7. Small office configuration scenario with VLAN and internet access nr. 1

image_pdfimage_print

This scenario focus on:

  • host separation on appropriate VLAN
    fa0/1.3 192.168.3.1/24     vlan 3 Students
             .6 192.168.6.1/24     vlan 6 Staff
             .9 192.168.9.1/24     vlan 9 Farm
             .12 192.168.12.1/24 vlan 12 Admin&Native
  • inter VLAN communication with router on a stick scenario
    interface FastEthernet0/1
     no ip address
     duplex auto
     speed auto
    !
    interface FastEthernet0/1.3
     encapsulation dot1Q 3
     ip address 192.168.3.1 255.255.255.0
     ip nat inside
    !
    interface FastEthernet0/1.6
     encapsulation dot1Q 6
     ip address 192.168.6.1 255.255.255.0
     ip nat inside
    !
    interface FastEthernet0/1.9
     encapsulation dot1Q 9
     ip address 192.168.9.1 255.255.255.0
     ip nat inside
    !
    interface FastEthernet0/1.12
     encapsulation dot1Q 12 native
     ip address 192.168.12.1 255.255.255.0
     ip access-group ADMIN in
  • basic admin VLAN security
    ip access-list standard ADMIN
     permit host 192.168.12.10
    interface FastEthernet0/1.12
     encapsulation dot1Q 12 native
     ip address 192.168.12.1 255.255.255.0
     ip access-group ADMIN in
  • DHCP with first nine excluded address
    ip dhcp excluded-address 192.168.3.1 192.168.3.9
    ip dhcp excluded-address 192.168.6.1 192.168.6.9
    !
    ip dhcp pool VLAN3
     network 192.168.3.0 255.255.255.0
     default-router 192.168.3.1
     dns-server 192.168.9.254
    ip dhcp pool VLAN6
     network 192.168.6.0 255.255.255.0
     default-router 192.168.6.1
     dns-server 192.168.9.254
  • DNS server on host in VLAN 9 with IP 192.168.9.254/24
     
  • static NAT translation for server
    ip nat inside source static 192.168.9.254 200.0.0.1 
  • NAT with overload for private host accessing internet
     
    ip nat inside source list NAT interface Serial0/0/0 overload
    ip access-list standard NAT
    permit 192.168.3.0 0.0.0.255
    permit 192.168.6.0 0.0.0.255
     
    Preconfigured scenario can be obtained from here (PKT 5.2 or above you need).
    Topology diagram of descreibed network is on next picture. Host VLAN assignment is marked with configuration description
Share the article via the network
Translate »