! interface GigabitEthernet0/0 speed 1000 duplex full no nameif no security-level no ip address ! interface GigabitEthernet0/1 no nameif no security-level no ip address ! interface GigabitEthernet0/2 nameif Inside security-level 100 ip address 192.168.1.5 255.255.255.224 standby 192.168.1.6 ! ! interface Redundant1 member-interface GigabitEthernet0/0 member-interface GigabitEthernet0/1 nameif Outside security-level 0 ip address 1.1.1.112 255.255.255.0 ! route Outside 0.0.0.0 0.0.0.0 1.1.1.1 1 route Inside 0.0.0.0 0.0.0.0 192.168.1.1 tunneled nat (Inside,Outside) source dynamic any pat-pool PAT_POOL flat include-reserve round-robin ======================================================== INS-SW-3850-1# ! interface Port-channel1 description connection to INS-SW-3850-2 switchport mode trunk ! interface Vlan100 ip address 192.168.1.3 255.255.255.224 ! interface GigabitEthernet1/0/39 description connection to primary sourcefire port 1 (OARnet) switchport access vlan 100 switchport mode access switchport port-security maximum 3 switchport port-security violation restrict switchport port-security aging time 3 switchport port-security aging type inactivity switchport port-security no logging event link-status no snmp trap link-status snmp ifindex persist spanning-tree portfast trunk spanning-tree link-type point-to-point ! ! interface GigabitEthernet1/0/41 description connection to primary sourcefire port5 (Spectrum) switchport access vlan 100 switchport mode access switchport port-security maximum 3 switchport port-security violation restrict switchport port-security aging time 3 switchport port-security aging type inactivity switchport port-security no logging event link-status no snmp trap link-status snmp ifindex persist spanning-tree portfast trunk spanning-tree link-type point-to-point ! interface GigabitEthernet1/0/46 description Uplink to ASR1 int gi0/0/4 switchport access vlan 100 switchport mode access no logging event link-status no snmp trap link-status snmp ifindex persist spanning-tree portfast spanning-tree bpduguard enable spanning-tree link-type point-to-point spanning-tree guard root ! interface GigabitEthernet1/0/47 description uplink to Edge-Block-2 (rack Edge 1, RU27) int Gi0/47 (member of Po1) switchport mode trunk no logging event link-status no snmp trap link-status snmp ifindex persist channel-group 1 mode active spanning-tree portfast trunk spanning-tree link-type point-to-point ! interface GigabitEthernet1/0/48 description uplink to Edge-Block-2 (rack Edge 1, RU27) int Gi0/48 (member of Po1) switchport mode trunk no logging event link-status no snmp trap link-status snmp ifindex persist channel-group 1 mode active spanning-tree portfast trunk spanning-tree link-type point-to-point ! ip default-gateway 192.168.1.1 ===================================================== ASR# ! interface GigabitEthernet0/0/4 description *** to Primary Inside Switch *** backup interface GigabitEthernet0/0/5 ip flow monitor MONITOR output ip address 192.168.1.2 255.255.255.224 ip wccp 91 redirect in ip wccp 96 redirect in ip pim sparse-mode standby 1 ip 192.168.1.1 standby 1 priority 200 standby 1 preempt delay 10 negotiation auto end ! interface GigabitEthernet0/0/5 description *** to Secondary Inside Switch *** ip address 192.168.1.10 255.255.255.224 ip wccp 91 redirect in ip pim sparse-mode standby 1 priority 200 standby 1 preempt delay 10 negotiation auto end !