Added switch/router configs, for Dell, Cisco, PFSense, and OPNSense.

This commit is contained in:
Josef Chessor 2018-02-07 18:40:49 -06:00
parent 0d9a7e0598
commit fb3fe0d8be
12 changed files with 7471 additions and 0 deletions

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,280 @@
interface ethernet 1/e1
description sw1-mgmt
exit
interface ethernet 1/e2
description sw2-mgmt
exit
interface ethernet 1/e3
description sw3-mgmt
exit
interface ethernet 1/e4
description sw4-mgmt
exit
interface ethernet 1/e5
description sw5-mgmt
exit
interface ethernet 1/e6
description sw6-mgmt
exit
interface range ethernet 1/e(7,19)
description r7-mgmt
exit
interface range ethernet 1/e(8,20)
description r8-mgmt
exit
interface ethernet 1/e9
description fw1-mgmt
exit
interface ethernet 1/e10
description fw2-mgmt
exit
interface ethernet 1/e11
description r3-mgmt
exit
interface ethernet 1/e12
description r2-mgmt
exit
interface ethernet 1/e13
description r1-mgmt
exit
interface ethernet 1/e14
description r4-mgmt
exit
interface ethernet 1/e15
description r5-mgmt
exit
interface ethernet 1/e16
description r6-mgmt
exit
interface ethernet 1/e17
description sw7
exit
interface ethernet 1/e18
description sw8-mgmt
exit
interface ethernet 1/e21
description sw9-mgmt
exit
interface ethernet 1/e22
description r4(wan)
exit
interface ethernet 1/e23
description r5(wan)
exit
interface ethernet 1/e24
description fw2(wan)
exit
interface ethernet 1/e25
description auslab-con01
exit
interface ethernet 1/e26
description r10(mgmt)
exit
interface ethernet 1/e27
description r11(mgmt)
exit
interface ethernet 1/e28
description r10(wan)
exit
interface ethernet 1/e29
description r11(wan)
exit
interface ethernet 1/e42
description ikeabench-sw
exit
interface ethernet 1/e45
description LabPC
exit
interface ethernet 1/e46
description Uplink-From-labsw02
exit
interface ethernet 1/e46
duplex full
exit
interface ethernet 1/e47
description GroundStation-Switch
exit
interface ethernet 1/e48
description Uplink-To-labrtr01
exit
interface range ethernet 1/e(46,48)
switchport mode trunk
exit
vlan database
vlan 2-8,12,19-20,22,101,300-320,400-420
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 2
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 3
exit
interface ethernet 1/e4
switchport access vlan 4
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 4
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 5
exit
interface ethernet 1/e20
switchport access vlan 6
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 6
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 7
exit
interface range ethernet 1/e(46,48)
switchport trunk allowed vlan add 8
exit
interface ethernet 1/e29
switchport access vlan 20
exit
interface range ethernet 1/e(25,42-43,45,47)
switchport access vlan 22
exit
interface ethernet 1/e46
switchport trunk native vlan 22
exit
interface ethernet 1/e48
switchport trunk allowed vlan add 22
exit
interface ethernet 1/e1
switchport access vlan 300
exit
interface ethernet 1/e2
switchport access vlan 301
exit
interface ethernet 1/e3
switchport access vlan 302
exit
interface ethernet 1/e5
switchport access vlan 304
exit
interface ethernet 1/e6
switchport access vlan 305
exit
interface ethernet 1/e44
switchport access vlan 306
exit
interface ethernet 1/e7
switchport access vlan 307
exit
interface ethernet 1/e9
switchport access vlan 308
exit
interface ethernet 1/e11
switchport access vlan 309
exit
interface ethernet 1/e13
switchport access vlan 310
exit
interface ethernet 1/e14
switchport access vlan 311
exit
interface ethernet 1/e15
switchport access vlan 312
exit
interface ethernet 1/e21
switchport access vlan 313
exit
interface ethernet 1/e23
switchport access vlan 314
exit
interface ethernet 1/e17
switchport access vlan 315
exit
interface ethernet 1/e18
switchport access vlan 316
exit
interface ethernet 1/e26
switchport access vlan 317
exit
interface ethernet 1/e19
switchport access vlan 318
exit
interface ethernet 1/e28
switchport access vlan 319
exit
interface ethernet 1/e16
switchport access vlan 400
exit
interface ethernet 1/e8
switchport access vlan 401
exit
interface ethernet 1/e10
switchport access vlan 402
exit
interface ethernet 1/e12
switchport access vlan 403
exit
interface ethernet 1/e22
switchport access vlan 407
exit
interface ethernet 1/e24
switchport access vlan 408
exit
interface ethernet 1/e27
switchport access vlan 409
exit
interface vlan 2
name management-network
exit
interface vlan 3
name ap
exit
interface vlan 4
name switch
exit
interface vlan 5
name voip
exit
interface vlan 6
name router
exit
interface vlan 7
name iptv
exit
interface vlan 8
name client
exit
interface vlan 19
name storage
exit
interface vlan 20
name router-wan
exit
interface vlan 101
name fstack1
exit
interface vlan 22
ip address 10.251.22.2 255.255.255.0
exit
ip default-gateway 10.251.22.254
hostname labsw01.pfv.turnsys.net
line ssh
exec-timeout 0
exit
logging 10.253.3.99
aaa authentication enable default enable
aaa authentication enable radius enable
ip http authentication none
aaa authentication login default line
aaa authentication login radius local
line ssh
password d4d78a126ab5aa766f1c716b3fbcd230 encrypted
exit
line console
password d4d78a126ab5aa766f1c716b3fbcd230 encrypted
exit
enable password level 15 6a3299495f48d92cd5541197dacfcf20 encrypted
username admin password 6a3299495f48d92cd5541197dacfcf20 level 15 encrypted
snmp-server host 10.253.3.99 kn3lmgmt
snmp-server location PFV
snmp-server contact prodtechops@turnsys.com
snmp-server community kn3lmgmt 10.253.3.99
ip https server

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,230 @@
!
! Last configuration change at 20:32:33 CST Thu Feb 1 2018 by cisco
! NVRAM config last updated at 20:32:36 CST Thu Feb 1 2018 by cisco
! NVRAM config last updated at 20:32:36 CST Thu Feb 1 2018 by cisco
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname pfv-core-ap01
!
logging rate-limit console 9
no logging console
no logging monitor
enable secret 5 $1$lB96$.3rp3EmJ9p2KjpJh7h0.T.
!
no aaa new-model
clock timezone CST -6 0
no ip domain lookup
ip name-server 10.253.3.86
!
!
dot11 syslog
dot11 vlan-name Nerdbone vlan 200
dot11 vlan-name TheNerdery vlan 100
!
dot11 ssid Nerdbone
vlan 200
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii 7 08714E1E041831051302180B386A
!
dot11 ssid TheNerdery
vlan 100
authentication open
authentication key-management wpa
mbssid guest-mode
wpa-psk ascii 7 132B47021800572E6A
!
dot11 network-map
power inline negotiation injector override
crypto pki token default removal timeout 0
!
crypto pki trustpoint TP-self-signed-3632941680
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3632941680
revocation-check none
rsakeypair TP-self-signed-3632941680
!
!
crypto pki certificate chain TP-self-signed-3632941680
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33363332 39343136 3830301E 170D3933 30333031 30303032
31385A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 36333239
34313638 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BDC3 965C98A2 EB69E593 4AEAB184 675EC9C6 8518857D B366DDF8 F4E666C8
6C08CF6A 7563828E 607931DA EB0AD984 142ECB95 1618F2A9 A9624D61 07FCE76F
0C0A8696 E178A8B1 FB966206 8A0769BC B7FA8881 AE34443C 3800B61F B97E9FA1
66E0675F 7B494A0C AD657CD9 847C6755 A65A7E59 B625E45D 89C0AFDE 2B646015
5CFF0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14715BA0 DC1E3390 78A05B38 1C6B64C8 52A67D60 9B301D06
03551D0E 04160414 715BA0DC 1E339078 A05B381C 6B64C852 A67D609B 300D0609
2A864886 F70D0101 05050003 8181000B 52E38067 C0AB47F9 08AA49B5 5D4EEA01
6E94406F 1579D75C 6888DFB0 D93BF95A 719F2884 7EEF5101 03A5FF8A D5D88568
E48F6F15 7337BF48 B5D8A329 579F9287 DBD9539A 9B084568 BD20BD94 A778A0DE
6DCE2368 1EF9AC86 6271A1C1 1072FCC1 F5B0DAFB 9FA3200A 967A8F03 E3D37ADC
3C25EE36 671237BC 3A7A9049 B027B0
quit
username cisco privilege 15 password 7 0313591B553C131862043D012F4A381B3C09
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 100 mode ciphers aes-ccm tkip
!
encryption vlan 200 mode ciphers aes-ccm tkip
!
ssid Nerdbone
!
ssid TheNerdery
!
antenna gain 0
mbssid
speed basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2422
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
bridge-group 100 subscriber-loop-control
bridge-group 100 spanning-disabled
bridge-group 100 port-protected
bridge-group 100 block-unknown-source
no bridge-group 100 source-learning
no bridge-group 100 unicast-flooding
!
interface Dot11Radio0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 spanning-disabled
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 100 mode ciphers aes-ccm tkip
!
encryption vlan 200 mode ciphers aes-ccm tkip
antenna gain 0
dfs band 3 block
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
bridge-group 100 subscriber-loop-control
bridge-group 100 spanning-disabled
bridge-group 100 port-protected
bridge-group 100 block-unknown-source
no bridge-group 100 source-learning
no bridge-group 100 unicast-flooding
!
interface Dot11Radio1.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 spanning-disabled
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
!
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface GigabitEthernet0.100
encapsulation dot1Q 100
no ip route-cache
bridge-group 100
bridge-group 100 spanning-disabled
no bridge-group 100 source-learning
!
interface GigabitEthernet0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 spanning-disabled
no bridge-group 200 source-learning
!
interface BVI1
ip address 10.251.30.251 255.255.255.0
no ip route-cache
!
ip default-gateway 10.251.30.254
no ip http server
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
logging 10.253.3.99
access-list 3 permit 10.253.3.99
access-list 3 remark For SNMP - Only Monitoring Servers can access.
access-list 3 permit 10.243.3.33
access-list 3 deny any log
snmp-server community kn3l-mgmt RO 3
snmp-server community kn3lmgmt RO
snmp-server host 10.253.3.33 kn3l-mgmt
bridge 1 route ip
!
!
banner login ^C5
===============================================================================
-------------------------------------------------------------------------------
TURN NET SYSTEMS - PRODUCTION SYSTEM - GO AWAY
-------------------------------------------------------------------------------
This is a private computer system. These resources, including all
related equipmentURN NET SYSTEMS - PRODUCTION SYSTEM - GO AWAY
===============================================================================
^C
!
line con 0
line vty 0 4
login local
transport input all
!
no exception crashinfo
sntp server 10.251.30.253
end

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,277 @@
!
! Last configuration change at 22:40:16 CST Thu Feb 1 2018 by cisco
! NVRAM config last updated at 20:34:03 CST Thu Feb 1 2018 by cisco
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname pfv-core-sw01
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$.DDG$avbJ/Ba3mTZaUZj0DGbyr0
enable password 7 13061E010803
!
username cisco privilege 15 password 7 1505091C57191970043E11262B5F25143975
aaa new-model
!
!
aaa authentication login default group NPS_RADIUS_SERVERS local
aaa authorization exec default group NPS_RADIUS_SERVERS local if-authenticated
!
!
!
aaa session-id common
clock timezone CST -6
system mtu routing 1500
ip subnet-zero
ip routing
ip domain-name turnsys.net
ip name-server 10.251.30.71
!
!
!
crypto pki trustpoint TP-self-signed-1485245952
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1485245952
revocation-check none
rsakeypair TP-self-signed-1485245952
!
!
crypto pki certificate chain TP-self-signed-1485245952
certificate self-signed 01
30820250 308201B9 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31343835 32343539 3532301E 170D3933 30333031 30303030
35335A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 34383532
34353935 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100B3BC 70D69DBD 98EF4C19 8B98D8D6 FA1EEA8F 89C99567 38DAEDEE E481EB4B
5FE96885 1E2E4CF6 7282D474 3C0F9711 FD94A661 DF3FCADA FCD801B3 BAC0F907
A167C100 68E8B2C8 EC191A61 07EAEE1B 9A27C508 5BDE75D4 8E027D98 979AB506
35AEF3AF ED6AB97B AF2137DD 1C28EB7F 9DDC88B0 AECA1529 8E252DAD D0AF0CD9
14D50203 010001A3 78307630 0F060355 1D130101 FF040530 030101FF 30230603
551D1104 1C301A82 18617573 2D636F72 65737730 312E7475 726E7379 732E6E65
74301F06 03551D23 04183016 801437DF 64CC8992 2CD93FAC 0829D8DA E56280E2
0374301D 0603551D 0E041604 1437DF64 CC89922C D93FAC08 29D8DAE5 6280E203
74300D06 092A8648 86F70D01 01040500 03818100 6090B1E0 D07F081C 273982E5
DA52C1A9 FF9D381B 6A9A6A65 A8315696 F7E1483C A8AE9C6A 74635CFE 03D8F845
46188168 8E5CBF98 C4450FAC 95628D2E 3EB3D16F F8461D75 114A8F6F D40098E3
C50F9AA7 6568273C 73436B35 B57CCF52 D152EBE0 84EE5684 F3D027B0 AEBDD7A0
ECB58FD2 D717CADE 12CE7A53 C80E6BC4 3235D6FF
quit
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
ip ssh time-out 60
ip ssh authentication-retries 5
!
!
!
interface FastEthernet0/1
description labsw01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
description unknown
spanning-tree portfast
!
interface FastEthernet0/3
description printer-pi
switchport access vlan 22
spanning-tree portfast
!
interface FastEthernet0/4
description pfv-ucs
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/5
description extcam-left
switchport access vlan 200
spanning-tree portfast
!
interface FastEthernet0/6
description extcam-right
switchport access vlan 200
spanning-tree portfast
!
interface FastEthernet0/7
description ap1
switchport access vlan 22
spanning-tree portfast
!
interface FastEthernet0/8
description ap2
switchport access vlan 22
!
interface FastEthernet0/9
description ap3
switchport access vlan 22
!
interface FastEthernet0/10
description ap4
switchport access vlan 100
!
interface FastEthernet0/11
description gallileo
switchport access vlan 22
switchport mode access
!
interface FastEthernet0/12
description ausprod-coreap01
power inline never
switchport trunk encapsulation dot1q
switchport trunk native vlan 30
switchport mode trunk
!
interface FastEthernet0/13
description inkjet
switchport access vlan 22
!
interface FastEthernet0/14
description color laser
switchport access vlan 22
switchport mode access
!
interface FastEthernet0/15
description bwlaser
switchport access vlan 22
switchport mode access
!
interface FastEthernet0/16
description octopi
switchport access vlan 22
switchport mode access
!
interface FastEthernet0/17
description workbench switch
switchport access vlan 100
switchport mode access
!
interface FastEthernet0/18
!
interface FastEthernet0/19
description parallela
switchport access vlan 22
switchport mode access
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
description temp-port
switchport access vlan 30
switchport mode access
!
interface FastEthernet0/23
description pfv-corertr01
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/24
description pfv-corertr02
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
no ip address
!
interface Vlan30
description Mgmt net
ip address 10.251.30.100 255.255.255.0
!
interface Vlan31
description AP net
no ip address
!
interface Vlan32
description Switch net
no ip address
!
interface Vlan33
description VOIP net
no ip address
!
interface Vlan34
description Router net
no ip address
!
interface Vlan35
description IPTV
no ip address
!
interface Vlan36
description PeanutGallery
no ip address
!
interface Vlan37
description MALZOO (RED) net
no ip address
!
interface Vlan38
description Fstack1
no ip address
!
interface Vlan39
description Fstack2
no ip address
!
interface Vlan40
description Storage
no ip address
!
interface Vlan100
description Desknet
no ip address
!
interface Vlan200
description nerdbone
no ip address
!
ip default-gateway 10.251.30.254
ip classless
ip route 0.0.0.0 0.0.0.0 10.251.30.254
no ip http server
no ip http secure-server
!
!
logging 10.253.3.99
snmp-server user kn3lmgmt kn3lmgmt v1
snmp-server user kn3lmgmt kn3lmgmt v2c
snmp-server community kn3lmgmt RO
snmp-server user kn3lmgmt kn3lmgmt v1
snmp-server user kn3lmgmt kn3lmgmt v2c
snmp-server location PFV
snmp-server chassis-id pfv-core-sw01
!
control-plane
!
!
line con 0
line vty 0 4
transport input all
line vty 5 15
!
ntp clock-period 36029637
ntp server 10.251.30.254
ntp server 10.251.30.253
end

View File

@ -0,0 +1,208 @@
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname outap-front
!
logging rate-limit console 9
no logging console
no logging monitor
enable secret 5 $1$lB96$.3rp3EmJ9p2KjpJh7h0.T.
!
clock timezone CST -6
ip subnet-zero
no ip domain lookup
ip domain name stmarytx.edu
ip name-server 10.253.3.86
!
!
no aaa new-model
dot11 syslog
dot11 vlan-name Public vlan 2
dot11 vlan-name Video vlan 201
dot11 vlan-name Voice vlan 200
dot11 vlan-name Workstations vlan 50
!
dot11 ssid SATX-Internet
vlan 50
authentication open
authentication key-management wpa
guest-mode
mbssid guest-mode dtim-period 75
wpa-psk ascii 7 070D2E43410E1C1704
!
dot11 network-map
!
crypto pki trustpoint TP-self-signed-4066931324
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4066931324
revocation-check none
rsakeypair TP-self-signed-4066931324
!
!
crypto ca certificate chain TP-self-signed-4066931324
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34303636 39333133 3234301E 170D3132 30313038 31363333
32325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30363639
33313332 3430819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C811 9A785118 E4DAF6E4 1F1AA2BF 443A6F35 EA8A65EA 6A4768D9 C0998DD4
335F80D8 69A45641 72E6AA4F 05260247 7FCF755F C13336C0 8071A2C5 4AB23C96
BF57D1BB CD52B4F1 E7423EB8 C9482C26 3742EAFC 730A0DFF 02CEAC28 9B08F072
04960164 01CE5182 BA8898A2 AF23160D 299B87B8 E53AADB3 9233EC21 D973F636
01990203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 1444BE0D D2F9A64D 600430DB 70E4DB6E F890968D 74301D06
03551D0E 04160414 44BE0DD2 F9A64D60 0430DB70 E4DB6EF8 90968D74 300D0609
2A864886 F70D0101 04050003 81810006 C0FD3D8F 1D87A0D4 1BCD3561 BDA8713D
A72756CA 65E67BB8 6BE0F3EE 17863E60 512A1B52 900F99D1 D4A66158 4B4D04C4
33FE9E09 C82A76CD F63B13CC 0901AB8A 60D739DA 9B0FF35A 0A71529F 70B75C0F
8F012B28 F979C9E6 66FDD951 97478D5B ACFCF8E6 B7786CDD 0593B48A FC551254
F3452830 685FB60B 7BDEF67B C689FA
quit
username Cisco privilege 15 password 7 02050D480809
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers aes-ccm
!
encryption vlan 2 mode ciphers aes-ccm tkip
!
encryption vlan 50 mode ciphers aes-ccm tkip
!
encryption vlan 200 mode ciphers aes-ccm tkip
!
encryption vlan 201 mode ciphers aes-ccm tkip
!
ssid SATX-Internet
!
mbssid
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
antenna gain 0
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 port-protected
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
!
interface Dot11Radio0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
bridge-group 50 subscriber-loop-control
bridge-group 50 block-unknown-source
no bridge-group 50 source-learning
no bridge-group 50 unicast-flooding
bridge-group 50 spanning-disabled
!
interface Dot11Radio0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
bridge-group 200 subscriber-loop-control
bridge-group 200 block-unknown-source
no bridge-group 200 source-learning
no bridge-group 200 unicast-flooding
bridge-group 200 spanning-disabled
!
interface Dot11Radio0.201
encapsulation dot1Q 201
no ip route-cache
bridge-group 201
bridge-group 201 subscriber-loop-control
bridge-group 201 block-unknown-source
no bridge-group 201 source-learning
no bridge-group 201 unicast-flooding
bridge-group 201 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
!
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
!
interface FastEthernet0.50
encapsulation dot1Q 50
no ip route-cache
bridge-group 50
no bridge-group 50 source-learning
bridge-group 50 spanning-disabled
!
interface FastEthernet0.200
encapsulation dot1Q 200
no ip route-cache
bridge-group 200
no bridge-group 200 source-learning
bridge-group 200 spanning-disabled
!
interface FastEthernet0.201
encapsulation dot1Q 201
no ip route-cache
bridge-group 201
no bridge-group 201 source-learning
bridge-group 201 spanning-disabled
!
interface BVI1
ip address 10.40.100.201 255.255.255.0
no ip route-cache
!
ip default-gateway 10.40.100.254
no ip http server
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
snmp-server community kn3lmgmt RO
snmp-server location SATX
snmp-server contact prodtechopsalerts@turnsys.com
bridge 1 route ip
!
!
banner login ^CC5
===============================================================================
-------------------------------------------------------------------------------
RT - PRODUCTION SYSTEM - GO AWAY
-------------------------------------------------------------------------------
This is a private computer system.
===============================================================================
^C
!
line con 0
line vty 0 4
login local
!
no exception crashinfo
sntp server 10.251.30.253
end

File diff suppressed because it is too large Load Diff

View File

@ -0,0 +1,154 @@
interface ethernet g1
description satx-prodsw2
exit
interface ethernet g2
description satx-prodsw3
exit
interface ethernet g3
description satx-tsyssw1
exit
interface ethernet g4
description unknown
exit
interface ethernet g5
description SW03
exit
interface ethernet g6
description joesWorkstation-sw05
exit
interface ethernet g7
description NWU01
exit
interface range ethernet g(19-22)
description rrkvm
exit
interface ethernet g23
description pfvsvr01
exit
port jumbo-frame
interface range ethernet g(1-3,23-24)
switchport mode trunk
exit
vlan database
vlan 2-12,22,30,50,100,170-171,200-201
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 2
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 3
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 4
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 5
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 6
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 7
exit
interface ethernet g8
switchport access vlan 8
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 8
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 9
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 10
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 11
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 12
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 22
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 30
exit
interface range ethernet g(4-7)
switchport access vlan 50
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 50
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 100
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 170
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 171
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 200
exit
interface range ethernet g(1-3,23-24)
switchport trunk allowed vlan add 201
exit
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
interface range ethernet g(4-5)
negotiation 100f
exit
interface ethernet g6
negotiation 1000f
exit
iscsi target port 860 address 0.0.0.0
iscsi target port 3260 address 0.0.0.0
interface vlan 100
ip address 10.40.100.250 255.255.255.0
exit
ip default-gateway 10.40.100.254
hostname satx-prodsw1
logging 10.253.3.99
username admin password a9166ce242b34acf0afb80b1092536bd level 15 encrypted
snmp-server location satx
snmp-server community kn3l rw 10.253.3.77 view DefaultSuper
snmp-server community kn3lmgmt ro view Default
ip domain-name turnsys.net
Default settings:
Service tag: CBRWFH1
SW version 2.0.0.35 (date 27-Jan-2009 time 18:13:34)
Gigabit Ethernet Ports
=============================
no shutdown
speed 1000
duplex full
negotiation
flow-control off
mdix auto
no back-pressure
interface vlan 1
interface port-channel 1 - 8
spanning-tree
spanning-tree mode STP
qos basic
qos trust cos

View File

@ -0,0 +1,154 @@
!
version 12.0
no service pad
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname satx-prodsw3
!
aaa new-model
enable secret 5 $1$QKJ2$YHSuwlCO4m1NkQwYYXVza.
enable password 7 13061E010803
!
username cisco privilege 15 password 7 02050D480809
!
!
!
!
!
ip subnet-zero
ip name-server 10.40.100.200
!
!
!
interface FastEthernet0/1
description UPLINK TO SATXLANSW01-0/18
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface FastEthernet0/2
description nwu03
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
switchport mode trunk
!
interface FastEthernet0/3
description vaultcam
switchport access vlan 201
switchport trunk encapsulation dot1q
switchport trunk native vlan 100
!
interface FastEthernet0/4
description gpspi
switchport access vlan 100
!
interface FastEthernet0/5
description trendnet-poe-camsw
switchport access vlan 201
spanning-tree portfast
!
interface FastEthernet0/6
!
interface FastEthernet0/7
!
interface FastEthernet0/8
!
interface FastEthernet0/9
!
interface FastEthernet0/10
!
interface FastEthernet0/11
!
interface FastEthernet0/12
!
interface FastEthernet0/13
!
interface FastEthernet0/14
!
interface FastEthernet0/15
!
interface FastEthernet0/16
!
interface FastEthernet0/17
!
interface FastEthernet0/18
!
interface FastEthernet0/19
!
interface FastEthernet0/20
!
interface FastEthernet0/21
!
interface FastEthernet0/22
description satx-house
switchport access vlan 2
spanning-tree portfast
!
interface FastEthernet0/23
description labcam
switchport access vlan 201
spanning-tree portfast
!
interface FastEthernet0/24
description satx-infrabox
switchport access vlan 100
switchport trunk encapsulation dot1q
spanning-tree portfast
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface VLAN1
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN2
description public
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN50
description workstations
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN100
description mgmt
ip address 10.40.100.252 255.255.255.0
no ip directed-broadcast
no ip route-cache
!
interface VLAN200
description voip
no ip directed-broadcast
no ip route-cache
shutdown
!
interface VLAN201
description video
no ip directed-broadcast
no ip route-cache
shutdown
!
ip default-gateway 10.40.100.254
logging 10.253.3.99
snmp-server engineID local 00000009020000053274C2C0
snmp-server community kn3lmgmt RO
snmp-server location SATX
snmp-server enable traps snmp authentication linkdown linkup coldstart
snmp-server host 10.253.3.99 trap kn3lmgmt
!
line con 0
transport input none
stopbits 1
line vty 0 4
password 7 01100F175804
line vty 5 15
!
end

View File

@ -0,0 +1,152 @@
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname satx-rr-rtr
!
boot-start-marker
boot-end-marker
!
logging message-counter syslog
enable secret 5 $1$4vT2$7i6iJRSZXXci8rhRQ3Pn40
enable password c0l0rad0
!
no aaa new-model
!
!
!
dot11 syslog
!
flow exporter toolbox9995
description Exports to Toolbox/nfsen
destination 10.253.3.99
template data timeout 300
!
!
flow monitor toolbox
record netflow ipv4 original-input
exporter toolbox9995
cache timeout active 300
!
ip source-route
no ip routing
!
!
no ip cef
!
!
no ipv6 cef
!
multilink bundle-name authenticated
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
voice-card 0
!
!
!
!
!
!
archive
log config
hidekeys
!
!
!
!
!
!
interface FastEthernet0/0
ip address 10.40.100.210 255.255.255.0
ip flow monitor toolbox input
ip flow monitor toolbox output
no ip route-cache
duplex full
speed auto
no mop enabled
!
interface FastEthernet0/1
no ip address
ip flow monitor toolbox input
ip flow monitor toolbox output
no ip route-cache
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
no ip address
no ip route-cache
shutdown
no fair-queue
clock rate 2000000
!
interface Serial0/1/1
no ip address
no ip route-cache
shutdown
clock rate 2000000
!
ip default-gateway 10.40.100.254
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
!
logging 10.253.3.99
!
!
!
!
!
snmp-server community kn3lmgmt RO
snmp-server location satx
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
exec-timeout 15 0
password c0l0rad0
login
line vty 5 15
exec-timeout 15 0
login
!
scheduler allocate 20000 1000
end

View File

@ -0,0 +1,160 @@
interface ethernet g1
description unused
exit
interface range ethernet g(2-3)
description tsys-cn2
exit
interface ethernet g4
description tsys-cn4
exit
interface ethernet g5
description satx-consrv1
exit
interface ethernet g6
description rr-zeroinstrtr
exit
interface range ethernet g(7,12)
description PGSLED
exit
interface ethernet g8
description shallowblue
exit
interface ethernet g9
description galielo
exit
interface ethernet g10
description ap1
exit
interface ethernet g11
description ap2
exit
interface ethernet g13
description ap4
exit
interface ethernet g14
description ap5
exit
interface ethernet g15
description ap6
exit
interface ethernet g16
description ap7
exit
interface ethernet g17
description ap8
exit
interface ethernet g18
description ap9
exit
interface ethernet g19
description ap10
exit
interface ethernet g20
description octopi
exit
interface ethernet g21
description available
exit
interface ethernet g22
description auslab-ips(mgmt)
exit
interface ethernet g23
description ps3(mgmt)
exit
interface ethernet g24
description "satx-rtr01 fe0/0"
exit
interface range ethernet g(1-4,8,17-18,24)
switchport mode trunk
exit
vlan database
vlan 2-8,60-70,100
exit
interface range ethernet g(7,9,11,20-21,23)
switchport access vlan 2
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 2
exit
interface range ethernet g(13-14,16)
switchport access vlan 3
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 3
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 4
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 5
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 6
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 7
exit
interface range ethernet g(1,3-4,8,17-18,24)
switchport trunk allowed vlan add 8
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 60
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 61
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 62
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 63
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 64
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 65
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 66
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 67
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 68
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 69
exit
interface range ethernet g(1,3-4,8,24)
switchport trunk allowed vlan add 70
exit
interface range ethernet g(5-6,15,22)
switchport access vlan 100
exit
interface range ethernet g(1-4,24)
switchport trunk allowed vlan add 100
exit
interface vlan 70
name Storage
exit
interface vlan 100
ip address 10.40.100.249 255.255.255.0
exit
ip default-gateway 10.40.100.254
hostname satx-tsyscoresw1
line ssh
exec-timeout 0
exit
username admin password c5446cf68968ea534bceadd492e0477a level 15 encrypted
ip ssh server
snmp-server community kn3lmgmt ro
snmp-server location SATX
snmp-server contact prodtechopsalerts@turnsys.com
clock timezone -6 zone utc
clock source sntp
sntp client poll timer 60
sntp unicast client enable
sntp unicast client poll