########################### SWITCH: ###########################

enable
configure terminal

hostname SW1
no ip domain-lookup
! ipv6 unicast-routing

! Pro starý switche:
sdm prefer dual-ipv4-and-ipv6 default

ip domain name ccna-lab.com

interface vlan 1
no ip address
ip address 192.168.1.11 255.255.255.0
! ipv6 address 2001:db8:acad:1::b/64
! ipv6 address fe80::2 link-local
no shutdown
exit

interface range G1/0/3-24, G1/1/1-4
shutdown

ip default-gateway 172.16.1.1

copy running-config startup-config

erase startup-config

show ip interfaces brief
show interfaces vlan 1
show mac address-table
show arp
show version
show flash
show ip route
show interfaces
show protocols
show users

clear mac address-table dynamic

########################### ROUTER: ###########################
enable
configure terminal

hostname R1
ipv6 unicast-routing
no ip domain lookup

ip domain name ccna-lab.com

interface G0/0/0
no ip address
ip address 192.168.1.1 255.255.255.248
ipv6 address 2001:db8:acad:a::1/64
ipv6 address fe80::1 link-local
no shutdown
! description room 114
exit

interface G0/0/1
no ip address
ip address 192.168.2.1 255.255.255.248
ipv6 address 2001:db8:acad:1::1/64
ipv6 address fe80::1 link-local
no shutdown
! description room 279
exit

interface S0/0/0
! ip address 209.165.200.225 255.255.255.252
ipv6 address 2001:db8:1:a001::2/64
ipv6 address fe80::1 link-local
no shutdown
! description WAN connection to R2
exit

exit

ip route 192.168.33.128 255.255.255.192 192.168.33.249
ip route 192.168.33.193 255.255.255.224 192.168.33.250

copy running-config startup-config
copy startup-config flash

erase startup-config

show ip route 

########################### BEZPEČNOST: ###########################
enable
configure terminal

enable secret cisco
service password-encryption
! security password min-length 10

line console 0
password cisco
login
exec-timeout 5 0
exit

line vty 0 15
password cisco
transport input ssh
! transport input telnet
login local
exec-timeout 5 0
exit

! Pro nový switche:
ip ssh server algorithm mac hmac-sha1 hmac-sha2-256 hmac-sha2-512

username admin secret cisco
crypto key generate rsa modulus 1024

login block-for 120 attempts 3 within 60

banner motd "This is a secure system. Authorized Access Only!"


############################### PC: ################################
ssh -l admin 192.168.1.1
Adm1nP@55