ansible/backup/files/cisco/IZH-KG-P11-SW-9-2.txt
Ахметзянов Рустам Рамилевич af70a6a354 first commit
2025-10-31 08:47:26 +04:00

737 lines
19 KiB
Plaintext

Building configuration...
Current configuration : 19774 bytes
!
! Last configuration change at 14:44:47 MSK Tue Jul 26 2022 by adm_kapustinal
! NVRAM config last updated at 14:45:05 MSK Tue Jul 26 2022 by adm_kapustinal
!
version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service unsupported-transceiver
!
hostname IZH-KG-P11-SW-9-2
!
boot-start-marker
boot-end-marker
!
logging buffered 512000 informational
enable secret 5 $1$j4UP$Wgs2xMeWlYNzcOvcwfmE90
!
username netadmin privilege 15 secret 9 $9$nMdBdnzWqwuoN.$B92Tf/zlvWahHuZfaACGNLhszxBYdLLYHw0tQYA9GIk
aaa new-model
!
!
aaa group server radius NPS
server name IZH-RDS002
server name P11-RDS003
load-balance method least-outstanding
!
aaa authentication login default group NPS local enable
aaa authentication login CONSOLE local group NPS
aaa authorization exec default group NPS local if-authenticated
!
!
!
!
!
!
aaa session-id common
clock timezone MSK 4 0
switch 1 provision ws-c2960x-48fps-l
no ip source-route
no ip gratuitous-arps
!
!
ip dhcp snooping vlan 1-4094
ip dhcp snooping
no ip domain-lookup
ip domain-name komos.ru
ip host tftp 10.4.0.214
login on-failure log
login on-success log
!
!
!
archive
log config
logging enable
logging size 900
notify syslog contenttype plaintext
hidekeys
path tftp://tftp/IZH/KG/P11-SW_L2/$H.$T.conf
write-memory
time-period 1440
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
!
!
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause port-mode-failure
errdisable recovery cause loopback
errdisable recovery interval 600
!
vlan internal allocation policy ascending
!
ip tftp source-interface Vlan100
ip ssh authentication-retries 2
ip ssh logging events
ip ssh version 2
lldp run
!
!
!
!
!
interface Loopback7777
description TK10120m
no ip address
shutdown
!
interface Port-channel1
description [CORE] SW-1-1
switchport mode trunk
logging event trunk-status
logging event spanning-tree
ip dhcp snooping trust
!
interface Port-channel2
switchport mode trunk
storm-control broadcast level pps 100
storm-control multicast level pps 100
ip dhcp snooping trust
!
interface FastEthernet0
no ip address
!
interface GigabitEthernet1/0/1
description [ACC] 9-1-1
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/2
description [ACC] 9-1-2
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/3
description [ACC] 9-1-3
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/4
description [PRN] 9-1-4
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/5
description [ACC] 9-1-5 ShutovAV VOIP
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/6
description [ACC] 9-1-6
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/7
description [ACC] 9-1-7
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/8
description [ACC] 9-1-8 ShutovAV iMAC
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/9
description [ACC] 9-1-9
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/10
description [ACC] 9-1-10 ShutovAV Time Capsule
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/11
description [ACC] 9-1-11
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/12
description [ACC] 9-1-12
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/13
description [ACC] 9-1-13
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/14
description [ACC] 9-1-14
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/15
description [ACC] 9-1-15
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/16
description [ACC] 9-1-16
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/17
description [ACC] 9-1-17 ShutovAV miniPC for TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/18
description [ACC] 9-1-18 ShutovAV Apple TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/19
description [ACC] 9-1-18 ShutovAV TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/20
description [ACC] 9-1-20
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/21
description [ACC] 9-1-21 TV Priemnaya ShutovAV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/22
description [ACC] 9-1-22 miniPC for TV Priemnaya ShutovAV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/23
description [ACC] 9-1-28
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/24
description [ACC] 9-1-24 Alena_Priemnaya
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/25
description [PRN] 9-1-25 MFU Priemnaya ShutovAV
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/26
description [PRN] 9-1-26 MFU Priemnaya ShutovAV
switchport access vlan 2
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/27
description [ACC] 9-1-27 Peregovorka ShutovAV LAN na stole
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/28
description [ACC] 9-1-23 VOIP_1102_Alena_Priemnaya
switchport access vlan 99
switchport mode access
switchport voice vlan 351
speed auto 10 100
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/29
description [ACC] 9-1-29 Peregovorka ShutovAV LAN na stole
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/30
description [ACC] 9-1-30 Peregovorka IPphone_Confirenc
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/31
description [ACC] 9-1-31 Peregovorka ShutovAV miniPC for TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/32
description [ACC] 9-1-32 Peregovorka ShutovAV Pristavka apple TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/33
description [ACC] 9-1-33 Peregovorka ShutovAV TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/34
description [ACC] 9-1-34
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/35
description [ACC] 9-1-35 Peregovorka Apple TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/36
description [ACC] 9-1-36 Peregovorka TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/37
description [ACC] 9-1-37 Peregovorka miniPC for TV
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/38
description [WIFI] AP-9-10
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/39
description [ACC] 9-1-40
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/40
description [WIFI] AP-9-12
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/41
description [ACC] 9-1-42
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/42
description [WIFI] AP-9-2
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/43
description [ACC] 9-1-44
switchport access vlan 99
switchport mode access
switchport voice vlan 351
power inline static
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/44
description [WIFI] AP-9-4
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/45
description [ACC] 9-1-46
switchport access vlan 99
switchport mode access
switchport voice vlan 351
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/46
description [WIFI] AP-9-6
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/47
description [KU] SW-9-3
switchport mode trunk
no snmp trap link-status
storm-control broadcast level pps 100
storm-control multicast level pps 100
spanning-tree portfast
spanning-tree bpduguard enable
channel-group 2 mode active
ip dhcp snooping trust
!
interface GigabitEthernet1/0/48
description [WIFI] AP-9-8
switchport trunk native vlan 304
switchport trunk allowed vlan 150,304,500
switchport mode trunk
no snmp trap link-status
storm-control broadcast level 30.00
spanning-tree portfast
spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/49
description [CORE] Po1 SW-1-1
switchport mode trunk
logging event trunk-status
logging event spanning-tree
channel-group 1 mode active
ip dhcp snooping trust
!
interface GigabitEthernet1/0/50
description [-CORE] Po1 SW-1-1
switchport mode trunk
logging event trunk-status
logging event spanning-tree
shutdown
channel-group 1 mode active
ip dhcp snooping trust
!
interface GigabitEthernet1/0/51
shutdown
!
interface GigabitEthernet1/0/52
shutdown
!
interface Vlan1
no ip address
shutdown
!
interface Vlan100
description [MGM]
ip address 10.1.1.92 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
interface Vlan300
no ip address
!
ip default-gateway 10.1.1.1
no ip http server
no ip http secure-server
!
logging trap debugging
logging facility local6
logging source-interface Vlan300
!
snmp-server community lmTUEsk6Yvlv RO
snmp-server host 10.1.122.227 lmTUEsk6Yvlv
!
!
radius server P11-RDS003
address ipv4 10.1.122.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
radius server IZH-RDS002
address ipv4 10.4.0.248 auth-port 1645 acct-port 1646
timeout 3
retransmit 2
key 7 101F3E4B5C19563C160C6C010516751A2D0A0A34321159181C7075222515524D7C7A7C00407B536324307D470117150D7E3A273C2B4443044F2E3C345B39522405
!
!
banner login ^CC
*****************************************************************************
* *
* UNAUTHORIZED ACCESS IS PROHIBITED *
* *
* You have accessed network equipment. *
* You must have authorized permission to access or configure this device. *
* All activities performed on this device are logged and monitored. *
* *
*****************************************************************************
^C
alias router x exit
alias subinterface x exit
alias interface x exit
alias configure x exit
alias exec ipconfig show ip interface brief | exclude unassigned
alias exec diff show archive config differences nvram:startup-config system:running-config
alias exec q exit
alias exec sis sh int status
!
line con 0
logging synchronous
login authentication CONSOLE
line vty 0 4
exec-timeout 120 0
logging synchronous
length 0
transport input ssh
line vty 5 15
exec-timeout 120 0
logging synchronous
transport input ssh
!
ntp server 10.1.8.1
ntp server 10.1.8.2
end