ansible/backup/files/cisco/IZH-KG-P11-SW-4-1.txt
Ахметзянов Рустам Рамилевич af70a6a354 first commit
2025-10-31 08:47:26 +04:00

783 lines
18 KiB
Plaintext

Building configuration...
Current configuration : 18607 bytes
!
! Last configuration change at 15:29:23 MSK Tue Jun 14 2022 by akhmetzyanovrr_adm
! NVRAM config last updated at 01:00:00 MSK Thu Jul 28 2022
!
version 15.2
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
no service password-encryption
!
hostname IZH-KG-P11-SW-4-1
!
boot-start-marker
boot-end-marker
!
logging buffered 512000 informational
enable secret 5 $1$PL/S$hgqHXVL5q24Hm0HuWuxq/0
!
username netadmin privilege 15 secret 5 $1$grYJ$7SZ96CyLXmT9p0k4p4LhB0
aaa new-model
!
!
aaa group server radius NPS
server name IZH-RDS002
server name P11-RDS003
load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated
!
!
!
!
!
!
aaa session-id common
clock timezone MSK 4 0
system mtu routing 1500
vtp mode transparent
!
!
!
!
!
!
!
!
!
no ip source-route
no ip gratuitous-arps
!
!
ip dhcp snooping vlan 2,12,150,351,500
ip dhcp snooping
no ip domain-lookup
ip domain-name komos.ru
ip host VM-KG-NET 10.1.12.70
ip host tftp 10.4.0.214
login on-failure log
login on-success log
!
crypto pki trustpoint TP-self-signed-2477632512
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2477632512
revocation-check none
rsakeypair TP-self-signed-2477632512
!
!
crypto pki certificate chain TP-self-signed-2477632512
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32343737 36333235 3132301E 170D3933 30333031 30303037
35305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 34373736
33323531 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A416 D82EA906 C759867D 150F9AA9 57DEE9F8 B0C3BEE2 63C06C9C 386EED88
8A272155 18D46066 872465D3 516401D5 EFDFCB26 C0A8E51A 3D27EE9D 1D8B2A53
2C6DFC48 2FE9D28D 8127FF96 6CDE7E66 7D7A606D 97CADC7E 540C983B A37C485A
D1305B64 7901FE39 F7C27899 283BE6AC E41A35A8 E11DAD62 2297707B 2CC4AEDD
1D3B0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 140580AC 8487126C 43DB2A61 6158D740 9CE3B1AC A3301D06
03551D0E 04160414 0580AC84 87126C43 DB2A6161 58D7409C E3B1ACA3 300D0609
2A864886 F70D0101 05050003 8181002F 94A7EA66 D0312C6C 1B53F67E 4B3D629F
E2C71789 65B7312D E4AE00C5 6EDA067F 64D11C9E 67A0A6BC E9294900 680F5100
0AE76E5E 8E985B4B CD1832DF 48685B0F 58F2918E 59AEBE6B E54232C9 B4EED3ED
45DCF818 56D2A5D5 2C162EF8 BF809E67 BC655091 9474A21A D590301F 42275292
0C5DDC6A 05862E9E 15F18A9B 704821
quit
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause port-mode-failure
errdisable recovery cause loopback
errdisable recovery interval 600
archive
log config
logging enable
logging size 900
notify syslog contenttype plaintext
hidekeys
path tftp://tftp/IZH/KG/P11-SW_L2/$H.$T.conf
write-memory
time-period 10080
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
!
!
vlan 2
name KG_LAN-USER
!
vlan 11
name KG_LAN-AS199014
!
vlan 12
name UNIFI_WIRELESS
!
vlan 100
name Inbound_management
!
vlan 150
name KG_WIFI-USER
!
vlan 205
name SRV_UZB
!
vlan 300
name KG_MGMT-NET
!
vlan 301
name KG_MGMT-WIFI
!
vlan 351
name KG_VOIP
!
vlan 500
name KG_WIFI-GUEST
!
vlan 4040
name KG_LAN-SZB
lldp run
!
!
!
!
!
!
interface Loopback7777
description TK6657m
no ip address
shutdown
downshift disable
!
interface Port-channel1
description [CORE] SW-1-1
switchport mode trunk
ip dhcp snooping trust
!
interface FastEthernet0/1
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/2
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/3
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/4
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/5
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/6
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/7
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/8
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/9
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/10
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/11
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/12
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/13
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/14
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/15
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/16
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/17
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/18
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/19
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/20
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/21
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
power inline never
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/22
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/23
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/24
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/25
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/26
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/27
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/28
description [WIFI] AP-5-502-UPOM
switchport trunk allowed vlan 9,10,12,150,301,500
switchport trunk native vlan 12
switchport mode trunk
no logging event link-status
power inline port 2x-mode
no cdp enable
no snmp trap link-status
!
interface FastEthernet0/29
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/30
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/31
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/32
description NONE
switchport access vlan 2
switchport trunk allowed vlan 1,10
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/33
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/34
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/35
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/36
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/37
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/38
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/39
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/40
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/41
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/42
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/43
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/44
description NONE
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/45
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
shutdown
downshift disable
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/46
description NONE
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast edge
!
interface FastEthernet0/47
description ASA-SZB-vlan1
switchport access vlan 100
switchport mode access
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
!
interface FastEthernet0/48
description ASA-SZB-vlan11
switchport access vlan 11
switchport mode access
no logging event link-status
no cdp enable
no snmp trap link-status
storm-control broadcast level 30.00
!
interface GigabitEthernet0/1
description [CORE] Po1 SW-1-1
switchport mode trunk
logging event trunk-status
logging event spanning-tree
channel-group 1 mode on
ip dhcp snooping trust
!
interface GigabitEthernet0/2
description PORT-CHANNEL
switchport mode trunk
logging event trunk-status
logging event spanning-tree
channel-group 1 mode on
ip dhcp snooping trust
!
interface GigabitEthernet0/3
description SZB-NATIVE-vlan4040
switchport access vlan 4040
switchport mode access
no logging event link-status
no cdp enable
no snmp trap link-status
!
interface GigabitEthernet0/4
description SZB-SRV
switchport trunk allowed vlan 100
switchport mode trunk
logging event trunk-status
logging event spanning-tree
no cdp enable
!
interface Vlan1
no ip address
shutdown
!
interface Vlan100
ip address 10.1.1.41 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
ip default-gateway 10.1.1.1
no ip http server
no ip http secure-server
ip tftp source-interface Vlan100
ip ssh authentication-retries 2
!
kron occurrence EveryDay at 1:00 recurring
policy-list SaveBackup
!
kron policy-list SaveBackup
cli write memory
!
logging trap debugging
logging origin-id hostname
logging facility local6
logging source-interface Vlan100
logging host 192.168.2.25
logging host 10.4.244.4 transport udp port 515
access-list 23 permit any
access-list 23 deny any log
snmp-server community private RW
snmp-server community lmTUEsk6Yvlv RO
snmp-server host 10.1.122.227 lmTUEsk6Yvlv
snmp mib flash cache
!
radius server IZH-RDS002
address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
radius server P11-RDS003
address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
!
privilege exec all level 7 show cdp
privilege exec all level 7 show running-config
privilege exec all level 7 show configuration
privilege exec level 7 show
!
line con 0
logging synchronous
login authentication CONSOLE
line vty 0 4
access-class 23 in
logging synchronous
login authentication NPS
length 0
transport input ssh
line vty 5 15
access-class 23 in
logging synchronous
login authentication NPS
transport input ssh
!
ntp source Vlan100
ntp server 10.1.1.2
end