While OSPF is introduced in CCNA 2, CCNA 3 focuses on multi-area implementations and security.
vlan 10
name VLAN10
vlan 20
name VLAN20
interface FastEthernet0/1
switchport mode access
switchport access vlan 10
!
interface FastEthernet0/2
switchport mode access
switchport access vlan 20
interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport mode trunk
switchport nonegotiate
switchport trunk allowed vlan 10,20
interface Vlan10
ip address 10.10.10.1 255.255.255.0
no shutdown
interface Vlan20
ip address 10.10.20.1 255.255.255.0
no shutdown
ip routing
interface GigabitEthernet0/0
no ip address
!
interface GigabitEthernet0/0.10
encapsulation dot1Q 10
ip address 10.10.10.254 255.255.255.0
!
interface GigabitEthernet0/0.20
encapsulation dot1Q 20
ip address 10.10.20.254 255.255.255.0
interface FastEthernet0/3
switchport mode access
switchport access vlan 10
switchport port-security
switchport port-security maximum 2
switchport port-security violation shutdown
switchport port-security mac-address sticky
interface range GigabitEthernet0/2 - 3
channel-group 1 mode active
!
interface Port-channel1
switchport mode trunk
switchport trunk allowed vlan 10,20
spanning-tree vlan 10 priority 4096
spanning-tree vlan 20 priority 4096
router ospf 1
network 10.10.255.0 0.0.0.3 area 0
network 10.10.10.0 0.0.0.255 area 0 (solo si router hospeda subredes)
ip route 0.0.0.0 0.0.0.0 s0/1/0
router ospf 1
default-information originate
Si aplicas una ACL de salida restrictiva, puedes bloquear respuestas ICMP. Regla de oro: Las ACLs extendidas deben analizar tráfico de origen Y destino. Usa established para TCP o permite rangos de puertos dinámicos. ccna 3 examen final de habilidades de ensa ptsa work
router ospf 1
router-id 1.1.1.1
network 10.10.1.0 0.0.0.3 area 0
network 192.168.1.0 0.0.0.255 area 0
passive-interface default
no passive-interface g0/0
