yes 2960s L2, Vlan 70 deployed
=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2021.03.16 21:32:11 =~=~=~=~=~=~=~=~=~=~=~=
User Access Verification
Password:
HQ>ena
Password:
HQ#sho run
Building configuration...
Current configuration : 13806 bytes
!
! Last configuration change at 16:39:56 amman Tue Dec 15 2020
! NVRAM config last updated at 15:11:39 amman Mon Jan 11 2021
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
service compress-config
!
hostname HQ
!
boot-start-marker
boot-end-marker
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
--More-- address-family ipv6
exit-address-family
!
enable secret 4 sma8CRrzx7H2hi/iswBN7L7OPLHET2D2rzUDwM3uBhY
!
no aaa new-model
clock timezone amman 2 0
switch 1 provision ws-c3850-48t
switch 2 provision ws-c3850-48t
ip routing
ip arp proxy disable
!
ip device tracking
!
ip dhcp pool WiFi
network 172.200.6.0 255.255.255.0
domain-name 192.168.1.28
default-router 172.200.6.254
dns-server 192.168.1.28 192.168.1.17
option 138 hex c0a8.0133
lease 3
!
!
qos wireless-default-untrust
--More-- !
crypto pki trustpoint TP-self-signed-1764038695
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1764038695
revocation-check none
rsakeypair TP-self-signed-1764038695
!
!
crypto pki certificate chain TP-self-signed-1764038695
certificate self-signed 01
30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373634 30333836 3935301E 170D3137 30373331 31333530
31305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37363430
33383639 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A8F3 04E16F2B 21D08A92 228A41A2 21EB58B0 1F79135E 513CE36F 66D32E9C
60705E8B 77162ADF EDD07462 0967039C 68455AA4 229C668F 1D78DF8B EF04C43E
C72DABB2 ADB46341 DD7E158D A6CF3EFF A936EA90 89A0051D 84890533 1D837581
9F15E0F4 A4A4C7B7 E307F4E2 F86AC910 31CFED3D F0AD2EF6 F8A368D4 C4A27C96
2C570203 010001A3 6D306B30 0F060355 1D130101 FF040530 030101FF 30180603
551D1104 11300F82 0D4D616E 61736565 724F696C 4851301F 0603551D 23041830
168014F1 50395CCA F3A3F12B BEACAF1B A9884005 1392C430 1D060355 1D0E0416
0414F150 395CCAF3 A3F12BBE ACAF1BA9 88400513 92C4300D 06092A86 4886F70D
--More-- 01010405 00038181 009615EF 1BC06510 D60E4D86 EE13C44F 44AD4E52 30C329D4
AAC9C006 B07987AC EC3DA687 1EE971BC E96D3423 2DF4DC15 5F5FA9E4 8AF49C27
340D24E8 62B8E2D8 4F35EC4D 160AF869 012A6511 EFA5AEA9 8AC3159F 75BA6E94
5AA3B19B D2DFB87C AE25140A A3F65D5E EC173839 BB6D19C5 7CD8DF90 2AB776CB
2C8F937C E0FF240F DC
quit
!
!
!
!
!
diagnostic bootup level minimal
identity policy webauth-global-inactive
inactivity-timer 3600
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
redundancy
mode sso
!
!
ip ftp username admin
ip ftp password 7 052627211E62783B265C4643
--More-- !
class-map match-any non-client-nrt-class
match non-client-nrt
!
policy-map port_child_policy
class non-client-nrt-class
bandwidth remaining ratio 10
!
!
!
!
!
!
interface Port-channel1
description F2C1S2
switchport mode trunk
!
interface Port-channel2
description F2C2
switchport mode trunk
!
interface Port-channel3
description F1C2
switchport mode trunk
--More-- !
interface Port-channel4
description F1C1S2
switchport mode trunk
!
interface Port-channel5
description F1C1S3
switchport mode trunk
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
negotiation auto
!
interface GigabitEthernet1/0/1
description F2C1S2
switchport mode trunk
channel-group 1 mode active
!
interface GigabitEthernet1/0/2
description F2C1S2
switchport mode trunk
channel-group 1 mode active
!
--More-- interface GigabitEthernet1/0/3
description F2C2
switchport mode trunk
channel-group 2 mode active
!
interface GigabitEthernet1/0/4
description F2C2
switchport mode trunk
channel-group 2 mode active
!
interface GigabitEthernet1/0/5
description F1C2
switchport mode trunk
channel-group 3 mode active
!
interface GigabitEthernet1/0/6
description F1C2
switchport mode trunk
channel-group 3 mode active
!
interface GigabitEthernet1/0/7
description F1C1S2
switchport mode trunk
channel-group 4 mode active
--More-- !
interface GigabitEthernet1/0/8
description F1C1S3
switchport mode trunk
channel-group 5 mode active
!
interface GigabitEthernet1/0/9
description IT_Access_Point
switchport access vlan 60
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
description To San Storage2
switchport access vlan 80
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
description Analyzer
switchport access vlan 80
!
interface GigabitEthernet1/0/14
description Storage-Main Nas
--More-- switchport access vlan 80
!
interface GigabitEthernet1/0/15
description IT-NVR-98
switchport access vlan 80
!
interface GigabitEthernet1/0/16
description Secondary-Main Nas
switchport access vlan 80
!
interface GigabitEthernet1/0/17
description F2#PRINTER#RICO
switchport access vlan 70
!
interface GigabitEthernet1/0/18
description WAF
switchport access vlan 80
!
interface GigabitEthernet1/0/19
switchport access vlan 80
!
interface GigabitEthernet1/0/20
switchport access vlan 80
!
--More-- interface GigabitEthernet1/0/21
description Pureflex Uplink
switchport access vlan 80
!
interface GigabitEthernet1/0/22
switchport access vlan 80
!
interface GigabitEthernet1/0/23
description To PureFlex
switchport access vlan 80
!
interface GigabitEthernet1/0/24
description PBX
switchport access vlan 80
!
interface GigabitEthernet1/0/25
switchport access vlan 100
switchport mode access
!
interface GigabitEthernet1/0/26
description NVR-97
switchport access vlan 10
switchport mode access
!
--More-- interface GigabitEthernet1/0/27
description To Management PureFlex
switchport access vlan 100
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/0/28
description To_Main_UPS
switchport access vlan 80
!
interface GigabitEthernet1/0/29
switchport access vlan 80
!
interface GigabitEthernet1/0/30
switchport access vlan 80
!
interface GigabitEthernet1/0/31
switchport access vlan 80
!
interface GigabitEthernet1/0/32
switchport access vlan 80
!
interface GigabitEthernet1/0/33
switchport access vlan 80
--More-- !
interface GigabitEthernet1/0/34
switchport access vlan 80
!
interface GigabitEthernet1/0/35
switchport trunk native vlan 100
switchport mode trunk
!
interface GigabitEthernet1/0/36
switchport access vlan 100
!
interface GigabitEthernet1/0/37
description AIRPORT2-SCREEN
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet1/0/38
!
interface GigabitEthernet1/0/39
description #san-storage-70.223#
switchport access vlan 100
switchport mode access
!
interface GigabitEthernet1/0/40
--More-- description #Sanstorage-70.224#
switchport access vlan 100
switchport mode access
!
interface GigabitEthernet1/0/41
description To PureFlex
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet1/0/42
description To PureFlex
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet1/0/43
!
interface GigabitEthernet1/0/44
!
interface GigabitEthernet1/0/45
!
interface GigabitEthernet1/0/46
!
interface GigabitEthernet1/0/47
!
--More-- interface GigabitEthernet1/0/48
switchport mode trunk
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface TenGigabitEthernet1/1/3
!
interface TenGigabitEthernet1/1/4
!
interface GigabitEthernet2/0/1
description F2C1S2
switchport mode trunk
channel-group 1 mode active
!
--More-- interface GigabitEthernet2/0/2
description F2C1S2
switchport mode trunk
channel-group 1 mode active
!
interface GigabitEthernet2/0/3
description F2C2
switchport mode trunk
channel-group 2 mode active
!
interface GigabitEthernet2/0/4
description F2C2
switchport mode trunk
channel-group 2 mode active
!
interface GigabitEthernet2/0/5
description F1C2
switchport mode trunk
channel-group 3 mode active
!
interface GigabitEthernet2/0/6
description F1C2
switchport mode trunk
channel-group 3 mode active
--More-- !
interface GigabitEthernet2/0/7
description F1C1S2
switchport mode trunk
channel-group 4 mode active
!
interface GigabitEthernet2/0/8
description F1C1S3
switchport mode trunk
channel-group 5 mode active
!
interface GigabitEthernet2/0/9
!
interface GigabitEthernet2/0/10
!
interface GigabitEthernet2/0/11
description NAS_Storage_2
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet2/0/12
!
interface GigabitEthernet2/0/13
description WAN Switch P 1
--More-- switchport access vlan 80
!
interface GigabitEthernet2/0/14
description Storage-Main NAS
switchport access vlan 80
!
interface GigabitEthernet2/0/15
description Storage-Main NAS
switchport access vlan 80
!
interface GigabitEthernet2/0/16
description Storage-Secondary NAS
switchport access vlan 80
!
interface GigabitEthernet2/0/17
description AFAQ PC
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet2/0/18
switchport access vlan 80
!
interface GigabitEthernet2/0/19
switchport access vlan 80
--More-- !
interface GigabitEthernet2/0/20
switchport access vlan 80
!
interface GigabitEthernet2/0/21
description NVR-99
switchport access vlan 80
!
interface GigabitEthernet2/0/22
description Pureflex Uplink
switchport access vlan 80
!
interface GigabitEthernet2/0/23
description To PureFlex
switchport access vlan 80
!
interface GigabitEthernet2/0/24
switchport access vlan 80
!
interface GigabitEthernet2/0/25
switchport trunk native vlan 100
!
interface GigabitEthernet2/0/26
switchport access vlan 80
--More-- !
interface GigabitEthernet2/0/27
switchport access vlan 80
!
interface GigabitEthernet2/0/28
switchport access vlan 80
!
interface GigabitEthernet2/0/29
switchport access vlan 80
!
interface GigabitEthernet2/0/30
switchport access vlan 80
!
interface GigabitEthernet2/0/31
switchport access vlan 80
!
interface GigabitEthernet2/0/32
switchport access vlan 80
!
interface GigabitEthernet2/0/33
switchport access vlan 80
!
interface GigabitEthernet2/0/34
switchport access vlan 80
--More-- !
interface GigabitEthernet2/0/35
switchport access vlan 80
!
interface GigabitEthernet2/0/36
switchport access vlan 80
!
interface GigabitEthernet2/0/37
description To PureFlex_Controller
switchport access vlan 100
!
interface GigabitEthernet2/0/38
!
interface GigabitEthernet2/0/39
switchport access vlan 100
!
interface GigabitEthernet2/0/40
switchport access vlan 100
!
interface GigabitEthernet2/0/41
description To PureFlex
switchport access vlan 80
switchport mode access
!
--More-- interface GigabitEthernet2/0/42
description To PureFlex
switchport access vlan 80
switchport mode access
!
interface GigabitEthernet2/0/43
!
interface GigabitEthernet2/0/44
!
interface GigabitEthernet2/0/45
!
interface GigabitEthernet2/0/46
!
interface GigabitEthernet2/0/47
!
interface GigabitEthernet2/0/48
!
interface GigabitEthernet2/1/1
!
interface GigabitEthernet2/1/2
!
interface GigabitEthernet2/1/3
!
interface GigabitEthernet2/1/4
--More-- !
interface TenGigabitEthernet2/1/1
!
interface TenGigabitEthernet2/1/2
!
interface TenGigabitEthernet2/1/3
!
interface TenGigabitEthernet2/1/4
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
description IT
ip address 172.200.1.254 255.255.255.0
ip access-group 101 in
ip access-group 102 out
!
interface Vlan20
description Manegment
ip address 172.200.2.254 255.255.255.0
!
interface Vlan30
--More-- description Finance
ip address 172.200.3.254 255.255.255.0
!
interface Vlan40
description IP-Telephone
ip address 172.200.4.254 255.255.255.0
!
interface Vlan50
description Finger-Print
ip address 172.200.5.254 255.255.255.0
!
interface Vlan60
description WIFI
ip address 172.200.6.254 255.255.255.0
!
interface Vlan70
description Users
ip address 172.200.7.254 255.255.255.0
!
interface Vlan80
description DMZ
ip address 192.168.1.254 255.255.255.0
!
interface Vlan90
--More-- description B1
ip address 172.200.9.254 255.255.255.0
!
interface Vlan100
description PureFlex
ip address 192.168.242.254 255.255.255.0
!
interface Vlan101
ip address 30.30.30.254 255.255.255.0
!
interface Vlan200
description SW-Vlans
ip address 20.20.20.1 255.255.255.0
!
ip http server
ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.1.100
!
!
access-list 101 deny ip host 172.200.1.90 host 192.168.1.3
access-list 101 deny ip host 172.200.1.90 host 192.168.1.4
access-list 101 deny ip host 172.200.1.90 host 192.168.1.25
access-list 101 deny ip host 172.200.1.91 host 192.168.1.3
access-list 101 deny ip host 172.200.1.91 host 192.168.1.4
--More-- access-list 101 deny ip host 172.200.1.91 host 192.168.1.25
access-list 101 permit ip 172.200.1.0 0.0.0.255 any
access-list 102 permit ip any any
!
!
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password 7 122C0B05172B0F0C2B29752D
login
line vty 5 15
login
!
wsma agent exec
profile httplistener
profile httpslistener
wsma agent config
profile httplistener
profile httpslistener
wsma agent filesys
profile httplistener
--More-- profile httpslistener
wsma agent notify
profile httplistener
profile httpslistener
!
wsma profile listener httplistener
transport http
!
wsma profile listener httpslistener
transport https
ap dot11 24ghz rrm channel dca 1
ap dot11 24ghz rrm channel dca 6
ap dot11 24ghz rrm channel dca 11
ap dot11 5ghz rrm channel dca 36
ap dot11 5ghz rrm channel dca 40
ap dot11 5ghz rrm channel dca 44
ap dot11 5ghz rrm channel dca 48
ap dot11 5ghz rrm channel dca 52
ap dot11 5ghz rrm channel dca 56
ap dot11 5ghz rrm channel dca 60
ap dot11 5ghz rrm channel dca 64
ap dot11 5ghz rrm channel dca 149
ap dot11 5ghz rrm channel dca 153
ap dot11 5ghz rrm channel dca 157
--More-- ap dot11 5ghz rrm channel dca 161
ap group default-group
end
HQ#sho ip rout
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
+ - replicated route, % - next hop override
Gateway of last resort is 192.168.1.100 to network 0.0.0.0
S* 0.0.0.0/0 [1/0] via 192.168.1.100
20.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 20.20.20.0/24 is directly connected, Vlan200
L 20.20.20.1/32 is directly connected, Vlan200
30.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C 30.30.30.0/24 is directly connected, Vlan101
L 30.30.30.254/32 is directly connected, Vlan101
172.200.0.0/16 is variably subnetted, 16 subnets, 2 masks
C 172.200.1.0/24 is directly connected, Vlan10
L 172.200.1.254/32 is directly connected, Vlan10
C 172.200.2.0/24 is directly connected, Vlan20
L 172.200.2.254/32 is directly connected, Vlan20
--More-- C 172.200.3.0/24 is directly connected, Vlan30
L 172.200.3.254/32 is directly connected, Vlan30
C 172.200.4.0/24 is directly connected, Vlan40
L 172.200.4.254/32 is directly connected, Vlan40
C 172.200.5.0/24 is directly connected, Vlan50
L 172.200.5.254/32 is directly connected, Vlan50
C 172.200.6.0/24 is directly connected, Vlan60
L 172.200.6.254/32 is directly connected, Vlan60
C 172.200.7.0/24 is directly connected, Vlan70
L 172.200.7.254/32 is directly connected, Vlan70
C 172.200.9.0/24 is directly connected, Vlan90
L 172.200.9.254/32 is directly connected, Vlan90
192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.1.0/24 is directly connected, Vlan80
L 192.168.1.254/32 is directly connected, Vlan80
192.168.242.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.242.0/24 is directly connected, Vlan100
L 192.168.242.254/32 is directly connected, Vlan100
HQ#
