Building configuration... Current configuration : 17639 bytes ! ! Last configuration change at 13:12:55 MSK Thu Jul 28 2022 by adm_kapustinal ! NVRAM config last updated at 10:59:49 MSK Thu Jul 28 2022 by adm_kapustinal ! version 15.2 service nagle no service pad service tcp-keepalives-in service tcp-keepalives-out service timestamps debug datetime msec localtime show-timezone year service timestamps log datetime msec localtime show-timezone year service password-encryption service sequence-numbers service unsupported-transceiver ! hostname IZH-KG-P11-SW-1-3 ! boot-start-marker boot-end-marker ! logging buffered 65536 no logging console enable secret 5 $1$.tEz$Hutes7k4bUis4LgJ26hPn/ ! username netadmin privilege 15 secret 5 $1$sBep$BrbjThNMOKPqlMxpDm4u7. username akhmetzyanovrr_adm aaa new-model ! ! aaa group server radius NPS server name IZH-RDS002 server name P11-RDS003 load-balance method least-outstanding ! aaa authentication login default group NPS local enable aaa authentication login CONSOLE local group NPS aaa authorization console aaa authorization exec default group NPS local if-authenticated ! ! ! ! ! ! aaa session-id common clock timezone MSK 4 0 switch 1 provision ws-c2960x-48lps-l no ip source-route no ip gratuitous-arps ! ! ip domain-name komos.ru ip host VM-KG-NET 10.1.12.70 ip host tftp 10.4.0.214 login on-failure log login on-success log vtp mode transparent ! ! ! ! ! ! ! flow record FLOW-RECORD-L2VPN-INPUT description IPv4 NetFlow L2VPN IN match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect transport tcp flags collect interface output collect counter bytes long collect counter packets long ! ! flow record FLOW-RECORD-L2VPN-OUTPUT description IPv4 NetFlow L2VPN OUT match ipv4 tos match ipv4 protocol match ipv4 source address match ipv4 destination address match transport source-port match transport destination-port collect transport tcp flags collect interface input collect counter bytes long collect counter packets long ! ! flow monitor FLOW-MONITOR-L2VPN-INPUT description ingress cache timeout active 60 record FLOW-RECORD-L2VPN-INPUT ! ! flow monitor FLOW-MONITOR-L2VPN-OUTPUT description egress cache timeout active 60 record FLOW-RECORD-L2VPN-OUTPUT ! ! crypto pki trustpoint TP-self-signed-2890218112 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2890218112 revocation-check none rsakeypair TP-self-signed-2890218112 ! ! crypto pki certificate chain TP-self-signed-2890218112 certificate self-signed 01 3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 32383930 32313831 3132301E 170D3030 30373133 30343433 35335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 38393032 31383131 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 8100A2FF 9A166990 248A868C 132D49C8 EF357969 DE5AABCF BCC0EB12 D0AF43C7 BECD39C1 827CA980 9D8F1864 9D995D9D CC9A82F6 25A4AABA F7747EDA 62403E18 BC43B725 6AA3CCCB DA0F40B4 3E1A9E21 22CEC796 9FB1AEF0 F0DCE02F 92951898 9DCADDE6 43D00E6D FB2AE32F 617B378D 4115AD5F 72482292 220DD6D8 E73C6CFE 37C90203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 551D2304 18301680 147D1068 716D81C1 6D2DBF01 B421D06A 6BE74719 96301D06 03551D0E 04160414 7D106871 6D81C16D 2DBF01B4 21D06A6B E7471996 300D0609 2A864886 F70D0101 05050003 8181003C 3E229CB8 16EE1017 AF712FE7 1E3092CE 3FF13297 283E634A B8DC9C02 FACA6DAB 324A8ED5 65CF05E3 076E407E 79A34240 9A5AAD04 3B1C1AC3 168DB4DA 15E6B692 741DE779 B51E7683 F152141F 556FF7B3 5D9EB431 B067E16B EDBF826A DDCFD2E5 D0C433A5 8FF201F3 B26393BD 22C85D0A CD6632B9 FE0B0B5F A046F73B 864371 quit archive log config logging enable logging size 900 notify syslog contenttype plaintext hidekeys path tftp://tftp/IZH/KG/P11-SW_L2/$H.$T.conf write-memory time-period 10080 ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree logging spanning-tree extend system-id no errdisable detect cause gbic-invalid errdisable recovery cause bpduguard errdisable recovery cause dtp-flap errdisable recovery cause link-flap errdisable recovery cause sfp-config-mismatch errdisable recovery cause port-mode-failure errdisable recovery cause loopback errdisable recovery interval 600 ! ! ! ! vlan internal allocation policy ascending ! vlan 2 name KG_LAN-USER ! vlan 4 name KG_LAN-VDI ! vlan 5 name KG_LAN-ADMIN ! vlan 6 ! vlan 11 name KG_LAN-AS199014 ! vlan 12 name UNIFI_NETWORK ! vlan 20 name DMZ-1 ! vlan 25 name VoIP ! vlan 100 name Inbound_management ! vlan 101 name WDS ! vlan 149 name -KG-MGMT-INT-10.1.254.0/24- ! vlan 150 ! vlan 152 name KG-ARUBA-USERS ! vlan 153 name KG-ARUBA-USERS-GUEST ! vlan 200 name KG_MGMT-SRV ! vlan 201 name KG_LAN-SRV ! vlan 202 name KG_LAN-SRV-DMZ ! vlan 249 name --KG-SRV-BKP-10.1.249.0/26-- ! vlan 253 name exchange_komos-group ! vlan 289 name --OCOD_VLAN_1-- ! vlan 296 name -MLK-KCOD-SRV-All_10.1.123.0/24- ! vlan 297 name -MLK-KCOD-SRV-Exchange_10.1.122. ! vlan 298 name -KG-COD-Transit-Core- ! vlan 300 name KG_MGMT-NET ! vlan 301 name KG_MGMT-WIFI ! vlan 302 name WiFi_MGM_Aruba_test ! vlan 349 name MLK_LAN-DATACENTER-2 ! vlan 351 name KG_VOIP ! vlan 500 name WIFI Guesrt KG ! vlan 556 name P2P_iBGP_KOMOS_AS_over_ER_Tel ! vlan 557 name P2P_iBGP_KOMOS_AS_over_MTS ! vlan 558 name -L2VPN-PVE_HA_ERTLC- ! vlan 559 name -L2VPN-PVE_HA_MTS- ! vlan 598 name BGP_KG_COD_TRANSIT ! vlan 599 name -MLK-KCOD-Trunk_172.30.30.0/27- ! vlan 3001 name -KG-ISOLATED-VLAN- ! vlan 3900 name -mlk_izh-vLab_net-servers-3900- ! vlan 3901 name -mlk_izh-vLab_net-servers-3901- ! vlan 3902 name -mlk_izh-vLab_net-servers-3902- ! vlan 3903 name -mlk_izh-vLab_net-servers-3903- ! vlan 3904 name -mlk_izh-vLab_net-servers-3904- ! vlan 3905 name -mlk_izh-vLab_net-servers-3905- ! vlan 3906 name -mlk_izh-vLab_net-servers-3906- ! vlan 3907 name -mlk_izh-vLab_net-servers-3907- ! vlan 3908 name -mlk_izh-vLab_net-servers-3908- ! vlan 3909 name -mlk_izh-vLab_net-servers-3909- ! vlan 3910 name -mlk_izh-vLab_net-servers-3910- ! vlan 3911 name -mlk_izh-vLab_net-servers-3911- ! vlan 3912 name -mlk_izh-vLab_net-servers-3912- ! vlan 3913 name -mlk_izh-vLab_net-servers-3913- ! vlan 3914 name -mlk_izh-vLab_net-servers-3914- ! vlan 3915 name -mlk_izh-vLab_net-servers-3915- ! vlan 3916 name -mlk_izh-vLab_net-servers-3916- ! vlan 3917 name -mlk_izh-vLab_net-servers-3917- ! vlan 3918 name -mlk_izh-vLab_net-servers-3918- ! vlan 3919 name -mlk_izh-vLab_net-servers-3919- ! vlan 4030 name -MLK-KCOD-Native- ! vlan 4031 name -MLK-KCOD-VeamRepl_172.31.31.0/2 ! vlan 4032 name -MLK-KCOD-SQLRepl_172.31.33.0/24 ! vlan 4033 name -MLK-KCOD-SrvVCHA_172.31.33.0/24 ! vlan 4034 name -MLK-KCOD-ExchRepl_172.31.34.0/2 ! vlan 4035 name -MLK-KCOD-Reserv_172.31.35.0/24- ! vlan 4040 name KG_LAN-SZB ! vlan 4093 name ISP-IMP_ERTEL ! ip tftp source-interface Vlan100 ip ssh version 2 ! class-map match-any CM_QoS_CS3 match ip dscp cs3 af31 af32 af33 class-map match-any CM_QoS_CS2 match ip dscp cs2 af21 af22 af23 class-map match-any CM_QoS_CS1 match ip dscp cs1 af11 af12 af13 class-map match-any CM_QoS_CS0 match ip dscp default 1 2 3 class-map match-any CM_QoS_CS7 match ip dscp cs7 class-map match-any CM_QoS_CS6 match ip dscp cs6 49 class-map match-any CM_QoS_CS5 match ip dscp cs5 41 42 45 ef 47 class-map match-any CM_QoS_CS4 match ip dscp cs4 af41 af42 af43 ! policy-map PM_QoS_CLASS_IN class CM_QoS_CS7 ! ! ! ! ! ! ! ! ! ! ! interface Loopback7777 description TK7239m no ip address shutdown ! interface Port-channel1 description LINK_TO_6500 switchport mode trunk shutdown ! interface Port-channel2 description [CORE] SW-1-2 switchport trunk allowed vlan 4030-4034 switchport mode trunk logging event trunk-status logging event spanning-tree ! interface Port-channel7 description [SRV] Po7 cisco PVE2 ORSSI eth1 switchport trunk native vlan 201 switchport trunk allowed vlan 2,5,201,500,558,559 switchport mode trunk no snmp trap link-status ! interface FastEthernet0 no ip address ! interface GigabitEthernet1/0/1 description [SRV] p11-vmw001_eth0 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/2 description [SRV] p11-vmw002_eth0 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/3 description [SRV] p11-vmw003_eth0 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/4 description [SRV] p11-vmw004_eth0 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/5 description [SRV] p11-vmw005_eth0 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/6 description [SRV] ORSI_Cisco_Server switchport access vlan 5 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/7 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/8 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/9 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/10 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/11 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/12 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/13 description NONE switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/14 description [SRV] p11-shd001_mg1 switchport access vlan 298 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/15 description [SRV] PVE2-eth1 switchport trunk native vlan 201 switchport trunk allowed vlan 2,5,201,500,558,559 switchport mode trunk no snmp trap link-status channel-group 7 mode active ! interface GigabitEthernet1/0/16 description NONE switchport mode trunk no snmp trap link-status ! interface GigabitEthernet1/0/17 description [SRV] p11-vmw004_eth3 switchport mode trunk no snmp trap link-status ! interface GigabitEthernet1/0/18 description NONE switchport mode trunk no snmp trap link-status ! interface GigabitEthernet1/0/19 description NONE switchport mode trunk no snmp trap link-status ! interface GigabitEthernet1/0/20 description [SRV] p11-vmw001_eth2 switchport mode trunk no snmp trap link-status ! interface GigabitEthernet1/0/21 description [SRV] Cisco IMC_PVE2 switchport access vlan 5 switchport mode access no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/22 description NONE switchport access vlan 5 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/23 description NONE switchport access vlan 349 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/24 description NONE switchport access vlan 349 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/25 switchport access vlan 201 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/26 switchport access vlan 201 switchport mode access no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/27 ! interface GigabitEthernet1/0/28 ! interface GigabitEthernet1/0/29 ! interface GigabitEthernet1/0/30 ! interface GigabitEthernet1/0/31 ! interface GigabitEthernet1/0/32 ! interface GigabitEthernet1/0/33 ! interface GigabitEthernet1/0/34 ! interface GigabitEthernet1/0/35 ! interface GigabitEthernet1/0/36 ! interface GigabitEthernet1/0/37 ! interface GigabitEthernet1/0/38 ! interface GigabitEthernet1/0/39 ! interface GigabitEthernet1/0/40 ! interface GigabitEthernet1/0/41 ! interface GigabitEthernet1/0/42 ! interface GigabitEthernet1/0/43 ! interface GigabitEthernet1/0/44 ! interface GigabitEthernet1/0/45 ! interface GigabitEthernet1/0/46 ! interface GigabitEthernet1/0/47 description TEST_DORADO_MGM switchport trunk native vlan 200 switchport trunk allowed vlan 200 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/48 description TEST_DORADO_MGM switchport trunk native vlan 200 switchport trunk allowed vlan 200 switchport mode trunk no logging event link-status no snmp trap link-status spanning-tree portfast ! interface GigabitEthernet1/0/49 description [CORE] SW-1-1 switchport trunk allowed vlan 1-4029,4035-4090 switchport mode trunk logging event trunk-status logging event spanning-tree hold-queue 4096 in hold-queue 4096 out ! interface GigabitEthernet1/0/50 description [ISP-1G] L2VPN-to-MLK-IZM_MTS switchport trunk native vlan 4030 switchport trunk allowed vlan 557,599,4031-4035 switchport mode trunk logging event trunk-status logging event spanning-tree no cdp enable no lldp transmit no lldp receive hold-queue 4096 in hold-queue 4096 out ! interface GigabitEthernet1/0/51 description [CORE] Po2 SW-1-2 switchport trunk allowed vlan 4030-4034 switchport mode trunk logging event trunk-status logging event spanning-tree channel-group 2 mode active ! interface GigabitEthernet1/0/52 description [CORE] Po2 SW-1-2 switchport trunk allowed vlan 4030-4034 switchport mode trunk logging event trunk-status logging event spanning-tree channel-group 2 mode active ! interface Vlan1 no ip address shutdown ! interface Vlan100 ip address 10.1.1.6 255.255.255.0 no ip redirects no ip unreachables no ip proxy-arp ! interface Vlan152 ip address 10.1.34.100 255.255.254.0 ! ip default-gateway 10.1.1.1 no ip http server ip http authentication local no ip http secure-server ! ! kron occurrence EveryDay at 1:00 recurring policy-list SaveBackup ! kron policy-list SaveBackup cli write memory ! logging trap debugging logging origin-id hostname logging facility local6 logging source-interface Vlan100 logging host 192.168.2.25 logging host 10.4.244.4 transport udp port 515 access-list 23 permit any access-list 23 deny any log ! snmp-server community lmTUEsk6Yvlv RO snmp-server host 10.1.122.227 lmTUEsk6Yvlv ! ! radius server IZH-RDS002 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405 ! radius server P11-RDS003 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405 ! ! privilege exec all level 7 show cdp privilege exec all level 7 show running-config privilege exec all level 7 show configuration privilege exec level 7 show banner login ^CCC ***************************************************************************** * * * OOO "KOMOS GROUP" * * Pesochnaya 11 * * 1st FLOOR * * DATACENTER-3 * * * * UNAUTHORIZED ACCESS IS PROHIBITED * * * * You have accessed network equipment. * * You must have authorized permission to access or configure this device. * * All activities performed on this device are logged and monitored. * * * *****************************************************************************^C ! line con 0 login authentication CONSOLE stopbits 1 line vty 0 4 access-class 23 in exec-timeout 120 0 login authentication NPS length 0 transport input ssh line vty 5 15 access-class 23 in exec-timeout 120 0 login authentication NPS transport input ssh ! ntp source Vlan100 ntp server 10.1.1.1 end