Comandos VLSM

Configuración Básica Router enable configure terminal hostname [Nombre Router] enable secret [Contraseña Secret] no ip domain-lookup banner motd #[mensaje del día]# line vty 0 4 password [contraseña VTY] login exit line console 0 password [contraseña consola] login exit service password-encryption interface fastethernet [N° Interface] ip address [IP] [Máscara] no shutdown exit interface serial [N° Interface] ip address [IP] [Máscara] clock rate [Velocidad de reloj, si es DCE, típicamente 128000] no shutdown exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración Interfaces Loopback (Interfaces virtuales) interface loopback [N°] ip address [IP] [Máscara] exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración Enrutamiento Estático ip route [Red Destino] [Máscara Red Destino] [Interface de Salida] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración Enrutamiento Estático por defecto ip route 0.0.0.0 0.0.0.0 [Interface de salida] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración Enrutamiento EIGRP router eigrp [N° AS] network [Red 1] network [Red 2] no auto-summary exit interface [nombre] [N°] bandwidth [Ancho de banda en kbps] ip hello-interval eigrp [N° AS] [Tiempo Segundos] exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración enrutamiento OSPF router ospf [ID Proccess(1 - 65535)] network [IP Red 1] [Wildcard] area [ID area, típicamente 0] network [IP Red 2] [Wildcard] area [ID area, típicamente 0] router-id [IP ID] exit interface [nombre] [N°] bandwidth [Ancho de Banda en kbps] ip ospf cost [costo enlace] ip ospf hello-interval [Intervalo saludo en segundos] ip ospf dead-interval [intervalo muestro, hello x 4] ip ospf priority [prioridad interface dentro del proceso de selección del DR]

%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración VLAN y enrutamiento inter-vlan en switch configure terminal vlan 10 name [nombre vlan 10] exit vlan 20 name [nombre vlan 20] exit interface fastethernet 0/[N° Interface, si se trata de una sola] switchport mode access switchport access vlan [Número de VLAN] exit interface range fastethernet 0/[N° Inicial] - [N° Final, si es un rango] switchport mode access switchport access vlan [N° VLAN] exit interface fastethernet 0/0 switchport mode trunk exit En el router configure terminal interface fastethernet 0/0 no shutdown exit interface fasethernet 0/0.[N° Subinterface, generalmente el mismo de la VLAN] encapsulation dot1q [N° VLAN] ip address [IP VLAN] [Máscara de red] exit interface fasethernet 0/0.[N° Subinterface para la siguiente VLAN] encapsulation dot1q [N° VLAN] ip address [IP VLAN] [Máscara de red] exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración DHCP configure terminal ip dhcp pool [Nombre DHCP] network [IP Grupo DHCP] [Máscara de Red] default-router [IP Puerta de Enlace] dns-server [IP Servidor DNS] exit ip dhcp excluded-address [IP Excluida del Servidor DHCP] Cuando es necesario configurar un reenvio (relay-dhcp) para convertir un broadcast DHCP a un unicast DHCP en servidores DHCP remotos, en la interface que recibe las peticiones DHCP se ejecuta: ip helper-address [IP Servidor DHCP] %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración SSH, el nombre del router debe ser distinto del por defecto configure terminal hostname [nombre router] username [nombre usuario] password [contraseña] ip domain-name [nombre de dominio] crypto key generate rsa

[ingresar longitud clave rsa, en bits, típicamente 512] ip ssh version 2 line vty 0 4 transport input ssh login local exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Configuración de protección de acceso vty solo a un PC específico access-list 1 permit host [IP Host Admin] line vty 0 4 access-class 1 in exit %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% Red Host Bits Máscara Wildcard VLAN 30 750 10 /22 (255.255.252.0) 0.0.3.255 VLAN 20 200 8 /24 (255.255.255.0) 0.0.0.255 VLAN 10 50 6 /26 (255.255.255.192) 0.0.0.63 VLAN 50 20 5 /27 (255.255.255.224) 0.0.0.31 VLAN 40 10 4 /28 (255.255.255.240) 0.0.0.15 Serv 10 4 /28 (255.255.255.240) 0.0.0.15 Central 4 3 /29 (255.255.255.248) 0.0.0.7 ADMIN 2 2 /30 (255.255.255.252) 0.0.0.3 WAN 1 2 2 /30 (255.255.255.252) 0.0.0.3 WAN 2 2 2 /30 (255.255.255.252) 0.0.0.3 WAN 3 2 2 /30 (255.255.255.252) 0.0.0.3 WAN 4 2 2 /30 (255.255.255.252) 0.0.0.3 WAN 5 2 2 /30 (255.255.255.252) 0.0.0.3 VLAN 30 172.16.128.0 /22 172.16.131.255 /22 VLAN 20 172.16.132.0 /24 172.16.132.255 /24 VLAN 10 172.16.133.0 /26 172.16.133.63 /26 VLAN 50 172.16.133.64 /27 172.16.133.95 /27 VLAN 40 172.16.133.96 /28 172.16.133.111 /28 Red Servidores 172.16.133.112 /28 172.16.133.127 /28 Red Central 172.16.133.128 /29 172.16.133.135 /29 Red ADMIN 172.16.133.136 /30 172.16.133.139 /30

WAN WAN WAN WAN WAN

1 2 3 4 5

172.16.133.140 172.16.133.144 172.16.133.148 172.16.133.152 172.16.133.156

/30 /30 /30 /30 /30