Building configuration... Current configuration : 8220 bytes ! ! Last configuration change at 04:00:58 MSK Mon Jan 2 2006 ! NVRAM config last updated at 01:00:01 MSK Thu Jul 28 2022 ! version 15.2 service nagle no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone year service timestamps log datetime msec localtime show-timezone year service password-encryption service sequence-numbers ! hostname IZH-TK-M44-SW-3-1 ! boot-start-marker boot-end-marker ! ! logging buffered 51200 warnings logging rate-limit 10000 enable secret 5 $1$j4UP$Wgs2xMeWlYNzcOvcwfmE90 ! username netadmin privilege 15 secret 5 $1$MIy6$REAxQCFQRdFtJj9PPKDyi. aaa new-model ! ! aaa group server radius NPS server name IZH-RDS002 server name P11-RDS003 load-balance method least-outstanding ! aaa authentication login default group NPS local enable aaa authentication login CONSOLE local group NPS aaa authorization exec default group NPS local if-authenticated ! ! ! ! ! ! aaa session-id common clock timezone MSK 4 0 system mtu routing 1500 no ip source-route no ip gratuitous-arps ! ! ip dhcp snooping vlan 2,150,300,350,500 ip dhcp snooping ! ip domain-list komos.local no ip domain-lookup ip domain-name komos.ru ip host VM-KG-NET 10.1.12.70 ip host tftp 10.4.0.214 login on-failure log login on-success log vtp mode transparent ! ! ! ! ! ! ! crypto pki trustpoint TP-self-signed-3260352896 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-3260352896 revocation-check none rsakeypair TP-self-signed-3260352896 ! ! crypto pki certificate chain TP-self-signed-3260352896 certificate self-signed 01 30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 33323630 33353238 3936301E 170D3933 30333031 30303539 34345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 32363033 35323839 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100C846 8A8337BC 1E8688F4 0BE8DFA8 E25C18F7 95BB6BDD 5E85BBB0 666E033A BAA66B1D DF83F619 2CB9AF81 5292486A 6FB8B66E EDA24399 599DE9B6 6C03BB20 E05BBB6F 813C84FA 31484143 28F78BD0 0097B3C6 9AF7BE9C 152EFF74 34B99797 38B65453 EDE7B1D8 158E4092 A9E68ED2 1E3A0B14 FA184F63 19957EC1 712A69B8 D4AD0203 010001A3 6C306A30 0F060355 1D130101 FF040530 030101FF 30170603 551D1104 10300E82 0C4D3434 2E6B6F6D 6F732E72 75301F06 03551D23 04183016 8014FD2C 11AE01BE 4376FA6C EF7A0B19 C2C0C894 5C19301D 0603551D 0E041604 14FD2C11 AE01BE43 76FA6CEF 7A0B19C2 C0C8945C 19300D06 092A8648 86F70D01 01040500 03818100 A0CA07CB 679FD968 9D8DAC97 964061CE 7E202931 95A8D53B C9A6F8B5 947DEF21 5110D97C 18FD086C 818D07DB 98B748D0 38A57852 FED7C5D1 AB35930E AF62B11F E8D84B1D BD7F20AF BFC56885 4CFA8EEF AF3019EC D60842D4 CCE7F6AC BB5D0214 2937E441 5CE2046A 1A3A5C0F 9D55E887 88054112 B70DAB46 BC6B7569 D4359A6E quit archive log config logging enable logging size 900 notify syslog contenttype plaintext hidekeys path tftp://tftp/IZH/TK/M44-SW_L2/$H.$T.conf write-memory time-period 10080 ! spanning-tree mode rapid-pvst spanning-tree loopguard default no spanning-tree optimize bpdu transmission spanning-tree extend system-id errdisable recovery cause bpduguard errdisable recovery cause security-violation errdisable recovery cause channel-misconfig errdisable recovery cause dtp-flap errdisable recovery cause link-flap errdisable recovery cause psecure-violation errdisable recovery cause port-mode-failure errdisable recovery cause loopback errdisable recovery interval 600 ! ! ! ! vlan internal allocation policy ascending ! vlan 2 name TK-LAN-USERS-AREA ! vlan 25 name VOICE_AREA ! vlan 150 name TK-WIFI-USERS-AREA ! vlan 300 name NETWORK_MANAGEMENT ! vlan 350 name TK-VOICE-AREA ! vlan 500 name TK-WIFI-GUEST-AREA ! ip tcp selective-ack ip tcp path-mtu-discovery lldp run ! ! ! ! ! ! ! ! ! ! interface Loopback7777 description FTK4601 no ip address shutdown ! interface FastEthernet0/1 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/2 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/3 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/4 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/5 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/6 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/7 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface FastEthernet0/8 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface GigabitEthernet0/1 description ACCESS switchport access vlan 2 switchport mode access switchport voice vlan 350 no logging event link-status no snmp trap link-status storm-control broadcast level 30.00 no cdp enable spanning-tree portfast ! interface GigabitEthernet0/2 description [CORE] M44-SW-1-3 switchport mode trunk logging event trunk-status logging event spanning-tree ip dhcp snooping trust ! interface Vlan1 no ip address shutdown ! interface Vlan300 ip address 10.0.5.244 255.255.255.0 no ip route-cache ! ip default-gateway 10.0.5.254 no ip http server no ip http secure-server ! ip tftp source-interface Vlan300 ip ssh authentication-retries 2 ip ssh version 2 ! kron occurrence EveryDay at 1:00 recurring policy-list SaveBackup ! kron policy-list SaveBackup cli write memory ! logging trap debugging logging origin-id hostname logging facility local1 logging source-interface Vlan300 logging host 192.168.2.25 logging host 10.4.244.4 transport udp port 515 access-list 23 permit any access-list 23 deny any log snmp-server community lmTUEsk6Yvlv RO snmp-server host 10.1.122.227 lmTUEsk6Yvlv ! ! radius server IZH-RDS002 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405 ! radius server P11-RDS003 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405 ! banner login ^CCC ***************************************************************************** * * ^C ! line con 0 logging synchronous login authentication CONSOLE line vty 0 4 logging synchronous login authentication NPS length 0 transport input ssh line vty 5 15 logging synchronous login authentication NPS transport input ssh ! ntp source Vlan300 ntp server 10.0.5.254 end