24PinTechSwitch Config

Running Configuration

24PinTech_Switch#show run

Building configuration...

Current configuration : 11232 bytes

!

! Last configuration change at 20:21:32 UTC Mon Dec 16 2019

!

version 16.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

no platform punt-keepalive disable-kernel-core

!

hostname 24PinTech_Switch

!

!

vrf definition Mgmt-vrf

!

address-family ipv4

exit-address-family

!

address-family ipv6

exit-address-family

!

enable secret 5 $1$W8fz$yoZKAzoRMefe/h6hlXo741

!

no aaa new-model

switch 1 provision ws-c3650-24ps

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

crypto pki trustpoint TP-self-signed-833429682

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-833429682

revocation-check none

rsakeypair TP-self-signed-833429682

!

!

crypto pki certificate chain TP-self-signed-833429682

certificate self-signed 01

3082032E 30820216 A0030201 02020101 300D0609 2A864886 F70D0101 05050030

30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274

69666963 6174652D 38333334 32393638 32301E17 0D313831 32313331 34323034

315A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F

532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3833 33343239

36383230 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 82010A02

82010100 B0D39D58 2D4C7FDC 841C4218 351FC504 04982D66 D288F9D9 2287404A

426EF5F2 BCCBD1EE 68213925 2B0551D2 A2C86084 E8043697 B26007BF 64A60A27

2EB662BD 8D4C199B D5A07C54 D4A41271 41F05D79 B48D0EB5 E1A032DC E8FF89E1

AD67D152 E900359C F27E2327 1D911B5C 6FB1DFFF 48B0F08D 66BD092A 98D5E202

5A0522FC 31841F0F C6487E92 3C58F9E4 D99C6E45 9DFD7B68 6223AB65 A9654FB2

5FE2AD3B A352B11E D1DBC8E5 F210E03E 3CCA4DFB 80B841B0 7B2A8238 C77DBEFD

3784B083 2BAEB87C D9183E27 C8F60CB8 A3AD1BE0 DED3CD52 3C82AF6B 4FC14D76

F8BA171E 3AA82EDE B8596838 24292619 1CCE85FD FC3E9ED3 12EED95A DEE225CB

F3CFD15B 02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F

0603551D 23041830 1680142E 5138154C 63A9B7C5 338C1741 26388AD6 728D4F30

1D060355 1D0E0416 04142E51 38154C63 A9B7C533 8C174126 388AD672 8D4F300D

06092A86 4886F70D 01010505 00038201 01000634 C6E71494 3E25D7CB C11C089E

76F5F7C5 48696B0F 2BE03824 E470023A 3407097A F4713D1B E0988AA2 00C90BA1

369F4428 E122C209 43DBDBE2 8D43FB09 DB3210DE 3873C291 723F2B99 99CD1DFE

76DE7D32 48AF3C12 14135336 485594BB B3507EED 0D710F9B 2365C689 D9A26282

ED7BEBB7 37552D79 62B21B47 65B09A08 BE71F5E0 F8F4986E 04309DA1 03B98E2D

8CD86595 0D068E47 AAE5C52A 62291A8F B84AC6DF 2D43F067 A9CEB8F1 A1347850

0167914E 1FC2BA95 173E2634 108C32E4 0C787DD9 5FD096BB 178CB93C CEB90BD7

723A0372 94E83318 BF2CD70E 40DFDD2D 8190B0A4 297A0168 0A629F12 DC659693

ACE9F8BA 1B270E40 207F25CB E3F9ABCE BE48

quit

!

license boot level ipbasek9

diagnostic bootup level minimal

spanning-tree mode rapid-pvst

spanning-tree extend system-id

!

!

!

redundancy

mode sso

!

!

!

class-map match-any system-cpp-police-topology-control

description Topology control

class-map match-any system-cpp-police-sw-forward

description Sw forwarding, SGT Cache Full, LOGGING

class-map match-any system-cpp-default

description DHCP snooping, show forward and rest of traffic

class-map match-any system-cpp-police-sys-data

description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, Gold Pkt, RPF Failed

class-map match-any system-cpp-police-punt-webauth

description Punt Webauth

class-map match-any system-cpp-police-forus

description Forus Address resolution and Forus traffic

class-map match-any system-cpp-police-multicast-end-station

description MCAST END STATION

class-map match-any system-cpp-police-multicast

description Transit Traffic and MCAST Data

class-map match-any system-cpp-police-l2-control

description L2 control

class-map match-any system-cpp-police-dot1x-auth

description DOT1X Auth

class-map match-any system-cpp-police-data

description ICMP_GEN and BROADCAST

class-map match-any system-cpp-police-control-low-priority

description ICMP redirect and general punt

class-map match-any system-cpp-police-wireless-priority1

description Wireless priority 1

class-map match-any system-cpp-police-wireless-priority2

description Wireless priority 2

class-map match-any system-cpp-police-wireless-priority3-4-5

description Wireless priority 3,4 and 5

class-map match-any non-client-nrt-class

class-map match-any system-cpp-police-routing-control

description Routing control

class-map match-any system-cpp-police-protocol-snooping

description Protocol snooping

!

policy-map port_child_policy

class non-client-nrt-class

bandwidth remaining ratio 10

policy-map system-cpp-policy

class system-cpp-police-data

police rate 200 pps

class system-cpp-police-sys-data

police rate 100 pps

class system-cpp-police-sw-forward

police rate 1000 pps

class system-cpp-police-multicast

police rate 500 pps

class system-cpp-police-multicast-end-station

police rate 2000 pps

class system-cpp-police-punt-webauth

class system-cpp-police-l2-control

class system-cpp-police-routing-control

police rate 1800 pps

class system-cpp-police-control-low-priority

class system-cpp-police-wireless-priority1

class system-cpp-police-wireless-priority2

class system-cpp-police-wireless-priority3-4-5

class system-cpp-police-topology-control

class system-cpp-police-dot1x-auth

class system-cpp-police-protocol-snooping

class system-cpp-police-forus

class system-cpp-default

!

!

!

!

!

!

!

!

!

!

!

!

!

!

interface Port-channel1

description Ports 3,4,5,6,Loki

switchport access vlan 25

switchport trunk allowed vlan 25

switchport mode access

!

interface Port-channel2

description 19,20,Surtur

switchport access vlan 25

switchport mode access

!

interface Port-channel3

description Ports1,2,Network

switchport trunk allowed vlan 25

switchport mode trunk

!

interface Port-channel4

switchport access vlan 25

switchport mode access

!

interface Port-channel5

description Ports 13,14,15,16,Logan

switchport access vlan 25

switchport mode access

!

interface Port-channel6

description 21,22,23,24,Freyr

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet0/0

vrf forwarding Mgmt-vrf

no ip address

negotiation auto

!

interface GigabitEthernet1/0/1

switchport trunk allowed vlan 25

switchport mode trunk

channel-group 3 mode active

!

interface GigabitEthernet1/0/2

switchport trunk allowed vlan 25

switchport mode trunk

channel-group 3 mode active

!

interface GigabitEthernet1/0/3

switchport access vlan 25

switchport trunk allowed vlan 25

switchport mode access

channel-group 1 mode passive

!

interface GigabitEthernet1/0/4

switchport access vlan 25

switchport trunk allowed vlan 25

switchport mode access

channel-group 1 mode passive

!

interface GigabitEthernet1/0/5

switchport access vlan 25

switchport trunk allowed vlan 25

switchport mode access

channel-group 1 mode passive

!

interface GigabitEthernet1/0/6

switchport access vlan 25

switchport trunk allowed vlan 25

switchport mode access

channel-group 1 mode passive

!

interface GigabitEthernet1/0/7

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/8

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/9

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/10

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/11

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/12

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/13

switchport access vlan 25

switchport mode access

channel-group 5 mode passive

!

interface GigabitEthernet1/0/14

switchport access vlan 25

switchport mode access

channel-group 5 mode passive

!

interface GigabitEthernet1/0/15

switchport access vlan 25

switchport mode access

channel-group 5 mode passive

!

interface GigabitEthernet1/0/16

switchport access vlan 25

switchport mode access

channel-group 5 mode passive

!

interface GigabitEthernet1/0/17

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/18

switchport access vlan 25

switchport mode access

!

interface GigabitEthernet1/0/19

switchport access vlan 25

switchport mode access

channel-group 2 mode passive

!

interface GigabitEthernet1/0/20

switchport access vlan 25

switchport mode access

channel-group 2 mode passive

!

interface GigabitEthernet1/0/21

switchport access vlan 25

switchport mode access

channel-group 6 mode passive

!

interface GigabitEthernet1/0/22

switchport access vlan 25

switchport mode access

channel-group 6 mode passive

!

interface GigabitEthernet1/0/23

switchport access vlan 25

switchport mode access

channel-group 6 mode passive

!

interface GigabitEthernet1/0/24

switchport access vlan 25

switchport mode access

channel-group 6 mode passive

!

interface GigabitEthernet1/1/1

!

interface GigabitEthernet1/1/2

!

interface GigabitEthernet1/1/3

!

interface GigabitEthernet1/1/4

!

interface Vlan1

no ip address

shutdown

!

interface Vlan99

ip address 10.21.25.2 255.255.255.0

!

ip default-gateway 10.21.25.1

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server

!

ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data

permit tcp any any eq 22

permit tcp any any eq 465

permit tcp any any eq 143

permit tcp any any eq 993

permit tcp any any eq 995

permit tcp any any eq 1914

permit tcp any any eq ftp

permit tcp any any eq ftp-data

permit tcp any any eq smtp

permit tcp any any eq pop3

ip access-list extended AutoQos-4.0-wlan-Acl-MultiEnhanced-Conf

permit udp any any range 16384 32767

permit tcp any any range 50000 59999

ip access-list extended AutoQos-4.0-wlan-Acl-Scavanger

permit tcp any any range 2300 2400

permit udp any any range 2300 2400

permit tcp any any range 6881 6999

permit tcp any any range 28800 29100

permit tcp any any eq 1214

permit udp any any eq 1214

permit tcp any any eq 3689

permit udp any any eq 3689

permit tcp any any eq 11999

ip access-list extended AutoQos-4.0-wlan-Acl-Signaling

permit tcp any any range 2000 2002

permit tcp any any range 5060 5061

permit udp any any range 5060 5061

ip access-list extended AutoQos-4.0-wlan-Acl-Transactional-Data

permit tcp any any eq 443

permit tcp any any eq 1521

permit udp any any eq 1521

permit tcp any any eq 1526

permit udp any any eq 1526

permit tcp any any eq 1575

permit udp any any eq 1575

permit tcp any any eq 1630

permit udp any any eq 1630

permit tcp any any eq 1527

permit tcp any any eq 6200

permit tcp any any eq 3389

permit tcp any any eq 5985

permit tcp any any eq 8080

!

!

!

control-plane

service-policy input system-cpp-policy

!

!

line con 0

password 7 106F3D214145425B5C

logging synchronous

login

stopbits 1

line aux 0

stopbits 1

line vty 0 4

password 7 080078764D4B554742

login

line vty 5 15

password 7 080078764D4B554742

login

!

!

wsma agent exec

!

wsma agent config

!

wsma agent filesys

!

wsma agent notify

!

!

ap dot11 airtime-fairness policy-name Default 0

ap group default-group

ap hyperlocation ble-beacon 0

ap hyperlocation ble-beacon 1

ap hyperlocation ble-beacon 2

ap hyperlocation ble-beacon 3

ap hyperlocation ble-beacon 4

end