//To access running configs on all network devices use 
---------console line password: cisco
---------privi exec mode password: class


VLAN VOICE, PC, EXEC, ACCT and IT  clients have DHCP addressing, SRVRS and printers are statically addressed.

Internal pcs can ping  
-----------alpha.local  alpha6.local on SRV1 and SRV2 with internal 192.168.16.10 and 20 address

-----------www.alpha.com and www.alpha6.com on SRV- DMZ with internal 172.16.1.10 address

-----------www.internet.com and www.internet6.com on SRV-ISP with external 3.3.3.2 address

Internet client 4.4.4.4 can ping
-----------www.alpha.com and www.alpha6.com with external address 1.1.1.10  and -----------www.internet.com and www.internet6.com with external address 3.3.3.2. 

All internal 192.168.0.0/19 address are translated at the EDGE-ROUTER gateway to 1.1.1.1 via PAT
Internal 172.16.1.10 address is translated with static NAT to 1.1.1.10

IT, ACCT and EXEC pcs can connect to each other. Other internal devices cannot access EXEC and ACCT pcs via IPV4. (IPv6 acl is not configured)

MAIN router SVI has restricted SSH access for IT PCs only. 
address: 192.168.99.1
username: admin
password: admin1pass

All unused switchports are manually shutdown. Switchports to SRV1, 2 and 3 allow max 2 mac-addresses and feature port security sticky mac address and violation mode set to restrict



****IP Phones, printers and VPN are not fully configured because that is outside of the scope of this course. VPN exists right now as a floating static route providing an alternate route to the internet.