Router 1

Advertise Networks Configure OSPF Router ospf 1 network 172.16.100.64 0.0.0.31 area 0 network 172.16.100.112 0.0.0.7 area 0 network 172.16.100.120 0.0.0.3 area 0 log-adjacency-changes area 0 authentication message-digest exit Set Interface interface Lo0 ip address 10.0.0.1 255.255.255.255 no shutdown exit Encrypt Interfaces interface s0/0/0 ip ospf message-digest-key 5 md5 itsasecret exit interface Fa0/0 ip ospf message-digest-key 5 md5 itsasecret exit Encrypt Interface + Set Priority interface Fa0/1 ip ospf priority 50 ip ospf message-digest-key 5 md5 itsasecret exit Copy Run Start

Router 2
Advertise Networks configure terminal interface Fa0/1 ip address 172.16.100.118 255.255.255.248 no shutdown exit Set Interface interface Lo0 ip address 10.0.0.2 255.255.255.255 no shutdown exit interface Fa0/0 ip address 172.16.100.1 255.255.255.192 no shutdown exit interface S0/0/0 ip address 172.16.100.126 255.255.255.252 no shutdown exit Advertise Network Configure OSPF router ospf 1 network 172.16.100.0 0.0.0.63 area 0 network 172.16.100.112 0.0.0.7 area 0 network 172.16.100.124 0.0.0.3 area 0 network 172.16.100.120 0.0.0.3 area 0 log-adjacency-changes area 0 authentication message-digest exit Set Bandwith + Encrypt Interface interface s0/0/0 bandwidth 384 ip ospf message-digest-key 5 md5 itsasecret exit interface Fa0/0 ip ospf message-digest-key 5 md5 itsasecret exit interface Fa0/1 ip ospf priority 25 ip ospf message-digest-key 5 md5 itsasecret exit

Router 2 Access List Access-list 115 deny ip 172.16.100.0 0.0.0.63 172.16.100.64 0.0.0.31 Access-list 115 permit ip any any Interface Fa0/0 ip access-group 115 in end

Copy Run Start

HQ
Advertise Networks Configure OSPF configure terminal router ospf 1 network 172.16.100.96 0.0.0.15 area 0 network 209.165.201.0 0.0.0.3 area 0 network 172.16.100.120 0.0.0.3 area 0 network 172.16.100.124 0.0.0.3 area 0 network 172.16.100.120 0.0.0.3 area 0 log-adjacency-changes area 0 authentication message-digest exit Set Interface interface Lo0 ip address 10.0.0.3 255.255.255.255 no shutdown exit Encrypt Interface interface s0/0/0 ip ospf message-digest-key 5 md5 itsasecret exit interface s0/0/1 ip ospf message-digest-key 5 md5 itsasecret exit Set Bandwith + Encrypt Interface interface s0/1/0 bandwidth 384 ip ospf message-digest-key 5 md5 itsasecret exit interface Fa0/1 ip ospf message-digest-key 5 md5 itsasecretexit Set Default Route configure terminal ip route 0.0.0.0 0.0.0.0 s0/0/1

HQ - Access Lists router ospf 1 default-information originate exit access-list 100 permit tcp any host 128.107.0.10 eq 80 access-list 100 permit tcp any any established access-list 100 permit icmp any any unreachable access-list 100 permit icmp any any echo-reply interface s0/0/1 ip access-group 100 in exit

Copy Run Start

ip access-list standard NO_INTERNET deny 172.16.100.64 0.0.0.31 permit any

interface s0/1/0 ip access-group NO_INTERNET in exit