Core Switches Configuration Running as a VSS
HQDCCSW01#sh running-config
Building configuration...
Current configuration : 14121 bytes
!
! Last configuration change at 12:59:46 BAH Sun Feb 9 2014 by admin
!
version 15.1
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
service sequence-numbers
service counters max age 5
no service dhcp
!
hostname HQDCCSW01
!
boot-start-marker
boot system flash bootflash:cat4500e-universalk9.SPA.03.04.03.SG.151-2.SG3.bin
license boot level entservices
boot-end-marker
!
!
vrf definition mgmtVrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 5 $1$7XzS$.tFbG1U2xPs8ht11VvTw./
!
username admin privilege 15 secret 5 $1$yIU1$bcq0.ES5HTowQzBTU03mo.
aaa new-model
aaa local authentication attempts max-fail 3
!
!
aaa session-id common
clock timezone BAH 3 0
!
switch virtual domain 10
switch mode virtual
mac-address use-virtual
!
udld enable
no ip source-route
no ip gratuitous-arps
ip icmp rate-limit unreachable 100
!
ip vrf Liin-vrf
!
no ip domain-lookup
ip domain-name HQ.com
no ip bootp server
!
!
!
!
!
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause gbic-invalid
errdisable recovery cause l2ptguard
errdisable recovery cause psecure-violation
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause unicast-flood
errdisable recovery cause arp-inspection
errdisable recovery interval 60
power redundancy-mode redundant
!
mac access-list extended VSL-BPDU
permit any 0180.c200.0000 0000.0000.0003
mac access-list extended VSL-CDP
permit any host 0100.0ccc.cccc
mac access-list extended VSL-DOT1x
permit any any 0x888E
mac access-list extended VSL-GARP
permit any host 0180.c200.0020
mac access-list extended VSL-LLDP
permit any host 0180.c200.000e
mac access-list extended VSL-MGMT
permit any host 00ff.d873.3de6
permit any host 00ff.7e1d.79e6
mac access-list extended VSL-SSTP
permit any host 0100.0ccc.cccd
!
!
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast bpduguard default
spanning-tree extend system-id
spanning-tree vlan 1-2,5,8,51-53,100-101,200,254,300 priority 24576
!
redundancy
mode sso
!
vlan internal allocation policy ascending
!
ip ssh time-out 20
ip ssh authentication-retries 5
ip ssh version 2
!
class-map match-any VSL-MGMT-PACKETS
match access-group name VSL-MGMT
class-map match-any VSL-DATA-PACKETS
match any
class-map match-any VSL-L2-CONTROL-PACKETS
match access-group name VSL-DOT1x
match access-group name VSL-BPDU
match access-group name VSL-CDP
match access-group name VSL-LLDP
match access-group name VSL-SSTP
match access-group name VSL-GARP
class-map match-any VSL-L3-CONTROL-PACKETS
match access-group name VSL-IPV4-ROUTING
match access-group name VSL-BFD
match access-group name VSL-DHCP-CLIENT-TO-SERVER
match access-group name VSL-DHCP-SERVER-TO-CLIENT
match access-group name VSL-DHCP-SERVER-TO-SERVER
match access-group name VSL-IPV6-ROUTING
class-map match-any VSL-MULTIMEDIA-TRAFFIC
match dscp af41
match dscp af42
match dscp af43
match dscp af31
match dscp af32
match dscp af33
match dscp af21
match dscp af22
match dscp af23
class-map match-any VSL-VOICE-VIDEO-TRAFFIC
match dscp ef
match dscp cs4
match dscp cs5
class-map match-any VSL-SIGNALING-NETWORK-MGMT
match dscp cs2
match dscp cs3
match dscp cs6
match dscp cs7
!
policy-map VSL-Queuing-Policy
class VSL-MGMT-PACKETS
bandwidth percent 5
class VSL-L2-CONTROL-PACKETS
bandwidth percent 5
class VSL-L3-CONTROL-PACKETS
bandwidth percent 5
class VSL-VOICE-VIDEO-TRAFFIC
bandwidth percent 30
class VSL-SIGNALING-NETWORK-MGMT
bandwidth percent 10
class VSL-MULTIMEDIA-TRAFFIC
bandwidth percent 20
class VSL-DATA-PACKETS
bandwidth percent 20
class class-default
bandwidth percent 5
!
interface Port-channel10
description *** VSS Connected to HQDCCSW02 ***
switchport
switchport mode trunk
switchport nonegotiate
switch virtual link 1
!
interface Port-channel11
description *** Uplink to Nexus 5000 DS ***
switchport
switchport mode trunk
!
interface Port-channel12
description *** VSS Connected to HQDCCSW01 ***
switchport
switchport mode trunk
switchport nonegotiate
switch virtual link 2
!
interface FastEthernet1
vrf forwarding mgmtVrf
no ip address
speed auto
duplex auto
!
interface TenGigabitEthernet1/1/1
description *** VSL Connected to HQDCCSW02 Port Te2/1/1 ***
switchport mode trunk
switchport nonegotiate
no lldp transmit
no lldp receive
no cdp enable
channel-group 10 mode on
service-policy output VSL-Queuing-Policy
!
interface TenGigabitEthernet1/1/2
description *** VSL Connected to HQDCCSW02 Port Te2/1/2 ***
switchport mode trunk
switchport nonegotiate
no lldp transmit
no lldp receive
no cdp enable
channel-group 10 mode on
service-policy output VSL-Queuing-Policy
!
interface TenGigabitEthernet1/1/3
description *** Connected to HQDCDSW01 Port Mgt Keepalive Link ***
switchport access vlan 300
switchport mode access
!
interface TenGigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/5
!
interface TenGigabitEthernet1/1/6
!
interface TenGigabitEthernet1/1/7
!
interface TenGigabitEthernet1/1/8
!
interface TenGigabitEthernet1/1/9
!
interface TenGigabitEthernet1/1/10
!
interface TenGigabitEthernet1/1/11
!
interface TenGigabitEthernet1/1/12
!
interface TenGigabitEthernet1/1/13
!
interface TenGigabitEthernet1/1/14
!
interface TenGigabitEthernet1/1/15
description **** Connected to HQDCDSW01 Port Eth 1/27***
switchport mode trunk
channel-group 11 mode active
!
interface TenGigabitEthernet1/1/16
description **** Connected to HQDCDSW02 Port Eth 1/27***
switchport mode trunk
channel-group 11 mode active
!
interface TenGigabitEthernet2/1/1
description *** VSL Connected to HQDCCSW01 Port Te1/1/1 ***
switchport mode trunk
switchport nonegotiate
no lldp transmit
no lldp receive
no cdp enable
channel-group 12 mode on
service-policy output VSL-Queuing-Policy
!
interface TenGigabitEthernet2/1/2
description *** VSL Connected to HQDCCSW01 Port Te1/1/2 ***
switchport mode trunk
switchport nonegotiate
no lldp transmit
no lldp receive
no cdp enable
channel-group 12 mode on
service-policy output VSL-Queuing-Policy
!
interface TenGigabitEthernet2/1/3
description *** Connected to HQDCDSW02 Port Mgt Keepalive Link ***
switchport access vlan 300
switchport mode access
!
interface TenGigabitEthernet2/1/4
!
interface TenGigabitEthernet2/1/5
!
interface TenGigabitEthernet2/1/6
!
interface TenGigabitEthernet2/1/7
!
interface TenGigabitEthernet2/1/8
!
interface TenGigabitEthernet2/1/9
!
interface TenGigabitEthernet2/1/10
!
interface TenGigabitEthernet2/1/11
!
interface TenGigabitEthernet2/1/12
!
interface TenGigabitEthernet2/1/13
!
interface TenGigabitEthernet2/1/14
!
interface TenGigabitEthernet2/1/15
description **** Connected to HQDCDSW01 Port Eth 1/28***
switchport mode trunk
channel-group 11 mode active
!
interface TenGigabitEthernet2/1/16
description **** Connected to HQDCDSW02 Port Eth 1/28***
switchport mode trunk
channel-group 11 mode active
!
interface Vlan1
description *** Servers_Old VLAN Interface ***
ip address 200.1.1.250 255.255.0.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
interface Vlan100
description *** New_Servers VLAN Interface ***
ip address 100.0.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
interface Vlan300
description *** Net_MGMT VLAN Interface ***
ip address 100.0.30.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
!
no ip http server
no ip http secure-server
!
ip access-list standard ACL_RESTRICTED_VTY_SSH
remark permit any - till project completion
permit any
deny any log
!
ip access-list extended VSL-BFD
permit udp any any eq 3784
ip access-list extended VSL-DHCP-CLIENT-TO-SERVER
permit udp any eq bootpc any eq bootps
ip access-list extended VSL-DHCP-SERVER-TO-CLIENT
permit udp any eq bootps any eq bootpc
ip access-list extended VSL-DHCP-SERVER-TO-SERVER
permit udp any eq bootps any eq bootps
ip access-list extended VSL-IPV4-ROUTING
permit ip any 224.0.0.0 0.0.0.255
!
!
!
!
!
!
ipv6 access-list VSL-IPV6-ROUTING
permit ipv6 any FF02::/124
!
line con 0
login authentication CONSOLE
stopbits 1
line vty 0 4
access-class ACL_RESTRICTED_VTY_SSH in
exec-timeout 30 0
login authentication VTY-SSH
transport input ssh
line vty 5 15
access-class ACL_RESTRICTED_VTY_SSH in
exec-timeout 30 0
login authentication VTY-SSH
transport input ssh
!
!
module provision switch 1
chassis-type 70 base-mac 24E9.B342.64D8
slot 1 slot-type 401 base-mac 24E9.B342.64D8
!
module provision switch 2
chassis-type 70 base-mac 885A.92CD.C5A8
slot 1 slot-type 401 base-mac 885A.92CD.C5A8
!
end
HQDCCSW01#sh cdp neighbors
Capability Codes: R - Router, T - Trans Bridge, B - Source Route Bridge
S - Switch, H - Host, I - IGMP, r - Repeater, P - Phone,
D - Remote, C - CVTA, M - Two-port Mac Relay
Device ID Local Intrfce Holdtme Capability Platform Port ID
HQDCDSW02
Ten 2/1/16 170 S I C N5K-C5548 Eth 1/28
HQDCDSW02
Ten 1/1/16 170 S I C N5K-C5548 Eth 1/27
HQDCDSW02
Ten 2/1/3 176 S I C N5K-C5548 mgmt0
HQDCDSW01
Ten 2/1/15 154 S I C N5K-C5548 Eth 1/28
HQDCDSW01
Ten 1/1/15 154 S I C N5K-C5548 Eth 1/27
HQDCDSW01
Ten 1/1/3 173 S I C N5K-C5548 mgmt0
!
!
HQDCCSW01#sh interfaces trunk
Port Mode Encapsulation Status Native vlan
Po10 on 802.1q trunking 1
Po11 on 802.1q trunking 1
Po12 on 802.1q trunking 1
Port Vlans allowed on trunk
Po10 1-4094
Po11 1-4094
Po12 1-4094
Port Vlans allowed and active in management domain
Po10 1-2,5,8,51-53,100,200,300
Po11 1-2,5,8,51-53,100,200,300
Po12 1-2,5,8,51-53,100,200,300
Port Vlans in spanning tree forwarding state and not pruned
Po10 none
Po11 1-2,5,8,51-53,100,200,300
Po12 none.
!
!
Nexus 5548Up-FA Configuration
sh running-config
!Command: show running-config
!Time: Wed Mar 4 11:52:41 2009
version 7.0(0)N1(1)
hostname HQDCDSW02
no feature telnet
cfs eth distribute
feature udld
feature lacp
feature vpc
feature lldp
feature vtp
feature fex
ip domain-lookup
class-map type control-plane match-any copp-system-class-rpf-fail
fex 101
pinning max-links 1
description "HQDCSFW02"
snmp-server user admin network-admin auth md5 0xfa9292e2f91a27373c56829b4ddc2a67
priv 0xfa9292e2f91a27373c56829b4ddc2a67 localizedkey
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
spanning-tree port type edge bpduguard default
spanning-tree loopguard default
vrf context management
ip route 0.0.0.0/0 100.0.30.1
vpc domain 1
peer-switch
peer-keepalive destination 100.0.30.250
peer-gateway
auto-recovery
ip arp synchronize
interface port-channel1
description *** Connected to HQDCDSW01 (E1/1,E1/2) ***
switchport mode trunk
spanning-tree port type network
vpc peer-link
interface port-channel11
description *** Connected to 4500 CS ***
switchport mode trunk
spanning-tree port type normal
spanning-tree guard root
vpc 11
interface port-channel101
description *** UPLINK HQDCSFW02 ***
switchport mode fex-fabric
fex associate 101
interface Ethernet1/1
description *** Connected to HQDCDSW01 (E1/1)
switchport mode trunk
channel-group 1 mode active
interface Ethernet1/2
description *** Connected to HQDCDSW01 (E1/2)
switchport mode trunk
channel-group 1 mode active
interface Ethernet1/3
interface Ethernet1/4
interface Ethernet1/5
interface Ethernet1/6
interface Ethernet1/7
interface Ethernet1/8
interface Ethernet1/9
interface Ethernet1/10
interface Ethernet1/11
interface Ethernet1/12
interface Ethernet1/13
interface Ethernet1/14
interface Ethernet1/15
interface Ethernet1/16
interface Ethernet1/17
interface Ethernet1/18
interface Ethernet1/19
interface Ethernet1/20
interface Ethernet1/21
interface Ethernet1/22
interface Ethernet1/23
interface Ethernet1/24
interface Ethernet1/25
interface Ethernet1/26
interface Ethernet1/27
description *** Connected to CS 4500 Port Te 1/1/16 ***
switchport mode trunk
channel-group 11 mode active
interface Ethernet1/28
description *** Connected to CS 4500 Port Te 2/1/16 ***
switchport mode trunk
channel-group 11 mode active
interface Ethernet1/29
description *** UPLINK HQDCSFW01 ***
switchport mode fex-fabric
fex associate 101
channel-group 101
interface Ethernet1/30
description *** UPLINK HQDCSFW01 ***
switchport mode fex-fabric
fex associate 101
channel-group 101
interface Ethernet1/31
description *** UPLINK HQDCSFW01 ***
switchport mode fex-fabric
fex associate 101
channel-group 101
interface Ethernet1/32
description *** UPLINK HQDCSFW01 ***
switchport mode fex-fabric
fex associate 101
channel-group 101
interface mgmt0
vrf member management
ip address 100.0.30.251/24
interface Ethernet101/1/1
switchport access vlan 100
vpc orphan-port suspend
interface Ethernet101/1/2
interface Ethernet101/1/3
interface Ethernet101/1/4
interface Ethernet101/1/5
interface Ethernet101/1/6
interface Ethernet101/1/7
interface Ethernet101/1/8
interface Ethernet101/1/9
interface Ethernet101/1/10
interface Ethernet101/1/11
interface Ethernet101/1/12
interface Ethernet101/1/13
interface Ethernet101/1/14
interface Ethernet101/1/15
interface Ethernet101/1/16
interface Ethernet101/1/17
interface Ethernet101/1/18
interface Ethernet101/1/19
interface Ethernet101/1/20
interface Ethernet101/1/21
interface Ethernet101/1/22
interface Ethernet101/1/23
interface Ethernet101/1/24
interface Ethernet101/1/25
interface Ethernet101/1/26
interface Ethernet101/1/27
interface Ethernet101/1/28
interface Ethernet101/1/29
interface Ethernet101/1/30
interface Ethernet101/1/31
interface Ethernet101/1/32
line console
line vty
boot kickstart bootflash:/n5000-uk9-kickstart.7.0.0.N1.1.bin
boot system bootflash:/n5000-uk9.7.0.0.N1.1.bin
!
