---

enable
configure terminal
hostname R-Center

! Включаем интерфейсы
interface GigabitEthernet 0/0
 no shutdown
 exit
interface GigabitEthernet 0/1
 no shutdown
 exit
interface GigabitEthernet 0/2
 no shutdown
 exit

! Sub-interfaces (Inter-VLAN маршрутизация)
interface GigabitEthernet 0/0.10
 encapsulation dot1Q 10
 ip address 192.168.110.129 255.255.255.224
 ip nat inside
 exit

interface GigabitEthernet 0/1.20
 encapsulation dot1Q 20
 ip address 192.168.110.65 255.255.255.192
 ip nat inside
 exit

interface GigabitEthernet 0/2.30
 encapsulation dot1Q 30
 ip address 192.168.110.1 255.255.255.192
 ip nat inside
 exit

! Внешний интерфейс в сторону провайдера Cloud-WAN
interface GigabitEthernet 0/3
 ip address 203.0.113.2 255.255.255.252
 ip nat outside
 no shutdown
 exit

! Настройка NAT и маршрута по умолчанию
access-list 1 permit 192.168.110.0 0.0.0.255
ip nat inside source list 1 interface GigabitEthernet 0/3 overload
ip route 0.0.0.0 0.0.0.0 203.0.113.1

! Настройка DHCP для трех отделов
ip dhcp pool DEPT1
 network 192.168.110.128 255.255.255.224
 default-router 192.168.110.129
 dns-server 192.168.110.162
 exit

ip dhcp pool DEPT2
 network 192.168.110.64 255.255.255.192
 default-router 192.168.110.65
 dns-server 192.168.110.162
 exit

ip dhcp pool DEPT3
 network 192.168.110.0 255.255.255.192
 default-router 192.168.110.1
 dns-server 192.168.110.162
 exit

! Базовая безопасность и SSH
service password-encryption
enable secret SecurityPass123!
banner motd # Unauthorized access prohibited #
username admin privilege 15 secret AdminPass123!
ip domain-name company.local
crypto key generate rsa general-keys modulus 2048

line vty 0 4
 transport input ssh
 login local
 exit

end
write memory