VENTAS

ipconfig
-------------------------------------------------------------------------------------------FastEthernet0 Connection:(default port)
Link-local IPv6 Address.........:
IP Address......................:
Subnet Mask.....................:
Default Gateway.................:

::
172.16.0.5
255.255.255.0
172.16.0.1

nslookup b2server.pt.pka
-------------------------------------------------------------------------------------------Server: [172.16.0.3]
Address: 172.16.0.3
Non-authoritative answer:
Name: b2server.pt.pka
Address: 128.107.64.254

tracert b2server.pt.pka
-------------------------------------------------------------------------------------------Tracing route to 128.107.64.254 over a maximum of 30 hops:
1
2
3
4
5

11 ms
1 ms
1 ms
1 ms
*

0 ms
0 ms
11 ms
1 ms
12 ms

0 ms
16 ms
10 ms
19 ms
14 ms

172.16.0.1
64.100.150.2
64.104.222.2
64.104.222.6
128.107.64.254

(R4:G0/0)
(Tier3a:S0/1/0)
(ISP-Tier3b:G0/1)
(B2-R1:G0/0)

Trace complete.

telnet 172.16.0.1
-------------------------------------------------------------------------------------------Trying 172.16.0.1 ...OpenWarning - Unauthorized Access Prohibited
User Access Verification
Password:
R4>traceroute b2server.pt.pka
Translating "b2server.pt.pka"...domain server (255.255.255.255)
Type escape sequence to abort.
Tracing the route to 128.107.64.254
1
2
3
4

64.100.150.2
64.104.222.2
64.104.222.6
128.107.64.254

0
1
0
1

msec
msec
msec
msec

0 msec
1 msec
0 msec
21 msec

1 msec
1 msec
11 msec
1 msec

R4>

R4>traceroute b2server.pt.pka
-------------------------------------------------------------------------------------------Translating "b2server.pt.pka"...domain server (255.255.255.255)
Type escape sequence to abort.
Tracing the route to 128.107.64.254
1
2
3
4

64.100.150.2
64.104.222.2
64.104.222.6
128.107.64.254

0
1
0
1

msec
msec
msec
msec

0 msec
1 msec
0 msec
21 msec

1 msec
1 msec
11 msec
1 msec

R4>show ip interface brief

Interface
IP-Address

OK? Method Status

Protocol

GigabitEthernet0/0

172.16.0.1

YES manual up

up

GigabitEthernet0/1

unassigned

YES unset administratively down down

Serial0/0/0

64.100.150.1

YES manual up

up

Serial0/0/1

unassigned

YES unset up

up

Serial0/0/1.1

64.100.200.1

YES manual up

up

Vlan1
R4>

unassigned

YES unset administratively down down

R4>ena
Password:
R4#show running-config
Building configuration...
Current configuration : 1916 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname R4
!
!
!
enable password 7 0822404F1A0A
!
!
ip dhcp excluded-address 172.16.0.1
ip dhcp excluded-address 172.16.0.2
ip dhcp excluded-address 172.16.0.3
ip dhcp excluded-address 172.16.0.4
!
!
!
!

ip cef
no ipv6 cef
!
!
!
username Tier3a password 7 0822455D0A16
username administrator password 7 0822455D0A16
!
!
license udi pid CISCO1941/K9 sn FTX1524OSTD
!
!
!
!
!
!
!
!
!
ip domain-name Branch
ip host branchserver 172.16.0.3
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 172.16.0.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0/0
ip address 64.100.150.1 255.255.255.252
encapsulation ppp
ppp authentication chap
ip nat outside
!
interface Serial0/0/1
no ip address
encapsulation frame-relay
ip nat outside
clock rate 2000000
!
interface Serial0/0/1.1 point-to-point
ip address 64.100.200.1 255.255.255.252
frame-relay interface-dlci 201
ip nat outside
clock rate 2000000
!

interface Vlan1
no ip address
shutdown
!
ip nat inside source list 1 interface Serial0/0/1.1 overload
ip nat inside source static tcp 172.16.0.3 80 64.100.150.1 80
ip nat inside source static tcp 172.16.0.3 80 64.100.200.1 80
ip nat inside source static tcp 172.16.0.3 25 64.100.200.1 25
ip nat inside source static tcp 172.16.0.3 443 64.100.200.1 443
ip classless
ip route 10.0.0.0 255.0.0.0 64.100.200.2
ip route 0.0.0.0 0.0.0.0 64.100.150.2
!
ip flow-export version 9
!
!
access-list 1 permit 172.16.0.0 0.0.0.255
!
no cdp run
!
banner motd ^CWarning - Unauthorized Access Prohibited^C
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
exec-timeout 0 0
password 7 0822455D0A16
login
line vty 5 15
exec-timeout 0 0
no login
!
!
!
end
R4#

PC>telnet 64.100.150.2
-------------------------------------------------------------------------------------------Trying 64.100.150.2 ...OpenWarning - Unauthorized Access Prohibited
User Access Verification
Password:
Tier3a>ena
Password:
Tier3a#show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
Gateway of last resort is 64.100.100.1 to network 0.0.0.0
64.0.0.0/8 is variably subnetted, 13 subnets, 3 masks
D
64.100.8.0/24 [90/5376] via 64.104.222.2, 00:35:56, GigabitEthernet0/0
C
64.100.100.0/30 is directly connected, Serial0/0/0
C
64.100.100.1/32 is directly connected, Serial0/0/0
L
64.100.100.2/32 is directly connected, Serial0/0/0
C
64.100.150.0/30 is directly connected, Serial0/1/0
C
64.100.150.1/32 is directly connected, Serial0/1/0
L
64.100.150.2/32 is directly connected, Serial0/1/0
S
64.100.200.0/30 is directly connected, Serial0/1/0
C
64.104.222.0/30 is directly connected, GigabitEthernet0/0
L
64.104.222.1/32 is directly connected, GigabitEthernet0/0
D
64.104.222.4/30 [90/28416] via 64.104.222.2, 00:35:56, GigabitEthernet0/
0
C
64.104.223.0/30 is directly connected, GigabitEthernet0/1
L
64.104.223.1/32 is directly connected, GigabitEthernet0/1
D
128.107.0.0/16 [90/28416] via 64.104.222.2, 00:35:56, GigabitEthernet0/0
S* 0.0.0.0/0 [1/0] via 64.100.100.1
Tier3a#
Tier3a>show ip interface brief
Interface
IP-Address

OK? Method Status

Protocol

GigabitEthernet0/0

64.104.222.1

YES manual up

up

GigabitEthernet0/1

64.104.223.1

YES manual up

up

GigabitEthernet0/2

unassigned

YES unset administratively down down

Serial0/0/0

64.100.100.2

YES manual up

Serial0/0/1

unassigned

YES unset administratively down down

Serial0/1/0

64.100.150.2

YES manual up

Serial0/1/1

unassigned

YES unset administratively down down

Vlan1
unassigned
Tier3a>
Tier3a>ena
Password:
Tier3a#show running-config
Building configuration...

YES unset administratively down down

Current configuration : 1984 bytes

!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!

up

up

hostname Tier3a
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
ip dhcp excluded-address 64.104.223.1
!
ip dhcp pool CableModem
network 64.104.223.0 255.255.255.252
default-router 64.104.223.1
dns-server 64.100.8.8
!
!
!
ip cef
no ipv6 cef
!
!
!
username R2 password 0 cisco
username R4 password 0 cisco
username administrator password 0 cisco
!
!
license udi pid CISCO2911/K9 sn FTX1524FE2V
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 64.104.222.1 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 64.104.223.1 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto

shutdown
!
interface Serial0/0/0
ip address 64.100.100.2 255.255.255.252
encapsulation ppp
ppp authentication pap
ppp pap sent-username Tier3a password 0 cisco
clock rate 4000000
!
interface Serial0/0/1
no ip address
clock rate 2000000
shutdown
!
interface Serial0/1/0
ip address 64.100.150.2 255.255.255.252
encapsulation ppp
ppp authentication chap
clock rate 4000000
!
interface Serial0/1/1
no ip address
clock rate 2000000
shutdown
!
interface Vlan1
no ip address
shutdown
!
router eigrp 1
redistribute static
passive-interface GigabitEthernet0/1
passive-interface Serial0/0/0
passive-interface Serial0/1/0
network 64.100.100.0 0.0.0.3
network 64.100.150.0 0.0.0.3
network 64.104.223.0 0.0.0.3
network 64.104.222.0 0.0.0.3
!
ip classless
ip route 0.0.0.0 0.0.0.0 64.100.100.1
ip route 64.100.200.0 255.255.255.252 Serial0/1/0 200
!
ip flow-export version 9
!
!
!
no cdp run
!
banner motd ^CWarning - Unauthorized Access Prohibited^C
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4

exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
login local
!
!
!
end
Tier3a#

PC>telnet 64.104.222.2
-------------------------------------------------------------------------------------------Trying 64.104.222.2 ...OpenWarning - Unauthorized Access Prohibited
User Access Verification
Password:
Password:
ISP-Tier3b>ena
Password:
ISP-Tier3b#show ip interface brief
Interface
IP-Address

OK? Method Status

Protocol

FastEthernet0/1

128.107.46.1

YES manual up

up

FastEthernet0/2

64.104.222.5

YES manual up

up

FastEthernet0/3

unassigned

YES unset down

down

FastEthernet0/4

unassigned

YES unset down

down

FastEthernet0/5

unassigned

YES unset down

down

FastEthernet0/6

unassigned

YES unset down

down

FastEthernet0/7

unassigned

YES unset down

down

FastEthernet0/8

unassigned

YES unset down

down

FastEthernet0/9

unassigned

YES unset down

down

FastEthernet0/10

unassigned

YES unset down

down

FastEthernet0/11

unassigned

YES unset down

down

FastEthernet0/12

unassigned

YES unset down

down

FastEthernet0/13

unassigned

YES unset down

down

FastEthernet0/14

unassigned

YES unset down

down

FastEthernet0/15

unassigned

YES unset down

down

FastEthernet0/16

unassigned

YES unset down

down

FastEthernet0/17

unassigned

YES unset down

down

FastEthernet0/18

unassigned

YES unset down

down

FastEthernet0/19

unassigned

YES unset down

down

FastEthernet0/20

unassigned

YES unset down

down

FastEthernet0/21

unassigned

YES unset down

down

FastEthernet0/22

unassigned

YES unset down

down

FastEthernet0/23

unassigned

YES unset down

down

FastEthernet0/24

unassigned

YES unset down

down

GigabitEthernet0/1

64.104.222.2

YES manual up

up

GigabitEthernet0/2

64.100.8.1

YES manual up

up

Vlan1

unassigned

YES unset administratively down down

ISP-Tier3b#

ISP-Tier3b#show ip route connected

C 64.100.8.0/24 is directly connected, GigabitEthernet0/2
C 64.104.222.0/30 is directly connected, GigabitEthernet0/1
C 64.104.222.4/30 is directly connected, FastEthernet0/2
C 128.107.46.0/24 is directly connected, FastEthernet0/1
ISP-Tier3b#

ISP-Tier3b#show running-config
Building configuration...
Current configuration : 1929 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
service password-encryption
!
hostname ISP-Tier3b
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
enable password 7 0822404F1A0A
!
!
!
!
!
ip routing

!
!
!
!
username administrator password 7 0822455D0A16
!
!
!
!
!
!
!
!
!
no ip domain-lookup
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet0/1
no switchport
ip address 128.107.46.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/2
no switchport
ip address 64.104.222.5 255.255.255.252
duplex auto
speed auto
!
interface FastEthernet0/3
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!

interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
!
interface FastEthernet0/23
!
interface FastEthernet0/24
!
interface GigabitEthernet0/1
no switchport
ip address 64.104.222.2 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/2
no switchport
ip address 64.100.8.1 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router eigrp 1
network 64.104.222.0 0.0.0.3
network 64.100.8.0 0.0.0.255
network 128.107.0.0
network 64.104.222.4 0.0.0.3
auto-summary
!
ip classless
!
ip flow-export version 9
!
!
!
no cdp run
!
banner motd ^CWarning - Unauthorized Access Prohibited^C
!
!
!
!
line con 0
!
line aux 0
!

line vty 0 4
exec-timeout 0 0
password 7 0822455D0A16
login
line vty 5 15
exec-timeout 0 0
password 7 0822455D0A16
login local
!
!
!
end
ISP-Tier3b#

PC>telnet 64.104.222.6
-------------------------------------------------------------------------------------------Trying 64.104.222.6 ...OpenWarning - Unauthorized Access Prohibited
User Access Verification
Password:
B2-R1>ena
Password:
B2-R1#
B2-R1#show ip interface brief
Interface
IP-Address

OK? Method Status

Protocol

GigabitEthernet0/0

64.104.222.6

YES manual up

up

GigabitEthernet0/1

128.107.64.1

YES manual up

up

Vlan1
unassigned
B2-R1#show running-config
Building configuration...

YES unset administratively down down

Current configuration : 974 bytes

!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname B2-R1
!
!
!
enable secret 5 $1$mERr$9cTjUIEqNGurQiFU.ZeCi1
!
!
!
!
!
!

ip cef
no ipv6 cef
!
!
!
username administrator password 0 cisco
!
!
license udi pid CISCO1941/K9 sn FTX1524D7EF
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface GigabitEthernet0/0
ip address 64.104.222.6 255.255.255.252
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 128.107.64.1 255.255.255.0
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router eigrp 1
network 128.107.64.0 0.0.0.255
network 64.104.222.4 0.0.0.3
!
ip classless
!
ip flow-export version 9
!
!
!
banner motd ^CWarning - Unauthorized Access Prohibited^C
!
!
!
!
line con 0
password cisco
!

line aux 0
!
line vty 0 4
exec-timeout 0 0
password cisco
login
line vty 5 15
exec-timeout 0 0
password cisco
login local
!
!
!
end
B2-R1#