|
|
| Ligne 53 : |
Ligne 53 : |
| | | | |
| | =Configuration des équipements réseau= | | =Configuration des équipements réseau= |
| − |
| |
| − | ==Transmission des VLANs depuis les routeurs de la plateforme maths/info==
| |
| − |
| |
| − | Les équipements de la plateforme maths/info doivent rediriger les VLANs 530 et 532 vers les ports de nos routeurs :
| |
| − |
| |
| − | ===Cisco Catalyst 3750-E (plateforme maths/info)===
| |
| − |
| |
| − | SR52-pinfo-2>enable
| |
| − | SR52-pinfo-2#configure terminal
| |
| − | SR52-pinfo-2(config)#int t1/0/1
| |
| − | SR52-pinfo-2(config-int)#switchport mode access
| |
| − | SR52-pinfo-2(config-int)#switchport access vlan 530
| |
| − | SR52-pinfo-2(config-int)#exit
| |
| − | SR52-pinfo-2(config)#exit
| |
| − | SR52-pinfo-2#write
| |
| − |
| |
| − | ===Cisco Catalyst 3500-E (plateforme maths/info)===
| |
| − |
| |
| − | SR52-pinfo-1>enable
| |
| − | SR52-pinfo-1#configure terminal
| |
| − | SR52-pinfo-1(config)#int g0/27
| |
| − | SR52-pinfo-1(config-int)#switchport mode access
| |
| − | SR52-pinfo-1(config-int)#switchport access vlan 530
| |
| − | SR52-pinfo-1(config-int)#exit
| |
| − | SR52-pinfo-1(config)#int g0/XX
| |
| − | SR52-pinfo-1(config-int)#switchport mode access
| |
| − | SR52-pinfo-1(config-int)#switchport access vlan 532
| |
| − | SR52-pinfo-1(config-int)#exit
| |
| − | SR52-pinfo-1(config)#exit
| |
| − | SR52-pinfo-1#write
| |
| − |
| |
| − | ==Configuration de base==
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − | switch>enable
| |
| − | switch#configure terminal
| |
| − | * Configuration du nom d’hôte
| |
| − | switch(config)#hostname SE2A5-R1
| |
| − | * Accès SSH
| |
| − | SE2A5-R1(config)#aaa new-model
| |
| − | SE2A5-R1(config)#username admin privilege 15 secret glopglop
| |
| − | SE2A5-R1(config)#ip domain-name plil.info
| |
| − | SE2A5-R1(config)#crypto key generate rsa
| |
| − | SE2A5-R1(config)#line vty 0 15
| |
| − | SE2A5-R1(config-line)#transport input ssh
| |
| − | SE2A5-R1(config-line)#exit
| |
| − | * Accès console
| |
| − | SE2A5-R1(config)#line console 0
| |
| − | SE2A5-R1(config-line)#password glopglop
| |
| − | SE2A5-R1(config-line)#login authentification AAA_CONSOLE
| |
| − | SE2A5-R1(config-line)#exit
| |
| − | * Sécurisation des accès
| |
| − | SE2A5-R1(config)#service password-encryption
| |
| − | SE2A5-R1(config)#enable secret glopglop
| |
| − | SE2A5-R1(config)#banner motd #Restricted Access#
| |
| − | * Activer le routage
| |
| − | SE2A5-R1(config)#ip routing
| |
| − | SE2A5-R1(config)#ipv6 unicast-routing
| |
| − | * Activer VRRP
| |
| − | SE2A5-R1(config)#license boot level network-advantage
| |
| − | SE2A5-R1(config)#fhrp version vrrp v3
| |
| − | * Sauvegarde de la configuration
| |
| − | SE2A5-R1(config)#exit
| |
| − | SE2A5-R1#copy running-config startup-config
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − | switch>enable
| |
| − | switch#configure terminal
| |
| − | * Configuration du nom d’hôte
| |
| − | switch(config)#hostname SE2A5-R2
| |
| − | * Accès SSH
| |
| − | SE2A5-R2(config)#aaa new-model
| |
| − | SE2A5-R2(config)#username admin privilege 15 secret glopglop
| |
| − | SE2A5-R2(config)#ip domain-name plil.info
| |
| − | SE2A5-R2(config)#crypto key generate rsa
| |
| − | SE2A5-R2(config)#line vty 0 15
| |
| − | SE2A5-R2(config-line)#transport input ssh
| |
| − | SE2A5-R2(config-line)#exit
| |
| − | * Accès console
| |
| − | SE2A5-R2(config)#line console 0
| |
| − | SE2A5-R2(config-line)#password glopglop
| |
| − | SE2A5-R2(config-line)#login authentification AAA_CONSOLE
| |
| − | SE2A5-R2(config-line)#exit
| |
| − | * Sécurisation des accès
| |
| − | SE2A5-R2(config)#service password-encryption
| |
| − | SE2A5-R2(config)#enable secret glopglop
| |
| − | SE2A5-R2(config)#banner motd #Restricted Access#
| |
| − | * Activer le routage
| |
| − | SE2A5-R2(config)#ip routing
| |
| − | SE2A5-R2(config)#ipv6 unicast-routing
| |
| − | * Activer VRRP
| |
| − | SE2A5-R2(config)#license boot level network-advantage
| |
| − | SE2A5-R2(config)#fhrp version vrrp v3
| |
| − | * Sauvegarde de la configuration
| |
| − | SE2A5-R2(config)#exit
| |
| − | SE2A5-R2#copy running-config startup-config
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − | router>enable
| |
| − | router#configure terminal
| |
| − | * Configuration du nom d’hôte
| |
| − | router(config)#hostname SE2A5-R3
| |
| − | * Accès SSH
| |
| − | SE2A5-R3(config)#aaa new-model
| |
| − | SE2A5-R3(config)#username admin privilege 15 secret glopglop
| |
| − | SE2A5-R3(config)#ip domain-name plil.info
| |
| − | SE2A5-R3(config)#crypto key generate rsa
| |
| − | SE2A5-R3(config)#line vty 0 15
| |
| − | SE2A5-R3(config-line)#transport input ssh
| |
| − | SE2A5-R3(config-line)#exit
| |
| − | * Accès console
| |
| − | SE2A5-R3(config)#line console 0
| |
| − | SE2A5-R3(config-line)#password glopglop
| |
| − | SE2A5-R3(config-line)#login authentification AAA_CONSOLE
| |
| − | SE2A5-R3(config-line)#exit
| |
| − | * Sécurisation des accès
| |
| − | SE2A5-R3(config)#service password-encryption
| |
| − | SE2A5-R3(config)#enable secret glopglop
| |
| − | SE2A5-R3(config)#banner motd #Restricted Access#
| |
| − | * Activer le routage
| |
| − | SE2A5-R3(config)#ip routing
| |
| − | SE2A5-R3(config)#ipv6 unicast-routing
| |
| − | * Activer VRRP
| |
| − | SE2A5-R3(config)#license boot level network-advantage
| |
| − | SE2A5-R3(config)#fhrp version vrrp v3
| |
| − |
| |
| − | ==Configuration du VLAN 530==
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − | * VLAN d’interconnexion
| |
| − | SE2A5-R1(config)#vlan 530
| |
| − | SE2A5-R1(config-vlan)#name INTERCO-4A
| |
| − | SE2A5-R1(config-vlan)#exit
| |
| − | SE2A5-R1(config)#interface vlan 530
| |
| − | SE2A5-R1(config-if)#description INTERCO-4A
| |
| − | SE2A5-R1(config-if)#ip address 192.168.222.34 255.255.255.248
| |
| − | SE2A5-R1(config-if)#ipv6 address fe80::2 link-local
| |
| − | SE2A5-R1(config-if)#ipv6 rip tpima2a5 enable
| |
| − | SE2A5-R1(config-if)#ipv6 enable
| |
| − | SE2A5-R1(config-if)#no shutdown
| |
| − | SE2A5-R1(config-if)#ip nat outside
| |
| − | SE2A5-R1(config-if)#exit
| |
| − | * Interface d’interconnexion
| |
| − | SE2A5-R1(config)#interface t6/5
| |
| − | SE2A5-R1(config-if)#switchport
| |
| − | SE2A5-R1(config-if)#switchport mode access
| |
| − | SE2A5-R1(config-if)#switchport access vlan 530
| |
| − | SE2A5-R1(config-if)#no shutdown
| |
| − | SE2A5-R1(config-if)#exit
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − | * VLAN d’interconnexion
| |
| − | SE2A5-R2(config)#vlan 530
| |
| − | SE2A5-R2(config-vlan)#name INTERCO-4A
| |
| − | SE2A5-R2(config-vlan)#exit
| |
| − | SE2A5-R2(config)#interface vlan 530
| |
| − | SE2A5-R2(config-if)#description INTERCO-4A
| |
| − | SE2A5-R2(config-if)#ip address 192.168.222.35 255.255.255.248
| |
| − | SE2A5-R2(config-if)#ipv6 address fe80::3 link-local
| |
| − | SE2A5-R2(config-if)#ipv6 rip tpima2a5 enable
| |
| − | SE2A5-R2(config-if)#ipv6 enable
| |
| − | SE2A5-R2(config-if)#no shutdown
| |
| − | SE2A5-R2(config-if)#ip nat outside
| |
| − | SE2A5-R2(config-if)#exit
| |
| − | * Interface d’interconnexion
| |
| − | SE2A5-R2(config)#interface g1/0/1
| |
| − | SE2A5-R2(config-if)#switchport
| |
| − | SE2A5-R2(config-if)#switchport mode access
| |
| − | SE2A5-R2(config-if)#switchport access vlan 530
| |
| − | SE2A5-R2(config-if)#no shutdown
| |
| − | SE2A5-R2(config-if)#exit
| |
| − |
| |
| − | ==Configuration du VLAN 532==
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − | * Bridge interconnexion
| |
| − | SE2A5-R3(config)#interface bdi 532
| |
| − | SE2A5-R3(config-if)#ip address 192.168.222.50 255.255.255.248
| |
| − | SE2A5-R3(config-if)#ipv6 enable
| |
| − | SE2A5-R3(config-if)#no shutdown
| |
| − | SE2A5-R3(config-if)#ip nat outside
| |
| − | SE2A5-R3(config-if)#exit
| |
| − | * Interface d’interconnexion
| |
| − | SE2A5-R3(config)#interface g0/0/0
| |
| − | SE2A5-R3(config-if)#description INTERCO-1B
| |
| − | SE2A5-R3(config-if)#no shutdown
| |
| − | SE2A5-R3(config-if)#service instance 532 ethernet
| |
| − | SE2A5-R3(config-if-srv)#encapsulation untagged
| |
| − | SE2A5-R3(config-if-srv)#bridge-domain 532
| |
| − | SE2A5-R3(config-if-srv)#exit
| |
| − | SE2A5-R3(config-if)#exit
| |
| − |
| |
| − | ==Configuration du VLAN 110==
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − | * VLAN réseau routé
| |
| − | SE2A5-R1(config)#vlan 110
| |
| − | SE2A5-R1(config-vlan)#name TP-NET1
| |
| − | SE2A5-R1(config-vlan)#exit
| |
| − | SE2A5-R1(config)#interface vlan 110
| |
| − | SE2A5-R1(config-if)#description TP-NET1
| |
| − | SE2A5-R1(config-if)#ip address 10.60.100.1 255.255.255.0
| |
| − | SE2A5-R1(config-if)#ipv6 address 2001:660:4401:60a0::/64 eui-64
| |
| − | SE2A5-R1(config-if)#ipv6 nd prefix 2001:660:4401:60a0::/64 1000 900
| |
| − | SE2A5-R1(config-if)#ipv6 nd router-preference high
| |
| − | SE2A5-R1(config-if)#ipv6 enable
| |
| − | SE2A5-R1(config-if)#no shutdown
| |
| − | SE2A5-R1(config-if)#ip nat inside
| |
| − | SE2A5-R1(config-if)#vrrp 10 ip 10.60.100.254
| |
| − | SE2A5-R1(config-if)#vrrp 10 preempt
| |
| − | SE2A5-R1(config-if)#vrrp 10 priority 110
| |
| − | SE2A5-R1(config-if)#exit
| |
| − | * Interface vers serveur Capbreton
| |
| − | SE2A5-R1(config)#interface t6/4
| |
| − | SE2A5-R1(config-if)#switchport
| |
| − | SE2A5-R1(config-if)#switchport mode access
| |
| − | SE2A5-R1(config-if)#switchport access vlan 110
| |
| − | SE2A5-R1(config-if)#no shutdown
| |
| − | SE2A5-R1(config-if)#exit
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − | * VLAN réseau routé
| |
| − | SE2A5-R2(config)#vlan 110
| |
| − | SE2A5-R2(config-vlan)#name TP-NET1
| |
| − | SE2A5-R2(config-vlan)#exit
| |
| − | SE2A5-R2(config)#interface vlan 110
| |
| − | SE2A5-R2(config-if)#description TP-NET1
| |
| − | SE2A5-R2(config-if)#ip address 10.60.100.2 255.255.255.O
| |
| − | SE2A5-R2(config-if)#ipv6 address 2001:660:4401:60a0::/64 eui-64
| |
| − | SE2A5-R2(config-if)#ipv6 nd prefix 2001:660:4401:60a0::/64 1000 900
| |
| − | SE2A5-R2(config-if)#ipv6 nd router-preference high
| |
| − | SE2A5-R2(config-if)#ipv6 enable
| |
| − | SE2A5-R2(config-if)#no shutdown
| |
| − | SE2A5-R2(config-if)#ip nat inside
| |
| − | SE2A5-R2(config-if)#vrrp 10 address-family ipv4
| |
| − | SE2A5-R2(config-if-vrrp)#address 10.60.100.254
| |
| − | SE2A5-R2(config-if-vrrp)#priority 100
| |
| − | SE2A5-R2(config-if-vrrp)#preempt
| |
| − | SE2A5-R2(config-if-vrrp)#exit
| |
| − | SE2A5-R2(config-if)#exit
| |
| − | * Interface vers serveur Capbreton
| |
| − | SE2A5-R2(config)#interface t0/1
| |
| − | SE2A5-R2(config-if)#switchport
| |
| − | SE2A5-R2(config-if)#switchport mode access
| |
| − | SE2A5-R2(config-if)#switchport access vlan 110
| |
| − | SE2A5-R2(config-if)#no shutdown
| |
| − | SE2A5-R2(config-if)#exit
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − | * Bridge réseau routé
| |
| − | SE2A5-R3(config)#interface bdi 110
| |
| − | SE2A5-R3(config-if)#ip address 10.60.100.3 255.255.255.0
| |
| − | SE2A5-R3(config-if)#vrrp 10 ip 10.60.100.254
| |
| − | SE2A5-R3(config-if)#vrrp 10 preempt
| |
| − | SE2A5-R3(config-if)#vrrp 10 priority 90
| |
| − | SE2A5-R3(config-if)#ipv6 enable
| |
| − | SE2A5-R3(config-if)#no shutdown
| |
| − | SE2A5-R3(config-if)#ip nat inside
| |
| − | SE2A5-R3(config-if)#exit
| |
| − | * Interface vers Cisco Catalyst 6509-E
| |
| − | SE2A5-R3(config)#interface g0/0/3
| |
| − | SE2A5-R3(config-if)#description TP-NET1
| |
| − | SE2A5-R3(config-if)#no shutdown
| |
| − | SE2A5-R3(config-if)#service instance 110 ethernet
| |
| − | SE2A5-R3(config-if-srv)#encapsulation dot1q 110
| |
| − | SE2A5-R3(config-if-srv)#rewrite ingress tag pop 1 symmetric
| |
| − | SE2A5-R3(config-if-srv)#bridge-domain 110
| |
| − | SE2A5-R3(config-if-srv)#exit
| |
| − | SE2A5-R3(config-if)#exit
| |
| − | * Interface vers Cisco Catalyst 9200
| |
| − | SE2A5-R3(config)#interface g0/0/1
| |
| − | SE2A5-R3(config-if)#description TP-NET1
| |
| − | SE2A5-R3(config-if)#no shutdown
| |
| − | SE2A5-R3(config-if)#service instance 110 ethernet
| |
| − | SE2A5-R3(config-if-srv)#encapsulation dot1q 110
| |
| − | SE2A5-R3(config-if-srv)#rewrite ingress tag pop 1 symmetric
| |
| − | SE2A5-R3(config-if-srv)#bridge-domain 110
| |
| − | SE2A5-R3(config-if-srv)#exit
| |
| − | SE2A5-R3(config-if)#exit
| |
| − |
| |
| − | ==Mascarade permettant l'accès à Internet de secours==
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − | * NAT
| |
| − | SE2A5-R3(config)#access-list 10 permit 193.48.57.160 0.0.0.15
| |
| − | SE2A5-R3(config)#ip nat pool NAT_POOL 213.215.6.101 213.215.6.101 netmask 255.255.255.255
| |
| − | SE2A5-R3(config)#ip nat inside source list 10 pool NAT_POOL overload
| |
| − | SE2A5-R3(config)#ip nat inside source static network 10.60.100.160 193.48.57.160 /28
| |
| − |
| |
| − | ==SLA==
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − | * SLA
| |
| − | SE2A5-R1(config)#ip sla 1
| |
| − | SE2A5-R1(config-ip-sla)#icmp-echo 192.168.44.1
| |
| − | SE2A5-R1(config-ip-sla)#frequency 300
| |
| − | SE2A5-R1(config-ip-sla)#exit
| |
| − | SE2A5-R1(config)#ip sla schedule 1 life forever start-time now
| |
| − | SE2A5-R1(config)#track 1 ip sla 1
| |
| − | SE2A5-R1(config-track)#exit
| |
| − | SE2A5-R1(config)#interface vlan 110
| |
| − | SE2A5-R1(config-if)#vrrp 10 track 1 decrement 50
| |
| − | SE2A5-R1(config-if)#exit
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − | * SLA
| |
| − | SE2A5-R2(config)#ip sla 1
| |
| − | SE2A5-R2(config-ip-sla)#icmp-echo 192.168.44.1
| |
| − | SE2A5-R2(config-ip-sla)#frequency 300
| |
| − | SE2A5-R2(config-ip-sla)#exit
| |
| − | SE2A5-R2(config)#ip sla schedule 1 life forever start-time now
| |
| − | SE2A5-R2(config)#track 1 ip sla 1
| |
| − | SE2A5-R2(config-track)#exit
| |
| − | SE2A5-R2(config)#interface vlan 110
| |
| − | SE2A5-R2(config-if)#vrrp 10 address-family ipv4
| |
| − | SE2A5-R2(config-if-vrrp)#track 1 decrement 50
| |
| − | SE2A5-R2(config-if)#exit
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ====
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ====
| |
| − |
| |
| − | ===Cisco Catalyst 6509-E===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco Catalyst 9200===
| |
| − |
| |
| − |
| |
| − |
| |
| − | ===Cisco ISR 4331 (accès Internet de secours)===
| |
| | | | |
| | | | |
