UDP packet dropping on Cisco switch

PF_DW · ‎12-01-2020

Hello all! I have a LED text panel connected to the Cisco switch with an Ethernet cable. The panel is assigned a static IP address.

The panel communicates as follows:

- sends a UDP packet with an ARP query to default gateway (if successful, every 60 seconds again)

- in case of failure every 6 seconds until it establishes a connection (successful answer to ARP query)

If I connect the panel to some simple switch (non-manageable), it works without a problem. However, if I connect to a Cisco switch, the connection is completely lost from time to time and it is necessary to restart the ethernet adapter in the panel.

balaji.bandi · ‎12-01-2020

We need to know more information here :

1. what is the device model

2. what IOS running

3. show us the interface config ?

4. Do you have any Security restriction or QoS applied to the port ?

finally do you see any Logs on the switch, and is the port up all the time ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Georg Pauwen · ‎12-01-2020

Hello,

just a wild guess, as the main difference between an unmanaged and a Cisco switch is that the unmanaged switch (probably) does not run the spanning tree algorithm, while the Cisco does.

Try an d disable spanning tree on the Cisco switch:

Switch(config)#no spanning-tree vlan 1-1001

PF_DW · ‎12-08-2020

Hi guys! Thanks for you replies! I will try to give you as much informations as possible.

Basic network topology:

Default gateway (sw002180)
- C3650 24TS
- IOS: Universal K9 Ver. 16.6.4a
- 192.168.2.180
Access switch (sw002250)
- C2960X 48LPS-L
- IOS: Universal K9 Ver. 15.0-2
- Interface Vlan 1
  - 192.168.2.250/24
LED panel
- Connected to Vlan 1
- Static IP: 192.168.2.254/23

LED panel is connected to sw002250 which is connected into default gw.

Access switch config (show run):

!
! Last configuration change at 13:17:58 UTC+1 Wed Nov 18 2020 by admin
! NVRAM config last updated at 08:58:40 UTC+1 Fri Oct 9 2020 by admin
!
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname sw002250
!
boot-start-marker
boot-end-marker
!
enable secret
!
username password
username admin privilege 15 secret 5 
no aaa new-model
clock timezone UTC+1 1 0
clock summer-time UTC+1 recurring last Sun Mar 2:00 last Sun Oct 2:00
switch 1 provision ws-c2960x-48lps-l
!
!
vtp domain IDC
vtp mode transparent
!
!
crypto pki trustpoint TP-self-signed-4120308992
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-4120308992
 revocation-check none
 rsakeypair TP-self-signed-4120308992
!
!
crypto pki certificate chain TP-self-signed-4120308992
 certificate self-signed 01
  3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 34313230 33303839 3932301E 170D3138 30353236 31313033 
  30315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 31323033 
  30383939 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 
  8100BD1D 1BBEB4BE 2915BA7B 002A8742 0351DBF1 CB87BFEB E44644EE FFC1A2E5 
  26D4FBEB A055C1BA 387C3798 0331B252 B644E6C7 5B1F4D58 D8F73383 6B3BEBA1 
  628EEFB8 4AA94299 BF7F1649 B8E13E9F CFF17FCC 41541D8B 1AD12FED B063C4F2 
  ACC41D46 13D04F16 29E9975D EAC951F0 E5496AC4 7BDADE6B D084AEE2 3B075BDC 
  427F0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603 
  551D2304 18301680 14498D8B FCFD0830 147DA1F6 AADBC6D1 54C298BA B7301D06 
  03551D0E 04160414 498D8BFC FD083014 7DA1F6AA DBC6D154 C298BAB7 300D0609 
  2A864886 F70D0101 05050003 81810019 EE17FD50 3888F6A0 5E95413B 2EFDE0C4 
  73408658 ACA0D5D4 7C267E7C 6C3D3890 6492EFDD 3DDBE1C0 0BA2E26E FFD56987 
  95C10A53 FEA56F34 39DD1B8E 3B18E1DA C97431B6 95791009 15DBB479 E9221084 
  72DF3BCD F20300B1 B2B0B8D4 75E76ABE E15F6B18 ACC7A9EB 468E63A6 2A8A5B77 
  DD96636F DBF20F36 989C8E49 FA7A59
  	quit
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
!
!
!
!
!
vlan internal allocation policy ascending
!

!
!
!
!
interface FastEthernet0
 no ip address
 shutdown
!
interface GigabitEthernet1/0/1
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/2
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/3
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/4
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/5
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/6
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/7
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/8
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/9
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/10
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/11
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/12
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/13
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/14
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/15
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/16
 switchport mode trunk
 speed 100
 duplex full
 spanning-tree portfast
!
interface GigabitEthernet1/0/17
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/18
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/19
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/20
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/21
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/22
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/23
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/24
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/25
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/26
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/27
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/28
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/29
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/30
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/31
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/32
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/33
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/34
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/35
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/36
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/37
 description AP247043
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/38
 description AP247044
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/39
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/40
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/41
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/42
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/43
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/44
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/45
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/46
 switchport access vlan 2247
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/47
 switchport access vlan 9
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/48
 switchport access vlan 2253
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/49
 description Prepoj sw003110/gi1/0/51 sw002250/gi1/0/49
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/50
 description Prepoj sw002250/gi1/0/50 sw003010/gi1/0/25
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/51
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/52
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface Vlan1
 ip address 192.168.2.250 255.255.255.0
!
interface Vlan9
 no ip address
 no ip route-cache
!
ip default-gateway 192.168.2.180
ip http server
ip http secure-server
!
!
snmp-server community idctt RO
snmp-server location SE_RD25 Novy sklad HV
!
!
line con 0
 password
 login
line vty 0 4
 login
line vty 5 15
 login
!
ntp server 192.168.2.180
end

Default GW config:

!
! Last configuration change at 08:56:18 UTC+1 Fri Oct 9 2020 by admin
! NVRAM config last updated at 08:56:18 UTC+1 Fri Oct 9 2020 by admin
!
version 16.6
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service compress-config
no platform punt-keepalive disable-kernel-core
!
hostname sw002180
!
!
vrf definition Mgmt-vrf
 !
 address-family ipv4
 exit-address-family
 !0
 address-family ipv6
 exit-address-family
!
logging buffered 51200
enable secret 
!
no aaa new-model
clock timezone UTC 1 0
clock summer-time UTC+1 recurring last Sun Mar 2:00 last Sun Oct 2:00
switch 1 provision ws-c3650-24ts
switch 2 provision ws-c3650-24ts
!
!
!
!
ip routing
!
ip dhcp excluded-address 192.168.153.250 192.168.153.255
ip dhcp excluded-address 192.168.152.1 192.168.152.255
ip dhcp excluded-address 192.168.153.0 192.168.153.199
ip dhcp excluded-address 10.20.247.1 10.20.247.150
!
ip dhcp pool AP
 network 10.20.247.0 255.255.255.0
 default-router 10.20.247.1 
 option 43 hex f104.0a14.f703
!
!
!
!
!
!
!
!
vtp domain IDC
vtp mode transparent
udld aggressive

!
crypto pki trustpoint TP-self-signed-3334864252
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-3334864252
 revocation-check none
 rsakeypair TP-self-signed-3334864252
!
!
crypto pki certificate chain TP-self-signed-3334864252
 certificate self-signed 01
  30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030 
  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 
  69666963 6174652D 33333334 38363432 3532301E 170D3139 30313032 30393131 
  35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 
  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33333438 
  36343235 32308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201 
  0A028201 01009242 A3658315 AF08703F AA02F92E 71061645 DFAF66FC 3A368686 
  0277EEFE 862AD706 AC235A92 2CC6C574 BAA2563A D127A7B2 D7A5623B FFF5CB89 
  4C66F297 7DA6F670 7AC3358D FCC6E682 37BDBDD2 6C8CF8C6 3DA873BD FDCC0CA0 
  0E9CF8E4 CE4806D6 95C561B7 3F42C436 0B39ABF4 BD09D5F6 4A85B330 B3F46635 
  D0DB30D4 416C056F 5DD44450 7B274167 5CC69B8D 774E4255 4CA81D2D C989A341 
  82A93437 7BE0D0C1 CA477553 8C657F25 540100BD B5B65859 9A6DFB10 13B0521E 
  22B7D900 DBCBD4DC E53CB493 8CA20D86 8D75F537 492AAB31 42932E31 4706B649 
  A72492D7 6D3C1C8E 0F8C7A8E 29B5E94A F95EA6CF D313138C 504BB30D 3A9D9383 
  4F9926D4 99BF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 
  301F0603 551D2304 18301680 1409E726 14FE3DA0 BB1931DC 1DBDF46F AD9D9A90 
  6D301D06 03551D0E 04160414 09E72614 FE3DA0BB 1931DC1D BDF46FAD 9D9A906D 
  300D0609 2A864886 F70D0101 05050003 82010100 55538AC1 16C7FF6C FE9CBE6E 
  A8ACD6C6 7CB6CC2F 3D7349EE C622C8F5 0DE35E6A A2795256 119E5598 1DB59ED4 
  22EA744F 2586AD15 AAA66E51 CC795583 0F6AD73C 632E8A0F 8130B506 0858312D 
  7089E02F D4EC72B5 35B98332 16F2C6D5 87AD484A 2D154842 999EED20 F0C85E5F 
  DF325C01 F186FD7F 11D8F3F1 18BFD1AE 68F4BA23 C389EFDC BFA9460D 1DD6CBA9 
  AD0737C0 D97795AC 5BCDF71D 9A62F48F CEEDFD02 EB458CFB AC4F693A 6C5A817C 
  2B011E05 DCA5FA22 F259AAF5 94C13B53 7164C4D3 8A0444A2 1944F039 5040A0F7 
  878ABE29 43D0A8B2 06EE7469 5B3FC799 4B300C02 D469CC9B 3E6646FD 61D23D21 
  86CB7A80 F5B1B870 2377FBCC 665481DE CFA4078E
  	quit
!
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree extend system-id
spanning-tree vlan 1-4094 priority 8192
errdisable recovery cause link-flap
errdisable recovery interval 60
!
username 
username  password 0 
!
redundancy
 mode sso
!
!

!
!
class-map match-any system-cpp-police-topology-control
  description Topology control
class-map match-any system-cpp-police-sw-forward
  description Sw forwarding, L2 LVX data, LOGGING
class-map match-any system-cpp-default
  description DHCP Snooping, EWLC control, EWCL data 
class-map match-any system-cpp-police-sys-data
  description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, RPF Failed
class-map match-any system-cpp-police-punt-webauth
  description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
  description L2 LVX control packets
class-map match-any system-cpp-police-forus
  description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
  description MCAST END STATION
class-map match-any system-cpp-police-multicast
  description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
  description L2 control
class-map match-any system-cpp-police-dot1x-auth
  description DOT1X Auth
class-map match-any system-cpp-police-data
  description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
  description Stackwise Virtual
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
  description Routing control
class-map match-any system-cpp-police-protocol-snooping
  description Protocol snooping
class-map match-any system-cpp-police-system-critical
  description System Critical and Gold pkt
!
policy-map system-cpp-policy
policy-map port_child_policy
 class non-client-nrt-class
  bandwidth remaining ratio 10
!
! 
!
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
 description Prepoj Ether Channel switch sw002180/x/0/22;23;24 a sw002244/x/0/23;24
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
!
interface Port-channel2
 description nepouzity
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
!
interface Port-channel3
 description Prepoj Ether Channel switch sw002180/x/0/9 a rt002183/1,2
 switchport mode trunk
!
interface Port-channel4
 description Prepoj Ether Channel switch sw002180/x/0/10 a rt002184/1,2
 switchport mode trunk
!
interface Port-channel5
 description Prepoj Ether Channel switch sw002180/gix/0/15 a sw002240/23;24
 switchport mode dynamic desirable
 spanning-tree link-type point-to-point
!
interface Port-channel6
 description Prepoj Ether Channel switch sw002180/gix/0/17 a sw002010/47;48
 switchport mode dynamic desirable
!
interface Port-channel11
 description Prepoj sw002180/gix/1/1 sw003120/gi1/0/49;51
 switchport mode dynamic desirable
!
interface Port-channel12
 description Prepoj sw002180/gix/1/2 sw002230/gi1/0/49;51
 switchport mode dynamic desirable
!
interface Port-channel13
 description Prepoj sw002180/gix/1/3 sw002210/gi1/0/50;51
 switchport mode dynamic desirable
!
interface Port-channel14
 description Prepoj sw002180/gix/1/4 sw003130/gi1/0/49;51
 switchport mode dynamic desirable
!
interface GigabitEthernet0/0
 vrf forwarding Mgmt-vrf
 no ip address
 shutdown
 speed 1000
 negotiation auto
!
interface GigabitEthernet1/0/1
 description [dot1q] sd.idc0004.sw1.ls208 e3 - Prepoj primar mpls
 switchport trunk allowed vlan 7,100
 switchport mode trunk
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/2
 description Prepoj na kamery (Vlan4)
 switchport access vlan 4
 switchport mode access
 spanning-tree portfast
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/3
 switchport mode trunk
 spanning-tree portfast
!
interface GigabitEthernet1/0/4
 description Prepoj SMS kotolne (154)
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/5
 description Prepoj ASA E0/2 (154)
 switchport access vlan 154
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/6
 description Prepoj ASA E0/3 (1)
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/7
 description Prepoj Testo Saveris
 switchport trunk allowed vlan 1
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/8
 switchport mode trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/9
 description Preopoj rt002183/1 wifi
 switchport mode trunk
 channel-group 3 mode on
!
interface GigabitEthernet1/0/10
 description Preopoj rt002184/1 wifi
 switchport mode trunk
 channel-group 4 mode on
!
interface GigabitEthernet1/0/11
 description zz002249
 switchport mode trunk
!
interface GigabitEthernet1/0/12
 description Prepoj ASA E0/1 (9)
 switchport access vlan 9
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/13
 description sparese3
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/14
 description Prepoj asSMS1
 switchport access vlan 149
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/15
 description Prepoj Ether Channel switch sw002180/gix/0/15 a sw002240/23;24
 switchport mode dynamic desirable
 channel-group 5 mode active
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/16
 description ALISON_SPAN_tok_dat
 switchport mode access
 shutdown
!
interface GigabitEthernet1/0/17
 description Prepoj Ether Channel switch sw002180/gix/0/17 a sw002010/47;48
 switchport mode dynamic desirable
 channel-group 6 mode active
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/0/18
 description nepouzite
 spanning-tree portfast trunk
!
interface GigabitEthernet1/0/19
 description Prepoj RD18B sw RD24E
 switchport access vlan 149
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/20
 description Prepoj Eurest
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet1/0/21
!
interface GigabitEthernet1/0/22
 description Prepoj Ether Channel switch sw002180/1/0/22 a sw002244/1/0/23
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet1/0/23
 description Prepoj Ether Channel switch sw002180/1/0/23 a sw002244/2/0/23
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet1/0/24
 description Prepoj Ether Channel switch sw002180/1/0/24 a sw002244/3/0/23
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet1/1/1
 description Prepoj sw002180/gi1/1/1 sw003120/gi1/0/49
 switchport mode dynamic desirable
 channel-group 11 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/1/2
 description Prepoj sw002180/gi1/1/2 sw002230/gi1/0/49
 switchport mode dynamic desirable
 channel-group 12 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/1/3
 description Prepoj sw002180/gi1/1/3 sw002210/gi1/0/50
 switchport mode dynamic desirable
 channel-group 13 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet1/1/4
 description Prepoj sw002180/gi1/1/4 sw003130/gi1/0/49
 switchport mode dynamic desirable
 channel-group 14 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/1
 description [dot1q] sd.idc0004.ro2.c881 fa0 - Prepoj backup mpls
 switchport trunk allowed vlan 7,100
 switchport mode trunk
 switchport nonegotiate
 spanning-tree portfast
 spanning-tree bpdufilter enable
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/2
 description ALISON_DDI_SONDA_149_208_MGMT
 switchport access vlan 149
 switchport mode access
 shutdown
!
interface GigabitEthernet2/0/3
!
interface GigabitEthernet2/0/4
!
interface GigabitEthernet2/0/5
!
interface GigabitEthernet2/0/6
!
interface GigabitEthernet2/0/7
!
interface GigabitEthernet2/0/8
!
interface GigabitEthernet2/0/9
 description Preopoj rt002183/2 wifi
 switchport mode trunk
 channel-group 3 mode on
!
interface GigabitEthernet2/0/10
 description Preopoj rt002184/2 wifi
 switchport mode trunk
 channel-group 4 mode on
!
interface GigabitEthernet2/0/11
!
interface GigabitEthernet2/0/12
!
interface GigabitEthernet2/0/13
!
interface GigabitEthernet2/0/14
!
interface GigabitEthernet2/0/15
 description Prepoj Ether Channel switch sw002180/gix/0/15 a sw002240/23;24
 switchport mode dynamic desirable
 channel-group 5 mode active
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/16
!
interface GigabitEthernet2/0/17
 description Prepoj Ether Channel switch sw002180/gix/0/17 a sw002010/47;48
 switchport mode dynamic desirable
 channel-group 6 mode active
 spanning-tree portfast trunk
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/0/18
!
interface GigabitEthernet2/0/19
!
interface GigabitEthernet2/0/20
!
interface GigabitEthernet2/0/21
!
interface GigabitEthernet2/0/22
 description Prepoj Ether Channel switch sw002180/2/0/22 a sw002244/1/0/24
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet2/0/23
 description Prepoj Ether Channel switch sw002180/2/0/23 a sw002244/2/0/24
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet2/0/24
 description Prepoj Ether Channel switch sw002180/2/0/24 a sw002244/3/0/24
 switchport trunk allowed vlan 1,149
 switchport mode dynamic desirable
 channel-group 1 mode active
!
interface GigabitEthernet2/1/1
 description Prepoj sw002180/gi2/1/1 sw003120/gi1/0/51
 switchport mode dynamic desirable
 channel-group 11 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/1/2
 description Prepoj sw002180/gi2/1/2 sw002230/gi1/0/51
 switchport mode dynamic desirable
 channel-group 12 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/1/3
 description Prepoj sw002180/gi2/1/3 sw002210/gi1/0/51
 switchport mode dynamic desirable
 channel-group 13 mode active
 spanning-tree link-type point-to-point
!
interface GigabitEthernet2/1/4
 description Prepoj sw002180/gi2/1/4 sw003130/gi1/0/51
 switchport mode dynamic desirable
 channel-group 14 mode active
 spanning-tree link-type point-to-point
!
interface Vlan1
 ip address 192.168.2.180 255.255.254.0 secondary
 ip address 192.168.152.10 255.255.252.0
 ip helper-address 192.168.149.2
!

!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip tftp source-interface Vlan1
ip route 0.0.0.0 0.0.0.0 192.168.202.1
ip route 10.0.1.0 255.255.255.0 192.168.144.246
ip route 10.0.2.0 255.255.255.0 192.168.152.246
ip route 10.0.3.0 255.255.255.0 192.168.144.246
ip route 10.0.4.0 255.255.255.0 192.168.144.246
ip route 10.0.5.0 255.255.255.0 192.168.144.246
ip route 10.0.6.0 255.255.255.0 192.168.144.246
!
ip access-list standard remote
 permit 192.168.153.34 0.0.0.1
 permit 192.168.149.236 0.0.0.1
 permit 192.168.149.38 0.0.0.1
 permit 10.0.1.0 0.0.0.255
 permit 172.16.0.0 0.0.0.7
 permit 192.168.2.244 0.0.0.1
!
ip access-list extended PROD_NET
 permit ip 192.168.149.0 0.0.0.255 any
 permit ip 172.16.2.0 0.0.1.255 any
 deny   ip any any
ip access-list extended PROD_NET_forti
 permit ip 172.16.2.0 0.0.1.255 any
 deny   ip any any
ip access-list extended PROD_NET_forti_149
 permit ip 192.168.149.0 0.0.0.255 any
 permit ip 172.16.2.0 0.0.1.255 any
 deny   ip any any
ip access-list extended PROD_NET_forti_in
 permit ip any 192.168.149.0 0.0.0.255
 permit ip any 172.16.2.0 0.0.1.255
 permit ip 10.20.10.0 0.0.0.255 10.20.10.0 0.0.0.255
ip access-list extended kamery
 deny   ip any 192.168.1.0 0.0.0.255
 permit ip any any
ip access-list extended plc_restrict
 permit ip host 192.168.149.74 host 192.168.144.126
 permit ip host 192.168.149.75 host 192.168.144.126
 deny   ip any host 192.168.144.126
 permit ip any any
ip access-list extended wifi_mob
 permit ip host 192.168.128.2 any
 permit ip host 192.168.149.2 any
 permit ip host 192.168.129.13 any
 permit ip host 192.168.153.35 any
 permit ip host 192.168.211.3 any
 permit ip host 192.168.211.4 any
 permit ip host 192.168.211.5 any
 deny   ip 192.168.0.0 0.0.255.255 any
 permit ip any any
!
ip sla enable reaction-alerts
!
!
snmp-server group zabbix v3 auth 
snmp-server community idctt RO
snmp-server location SE_RD18 serverovna
!
control-plane
 service-policy input system-cpp-policy
!
!
line con 0
 password
 login
 stopbits 1
line aux 0
 stopbits 1
line vty 0 4
 access-class remote in
 exec-timeout 30 0
 password 
 login
 length 0
line vty 5 15
 access-class remote in
 exec-timeout 30 0
 password 
 login
!
!
monitor session 1 source interface Gi1/0/1
monitor session 1 destination interface Gi1/0/16
ntp server 192.168.1.16
!
mac address-table notification mac-move
wsma agent exec
 profile httplistener
 profile httpslistener
!
wsma agent config
 profile httplistener
 profile httpslistener
!
wsma agent filesys
 profile httplistener
 profile httpslistener
!
wsma agent notify
 profile httplistener
 profile httpslistener
!
!
end