El poder de 01100011 Unix-FreeBSD: route

Mostrando entradas con la etiqueta route. Mostrar todas las entradas

sábado, 5 de septiembre de 2026

Configuración de WiFi con IP fija en FreeBSD 14.4

Incluye script de resume (opcional) para recuperar conexión tras hibernación

Configuración básica en /etc/rc.conf

Para usar una IP fija en wlan0, añadir o modificar estas líneas:

wlans_iwm0="wlan0"
ifconfig_wlan0="WPA inet 192.168.88.51 netmask 255.255.255.0"
defaultrouter="192.168.88.1"

En FreeBSD, la forma más sencilla y moderna de obtener el firmware para tu tarjeta inalámbrica es usando la herramienta fwget. Esta utilidad detecta automáticamente el hardware de tu sistema e instala los paquetes de firmware necesarios

sudo wget

Este comando analizará el hardware, identificará qué controladores y firmwares necesita e instalará los paquetes correspondientes automáticamente.

Configuración en /boot/loader.conf

Después de instalado el firmware, para que el sistema lo cargue al arrancar, es necesario agregar las siguientes líneas al archivo /boot/loader.conf

if_iwm_load="YES"
iwm8265fw_load="YES"
legal.intel_iwm.license_ack=1

Reiniciar el sistema para que los módulos se carguen correctamente

 reboot

Notas importantes: Asegúrarse de que /etc/wpa_supplicant.conf contiene los datos de su red WiFi. cat /etc/wpa_supplicant.conf

# /etc/wpa_supplicant.conf written by wifimgr(8)
ctrl_interface=/var/run/wpa_supplicant
eapol_version=2
fast_reauth=1

network={
	ssid="MikroTik-39F9C0"
	psk=755864a8b1a4ef59e2e62590977a75f5317193637a8629dccb18c40e8638a68e
}

Al usar IP fija, no se necesita dhclient. Por tanto, desactivar background_dhclient (ponerlo a "NO" o eliminar la línea) para evitar que sobrescriba la configuración estática al despertar:

background_dhclient="NO"

¿El sistema se recupera solo tras hibernación?

En la mayoría de los casos, sí. Al despertar, FreeBSD intenta restaurar el estado de las interfaces. Si el driver (iwm) y el subsistema WiFi funcionan correctamente, la interfaz se reasociará y mantendrá la IP fija. Esto suele funcionar bien con hardware Intel y configuraciones sencillas.

Sin embargo, si la asociación falla o la interfaz queda en un estado inconsistente (por ejemplo, si el firmware no responde o hay eventos de red que disparan dhclient). Si al despertar no tiene conexión, se puede usar el script de resume que se describe a continuación.

Script opcional para recuperar la conexión (resume-wlan.sh)

Este script destruye y recrea wlan0, fuerza la asociación, asigna la IP fija y la ruta por defecto, y mata posibles procesos dhclient que puedan interferir.

Crear el script en /usr/local/sbin/resume-wlan.sh

#!/bin/sh
# Script para restaurar WiFi tras hibernación (IP fija)
# Destruye y recrea wlan0, espera asociación, asigna IP y ruta.

sleep 3

# Destruir y recrear wlan0
ifconfig wlan0 destroy 2>/dev/null
ifconfig wlan0 create wlandev iwm0 country ES
ifconfig wlan0 up

# Iniciar wpa_supplicant
wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf

# Esperar asociación (hasta 30s)
i=0
while [ $i -lt 30 ]; do
    status=$(ifconfig wlan0 | grep "status:" | awk '{print $2}')
    [ "$status" = "associated" ] && break
    sleep 1
    i=$((i + 1))
done

logger "resume-wlan: status=$status tras ${i}s"

if [ "$status" != "associated" ]; then
    logger "resume-wlan: ERROR - no asociado"
    exit 1
fi

# Asignar IP fija
ifconfig wlan0 inet 192.168.88.51 netmask 255.255.255.0

# Añadir ruta por defecto
route add default 192.168.88.1

# Matar posibles dhclient que interfieran
pkill -f "dhclient.*wlan0" 2>/dev/null

# Verificar pasados 5 segundos y reañadir si es necesario
sleep 5
if ! netstat -rn | grep -q "^default.*wlan0"; then
    route add default 192.168.88.1
    logger "resume-wlan: ruta reañadida por seguridad"
fi

logger "resume-wlan: completado (IP fija y ruta activas)"

Darle permisos de ejecución:

chmod +x /usr/local/sbin/resume-wlan.sh

Configurar devd para ejecutar el script al despertar

Crea el archivo /etc/devd/resume-wlan.conf con este contenido:

notify 100 {
    match "system"      "ACPI";
    match "subsystem"   "Resume";
    action "/usr/local/sbin/resume-wlan.sh &";
};

Reiniciar devd:

service devd restart

¿Cuándo usar el script y cuándo no?

Si no se utiliza el script:

El sistema se encarga de restaurar la interfaz al despertar. Es la opción más simple y recomendable si funciona correctamente en el hardware. Si después de probar varias hibernaciones todo va bien, no es necesario el script.

Si se usa el script:

Aporta una capa extra de fiabilidad, especialmente si se ha tenido problemas de conectividad tras la hibernación. También es útil si se cambia de red o si el driver WiFi es propenso a fallar.

Recomendación: Pruebrar primero sin el script. Si la conexión se pierde ocasionalmente, activar el script.

Notas adicionales Si en algún momento se cambia a DHCP, recordar eliminar la IP fija y habilitar background_dhclient de nuevo. Hay que asegurar de que el país (country ES) coincide con la región. Puede omitirse si no es necesario.

Script si se utiliza IP dinámica (cambia a DHCP)

Vamos a adaptar el script para que funcione con DHCP en lugar de IP fija. Esto es útil si quieremos que la interfaz obtenga la IP automáticamente al despertar (por ejemplo, si cambias de red con frecuencia o el router asigna IPs dinámicamente).

#!/bin/sh
# Script para restaurar WiFi tras hibernación (DHCP)
# Destruye y recrea wlan0, espera asociación, y lanza dhclient.

sleep 3

# Destruir y recrear wlan0
ifconfig wlan0 destroy 2>/dev/null
ifconfig wlan0 create wlandev iwm0 country ES
ifconfig wlan0 up

# Iniciar wpa_supplicant
wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf

# Esperar asociación (hasta 30s)
i=0
while [ $i -lt 30 ]; do
    status=$(ifconfig wlan0 | grep "status:" | awk '{print $2}')
    [ "$status" = "associated" ] && break
    sleep 1
    i=$((i + 1))
done

logger "resume-wlan: status=$status tras ${i}s"

if [ "$status" != "associated" ]; then
    logger "resume-wlan: ERROR - no asociado"
    exit 1
fi

# Obtener IP por DHCP
dhclient wlan0

# Asegurar ruta por defecto (por si dhclient no la pone)
sleep 2
if ! netstat -rn | grep -q "^default.*wlan0"; then
    # Intenta obtener el gateway de la concesión DHCP (opcional)
    # Si no funciona, puedes poner un gateway fijo o simplemente reintentar dhclient.
    logger "resume-wlan: ruta por defecto no encontrada, reintentando dhclient"
    dhclient wlan0
fi

logger "resume-wlan: completado (DHCP)"

FreeBSD es genial!.

jueves, 3 de septiembre de 2026

FreeBSD 14.4 WireGuard VPN Surfshark

1. Conectar Surfshark VPN WireGuard FreeBSD 14.4

Análisis de la tabla de rutas

ifconfig

  em0: flags=8842<BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=4e524bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6,HWSTATS,MEXTPG>
	ether e4:b9:7a:6b:96:cd
	media: Ethernet autoselect
	status: no carrier
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
lo0: flags=1008049<UP,LOOPBACK,RUNNING,MULTICAST,LOWER_UP> metric 0 mtu 16384
	options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
	inet 127.0.0.1 netmask 0xff000000
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2
	groups: lo
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
wlan0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=0
	ether 18:56:80:f8:98:e6
	inet 192.168.88.51 netmask 0xffffff00 broadcast 192.168.88.255
	groups: wlan
	ssid MikroTik-39F9C0 channel 1 (2412 MHz 11g) bssid c4:ad:34:39:f9:c0
	regdomain FCC country US authmode WPA2/802.11i privacy ON
	deftxkey UNDEF AES-CCM 2:128-bit AES-CCM 3:128-bit
	AES-CCM ucast:128-bit txpower 30 bmiss 10 scanvalid 60 protmode CTS
	wme roaming MANUAL
	parent interface: iwm0
	media: IEEE 802.11 Wireless Ethernet OFDM/54Mbps mode 11g
	status: associated
	nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>
pflog0: flags=1000141<UP,RUNNING,PROMISC,LOWER_UP> metric 0 mtu 33152
	options=0
	groups: pflog
wg0: flags=10080c1<UP,RUNNING,NOARP,MULTICAST,LOWER_UP> metric 0 mtu 1420
	options=80000<LINKSTATE>
	inet 10.14.0.2 netmask 0xffff0000
	groups: wg
	nd6 options=109<PERFORMNUD,IFDISABLED,NO_DAD>
tailscale0: flags=1008003<UP,BROADCAST,MULTICAST,LOWER_UP> metric 0 mtu 1280
	options=4080000<LINKSTATE,MEXTPG>
	groups: tun
	nd6 options=109<PERFORMNUD,IFDISABLED,NO_DAD>
	Opened by PID 1452

netstat -rn

Routing tables

Internet:
Destination        Gateway            Flags         Netif Expire
0.0.0.0/1          link#5             US              wg0
default            192.168.88.1       UGS           wlan0
10.14.0.2          link#2             UH              lo0
85.204.70.87       192.168.88.1       UGHS          wlan0
128.0.0.0/1        link#5             US              wg0
192.168.88.0/24    link#3             U             wlan0
192.168.88.51      link#2             UHS             lo0

Ruta por defecto

Ruta por defecto (default) 192.168.88.1 por wlan0 es la ruta genérica, pero no es la que se usa para la mayoría del tráfico.

Rutas VPN (Wireguard)

0.0.0.0/1 y 128.0.0.0/1 ambas apuntan a wg0

Estas dos rutas cubren todo el rango IPv4 (0.0.0.0/1 y 128.0.0.0/1 = 0.0.0.0/0).

Como son más específicas que default, todo el tráfico (excepto las excepciones) se envía por wg0, es decir, por la VPN

Excepción para el servidor VPN

85.204.70.87 va directamente por wlan0 (gateway local)

Esa IP es el endpoint de WireGuard de Surfshark. Sin esta ruta, el tráfico del túnel intetaría pasar por el propio túnel (bucle) y fallaría.

Red local

192.168.88.0/24 por wlan0. Así puedes acceder a tu router, impresoras, etc., sin pasar por la VPN.

IP propia (loopback)

192.168.88.51 y 10.14.0.2 están en lo0 como direcciones locales (para evitar enrutamiento externo).

¿Qué significa esto en la práctica?

Tu IP pública (la que ven los sitios web) es la de Surfshark, no la de tu router.

El tráfico de navegación (HTTP/HTTPS, DNS, etc.) pasa por el túnel WireGuard.

El tráfico local (a tu router, otros PCs en 192.168.88.x) no pasa por la VPN.

El servidor VPN se alcanza directamente por WiFi, sin pasar por el túnel (para evitar bucles).

Tailscale está presente pero no parece estar enrutando tráfico por defecto (quizás solo para acceso a otros nodos).

Destruir lagg0 y limpiar wlan0

sudo ifconfig lagg0 destroy
sudo ifconfig wlan0 destroy

Crear wlan0 limpio con la configuración correcta

sudo ifconfig wlan0 create wlandev iwm0 country ES
sudo ifconfig wlan0 up

Archivo /etc/wpa_supplicant

 
/etc/wpa_supplicant.conf written by wifimgr(8)
ctrl_interface=/var/run/wpa_supplicant
eapol_version=2
fast_reauth=1

network={
	ssid="MikroTik-39F9C0"
	psk=755862a5b1a4ef59e9e62590977a75f5317193637a8629dccb18c40e8638a68e
}

Iniciar wpa_supplicant (si no está corriendo)

sudo wpa_supplicant -B -i wlan0 -c /etc/wpa_supplicant.conf

Esperar a que se asocie (opcional, pero recomendado)

sleep 5
ifconfig wlan0 | grep status

Asignar IP fija y ruta por defecto

sudo ifconfig wlan0 inet 192.168.88.51 netmask 255.255.255.0
sudo route add default 192.168.88.1

Reiniciar WireGuard para que use la nueva interfaz

sudo wg-quick down wg0 && wg-quick up wg0 # 0 sudo service wireguard restart

Archivo /etc/pf.conf

/etc/pf.conf
ext_if="wlan0"
torrent="53541"
vpn_if="wg0"
wireguard="51820"
lan_net="192.168.88.0/24"

set block-policy return
set skip on lo

scrub in on $ext_if all fragment reassemble

table <jails> persist

nat on $ext_if from <jails> to any -> ($ext_if:0)
rdr-anchor "rdr/*"

block in all

antispoof for $ext_if inet

# Salida: todo el tráfico local permitido y trackeado
pass out quick keep state

# Entrada SSH
pass in quick inet proto tcp from $lan_net to any port ssh flags S/SA keep state

# Entrada VPN WireGuard (túnel Surfshark)
pass in quick on $vpn_if all keep state
pass out quick on $vpn_if all keep state

# Entrada qBittorrent
pass in quick on $ext_if inet proto { tcp } to port $torrent

# Entrada ICMP básico (diagnóstico)
pass in quick on $ext_if inet proto { icmp } all icmp-type { echoreq, unreach }

Verificar

¿La ruta por defecto apunta a wlan0 y las rutas VPN cubren el resto?

netstat -rn | grep -E "(default|wg0|wlan0)"

¿WireGuard está activo?

wg show 
interface: wg0
  public key: pkpZvkWaVDd6DmEb3cl9DEvsnOKl9dvZVAP+KMJLZCs=
  private key: (hidden)
  listening port: 58461

peer: AsvLuvKKAGdc67aA/vHA3vb61S6YnDGx2Pd4aP4wal8=
  endpoint: 82.102.18.179:51820
  allowed ips: 0.0.0.0/0
  latest handshake: 1 minute, 14 seconds ago
  transfer: 1.39 MiB received, 1.51 MiB sent

ping -c 8.8.8.8

Mostrar la IP pública (la IP de Surfshark)

curl -s ifconfig.me

FreeBSD es genial!.

miércoles, 14 de abril de 2021

Configuración de ACL numeradas extendidas En GNS3

Configuración y aplicación de ACL numeradas extendidas En GNS3

Filtro extendido de ACL basado en la dirección de origen y destino, así como los protocolos de capa 4 TCP y UDP.

1.- Configurar los nombres de host en R1 y R2

2.- Configurar en R1 s1/0 como DCE para proveer un clock rate de

80640kbps a R2 más sus correspondientes direcciones IP.

3.- Configurar una ruta predeterminada estática en el R1 señalando a R2 (sobre la conexión serial entre los dos Routers). Configure también una ruta predeterminada estática en el R3 señalando al R1 vía la conexión serial entre los dos Routers y las interfaces de loopback especificadas en el diagrama.

R1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1(config)#inter s1/0

R1(config-if)#ip add 172.16.1.1 255.255.255.192

R1(config-if)#no shu

R1(config-if)#

*Mar 1 00:09:59.939: %LINK-3-UPDOWN: Interface Serial1/0, changed state to up

R1(config-if)#

*Mar 1 00:10:00.943: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R1(config-if)#clock rate 80640

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#inter s1/0

R2(config-if)#ip add 172.16.1.2 255.255.255.192

R2(config-if)#no shu

R2(config-if)#

*Mar 1 00:10:57.499: %LINK-3-UPDOWN: Interface Serial1/0, changed state to up

R2(config-if)#

*Mar 1 00:10:58.503: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial1/0, changed state to up

R2(config-if)#do ping 172.16.1.1

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.1.1, timeout is 2 seconds:

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 4/14/24 ms

R2(config-if)#end

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#ip route 0.0.0.0 0.0.0.0 s1/0 172.16.1.1

R2(config)#

R2(config)#inter loop10

R2(config-if)#ip a

*Mar 1 00:18:45.775: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback10, changed state to up

R2(config-if)#ip add 10.10.10.2 255.255.255.128

R2(config-if)#inter loop20

R2(config-if)#ip

*Mar 1 00:20:55.915: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback20, changed state to up

R2(config-if)#ip add 10.20.20.2 255.255.255.240

R2(config-if)#inter loop30

R2(config-if)#ip ad

*Mar 1 00:21:32.163: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback30, changed state to up

R2(config-if)#ip add 10.30.30.2 255.255.255.248

R2(config-if)#end

R2#sh ip inter b

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 172.16.1.2 YES manual up up

Serial1/1 unassigned YES unset administratively down down

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback10 10.10.10.2 YES manual up up

Loopback20 10.20.20.2 YES manual up up

Loopback30 10.30.30.2 YES manual up up

R2#

R1#

R1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1(config)#ip route 0.0.0.0 0.0.0.0 s1/0 172.16.1.2

R1(config)#inter loop10

*Mar 1 00:27:12.687: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback10, changed state to up

R1(config-if)#ip add 172.16.4.1 255.255.255.192

R1(config-if)#exit

R1(config)#inter loop20

*Mar 1 00:27:57.675: %LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback20, changed state to up

R1(config-if)#ip add 172.17.5.1 255.255.255.248

R1(config-if)#end

R1#

R1#sh ip inter b

Interface IP-Address OK? Method Status Protocol

FastEthernet0/0 unassigned YES unset administratively down down

FastEthernet0/1 unassigned YES unset administratively down down

Serial1/0 172.16.1.1 YES manual up up

Serial1/1 unassigned YES unset administratively down down

Serial1/2 unassigned YES unset administratively down down

Serial1/3 unassigned YES unset administratively down down

Loopback10 172.16.4.1 YES manual up up

Loopback20 172.17.5.1 YES manual up up

R1#

R2#ping 172.16.4.1 source loop10

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 172.16.4.1, timeout is 2 seconds:

Packet sent with a source address of 10.10.10.2

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 76/79/84 ms

R2#

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#enable secret CISCO

R2(config)#line vty 0 903

R2(config-line)#password CISCO

R2(config-line)#login

R2(config-line)#end

R2#

*Mar 1 00:35:48.115: %SYS-5-CONFIG_I: Configured from console by console

R2#

R1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1(config)#enable secret CISCO

R1(config)#line vty 0 903

R1(config-line)#end

*Mar 1 00:40:22.755: %SYS-5-CONFIG_I: Configured from console by console

R1#

R2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2(config)#access 170 permit tcp 172.16.4.0 0.0.0.63 10.20.20.0 0.0.0.15 eq telnet

R2(config)#access-l 170 perm tcp 172.16.4.0 0.0.0.63 10.30.30.0 0.0.0.7 eq telnet

R2(config)#access- 170 perm icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo

R2(config)#access 170 perm icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo-reply

R2(config)#inter s1/0

R2(config-if)#ip access-group 170 in

R2(config-if)#end

R2#sh ip access-lists 170

Extended IP access list 170

10 permit tcp 172.16.4.0 0.0.0.63 10.20.20.0 0.0.0.15 eq telnet

20 permit tcp 172.16.4.0 0.0.0.63 10.30.30.0 0.0.0.7 eq telnet

30 permit icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo

40 permit icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo-reply

R1#

R1#telnet 10.30.30.2 /source-interface loopback10

Trying 10.30.30.2 ... Open

User Access Verification

Password:

R2>en

Password:

R2#exit

R1#telnet 10.20.20.2 /source-interface loopback10

Trying 10.20.20.2 ... Open

User Access Verification

Password:

R2>en

Password:

R2#exit

R1#ping 10.10.10.2 source loopback20

Type escape sequence to abort.

Sending 5, 100-byte ICMP Echos to 10.10.10.2, timeout is 2 seconds:

Packet sent with a source address of 172.17.5.1

!!!!!

Success rate is 100 percent (5/5), round-trip min/avg/max = 76/80/88 ms

R1#

R2#sh ip access-lists 170

Extended IP access list 170

10 permit tcp 172.16.4.0 0.0.0.63 10.20.20.0 0.0.0.15 eq telnet (234 matches)

20 permit tcp 172.16.4.0 0.0.0.63 10.30.30.0 0.0.0.7 eq telnet (129 matches)

30 permit icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo (45 matches)

40 permit icmp 172.17.5.0 0.0.0.7 10.10.10.0 0.0.0.127 echo-reply

R2#exit

R1#

IOS es genial!.

sábado, 20 de marzo de 2021

OSPF Vlan 30 Cisco

1.- https://gnulinuxcodigo.blogspot.com/2021/03/implementar-vlsm-en-una-red-vlan.html

2.- https://gnulinuxcodigo.blogspot.com/2021/03/vlans-trunk-routing-roas-cisco.html

3.- https://gnulinuxcodigo.blogspot.com/2021/02/cisco-ospf.html

4.- https://gnulinuxcodigo.blogspot.com/2021/03/ospf-vlan-30-cisco.html

Implementar VLAN 30 y comprobar conectividad. El proceso es el mismo para VLAN 40, excepto las interfaces Trunk que ya permiten el paso de VLAN 40:

1.- Switch Access interfaces Fa0/1 y Fa0/2 Allowed vlans 1,10,20,30,40.

2.- Core1 interfaces Trunk - Gig1/0/1, Gig1/0/2, Gig1/0/14, Gig1/0/15 - Permitir vlans 1,10,20,30,40

3.- Core2 interfaces Gig1/0/2, Gig1/0/14 , Gig1/0/15 Permitir vlans 1,10,20,30,40

4.- Router 2 crear vlan 30 (ROAS) - interface gigabitEthernet 0/1.30 y asignar direccionamiento IP.

5.- Switch SW-VA interface Fa0/1 Allowed vlans 1,10,20,30,40 y

switchport access vlan 30 interface fastEthernet 0/3

6.- Router 1 R1-NV crear vlan 30 - interface gigabitEthernet 0/0.30 y asignar direccionameinteo IP.

7.- Comprobar conectividad.

Access#sh inter

Access#sh interfaces tr

Access#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Fa0/1 on 802.1q trunking 1

Fa0/2 on 802.1q trunking 1

Port Vlans allowed on trunk

Fa0/1 1,10,20

Fa0/2 1,10,20

Port Vlans allowed and active in management domain

Fa0/1 1,10,20

Fa0/2 1,10,20

Port Vlans in spanning tree forwarding state and not pruned

Fa0/1 1,10,20

Fa0/2 none

Access#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Access(config)#inter

Access(config)#interface range fa

Access(config)#interface range fastEthernet 0/1-2

Access(config-if-range)#sw

Access(config-if-range)#switchport trunk allo

Access(config-if-range)#switchport trunk allowed vlan 1,10,20,30,40

Access(config-if-range)#^Z

Access#

%SYS-5-CONFIG_I: Configured from console by console

Access#wri

Building configuration...

[OK]

Access#sh inter

Access#sh interfaces tr

Access#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Fa0/1 on 802.1q trunking 1

Fa0/2 on 802.1q trunking 1

Port Vlans allowed on trunk

Fa0/1 1,10,20,30,40

Fa0/2 1,10,20,30,40

Port Vlans allowed and active in management domain

Fa0/1 1,10,20,30,40

Fa0/2 1,10,20,30,40

Port Vlans in spanning tree forwarding state and not pruned

Fa0/1 none

Fa0/2 none

Access#wri

Building configuration...

[OK]

Access#

Core1#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Gig1/0/1 on 802.1q trunking 1

Gig1/0/2 on 802.1q trunking 1

Gig1/0/14 on 802.1q trunking 1

Gig1/0/15 on 802.1q trunking 1

Port Vlans allowed on trunk

Gig1/0/1 1,10,20

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 1,10,20

Port Vlans allowed and active in management domain

Gig1/0/1 1,10,20

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 1,10,20

Port Vlans in spanning tree forwarding state and not pruned

Gig1/0/1 1,10,20

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 1,10,20

Core1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core1(config)#interfaces range gi

Core1(config)#inter

Core1(config)#interface range

Core1(config)#interface range g

Core1(config)#interface range gigabitEthernet 1/0/1-2

Core1(config-if-range)#sw

Core1(config-if-range)#switchport tr

Core1(config-if-range)#switchport trunk all

Core1(config-if-range)#switchport trunk allowed vlan 1,10,20,30,40

Core1(config-if-range)#exit

Core1(config)#interface range gigabitEthernet 1/0/14-15

Core1(config-if-range)#switchport trunk allowed vlan 1,10,20,30,40

Core1(config-if-range)#^Z

Core1#

%SYS-5-CONFIG_I: Configured from console by console

Core1#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core1#sh inter

Core1#sh interfaces tr

Core1#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Gig1/0/1 on 802.1q trunking 1

Gig1/0/2 on 802.1q trunking 1

Gig1/0/14 on 802.1q trunking 1

Gig1/0/15 on 802.1q trunking 1

Port Vlans allowed on trunk

Gig1/0/1 1,10,20,30,40

Gig1/0/2 1,10,20,30,40

Gig1/0/14 1,10,20,30,40

Gig1/0/15 1,10,20,30,40

Port Vlans allowed and active in management domain

Gig1/0/1 1,10,20,30,40

Gig1/0/2 1,10,20,30,40

Gig1/0/14 1,10,20,30,40

Gig1/0/15 1,10,20,30,40

Port Vlans in spanning tree forwarding state and not pruned

Gig1/0/1 none

Gig1/0/2 none

Gig1/0/14 none

Gig1/0/15 none

Core1#

Core2#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Gig1/0/2 on 802.1q trunking 1

Gig1/0/14 on 802.1q trunking 1

Gig1/0/15 on 802.1q trunking 1

Port Vlans allowed on trunk

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 1,10,20

Port Vlans allowed and active in management domain

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 1,10,20

Port Vlans in spanning tree forwarding state and not pruned

Gig1/0/2 1,10,20

Gig1/0/14 1,10,20

Gig1/0/15 none

Core2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core2(config)#inter

Core2(config)#interface g

Core2(config)#interface gigabitEthernet 1/0/2

Core2(config-if)#sw

Core2(config-if)#switchport tr

Core2(config-if)#switchport trunk all

Core2(config-if)#switchport trunk allowed vlan 1,10,20,30,40

Core2(config-if)#^Z

Core2#

%SYS-5-CONFIG_I: Configured from console by console

Core2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core2(config)#inter

Core2(config)#interface g

Core2(config)#interface range gigabitEthernet 1/0/14-15

Core2(config-if-range)#sw

Core2(config-if-range)#switchport tr

Core2(config-if-range)#switchport trunk all

Core2(config-if-range)#switchport trunk allowed vlan 1,10,20,30,40

Core2(config-if-range)#^Z

Core2#

%SYS-5-CONFIG_I: Configured from console by console

Core2#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core2#sh inter

Core2#sh interfaces tr

Core2#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Gig1/0/2 on 802.1q trunking 1

Gig1/0/14 on 802.1q trunking 1

Gig1/0/15 on 802.1q trunking 1

Port Vlans allowed on trunk

Gig1/0/2 1,10,20,30,40

Gig1/0/14 1,10,20,30,40

Gig1/0/15 1,10,20,30,40

Port Vlans allowed and active in management domain

Gig1/0/2 1,10,20,30,40

Gig1/0/14 1,10,20,30,40

Gig1/0/15 1,10,20,30,40

Port Vlans in spanning tree forwarding state and not pruned

Gig1/0/2 1,10,20,30,40

Gig1/0/14 none

Gig1/0/15 none

Core2#

R2-VA#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.6 YES manual up up

GigabitEthernet0/1 unassigned YES unset up up

GigabitEthernet0/1.10 10.16.8.1 YES manual up up

GigabitEthernet0/1.20 10.16.10.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Loopback0 2.2.2.2 YES manual up up

Vlan1 unassigned YES unset administratively down down

R2-VA#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2-VA(config)#inter

R2-VA(config)#interface g

R2-VA(config)#interface gigabitEthernet 0/1.30

R2-VA(config-subif)#

%LINK-5-CHANGED: Interface GigabitEthernet0/1.30, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1.30, changed state to up

R2-VA(config-subif)#ip add

R2-VA(config-subif)#ip address 10.16.12.1 255.255.254.0

% Configuring IP routing on a LAN subinterface is only allowed if that

subinterface is already configured as part of an IEEE 802.10, IEEE 802.1Q,

or ISL vLAN.

R2-VA(config-subif)#encapsulation dot1Q

% Incomplete command.

R2-VA(config-subif)#encapsulation dot1Q 30

R2-VA(config-subif)#ip address 10.16.12.1 255.255.254.0

R2-VA(config-subif)#exit

R2-VA(config)#

R2-VA#wri

Building configuration...

[OK]

R2-VA#sh ip inter

R2-VA#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.6 YES manual up up

GigabitEthernet0/1 unassigned YES unset up up

GigabitEthernet0/1.10 10.16.8.1 YES manual up up

GigabitEthernet0/1.20 10.16.10.1 YES manual up up

GigabitEthernet0/1.30 10.16.12.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Loopback0 2.2.2.2 YES manual up up

Vlan1 unassigned YES unset administratively down down

R2-VA#

SW-VA#sh interfaces trunk

Port Mode Encapsulation Status Native vlan

Fa0/1 on 802.1q trunking 1

Port Vlans allowed on trunk

Fa0/1 1,10,20,30,40

Port Vlans allowed and active in management domain

Fa0/1 1,10,20,30,40

Port Vlans in spanning tree forwarding state and not pruned

Fa0/1 1,10,20,30,40

SW-VA#conf t

Enter configuration commands, one per line. End with CNTL/Z.

SW-VA(config)#inter

SW-VA(config)#interface fa

SW-VA(config)#interface fastEthernet 0/3

SW-VA(config-if)#sw

SW-VA(config-if)#switchport mode

SW-VA(config-if)#switchport mode acc

SW-VA(config-if)#switchport mode access

SW-VA(config-if)#sw

SW-VA(config-if)#switchport ac

SW-VA(config-if)#switchport access vlan 30

SW-VA(config-if)#^Z

SW-VA#

%SYS-5-CONFIG_I: Configured from console by console

SW-VA#wri

Building configuration...

[OK]

SW-VA#

R1-NV#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 unassigned YES unset up up

GigabitEthernet0/0.10 10.16.0.1 YES manual up up

GigabitEthernet0/0.20 10.16.2.1 YES manual up up

GigabitEthernet0/1 10.16.7.5 YES manual up up

GigabitEthernet0/2 193.37.255.2 YES DHCP up up

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Serial0/1/0 unassigned YES unset down down

Serial0/1/1 unassigned YES unset down down

Loopback0 1.1.1.1 YES manual up up

Vlan1 unassigned YES unset administratively down down

R1-NV#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1-NV(config)#inter

R1-NV(config)#interface g

R1-NV(config)#interface gigabitEthernet 0/0.30

R1-NV(config-subif)#

%LINK-5-CHANGED: Interface GigabitEthernet0/0.30, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/0.30, changed state to up

R1-NV(config-subif)#ip add

R1-NV(config-subif)#ip address 10.16.4.1 255.255.254.0

% Configuring IP routing on a LAN subinterface is only allowed if that

subinterface is already configured as part of an IEEE 802.10, IEEE 802.1Q,

or ISL vLAN.

R1-NV(config-subif)#encap

R1-NV(config-subif)#encapsulation do

R1-NV(config-subif)#encapsulation dot1Q 30

R1-NV(config-subif)#ip address 10.16.4.1 255.255.254.0

R1-NV(config-subif)#^Z

R1-NV#

%SYS-5-CONFIG_I: Configured from console by console

R1-NV#wri

Building configuration...

[OK]

R1-NV#

R1-NV#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 unassigned YES unset up up

GigabitEthernet0/0.10 10.16.0.1 YES manual up up

GigabitEthernet0/0.20 10.16.2.1 YES manual up up

GigabitEthernet0/0.30 10.16.4.1 YES manual up up

GigabitEthernet0/1 10.16.7.5 YES manual up up

GigabitEthernet0/2 193.37.255.2 YES DHCP up up

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Serial0/1/0 unassigned YES unset down down

Serial0/1/1 unassigned YES unset down down

Loopback0 1.1.1.1 YES manual up up

Vlan1 unassigned YES unset administratively down down

R1-NV#

Cisco es genial!.

martes, 16 de febrero de 2021

Cisco Implementar OSPF

1.- https://gnulinuxcodigo.blogspot.com/2021/03/implementar-vlsm-en-una-red-vlan.html

2.- https://gnulinuxcodigo.blogspot.com/2021/03/vlans-trunk-routing-roas-cisco.html

3.- https://gnulinuxcodigo.blogspot.com/2021/02/cisco-ospf.html

4.- https://gnulinuxcodigo.blogspot.com/2021/03/ospf-vlan-30-cisco.html

Implementar OSPF Lab Multilayer Switches y Routers:

Configurar Core1, Core2, R1, R2 y R3

1.- Usar process ID 1, y todas las redes dentro de area 0.

2.- Usar 32 bits declaraciones de red exactas para loopback.

3.- Usar declaraciones de red /21 para NV, VA, y ZA /21.

4.- Para la red 10.16.7.0/28 utilizar coincidencia exacta.

Wildcard mask 32 = 0.0.0.0

Wildcard mask /21 = 0.0.7.255

Wildcard mask /28 = 0.0.0.15

Bloque de direcciones NV = 10.16.0.0/21

Bloque de direcciones VA = 10.16.0.0/21

Bloque de direcciones ZA = 10.16.0.0/21

Direccionamiento IP en WAN - 10.16.7.0/28

R1-NV#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1-NV(config)#interface gigabitEthernet 0/1

R1-NV(config-if)#ip add

R1-NV(config-if)#ip address 10.16.7.5 255.255.255.240

R1-NV(config-if)#no shut

%LINK-5-CHANGED: Interface GigabitEthernet0/1, changed state to up

R2-VA#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2-VA(config)#interface gigabitEthernet 0/0

R2-VA(config-if)#ip address 10.16.7.6 255.255.255.240

R2-VA(config-if)#no shut

%LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up

R3-FL#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R3-FL(config)#int

R3-FL(config)#interface g

R3-FL(config)#interface gigabitEthernet 0/0

R3-FL(config-if)#ip add

R3-FL(config-if)#ip address 10.16.7.7 255.255.255.240

R3-FL(config-if)#no shut

%LINK-5-CHANGED: Interface GigabitEthernet0/0, changed state to up

Que Core1 sea el Switch Root de la red:

Convertir Core1 Root de la RED:

Core1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core1(config)#spanning-tree vlan 1,10,20,30,40 root primary

Sólo aparecen las VLANs activas 1,10,20

Core1#sh spanning-tree

VLAN0001

Spanning tree enabled protocol ieee

Root ID Priority 24577

Address 0090.0C7E.AE96

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24577 (priority 24576 sys-id-ext 1)

Address 0090.0C7E.AE96

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 20

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Gi1/0/1 Desg FWD 4 128.1 P2p

Gi1/0/2 Desg FWD 19 128.2 P2p

Gi1/0/14 Desg FWD 4 128.14 P2p

Gi1/0/15 Desg FWD 4 128.15 P2p

VLAN0010

Spanning tree enabled protocol ieee

Root ID Priority 24586

Address 0090.0C7E.AE96

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24586 (priority 24576 sys-id-ext 10)

Address 0090.0C7E.AE96

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 20

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Gi1/0/1 Desg FWD 4 128.1 P2p

Gi1/0/2 Desg FWD 19 128.2 P2p

Gi1/0/14 Desg FWD 4 128.14 P2p

Gi1/0/15 Desg FWD 4 128.15 P2p

VLAN0020

Spanning tree enabled protocol ieee

Root ID Priority 24596

Address 0090.0C7E.AE96

This bridge is the root

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24596 (priority 24576 sys-id-ext 20)

Address 0090.0C7E.AE96

Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Aging Time 20

Interface Role Sts Cost Prio.Nbr Type

---------------- ---- --- --------- -------- --------------------------------

Gi1/0/1 Desg FWD 4 128.1 P2p

Gi1/0/2 Desg FWD 19 128.2 P2p

Gi1/0/14 Desg FWD 4 128.14 P2p

Gi1/0/15 Desg FWD 4 128.15 P2p

Crear direccionamiento IP y las interfaces loopback:

Core1 :

Core1#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1/0/1 unassigned YES unset up up

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset down down

GigabitEthernet1/0/4 unassigned YES unset down down

GigabitEthernet1/0/5 unassigned YES unset down down

GigabitEthernet1/0/6 unassigned YES unset down down

GigabitEthernet1/0/7 unassigned YES unset down down

GigabitEthernet1/0/8 unassigned YES unset down down

GigabitEthernet1/0/9 unassigned YES unset down down

GigabitEthernet1/0/10 unassigned YES unset down down

GigabitEthernet1/0/11 unassigned YES unset down down

GigabitEthernet1/0/12 unassigned YES unset down down

GigabitEthernet1/0/13 unassigned YES unset down down

GigabitEthernet1/0/14 unassigned YES unset up up

GigabitEthernet1/0/15 unassigned YES unset up up

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset down down

GigabitEthernet1/0/19 unassigned YES unset down down

GigabitEthernet1/0/20 unassigned YES unset down down

GigabitEthernet1/0/21 unassigned YES unset down down

GigabitEthernet1/0/22 unassigned YES unset down down

GigabitEthernet1/0/23 unassigned YES unset down down

GigabitEthernet1/0/24 unassigned YES unset down down

GigabitEthernet1/1/1 unassigned YES unset down down

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Vlan1 unassigned YES unset administratively down down

Vlan10 unassigned YES unset up up

Vlan20 unassigned YES unset up up

Vlan30 unassigned YES unset up down

Vlan40 unassigned YES unset up down

Core1#sh ip route

Default gateway is not set

Host Gateway Last Use Total Uses Interface

ICMP redirect cache is empty

Core1#

Core1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core1(config)#inter

Core1(config)#interface vlan 10

Core1(config-if)#ip add

Core1(config-if)#ip address 10.16.0.2 255.255.255.0

Core1(config-if)#exit

Core1(config)#interface vlan 20

Core1(config-if)#ip address 10.16.2.2 255.255.255.0

Core1(config-if)#exit

Core1(config)#interface vlan 30

Core1(config-if)#ip address 10.16.4.2 255.255.254.0

Core1(config-if)#exit

Core1(config)#interface vlan 40

Core1(config-if)#ip address 10.16.6.2 255.255.254.0

Core1(config-if)#exit

Core1(config)#inter

Core1(config)#interface loo

Core1(config)#interface loopback 0

Core1(config-if)#

%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

Core1(config-if)#ip add

Core1(config-if)#ip address 11.11.11.11 255.255.255.255

Core1(config-if)#end

Core1#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core1#sh ip inte

Core1#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1/0/1 unassigned YES unset up up

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset down down

GigabitEthernet1/0/4 unassigned YES unset down down

GigabitEthernet1/0/5 unassigned YES unset down down

GigabitEthernet1/0/6 unassigned YES unset down down

GigabitEthernet1/0/7 unassigned YES unset down down

GigabitEthernet1/0/8 unassigned YES unset down down

GigabitEthernet1/0/9 unassigned YES unset down down

GigabitEthernet1/0/10 unassigned YES unset down down

GigabitEthernet1/0/11 unassigned YES unset down down

GigabitEthernet1/0/12 unassigned YES unset down down

GigabitEthernet1/0/13 unassigned YES unset down down

GigabitEthernet1/0/14 unassigned YES unset up up

GigabitEthernet1/0/15 unassigned YES unset up up

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset down down

GigabitEthernet1/0/19 unassigned YES unset down down

GigabitEthernet1/0/20 unassigned YES unset down down

GigabitEthernet1/0/21 unassigned YES unset down down

GigabitEthernet1/0/22 unassigned YES unset down down

GigabitEthernet1/0/23 unassigned YES unset down down

GigabitEthernet1/0/24 unassigned YES unset down down

GigabitEthernet1/1/1 unassigned YES unset down down

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Loopback0 11.11.11.11 YES manual up up

Vlan1 unassigned YES unset administratively down down

Vlan10 10.16.0.2 YES manual up up

Vlan20 10.16.2.2 YES manual up up

Vlan30 10.16.4.2 YES manual up down

Vlan40 10.16.6.2 YES manual up down

Core1#

Core 2 :

Core2#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1/0/1 unassigned YES unset down down

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset down down

GigabitEthernet1/0/4 unassigned YES unset down down

GigabitEthernet1/0/5 unassigned YES unset down down

GigabitEthernet1/0/6 unassigned YES unset down down

GigabitEthernet1/0/7 unassigned YES unset down down

GigabitEthernet1/0/8 unassigned YES unset down down

GigabitEthernet1/0/9 unassigned YES unset down down

GigabitEthernet1/0/10 unassigned YES unset down down

GigabitEthernet1/0/11 unassigned YES unset down down

GigabitEthernet1/0/12 unassigned YES unset down down

GigabitEthernet1/0/13 unassigned YES unset down down

GigabitEthernet1/0/14 unassigned YES unset up up

GigabitEthernet1/0/15 unassigned YES unset up up

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset down down

GigabitEthernet1/0/19 unassigned YES unset down down

GigabitEthernet1/0/20 unassigned YES unset down down

GigabitEthernet1/0/21 unassigned YES unset down down

GigabitEthernet1/0/22 unassigned YES unset down down

GigabitEthernet1/0/23 unassigned YES unset down down

GigabitEthernet1/0/24 unassigned YES unset down down

GigabitEthernet1/1/1 unassigned YES unset down down

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Vlan1 unassigned YES unset administratively down down

Vlan10 unassigned YES unset up up

Vlan20 unassigned YES unset up up

Vlan30 unassigned YES unset up down

Vlan40 unassigned YES unset up down

Core2#sh ip route

Default gateway is not set

Host Gateway Last Use Total Uses Interface

ICMP redirect cache is empty

Core2#

Core2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core2(config)#inter

Core2(config)#interface vlan 10

Core2(config-if)#ip add

Core2(config-if)#ip address 10.16.0.3 255.255.255.0

Core2(config-if)#exit

Core2(config)#interface vlan 20

Core2(config-if)#ip address 10.16.2.3 255.255.255.0

Core2(config-if)#exit

Core2(config)#interface vlan 30

Core2(config-if)#ip address 10.16.4.3 255.255.254.0

Core2(config-if)#exit

Core2(config)#interface vlan 40

Core2(config-if)#ip address 10.16.6.3 255.255.254.0

Core2(config-if)#exit

Core2(config)#interface loopback 0

Core2(config-if)#ip address 22.22.22.22 255.255.255.255

Core2(config-if)#

%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

Core2(config-if)#^Z

Core2#

%SYS-5-CONFIG_I: Configured from console by console

Core2#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core2#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet1/0/1 unassigned YES unset down down

GigabitEthernet1/0/2 unassigned YES unset up up

GigabitEthernet1/0/3 unassigned YES unset down down

GigabitEthernet1/0/4 unassigned YES unset down down

GigabitEthernet1/0/5 unassigned YES unset down down

GigabitEthernet1/0/6 unassigned YES unset down down

GigabitEthernet1/0/7 unassigned YES unset down down

GigabitEthernet1/0/8 unassigned YES unset down down

GigabitEthernet1/0/9 unassigned YES unset down down

GigabitEthernet1/0/10 unassigned YES unset down down

GigabitEthernet1/0/11 unassigned YES unset down down

GigabitEthernet1/0/12 unassigned YES unset down down

GigabitEthernet1/0/13 unassigned YES unset down down

GigabitEthernet1/0/14 unassigned YES unset up up

GigabitEthernet1/0/15 unassigned YES unset up up

GigabitEthernet1/0/16 unassigned YES unset down down

GigabitEthernet1/0/17 unassigned YES unset down down

GigabitEthernet1/0/18 unassigned YES unset down down

GigabitEthernet1/0/19 unassigned YES unset down down

GigabitEthernet1/0/20 unassigned YES unset down down

GigabitEthernet1/0/21 unassigned YES unset down down

GigabitEthernet1/0/22 unassigned YES unset down down

GigabitEthernet1/0/23 unassigned YES unset down down

GigabitEthernet1/0/24 unassigned YES unset down down

GigabitEthernet1/1/1 unassigned YES unset down down

GigabitEthernet1/1/2 unassigned YES unset down down

GigabitEthernet1/1/3 unassigned YES unset down down

GigabitEthernet1/1/4 unassigned YES unset down down

Loopback0 22.22.22.22 YES manual up up

Vlan1 unassigned YES unset administratively down down

Vlan10 10.16.0.3 YES manual up up

Vlan20 10.16.2.3 YES manual up up

Vlan30 10.16.4.3 YES manual up down

Vlan40 10.16.6.3 YES manual up down

Core2#

Router 1 (R1-NV):

R1-NV#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 unassigned YES unset up up

GigabitEthernet0/0.10 10.16.0.1 YES manual up up

GigabitEthernet0/0.20 10.16.2.1 YES manual up up

GigabitEthernet0/1 10.16.7.5 YES manual up up

GigabitEthernet0/2 193.37.255.2 YES DHCP up up

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Serial0/1/0 unassigned YES unset down down

Serial0/1/1 unassigned YES unset down down

Vlan1 unassigned YES unset administratively down down

R1-NV#

R1-NV#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R1-NV(config)#interface lo

R1-NV(config)#interface loopback 0

R1-NV(config-if)#

%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R1-NV(config-if)#ip address 1.1.1.1 255.255.255.255

R1-NV(config-if)#^Z

R1-NV#

%SYS-5-CONFIG_I: Configured from console by console

R1-NV#

R1-NV#wri

Building configuration...

[OK]

R1-NV#sh ip inter

R1-NV#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 unassigned YES unset up up

GigabitEthernet0/0.10 10.16.0.1 YES manual up up

GigabitEthernet0/0.20 10.16.2.1 YES manual up up

GigabitEthernet0/1 10.16.7.5 YES manual up up

GigabitEthernet0/2 193.37.255.2 YES DHCP up up

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Serial0/1/0 unassigned YES unset down down

Serial0/1/1 unassigned YES unset down down

Loopback0 1.1.1.1 YES manual up up

Vlan1 unassigned YES unset administratively down down

R1-NV#

Router 2 (R2-VA):

R2-VA#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.6 YES manual up up

GigabitEthernet0/1 unassigned YES unset up up

GigabitEthernet0/1.10 10.16.8.1 YES manual up up

GigabitEthernet0/1.20 10.16.10.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Vlan1 unassigned YES unset administratively down down

R2-VA#

R2-VA#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2-VA(config)#inter

R2-VA(config)#interface lo

R2-VA(config)#interface loopback 0

R2-VA(config-if)#

%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R2-VA(config-if)#ip address 2.2.2.2 255.255.255.0

R2-VA(config-if)#^Z

R2-VA#

%SYS-5-CONFIG_I: Configured from console by console

R2-VA#wri

Building configuration...

[OK]

R2-VA#sh ip inte

R2-VA#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.6 YES manual up up

GigabitEthernet0/1 unassigned YES unset up up

GigabitEthernet0/1.10 10.16.8.1 YES manual up up

GigabitEthernet0/1.20 10.16.10.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Loopback0 2.2.2.2 YES manual up up

Vlan1 unassigned YES unset administratively down down

R2-VA#

R2-VA#wri

Building configuration...

[OK]

R2-VA#

Router 3 (R3-ZA):

R3-FL#sh ip inter

R3-FL#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.7 YES manual up up

GigabitEthernet0/1 10.16.16.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Loopback0 3.3.3.3 YES manual up up

Vlan1 unassigned YES unset administratively down down

R3-FL#

R3-FL#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R3-FL(config)#interface loo

R3-FL(config)#interface loopback 0

R3-FL(config-if)#

%LINK-5-CHANGED: Interface Loopback0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface Loopback0, changed state to up

R3-FL(config-if)#ip address 3.3.3.3 255.255.255.0

R3-FL(config-if)#^Z

R3-FL#

%SYS-5-CONFIG_I: Configured from console by console

R3-FL#wri

Building configuration...

[OK]

R3-FL#sh ip inter

R3-FL#sh ip interface b

Interface IP-Address OK? Method Status Protocol

GigabitEthernet0/0 10.16.7.7 YES manual up up

GigabitEthernet0/1 192.168.3.1 YES manual up up

GigabitEthernet0/2 unassigned YES unset administratively down down

FastEthernet0/0/0 unassigned YES unset up down

FastEthernet0/0/1 unassigned YES unset up down

FastEthernet0/0/2 unassigned YES unset up down

FastEthernet0/0/3 unassigned YES unset up down

Loopback0 3.3.3.3 YES manual up up

Vlan1 unassigned YES unset administratively down down

R3-FL#

Implementar OSPF:

Core1#sh ip route connected

C 10.16.0.0/24 is directly connected, Vlan10

C 10.16.2.0/24 is directly connected, Vlan20

C 11.11.11.11/32 is directly connected, Loopback0

Core1#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core1(config)#ip routing

Core1(config)#router

Core1(config)#router ospf 1

Core1(config-router)#network 22.22.22.22 0.0.0.0 area 0

Core1(config-router)#netwo

Core1(config-router)#network 10.16.0.0 0.0.7.255 area 0

Core1(config-router)#^Z

Core1#

%SYS-5-CONFIG_I: Configured from console by console

Core1#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core1#

Core1#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

10.0.0.0/24 is subnetted, 2 subnets

C 10.16.0.0 is directly connected, Vlan10

C 10.16.2.0 is directly connected, Vlan20

11.0.0.0/32 is subnetted, 1 subnets

C 11.11.11.11 is directly connected, Loopback0

Core1#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 11.11.11.11

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

22.22.22.22 0.0.0.0 area 0

10.16.0.0 0.0.7.255 area 0

Routing Information Sources:

Gateway Distance Last Update

11.11.11.11 110 00:01:21

Distance: (default is 110)

Core1#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core1#

Core2:

Core2#sh ip route connected

C 10.16.0.0/24 is directly connected, Vlan10

C 10.16.2.0/24 is directly connected, Vlan20

C 22.22.22.22/32 is directly connected, Loopback0

Core2#

Core2#conf t

Enter configuration commands, one per line. End with CNTL/Z.

Core2(config)#ip routing

Core2(config)#router ospf 1

Core2(config-router)#networ

Core2(config-router)#network 22.22.22.22 0.0.0.0 area 0

Core2(config-router)#network 10.16.0.0 0.0.7.255 area 0

Core2(config-router)#^Z

Core2#

%SYS-5-CONFIG_I: Configured from console by console

Core2#wri

Building configuration...

Compressed configuration from 7383 bytes to 3601 bytes[OK]

[OK]

Core2#sh ip route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

10.0.0.0/24 is subnetted, 2 subnets

C 10.16.0.0 is directly connected, Vlan10

C 10.16.2.0 is directly connected, Vlan20

22.0.0.0/32 is subnetted, 1 subnets

C 22.22.22.22 is directly connected, Loopback0

00:44:53: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on Vlan10 from LOADING to FULL, Loading Done

00:44:53: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on Vlan20 from LOADING to FULL, Loading Done

Core2#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 22.22.22.22

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

22.22.22.22 0.0.0.0 area 0

10.16.0.0 0.0.7.255 area 0

Routing Information Sources:

Gateway Distance Last Update

11.11.11.11 110 00:00:10

22.22.22.22 110 00:00:10

Distance: (default is 110)

Core2#

Router 1 (R1-NV):

R1-NV#sh ip route connected

C 1.1.1.1/32 is directly connected, Loopback0

C 10.16.0.0/24 is directly connected, GigabitEthernet0/0.10

C 10.16.2.0/24 is directly connected, GigabitEthernet0/0.20

C 10.16.7.0/28 is directly connected, GigabitEthernet0/1

C 193.37.255.0/30 is directly connected, GigabitEthernet0/2

R1-NV(config)#router ospf 1

R1-NV(config-router)#networ

R1-NV(config-router)#network 1.1.1.1 0.0.0.0 area 1

R1-NV(config-router)#network 10.16.8.0 0.0.7.255 area 0

R1-NV(config-router)#network 10.16.0.0 0.0.7.255 area 0

R1-NV(config-router)#

03:02:40: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on GigabitEthernet0/0.10 from LOADING to FULL, Loading Done

03:02:40: %OSPF-5-ADJCHG: Process 1, Nbr 22.22.22.22 on GigabitEthernet0/0.10 from LOADING to FULL, Loading Done

03:02:40: %OSPF-5-ADJCHG: Process 1, Nbr 11.11.11.11 on GigabitEthernet0/0.20 from LOADING to FULL, Loading Done

03:02:40: %OSPF-5-ADJCHG: Process 1, Nbr 22.22.22.22 on GigabitEthernet0/0.20 from LOADING to FULL, Loading Done

R1-NV(config-router)#

R1-NV#wri

Building configuration...

[OK]

R1-NV#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is 193.37.255.1 to network 0.0.0.0

1.0.0.0/32 is subnetted, 1 subnets

C 1.1.1.1/32 is directly connected, Loopback0

10.0.0.0/8 is variably subnetted, 6 subnets, 3 masks

C 10.16.0.0/24 is directly connected, GigabitEthernet0/0.10

L 10.16.0.1/32 is directly connected, GigabitEthernet0/0.10

C 10.16.2.0/24 is directly connected, GigabitEthernet0/0.20

L 10.16.2.1/32 is directly connected, GigabitEthernet0/0.20

C 10.16.7.0/28 is directly connected, GigabitEthernet0/1

L 10.16.7.5/32 is directly connected, GigabitEthernet0/1

22.0.0.0/32 is subnetted, 1 subnets

O 22.22.22.22/32 [110/2] via 10.16.0.3, 00:00:28, GigabitEthernet0/0.10

[110/2] via 10.16.2.3, 00:00:28, GigabitEthernet0/0.20

193.37.255.0/24 is variably subnetted, 2 subnets, 2 masks

C 193.37.255.0/30 is directly connected, GigabitEthernet0/2

L 193.37.255.2/32 is directly connected, GigabitEthernet0/2

S* 0.0.0.0/0 [254/0] via 193.37.255.1

R1-NV#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 1.1.1.1

Number of areas in this router is 2. 2 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

1.1.1.1 0.0.0.0 area 1

10.16.8.0 0.0.7.255 area 0

10.16.0.0 0.0.7.255 area 0

Routing Information Sources:

Gateway Distance Last Update

1.1.1.1 110 00:12:13

2.2.2.2 110 00:12:13

3.3.3.3 110 00:09:04

11.11.11.11 110 00:19:25

22.22.22.22 110 00:19:25

Distance: (default is 110)

R1-NV#sh ip ospf ne

R1-NV#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

2.2.2.2 1 FULL/BDR 00:00:38 10.16.7.6 GigabitEthernet0/1

3.3.3.3 1 FULL/DROTHER 00:00:36 10.16.7.7 GigabitEthernet0/1

11.11.11.11 1 FULL/BDR 00:00:35 10.16.0.2 GigabitEthernet0/0.10

22.22.22.22 1 FULL/DR 00:00:35 10.16.0.3 GigabitEthernet0/0.10

22.22.22.22 1 FULL/DR 00:00:35 10.16.2.3 GigabitEthernet0/0.20

11.11.11.11 1 FULL/BDR 00:00:35 10.16.2.2 GigabitEthernet0/0.20

R1-NV#

Router 2 (R2-VA):

R2-VA#sh ip route connected

C 2.2.2.0/24 is directly connected, Loopback0

C 10.16.7.0/28 is directly connected, GigabitEthernet0/0

C 10.16.8.0/24 is directly connected, GigabitEthernet0/1.10

C 10.16.10.0/24 is directly connected, GigabitEthernet0/1.20

R2-VA#

R2-VA#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R2-VA(config)#router ospf 1

R2-VA(config-router)#network 2.2.2.2 0.0.0.0 area 0

R2-VA(config-router)#network 10.16.8.0 0.0.7.255 area 0

R2-VA(config-router)#network 10.16.7.0 0.0.0.15 area 0

R2-VA(config-router)#^Z

R2-VA#

%SYS-5-CONFIG_I: Configured from console by console

R2-VA#

03:05:09: %OSPF-5-ADJCHG: Process 1, Nbr 1.1.1.1 on GigabitEthernet0/0 from LOADING to FULL, Loading Done

R2-VA#

03:08:13: %OSPF-5-ADJCHG: Process 1, Nbr 3.3.3.3 on GigabitEthernet0/0 from LOADING to FULL, Loading Done

R2-VA#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets

O IA 1.1.1.1/32 [110/2] via 10.16.7.5, 00:01:14, GigabitEthernet0/0

2.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 2.2.2.0/24 is directly connected, Loopback0

L 2.2.2.2/32 is directly connected, Loopback0

10.0.0.0/8 is variably subnetted, 8 subnets, 3 masks

O 10.16.0.0/24 [110/2] via 10.16.7.5, 00:01:14, GigabitEthernet0/0

O 10.16.2.0/24 [110/2] via 10.16.7.5, 00:01:14, GigabitEthernet0/0

C 10.16.7.0/28 is directly connected, GigabitEthernet0/0

L 10.16.7.6/32 is directly connected, GigabitEthernet0/0

C 10.16.8.0/24 is directly connected, GigabitEthernet0/1.10

L 10.16.8.1/32 is directly connected, GigabitEthernet0/1.10

C 10.16.10.0/24 is directly connected, GigabitEthernet0/1.20

L 10.16.10.1/32 is directly connected, GigabitEthernet0/1.20

22.0.0.0/32 is subnetted, 1 subnets

O 22.22.22.22/32 [110/3] via 10.16.7.5, 00:01:14, GigabitEthernet0/0

R2-VA#wri

Building configuration...

[OK]

R2-VA#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 2.2.2.2

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

2.2.2.2 0.0.0.0 area 0

10.16.8.0 0.0.7.255 area 0

10.16.7.0 0.0.0.15 area 0

Routing Information Sources:

Gateway Distance Last Update

1.1.1.1 110 00:13:55

2.2.2.2 110 00:13:55

3.3.3.3 110 00:10:46

11.11.11.11 110 00:21:07

22.22.22.22 110 00:21:07

Distance: (default is 110)

R2-VA#sh ip ospf ne

R2-VA#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

1.1.1.1 1 FULL/DR 00:00:30 10.16.7.5 GigabitEthernet0/0

3.3.3.3 1 FULL/DROTHER 00:00:32 10.16.7.7 GigabitEthernet0/0

R2-VA#

Router 3 (R#_ZA):

R3-FL#sh ip route connected

C 3.3.3.0/24 is directly connected, Loopback0

C 10.16.7.0/28 is directly connected, GigabitEthernet0/0

C 10.16.16.0/24 is directly connected, GigabitEthernet0/1

R3-FL#

R3-FL#conf t

Enter configuration commands, one per line. End with CNTL/Z.

R3-FL(config)#router ospf 1

R3-FL(config-router)#network 3.3.3.3 0.0.0.0 area 0

R3-FL(config-router)#network 10.16.16.0 0.0.7.255

% Incomplete command.

R3-FL(config-router)#network 10.16.16.0 0.0.7.255 area 0

R3-FL(config-router)#network 10.16.7.0 0.0.0.15 area 0

R3-FL(config-router)#^Z

R3-FL#

%SYS-5-CONFIG_I: Configured from console by console

R3-FL#

03:08:13: %OSPF-5-ADJCHG: Process 1, Nbr 2.2.2.2 on GigabitEthernet0/0 from LOADING to FULL, Loading Done

03:08:19: %OSPF-5-ADJCHG: Process 1, Nbr 1.1.1.1 on GigabitEthernet0/0 from LOADING to FULL, Loading Done

R3-FL#sh ip route

Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP

i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area

* - candidate default, U - per-user static route, o - ODR

P - periodic downloaded static route

Gateway of last resort is not set

1.0.0.0/32 is subnetted, 1 subnets

O IA 1.1.1.1/32 [110/2] via 10.16.7.5, 00:04:51, GigabitEthernet0/0

2.0.0.0/32 is subnetted, 1 subnets

O 2.2.2.2/32 [110/2] via 10.16.7.6, 00:04:51, GigabitEthernet0/0

3.0.0.0/8 is variably subnetted, 2 subnets, 2 masks

C 3.3.3.0/24 is directly connected, Loopback0

L 3.3.3.3/32 is directly connected, Loopback0

10.0.0.0/8 is variably subnetted, 6 subnets, 3 masks

O 10.16.0.0/24 [110/2] via 10.16.7.5, 00:04:51, GigabitEthernet0/0

O 10.16.2.0/24 [110/2] via 10.16.7.5, 00:04:51, GigabitEthernet0/0

C 10.16.7.0/28 is directly connected, GigabitEthernet0/0

L 10.16.7.7/32 is directly connected, GigabitEthernet0/0

O 10.16.8.0/24 [110/2] via 10.16.7.6, 00:04:51, GigabitEthernet0/0

O 10.16.10.0/24 [110/2] via 10.16.7.6, 00:04:51, GigabitEthernet0/0

22.0.0.0/32 is subnetted, 1 subnets

O 22.22.22.22/32 [110/3] via 10.16.7.5, 00:04:51, GigabitEthernet0/0

192.168.3.0/24 is variably subnetted, 2 subnets, 2 masks

C 192.168.3.0/24 is directly connected, GigabitEthernet0/1

L 192.168.3.1/32 is directly connected, GigabitEthernet0/1

R3-FL#sh ip protocols

Routing Protocol is "ospf 1"

Outgoing update filter list for all interfaces is not set

Incoming update filter list for all interfaces is not set

Router ID 3.3.3.3

Number of areas in this router is 1. 1 normal 0 stub 0 nssa

Maximum path: 4

Routing for Networks:

3.3.3.3 0.0.0.0 area 0

10.16.16.0 0.0.7.255 area 0

10.16.7.0 0.0.0.15 area 0

Routing Information Sources:

Gateway Distance Last Update

1.1.1.1 110 00:06:53

2.2.2.2 110 00:06:53

3.3.3.3 110 00:03:43

11.11.11.11 110 00:14:05

22.22.22.22 110 00:14:05

Distance: (default is 110)

R3-FL#sh ip ospf neighbor

Neighbor ID Pri State Dead Time Address Interface

2.2.2.2 1 FULL/BDR 00:00:39 10.16.7.6 GigabitEthernet0/0

1.1.1.1 1 FULL/DR 00:00:35 10.16.7.5 GigabitEthernet0/0

R3-FL#

Comprobando conectividad, sólo las permitidas VLAN 10 y VLAN 20:

Cisco es genial!.

Páginas

sábado, 5 de septiembre de 2026

Configuración de WiFi con IP fija en FreeBSD 14.4

Incluye script de resume (opcional) para recuperar conexión tras hibernación

Configuración básica en /etc/rc.conf

Para usar una IP fija en wlan0, añadir o modificar estas líneas:

Configuración en /boot/loader.conf

Reiniciar el sistema para que los módulos se carguen correctamente

¿El sistema se recupera solo tras hibernación?

Script opcional para recuperar la conexión (resume-wlan.sh)

Crear el script en /usr/local/sbin/resume-wlan.sh

Darle permisos de ejecución:

Configurar devd para ejecutar el script al despertar

Crea el archivo /etc/devd/resume-wlan.conf con este contenido:

Reiniciar devd:

¿Cuándo usar el script y cuándo no?

Si no se utiliza el script:

Si se usa el script:

Script si se utiliza IP dinámica (cambia a DHCP)

jueves, 3 de septiembre de 2026

FreeBSD 14.4 WireGuard VPN Surfshark

ifconfig

netstat -rn

Ruta por defecto

Excepción para el servidor VPN

Red local

IP propia (loopback)

¿Qué significa esto en la práctica?

Destruir lagg0 y limpiar wlan0

Crear wlan0 limpio con la configuración correcta

Archivo /etc/wpa_supplicant

Iniciar wpa_supplicant (si no está corriendo)

Esperar a que se asocie (opcional, pero recomendado)

Asignar IP fija y ruta por defecto

Reiniciar WireGuard para que use la nueva interfaz

Archivo /etc/pf.conf

Verificar

¿La ruta por defecto apunta a wlan0 y las rutas VPN cubren el resto?

¿WireGuard está activo?

Mostrar la IP pública (la IP de Surfshark)

miércoles, 14 de abril de 2021

Configuración de ACL numeradas extendidas En GNS3

sábado, 20 de marzo de 2021

OSPF Vlan 30 Cisco

martes, 16 de febrero de 2021

Cisco Implementar OSPF