1138 lines
25 KiB
Plaintext
1138 lines
25 KiB
Plaintext
|
Building configuration...
|
||
|
|
|
||
|
|
Current configuration : 25563 bytes
|
||
|
|
!
|
||
|
|
! Last configuration change at 16:50:42 SAMT Fri Jun 24 2022 by adm_ivanovas
|
||
|
|
! NVRAM config last updated at 01:30:00 SAMT Thu Jul 28 2022
|
||
|
|
!
|
||
|
|
version 15.2
|
||
|
|
no service pad
|
||
|
|
service timestamps debug datetime msec localtime show-timezone year
|
||
|
|
service timestamps log datetime msec localtime show-timezone year
|
||
|
|
no service password-encryption
|
||
|
|
!
|
||
|
|
hostname IZH-MK-VS17-SW-1-1
|
||
|
|
!
|
||
|
|
boot-start-marker
|
||
|
|
boot-end-marker
|
||
|
|
!
|
||
|
|
logging userinfo
|
||
|
|
logging buffered 64000
|
||
|
|
enable secret 5 $1$pAEC$q1UDIH8C3ma0Rjn7hKwFB.
|
||
|
|
!
|
||
|
|
username netadmin privilege 15 secret 5 $1$ANC5$ed2yKSjwVWHReEaxzJosP.
|
||
|
|
aaa new-model
|
||
|
|
!
|
||
|
|
!
|
||
|
|
aaa group server radius NPS
|
||
|
|
server name IZH-RDS002
|
||
|
|
server name P11-RDS003
|
||
|
|
load-balance method least-outstanding
|
||
|
|
!
|
||
|
|
aaa authentication login default group NPS local enable
|
||
|
|
aaa authentication login CONSOLE local group NPS
|
||
|
|
aaa authorization exec default group NPS local if-authenticated
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
aaa session-id common
|
||
|
|
clock timezone SAMT 4 0
|
||
|
|
switch 1 provision ws-c2960x-48lps-l
|
||
|
|
switch 2 provision ws-c2960x-48lps-l
|
||
|
|
switch 3 provision ws-c2960x-48lps-l
|
||
|
|
ip routing
|
||
|
|
ip dhcp excluded-address 10.14.24.240 10.14.24.255
|
||
|
|
ip dhcp excluded-address 10.14.26.240 10.14.26.255
|
||
|
|
ip dhcp excluded-address 10.14.29.240 10.14.29.255
|
||
|
|
ip dhcp excluded-address 10.14.27.240 10.14.27.255
|
||
|
|
ip dhcp excluded-address 10.14.24.40 10.14.24.255
|
||
|
|
ip dhcp excluded-address 10.14.30.240 10.14.30.255
|
||
|
|
ip dhcp excluded-address 10.14.25.200
|
||
|
|
ip dhcp excluded-address 10.14.30.29
|
||
|
|
ip dhcp excluded-address 10.14.30.200 10.14.30.220
|
||
|
|
ip dhcp excluded-address 10.14.30.81
|
||
|
|
ip dhcp excluded-address 10.14.30.92
|
||
|
|
ip dhcp excluded-address 10.14.30.117
|
||
|
|
ip dhcp excluded-address 10.14.30.25
|
||
|
|
ip dhcp excluded-address 10.14.30.77
|
||
|
|
ip dhcp excluded-address 10.14.30.103
|
||
|
|
ip dhcp excluded-address 10.14.30.10
|
||
|
|
ip dhcp excluded-address 10.14.30.100
|
||
|
|
ip dhcp excluded-address 10.14.30.130
|
||
|
|
!
|
||
|
|
ip dhcp pool MK_DHCP_WiFi_WORK
|
||
|
|
network 10.14.26.0 255.255.255.0
|
||
|
|
default-router 10.14.26.254
|
||
|
|
dns-server 192.168.1.21 192.168.1.100
|
||
|
|
domain-name komos.local
|
||
|
|
option 43 hex 0104.0a01.0c1d
|
||
|
|
lease 8
|
||
|
|
!
|
||
|
|
ip dhcp pool MK_DHCP_USERS
|
||
|
|
utilization mark high 95 log
|
||
|
|
network 10.14.30.0 255.255.255.0
|
||
|
|
default-router 10.14.30.254
|
||
|
|
dns-server 192.168.1.21 192.168.1.100
|
||
|
|
domain-name komos.local
|
||
|
|
lease 8
|
||
|
|
!
|
||
|
|
ip dhcp pool MK_DHCP_VOIP
|
||
|
|
network 10.14.29.0 255.255.255.0
|
||
|
|
default-router 10.14.29.254
|
||
|
|
dns-server 192.168.1.21 192.168.1.100
|
||
|
|
domain-name komos.local
|
||
|
|
option 66 ip 10.4.7.17
|
||
|
|
lease 8
|
||
|
|
!
|
||
|
|
ip dhcp pool MK_DHCP_WiFi_GUEST
|
||
|
|
network 10.14.27.0 255.255.255.0
|
||
|
|
default-router 10.14.27.254
|
||
|
|
dns-server 8.8.4.4 8.8.8.8
|
||
|
|
lease 3
|
||
|
|
!
|
||
|
|
ip dhcp pool MK_DHCP_MGMT
|
||
|
|
network 10.14.25.0 255.255.255.0
|
||
|
|
default-router 10.14.25.254
|
||
|
|
dns-server 192.168.1.21 192.168.1.100
|
||
|
|
domain-name komos.local
|
||
|
|
option 43 hex 0104.0a01.0c1d
|
||
|
|
lease 8
|
||
|
|
!
|
||
|
|
!
|
||
|
|
ip dhcp snooping vlan 2,150,300,350,500
|
||
|
|
ip dhcp snooping
|
||
|
|
no ip domain-lookup
|
||
|
|
ip domain-name komos.ru
|
||
|
|
ip host VM-KG-NET 10.1.12.70
|
||
|
|
ip host IZH-MK-VS17-SW-01-01 10.14.25.254
|
||
|
|
ip host IZH-MK-VS17-RT-01 10.14.25.251
|
||
|
|
ip host IZH-MK-VS17-RT-02 10.14.25.252
|
||
|
|
ip host tftp 10.4.0.214
|
||
|
|
no ip dhcp-client broadcast-flag
|
||
|
|
login on-failure log
|
||
|
|
login on-success log
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
archive
|
||
|
|
log config
|
||
|
|
logging enable
|
||
|
|
logging size 900
|
||
|
|
notify syslog contenttype plaintext
|
||
|
|
hidekeys
|
||
|
|
path tftp://tftp/IZH/MK/VS17-SW_L2/$H.$T.conf
|
||
|
|
write-memory
|
||
|
|
time-period 10080
|
||
|
|
!
|
||
|
|
spanning-tree mode rapid-pvst
|
||
|
|
spanning-tree logging
|
||
|
|
spanning-tree extend system-id
|
||
|
|
errdisable recovery cause dtp-flap
|
||
|
|
errdisable recovery cause link-flap
|
||
|
|
errdisable recovery cause port-mode-failure
|
||
|
|
errdisable recovery cause loopback
|
||
|
|
errdisable recovery interval 600
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
vlan internal allocation policy ascending
|
||
|
|
!
|
||
|
|
ip tftp source-interface Vlan300
|
||
|
|
lldp run
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
interface Loopback7777
|
||
|
|
description MK14000910
|
||
|
|
no ip address
|
||
|
|
shutdown
|
||
|
|
!
|
||
|
|
interface FastEthernet0
|
||
|
|
no ip address
|
||
|
|
no ip route-cache
|
||
|
|
shutdown
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/1
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/2
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/3
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/4
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/5
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/6
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/7
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/8
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/9
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/10
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/11
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/12
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/13
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/14
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/15
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/16
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/17
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/18
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/19
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/20
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/21
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/22
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/23
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/24
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/25
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/26
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/27
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/28
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/29
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/30
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/31
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/32
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/33
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/34
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/35
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/36
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/37
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/38
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/39
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/40
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/41
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/42
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/43
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/44
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/45
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/46
|
||
|
|
description --Wi-Fi--
|
||
|
|
switchport trunk native vlan 300
|
||
|
|
switchport trunk allowed vlan 150,300,500
|
||
|
|
switchport mode trunk
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/47
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/48
|
||
|
|
description --Wi-Fi--
|
||
|
|
switchport trunk native vlan 300
|
||
|
|
switchport trunk allowed vlan 150,300,500
|
||
|
|
switchport mode trunk
|
||
|
|
no snmp trap link-status
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/49
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/50
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/51
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet1/0/52
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/1
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/2
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/3
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/4
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/5
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/6
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/7
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/8
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/9
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/10
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/11
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/12
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/13
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/14
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/15
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/16
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/17
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/18
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/19
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/20
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/21
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/22
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/23
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/24
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/25
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/26
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/27
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/28
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/29
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/30
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/31
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/32
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/33
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/34
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/35
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/36
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/37
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/38
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/39
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/40
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/41
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/42
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/43
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/44
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/45
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/46
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/47
|
||
|
|
description [UPS]
|
||
|
|
switchport access vlan 310
|
||
|
|
switchport mode access
|
||
|
|
spanning-tree portfast
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/48
|
||
|
|
description [CORE] RT-1-1
|
||
|
|
switchport mode trunk
|
||
|
|
switchport voice vlan 350
|
||
|
|
spanning-tree portfast
|
||
|
|
ip dhcp snooping trust
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/49
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/50
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/51
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet2/0/52
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/1
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/2
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/3
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/4
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/5
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/6
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/7
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/8
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/9
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/10
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/11
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/12
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/13
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/14
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/15
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/16
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/17
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/18
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/19
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/20
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/21
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/22
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/23
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/24
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/25
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/26
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/27
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/28
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/29
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/30
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/31
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/32
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/33
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/34
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/35
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/36
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/37
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/38
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/39
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/40
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/41
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/42
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/43
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/44
|
||
|
|
switchport access vlan 2
|
||
|
|
switchport mode access
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/45
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/46
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/47
|
||
|
|
switchport voice vlan 350
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/48
|
||
|
|
description [CORE] RT-1-2
|
||
|
|
switchport mode trunk
|
||
|
|
switchport voice vlan 350
|
||
|
|
ip dhcp snooping trust
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/49
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/50
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/51
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface GigabitEthernet3/0/52
|
||
|
|
switchport access vlan 300
|
||
|
|
switchport mode access
|
||
|
|
!
|
||
|
|
interface Vlan1
|
||
|
|
no ip address
|
||
|
|
shutdown
|
||
|
|
!
|
||
|
|
interface Vlan2
|
||
|
|
description --USERS--
|
||
|
|
ip dhcp relay information trusted
|
||
|
|
ip address 10.14.30.254 255.255.255.0
|
||
|
|
no ip redirects
|
||
|
|
no ip unreachables
|
||
|
|
no ip proxy-arp
|
||
|
|
!
|
||
|
|
interface Vlan150
|
||
|
|
description --Wi-Fi_WORK--
|
||
|
|
ip dhcp relay information trusted
|
||
|
|
ip address 10.14.26.254 255.255.255.0
|
||
|
|
no ip redirects
|
||
|
|
no ip unreachables
|
||
|
|
no ip proxy-arp
|
||
|
|
!
|
||
|
|
interface Vlan300
|
||
|
|
description --MANAGEMENT--
|
||
|
|
ip dhcp relay information trusted
|
||
|
|
ip address 10.14.25.254 255.255.255.0
|
||
|
|
no ip redirects
|
||
|
|
no ip unreachables
|
||
|
|
no ip proxy-arp
|
||
|
|
!
|
||
|
|
interface Vlan310
|
||
|
|
description UPS management
|
||
|
|
ip address 10.14.28.254 255.255.255.0
|
||
|
|
!
|
||
|
|
interface Vlan350
|
||
|
|
description --VoIP--
|
||
|
|
ip dhcp relay information trusted
|
||
|
|
ip address 10.14.29.254 255.255.255.0
|
||
|
|
no ip redirects
|
||
|
|
no ip unreachables
|
||
|
|
no ip proxy-arp
|
||
|
|
!
|
||
|
|
interface Vlan500
|
||
|
|
description --Wi-Fi_GUEST--
|
||
|
|
ip dhcp relay information trusted
|
||
|
|
ip address 10.14.27.254 255.255.255.0
|
||
|
|
ip access-group ACL_DENY_LOCAL_NETS in
|
||
|
|
no ip redirects
|
||
|
|
no ip unreachables
|
||
|
|
no ip proxy-arp
|
||
|
|
!
|
||
|
|
no ip http server
|
||
|
|
no ip http secure-server
|
||
|
|
!
|
||
|
|
ip route 0.0.0.0 0.0.0.0 10.14.25.253 100 name --DEFAULT_ROUTE--
|
||
|
|
ip ssh version 2
|
||
|
|
!
|
||
|
|
ip access-list standard ACL_FOR_SNMP
|
||
|
|
permit 10.1.122.227
|
||
|
|
permit 192.168.2.202
|
||
|
|
permit 192.168.8.0 0.0.0.255
|
||
|
|
permit 10.4.0.0 0.0.255.255
|
||
|
|
!
|
||
|
|
ip access-list extended ACL_DENY_LOCAL_NETS
|
||
|
|
deny ip any 10.0.0.0 0.255.255.255
|
||
|
|
deny ip any 172.16.0.0 0.15.255.255
|
||
|
|
deny ip any 192.168.0.0 0.0.255.255
|
||
|
|
ip access-list extended ACL_WAN_TO_SELF
|
||
|
|
kron occurrence EveryDay at 1:30 recurring
|
||
|
|
policy-list SaveBackup
|
||
|
|
!
|
||
|
|
kron policy-list SaveBackup
|
||
|
|
cli write memory
|
||
|
|
!
|
||
|
|
logging origin-id hostname
|
||
|
|
logging source-interface Vlan300
|
||
|
|
logging host 192.168.2.25
|
||
|
|
!
|
||
|
|
snmp-server community lmTUEsk6Yvlv RO ACL_FOR_SNMP
|
||
|
|
snmp ifmib ifindex persist
|
||
|
|
!
|
||
|
|
!
|
||
|
|
radius server IZH-RDS002
|
||
|
|
address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
|
||
|
|
timeout 3
|
||
|
|
retransmit 2
|
||
|
|
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
|
||
|
|
!
|
||
|
|
radius server P11-RDS003
|
||
|
|
address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
|
||
|
|
timeout 3
|
||
|
|
retransmit 2
|
||
|
|
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
|
||
|
|
!
|
||
|
|
!
|
||
|
|
!
|
||
|
|
line con 0
|
||
|
|
exec-timeout 120 0
|
||
|
|
privilege level 15
|
||
|
|
login authentication CONSOLE
|
||
|
|
line vty 0 4
|
||
|
|
exec-timeout 120 0
|
||
|
|
privilege level 15
|
||
|
|
login authentication NPS
|
||
|
|
length 0
|
||
|
|
transport input ssh
|
||
|
|
line vty 5 15
|
||
|
|
exec-timeout 120 0
|
||
|
|
privilege level 15
|
||
|
|
login authentication NPS
|
||
|
|
transport input ssh
|
||
|
|
!
|
||
|
|
ntp server 192.168.1.100
|
||
|
|
ntp server 192.168.1.21
|
||
|
|
end
|