Building configuration...

Current configuration : 10212 bytes
!
! Last configuration change at 04:18:38 UTC Wed Jan 24 2007 by admin
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname do3560
!
no aaa new-model
ip subnet-zero
ip routing
no ip domain-lookup
ip name-server 192.168.50.1
!
ip dhcp pool 666
   network 192.168.66.0 255.255.255.0
   default-router 192.168.66.5
   dns-server 192.168.50.1 192.168.16.1
!
!
!
crypto pki trustpoint TP-self-signed-3876585984
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3876585984
 revocation-check none
 rsakeypair TP-self-signed-3876585984
!
!
crypto ca certificate chain TP-self-signed-3876585984
 certificate self-signed 01
  30820287 308201F0 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
  51312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 33383736 35383539 3834311E 301C0609 2A864886 F70D0109
  02160F64 6F333536 302E626C 73642E6E 6574301E 170D3933 30333031 30303031
  30365A17 0D323030 31303130 30303030 305A3051 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 38373635
  38353938 34311E30 1C06092A 864886F7 0D010902 160F646F 33353630 2E626C73
  642E6E65 7430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
  8100B469 97B1E9A1 1112A4F7 5DE884B3 4E9F4314 B4DEFFC8 6426D5A2 E25F5F4A
  3D0FF391 8270B63D D067DD9E AA5386E0 A460F6EB D14A7145 636E55F2 6275D091
  DEDFA9F7 92960826 6C933EBD E2E16030 63B4D3D8 4AE5700C 5AE6113D D9CDFD44
  95D8F749 7345E6B9 B42201F2 E8F90D10 11FF7354 1A5FC677 34887FDD 8F391663
  08510203 010001A3 6F306D30 0F060355 1D130101 FF040530 030101FF 301A0603
  551D1104 13301182 0F646F33 3536302E 626C7364 2E6E6574 301F0603 551D2304
  18301680 1469981F 2523E6EA B6F350FD E0AC0C43 111111CA A7301D06 03551D0E
  04160414 69981F25 23E6EAB6 F350FDE0 AC0C43FD 8F91CAA7 300D0609 2A864886
  F70D0101 04050003 8181002A 5EA872E7 69C0C115 ACE4ADDB EACEAE19 04A4CB8B
  5AF0EFF0 274AF7EE EBF91C07 799867BC AB1DB501 199DF0FD FDA45043 882EE5AE
  1C376CA4 2B82F3C3 11B0F8F1 EC67FFB4 614649E9 9DCEA2A2 06F0357B B70F977E
  288C85E0 C6CAFE76 9E8A0DC4 E9C8F2D4 1E6EBE54 C060B716 85D321B4 BCE58E25
  34B56BB5 A66F86D1 D1AF00
  quit
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
interface FastEthernet0/1
 description OSPF to AGRI
 no switchport
 ip address 10.50.1.20 255.255.255.0
 ip ospf cost 1
!
interface FastEthernet0/2
 description OSPF to SS
 no switchport
 ip address 10.50.9.20 255.255.255.0
 ip ospf cost 50
!
interface FastEthernet0/3
 description none
 switchport mode dynamic desirable
 shutdown
 spanning-tree portfast
!
interface FastEthernet0/4
 description WCMC
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/5
 description GES
 switchport access vlan 40
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/6
 description PJH
 switchport access vlan 50
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/7
 description EES
 switchport access vlan 60
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/8
 description WPS
 switchport access vlan 90
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/9
 description RES
 switchport access vlan 100
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/10
 switchport access vlan 200
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/11
 description RAEC
 switchport access vlan 160
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/12
 description DAN
 no switchport
 ip address 10.50.75.20 255.255.255.0
 ip policy route-map dsl01
!
interface FastEthernet0/13
 description DSL01
 no switchport
 ip address 10.51.1.1 255.255.255.0
!
interface FastEthernet0/14
 description DSL02
 no switchport
 ip address 10.51.2.1 255.255.255.0
!
interface FastEthernet0/15
 description DSL03
 no switchport
 ip address 10.51.3.1 255.255.255.0
!
interface FastEthernet0/16
 description DSL04
 no switchport
 ip address 10.51.4.1 255.255.255.0
!
interface FastEthernet0/17
 description WBINET
 no switchport
 ip address 10.51.5.1 255.255.255.0
!
interface FastEthernet0/18
 description sonicwalltest
 no switchport
 ip address 10.51.6.1 255.255.255.0
!
interface FastEthernet0/19
 switchport trunk encapsulation dot1q
 switchport mode dynamic desirable
 spanning-tree portfast
!
interface FastEthernet0/20
 switchport access vlan 500
 switchport mode access
!
interface FastEthernet0/21
 switchport access vlan 200
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/22
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 501
 switchport mode trunk
 spanning-tree portfast
!
interface FastEthernet0/23
 switchport access vlan 500
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/24
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 250,500,666
 switchport mode trunk
!
interface GigabitEthernet0/1
 description srvroom
 switchport access vlan 250
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/2
 description Trunk 2 Tech Office
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface Vlan1
 description Default VLAN
 ip address 192.168.0.5 255.255.255.0
 ip policy route-map dsl01
!
interface Vlan10
 ip address 192.168.1.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl04
!
interface Vlan40
 ip address 192.168.4.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl03
!
interface Vlan50
 ip address 192.168.5.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl03
!
interface Vlan60
 ip address 192.168.6.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl02
!
interface Vlan90
 ip address 192.168.9.5 255.255.255.0
 ip access-group wps_server_ip_out out
 ip directed-broadcast 150
 ip policy route-map dsl02
!
interface Vlan100
 ip address 192.168.10.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl03
!
interface Vlan160
 ip address 192.168.16.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl03
!
interface Vlan200
 ip address 192.168.20.5 255.255.255.0
 ip directed-broadcast 150
 ip policy route-map dsl02
!
interface Vlan250
 ip address 192.168.25.5 255.255.255.0
 ip policy route-map dsl01
!
interface Vlan500
 ip address 192.168.50.5 255.255.255.0
 ip helper-address 192.168.16.255
 ip helper-address 192.168.10.255
 ip helper-address 192.168.6.255
 ip helper-address 192.168.4.255
 ip helper-address 192.168.1.255
 ip helper-address 192.168.5.255
 ip helper-address 192.168.9.255
 ip helper-address 192.168.3.255
 ip helper-address 192.168.20.255
 ip helper-address 192.168.2.255
 ip helper-address 192.168.8.255
 ip helper-address 192.168.18.255
 ip helper-address 192.168.7.255
 ip policy route-map dsl01
!
interface Vlan666
 ip address 192.168.66.5 255.255.255.0
 ip policy route-map swinet
!
router ospf 65001
 router-id 0.0.0.20
 log-adjacency-changes
 redistribute connected
 redistribute static
 network 10.50.1.0 0.0.0.255 area 1
 network 10.50.9.0 0.0.0.255 area 1
 network 10.50.75.0 0.0.0.255 area 1
 network 10.51.1.0 0.0.0.255 area 1
 network 10.51.2.0 0.0.0.255 area 1
 network 10.51.3.0 0.0.0.255 area 1
 network 10.51.4.0 0.0.0.255 area 1
 network 10.51.5.0 0.0.0.255 area 1
 network 10.51.6.0 0.0.0.255 area 1
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.51.2.2
ip route 10.50.99.0 255.255.255.0 10.51.1.2
ip route 10.50.100.0 255.255.255.0 10.51.1.2
ip route 192.168.90.0 255.255.255.0 10.51.5.2
ip http server
ip http secure-server
!
!
ip access-list extended inet
 deny   ip any 192.168.0.0 0.0.255.255
 deny   ip any 10.50.0.0 0.0.255.255
 deny   ip any 10.51.0.0 0.0.255.255
 deny   ip any 10.90.0.0 0.0.255.255
 permit ip any any
ip access-list extended inet-wiband
 deny   ip any 192.168.0.0 0.0.255.255
 deny   ip any 10.50.0.0 0.0.255.255
 deny   ip any 10.51.0.0 0.0.255.255
 permit ip host 192.168.25.3 any
ip access-list extended noping
 deny   icmp any any
 permit ip any any
ip access-list extended servers
 deny   ip any 192.168.0.0 0.0.255.255
 deny   ip any 10.50.0.0 0.0.255.255
 deny   ip any 10.51.0.0 0.0.255.255
 permit ip host 192.168.25.10 any
 permit ip host 192.168.25.11 any
ip access-list extended techncmail
 deny   ip any 192.168.0.0 0.0.255.255
 deny   ip any 10.50.0.0 0.0.255.255
 deny   ip any 10.51.0.0 0.0.255.255
 permit ip host 192.168.25.25 any
ip access-list extended wps_server_ip_out
 permit ip 192.168.9.0 0.0.0.255 host 192.168.9.6
 deny   ip any host 192.168.9.6
 permit ip any any
!
access-list 150 permit udp host 192.168.50.100 any
access-list 150 permit udp host 192.168.50.200 any
route-map swinet permit 10
 match ip address inet
 set ip next-hop 10.51.6.4
!
route-map do-inet permit 10
 match ip address inet
 set ip next-hop 10.51.2.2
!
route-map dsl03 permit 10
 match ip address inet
 set ip next-hop 10.51.3.2
!
route-map dsl02 permit 10
 match ip address inet
 set ip next-hop 10.51.2.2
!
route-map dsl01 permit 6
 match ip address inet-wiband
 set ip next-hop 10.51.5.2
!
route-map dsl01 permit 8
 match ip address techncmail
 set ip next-hop 10.51.4.2
!
route-map dsl01 permit 9
 match ip address servers
 set ip next-hop 10.51.5.2
!
route-map dsl01 permit 10
 match ip address inet
 set ip next-hop 10.51.1.2
!
route-map dsl04 permit 5
 match ip address techncmail
 set ip next-hop 10.51.1.2
!
route-map dsl04 permit 10
 match ip address inet
 set ip next-hop 10.51.4.2
!
control-plane
!
banner motd ^C
BLSD do3560 ^C
!
line con 0
line vty 0 4
 exec-timeout 0 0
 login local
line vty 5 15
 exec-timeout 0 0
 login local
!
mac-address-table static 0000.0060.09b2 vlan 10 drop
ntp clock-period 36028617
ntp server 192.168.50.1 key 0 prefer
end

do3560#