HQ RTR

int gi1
ip addr 172.16.1.2 255.255.255.240
ip nat outside
no shutdown
description ISP

int gi2.100
encapsulation dot1Q 100
ip addr 192.168.1.1 255.255.255.224
ip nat inside
description HQ-SRV
no shutdown

int gi2.200
encapsulation dot1Q 200
ip addr 192.168.2.1 255.255.255.240
ip nat inside
description HQ-CLI
no shutdown

int gi2.999
encapsulation dot1Q 999
ip addr 192.168.9.1 255.255.255.248
description Management
no shutdown

ip route 0.0.0.0 0.0.0.0 172.16.1.1

int Tunnel0
ip addr 192.168.4.1 255.255.255.240
tunnel source 172.16.1.2
tunnel destination 172.16.2.2
ip ospf authentication
ip ospf authentication-key aboba
no shutdown

router ospf 1
passive-interface default
no passive-interface Tunnel0
network 192.168.1.0 0.0.0.31 area 0
network 192.168.2.0 0.0.0.15 aea 0
network 192.168.9.0 0.0.0.7 area 0
network 192.168.4.0 0.0.0.15 area 0

access-list 1 permit 192.168.1.0 0.0.0.31
access-list 1 permit 192.168.2.0 0.0.0.15
access-list 1 permit 192.168.9.0 0.0.0.7
ip nat inside source list 1 interface <интерфейс vmbr1 / gi1> overload

ip dhcp excluded-address 192.168.2.1

ip dhcp pool CLI_DHCP
network 192.168.2.0 255.255.255.240
dns-server 192.168.1.2
default-router 192.168.1.1
domain-name au-team.irpo
host 192.168.2.2
hardware-address <MAC HQ-CLI>

hostname hq-rtr.au-team.irpo

clock timezone MSK 3

username net_admin privilage 15 password P@ssw0rd

wr