Switch-2 config --------------- ip subnet-zero no ip source-route no ip domain-lookup ip domain-name HSBU ! ! no ip bootp server ip vrf mgmtVrf ! login block-for 60 attempts 5 within 120 login delay 5 login on-failure login on-success vtp domain Null vtp mode transparent ! ! ! power redundancy-mode redundant ! ! ! ! ! ! spanning-tree mode rapid-pvst spanning-tree logging spanning-tree portfast bpdufilter default spanning-tree extend system-id no spanning-tree vlan 100 spanning-tree vlan 99,200 priority 61440 ! vlan internal allocation policy ascending ! vlan 99 name External ! vlan 100 name SZ ! vlan 200 name ADMIN ! ip ssh version 2 ip scp server enable ! ! interface Port-channel1 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 99,100,200 switchport mode trunk spanning-tree cost 100 ! interface Port-channel2 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk ! interface Port-channel3 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk ! interface Port-channel4 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk ! interface Port-channel5 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk ! interface Port-channel6 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk ! interface Port-channel7 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk ! interface Port-channel8 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk ! interface Port-channel9 switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk ! interface FastEthernet1 ip vrf forwarding mgmtVrf no ip address speed auto duplex auto ! interface GigabitEthernet1/1 description HSBU_SZ1A1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 99,100,200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap channel-group 1 mode on ! interface GigabitEthernet1/2 description HSBU_SZ1A1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 99,100,200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap channel-group 1 mode on ! interface GigabitEthernet1/3 description HSBU_SZ1A1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 99,100,200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap channel-group 1 mode on ! interface GigabitEthernet1/4 description HSBU_SZ1A1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 99,100,200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap channel-group 1 mode on spanning-tree cost 100 ! interface GigabitEthernet1/5 description Connection to Customer Admin/ UPLINK to customer switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree cost 100 ! interface GigabitEthernet1/6 description Router1B uplink to CustomerD`IN switchport access vlan 99 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/7 description OPTIONAL- FW conection switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/8 description SMU1A switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/9 description SPE-20F-DC1 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/10 description MAU1(BALLNGER) switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/11 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/12 description IBM BCH-T1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 2 mode on spanning-tree portfast ! interface GigabitEthernet1/13 description IBM BCH-T1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 2 mode on spanning-tree portfast ! interface GigabitEthernet1/14 description IBM BCH-T1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 3 mode on spanning-tree portfast ! interface GigabitEthernet1/15 description IBM BCH-T1 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 3 mode on spanning-tree portfast ! interface GigabitEthernet1/16 description IBM BCH-T2 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 4 mode on spanning-tree portfast ! interface GigabitEthernet1/17 description IBM BCH-T2 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 4 mode on spanning-tree portfast ! interface GigabitEthernet1/18 description IBM BCH-T2 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 5 mode on spanning-tree portfast ! interface GigabitEthernet1/19 description IBM BCH-T2 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 5 mode on spanning-tree portfast ! interface GigabitEthernet1/20 description IBM BCH-T3 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 6 mode on spanning-tree portfast ! interface GigabitEthernet1/21 description IBM BCH-T3 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 6 mode on spanning-tree portfast ! interface GigabitEthernet1/22 description IBM BCH-T3 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 7 mode on spanning-tree portfast ! interface GigabitEthernet1/23 description IBM BCH-T3 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 7 mode on spanning-tree portfast ! interface GigabitEthernet1/24 description IBM BCH-T4 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 8 mode on spanning-tree portfast ! interface GigabitEthernet1/25 description IBM BCH-T4 switchport trunk encapsulation dot1q switchport trunk allowed vlan 100 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 8 mode on spanning-tree portfast ! interface GigabitEthernet1/26 description IBM BCH-T4 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 9 mode on spanning-tree portfast ! interface GigabitEthernet1/27 description IBM BCH-T4 switchport trunk encapsulation dot1q switchport trunk allowed vlan 200 switchport mode trunk logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable channel-group 9 mode on spanning-tree portfast ! interface GigabitEthernet1/28 description DSU1A(NETRA T2000) switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/29 description DSU1B(NETRA T2000) switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/30 description CAS 1 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/31 description CAS 2 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/32 description TAG1 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/33 description TAG2 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/34 description TAG3 switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/35 description TAG1 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/36 description TAG2 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/37 description TAG3 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/38 description CAS 1 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/39 description CAS 2 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/40 description DSU1A(NETRA T2000) switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/41 description DSU1B(NETRA T2000) switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/42 description MAU1(BALLNGER) switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/43 description Reserved for HSBU Expansion switchport access vlan 100 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap ! interface GigabitEthernet1/44 description SMU1A switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status storm-control broadcast level 1.00 storm-control action trap ! interface GigabitEthernet1/45 description IBM BCH-T1 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status media-type rj45 storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/46 description IBM BCH-T2 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status media-type rj45 storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/47 description IBM BCH-T3 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status media-type rj45 storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface GigabitEthernet1/48 description IBM BCH-T4 switchport access vlan 200 switchport mode access logging event link-status logging event trunk-status media-type rj45 storm-control broadcast level 1.00 storm-control action trap no cdp enable spanning-tree portfast ! interface Vlan1 no ip address shutdown ! interface Vlan99 description External ip address 10.255.3.6 255.255.255.0 no ip redirects no ip proxy-arp no ip route-cache cef no ip route-cache standby 99 ip 10.255.3.4 standby 99 timers 1 2 standby 99 preempt standby 99 track GigabitEthernet1/6 ! interface Vlan100 description SZ ip address 172.17.101.3 255.255.255.128 no ip redirects no ip proxy-arp no ip route-cache cef no ip route-cache standby 101 ip 172.17.101.1 standby 101 timers 1 2 standby 101 preempt standby 101 track GigabitEthernet1/4 ! interface Vlan200 description ADMIN ip address 172.17.101.133 255.255.255.128 ip access-group ICMP in ip access-group ISOLATE out no ip redirects no ip proxy-arp no ip route-cache cef no ip route-cache standby 100 ip 172.17.101.134 standby 100 timers 1 2 standby 100 preempt standby 100 track GigabitEthernet1/5 !