Building configuration...

Current configuration : 25563 bytes
!
! Last configuration change at 16:50:42 SAMT Fri Jun 24 2022 by adm_ivanovas
! NVRAM config last updated at 01:30:00 SAMT Thu Jul 28 2022
!
version 15.2
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
no service password-encryption
!
hostname IZH-MK-VS17-SW-1-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
logging buffered 64000
enable secret 5 $1$pAEC$q1UDIH8C3ma0Rjn7hKwFB.
!
username netadmin privilege 15 secret 5 $1$ANC5$ed2yKSjwVWHReEaxzJosP.
aaa new-model
!
!
aaa group server radius NPS
 server name IZH-RDS002
 server name P11-RDS003
 load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated 
!
!
!
!
!
!
aaa session-id common
clock timezone SAMT 4 0
switch 1 provision ws-c2960x-48lps-l
switch 2 provision ws-c2960x-48lps-l
switch 3 provision ws-c2960x-48lps-l
ip routing
ip dhcp excluded-address 10.14.24.240 10.14.24.255
ip dhcp excluded-address 10.14.26.240 10.14.26.255
ip dhcp excluded-address 10.14.29.240 10.14.29.255
ip dhcp excluded-address 10.14.27.240 10.14.27.255
ip dhcp excluded-address 10.14.24.40 10.14.24.255
ip dhcp excluded-address 10.14.30.240 10.14.30.255
ip dhcp excluded-address 10.14.25.200
ip dhcp excluded-address 10.14.30.29
ip dhcp excluded-address 10.14.30.200 10.14.30.220
ip dhcp excluded-address 10.14.30.81
ip dhcp excluded-address 10.14.30.92
ip dhcp excluded-address 10.14.30.117
ip dhcp excluded-address 10.14.30.25
ip dhcp excluded-address 10.14.30.77
ip dhcp excluded-address 10.14.30.103
ip dhcp excluded-address 10.14.30.10
ip dhcp excluded-address 10.14.30.100
ip dhcp excluded-address 10.14.30.130
!
ip dhcp pool MK_DHCP_WiFi_WORK
 network 10.14.26.0 255.255.255.0
 default-router 10.14.26.254 
 dns-server 192.168.1.21 192.168.1.100 
 domain-name komos.local
 option 43 hex 0104.0a01.0c1d
 lease 8
!
ip dhcp pool MK_DHCP_USERS
 utilization mark high 95 log
 network 10.14.30.0 255.255.255.0
 default-router 10.14.30.254 
 dns-server 192.168.1.21 192.168.1.100 
 domain-name komos.local
 lease 8
!
ip dhcp pool MK_DHCP_VOIP
 network 10.14.29.0 255.255.255.0
 default-router 10.14.29.254 
 dns-server 192.168.1.21 192.168.1.100 
 domain-name komos.local
 option 66 ip 10.4.7.17 
 lease 8
!
ip dhcp pool MK_DHCP_WiFi_GUEST
 network 10.14.27.0 255.255.255.0
 default-router 10.14.27.254 
 dns-server 8.8.4.4 8.8.8.8 
 lease 3
!
ip dhcp pool MK_DHCP_MGMT
 network 10.14.25.0 255.255.255.0
 default-router 10.14.25.254 
 dns-server 192.168.1.21 192.168.1.100 
 domain-name komos.local
 option 43 hex 0104.0a01.0c1d
 lease 8
!
!
ip dhcp snooping vlan 2,150,300,350,500
ip dhcp snooping
no ip domain-lookup
ip domain-name komos.ru
ip host VM-KG-NET 10.1.12.70
ip host IZH-MK-VS17-SW-01-01 10.14.25.254
ip host IZH-MK-VS17-RT-01 10.14.25.251
ip host IZH-MK-VS17-RT-02 10.14.25.252
ip host tftp 10.4.0.214
no ip dhcp-client broadcast-flag
login on-failure log
login on-success log
!
!
!
!
!
!
!
!
archive
 log config
  logging enable
  logging size 900
  notify syslog contenttype plaintext
  hidekeys
 path tftp://tftp/IZH/MK/VS17-SW_L2/$H.$T.conf
 write-memory
 time-period 10080
!
spanning-tree mode rapid-pvst
spanning-tree logging
spanning-tree extend system-id
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause port-mode-failure
errdisable recovery cause loopback
errdisable recovery interval 600
!
!
!
!
vlan internal allocation policy ascending
!
ip tftp source-interface Vlan300
lldp run
!
! 
!
!
!
!
!
!
!
!
interface Loopback7777
 description MK14000910
 no ip address
 shutdown
!
interface FastEthernet0
 no ip address
 no ip route-cache
 shutdown
!
interface GigabitEthernet1/0/1
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/2
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/3
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/4
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/5
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/6
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/7
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/8
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/9
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/10
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/11
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/12
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/13
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/14
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/15
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/16
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/17
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/18
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/19
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/20
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/21
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/22
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/23
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/24
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/25
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/26
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/27
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/28
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/29
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/30
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/31
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/32
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/33
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/34
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/35
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/36
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/37
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/38
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/39
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/40
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/41
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/42
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/43
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/44
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/45
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/46
 description --Wi-Fi--
 switchport trunk native vlan 300
 switchport trunk allowed vlan 150,300,500
 switchport mode trunk
 switchport voice vlan 350
!
interface GigabitEthernet1/0/47
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet1/0/48
 description --Wi-Fi--
 switchport trunk native vlan 300
 switchport trunk allowed vlan 150,300,500
 switchport mode trunk
 no snmp trap link-status
!
interface GigabitEthernet1/0/49
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet1/0/50
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet1/0/51
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet1/0/52
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet2/0/1
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/2
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/3
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/4
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/5
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/6
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/7
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/8
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/9
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/10
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/11
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/12
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/13
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/14
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/15
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/16
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/17
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/18
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/19
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/20
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/21
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/22
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/23
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/24
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/25
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/26
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/27
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/28
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/29
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/30
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/31
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/32
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/33
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/34
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/35
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/36
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/37
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/38
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/39
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/40
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/41
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/42
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/43
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/44
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/45
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/46
 switchport voice vlan 350
 spanning-tree portfast
!
interface GigabitEthernet2/0/47
 description [UPS]
 switchport access vlan 310
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet2/0/48
 description [CORE] RT-1-1
 switchport mode trunk
 switchport voice vlan 350
 spanning-tree portfast
 ip dhcp snooping trust
!
interface GigabitEthernet2/0/49
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet2/0/50
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet2/0/51
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet2/0/52
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet3/0/1
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/2
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/3
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/4
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/5
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/6
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/7
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/8
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/9
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/10
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/11
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/12
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/13
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/14
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/15
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/16
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/17
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/18
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/19
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/20
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/21
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/22
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/23
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/24
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/25
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/26
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/27
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/28
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/29
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/30
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/31
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/32
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/33
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/34
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/35
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/36
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/37
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/38
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/39
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/40
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/41
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/42
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/43
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/44
 switchport access vlan 2
 switchport mode access
 switchport voice vlan 350
!
interface GigabitEthernet3/0/45
 switchport voice vlan 350
!
interface GigabitEthernet3/0/46
 switchport voice vlan 350
!
interface GigabitEthernet3/0/47
 switchport voice vlan 350
!
interface GigabitEthernet3/0/48
 description [CORE] RT-1-2
 switchport mode trunk
 switchport voice vlan 350
 ip dhcp snooping trust
!
interface GigabitEthernet3/0/49
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet3/0/50
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet3/0/51
 switchport access vlan 300
 switchport mode access
!
interface GigabitEthernet3/0/52
 switchport access vlan 300
 switchport mode access
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan2
 description --USERS--
 ip dhcp relay information trusted
 ip address 10.14.30.254 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
interface Vlan150
 description --Wi-Fi_WORK--
 ip dhcp relay information trusted
 ip address 10.14.26.254 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
interface Vlan300
 description --MANAGEMENT--
 ip dhcp relay information trusted
 ip address 10.14.25.254 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
interface Vlan310
 description UPS management
 ip address 10.14.28.254 255.255.255.0
!
interface Vlan350
 description --VoIP--
 ip dhcp relay information trusted
 ip address 10.14.29.254 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
interface Vlan500
 description --Wi-Fi_GUEST--
 ip dhcp relay information trusted
 ip address 10.14.27.254 255.255.255.0
 ip access-group ACL_DENY_LOCAL_NETS in
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 10.14.25.253 100 name --DEFAULT_ROUTE--
ip ssh version 2
!
ip access-list standard ACL_FOR_SNMP
 permit 10.1.122.227
 permit 192.168.2.202
 permit 192.168.8.0 0.0.0.255
 permit 10.4.0.0 0.0.255.255
!
ip access-list extended ACL_DENY_LOCAL_NETS
 deny   ip any 10.0.0.0 0.255.255.255
 deny   ip any 172.16.0.0 0.15.255.255
 deny   ip any 192.168.0.0 0.0.255.255
ip access-list extended ACL_WAN_TO_SELF
kron occurrence EveryDay at 1:30 recurring
 policy-list SaveBackup
!
kron policy-list SaveBackup
 cli write memory
!
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.2.25
!
snmp-server community lmTUEsk6Yvlv RO ACL_FOR_SNMP
snmp ifmib ifindex persist
!
!
radius server IZH-RDS002
 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
radius server P11-RDS003
 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
!
!
line con 0
 exec-timeout 120 0
 privilege level 15
 login authentication CONSOLE
line vty 0 4
 exec-timeout 120 0
 privilege level 15
 login authentication NPS
 length 0
 transport input ssh
line vty 5 15
 exec-timeout 120 0
 privilege level 15
 login authentication NPS
 transport input ssh
!
ntp server 192.168.1.100
ntp server 192.168.1.21
end