ansible/backup/files/huawei/IZH-MLK-IZM-SW-1-1_Huawei.txt
Ахметзянов Рустам Рамилевич af70a6a354 first commit
2025-10-31 08:47:26 +04:00

1357 lines
35 KiB
Plaintext

!Software Version V200R019C10SPC800
!Last configuration was updated at 2022-09-02 11:14:24+04:00 by akhmetzyanovrr_adm
!Last configuration was saved at 2022-08-26 10:43:49+04:00 by akhmetzyanovrr_adm
#
clock timezone Samara add 04:00:00
#
sysname IZH-MLK-IZM-SW-1-1_Huawei
#
undo ftp server source all-interface
undo ftp ipv6 server source all-interface
#
info-center channel 9 name splunk
info-center source ntp channel 4 log level critical
info-center source cli channel 4 log level notification
info-center source ssh channel 4 log level notification
info-center source default channel 9 log level warning
info-center loghost 10.4.244.4 source-ip 10.4.254.1 channel 9 port 515
#
device board 1 board-type CE6881-48S6CQ
device board 2 board-type CE6881-48S6CQ
#
drop-profile default
#
dcb pfc
#
ntp server disable
ntp ipv6 server disable
ntp server source-interface all disable
ntp ipv6 server source-interface all disable
ntp unicast-server 10.4.0.1
ntp unicast-server 10.4.0.2
#
vlan batch 8 to 20 93 96 99 101 103 110 to 113 150 to 151 172 to 173 201 to 202
vlan batch 207 to 208 248 to 257 288 to 292 294 299 to 302 350 448 500 550 to 551 553
vlan batch 556 to 557 596 to 597 599 to 601 603 650 999 to 1000 1100 to 1102 1113 1500 to 1504 1999
vlan batch 2145 3915 4030 to 4035
#
stp mode rstp
#
as-notation plain
#
telnet server disable
telnet ipv6 server disable
undo telnet server-source all-interface
undo telnet ipv6 server-source all-interface
#
radius enable
#
diffserv domain default
#
radius server group rad-serv
radius server shared-key-cipher %^%#"{4}+Fm|2Gld`[4`u4N%;~No'O%E~JEo^[HJs{Z(+9\cH9D=l-N8W&:h+BP!|a]%'3x>UY,]!nA3gCSH<|UkAWEyaJq9Sj!,b8^C%^%#
radius server authentication 10.4.0.248 1645 source Vlanif300
radius server authentication 10.1.122.248 1645 source Vlanif300 secondary
radius server retransmit 2
radius server user-name domain-excluded
#
vlan 8
name --UserNet_8.0/24--
#
vlan 9
name --UserNet_9.0/24--
#
vlan 10
name --UserNet_10.0/24--
#
vlan 11
name --UserNet_11.0/24--
#
vlan 12
name --UserNet_12.0/24--
#
vlan 13
name --UserNet_13.0/24--
#
vlan 14
name --UserNet_14.0/24--
#
vlan 15
name --UserNet_15.0/24--
#
vlan 16
name --UserNet_16.0/24--
#
vlan 17
name --UserNet_17.0/24--
#
vlan 18
name --UserNet_18.0/24--
#
vlan 19
name --UserNet_19.0/24--
#
vlan 20
name --UserNet_20.0/24--
#
vlan 93
name --LINK_TO_vpn_SSTP--
#
vlan 96
name --ERTELEKOM--
#
vlan 99
name --MARK_ASTERISK--
#
vlan 101
name --PRINTERS--
#
vlan 103
name -=KPP_Vesi&Cam=-
#
vlan 110
name --NET_KIP_PRODACTION--
#
vlan 111
name TRANSIT_TO_C3925-1
#
vlan 112
name Intraconnect_ospf_area_1
#
vlan 113
name TRANSIT_TO_MIKROTIK
#
vlan 150
name --Wi-Fi_Users_32.0/24--
#
vlan 151
name --Wi-Fi_Prod_33.0/24--
#
vlan 172
name TelephonyNet
#
vlan 173
name TelephonyTest
#
vlan 201
name --MANUFACTURE_VLAN--
#
vlan 202
name --DMZ--
#
vlan 207
name VCOD_Servers_DMZ_Frontend
#
vlan 208
name VCOD_Servers_Backend
#
vlan 248
name --SANDBOX_ELAR--
#
vlan 249
name --ServTestC_36.0/24--
#
vlan 250
name --ServerNet_0.0/24--
#
vlan 251
name -=ServMail_7.0/28=-
#
vlan 252
name --VOICE_ATS--
#
vlan 253
name exchange_komos-group
#
vlan 254
name -Service_SharePoint-
#
vlan 255
name Servers_terminal_farm
#
vlan 256
name -ServersMonitoring_3.0/24-
#
vlan 257
name KONTUR_DEV_MSSQL_5.0/27
#
vlan 288
name SERVERS_DEV
#
vlan 289
name -=SRVBakNet_245.0_24=-
#
vlan 290
name -=SrvVmwVMon_242.0/26=-
#
vlan 291
name -=SrvVmwVSan_242.64/26=-
#
vlan 292
name -=SrvBakNet_243.0/24=-
#
vlan 294
name --SRV_iLO_iDrack_etc--
#
vlan 299
name --SrvMng_240.0\24--
#
vlan 300
name --MANAGMENT--
#
vlan 301
name --Wi-Fi_MANAGMENT--
#
vlan 302
name -=Wi-Fi_MANAGMENT=-
#
vlan 350
name --VOICE_28.0/23--
#
vlan 448
name -=VideoKomos=-
#
vlan 500
name --Wi-Fi_Guest_35.0/24--
#
vlan 550
name --CISCO_ASA--
#
vlan 551
description TRANSIT_HSRP
name --TRANSIT_HSRP--
#
vlan 553
name VST-IZM_Peering
#
vlan 556
name P2P_iBGP_KOMOS_AS_over_DOMRU
#
vlan 557
name P2P_iBGP_KOMOS_AS_over_MTS
#
vlan 596
name P2P_RCOD-OCOD_ER_Telecom
#
vlan 597
name --BGP_TRANSIT_TO_ISR4431--
#
vlan 599
name MLK_TRUNK_TO_DC-MLK
#
vlan 600
name --PET_PRODACTION--
#
vlan 601
name --KMK_PRODACTION--
#
vlan 603
name --CRPT-Mark--
#
vlan 650
name --ISCSI--
#
vlan 999
description vm_for_net_control
#
vlan 1000
description dmz_env_1C_WMS_MLK_test
name --ELAR-TEST--
#
vlan 1100
description TEST_PI
#
vlan 1101
description SKYPE_FB
#
vlan 1102
description WAP
#
vlan 1113
name PI_RT-1-3
#
vlan 1500
description dmz_env_1C_WMS_MLK
#
vlan 1501
description safe_env_1C_WMS_MLK
#
vlan 1502
description dmz_env_NOVA_FORECAST
name dmz_env_NOVA_FORECAST
#
vlan 1503
description safe_env_NOVA_FORECAST
name safe_env_NOVA_FORECAST
#
vlan 1504
description dmz_env_viberbot_directum
#
vlan 1999
description env_1C_Licensing
#
vlan 2145
name Test_BGP
#
vlan 3915
name IZM_VLAN3915_SPLUNK
#
vlan 4030
name MLK_NATIVE_TO_DC-MLK
#
vlan 4031
name MLK-KCOD_VEAMREP
#
vlan 4032
name MLK-KCOD_SQLREPL
#
vlan 4033
name MLK-KCOD_SRVVCHA
#
vlan 4034
name MLK-KCOD_EXCHREPL
#
vlan 4035
name MLK-KCOD_SRVVCMG
#
acl name ACL_LOCAL advance
rule 5 permit ip destination 10.0.0.0 0.255.255.255
rule 10 permit ip destination 192.168.0.0 0.0.255.255
rule 15 permit ip destination 172.16.0.0 0.15.255.255
#
acl name ACL_ROUTE_PI advance
rule 5 permit ip source 91.240.179.0 0.0.0.255
rule 5 description KOMOS PI
rule 10 permit ip source 10.105.0.25 0
rule 10 description Directum ViberBot
#
acl name ACL_ROUTE_RT-1-1 advance
#
acl name ACL_ROUTE_RT-1-2 advance
#
acl name ACL_VTY advance
rule 5 permit tcp source 10.0.0.0 0.255.255.255 destination-port eq 22
rule 10 permit tcp source 192.168.0.0 0.0.255.255 destination-port eq 22
#
traffic classifier TC_ROUTE_LOCAL type or
if-match acl ACL_LOCAL
#
traffic classifier TC_ROUTE_PI type or
if-match acl ACL_ROUTE_PI
#
traffic classifier TC_ROUTE_RT-1-1 type or
if-match acl ACL_ROUTE_RT-1-1
#
traffic classifier TC_ROUTE_RT-1-2 type or
if-match acl ACL_ROUTE_RT-1-2
#
traffic behavior TB_ROUTE_LOCAL
statistics enable
#
traffic behavior TB_ROUTE_PI
statistics enable
redirect nexthop 172.30.30.60
#
traffic behavior TB_ROUTE_RT-1-1
statistics enable
redirect nexthop 10.4.239.18
#
traffic behavior TB_ROUTE_RT-1-2
statistics enable
redirect nexthop 10.4.239.19
#
traffic policy TP_GRT
classifier TC_ROUTE_LOCAL behavior TB_ROUTE_LOCAL precedence 5
classifier TC_ROUTE_PI behavior TB_ROUTE_PI precedence 10
classifier TC_ROUTE_RT-1-1 behavior TB_ROUTE_RT-1-1 precedence 15
classifier TC_ROUTE_RT-1-2 behavior TB_ROUTE_RT-1-2 precedence 20
#
aaa
local-user netadmin password irreversible-cipher $1c$)U-3A*36GD$!}HqHNa~071:P:Dc*Is<6,Sn%~#$|W.(WQ>*-F0Z$
local-user netadmin service-type ssh
local-user netadmin level 3
local-user akhmetzyanovrr password irreversible-cipher $1c$AA4*-PdAXL$KU=8L;<btA~(B1RE{n&L*q3_MUR/DRN|{\<T<r.<$
local-user akhmetzyanovrr service-type ssh
local-user akhmetzyanovrr level 3
#
authentication-scheme default
authentication-mode radius local
#
authorization-scheme default
#
accounting-scheme default
#
domain default
radius server group rad-serv
#
domain default_admin
radius server group rad-serv
#
stack
#
stack member 1 description SW-1-1-1
stack member 1 domain 10
stack member 1 priority 200
#
stack member 2 description SW-1-1-2
stack member 2 domain 10
stack member 2 priority 150
#
license
#
interface Vlanif255
description Servers_Terminal_FARM
ip address 10.4.2.254 255.255.255.0
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif256
description Server_Monitorin_1C
ip address 10.4.3.254 255.255.255.0
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif257
description KONTUR_DEV_MSSQL_5.0/27
ip address 10.4.5.30 255.255.255.224
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif288
description Servers_DEV
ip address 10.4.6.254 255.255.255.0
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif300
description MGM
ip address 10.4.254.1 255.255.255.0
#
interface Vlanif551
description --TRANSIT_HSRP--
ip address 10.4.239.23 255.255.255.240
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif597
description BGP TRANSIT
ip address 172.30.30.55 255.255.255.240
#
interface Vlanif1000
description Enterprise DMZ
#
interface Vlanif1500
description Enterprise DMZ
ip address 10.105.0.14 255.255.255.240
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif1501
description safe environment
ip address 10.105.0.22 255.255.255.248
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif1502
description dmz_env_NOVA_FORECAST
ip address 10.105.0.30 255.255.255.248
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif1503
description safe_env_NOVA_FORECAST
ip address 10.105.0.38 255.255.255.248
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif1504
description dmz_env_viberbot_directum
ip address 10.105.0.46 255.255.255.248
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface Vlanif1999
description 1C Licensing
ip address 10.105.199.6 255.255.255.248
icmp name host-unreachable receive disable
icmp name port-unreachable receive disable
icmp name redirect receive disable
#
interface MEth0/0/0
#
interface Eth-Trunk1
description [SRV] vmw027
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface Eth-Trunk2
description [SRV] vmw028
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface Eth-Trunk102
description [CORE] SW-1-1
port link-type trunk
port trunk allow-pass vlan 2 to 4094
mode lacp-static
#
interface Stack-Port1/1
#
interface Stack-Port2/1
#
interface 10GE1/0/1
description ET1 [SRV] vmw027 10Geth01
eth-trunk 1
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/2
description ET2 [SRV] vmw028 10Geth01
eth-trunk 2
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/3
description [SRV] shd007 10GethP1 A
port link-type trunk
port trunk allow-pass vlan 2 to 4094
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/4
description [SRV] shd007 10GethP1 B
port link-type trunk
port trunk allow-pass vlan 2 to 4094
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/5
description [SRV] bkp008_eth10G_1
port default vlan 289
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/6
description [SRV] mlk-izm-bkp009 10g_eth01
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/7
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/8
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/9
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/10
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/11
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/12
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/13
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/14
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/15
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/16
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/17
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/18
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/19
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/20
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/21
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/22
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/23
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/24
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/25
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/26
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/27
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/28
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/29
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/30
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/31
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/32
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/33
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/34
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/35
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/36
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/37
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/38
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/39
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/40
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/41
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
#
interface 10GE1/0/42
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
#
interface 10GE1/0/43
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/44
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/45
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/46
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/47
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE1/0/48
description [CORE] ET102 SW-1-1
eth-trunk 102
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/1
description ET1 [SRV] vmw027 10Geth02
eth-trunk 1
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/2
description [SRV] ET2 vmw028 10Geth02
eth-trunk 2
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/3
description [SRV] shd007 10GethP0 A
port link-type trunk
port trunk allow-pass vlan 2 to 4094
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/4
description [SRV] shd007 10GethP0 B
port link-type trunk
port trunk allow-pass vlan 2 to 4094
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/5
description [SRV] bkp008_eth10G_2
port default vlan 250
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/6
description [SRV] mlk-izm-bkp009 10g_eth02
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/7
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/8
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/9
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/10
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/11
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/12
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/13
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/14
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/15
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/16
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/17
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/18
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/19
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/20
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/21
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/22
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/23
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/24
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/25
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/26
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/27
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/28
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/29
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/30
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/31
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/32
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/33
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/34
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/35
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/36
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/37
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/38
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/39
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/40
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/41
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/42
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/43
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/44
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/45
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/46
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/47
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control action block
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 10GE2/0/48
description [CORE] ET102 SW-1-1
eth-trunk 102
storm control broadcast min-rate 300 max-rate 600
storm control multicast min-rate 300 max-rate 600
storm control enable log
device transceiver 10GBASE-FIBER
#
interface 100GE1/0/1
device transceiver 100GBASE-FIBER
#
interface 100GE1/0/2
#
interface 100GE1/0/3
#
interface 100GE1/0/4
#
interface 100GE1/0/5
port mode stack
stack-port 1/1
description [iSTACK]
port crc-statistics trigger error-down
device transceiver 100GBASE-COPPER
#
interface 100GE1/0/6
port mode stack
stack-port 1/1
description [iSTACK]
port crc-statistics trigger error-down
device transceiver 100GBASE-COPPER
#
interface 100GE2/0/1
device transceiver 100GBASE-FIBER
#
interface 100GE2/0/2
#
interface 100GE2/0/3
#
interface 100GE2/0/4
#
interface 100GE2/0/5
port mode stack
stack-port 2/1
description [iSTACK]
port crc-statistics trigger error-down
device transceiver 100GBASE-COPPER
#
interface 100GE2/0/6
port mode stack
stack-port 2/1
description [iSTACK]
port crc-statistics trigger error-down
device transceiver 100GBASE-COPPER
#
interface LoopBack11
description KOMOS_PI
#
interface NULL0
#
bgp 64512
graceful-restart
private-4-byte-as enable
peer 172.30.30.60 as-number 199014
peer 172.30.30.60 description IZH-MLK-IZM-RT-1-1
group PG_BGP_IZM internal
peer 172.30.30.57 as-number 64512
peer 172.30.30.57 group PG_BGP_IZM
peer 172.30.30.57 description IZH-MLK-IZM-RT-1-3
peer 172.30.30.58 as-number 64512
peer 172.30.30.58 group PG_BGP_IZM
peer 172.30.30.58 description IZH-MLK-IZM-RT-1-4
peer 172.30.30.62 as-number 64512
peer 172.30.30.62 group PG_BGP_IZM
peer 172.30.30.62 description IZH-MLK-IZM-SW-1-1
#
ipv4-family unicast
network 10.4.2.0 255.255.255.0
network 10.4.3.0 255.255.255.0
network 10.4.5.0 255.255.255.224
network 10.4.6.0 255.255.255.0
network 10.104.0.0 255.255.0.0
network 10.105.0.0 255.255.0.0
network 10.105.0.0 255.255.255.240
network 10.105.0.16 255.255.255.248
network 10.105.199.0 255.255.255.248
import-route static route-policy RP_REDIS_STATIC_PI
peer 172.30.30.58 enable
peer 172.30.30.60 enable
peer PG_BGP_IZM enable
peer PG_BGP_IZM route-policy RP_LOCAL_OUT export
peer PG_BGP_IZM next-hop-local
peer 172.30.30.57 enable
peer 172.30.30.57 group PG_BGP_IZM
peer 172.30.30.62 enable
peer 172.30.30.62 group PG_BGP_IZM
#
route-policy RP_LOCAL_OUT permit node 10
if-match ip-prefix PL_LOCAL_OUT
#
route-policy RP_REDIS_STATIC_PI permit node 10
if-match ip-prefix PL_REDIS_STATIC_PI
#
ip ip-prefix PL_LOCAL_OUT description FOR IZM iBGP Peers
ip ip-prefix PL_LOCAL_OUT index 10 permit 10.0.0.0 8 greater-equal 8 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 20 permit 192.168.0.0 16 greater-equal 16 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 30 permit 172.16.0.0 12 greater-equal 12 less-equal 32
ip ip-prefix PL_LOCAL_OUT index 40 permit 91.240.179.0 24 greater-equal 32 less-equal 32
ip ip-prefix PL_REDIS_STATIC_PI index 10 permit 91.240.179.0 24 greater-equal 32 less-equal 32
#
ip route-static 0.0.0.0 0.0.0.0 10.4.239.17 preference 253 description GW_HSRP_VLAN551
ip route-static 0.0.0.0 0.0.0.0 172.30.30.60 preference 254 description GW_RT-1-1
ip route-static 10.1.15.0 255.255.255.0 172.30.30.62 description TO_CISCO_ANYCONECT
ip route-static 10.104.0.0 255.255.0.0 NULL0 preference 255
ip route-static 10.105.0.0 255.255.0.0 NULL0 preference 255
ip route-static 91.240.179.15 255.255.255.255 NULL0 preference 255 description NAT_Directum_viberbot
#
snmp-agent
snmp-agent local-engineid 800007DB03DCEF8055A631
snmp-agent community read cipher %^%#lnlc&>9~X()U%2J9Fc&E[Q#eO4ZLX(M=jdImd>rA8QzSAQcz98/A]*TL~~B%SvF#,8/09A@Sp\1rO"96%^%#
#
snmp-agent sys-info location Izhevsk,V. Shosse,178
snmp-agent sys-info version v2c v3
#
snmp-agent protocol source-interface Vlanif300
snmp-agent protocol source-status all-interface
undo snmp-agent protocol source-status ipv6 all-interface
#
undo snmp-agent proxy protocol source-status all-interface
undo snmp-agent proxy protocol source-status ipv6 all-interface
#
lldp enable
#
stelnet server enable
ssh server-source -i Vlanif300
undo ssh server-source all-interface
undo ssh ipv6 server-source all-interface
ssh authorization-type default aaa
#
ssh server cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr
ssh server hmac sha2_512 sha2_256
ssh server key-exchange dh_group_exchange_sha256
#
ssh server publickey rsa
#
ssh server dh-exchange min-len 2048
#
ssh client publickey rsa
#
ssh client cipher aes256_gcm aes128_gcm aes256_ctr aes192_ctr aes128_ctr
ssh client hmac sha2_512 sha2_256
ssh client key-exchange dh_group_exchange_sha256
#
user-interface con 0
#
user-interface vty 0 4
acl ACL_VTY inbound
authentication-mode aaa
protocol inbound ssh
#
return