!HQ

enconf thostname HQenable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitint fa0/0ip address 10.0.1.1 255.255.255.0no shutdownexitInt s0/0/0no ip addressencapsulation frame-relayframe-relay lmi-type q933ano shutdownint s0/0/0.41 point-to-pointip address 10.255.255.1 255.255.255.252frame-relay interface-dlci 41int s0/0/0.42 point-to-pointip address 10.255.255.5 255.255.255.252frame-relay interface-dlci 42int s0/0/0.43 point-to-pointip address 10.255.255.9 255.255.255.252frame-relay interface-dlci 43exitint fa0/0description Serversip address 10.0.1.1 255.255.255.0no shutdownexitusername ISP password ciscochapint s0/1/0description Link to ISPip address 209.165.201.1 255.255.255.252encapsulation pppppp authentication chapno shutdownexitusername NewB password ciscopap

int s0/0/1description Link to NewBip address 10.255.255.253 255.255.255.252encapsulation pppppp authentication papppp pap sent-username HQ password 0 ciscopapclock rate 64000no shutdownexitip access-list standard NAT_LISTpermit 10.0.0.0 0.255.255.255exitip nat pool XYZCORP 209.165.200.241 209.165.200.245 netmask 255.255.255.248ip nat inside source list NAT_LIST pool XYZCORP overloadip nat inside source static 10.0.1.2 209.165.200.246int fa0/0ip nat insideint s0/0/0.41 point-to-pointip nat insideint s0/0/0.42 point-to-pointip nat insideint s0/0/0.43 point-to-pointip nat insideint s0/0/1ip nat insideint s0/1/0ip nat outsideexitip route 0.0.0.0 0.0.0.0 serial0/1/0ip route 10.4.5.0 255.255.255.0 serial0/0/1router eigrp 100passive-interface fa0/0passive-interface s0/0/1passive-interface s0/1/0network 10.0.0.0no auto-summaryexitip access-list extended FIREWALL!permit tcp any host 209.165.200.244 eq wwwpermit tcp any host 209.165.200.246 eq wwwpermit tcp any any establishedpermit icmp any any echo-replydeny ip any anyexitint s0/1/0ip access-group FIREWALL in

!B1

enconf thostname B1enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitint s0/0/0ip address 10.255.255.2 255.255.255.252encapsulation frame-relayframe-relay lmi-type q933ano shutdownexitip route 0.0.0.0 0.0.0.0 10.255.255.1int fa0/0no shutdownint fa0/0.10description Admin VLAN 10encapsulation dot1Q 10ip address 10.1.10.1 255.255.255.0int fa0/0.20description Sales VLAN 20encapsulation dot1Q 20ip address 10.1.20.1 255.255.255.0int fa0/0.30description Production VLAN 30encapsulation dot1Q 30ip address 10.1.30.1 255.255.255.0int fa0/0.88description Wireless VLAN 88encapsulation dot1Q 88ip address 10.1.88.1 255.255.255.0int fa0/0.99description Management&Native VLAN 99encapsulation dot1Q 99 nativeip address 10.1.99.1 255.255.255.0exitrouter eigrp 100passive-interface fastethernet0/0.10

passive-interface fastethernet0/0.20passive-interface fastethernet0/0.30passive-interface fastethernet0/0.99network 10.0.0.0no auto-summaryexitint s0/0/0ip summary-address eigrp 100 10.1.0.0 255.255.0.0exitip dhcp excluded-address 10.1.10.1 10.1.10.10ip dhcp excluded-address 10.1.20.1 10.1.20.10ip dhcp excluded-address 10.1.30.1 10.1.30.10ip dhcp excluded-address 10.1.88.1 10.1.88.24ip dhcp pool B1_VLAN10network 10.1.10.0 255.255.255.0default-router 10.1.10.1dns-server 10.0.1.4exitip dhcp pool B1_VLAN20network 10.1.20.0 255.255.255.0default-router 10.1.20.1dns-server 10.0.1.4exitip dhcp pool B1_VLAN30network 10.1.30.0 255.255.255.0default-router 10.1.30.1dns-server 10.0.1.4exitip dhcp pool B1_VLAN88network 10.1.88.0 255.255.255.0default-router 10.1.88.1dns-server 10.0.1.4

!B2

enconf thostname B2enable secret classno ip domain-lookupline con 0password ciscologinlogging synch

line vty 0 4password ciscologinexitint s0/0/0ip address 10.255.255.6 255.255.255.252encapsulation frame-relayframe-relay lmi-type q933ano shutdownexitip route 0.0.0.0 0.0.0.0 10.255.255.5int fa0/0no shutdownint fa0/0.10description Admin VLAN 10encapsulation dot1Q 10ip address 10.2.10.1 255.255.255.0int fa0/0.20description Sales VLAN 20encapsulation dot1Q 20ip address 10.2.20.1 255.255.255.0int fa0/0.30description Production VLAN 30encapsulation dot1Q 30ip address 10.2.30.1 255.255.255.0int fa0/0.88description Wireless VLAN 88encapsulation dot1Q 88ip address 10.2.88.1 255.255.255.0int fa0/0.99description Management&Native VLAN 99encapsulation dot1Q 99 nativeip address 10.2.99.1 255.255.255.0exitrouter eigrp 100passive-interface fastethernet0/0.10passive-interface fastethernet0/0.20passive-interface fastethernet0/0.30passive-interface fastethernet0/0.99network 10.0.0.0no auto-summaryexitint s0/0/0ip summary-address eigrp 100 10.2.0.0 255.255.0.0exitip dhcp excluded-address 10.2.10.1 10.2.10.10ip dhcp excluded-address 10.2.20.1 10.2.20.10ip dhcp excluded-address 10.2.30.1 10.2.30.10

ip dhcp excluded-address 10.2.88.1 10.2.88.24ip dhcp pool B2_VLAN10network 10.2.10.0 255.255.255.0default-router 10.2.10.1dns-server 10.0.1.4exitip dhcp pool B2_VLAN20network 10.2.20.0 255.255.255.0default-router 10.2.20.1dns-server 10.0.1.4exitip dhcp pool B2_VLAN30network 10.2.30.0 255.255.255.0default-router 10.2.30.1dns-server 10.0.1.4exitip dhcp pool B2_VLAN88network 10.2.88.0 255.255.255.0default-router 10.2.88.1dns-server 10.0.1.4

!B3

enconf thostname B3enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitint s0/0/0ip address 10.255.255.10 255.255.255.252encapsulation frame-relay ietfframe-relay lmi-type ansino shutdown

exitip route 0.0.0.0 0.0.0.0 10.255.255.9int fa0/0no shutdownint fa0/0.10description Admin VLAN 10encapsulation dot1Q 10ip address 10.3.10.1 255.255.255.0int fa0/0.20description Sales VLAN 20encapsulation dot1Q 20ip address 10.3.20.1 255.255.255.0int fa0/0.30description Production VLAN 30encapsulation dot1Q 30ip address 10.3.30.1 255.255.255.0int fa0/0.88description Wireless VLAN 88encapsulation dot1Q 88ip address 10.3.88.1 255.255.255.0int fa0/0.99description Management&Native VLAN 99encapsulation dot1Q 99 nativeip address 10.3.99.1 255.255.255.0exitrouter eigrp 100passive-interface fastethernet0/0.10passive-interface fastethernet0/0.20passive-interface fastethernet0/0.30passive-interface fastethernet0/0.99network 10.0.0.0no auto-summaryexitint s0/0/0ip summary-address eigrp 100 10.3.0.0 255.255.0.0exitip dhcp excluded-address 10.3.10.1 10.3.10.10ip dhcp excluded-address 10.3.20.1 10.3.20.10ip dhcp excluded-address 10.3.30.1 10.3.30.10ip dhcp excluded-address 10.3.88.1 10.3.88.24ip dhcp pool B3_VLAN10network 10.3.10.0 255.255.255.0default-router 10.3.10.1dns-server 10.0.1.4exitip dhcp pool B3_VLAN20network 10.3.20.0 255.255.255.0default-router 10.3.20.1

dns-server 10.0.1.4exitip dhcp pool B3_VLAN30network 10.3.30.0 255.255.255.0default-router 10.3.30.1 dns-server 10.0.1.4exitip dhcp pool B3_VLAN88network 10.3.88.0 255.255.255.0default-router 10.3.88.1dns-server 10.0.1.4

!B1-S1enconf thostname B1-S1enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode servervtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunk

int fa0/5switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.1.99.21 255.255.255.0no shutdownexitip default-gateway 10.1.99.1vlan 10name Adminvlan 20name Salesvlan 30name Productionvlan 88name Wirelessvlan 99name Mgmt&Nativeexitspanning-tree vlan 1 priority 4096spanning-tree vlan 10 priority 4096spanning-tree vlan 20 priority 4096spanning-tree vlan 30 priority 4096spanning-tree vlan 88 priority 4096spanning-tree vlan 99 priority 4096

!B1-S2enconf thostname B1-S2enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99

switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.1.99.22 255.255.255.0no shutexitip default-gateway 10.1.99.1int fa0/6switchport access vlan 10switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdownint fa0/11switchport access vlan 20switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdownint fa0/16switchport access vlan 30switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdown

!B1-S3enconf thostname B1-S3enable secret classno ip domain-lookup

line con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.1.99.23 255.255.255.0no shutdownexitip default-gateway 10.1.99.1int fa0/7switchport access vlan 88switchport mode accessexitspanning-tree vlan 1 priority 8192spanning-tree vlan 10 priority 8192spanning-tree vlan 20 priority 8192spanning-tree vlan 30 priority 8192spanning-tree vlan 88 priority 8192spanning-tree vlan 99 priority 8192

!B2-S1enconf t

hostname B2-S1enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode servervtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkint fa0/5switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.2.99.21 255.255.255.0no shutdownexitip default-gateway 10.2.99.1vlan 10name Adminvlan 20name Salesvlan 30name Productionvlan 88name Wirelessvlan 99name Mgmt&Nativeexitspanning-tree vlan 1 priority 4096spanning-tree vlan 10 priority 4096

spanning-tree vlan 20 priority 4096spanning-tree vlan 30 priority 4096spanning-tree vlan 88 priority 4096spanning-tree vlan 99 priority 4096

!B2-S2enconf thostname B2-S2enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.2.99.22 255.255.255.0no shutexitip default-gateway 10.2.99.1int fa0/6switchport access vlan 10switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address sticky

switchport port-security violation shutdownint fa0/11switchport access vlan 20switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdownint fa0/16switchport access vlan 30switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdown

!B2-S3enconf thostname B2-S3enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99

switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.2.99.23 255.255.255.0no shutexitip default-gateway 10.2.99.1int fa0/7switchport access vlan 88switchport mode accessexitspanning-tree vlan 1 priority 8192spanning-tree vlan 10 priority 8192spanning-tree vlan 20 priority 8192spanning-tree vlan 30 priority 8192spanning-tree vlan 88 priority 8192spanning-tree vlan 99 priority 8192

!B3-S1enconf thostname B3-S1enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode servervtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunk

int fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkint fa0/5switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.3.99.21 255.255.255.0no shutdownexitip default-gateway 10.3.99.1vlan 10name Adminvlan 20name Salesvlan 30name Productionvlan 88name Wirelessvlan 99name Mgmt&Nativeexitspanning-tree vlan 1 priority 4096spanning-tree vlan 10 priority 4096spanning-tree vlan 20 priority 4096spanning-tree vlan 30 priority 4096spanning-tree vlan 88 priority 4096spanning-tree vlan 99 priority 4096

!B3-S2enconf thostname B3-S2enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologin

exitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.3.99.22 255.255.255.0no shutexitip default-gateway 10.3.99.1int fa0/6switchport access vlan 10switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdownint fa0/11switchport access vlan 20switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdownint fa0/16switchport access vlan 30switchport mode accessswitchport port-securityswitchport port-security maximum 1switchport port-security mac-address stickyswitchport port-security violation shutdown

!B3-S3enconf thostname B3-S3enable secret classno ip domain-lookupline con 0password ciscologinlogging synchline vty 0 4password ciscologinexitvtp mode clientvtp domain xyzcorpvtp password xyzvtpint fa0/1switchport trunk native vlan 99switchport mode trunkint fa0/2switchport trunk native vlan 99switchport mode trunkint fa0/3switchport trunk native vlan 99switchport mode trunkint fa0/4switchport trunk native vlan 99switchport mode trunkexitint vlan 99ip address 10.3.99.23 255.255.255.0no shutexitip default-gateway 10.3.99.1int fa0/7switchport access vlan 88switchport mode accessexitspanning-tree vlan 1 priority 8192spanning-tree vlan 10 priority 8192spanning-tree vlan 20 priority 8192spanning-tree vlan 30 priority 8192spanning-tree vlan 88 priority 8192spanning-tree vlan 99 priority 8192