#### WLC #### WLC ip 192.168.1.1 255.255.255.0 default router 192.168.1.254 dhcp server 192.168.1.254 #### ROUTER #### ip dhcp pool IT network 192.168.1.0 255.255.255.0 default-router 192.168.1.254 dns-server 8.8.8.8 ! ip dhcp pool AP network 192.168.10.0 255.255.255.0 default-router 192.168.10.254 dns-server 8.8.8.8 ! ip dhcp pool Guest network 192.168.30.0 255.255.254.0 default-router 192.168.30.254 dns-server 8.8.8.8 ! ! ip forward-protocol udp 5246 ! interface FastEthernet0/0.1 description IT encapsulation dot1Q 1 native ip address 192.168.1.254 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface FastEthernet0/0.10 description AP encapsulation dot1Q 10 ip address 192.168.10.254 255.255.255.0 ip nat inside ip helper-address 192.168.1.1 ip virtual-reassembly in ! interface FastEthernet0/0.30 description Guest encapsulation dot1Q 30 ip address 192.168.30.254 255.255.254.0 ip access-group GUEST in ip nat inside ip virtual-reassembly in ! interface FastEthernet0/1 ip address 10.10.2.151 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! ip nat inside source list WIFI interface FastEthernet0/1 overload ( pazi na interface) ip route 0.0.0.0 0.0.0.0 10.10.2.254 (ovo je adresa od profesora) ! OVO MOZDA NECE TREBATI ip access-list extended GUEST deny ip 192.168.30.0 0.0.1.255 192.168.1.0 0.0.0.255 deny ip 192.168.30.0 0.0.1.255 192.168.10.0 0.0.0.255 permit ip any any ip access-list extended WIFI permit ip 192.168.1.0 0.0.0.255 any permit ip 192.168.10.0 0.0.0.255 any permit ip 192.168.30.0 0.0.1.255 any ! #### SWITCH #### interface FastEthernet1/0/1 description ROUTER switchport trunk encapsulation dot1q switchport trunk allowed vlan 1,10,30 switchport mode trunk ! interface FastEthernet1/0/2 description WLC switchport trunk encapsulation dot1q switchport trunk allowed vlan 1,10,30 switchport mode trunk ! interface FastEthernet1/0/3 description AP switchport access vlan 10 switchport mode access interface FastEthernet1/0/4 tu stavi PC (bit ce default vlan 1) !