training.lab
!
interface Loopback0
ip address 192.168.254.3 255.255.255.255
ip ospf 1 area 0
!
interface GigabitEthernet0/0
no switchport
ip address 10.1.1.5 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
!
interface GigabitEthernet0/1
no switchport
ip address 10.1.1.2 255.255.255.252
ip ospf network point-to-point
ip ospf 1 area 0
!
router ospf 1
default-information originate
!
ip route 0.0.0.0 0.0.0.0 10.1.1.6
ip route 192.168.100.0 255.255.255.0 10.1.1.6
ip route 192.168.200.0 255.255.255.0 10.1.1.6
ip route 192.168.255.0 255.255.255.0 10.1.1.6
ip ssh version 2
!
line vty 0 4
login
transport input all
!
SW-CORE-01#
1. SW-Agg-01
conf t
hostname SW-Agg-01
!
username admin privilege 15 password 0 123
clock timezone WIB 7 0
!
no ip routing
domain-name training.lab
!
interface Ethernet0/0
description Lik-to-FW-Forti-01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet0/1
description Linkt-SW-TOR
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Vlan255
description Management
ip address 192.168.255.2 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.255.254
ip ssh version 2
!
line vty 0 4
login
transport input all
!
SW-Agg-01#
1. SW-TOR-01
conf t
hostname SW-TOR-01
!
username admin privilege 15 password 0 123
clock timezone WIB 7 0
!
no ip routing
ip domain-name training.lab
!
interface Ethernet0/0
descrption Linkt-SW-Agg-01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface Ethernet0/1
description linkt-to-AD
switchport access vlan 100
switchport mode access
!
interface Ethernet0/2
description LINKT-TO-ISE1
switchport access vlan 100
switchport mode access
!
interface Ethernet0/3
description VLAN_200
switchport access vlan 200
switchport mode access
!
interface Vlan255
description Mgmt
ip address 192.168.255.1 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.255.254
ip ssh version 2
!
line vty 0 4
login
transport input all
!
SW-TOR-01#
1. FW-FORTI-02
Port Interface (Outside, INside, Vlan 100,200, 255 dan Mgmt)
DNS
ROUTING
POLICY
VERIFIKASI:
Posting Komentar untuk "Cisco | Full LAB Network for ISE Project"