Building configuration...

Current configuration : 14416 bytes
!
! Last configuration change at 04:29:41 MSK Wed Mar 30 2011
!
version 15.2
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service unsupported-transceiver
!
hostname KZN-MLK-KMK-SW-3-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
enable secret 5 $1$L7fK$k/MCEtLn2e68JjkqKNFz10
!
username root privilege 15 secret 5 $1$1ha7$Z9UqZcU28aVqXjk9iT/OM/
username netadmin privilege 15 secret 5 $1$zg3A$sVXCdlbff0J/IBsK2dnXi0
aaa new-model
!
!
aaa group server radius NPS
 server name IZH-RDS002
 server name P11-RDS003
 load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated 
!
!
!
!
!
!
aaa session-id common
clock timezone MSK 3 0
switch 1 provision ws-c2960s-48fps-l
!
!
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
ip device tracking
!
!
!
archive
 log config
  logging enable
  logging size 900
  notify syslog contenttype plaintext
  hidekeys
 path tftp://tftp/KZN/MLK/KMK-SW_L2/$H-$T
 write-memory
 time-period 10080
!
spanning-tree mode rapid-pvst
spanning-tree logging
no spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
!
!
!
!
no errdisable detect cause gbic-invalid
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery cause psp
errdisable recovery interval 60
!
!
!
!
vlan internal allocation policy ascending
!
ip ssh rsa keypair-name SSH_KEYS
ip ssh version 2
lldp run
!
! 
!
!
!
!
!
!
!
!
interface Loopback7777
 description 3201135702001
 no ip address
 shutdown
!
interface Port-channel1
 description [CORE] SW-1-1
 switchport mode trunk
!
interface FastEthernet0
 description --MGMT Port--
 no ip address
!
interface GigabitEthernet1/0/1
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/2
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/3
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/4
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
 description [WIFI] AP-3-1-KORPUS-1-1-CRPT_1
 switchport trunk native vlan 301
 switchport trunk allowed vlan 150,301,450,500
 switchport mode trunk
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/6
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/7
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/8
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/9
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/10
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/11
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/12
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/13
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/14
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/15
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/16
 description [CRPT] Terminal_1
 switchport access vlan 603
 switchport mode access
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/17
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/18
 description [CRPT] Terminal_2
 switchport access vlan 603
 switchport mode access
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/19
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/20
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/21
 description [CRPT] Terminal_3
 switchport access vlan 603
 switchport mode access
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/22
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/23
 description [CRPT] Terminal_4
 switchport access vlan 603
 switchport mode access
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/24
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/25
 description [WIFI] CRPT
 switchport trunk native vlan 301
 switchport trunk allowed vlan 150,301,450,500
 switchport mode trunk
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/26
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/27
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/28
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/29
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/30
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/31
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/32
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/33
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/34
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/35
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/36
 description [WIFI] CRPT
 switchport trunk native vlan 301
 switchport trunk allowed vlan 150,301,450,500
 switchport mode trunk
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/37
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/38
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/39
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/40
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/41
 description [ACC]
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/42
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/43
 description [WIFI] AP-3-1-KORPUS1-WMS2
 switchport trunk native vlan 301
 switchport trunk allowed vlan 150,301,450,500
 switchport mode trunk
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/44
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/45
 description [WIFI] AP-3-1-KORPUS-1-2-CRPT_2
 switchport trunk native vlan 301
 switchport trunk allowed vlan 150,301,450,500
 switchport mode trunk
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/46
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/47
 description [ACC] 10M NiceLabel
 switchport mode access
 switchport voice vlan 350
 speed 10
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/48
 description [KU] SW-3A-1
 switchport mode trunk
 no snmp trap link-status
 spanning-tree guard root
!
interface GigabitEthernet1/0/49
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode active
!
interface GigabitEthernet1/0/50
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode active
!
interface GigabitEthernet1/0/51
!
interface GigabitEthernet1/0/52
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan300
 description --MANAGMENT--
 ip address 10.5.62.31 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
ip default-gateway 10.5.62.254
no ip http server
no ip http secure-server
!
!
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
!
snmp-server community lmTUEsk6Yvlv RO
snmp ifmib ifindex persist
!
!
radius server IZH-RDS002
 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 0657387315404D2E1F1F54212D3A6C042B313E1713030857472277757E5E101A2735390B4D780B6A77632E4B03034B5E2122273751030B027767652F4930411C25
!
radius server P11-RDS003
 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
!
banner exec ^C
	Welcome to $(hostname). You are connected on line $(line) on domain $(domain)
	
^C
banner login ^C
*****************************************************************************
*                                                                           *
*                    UNAUTHORIZED ACCESS IS PROHIBITED                      *
*                                                                           *
*                     You have accessed network equipment.                  *
*  You must have authorized permission to access or configure this device.  *
*     All activities performed on this device are logged and monitored.     *
*                                                                           *
*****************************************************************************
^C
!
line con 0
 exec-timeout 60 0
 logging synchronous
 login authentication CONSOLE
line vty 0 4
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
line vty 5 15
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
!
ntp server 192.168.8.200 prefer
ntp server 192.168.8.201
mac address-table notification change
mac address-table notification mac-move
mac address-table aging-time 900
end