ansible/backup/files/cisco/IZH-MLK-IZM-SW-8-1.txt

555 lines
14 KiB
Plaintext
Raw Permalink Normal View History

2025-10-31 08:47:26 +04:00
Building configuration...
Current configuration : 14003 bytes
!
! Last configuration change at 16:51:06 SAMT Mon Jul 18 2022 by adm_ivanovas
! NVRAM config last updated at 11:45:30 SAMT Sat Mar 5 2022 by akhmetzyanovrr_adm
!
version 15.0
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
no service password-encryption
!
hostname IZH-MLK-IZM-SW-8-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
logging buffered 64000
enable secret 5 $1$K.VP$1vabviJmdoLqR2jKV4eHb0
!
username netadmin privilege 15 secret 5 $1$cH61$hBrkBgS2azO8r7rF/egCV/
aaa new-model
!
!
aaa group server radius NPS
server name IZH-RDS002
server name P11-RDS003
load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated
!
!
!
!
!
!
aaa session-id common
clock timezone SAMT 4 0
system mtu routing 1500
!
!
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
login on-failure
login on-success
!
!
crypto pki trustpoint TP-self-signed-3800895616
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3800895616
revocation-check none
rsakeypair TP-self-signed-3800895616
!
!
crypto pki certificate chain TP-self-signed-3800895616
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33383030 38393536 3136301E 170D3933 30333031 30303031
31385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38303038
39353631 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D169 FFB463D8 5EDCCFC0 4B0ACFB6 9C5FF581 6109B33D A2BD9823 EB2BACC3
2AB1263F 1350DE89 7BD15F7E 52153752 E0F8308C E845CD23 3D4F99B4 845EEA44
722CD000 EF0EB55E 4249C7C4 13FF653D 1B352AA2 64C0CC27 948FAE80 35CFFF5B
16D97FCA B768A9BD CA7B410D DB6803AC 9B058CDB 8264D9D2 897D3691 2E83C88D
EFBF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 143F70D3 AB624369 6272B51F C43AF78C DEC8FF30 89301D06
03551D0E 04160414 3F70D3AB 62436962 72B51FC4 3AF78CDE C8FF3089 300D0609
2A864886 F70D0101 05050003 818100AA 1C8723FC 41B9B2CB FBA5765D 905E8E13
9D2A9E0B 83D830CB 72085F87 B2AE94B5 C66ADC07 9F46F0B3 29F2CCFE 7E089B85
FC4F054D 36E0BFFB 360F3468 2532F58B 918BC3A0 8C942854 D7F71E73 9F80D2D7
B20A806A C538B6B5 A8B81E11 64690E20 3CC14E06 D93FF619 F3900901 D24C59F3
4089CE7B 050BD6C5 E4B2B463 0D4BBC
quit
!
!
!
!
!
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig (STP)
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery cause psp
errdisable recovery interval 600
archive
log config
logging enable
logging size 900
notify syslog contenttype plaintext
hidekeys
path tftp://tftp/IZH/2960/$H-$T
write-memory
time-period 10080
spanning-tree mode pvst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
vlan internal allocation policy ascending
lldp run
!
!
!
!
!
!
interface Port-channel1
description [CORE] SW-1-1
switchport mode trunk
!
interface FastEthernet0/1
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/2
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/3
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/4
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/5
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/6
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/7
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/8
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/9
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/10
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/11
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/12
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/13
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/14
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/15
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/16
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/17
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/18
description [WIFI] AP-8-1-WMS-29
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
!
interface FastEthernet0/19
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/20
description --Wi-Fi_AP_New_M_25_+--
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast trunk
!
interface FastEthernet0/21
description [WIFI] AP-8-1-WMS-5
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast trunk
!
interface FastEthernet0/22
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/23
description --PROIZVODSTVO--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/24
description --CRPT-Mark--
switchport access vlan 603
switchport mode access
switchport voice vlan 350
no snmp trap link-status
spanning-tree bpdufilter enable
!
interface FastEthernet0/25
description [WIFI]
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast trunk
!
interface FastEthernet0/26
description [WIFI]
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast trunk
!
interface FastEthernet0/27
description [WIFI]
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast trunk
!
interface FastEthernet0/28
description --PROIZVODSTVO--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/29
description --PRINTER_ETIKETOK_110.20--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/30
description --PRITERS--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/31
description -=PyankovKV=-
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/32
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/33
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/34
description --PROIZVODSTVO--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/35
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/36
description --PROIZVODSTVO--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/37
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/38
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/39
description --CRPT-Mark--
switchport access vlan 603
switchport mode access
switchport voice vlan 350
no snmp trap link-status
spanning-tree bpdufilter enable
!
interface FastEthernet0/40
description [WIFI] AP-8-1-WMS-30
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
no snmp trap link-status
no lldp transmit
no lldp receive
spanning-tree portfast
!
interface FastEthernet0/41
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/42
description NONE
switchport access vlan 13
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/43
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/44
description --PROIZVODSTVO--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/45
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/46
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/47
description --CAMERA--
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface FastEthernet0/48
description --PET_PRODACTION--
switchport access vlan 600
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface GigabitEthernet0/1
description [CORE] Po1 SW-1-1
switchport mode trunk
channel-group 1 mode on
!
interface GigabitEthernet0/2
description [CORE] Po1 SW-1-1
switchport mode trunk
channel-group 1 mode on
!
interface GigabitEthernet0/3
description [KU] SW-8-2
switchport mode trunk
no snmp trap link-status
!
interface GigabitEthernet0/4
description --DLINK--
switchport access vlan 13
switchport mode access
speed 100
no snmp trap link-status
!
interface Vlan1
no ip address
!
interface Vlan300
description --MANAGMENT--
ip address 10.4.254.90 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
ip default-gateway 10.4.254.254
ip http server
no ip http secure-server
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
snmp-server community lmTUEsk6Yvlv RO
snmp-server community pTNSBufMs3vY RW
snmp ifmib ifindex persist
!
radius server IZH-RDS002
address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 1W29n$Wzh&JA^&OoymBQpo!$CALFm$tDMO2uO8XBWEpedsiEQASjhmm6KKF0U6nN
!
radius server P11-RDS003
address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 1W29n$Wzh&JA^&OoymBQpo!$CALFm$tDMO2uO8XBWEpedsiEQASjhmm6KKF0U6nN
!
!
!
vstack
banner login ^C
*****************************************************************************
* *
* UNAUTHORIZED ACCESS IS PROHIBITED *
* *
* You have accessed network equipment. *
* You must have authorized permission to access or configure this device. *
* All activities performed on this device are logged and monitored. *
* *
*****************************************************************************
^C
!
line con 0
logging synchronous
login authentication CONSOLE
line vty 0 4
access-class 23 in
exec-timeout 120 0
logging synchronous
transport input ssh
line vty 5 15
access-class 23 in
exec-timeout 120 0
logging synchronous
transport input ssh
!
ntp server 192.168.8.200
ntp server 192.168.8.201
end