Building configuration...

Current configuration : 11305 bytes
!
! Last configuration change at 16:13:50 SAMT Thu Jul 28 2022 by adm_ivanovas
! NVRAM config last updated at 16:13:51 SAMT Thu Jul 28 2022 by adm_ivanovas
!
version 15.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service unsupported-transceiver
!
hostname IZH-MLK-IZM-SW-19-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
logging buffered 64000
enable secret 5 $1$L7fK$k/MCEtLn2e68JjkqKNFz10
!
username netadmin privilege 15 secret 5 $1$7jTN$0CwmJLAAU55OO6womTbGc.
aaa new-model
!
!
aaa group server radius NPS
 server name IZH-RDS002
 server name P11-RDS003
 load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated 
!
!
!
!
!
!
aaa session-id common
clock timezone SAMT 4 0
switch 1 provision ws-c2960s-24ps-l
no ip source-route
no ip gratuitous-arps
!
!
ip dhcp snooping vlan 1-4094
ip dhcp snooping
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2313305472
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2313305472
 revocation-check none
 rsakeypair TP-self-signed-2313305472
!
!
crypto pki certificate chain TP-self-signed-2313305472
 certificate self-signed 01
  3082025D 308201C6 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 32333133 33303534 3732301E 170D3933 30333031 30303032 
  33395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 33313333 
  30353437 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100C60F 962DF823 A74FC32F 9E0568F9 0A4ECFB8 B6EBEEE7 B8E86E16 9C5AB134 
  49A1CF49 4CE36C61 9CFA07E7 4D1FF0C2 3B3F2D03 235DDDF8 04F290E0 616B5929 
  4F6652C7 B0B9AF7A D9452493 F5484ACB 696921E5 448D8AF2 9CD9752B 4739E2E3 
  F6297C03 9964E078 89238A33 2E7E2D39 7B3F5DDF FA753F67 B0A81105 2926B886 
  27150203 010001A3 81843081 81300F06 03551D13 0101FF04 05300301 01FF302E 
  0603551D 11042730 25822349 5A482D4D 4C4B2D49 5A4D2D53 572D3139 2D312E6D 
  696C6B6F 6D2D6B6F 6D6F732E 7275301F 0603551D 23041830 1680142F 8CF6B24D 
  A147E6F8 F84527CC C8F3D9B6 3DFEDA30 1D060355 1D0E0416 04142F8C F6B24DA1 
  47E6F8F8 4527CCC8 F3D9B63D FEDA300D 06092A86 4886F70D 01010405 00038181 
  001B1169 825BE910 656DE73B 1128240C 58784BC9 71F76C85 9AD80B61 31282A6F 
  4F3AE65F ED2F6B6F 18F7B19A C84C3C1C 04A78428 47457013 9078ABFE EBCFD432 
  25F43511 18DC2BEF 8C442C4A 0B798C31 BB7ABEDA FB237850 610C0955 37959AF2 
  98E7A365 DB558BD3 B55C551C D7EBBF7A F3126583 B382D63C F6F43CCD 0B8C5DEB 86
  	quit
archive
 log config
  logging enable
  logging size 900
  notify syslog contenttype plaintext
  hidekeys
 path tftp://tftp/IZH/MLK/IZM-SW_L2/$H-$T
 write-memory
 time-period 10080
spanning-tree mode pvst
spanning-tree logging
spanning-tree extend system-id
no errdisable detect cause gbic-invalid
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery interval 600
!
!
!
!
vlan internal allocation policy ascending
!
lldp run
!
! 
!
!
!
!
!
!
!
!
interface Port-channel1
 description [CORE] SW-1-1
 switchport mode trunk
 ip dhcp snooping trust
!
interface FastEthernet0
 no ip address
 shutdown
!
interface GigabitEthernet1/0/1
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/2
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/3
 description -=VODACO=-
 switchport access vlan 500
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface GigabitEthernet1/0/4
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/5
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/6
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/7
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/8
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/9
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/10
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/11
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/12
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/13
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/14
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/15
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/16
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/17
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/18
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/19
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/20
 description NONE
 switchport access vlan 19
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/21
 description --PRINTERS--
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
!
interface GigabitEthernet1/0/22
 description --PRINTERS--
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface GigabitEthernet1/0/23
 description --PRINTERS--
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface GigabitEthernet1/0/24
 description -=AT=-
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/25
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode active
 ip dhcp snooping trust
!
interface GigabitEthernet1/0/26
 switchport mode trunk
 channel-group 1 mode active
 ip dhcp snooping trust
!
interface GigabitEthernet1/0/27
 switchport mode trunk
 channel-group 1 mode active
 ip dhcp snooping trust
!
interface GigabitEthernet1/0/28
 switchport mode trunk
 channel-group 1 mode active
 ip dhcp snooping trust
!
interface Vlan1
 description --tftp--
 no ip address
 no ip redirects
 no ip unreachables
 no ip proxy-arp
 shutdown
!
interface Vlan300
 description --MANAGMENT--
 ip address 10.4.254.191 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
ip default-gateway 10.4.254.254
no ip http server
no ip http secure-server
!
ip ssh time-out 30
ip ssh authentication-retries 5
ip ssh rsa keypair-name SSH_KEYS
ip ssh version 2
!
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
!
snmp-server community lmTUEsk6Yvlv RO
snmp ifmib ifindex persist
!
!
radius server IZH-RDS002
 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 124832454B05483330236202120B643C080F0E2367495712102D223430541C43777F7A061E745E3F7A60210303004802233E007F440114084139202A541F7D2A06
!
radius server P11-RDS003
 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 091D795B400B5325110442000A1A6E1C3A3B1E2527130E171D7B7278280E5C027D757801477A0C33793122485200000F216A2A35052941435F322E31423E5A0A04
!
banner login ^C
*****************************************************************************
*                                                                           *
*                    UNAUTHORIZED ACCESS IS PROHIBITED                      *
*                                                                           *
*                     You have accessed network equipment.                  *
*  You must have authorized permission to access or configure this device.  *
*     All activities performed on this device are logged and monitored.     *
*                                                                           *
*****************************************************************************
^C
!
line con 0
 exec-timeout 60 0
 logging synchronous
 login authentication CONSOLE
line vty 0 4
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
line vty 5 15
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
!
ntp server 192.168.8.200 prefer
ntp server 192.168.8.201
mac address-table notification change
mac address-table notification mac-move
mac address-table aging-time 900
end