!Software Version V200R019C10SPC800
!Last configuration was updated at 2022-09-02 11:14:24+04:00 by akhmetzyanovrr_adm
!Last configuration was saved at 2022-08-26 10:43:49+04:00 by akhmetzyanovrr_adm
#
clock timezone Samara add 04:00:00
#
sysname IZH-MLK-IZM-SW-1-1_Huawei
#
undo ftp server source all-interface
undo ftp ipv6 server source all-interface
#
info-center channel 9 name splunk
info-center source ntp channel 4 log level critical
info-center source cli channel 4 log level notification
info-center source ssh channel 4 log level notification
info-center source default channel 9 log level warning
info-center loghost 10.4.244.4 source-ip 10.4.254.1 channel 9 port 515
#
device board 1 board-type CE6881-48S6CQ
device board 2 board-type CE6881-48S6CQ
#
drop-profile default
#
dcb pfc
#
ntp server disable
ntp ipv6 server disable
ntp server source-interface all disable
ntp ipv6 server source-interface all disable
ntp unicast-server 10.4.0.1
ntp unicast-server 10.4.0.2
#
vlan batch 8 to 20 93 96 99 101 103 110 to 113 150 to 151 172 to 173 201 to 202
vlan batch 207 to 208 248 to 257 288 to 292 294 299 to 302 350 448 500 550 to 551 553
vlan batch 556 to 557 596 to 597 599 to 601 603 650 999 to 1000 1100 to 1102 1113 1500 to 1504 1999
vlan batch 2145 3915 4030 to 4035
#
stp mode rstp
#
as-notation plain
#
telnet server disable
telnet ipv6 server disable
undo telnet server-source all-interface
undo telnet ipv6 server-source all-interface
#
radius enable
#
diffserv domain default
#
radius server group rad-serv
 radius server shared-key-cipher %^%#"{4}+Fm|2Gld`[4`u4N%;~No'O%E~JEo^[HJs{Z(+9\cH9D=l-N8W&:h+BP!|a]%'3x>UY,]!nA3gCSH<|UkAWEyaJq9Sj!,b8^C%^%#
 radius server authentication 10.4.0.248 1645 source Vlanif300
 radius server authentication 10.1.122.248 1645 source Vlanif300 secondary
 radius server retransmit 2
 radius server user-name domain-excluded
#
vlan 8
 name --UserNet_8.0/24--
#
vlan 9
 name --UserNet_9.0/24--
#
vlan 10
 name --UserNet_10.0/24--
#
vlan 11
 name --UserNet_11.0/24--
#
vlan 12
 name --UserNet_12.0/24--
#
vlan 13
 name --UserNet_13.0/24--
#
vlan 14
 name --UserNet_14.0/24--
#
vlan 15
 name --UserNet_15.0/24--
#
vlan 16
 name --UserNet_16.0/24--
#
vlan 17
 name --UserNet_17.0/24--
#
vlan 18
 name --UserNet_18.0/24--
#
vlan 19
 name --UserNet_19.0/24--
#
vlan 20
 name --UserNet_20.0/24--
#
vlan 93
 name --LINK_TO_vpn_SSTP--
#
vlan 96
 name --ERTELEKOM--
#
vlan 99
 name --MARK_ASTERISK--
#
vlan 101
 name --PRINTERS--
#
vlan 103
 name -=KPP_Vesi&Cam=-
#
vlan 110
 name --NET_KIP_PRODACTION--
#
vlan 111
 name TRANSIT_TO_C3925-1
#
vlan 112
 name Intraconnect_ospf_area_1
#
vlan 113
 name TRANSIT_TO_MIKROTIK
#
vlan 150
 name --Wi-Fi_Users_32.0/24--
#
vlan 151
 name --Wi-Fi_Prod_33.0/24--
#
vlan 172
 name TelephonyNet
#
vlan 173
 name TelephonyTest
#
vlan 201
 name --MANUFACTURE_VLAN--
#
vlan 202
 name --DMZ--
#
vlan 207
 name VCOD_Servers_DMZ_Frontend
#
vlan 208
 name VCOD_Servers_Backend
#
vlan 248
 name --SANDBOX_ELAR--
#
vlan 249
 name --ServTestC_36.0/24--
#
vlan 250
 name --ServerNet_0.0/24--
#
vlan 251
 name -=ServMail_7.0/28=-
#
vlan 252
 name --VOICE_ATS--
#
vlan 253
 name exchange_komos-group
#
vlan 254
 name -Service_SharePoint-
#
vlan 255
 name Servers_terminal_farm
#
vlan 256
 name -ServersMonitoring_3.0/24-
#
vlan 257
 name KONTUR_DEV_MSSQL_5.0/27
#
vlan 288
 name SERVERS_DEV
#
vlan 289
 name -=SRVBakNet_245.0_24=-
#
vlan 290
 name -=SrvVmwVMon_242.0/26=-
#
vlan 291
 name -=SrvVmwVSan_242.64/26=-
#
vlan 292
 name -=SrvBakNet_243.0/24=-
#
vlan 294
 name --SRV_iLO_iDrack_etc--
#
vlan 299
 name --SrvMng_240.0\24--
#
vlan 300
 name --MANAGMENT--
#
vlan 301
 name --Wi-Fi_MANAGMENT--
#
vlan 302
 name -=Wi-Fi_MANAGMENT=-
#
vlan 350
 name --VOICE_28.0/23--
#
vlan 448
 name -=VideoKomos=-
#
vlan 500
 name --Wi-Fi_Guest_35.0/24--
#
vlan 550
 name --CISCO_ASA--
#
vlan 551
 description TRANSIT_HSRP
 name --TRANSIT_HSRP--
#
vlan 553
 name VST-IZM_Peering
#
vlan 556
 name P2P_iBGP_KOMOS_AS_over_DOMRU
#
vlan 557
 name P2P_iBGP_KOMOS_AS_over_MTS
#
vlan 596
 name P2P_RCOD-OCOD_ER_Telecom
#
vlan 597
 name --BGP_TRANSIT_TO_ISR4431--
#
vlan 599
 name MLK_TRUNK_TO_DC-MLK
#
vlan 600
 name --PET_PRODACTION--
#
vlan 601
 name --KMK_PRODACTION--
#
vlan 603
 name --CRPT-Mark--
#
vlan 650
 name --ISCSI--
#
vlan 999
 description vm_for_net_control
#
vlan 1000
 description dmz_env_1C_WMS_MLK_test
 name --ELAR-TEST--
#
vlan 1100
 description TEST_PI
#
vlan 1101
 description SKYPE_FB
#
vlan 1102
 description WAP
#
vlan 1113
 name PI_RT-1-3
#
vlan 1500
 description dmz_env_1C_WMS_MLK
#
vlan 1501
 description safe_env_1C_WMS_MLK
#
vlan 1502
 description dmz_env_NOVA_FORECAST
 name dmz_env_NOVA_FORECAST
#
vlan 1503
 description safe_env_NOVA_FORECAST
 name safe_env_NOVA_FORECAST
#
vlan 1504
 description dmz_env_viberbot_directum
#
vlan 1999
 description env_1C_Licensing
#
vlan 2145
 name Test_BGP
#
vlan 3915
 name IZM_VLAN3915_SPLUNK
#
vlan 4030
 name MLK_NATIVE_TO_DC-MLK
#
vlan 4031
 name MLK-KCOD_VEAMREP
#
vlan 4032
 name MLK-KCOD_SQLREPL
#
vlan 4033
 name MLK-KCOD_SRVVCHA
#
vlan 4034
 name MLK-KCOD_EXCHREPL
#
vlan 4035
 name MLK-KCOD_SRVVCMG
#
acl name ACL_LOCAL advance
 rule 5 permit ip destination 10.0.0.0 0.255.255.255
 rule 10 permit ip destination 192.168.0.0 0.0.255.255
 rule 15 permit ip destination 172.16.0.0 0.15.255.255
#
acl name ACL_ROUTE_PI advance
 rule 5 permit ip source 91.240.179.0 0.0.0.255
 rule 5 description KOMOS PI
 rule 10 permit ip source 10.105.0.25 0
 rule 10 description Directum ViberBot
#
acl name ACL_ROUTE_RT-1-1 advance
#
acl name ACL_ROUTE_RT-1-2 advance
#
acl name ACL_VTY advance
 rule 5 permit tcp source 10.0.0.0 0.255.255.255 destination-port eq 22
 rule 10 permit tcp source 192.168.0.0 0.0.255.255 destination-port eq 22
#
traffic classifier TC_ROUTE_LOCAL type or
 if-match acl ACL_LOCAL
#
traffic classifier TC_ROUTE_PI type or
 if-match acl ACL_ROUTE_PI
#
traffic classifier TC_ROUTE_RT-1-1 type or
 if-match acl ACL_ROUTE_RT-1-1
#
traffic classifier TC_ROUTE_RT-1-2 type or
 if-match acl ACL_ROUTE_RT-1-2
#
traffic behavior TB_ROUTE_LOCAL
 statistics enable
#
traffic behavior TB_ROUTE_PI
 statistics enable
 redirect nexthop 172.30.30.60
#
traffic behavior TB_ROUTE_RT-1-1
 statistics enable
 redirect nexthop 10.4.239.18
#
traffic behavior TB_ROUTE_RT-1-2
 statistics enable
 redirect nexthop 10.4.239.19
#
traffic policy TP_GRT
 classifier TC_ROUTE_LOCAL behavior TB_ROUTE_LOCAL precedence 5
 classifier TC_ROUTE_PI behavior TB_ROUTE_PI precedence 10
 classifier TC_ROUTE_RT-1-1 behavior TB_ROUTE_RT-1-1 precedence 15
 classifier TC_ROUTE_RT-1-2 behavior TB_ROUTE_RT-1-2 precedence 20
#
aaa
 local-user netadmin password irreversible-cipher $1c$)U-3A*36GD$!}HqHNa~071:P:Dc*Is<6,Sn%~#$|W.(WQ>*-F0Z$
 local-user netadmin service-type ssh
 local-user netadmin level 3
 local-user akhmetzyanovrr password irreversible-cipher $1c$AA4*-PdAXL$KU=8L;<btA~(B1RE{n&L*q3_MUR/DRN|{\<T<r.<$
 local-user akhmetzyanovrr service-type ssh
 local-user akhmetzyanovrr level 3
 #
 authentication-scheme default
  authentication-mode radius local
 #
 authorization-scheme default
 #
 accounting-scheme default
 #
 domain default
  radius server group rad-serv
 #
 domain default_admin
  radius server group rad-serv
#
stack
 #
 stack member 1 description SW-1-1-1 
 stack member 1 domain 10
 stack member 1 priority 200
 #
 stack member 2 description SW-1-1-2 
 stack member 2 domain 10
 stack member 2 priority 150
#
license
#
interface Vlanif255
 description Servers_Terminal_FARM
 ip address 10.4.2.254 255.255.255.0
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif256
 description Server_Monitorin_1C
 ip address 10.4.3.254 255.255.255.0
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif257
 description KONTUR_DEV_MSSQL_5.0/27
 ip address 10.4.5.30 255.255.255.224
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif288
 description Servers_DEV
 ip address 10.4.6.254 255.255.255.0
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif300
 description MGM
 ip address 10.4.254.1 255.255.255.0
#
interface Vlanif551
 description --TRANSIT_HSRP--
 ip address 10.4.239.23 255.255.255.240
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif597
 description BGP TRANSIT
 ip address 172.30.30.55 255.255.255.240
#
interface Vlanif1000
 description Enterprise DMZ
#
interface Vlanif1500
 description Enterprise DMZ
 ip address 10.105.0.14 255.255.255.240
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif1501
 description safe environment
 ip address 10.105.0.22 255.255.255.248
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif1502
 description dmz_env_NOVA_FORECAST
 ip address 10.105.0.30 255.255.255.248
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif1503
 description safe_env_NOVA_FORECAST
 ip address 10.105.0.38 255.255.255.248
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif1504
 description dmz_env_viberbot_directum
 ip address 10.105.0.46 255.255.255.248
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface Vlanif1999
 description 1C Licensing
 ip address 10.105.199.6 255.255.255.248
 icmp name host-unreachable receive disable
 icmp name port-unreachable receive disable
 icmp name redirect receive disable
#
interface MEth0/0/0
#
interface Eth-Trunk1
 description [SRV] vmw027
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static
#
interface Eth-Trunk2
 description [SRV] vmw028
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static
#
interface Eth-Trunk102
 description [CORE] SW-1-1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 mode lacp-static
#
interface Stack-Port1/1
#
interface Stack-Port2/1
#
interface 10GE1/0/1
 description ET1 [SRV] vmw027 10Geth01
 eth-trunk 1
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/2
 description ET2 [SRV] vmw028 10Geth01
 eth-trunk 2
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/3
 description [SRV] shd007 10GethP1 A
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/4
 description [SRV] shd007 10GethP1 B
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/5
 description [SRV] bkp008_eth10G_1
 port default vlan 289
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/6
 description [SRV] mlk-izm-bkp009 10g_eth01
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/7
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/8
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/9
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/10
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/11
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/12
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/13
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/14
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/15
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/16
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/17
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/18
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/19
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/20
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/21
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/22
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/23
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/24
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/25
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/26
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/27
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/28
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/29
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/30
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/31
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/32
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/33
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/34
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/35
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/36
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/37
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/38
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/39
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/40
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/41
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
#
interface 10GE1/0/42
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
#
interface 10GE1/0/43
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/44
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/45
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/46
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/47
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE1/0/48
 description [CORE] ET102 SW-1-1
 eth-trunk 102
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/1
 description ET1 [SRV] vmw027 10Geth02
 eth-trunk 1
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/2
 description [SRV] ET2 vmw028 10Geth02
 eth-trunk 2
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/3
 description [SRV] shd007 10GethP0 A
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/4
 description [SRV] shd007 10GethP0 B
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/5
 description [SRV] bkp008_eth10G_2
 port default vlan 250
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/6
 description [SRV] mlk-izm-bkp009 10g_eth02
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/7
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/8
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/9
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/10
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/11
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/12
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/13
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/14
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/15
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/16
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/17
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/18
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/19
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/20
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/21
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/22
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/23
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/24
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/25
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/26
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/27
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/28
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/29
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/30
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/31
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/32
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/33
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/34
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/35
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/36
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/37
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/38
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/39
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/40
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/41
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/42
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/43
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/44
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/45
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/46
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/47
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control action block
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 10GE2/0/48
 description [CORE] ET102 SW-1-1
 eth-trunk 102
 storm control broadcast min-rate 300 max-rate 600
 storm control multicast min-rate 300 max-rate 600
 storm control enable log
 device transceiver 10GBASE-FIBER
#
interface 100GE1/0/1
 device transceiver 100GBASE-FIBER
#
interface 100GE1/0/2
#
interface 100GE1/0/3
#
interface 100GE1/0/4
#
interface 100GE1/0/5
 port mode stack 
 stack-port 1/1
 description [iSTACK]
 port crc-statistics trigger error-down
 device transceiver 100GBASE-COPPER
#
interface 100GE1/0/6
 port mode stack 
 stack-port 1/1
 description [iSTACK]
 port crc-statistics trigger error-down
 device transceiver 100GBASE-COPPER
#
interface 100GE2/0/1
 device transceiver 100GBASE-FIBER
#
interface 100GE2/0/2
#
interface 100GE2/0/3
#
interface 100GE2/0/4
#
interface 100GE2/0/5
 port mode stack 
 stack-port 2/1
 description [iSTACK]
 port crc-statistics trigger error-down
 device transceiver 100GBASE-COPPER
#
interface 100GE2/0/6
 port mode stack 
 stack-port 2/1
 description [iSTACK]
 port crc-statistics trigger error-down
 device transceiver 100GBASE-COPPER
#
interface LoopBack11
 description KOMOS_PI
#
interface NULL0
#
bgp 64512
 graceful-restart
 private-4-byte-as enable
 peer 172.30.30.60 as-number 199014
 peer 172.30.30.60 description IZH-MLK-IZM-RT-1-1
 group PG_BGP_IZM internal
 peer 172.30.30.57 as-number 64512
 peer 172.30.30.57 group PG_BGP_IZM
 peer 172.30.30.57 description IZH-MLK-IZM-RT-1-3
 peer 172.30.30.58 as-number 64512
 peer 172.30.30.58 group PG_BGP_IZM
 peer 172.30.30.58 description IZH-MLK-IZM-RT-1-4
 peer 172.30.30.62 as-number 64512
 peer 172.30.30.62 group PG_BGP_IZM
 peer 172.30.30.62 description IZH-MLK-IZM-SW-1-1
 #
 ipv4-family unicast
  network 10.4.2.0 255.255.255.0
  network 10.4.3.0 255.255.255.0
  network 10.4.5.0 255.255.255.224
  network 10.4.6.0 255.255.255.0
  network 10.104.0.0 255.255.0.0
  network 10.105.0.0 255.255.0.0
  network 10.105.0.0 255.255.255.240
  network 10.105.0.16 255.255.255.248
  network 10.105.199.0 255.255.255.248
  import-route static route-policy RP_REDIS_STATIC_PI
  peer 172.30.30.58 enable
  peer 172.30.30.60 enable
  peer PG_BGP_IZM enable
  peer PG_BGP_IZM route-policy RP_LOCAL_OUT export
  peer PG_BGP_IZM next-hop-local
  peer 172.30.30.57 enable
  peer 172.30.30.57 group PG_BGP_IZM
  peer 172.30.30.62 enable
  peer 172.30.30.62 group PG_BGP_IZM
#
route-policy RP_LOCAL_OUT permit node 10
 if-match ip-prefix PL_LOCAL_OUT
#
route-policy RP_REDIS_STATIC_PI permit node 10
 if-match ip-prefix PL_REDIS_STATIC_PI
#
ip ip-prefix PL_LOCAL_OUT description FOR IZM iBGP Peers
ip ip-prefix PL_LOCAL_OUT index 10 permit 10.0.0.0 8 greater-equal 8 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 20 permit 192.168.0.0 16 greater-equal 16 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 30 permit 172.16.0.0 12 greater-equal 12 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 40 permit 91.240.179.0 24 greater-equal 32 less-equal 32
ip ip-prefix PL_REDIS_STATIC_PI index 10 permit 91.240.179.0 24 greater-equal 32 less-equal 32
#
ip route-static 0.0.0.0 0.0.0.0 10.4.239.17 preference 253 description GW_HSRP_VLAN551
ip route-static 0.0.0.0 0.0.0.0 172.30.30.60 preference 254 description GW_RT-1-1
ip route-static 10.1.15.0 255.255.255.0 172.30.30.62 description TO_CISCO_ANYCONECT
ip route-static 10.104.0.0 255.255.0.0 NULL0 preference 255
ip route-static 10.105.0.0 255.255.0.0 NULL0 preference 255
ip route-static 91.240.179.15 255.255.255.255 NULL0 preference 255 description NAT_Directum_viberbot
#
snmp-agent
snmp-agent local-engineid 800007DB03DCEF8055A631
snmp-agent community read cipher %^%#lnlc&>9~X()U%2J9Fc&E[Q#eO4ZLX(M=jdImd>rA8QzSAQcz98/A]*TL~~B%SvF#,8/09A@Sp\1rO"96%^%#
#
snmp-agent sys-info location Izhevsk,V. Shosse,178
snmp-agent sys-info version v2c v3
#
snmp-agent protocol source-interface Vlanif300
snmp-agent protocol source-status all-interface
undo snmp-agent protocol source-status ipv6 all-interface
#
undo snmp-agent proxy protocol source-status all-interface
undo snmp-agent proxy protocol source-status ipv6 all-interface
#
lldp enable
#
stelnet server enable
ssh server-source -i Vlanif300
undo ssh server-source all-interface
undo ssh ipv6 server-source all-interface
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr
ssh server hmac sha2_512 sha2_256
ssh server key-exchange dh_group_exchange_sha256
#
ssh server publickey rsa
#
ssh server dh-exchange min-len 2048
#
ssh client publickey rsa
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr
ssh client hmac sha2_512 sha2_256
ssh client key-exchange dh_group_exchange_sha256
#
user-interface con 0
#
user-interface vty 0 4
 acl ACL_VTY inbound
 authentication-mode aaa
 protocol inbound ssh
#
return