-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathA3.txt
181 lines (181 loc) · 3.75 KB
/
A3.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
hostname SCP_A3
!
boot-start-marker
boot-end-marker
!
!
system mtu routing 1500
vtp mode transparent
!
aaa new-model
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
!
!
tacacs-server host 10.9.240.8
tacacs-server key casestudy1
!
username student privilege 15 secret cisco
!
ip tacacs source-interface vlan 240
!
no ip domain-lookup
!
!
ip dhcp snooping
ip dhcp snooping vlan 31-34
ip arp inspection vlan 31-34
!
logging 10.9.240.8
!
!
no ip dhcp snooping information option
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
spanning-tree portfast bpduguard default
!
vlan internal allocation policy ascending
!
vlan 31
name Facilities3
!
vlan 32
name R&D3
!
vlan 33
name Sales3
!
vlan 34
name Voice
!
vlan 240
name Management
!
vlan 999
name BlackHole
!
vlan 1001
name Native
!
!
!
access-list 2 remark allow corporate into management
access-list 2 permit 10.0.0.0 0.0.255.255 log
access-list 2 permit 10.9.240.0 0.0.0.255 log
access-list 2 deny any log
!
!
!
interface Port-channel1
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
ip dhcp snooping trust
ip arp inspection trust
!
interface Port-channel2
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
ip dhcp snooping trust
ip arp inspection trust
!
interface FastEthernet0/1
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
channel-group 1 mode desirable non-silent
ip dhcp snooping trust
ip arp inspection trust
!
interface FastEthernet0/2
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
channel-group 1 mode desirable non-silent
ip dhcp snooping trust
ip arp inspection trust
!
interface FastEthernet0/3
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
channel-group 2 mode desirable non-silent
ip dhcp snooping trust
ip arp inspection trust
!
interface FastEthernet0/4
no spanning-tree portfast
switchport trunk native vlan 1001
switchport trunk allowed vlan 31-34,240,1001
switchport mode trunk
channel-group 2 mode desirable non-silent
ip dhcp snooping trust
ip arp inspection trust
!
interface FastEthernet0/5
switchport mode access
ip verify source
ip dhcp snooping limit rate 5
!
interface FastEthernet0/6
switchport mode access
ip verify source
ip dhcp snooping limit rate 5
!
interface FastEthernet0/7
description RD
switchport mode access
ip verify source
ip dhcp snooping limit rate 5
switchport port-security mac-address sticky
switchport port-security maximum 2
switchport port-security violation shutdown
!
interface FastEthernet0/8
description RD
switchport mode access
ip verify source
ip dhcp snooping limit rate 5
switchport port-security mac-address sticky
switchport port-security maximum 2
switchport port-security violation shutdown
!
interface range FastEthernet0/9-24
switchport mode access
ip verify source
ip dhcp snooping limit rate 5
!
interface Vlan1
no ip address
shutdown
!
interface Vlan240
ip address 10.9.240.6 255.255.255.0
!
ip http server
ip http secure-server
!
!
line con 0
exec-timeout 180 0
logging synchronous
line vty 0 4
exec-timeout 180 0
logging synchronous
login authentication default
access-class 2 in
line vty 5 15
login
!
ntp server 10.0.0.2
!
end