Configuracion de Router Cisco 2600 y 1951 con vlans y NAT

Bueno, esto no tiene que ver 100% con linux pero me toco realizarlo y puede que alguno le sirva, ahora pueden echarle un ojo a mi manual sobre VLANS con Linux Cisco Switch 3600 y telefonos Polycom Aqui. A continuacion las experiencias que tuve con 2 routers, 1 Cisco 2600 y un 1951. El 2600 toco resetearlo porque poseia una clave que no sabia. Luego se reconfiguran creando 5 vlans por la interfaz gigabit 1 y la salida a internet por la gigabit 0, configuracion de NAT y configuracion de servicios DHCP para cada vlan.
 
Reiniciar un  Cisco Router 2600,  Iniciamos el router y nos aparece el siguiente mensaje

System Bootstrap, Version 12.2(8r) [cmong 8r], RELEASE SOFTWARE (fc1)
Copyright (c) 2003 by cisco Systems, Inc.
C2600 platform with 262144 Kbytes of main memory

En este punto presionamos (solo desde MINICOM) "CTRL + a" al tiempo y luego la tecla "f", el proceso de detiene y se nos presenta un prompt

program load complete, entry point: 0x80008000, size: 0x1c9468c

monitor: command "boot" aborted due to user interrupt
rommon 1>

Digitamos el siguiente comando:

rommon 1 > confreg 0x2142
You must reset or power cycle for new config to take effect
rommon 2 > reset

El sistema se resetea e inicia el proceso de boot:

System Bootstrap, Version 12.2(8r) [cmong 8r], RELEASE SOFTWARE (fc1)
Copyright (c) 2003 by cisco Systems, Inc.
C2600 platform with 262144 Kbytes of main memory

program load complete, entry point: 0x80008000, size: 0x1c9468c
Self decompressing the image : ########################################################################################################################################]

Smart Init is disabled. IOMEM set to: 10

Using iomem percentage: 10

Increasing IOMEM up to: 32Mb
              Restricted Rights Legend

Use, duplication, or disclosure by the Government is
subject to restrictions as set forth in subparagraph
(c) of the Commercial Computer Software - Restricted
Rights clause at FAR sec. 52.227-19 and subparagraph
(c) (1) (ii) of the Rights in Technical Data and Computer
Software clause at DFARS sec. 252.227-7013.

           cisco Systems, Inc.
           170 West Tasman Drive
           San Jose, California 95134-1706

Cisco IOS Software, C2600 Software (C2600-ADVENTERPRISEK9-M), Version 12.4(25d), RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2010 by Cisco Systems, Inc.
Compiled Wed 18-Aug-10 04:49 by prod_rel_team

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco 2651XM (MPC860P) processor (revision 3.0) with 229376K/32768K bytes of memory.
Processor board ID JAE081271TZ
M860 processor: part number 5, mask 2
2 FastEthernet interfaces
32K bytes of NVRAM.
49152K bytes of processor board System flash (Read/Write)

         --- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: no

Press RETURN to get started!

Listo el router no tiene configuracion cargada por lo que podemos reconfigurarlo. Esta configuracion aplica tanto para un 2600 como para un 1900.

en
config t
no logging console
line  console 0
password 1ntern1x_n1x
login
!intentos timeout logueo
exec-timeout 5 30

!Configurar acceso remoto
config t
line vty 0 4
password 1ntern1x_n1x
login
end

!configurar la interfaz G0 ip fija
config t
interface gigabitethernet0/0
description "Salida internet"
no shutdown
ip address 192.168.124.236 255.55.255.0
end

!configurar la interfaz G1
config t
interface gigabitethernet0/1
description "Red local"
no shutdown
ip address 192.168.50.1 255.255.255.0
end

!para desasignar una IP o quitar ip a una interfaz
config t
interface gigabitethernet0/0
shutdown
no ip address
end

!Configurar rutas
config t
ip route 192.168.50.0 255.255.255.0 192.168.168.1
ip route 0.0.0.0 0.0.0.0 192.168.124.1
end

!enmascararmiento de paquetes entrando por la gigabitethernet0/1 y saliendo por la gigabitethernet0/0  con la ip 192.168.124.236
config t
access-list 1 permit 192.168.50.0 0.0.0.255
ip nat inside source list 1 pool 192.168.124.236
interface gigabitethernet0/1
ip nat inside
interface gigabitethernet0/0
ip nat outside


!configurando VLANS 1,2,3,4,5: 1 de administracion
config t
interface gigabitEthernet0/1.1
encapsulation dot1Q 1
ip address 192.168.100.2 255.255.255.0

interface gigabitEthernet0/1.2
encapsulation dot1Q 2
ip address 192.168.10.2 255.255.255.0

interface gigabitEthernet0/1.3
encapsulation dot1Q 3
ip address 192.168.20.2 255.255.255.0

interface gigabitEthernet0/1.4
encapsulation dot1Q 4
ip address 192.168.30.2 255.255.255.0

interface gigabitEthernet0/1.5
encapsulation dot1Q 5
ip address 192.168.40.2 255.255.255.0

!configurando Dhcp para VLANs

config t
ip dhcp pool vlan2
network 192.168.10.0  255.255.255.0
default-router 192.168.10.1
lease infinite
end

config t
ip dhcp pool vlan3
network 192.168.20.0  255.255.255.0
default-router 192.168.20.1
lease infinite
end

config t
ip dhcp pool vlan4
network 192.168.30.0  255.255.255.0
default-router 192.168.40.1
lease infinite
end

config t
ip dhcp pool vlan5
network 192.168.40.0  255.255.255.0
default-router 192.168.40.1
lease infinite
end

!iniciar dhcp server
config t
service dhcp
end

!detener dhcp server
config t
no service dhcp
end

!estadisticas
show ip dhcp binding
show ip dhcp server statistics

Saludos!