Building configuration...

Current configuration : 11847 bytes
!
! Last configuration change at 11:16:39 SAMT Fri May 20 2022 by konovalov
!
version 15.0
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
no service password-encryption
!
hostname GLZ-MLK-GMK-SW-2-1
!
boot-start-marker
boot-end-marker
!
logging userinfo
enable secret 5 $1$BBaW$RnJ5zhs3V/djIotd5dL4v.
!
username root privilege 15 secret 5 $1$xTn5$c0/OFwA275Ffxlm924tW9.
username netadmin privilege 15 secret 5 $1$dN9X$hqYC1S2rgcrU1.KxfkvXK/
aaa new-model
!
!
aaa group server radius NPS
 server name IZH-RDS002
 server name P11-RDS003
 load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated 
!
!
!
!
!
!
aaa session-id common
clock timezone SAMT 4 0
system mtu routing 1500
vtp domain kmk.tatarmilk.ru
vtp mode off
!
!
no ip domain-lookup
ip domain-name milkom-komos.ru
ip host tftp 10.4.0.214
login on-failure
login on-success
!
!
!
!
!
!
!
!
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig (STP)
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
errdisable recovery cause small-frame
errdisable recovery cause psp
errdisable recovery interval 600
archive
 log config
  logging enable
  logging size 900
  notify syslog contenttype plaintext
  hidekeys
 path tftp://tftp/GL/2960/$H-$T
 write-memory
 time-period 10080
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 8
 name --USERS--
!
vlan 101
 name --PRINTERS--
!
vlan 111 
!
vlan 150
 name --Wi-Fi_Users--
!
vlan 151
 name --Wi-Fi_PROD--
!
vlan 200
 name --SERVERS_MGMT--
!
vlan 250
 name --SERVERS_0.0/24--
!
vlan 251
 name --SERVERS_BACKUP--
!
vlan 300
 name --MANAGEMENT--
!
vlan 301
 name --Wi-Fi_MANAGMENT--
!
vlan 350
 name --VOICE--
!
vlan 500
 name --Wi-Fi_GUEST--
!
vlan 555
 name --BGP_TRANSIT--
lldp run
!
!
!
!
!
!
interface Port-channel1
 description [CORE] SW-1-1
 switchport mode trunk
!
interface FastEthernet0/1
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/2
 description [WIFI] AP-4-1-WF8
 switchport trunk native vlan 301
 switchport mode trunk
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/3
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/4
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/5
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/6
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/7
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/8
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/9
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/10
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/11
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/12
 description [PRN]
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree guard root
!
interface FastEthernet0/13
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/14
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/15
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/16
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/17
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/18
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/19
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/20
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/21
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/22
 description [PRN]
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree guard root
!
interface FastEthernet0/23
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/24
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/25
 description [PRN]
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree guard root
!
interface FastEthernet0/26
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/27
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/28
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/29
 description NONE
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/30
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/31
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/32
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/33
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/34
 description [PRN]
 switchport access vlan 101
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
 spanning-tree portfast
 spanning-tree bpduguard enable
 spanning-tree guard root
!
interface FastEthernet0/35
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/36
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/37
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/38
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/39
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/40
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/41
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/42
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/43
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/44
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/45
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/46
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/47
 description NONE
 switchport access vlan 8
 switchport mode access
 switchport voice vlan 350
 no snmp trap link-status
!
interface FastEthernet0/48
 description MANAGEMENT
 switchport access vlan 300
 switchport voice vlan 350
!
interface GigabitEthernet0/1
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode on
!
interface GigabitEthernet0/2
 description [CORE] Po1 SW-1-1
 switchport mode trunk
 channel-group 1 mode on
!
interface GigabitEthernet0/3
 description --TO-CORE--
 switchport mode trunk
 channel-group 1 mode on
!
interface GigabitEthernet0/4
 description --TO-CORE--
 switchport mode trunk
 channel-group 1 mode on
!
interface Vlan1
 no ip address
!
interface Vlan300
 description --MANAGMENT--
 ip address 10.5.30.28 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
ip default-gateway 10.5.30.254
ip http server
no ip http secure-server
logging origin-id hostname
logging source-interface Vlan300
logging host 192.168.8.119 transport udp port 5544
logging host 10.4.244.4 transport udp port 515
snmp-server community lmTUEsk6Yvlv RO
snmp ifmib ifindex persist
!
radius server IZH-RDS002
 address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 1W29n$Wzh&JA^&OoymBQpo!$CALFm$tDMO2uO8XBWEpedsiEQASjhmm6KKF0U6nN
!
radius server P11-RDS003
 address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
 timeout 3
 retransmit 2
 key 1W29n$Wzh&JA^&OoymBQpo!$CALFm$tDMO2uO8XBWEpedsiEQASjhmm6KKF0U6nN
!
!
!
vstack
!
line con 0
 logging synchronous
 login authentication CONSOLE
line vty 0 4
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
line vty 5 15
 exec-timeout 120 0
 logging synchronous
 login authentication NPS
 transport input ssh
!
ntp server 192.168.8.200
ntp server 192.168.8.201
mac address-table notification change
mac address-table notification mac-move
mac address-table aging-time 900
end