Building configuration...

Current configuration : 13629 bytes
!
! Last configuration change at 16:51:47 SAMT Fri May 27 2022 by adm_ivanovas
! NVRAM config last updated at 16:18:54 SAMT Thu May 26 2022 by adm_ivanovas
!
version 15.2
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
!
hostname IZH-MLK-IZM-SW-1-3
!
boot-start-marker
boot-end-marker
!
logging userinfo
logging buffered 64000
enable secret 5 $1$s9Gc$Al.6G1QWOeNqLhCGo6CxP/
!
username netadmin privilege 15 secret 5 $1$8dIx$LHaqu8wsWda0FbCGHiahv1
aaa new-model
!
!
aaa group server radius NPS
 server name IZH-RDS002
 server name P11-RDS003
 load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated 
!
!
!
!
!
!
aaa session-id common
clock timezone SAMT 4 0
switch 1 provision ws-c2960x-48fps-l
!
!
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
vtp mode off
!
!
!
!
!
!
!
crypto pki trustpoint TP-self-signed-2757678336
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2757678336
 revocation-check none
 rsakeypair TP-self-signed-2757678336
!
!
crypto pki certificate chain TP-self-signed-2757678336
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 32373537 36373833 3336301E 170D3136 30373035 30383333 
  30325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 37353736 
  37383333 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100C949 A7A93DE5 D8B5B5E9 2979F97B 6C3D624D C37A2608 7AE0ACFC 6B4D49D2 
  5B6D9C13 3D6DC4EA BE322D26 17415D96 D6AD1B88 FF232B08 7AA483B4 468488AA 
  4B085389 F506F28D AE445DBE AEF57C02 6B049AF7 49D949F8 9065449F 360CBE16 
  D8FF79FA ABFA0738 A85B74E9 6718283A BA335B63 B1FC0D7C 341E86BB 6631D220 
  6C2F0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 
  551D2304 18301680 1433C158 39B28FCC 92F392E5 430AE8C1 68ECC60A FC301D06 
  03551D0E 04160414 33C15839 B28FCC92 F392E543 0AE8C168 ECC60AFC 300D0609 
  2A864886 F70D0101 05050003 81810085 10FEB8C3 6C0DE5C1 4CB7144F 009DEA70 
  5BA15FDF D741F65D 097C3AE8 D3BB4A54 0319E78B 18820443 0AB9C014 438B7A33 
  5BD1C9A6 42AD6962 427D0590 F398710D 0350E3A3 0013B013 8F76355A 556858E3 
  B9F4C7CE B2C52664 012E5048 1AE3447E E81D93AA 76ED3CF5 FACC344E 01DC6A74 
  F9DE155D 3751DAD5 5DEAC2FB 2D0904
  	quit
archive
 log config
  logging enable
  logging size 900
  notify syslog contenttype plaintext
  hidekeys
 path tftp://tftp/IZH/2960/$H-$T
 write-memory
 time-period 10080
spanning-tree mode pvst
spanning-tree logging
spanning-tree extend system-id
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery cause psp
errdisable recovery interval 600
port-channel load-balance src-dst-ip
!
!
!
!
vlan internal allocation policy ascending
!
vlan 8
 name --UserNet_8.0/24--
!
vlan 10,20 
!
vlan 93
 name CCTV_stolovaya
!
vlan 95
 name --MTS--
!
vlan 96
 name --ERTELEKOM--
!
vlan 97
 name --MEGAFON--
!
vlan 98
 name --MARK--
!
vlan 99
 name --MARK_ASTERISK--
!
vlan 250
 name --ServerNet_0.0/24--
!
vlan 253
 name exchange_komos-group
!
vlan 292
 name -=bak_net_243.0_24=-
!
vlan 294
 name --SRV_iLO_iDrack_etc--
!
vlan 299
 name --SrvMng_240.0\24--
!
vlan 300
 name --MANAGMENT--
!
vlan 301
 name --Wi-Fi_MANAGMENT--
!
vlan 553
 name VST-IZM_Peering
!
vlan 554
 name VRS-IZM Peering
!
vlan 556
 name P2P_iBGP_KOMOS_AS_over_ER_Teleco
!
vlan 557
 name P2P_iBGP_KOMOS_AS_over_MTS
!
vlan 599
 name --MTS_KOMOS_599--
!
vlan 650
 name --ISCSI--
!
vlan 3915
 name --TEST_ZLOBIN_DENIS_UNTIL_01.07.
!
vlan 4030
 name --MTS_KOMOS_4030--
!
vlan 4031
 name --MLK-KCOD_VEAMREPL_172.31.31.0/
!
vlan 4032
 name --MLK-KCOD_SQLREPL_172.31.33.0/2
!
vlan 4033
 name --MLK-KCOD_SRVVCHA_172.31.33.0/2
!
vlan 4034
 name --MLK-KCOD_EXCHREPL_172.31.34.0/
!
vlan 4035
 name --MLK-KCOD_SRVVCMG_172.31.35.0/2
!
lldp run
!
! 
!
!
!
!
!
!
!
!
interface Port-channel1
 description [CORE] SW-1-1
 switchport mode trunk
!
interface Port-channel2
 description NONE
 switchport access vlan 294
 switchport mode access
!
interface Port-channel3
 description [PEER] VST-IZM Peering
 switchport trunk allowed vlan 553
 switchport mode trunk
 storm-control broadcast level pps 200
 storm-control multicast level pps 200
 spanning-tree bpdufilter enable
!
interface Port-channel4
 description [PEER] VRS-IZM Peering
 switchport trunk allowed vlan 554
 switchport mode trunk
 spanning-tree bpdufilter enable
!
interface FastEthernet0
 no ip address
!
interface GigabitEthernet1/0/1
 description ISP_MARK_ASTERISK (99)
 switchport access vlan 99
 switchport mode access
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/2
 description [CAM] P1
!
interface GigabitEthernet1/0/3
 description [ISP-100M] ER-Telecom
 switchport access vlan 96
 switchport mode access
 storm-control broadcast level pps 200 180
 storm-control multicast level pps 200 180
 storm-control action shutdown
 no cdp enable
 no lldp transmit
 no lldp receive
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/4
 description [CAM] P2
!
interface GigabitEthernet1/0/5
 description [ISP-100M] Mark
 switchport access vlan 98
 switchport mode access
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/6
 description [CORE] RT-1-1
 switchport access vlan 98
 switchport mode access
!
interface GigabitEthernet1/0/7
 description [ISP-100M] Megafon
 switchport access vlan 97
 switchport mode access
!
interface GigabitEthernet1/0/8
 description [CORE] RT-1-2
 switchport access vlan 97
 switchport mode access
!
interface GigabitEthernet1/0/9
 description NONE
 switchport access vlan 10
 switchport mode access
!
interface GigabitEthernet1/0/10
 description NONE
 switchport access vlan 10
 switchport mode access
!
interface GigabitEthernet1/0/11
 description --IZH_SHD001_ILOA--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/12
 description --IZH_SHD001_ILOB--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/13
 description --IZH_VMW004_ILO--
 switchport mode trunk
!
interface GigabitEthernet1/0/14
 description --IZH_VMW006_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/15
 description --IZH_VMW020_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/16
 description --IZH_FCC004_ILO--
 switchport access vlan 294
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/17
 description --IZH_FCC005_ILO--
 switchport access vlan 294
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/18
 description --IZH_SHD006_INFO_ILO--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/19
 description --IZH_VMW021_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/20
 description --IZH_VMW005_ILO--
 switchport mode trunk
!
interface GigabitEthernet1/0/21
 description --IZH_SHD005_HUAWEI_ILO_A--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/22
 description --IZH_VMW013_ILO--
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/23
 description --IZH_VMW016_ILO--
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/24
 description --IZH_VMW015_ILO--
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/25
 description --IZH_FCC001_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/26
 description --IZH_FCC002_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/27
 description -=IZH_SHD002_QSAN_ILO=-
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/28
 description --IZH_VMW016_ILO--
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/29
 description --IZH_VMW012_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/30
 description --IZH_SHD005_HUAWEI_ILO_B--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/31
 description --IZH_VMW011_ILO--
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/32
 description --IZH_VMW007_ILO--
 switchport mode access
!
interface GigabitEthernet1/0/33
 description --IZH_BKP007_ILO--
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/34
 description --IZH_VMW008_ILO--
 switchport mode access
!
interface GigabitEthernet1/0/35
 description [SRV] VMW028_ILO
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/36
 description NONE
 switchport access vlan 294
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/37
 description --MON_COD_Condition1.2-- 
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/38
 description --MON_COD_NetPing--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/39
 description --MON_COD_Condition1.1--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/40
 description --MON_COD_Chiller--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/41
 description --MON_COD_Vut230--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/42
 description --MON_COD_UPS--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/43
 description --MON_COD_MOXA_DGU--
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/44
 description --MON_COD_Condition1.3-- 
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/45
 description --MON_COD_Vut231
 switchport access vlan 299
 switchport mode access
 no snmp trap link-status
!
interface GigabitEthernet1/0/46
 description [SRV] VMW027_ILO
 switchport access vlan 294
 switchport mode access
!
interface GigabitEthernet1/0/47
 description [CORE] RT-1-3
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet1/0/48
 description [CORE] RT-1-4
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet1/0/49
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode on
!
interface GigabitEthernet1/0/50
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode on
!
interface GigabitEthernet1/0/51
 description [PEER] Po3 VST-IZM Peering
 switchport trunk allowed vlan 553
 switchport mode trunk
 storm-control broadcast level pps 200
 storm-control multicast level pps 200
 channel-group 3 mode active
!
interface GigabitEthernet1/0/52
 description [PEER] Po4 VRS-IZM Peering
 switchport trunk allowed vlan 554
 switchport mode trunk
 spanning-tree bpdufilter enable
 channel-group 4 mode active
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan292
 description -=bak_net_243.0_24=-
 no ip address
!
interface Vlan300
 description --MANAGMENT--
 ip address 10.4.254.245 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
interface Vlan4000
 no ip address
!
ip default-gateway 10.4.254.254
ip http server
ip http secure-server
!
!
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
!
snmp-server community lmTUEsk6Yvlv RO
!
!
radius server IZH-RDS002
 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 08707B1C5017412008034A2E0B1562073C2C2F3136060C40127A797F7203470C32747705467D0D6C296C23175D53171A23357A380C072C411822322347275D022A
!
radius server P11-RDS003
 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 0657387315404D2E1F1F54212D3A6C042B313E1713030857472277757E5E101A2735390B4D780B6A77632E4B03034B5E2122273751030B027767652F4930411C25
!
!
!
line con 0
 logging synchronous
 login authentication CONSOLE
line vty 0 4
 exec-timeout 120 0
 logging synchronous
 length 0
 transport input ssh
line vty 5 15
 access-class 23 in
 exec-timeout 120 0
 logging synchronous
 transport input ssh
!
ntp server 192.168.8.200
ntp server 192.168.8.201
end