version 17.3
service timestamps debug datetime msec
service timestamps log datetime msec
service call-home
platform punt-keepalive disable-kernel-core
!
hostname TCG-HUB-NETWORK-SWITCH
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
!
no aaa new-model
switch 1 provision c9300-48p
!
!
!
!
!
ip name-server 4.2.2.2 1.1.1.1 8.8.8.8
!
!
!
login on-success log
!
!
!
!
!
vtp domain none
vtp mode transparent
no device-tracking logging theft
!
crypto pki trustpoint TP-self-signed-1765463749
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-1765463749
 revocation-check none
 rsakeypair TP-self-signed-1765463749
!
crypto pki trustpoint SLA-TrustPoint
 enrollment terminal
 revocation-check crl
!
!
crypto pki certificate chain TP-self-signed-1765463749
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
  69666963 6174652D 31373635 34363337 3439301E 170D3231 31313330 32313434
  32375A17 0D333131 31333032 31343432 375A3031 312F302D 06035504 03132649
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37363534
  36333734 39308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
  0A028201 0100C848 34B85C6F D5D201C5 3B003662 6B2A69CD 1FC31637 53867F23
  8AD5D76A A754EB68 B1B006C1 5E62D41B C30D557C 4557B7B5 7B2E9AFB C2A8A565
  A3B455C3 4969BB56 AEBD2C9A 9119093C F45A9814 049D3AD5 8F7DF6B9 87AFE58C
  88E3FF53 B86728D0 08664E17 31B735F7 CEAAAD06 04C2A0D9 C577AB52 26421BBA
  9D99B96B 3A27C59B F9A7CF41 DB6B194A 7586307D D0893CF2 F822E21F 699DB6DE
  0F0EC84A 8887AC0E CDED5062 9BD253CE 4DB7E53E 50313D1D E7B8FD86 4B7A8AE1
  D5CAA040 78F073ED D1097DEE C0EBA7E5 8CDBFD26 C9B4885F 7D8C4036 20C12AF9
  3D3095A2 6AB2B029 E85EF13D 14386ABF CD70EA56 7965E759 8B5058C6 1BF9314F
  892176FB 18EF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
  301F0603 551D2304 18301680 14176647 00A69344 753D8EFF FC1B7BD5 A68E11BD
  7E301D06 03551D0E 04160414 17664700 A6934475 3D8EFFFC 1B7BD5A6 8E11BD7E
  300D0609 2A864886 F70D0101 05050003 82010100 42E19307 FB4E57EA 261F1176
  C5C61F77 C50E3D29 6FC5C516 0C09A62A 778FF430 C2B439B1 15FB8ABF 34734DBD
  8A6C3744 E2CD25D9 EB9AC38F A045F3B5 1DA60A40 E60FEF44 E21E477D 9DD2A4B7
  DDB77EF0 F72332D4 F467DB25 90D47B55 EC119A22 9B7392A7 82C85542 6513336D
  1B5AE908 A01F5EAD 5F0CBBDD 6C24AE88 7C7847D5 8CA7EC8A B3A38352 47B971A0
  ADA32156 92E29BAB FC4064D7 4C6F76B5 AB2545CE BF58EF96 2DB1BD38 44EBD2D9
  8E6C435A F8E7652C FB37CEE9 46AC8BFC 217F4D1F 215AC21A 40EF9F7C 163FE026
  3DC5BC2F 87FBF3ED 6A559633 6B776F6F 7C128E7B 91C618CD 3D0FE585 EF767A5B
  91B9AFBD 6999BB58 6349453A 5274EFB4 43B54936
        quit
crypto pki certificate chain SLA-TrustPoint
 certificate ca 01
  30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
  32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
  6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
  3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
  43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
  526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
  82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
  CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
  1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
  4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
  7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
  68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
  C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
  C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
  DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
  06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
  4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
  03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
  604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
  D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
  467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
  7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
  5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
  80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
  418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
  D697DF7F 28
        quit
!
license boot level network-essentials addon dna-essentials
license smart url https://smartreceiver.cisco.com/licservice/license
license smart url smart https://smartreceiver.cisco.com/licservice/license
license smart transport smart
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 5 priority 61440
memory free low-watermark processor 133138
!
username apeck privilege 15 secret 9 $9$4GqsE/LayiTZRE$Spo5soiRtvMZrQSeWLjpR5DE833vkaOwdW4SBLoBUi6
!
redundancy
 mode sso
!
!
!
!
!
!
transceiver type all
 monitoring
!
vlan 2
 name Workstations
!
vlan 3
 name Wireless
!
vlan 5
!
vlan 6
 name Wireless-Guest
!
!
class-map match-any system-cpp-police-ewlc-control
  description EWLC Control
class-map match-any system-cpp-police-topology-control
  description Topology control
class-map match-any system-cpp-police-sw-forward
  description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic
class-map match-any system-cpp-default
  description EWLC Data, Inter FED Traffic
class-map match-any system-cpp-police-sys-data
  description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed
class-map match-any system-cpp-police-punt-webauth
  description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
  description L2 LVX control packets
class-map match-any system-cpp-police-forus
  description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
  description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
  description High Rate Applications
class-map match-any system-cpp-police-multicast
  description MCAST Data
class-map match-any system-cpp-police-l2-control
  description L2 control
class-map match-any system-cpp-police-dot1x-auth
  description DOT1X Auth
class-map match-any system-cpp-police-data
  description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
  description Stackwise Virtual OOB
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
  description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
  description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
  description DHCP snooping
class-map match-any system-cpp-police-ios-routing
  description L2 control, Topology control, Routing control, Low Latency
class-map match-any system-cpp-police-system-critical
  description System Critical and Gold Pkt
class-map match-any system-cpp-police-ios-feature
  description ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAuth,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRExcption,NflSampled,RpfFailed
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 no ip address
 shutdown
 negotiation auto
!
interface GigabitEthernet1/0/1
 switchport trunk allowed vlan 1,5
 switchport mode trunk
!
interface GigabitEthernet1/0/2
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/3
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/4
 switchport trunk allowed vlan 1
 switchport mode trunk
!
interface GigabitEthernet1/0/5
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/6
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/7
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/8
 switchport trunk allowed vlan 1-3
!
interface GigabitEthernet1/0/9
 switchport mode access
!
interface GigabitEthernet1/0/10
 switchport mode access
!
interface GigabitEthernet1/0/11
 switchport mode access
!
interface GigabitEthernet1/0/12
 switchport mode access
!
interface GigabitEthernet1/0/13
 switchport mode access
!
interface GigabitEthernet1/0/14
 switchport mode access
!
interface GigabitEthernet1/0/15
 switchport mode access
!
interface GigabitEthernet1/0/16
 switchport mode access
!
interface GigabitEthernet1/0/17
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/18
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/19
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/20
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/21
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/22
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/23
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/24
 switchport trunk native vlan 3
 switchport trunk allowed vlan 3,6
 switchport mode trunk
!
interface GigabitEthernet1/0/25
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/26
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/27
 switchport access vlan 6
 switchport mode access
!
interface GigabitEthernet1/0/28
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/29
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/30
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/31
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/32
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/33
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/34
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/35
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/36
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/37
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/38
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/39
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/40
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/41
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/42
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/43
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/44
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/45
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/46
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/47
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/0/48
 switchport access vlan 2
 switchport mode access
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/5
!
interface TenGigabitEthernet1/1/6
!
interface TenGigabitEthernet1/1/7
!
interface TenGigabitEthernet1/1/8
!
interface FortyGigabitEthernet1/1/1
!
interface FortyGigabitEthernet1/1/2
!
interface TwentyFiveGigE1/1/1
!
interface TwentyFiveGigE1/1/2
!
interface AppGigabitEthernet1/0/1
!
interface Vlan1
 ip address 10.10.1.10 255.255.255.0
!
interface Vlan5
 ip address 10.20.1.10 255.255.255.0
!
ip default-gateway 10.10.1.1
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface Vlan1
!
!
!
!
control-plane
 service-policy input system-cpp-policy
!
banner motd ^CTCG-HUB Authorized access only! Violators will be prosecuted^C
!
line con 0
 stopbits 1
line vty 0 4
 login local
 transport input ssh
line vty 5 15
 login local
 transport input ssh
line vty 16 31
 login
 transport input ssh
!
call-home
 ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
 ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
 contact-email-addr sch-smart-licensing@cisco.com
 profile "CiscoTAC-1"
  active
  destination transport-method http
!
!
!
!
!
!
end