464 lines
12 KiB
Plaintext
464 lines
12 KiB
Plaintext
Current configuration : 12348 bytes
|
|
!
|
|
! Last configuration change at 14:50:05 UTC Tue Oct 24 2023 by admin
|
|
!
|
|
version 16.12
|
|
no service pad
|
|
service timestamps debug datetime msec
|
|
service timestamps log datetime msec
|
|
service call-home
|
|
no platform punt-keepalive disable-kernel-core
|
|
!
|
|
hostname 1st_Plt_Switch
|
|
!
|
|
!
|
|
vrf definition Mgmt-vrf
|
|
!
|
|
address-family ipv4
|
|
exit-address-family
|
|
!
|
|
address-family ipv6
|
|
exit-address-family
|
|
!
|
|
enable secret 9 $9$OskBuLWP800Gu.$pbu8Tqf8.X8HY/Yg3pN1AtrRu2TWk6vQArlKSlRnDfI
|
|
!
|
|
aaa new-model
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
aaa session-id common
|
|
switch 1 provision ws-c3850-24t
|
|
!
|
|
!
|
|
!
|
|
!
|
|
call-home
|
|
! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
|
|
! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
|
|
contact-email-addr sch-smart-licensing@cisco.com
|
|
profile "CiscoTAC-1"
|
|
active
|
|
destination transport-method http
|
|
no destination transport-method email
|
|
ip routing
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
ip domain name 1stplt.dco.mil
|
|
!
|
|
ip dhcp pool DHCP
|
|
network 10.1.10.0 255.255.255.128
|
|
default-router 10.1.10.1
|
|
dns-server 10.1.10.162 10.1.10.163
|
|
!
|
|
!
|
|
!
|
|
login on-success log
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
vtp domain dco.mil
|
|
vtp mode off
|
|
no device-tracking logging theft
|
|
!
|
|
crypto pki trustpoint SLA-TrustPoint
|
|
revocation-check crl
|
|
!
|
|
crypto pki trustpoint TP-self-signed-3800366437
|
|
enrollment selfsigned
|
|
subject-name cn=IOS-Self-Signed-Certificate-3800366437
|
|
revocation-check none
|
|
rsakeypair TP-self-signed-3800366437
|
|
!
|
|
crypto pki trustpoint TP-self-signed-3384119059
|
|
enrollment selfsigned
|
|
subject-name cn=IOS-Self-Signed-Certificate-3384119059
|
|
revocation-check none
|
|
rsakeypair TP-self-signed-3384119059
|
|
!
|
|
!
|
|
crypto pki certificate chain SLA-TrustPoint
|
|
certificate ca 01
|
|
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
|
|
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
|
|
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
|
|
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
|
|
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
|
|
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
|
|
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
|
|
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
|
|
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
|
|
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
|
|
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
|
|
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
|
|
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
|
|
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
|
|
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
|
|
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
|
|
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
|
|
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
|
|
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
|
|
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
|
|
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
|
|
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
|
|
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
|
|
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
|
|
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
|
|
D697DF7F 28
|
|
quit
|
|
crypto pki certificate chain TP-self-signed-3800366437
|
|
certificate self-signed 01
|
|
30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
|
|
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
|
|
69666963 6174652D 33383030 33363634 3337301E 170D3233 30343035 31333435
|
|
31355A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649
|
|
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38303033
|
|
36363433 37308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
|
|
0A028201 0100AD8A B999EB92 AD5AB864 BF6C2079 0EF9B546 3040FBCD BE781ADD
|
|
77EEC990 E8CB1FB8 EB971471 AEED7B6B 4951005E 0289667A DDB74E13 917403FE
|
|
E30A5257 DAEF32C1 A90E2C82 B04814EC 10803963 E7033BD9 A05E09EB 1DD86788
|
|
8B528560 6E3761A7 6D92D2A5 A11E72B8 3D132D37 97BDD2B6 F7E1F67D C3208B33
|
|
1744083D 759D1400 0198E81B 7F01C53A C7F81DAF 93629DB0 9E423D6A DF76E61C
|
|
1C1DADD6 181ABA20 D86796C8 A68C91C5 8B49CF73 36CC33FB 847F30BC 61B46590
|
|
57476ECD 3CFB6CEE 5FB54424 C9DD7F89 4080B9C7 CD70E6DE 4A47D8C7 FBE04A92
|
|
CAED8597 07361B0E 2A76BED6 71D155BA 913024B1 245BC040 CAC337B8 849711B7
|
|
BCA66AC8 54A70203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
|
|
301F0603 551D2304 18301680 1413F83D 504DAAB1 D9927A4F 04E4D696 EB7BAFAB
|
|
39301D06 03551D0E 04160414 13F83D50 4DAAB1D9 927A4F04 E4D696EB 7BAFAB39
|
|
300D0609 2A864886 F70D0101 05050003 82010100 45BC1C1A F68F49C1 2C2BDCED
|
|
80ED19BA C8606730 DA5712EB C6EF7BE3 D9AD37C9 5B9EA63A E17F3115 CCA45C14
|
|
75C34FF9 B781472A DDB10304 844E31B8 1F1E4C69 924FF820 53BE9DDB 47596F1E
|
|
08014652 9AE1749A 976F9CB4 D9E02AA7 F1737462 A0323DD9 105D5C0A 562065CF
|
|
59BEE816 50F2142C 96FB4BD1 7E2DF67B 2F795A49 22972B09 E1F0099C 08D8312B
|
|
BE5C94DB 3BE08A33 247EDB30 8FB1F5AE 4C5BB4B7 B5551B2E D59CBA3B 956E11FF
|
|
7B52EF84 DF75B054 027B187B D1EBC07A BE3610D2 7F89B3F0 68CAB1DB 72C1C864
|
|
81FE6FED 249C854E 92A8C461 C12A1F75 9030C624 9F5BE259 36ADCF9F CBC88B76
|
|
5A223D26 8315EE42 F9ECF366 58F93761 E29C03FC
|
|
quit
|
|
crypto pki certificate chain TP-self-signed-3384119059
|
|
!
|
|
!
|
|
license boot level ipservicesk9
|
|
!
|
|
!
|
|
diagnostic bootup level minimal
|
|
!
|
|
spanning-tree mode rapid-pvst
|
|
spanning-tree extend system-id
|
|
memory free low-watermark processor 79468
|
|
!
|
|
username admin password 0 DM55Password!@
|
|
!
|
|
redundancy
|
|
mode sso
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
transceiver type all
|
|
monitoring
|
|
!
|
|
vlan 3,5
|
|
!
|
|
vlan 6
|
|
name VMOTION
|
|
!
|
|
vlan 7
|
|
name Provisioning
|
|
!
|
|
vlan 10
|
|
name users
|
|
!
|
|
vlan 40
|
|
name DMZ
|
|
!
|
|
vlan 60
|
|
!
|
|
!
|
|
class-map match-any system-cpp-police-topology-control
|
|
description Topology control
|
|
class-map match-any system-cpp-police-sw-forward
|
|
description Sw forwarding, L2 LVX data, LOGGING
|
|
class-map match-any system-cpp-default
|
|
description EWLC control, EWLC data, Inter FED
|
|
class-map match-any system-cpp-police-sys-data
|
|
description Learning cache ovfl, High Rate App, Exception, EGR Exception, NFL SAMPLED DATA, RPF Failed
|
|
class-map match-any system-cpp-police-punt-webauth
|
|
description Punt Webauth
|
|
class-map match-any system-cpp-police-l2lvx-control
|
|
description L2 LVX control packets
|
|
class-map match-any system-cpp-police-forus
|
|
description Forus Address resolution and Forus traffic
|
|
class-map match-any system-cpp-police-multicast-end-station
|
|
description MCAST END STATION
|
|
class-map match-any system-cpp-police-multicast
|
|
description Transit Traffic and MCAST Data
|
|
class-map match-any system-cpp-police-l2-control
|
|
description L2 control
|
|
class-map match-any system-cpp-police-dot1x-auth
|
|
description DOT1X Auth
|
|
class-map match-any system-cpp-police-data
|
|
description ICMP redirect, ICMP_GEN and BROADCAST
|
|
class-map match-any system-cpp-police-stackwise-virt-control
|
|
description Stackwise Virtual
|
|
class-map match-any non-client-nrt-class
|
|
class-map match-any system-cpp-police-routing-control
|
|
description Routing control and Low Latency
|
|
class-map match-any system-cpp-police-protocol-snooping
|
|
description Protocol snooping
|
|
class-map match-any system-cpp-police-dhcp-snooping
|
|
description DHCP snooping
|
|
class-map match-any system-cpp-police-system-critical
|
|
description System Critical and Gold Pkt
|
|
!
|
|
policy-map system-cpp-policy
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
interface Port-channel1
|
|
switchport trunk allowed vlan 10,20,30
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet0/0
|
|
vrf forwarding Mgmt-vrf
|
|
no ip address
|
|
shutdown
|
|
negotiation auto
|
|
!
|
|
interface GigabitEthernet1/0/1
|
|
description Cyber Pack VSWI
|
|
switchport trunk native vlan 100
|
|
switchport trunk allowed vlan 3,10,20,30,40,50
|
|
switchport mode trunk
|
|
switchport nonegotiate
|
|
spanning-tree portfast trunk
|
|
!
|
|
interface GigabitEthernet1/0/2
|
|
description MiniRax1 VSWI
|
|
switchport trunk allowed vlan 10,20,30
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/3
|
|
description MiniRax2 VSWI
|
|
switchport trunk allowed vlan 10,30
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/4
|
|
description MiniRax3 VSWI
|
|
switchport trunk allowed vlan 10,30
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/5
|
|
description CyberPax MGMT
|
|
switchport trunk native vlan 100
|
|
switchport trunk allowed vlan 5-8
|
|
switchport mode trunk
|
|
switchport nonegotiate
|
|
spanning-tree portfast trunk
|
|
!
|
|
interface GigabitEthernet1/0/6
|
|
description MiniRax1 MGMT
|
|
switchport trunk native vlan 100
|
|
switchport trunk allowed vlan 5-8
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/7
|
|
description MiniRax2 MGMT
|
|
switchport trunk native vlan 100
|
|
switchport trunk allowed vlan 5-8
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/8
|
|
description MiniRax3 MGMT
|
|
switchport trunk native vlan 100
|
|
switchport trunk allowed vlan 5-8
|
|
switchport mode trunk
|
|
!
|
|
interface GigabitEthernet1/0/9
|
|
description Gigamon MGMT
|
|
switchport access vlan 10
|
|
switchport mode access
|
|
!
|
|
interface GigabitEthernet1/0/10
|
|
description NAS MGMT
|
|
switchport access vlan 10
|
|
switchport mode access
|
|
!
|
|
interface GigabitEthernet1/0/11
|
|
description NAS Link
|
|
switchport access vlan 20
|
|
switchport mode access
|
|
!
|
|
interface GigabitEthernet1/0/12
|
|
description IPMI
|
|
switchport access vlan 10
|
|
switchport mode access
|
|
!
|
|
interface GigabitEthernet1/0/13
|
|
description Laptop
|
|
switchport access vlan 5
|
|
!
|
|
interface GigabitEthernet1/0/14
|
|
description Laptop
|
|
switchport access vlan 60
|
|
switchport mode access
|
|
!
|
|
interface GigabitEthernet1/0/15
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/16
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/17
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/18
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/19
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/20
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/21
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/22
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/23
|
|
description Laptop
|
|
switchport access vlan 60
|
|
!
|
|
interface GigabitEthernet1/0/24
|
|
description Laptop
|
|
switchport access vlan 3
|
|
!
|
|
interface GigabitEthernet1/1/1
|
|
!
|
|
interface GigabitEthernet1/1/2
|
|
!
|
|
interface GigabitEthernet1/1/3
|
|
!
|
|
interface GigabitEthernet1/1/4
|
|
!
|
|
interface TenGigabitEthernet1/1/1
|
|
!
|
|
interface TenGigabitEthernet1/1/2
|
|
!
|
|
interface TenGigabitEthernet1/1/3
|
|
!
|
|
interface TenGigabitEthernet1/1/4
|
|
!
|
|
interface Vlan1
|
|
no ip address
|
|
shutdown
|
|
!
|
|
interface Vlan3
|
|
description Routing Interface
|
|
ip address 10.1.3.1 255.255.255.0
|
|
!
|
|
interface Vlan5
|
|
description ESXi Management
|
|
ip address 10.1.5.1 255.255.255.0
|
|
!
|
|
interface Vlan6
|
|
description ESXi vMotion
|
|
ip address 10.1.6.1 255.255.255.0
|
|
!
|
|
interface Vlan7
|
|
description ESXi Provisioning
|
|
ip address 10.1.7.1 255.255.255.0
|
|
!
|
|
interface Vlan10
|
|
description Domain Services
|
|
ip address 10.1.10.1 255.255.255.0
|
|
!
|
|
interface Vlan20
|
|
description ***MANAGEMENT***
|
|
no ip address
|
|
!
|
|
interface Vlan30
|
|
description ***SERVERS***
|
|
no ip address
|
|
!
|
|
interface Vlan40
|
|
description Host Data Collection
|
|
no ip address
|
|
!
|
|
interface Vlan60
|
|
description USER
|
|
ip address 10.1.60.1 255.255.255.0
|
|
!
|
|
ip forward-protocol nd
|
|
ip http server
|
|
ip http authentication local
|
|
ip http secure-server
|
|
ip route 0.0.0.0 0.0.0.0 10.1.3.2
|
|
ip route 10.0.0.0 255.255.0.0 10.0.3.1
|
|
ip route 10.1.15.0 255.255.255.0 10.0.3.4
|
|
ip route 10.1.16.0 255.255.255.0 10.0.3.4
|
|
ip route 10.1.20.0 255.255.255.0 10.0.3.4
|
|
ip route 10.1.30.0 255.255.255.0 10.0.3.4
|
|
ip route 10.1.40.0 255.255.255.0 10.0.3.14
|
|
ip route 10.1.50.0 255.255.255.0 10.0.3.4
|
|
ip route 10.2.0.0 255.255.0.0 10.0.3.5
|
|
ip route 10.3.0.0 255.255.0.0 10.0.3.7
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
control-plane
|
|
service-policy input system-cpp-policy
|
|
!
|
|
!
|
|
line con 0
|
|
logging synchronous
|
|
stopbits 1
|
|
line aux 0
|
|
stopbits 1
|
|
line vty 0 4
|
|
transport input ssh
|
|
line vty 5 15
|
|
transport input ssh
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
end |