ansible/backup/files/cisco/IZH-MLK-IZM-SW-4-1.txt

640 lines
15 KiB
Plaintext
Raw Normal View History

2025-10-31 08:47:26 +04:00
Building configuration...
Current configuration : 14877 bytes
!
! Last configuration change at 17:06:58 YEKT Wed Jul 20 2022 by adm_ivanovas
!
version 15.2
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service unsupported-transceiver
!
hostname IZH-MLK-IZM-SW-4-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
logging buffered 64000
enable secret 5 $1$L7fK$k/MCEtLn2e68JjkqKNFz10
!
username netadmin privilege 15 secret 5 $1$MuW8$6sjxvzm8yz0nquhP4wVIC.
aaa new-model
!
!
aaa group server radius NPS
server name IZH-RDS002
server name P11-RDS003
load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated
!
!
!
!
!
!
aaa session-id common
clock timezone YEKT 4 0
switch 1 provision ws-c2960s-48fps-l
!
!
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
ip device tracking
vtp mode off
udld aggressive
!
!
!
archive
log config
logging enable
logging size 900
notify syslog contenttype plaintext
hidekeys
path tftp://tftp/IZH/MLK/IZM-SW_L2/$H-$T
write-memory
time-period 10080
spanning-tree mode pvst
spanning-tree logging
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
!
!
!
!
no errdisable detect cause gbic-invalid
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery cause psp
errdisable recovery interval 600
!
!
!
!
vlan internal allocation policy ascending
!
vlan 8
!
vlan 12
name --UserNet_12.0/24--
!
vlan 13
name --UserNet_13.0/24--
!
vlan 22
name MILKOM_Nobel_Users
!
vlan 23
!
vlan 101
name --PRINTERS--
!
vlan 150
name --Wi-Fi_WORK--
!
vlan 300
name --MANAGEMENT--
!
vlan 302
!
vlan 350
name --VOICE--
!
vlan 500
name --Wi-Fi_GUEST--
!
vlan 1100
name TEST_ARR_ESR-10
!
ip ssh version 2
lldp run
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
description [CORE] SW-1-1
switchport mode trunk
!
interface Port-channel2
!
interface FastEthernet0
description --MGMT Port--
no ip address
!
interface GigabitEthernet1/0/1
description [WIFI] AP-4-2-IT
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/2
description [ACC] Konovalov_435
switchport trunk native vlan 8
switchport mode trunk
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/3
description [ACC] DementevA
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/4
description -=Port_444=-CAM_TEST
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/6
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/7
description -=BikovSV=-
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/8
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/9
description --CAMERA--
switchport access vlan 12
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/10
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/11
description -=NONE_Link=-
switchport access vlan 12
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/12
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/13
description [CAM] TouchMed
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
spanning-tree portfast
!
interface GigabitEthernet1/0/14
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/15
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/16
description -=TEST_Maratkanov=-
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/17
description -=NASTYA=-
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/18
description NONE
switchport access vlan 8
switchport trunk allowed vlan 150,151,301,302,500
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/19
description --AVTO_KOLONNA--
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/20
description --AVTO_KOLONNA--
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/21
description [PRN]
switchport access vlan 101
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/22
description [PRN] IT
switchport access vlan 101
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
spanning-tree portfast
!
interface GigabitEthernet1/0/23
description [PRN]
switchport access vlan 101
switchport mode access
switchport voice vlan 350
no logging event link-status
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/24
description [ACC] Marat_441
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/25
description [ACC] Dispecher_Autotransporta
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/26
description -=AVTOKOLONNA=-
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/27
description -=AVTOKOLONNA=-
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/28
description -=AVTOKOLONNA=-
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/29
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/30
description NONE
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/31
description TEST_WiFi
switchport access vlan 8
switchport mode access
switchport voice vlan 350
no snmp trap link-status
!
interface GigabitEthernet1/0/32
description [PRN]
switchport access vlan 101
switchport mode access
switchport voice vlan 350
no logging event link-status
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/33
description [ACC] TEsT_Marat_4117
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/34
description [ACC]
switchport access vlan 8
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/35
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/36
description --CAMERA--
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/37
description --CAMERA--
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/38
description --CAMERA--
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/39
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/40
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/41
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/42
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/43
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/44
description [CAM]
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/45
description [CAM] UGOL_AVTOKOLONA
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/46
description [CAM] UGOL_AVTOKOLONA
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/47
description [WIFI] AP-4-Avtokolonna
switchport trunk native vlan 302
switchport trunk allowed vlan 150,151,301,302,500
switchport mode trunk
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/48
description --MANAGEMENT--
switchport access vlan 300
switchport mode access
switchport voice vlan 350
duplex full
no snmp trap link-status
!
interface GigabitEthernet1/0/49
description [CORE] Po1 SW-1-1
switchport mode trunk
channel-group 1 mode active
!
interface GigabitEthernet1/0/50
description [CORE] Po1 SW-1-1
switchport mode trunk
channel-group 1 mode active
!
interface GigabitEthernet1/0/51
switchport mode trunk
channel-group 2 mode on
!
interface GigabitEthernet1/0/52
switchport mode trunk
channel-group 2 mode on
!
interface Vlan1
no ip address
shutdown
!
interface Vlan300
description --MANAGMENT--
ip address 10.4.254.41 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
ip default-gateway 10.4.254.254
no ip http server
no ip http secure-server
!
!
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
!
snmp-server community lmTUEsk6Yvlv RO
snmp ifmib ifindex persist
!
!
radius server IZH-RDS002
address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 055A315D78420A3E030D51382A324205243D251104321C465220207A7F5517402A2E37444C770F6B7062711B5E021451723532350E53060B590A6768592C53193C
!
radius server P11-RDS003
address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 0257330952084B1656464F3324295424031D270915383C746630263A250C124D7C7E7B5C16374E617A60764250501852233679640E1B0B090D202D297179180737
!
!
banner exec ^C
Welcome to $(hostname). You are connected on line $(line) on domain $(domain)
*****************************************************************************
* *
* Welcome to MILKOM JSC *
* Izhevsk, Votkinskoe sh. 178 *
* AVTO BLDG *
* 2nd FLOOR, IT ROOM *
* *
* UNAUTHORIZED ACCESS IS PROHIBITED *
* *
* You have accessed network equipment. *
* You must have authorized permission to access or configure this device. *
* All activities performed on this device are logged and monitored. *
* *
*****************************************************************************
^C
banner login ^C
*****************************************************************************
* *
* UNAUTHORIZED ACCESS IS PROHIBITED *
* *
* You have accessed network equipment. *
* You must have authorized permission to access or configure this device. *
* All activities performed on this device are logged and monitored. *
* *
*****************************************************************************
^C
!
line con 0
exec-timeout 60 0
logging synchronous
login authentication CONSOLE
line vty 0 4
exec-timeout 120 0
logging synchronous
transport input ssh
line vty 5 15
exec-timeout 120 0
logging synchronous
transport input ssh
!
ntp server 192.168.8.200 prefer
ntp server 192.168.8.201
mac address-table notification change
mac address-table notification mac-move
mac address-table aging-time 900
end