$1)$ Setup and configure routers and ISP server:

$-$ Complete the missed information $?.?.?.?$ and configure IP addresses of ISP$1,$ RCom, R$1,$ R$2$ and ISP Server

$-$ Protect the access to the privileged exec mode on R$1$ and R$2$ using encrypted password 'class', as well as security account 'user $\text{'}($privilege level $0)$

and 'admin' $($privilege level $15),$ both with encrypted passwords 'cisco'.

$-$ Setup the remote connection via SSH only, the encryption key size is $1024,$ ip domain is 'iitu.local'.

$-$ Configure standard ACL#$99$ to allow the remote connection to R$1,$ R$2$ via SSH from RCom only.

$-$ Configure OSPF process $1$ on R$1,$ R$2$ and RCom $($include networks of VLANs $10,20,30,50$ accordingly$)$: make sure you can ping R$1$ from R$2$ or back.

$-$ Configure OSPF so that routing updates are not sent into networks where they are not required.

$-$ Configure the static routes on R$1$ and R$2$ to ISP server over ISP$1$ and make sure you can ping it$\mathrm{.}2)$ Setup and configure the switches of Head Quarter $($HQ$-$CS$,$ HQ$-$AS$1,$ HQ$-$AS$2)$ and Branch office $($BR$-$CS$,$ BR$-$AS$1,$ BR$-$AS$2)$:

$-$ Protect the access to the privileged exec mode on all switches using encrypted password 'class', as well as security account 'user $\text{'}($privelege level $0)$

and 'admin' $($privelege level $15),$ both with ecnrypted passwords 'cisco'.

$-$ Setup the remote connection via SSH only, the encryption key size is $1024,$ ip domain is 'iitu.local'.

$-$ Configure the port$-$security settings on active access ports:

$-$ Maximum MAC is $2$

$-$ Dynamic learning of MACs

$-$ BPDU protection and Portfast are enabled

$-$ Configure the required VLANs $10,20,30,40,50$ where $40$ is Management VLAN

$-$ Disable all unused ports

$-$ Configure the Etherchannels between Core switches and switches of Access level:

$-$ HQ$-$CS and HQ$-$AS$1$: Group #$1$ mode ON

$-$ HQ$-$CS and HQ$-$AS$2$: Group #$2$ mode ON

$-$ and the same in Branch office $($BR$-$CS and BR$-$AS$1/$ BR$-$CS and BR$-$AS$2)$

$-$ Turn off the negotiation on trunk ports

$-$ Make sure that native VLAN $99$ on all trunk and list of allowed VLAN includes only required ones$\mathrm{.}3)$ Setup the Management VLAN $40($description 'Management'$)$ on all switches and DHCP for PCs:

$-$ Configure the required IP addresses and subnet mask of VLAN $40($Management VLAN$)$ on all switches

$-$ Configure Router on stick $($subinterfaces$)$ in R$1$ and R$2$ in order to provide the connectivity among VLANs $($description of subinterfaces 'VLAN XX$\text{'})$

$-$ Configure DHCP range on R$1$ and R$2$ for VLAN $10,20,30,50($pool name VlanXX$)$ and make sure that PC$1-$PC$8$ can obtain the required IP addresses

$-$ Exclude the gateway IP addresses and IP address of HQ TFTP$/$HTTP Server $($exclusion range X$.$X$.$X$\mathrm{.}200-254)$

$-$ Configure formal DNS server $8\mathrm{.}8\mathrm{.}8\mathrm{.}8.$ in each pool$4)$ Configure the Network Address Translation on R$1$ and R$2$ routers:

$-$ Make sure that all PCs of HQ and BR can open the web$-$site of ISP Server via PAT $($source ACL #$1)$

$-$ Configure static NAT on R$1$ to access the HQ TFTP$/$HTTP server via external IP address $64\mathrm{.}131\mathrm{.}55\mathrm{.}1$

$-$ Make sure that you can open the web$-$site on HQ TFTP$/$HTTP server from ISP Server$5)$ Configure the IPSEC tunnel between R$1$ and R$2$ routers:

$-$ Make sure that you use policy $10$ with encryption AES $256,$ aithentication pre$-$share key "secretkey" and group $5$

$-$ Tranform$-$set with ESP$-$AES $256$ ESP$-$SHA$-$MAC

$-$ Configure crypto map IPSEC$-$MAP $($Source ACL #$100)$

$-$ Make sure that you can open the web$-$site on HQ HTTP server from PC$7$ and PC$16)$ Backup all active equipment configuration in HQ on HQ TFTP server:

$-$ Make sure that you can ping HQ TFTP server from all switches and router of HQ

$-$ Copy the configuration files to HQ TFTP server: R$1-$confg, HQ$-$CS$-$confg, HQ$-$AS$1-$confg, HQ$-$AS$2-$confg

$-$ Make sure that you can copy the configuration of HQ equipment from HQ TFTP server to the flash:

R$1-$confg.text, HQ$-$CS$-$confg.text, HQ$-$AS$1-$confg.text, HQ$-$AS$2-$confg.text

$$