Difference between revisions of "24PinTechSwitch Config"

From 24PinTech Wiki
Jump to navigation Jump to search
(Newest config of back switch)
(Current running configuration of the main switch for the CTE network as of 9/17/24)
 
(9 intermediate revisions by 3 users not shown)
Line 4: Line 4:
Building configuration...
Building configuration...


Current configuration : 11232 bytes
Current configuration : 10730 bytes !!


!
Last configuration change at 15:39:09 UTC Tue Sep 17 2024 by 24PinTech!
 
! Last configuration change at 20:21:32 UTC Mon Dec 16 2019
 
!


version 16.3
version 16.3
Line 22: Line 18:
service password-encryption
service password-encryption


no platform punt-keepalive disable-kernel-core
no platform punt-keepalive disable-kernel-core !


!
hostname 24PinTech_Switch !!


hostname 24PinTech_Switch
vrf definition Mgmt-vrf !
 
!
 
!
 
vrf definition Mgmt-vrf
 
!


address-family ipv4
address-family ipv4


exit-address-family
exit-address-family !
 
!


address-family ipv6
address-family ipv6


exit-address-family
exit-address-family !
 
!


enable secret 5 $1$W8fz$yoZKAzoRMefe/h6hlXo741
enable secret 5 $1$bibk$uwpxgKcUpBT0Qz.R1EfA50 !
 
!


no aaa new-model
no aaa new-model


switch 1 provision ws-c3650-24ps
switch 1 provision ws-c3650-24ps !!!!!!!!!!!!!!!!!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!


!
shutdown vlan 99 !
 
!
 
!
 
!
 
!
 
!
 
!
 
!


crypto pki trustpoint TP-self-signed-833429682
crypto pki trustpoint TP-self-signed-833429682
Line 96: Line 48:
revocation-check none
revocation-check none


rsakeypair TP-self-signed-833429682
rsakeypair TP-self-signed-833429682 !!
 
!
 
!
 
crypto pki certificate chain TP-self-signed-833429682
 
certificate self-signed 01
 
3082032E 30820216 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
 
30312E30 2C060355 04031325 494F532D 53656C66 2D536967 6E65642D 43657274
 
69666963 6174652D 38333334 32393638 32301E17 0D313831 32313331 34323034
 
315A170D 32303031 30313030 30303030 5A303031 2E302C06 03550403 1325494F
 
532D5365 6C662D53 69676E65 642D4365 72746966 69636174 652D3833 33343239
 
36383230 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 82010A02
 
82010100 B0D39D58 2D4C7FDC 841C4218 351FC504 04982D66 D288F9D9 2287404A
 
426EF5F2 BCCBD1EE 68213925 2B0551D2 A2C86084 E8043697 B26007BF 64A60A27
 
2EB662BD 8D4C199B D5A07C54 D4A41271 41F05D79 B48D0EB5 E1A032DC E8FF89E1
 
AD67D152 E900359C F27E2327 1D911B5C 6FB1DFFF 48B0F08D 66BD092A 98D5E202
 
5A0522FC 31841F0F C6487E92 3C58F9E4 D99C6E45 9DFD7B68 6223AB65 A9654FB2
 
5FE2AD3B A352B11E D1DBC8E5 F210E03E 3CCA4DFB 80B841B0 7B2A8238 C77DBEFD


3784B083 2BAEB87C D9183E27 C8F60CB8 A3AD1BE0 DED3CD52 3C82AF6B 4FC14D76
crypto pki certificate chain TP-self-signed-833429682 !
 
F8BA171E 3AA82EDE B8596838 24292619 1CCE85FD FC3E9ED3 12EED95A DEE225CB
 
F3CFD15B 02030100 01A35330 51300F06 03551D13 0101FF04 05300301 01FF301F
 
0603551D 23041830 1680142E 5138154C 63A9B7C5 338C1741 26388AD6 728D4F30
 
1D060355 1D0E0416 04142E51 38154C63 A9B7C533 8C174126 388AD672 8D4F300D
 
06092A86 4886F70D 01010505 00038201 01000634 C6E71494 3E25D7CB C11C089E
 
76F5F7C5 48696B0F 2BE03824 E470023A 3407097A F4713D1B E0988AA2 00C90BA1
 
369F4428 E122C209 43DBDBE2 8D43FB09 DB3210DE 3873C291 723F2B99 99CD1DFE
 
76DE7D32 48AF3C12 14135336 485594BB B3507EED 0D710F9B 2365C689 D9A26282
 
ED7BEBB7 37552D79 62B21B47 65B09A08 BE71F5E0 F8F4986E 04309DA1 03B98E2D
 
8CD86595 0D068E47 AAE5C52A 62291A8F B84AC6DF 2D43F067 A9CEB8F1 A1347850
 
0167914E 1FC2BA95 173E2634 108C32E4 0C787DD9 5FD096BB 178CB93C CEB90BD7
 
723A0372 94E83318 BF2CD70E 40DFDD2D 8190B0A4 297A0168 0A629F12 DC659693
 
ACE9F8BA 1B270E40 207F25CB E3F9ABCE BE48
 
quit
 
!


license boot level ipbasek9
license boot level ipbasek9


diagnostic bootup level minimal
diagnostic bootup level minimal !


spanning-tree mode rapid-pvst
spanning-tree mode rapid-pvst
Line 170: Line 60:
spanning-tree extend system-id
spanning-tree extend system-id


!
no spanning-tree vlan 25 !!
 
!


!
username 24pintech privilege 15 password 7 03291A08345F6C6D7031395743025A0230792                                                                                                                                                             80C !


redundancy
redundancy


mode sso
mode sso !!!
 
!
 
!
 
!


class-map match-any system-cpp-police-topology-control
class-map match-any system-cpp-police-topology-control


description Topology control
  description Topology control


class-map match-any system-cpp-police-sw-forward
class-map match-any system-cpp-police-sw-forward


description Sw forwarding, SGT Cache Full, LOGGING
  description Sw forwarding, SGT Cache Full, LOGGING


class-map match-any system-cpp-default
class-map match-any system-cpp-default


description DHCP snooping, show forward and rest of traffic
  description DHCP snooping, show forward and rest of traffic


class-map match-any system-cpp-police-sys-data
class-map match-any system-cpp-police-sys-data


description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL SAMPLED DATA, Gold Pkt, RPF Failed
  description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL                                                                                                                                                              SAMPLED DATA, Gold Pkt, RPF Failed


class-map match-any system-cpp-police-punt-webauth
class-map match-any system-cpp-police-punt-webauth


description Punt Webauth
  description Punt Webauth


class-map match-any system-cpp-police-forus
class-map match-any system-cpp-police-forus


description Forus Address resolution and Forus traffic
  description Forus Address resolution and Forus traffic


class-map match-any system-cpp-police-multicast-end-station
class-map match-any system-cpp-police-multicast-end-station


description MCAST END STATION
  description MCAST END STATION


class-map match-any system-cpp-police-multicast
class-map match-any system-cpp-police-multicast


description Transit Traffic and MCAST Data
  description Transit Traffic and MCAST Data


class-map match-any system-cpp-police-l2-control
class-map match-any system-cpp-police-l2-control


description L2 control
  description L2 control


class-map match-any system-cpp-police-dot1x-auth
class-map match-any system-cpp-police-dot1x-auth


description DOT1X Auth
  description DOT1X Auth


class-map match-any system-cpp-police-data
class-map match-any system-cpp-police-data


description ICMP_GEN and BROADCAST
  description ICMP_GEN and BROADCAST


class-map match-any system-cpp-police-control-low-priority
class-map match-any system-cpp-police-control-low-priority


description ICMP redirect and general punt
  description ICMP redirect and general punt


class-map match-any system-cpp-police-wireless-priority1
class-map match-any system-cpp-police-wireless-priority1


description Wireless priority 1
  description Wireless priority 1


class-map match-any system-cpp-police-wireless-priority2
class-map match-any system-cpp-police-wireless-priority2


description Wireless priority 2
  description Wireless priority 2


class-map match-any system-cpp-police-wireless-priority3-4-5
class-map match-any system-cpp-police-wireless-priority3-4-5


description Wireless priority 3,4 and 5
  description Wireless priority 3,4 and 5


class-map match-any non-client-nrt-class
class-map match-any non-client-nrt-class
Line 250: Line 132:
class-map match-any system-cpp-police-routing-control
class-map match-any system-cpp-police-routing-control


description Routing control
  description Routing control


class-map match-any system-cpp-police-protocol-snooping
class-map match-any system-cpp-police-protocol-snooping


description Protocol snooping
  description Protocol snooping !
 
!


policy-map port_child_policy
policy-map port_child_policy
Line 262: Line 142:
class non-client-nrt-class
class non-client-nrt-class


bandwidth remaining ratio 10
  bandwidth remaining ratio 10


policy-map system-cpp-policy
policy-map system-cpp-policy
Line 268: Line 148:
class system-cpp-police-data
class system-cpp-police-data


police rate 200 pps
  police rate 200 pps


class system-cpp-police-sys-data
class system-cpp-police-sys-data


police rate 100 pps
  police rate 100 pps


class system-cpp-police-sw-forward
class system-cpp-police-sw-forward


police rate 1000 pps
  police rate 1000 pps


class system-cpp-police-multicast
class system-cpp-police-multicast


police rate 500 pps
  police rate 500 pps


class system-cpp-police-multicast-end-station
class system-cpp-police-multicast-end-station


police rate 2000 pps
  police rate 2000 pps


class system-cpp-police-punt-webauth
class system-cpp-police-punt-webauth
Line 292: Line 172:
class system-cpp-police-routing-control
class system-cpp-police-routing-control


police rate 1800 pps
  police rate 1800 pps


class system-cpp-police-control-low-priority
class system-cpp-police-control-low-priority
Line 310: Line 190:
class system-cpp-police-forus
class system-cpp-police-forus


class system-cpp-default
class system-cpp-default !!!!!!!!!!!!!!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!
 
!


interface Port-channel1
interface Port-channel1


description Ports 3,4,5,6,Loki
description Ports: 9, 10, 11, 12 to Asgard


switchport access vlan 25
switchport access vlan 25


switchport trunk allowed vlan 25
switchport mode access !
 
switchport mode access
 
!


interface Port-channel2
interface Port-channel2


description 19,20,Surtur
description Ports: 3, 4, 5, 6 to Valhalla


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode access !
 
!


interface Port-channel3
interface Port-channel3


description Ports1,2,Network
description Ports: 1, 2 to School Network


switchport trunk allowed vlan 25
switchport trunk allowed vlan 25


switchport mode trunk
switchport mode trunk !


!
interface Port-channel4


interface Port-channel4
description Ports 13,14,15,16 to Charlie


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode access !
 
!


interface Port-channel5
interface Port-channel5


description Ports 13,14,15,16,Logan
description Ports: 17, 18, 19, 20 to Open


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode trunk !
 
!


interface Port-channel6
interface Port-channel6


description 21,22,23,24,Freyr
description Ports: 21, 22, 23, 24 to Alpha


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode access !
 
!


interface GigabitEthernet0/0
interface GigabitEthernet0/0
Line 406: Line 246:
no ip address
no ip address


negotiation auto
negotiation auto !


!
interface GigabitEthernet1/0/1


interface GigabitEthernet1/0/1
description Ports: 1, 2 to School Network


switchport trunk allowed vlan 25
switchport trunk allowed vlan 25
Line 416: Line 256:
switchport mode trunk
switchport mode trunk


channel-group 3 mode active
channel-group 3 mode active !


!
interface GigabitEthernet1/0/2


interface GigabitEthernet1/0/2
description Ports: 1, 2 to School Network


switchport trunk allowed vlan 25
switchport trunk allowed vlan 25
Line 426: Line 266:
switchport mode trunk
switchport mode trunk


channel-group 3 mode active
channel-group 3 mode active !


!
interface GigabitEthernet1/0/3


interface GigabitEthernet1/0/3
description Ports: 3, 4, 5, 6 to Valhalla


switchport access vlan 25
switchport access vlan 25
switchport trunk allowed vlan 25


switchport mode access
switchport mode access


channel-group 1 mode passive
channel-group 2 mode on !


!
interface GigabitEthernet1/0/4


interface GigabitEthernet1/0/4
description Ports: 3, 4, 5, 6 to Valhalla


switchport access vlan 25
switchport access vlan 25
switchport trunk allowed vlan 25


switchport mode access
switchport mode access


channel-group 1 mode passive
channel-group 2 mode on !


!
interface GigabitEthernet1/0/5


interface GigabitEthernet1/0/5
description Ports: 3, 4, 5, 6 to Valhalla


switchport access vlan 25
switchport access vlan 25
switchport trunk allowed vlan 25


switchport mode access
switchport mode access


channel-group 1 mode passive
channel-group 2 mode on !


!
interface GigabitEthernet1/0/6


interface GigabitEthernet1/0/6
description Ports: 3, 4, 5, 6 to Valhalla


switchport access vlan 25
switchport access vlan 25
switchport trunk allowed vlan 25


switchport mode access
switchport mode access


channel-group 1 mode passive
channel-group 2 mode on !


!
interface GigabitEthernet1/0/7


interface GigabitEthernet1/0/7
description OPEN


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode access !


!
interface GigabitEthernet1/0/8


interface GigabitEthernet1/0/8
description OPEN


switchport access vlan 25
switchport access vlan 25


switchport mode access
switchport mode access !
 
!


interface GigabitEthernet1/0/9
interface GigabitEthernet1/0/9
description Ports: 9, 10, 11, 12 to Asgard


switchport access vlan 25
switchport access vlan 25
Line 500: Line 332:
switchport mode access
switchport mode access


!
channel-group 1 mode on !


interface GigabitEthernet1/0/10
interface GigabitEthernet1/0/10
description Ports: 9, 10, 11, 12 to Asgard


switchport access vlan 25
switchport access vlan 25
Line 508: Line 342:
switchport mode access
switchport mode access


!
channel-group 1 mode on !


interface GigabitEthernet1/0/11
interface GigabitEthernet1/0/11
description Ports: 9, 10, 11, 12 to Asgard


switchport access vlan 25
switchport access vlan 25
Line 516: Line 352:
switchport mode access
switchport mode access


!
channel-group 1 mode on !


interface GigabitEthernet1/0/12
interface GigabitEthernet1/0/12
description Ports: 9, 10, 11, 12 to Asgard


switchport access vlan 25
switchport access vlan 25
Line 524: Line 362:
switchport mode access
switchport mode access


!
channel-group 1 mode on !


interface GigabitEthernet1/0/13
interface GigabitEthernet1/0/13
description Ports 13,14,15,16 to Charlie


switchport access vlan 25
switchport access vlan 25
Line 532: Line 372:
switchport mode access
switchport mode access


channel-group 5 mode passive
channel-group 4 mode active !


!
interface GigabitEthernet1/0/14


interface GigabitEthernet1/0/14
description Ports 13,14,15,16 to Charlie


switchport access vlan 25
switchport access vlan 25
Line 542: Line 382:
switchport mode access
switchport mode access


channel-group 5 mode passive
channel-group 4 mode active !


!
interface GigabitEthernet1/0/15


interface GigabitEthernet1/0/15
description Ports 13,14,15,16 to Charlie


switchport access vlan 25
switchport access vlan 25
Line 552: Line 392:
switchport mode access
switchport mode access


channel-group 5 mode passive
channel-group 4 mode active !


!
interface GigabitEthernet1/0/16


interface GigabitEthernet1/0/16
description Ports 13,14,15,16 to Charlie


switchport access vlan 25
switchport access vlan 25
Line 562: Line 402:
switchport mode access
switchport mode access


channel-group 5 mode passive
channel-group 4 mode active !


!
interface GigabitEthernet1/0/17


interface GigabitEthernet1/0/17
description Ports 17,18,19,20 to Open


switchport access vlan 25
switchport access vlan 25
Line 572: Line 412:
switchport mode access
switchport mode access


!
channel-group 5 mode active !


interface GigabitEthernet1/0/18
interface GigabitEthernet1/0/18
description Ports 17,18,19,20 to Open


switchport access vlan 25
switchport access vlan 25
Line 580: Line 422:
switchport mode access
switchport mode access


!
channel-group 5 mode active !


interface GigabitEthernet1/0/19
interface GigabitEthernet1/0/19
description Ports 17,18,19,20 to Open


switchport access vlan 25
switchport access vlan 25
Line 588: Line 432:
switchport mode access
switchport mode access


channel-group 2 mode passive
channel-group 5 mode active !


!
interface GigabitEthernet1/0/20


interface GigabitEthernet1/0/20
description Ports 17,18,19,20 to Open


switchport access vlan 25
switchport access vlan 25
Line 598: Line 442:
switchport mode access
switchport mode access


channel-group 2 mode passive
channel-group 5 mode active !


!
interface GigabitEthernet1/0/21


interface GigabitEthernet1/0/21
description connecton to Alpha


switchport access vlan 25
switchport access vlan 25
Line 608: Line 452:
switchport mode access
switchport mode access


channel-group 6 mode passive
channel-group 6 mode on


!
!


interface GigabitEthernet1/0/22
interface GigabitEthernet1/0/22
description connecton to Alpha


switchport access vlan 25
switchport access vlan 25
Line 618: Line 464:
switchport mode access
switchport mode access


channel-group 6 mode passive
channel-group 6 mode on


!
!


interface GigabitEthernet1/0/23
interface GigabitEthernet1/0/23
description connecton to Alpha


switchport access vlan 25
switchport access vlan 25
Line 628: Line 476:
switchport mode access
switchport mode access


channel-group 6 mode passive
channel-group 6 mode on !


!
interface GigabitEthernet1/0/24


interface GigabitEthernet1/0/24
description connecton to Alpha


switchport access vlan 25
switchport access vlan 25
Line 638: Line 486:
switchport mode access
switchport mode access


channel-group 6 mode passive
channel-group 6 mode on !


!
interface GigabitEthernet1/1/1 !


interface GigabitEthernet1/1/1
interface GigabitEthernet1/1/2 !


!
interface GigabitEthernet1/1/3 !


interface GigabitEthernet1/1/2
interface GigabitEthernet1/1/4 !


!
interface Vlan1


interface GigabitEthernet1/1/3
no ip address
 
!
 
interface GigabitEthernet1/1/4
 
!


interface Vlan1
shutdown !


no ip address
interface Vlan25


shutdown
description Used to create active SVI


!
ip address 10.21.25.28 255.255.255.0 !


interface Vlan99
interface Vlan99


ip address 10.21.25.2 255.255.255.0
description Management VLAN for CISCOACA.local domain


!
no ip address !


ip default-gateway 10.21.25.1
ip default-gateway 10.21.25.1
Line 680: Line 522:
ip http authentication local
ip http authentication local


ip http secure-server
ip http secure-server !
 
!


ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data
ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data
Line 768: Line 608:
permit tcp any any eq 5985
permit tcp any any eq 5985


permit tcp any any eq 8080
permit tcp any any eq 8080 !!!
 
!
 
!
 
!


control-plane
control-plane


service-policy input system-cpp-policy
service-policy input system-cpp-policy !
 
!


!
banner motd ^CAuthorized personnel only! Violators will be subject to the wrath of Chambie!^C !


line con 0
line con 0


password 7 106F3D214145425B5C
password 7 080078764D4B554742


logging synchronous
logging synchronous
Line 800: Line 632:
line vty 0 4
line vty 0 4


password 7 080078764D4B554742
password 7 080878764A4A554742
 
logging synchronous


login
login local


line vty 5 15
line vty 5 15


password 7 080078764D4B554742
password 7 080878764A4A554742
 
login


!
logging synchronous
 
!
 
wsma agent exec
 
!
 
wsma agent config
 
!


wsma agent filesys
login !!


!
wsma agent exec !


wsma agent notify
wsma agent config !


!
wsma agent filesys !


!
wsma agent notify !!


ap dot11 airtime-fairness policy-name Default 0
ap dot11 airtime-fairness policy-name Default 0
Line 847: Line 669:


end
end
==Notes:==
When running an [https://unraid.net/ UnRaid] server the normal <code>{(C-IF)#channel-group on}</code>command may '''NOT''' work, instead use <code>{(C-IF)#channel-protocol lacp}</code>to independently force '''LACP''' on all ports in range. (THIS WILL USUALLY BE NEEDED WHEN USING BOND MODE "ACTIVE-BACKUP (#)" ON UNRAID.)

Latest revision as of 19:33, 17 September 2024

Running Configuration

24PinTech_Switch#show run

Building configuration...

Current configuration : 10730 bytes !!

Last configuration change at 15:39:09 UTC Tue Sep 17 2024 by 24PinTech!

version 16.3

no service pad

service timestamps debug datetime msec

service timestamps log datetime msec

service password-encryption

no platform punt-keepalive disable-kernel-core !

hostname 24PinTech_Switch !!

vrf definition Mgmt-vrf !

address-family ipv4

exit-address-family !

address-family ipv6

exit-address-family !

enable secret 5 $1$bibk$uwpxgKcUpBT0Qz.R1EfA50 !

no aaa new-model

switch 1 provision ws-c3650-24ps !!!!!!!!!!!!!!!!!

shutdown vlan 99 !

crypto pki trustpoint TP-self-signed-833429682

enrollment selfsigned

subject-name cn=IOS-Self-Signed-Certificate-833429682

revocation-check none

rsakeypair TP-self-signed-833429682 !!

crypto pki certificate chain TP-self-signed-833429682 !

license boot level ipbasek9

diagnostic bootup level minimal !

spanning-tree mode rapid-pvst

spanning-tree extend system-id

no spanning-tree vlan 25 !!

username 24pintech privilege 15 password 7 03291A08345F6C6D7031395743025A0230792                                                                                                                                                             80C !

redundancy

mode sso !!!

class-map match-any system-cpp-police-topology-control

  description Topology control

class-map match-any system-cpp-police-sw-forward

  description Sw forwarding, SGT Cache Full, LOGGING

class-map match-any system-cpp-default

  description DHCP snooping, show forward and rest of traffic

class-map match-any system-cpp-police-sys-data

  description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL                                                                                                                                                              SAMPLED DATA, Gold Pkt, RPF Failed

class-map match-any system-cpp-police-punt-webauth

  description Punt Webauth

class-map match-any system-cpp-police-forus

  description Forus Address resolution and Forus traffic

class-map match-any system-cpp-police-multicast-end-station

  description MCAST END STATION

class-map match-any system-cpp-police-multicast

  description Transit Traffic and MCAST Data

class-map match-any system-cpp-police-l2-control

  description L2 control

class-map match-any system-cpp-police-dot1x-auth

  description DOT1X Auth

class-map match-any system-cpp-police-data

  description ICMP_GEN and BROADCAST

class-map match-any system-cpp-police-control-low-priority

  description ICMP redirect and general punt

class-map match-any system-cpp-police-wireless-priority1

  description Wireless priority 1

class-map match-any system-cpp-police-wireless-priority2

  description Wireless priority 2

class-map match-any system-cpp-police-wireless-priority3-4-5

  description Wireless priority 3,4 and 5

class-map match-any non-client-nrt-class

class-map match-any system-cpp-police-routing-control

  description Routing control

class-map match-any system-cpp-police-protocol-snooping

  description Protocol snooping !

policy-map port_child_policy

class non-client-nrt-class

  bandwidth remaining ratio 10

policy-map system-cpp-policy

class system-cpp-police-data

  police rate 200 pps

class system-cpp-police-sys-data

  police rate 100 pps

class system-cpp-police-sw-forward

  police rate 1000 pps

class system-cpp-police-multicast

  police rate 500 pps

class system-cpp-police-multicast-end-station

  police rate 2000 pps

class system-cpp-police-punt-webauth

class system-cpp-police-l2-control

class system-cpp-police-routing-control

  police rate 1800 pps

class system-cpp-police-control-low-priority

class system-cpp-police-wireless-priority1

class system-cpp-police-wireless-priority2

class system-cpp-police-wireless-priority3-4-5

class system-cpp-police-topology-control

class system-cpp-police-dot1x-auth

class system-cpp-police-protocol-snooping

class system-cpp-police-forus

class system-cpp-default !!!!!!!!!!!!!!

interface Port-channel1

description Ports: 9, 10, 11, 12 to Asgard

switchport access vlan 25

switchport mode access !

interface Port-channel2

description Ports: 3, 4, 5, 6 to Valhalla

switchport access vlan 25

switchport mode access !

interface Port-channel3

description Ports: 1, 2 to School Network

switchport trunk allowed vlan 25

switchport mode trunk !

interface Port-channel4

description Ports 13,14,15,16 to Charlie

switchport access vlan 25

switchport mode access !

interface Port-channel5

description Ports: 17, 18, 19, 20 to Open

switchport access vlan 25

switchport mode trunk !

interface Port-channel6

description Ports: 21, 22, 23, 24 to Alpha

switchport access vlan 25

switchport mode access !

interface GigabitEthernet0/0

vrf forwarding Mgmt-vrf

no ip address

negotiation auto !

interface GigabitEthernet1/0/1

description Ports: 1, 2 to School Network

switchport trunk allowed vlan 25

switchport mode trunk

channel-group 3 mode active !

interface GigabitEthernet1/0/2

description Ports: 1, 2 to School Network

switchport trunk allowed vlan 25

switchport mode trunk

channel-group 3 mode active !

interface GigabitEthernet1/0/3

description Ports: 3, 4, 5, 6 to Valhalla

switchport access vlan 25

switchport mode access

channel-group 2 mode on !

interface GigabitEthernet1/0/4

description Ports: 3, 4, 5, 6 to Valhalla

switchport access vlan 25

switchport mode access

channel-group 2 mode on !

interface GigabitEthernet1/0/5

description Ports: 3, 4, 5, 6 to Valhalla

switchport access vlan 25

switchport mode access

channel-group 2 mode on !

interface GigabitEthernet1/0/6

description Ports: 3, 4, 5, 6 to Valhalla

switchport access vlan 25

switchport mode access

channel-group 2 mode on !

interface GigabitEthernet1/0/7

description OPEN

switchport access vlan 25

switchport mode access !

interface GigabitEthernet1/0/8

description OPEN

switchport access vlan 25

switchport mode access !

interface GigabitEthernet1/0/9

description Ports: 9, 10, 11, 12 to Asgard

switchport access vlan 25

switchport mode access

channel-group 1 mode on !

interface GigabitEthernet1/0/10

description Ports: 9, 10, 11, 12 to Asgard

switchport access vlan 25

switchport mode access

channel-group 1 mode on !

interface GigabitEthernet1/0/11

description Ports: 9, 10, 11, 12 to Asgard

switchport access vlan 25

switchport mode access

channel-group 1 mode on !

interface GigabitEthernet1/0/12

description Ports: 9, 10, 11, 12 to Asgard

switchport access vlan 25

switchport mode access

channel-group 1 mode on !

interface GigabitEthernet1/0/13

description Ports 13,14,15,16 to Charlie

switchport access vlan 25

switchport mode access

channel-group 4 mode active !

interface GigabitEthernet1/0/14

description Ports 13,14,15,16 to Charlie

switchport access vlan 25

switchport mode access

channel-group 4 mode active !

interface GigabitEthernet1/0/15

description Ports 13,14,15,16 to Charlie

switchport access vlan 25

switchport mode access

channel-group 4 mode active !

interface GigabitEthernet1/0/16

description Ports 13,14,15,16 to Charlie

switchport access vlan 25

switchport mode access

channel-group 4 mode active !

interface GigabitEthernet1/0/17

description Ports 17,18,19,20 to Open

switchport access vlan 25

switchport mode access

channel-group 5 mode active !

interface GigabitEthernet1/0/18

description Ports 17,18,19,20 to Open

switchport access vlan 25

switchport mode access

channel-group 5 mode active !

interface GigabitEthernet1/0/19

description Ports 17,18,19,20 to Open

switchport access vlan 25

switchport mode access

channel-group 5 mode active !

interface GigabitEthernet1/0/20

description Ports 17,18,19,20 to Open

switchport access vlan 25

switchport mode access

channel-group 5 mode active !

interface GigabitEthernet1/0/21

description connecton to Alpha

switchport access vlan 25

switchport mode access

channel-group 6 mode on

!

interface GigabitEthernet1/0/22

description connecton to Alpha

switchport access vlan 25

switchport mode access

channel-group 6 mode on

!

interface GigabitEthernet1/0/23

description connecton to Alpha

switchport access vlan 25

switchport mode access

channel-group 6 mode on !

interface GigabitEthernet1/0/24

description connecton to Alpha

switchport access vlan 25

switchport mode access

channel-group 6 mode on !

interface GigabitEthernet1/1/1 !

interface GigabitEthernet1/1/2 !

interface GigabitEthernet1/1/3 !

interface GigabitEthernet1/1/4 !

interface Vlan1

no ip address

shutdown !

interface Vlan25

description Used to create active SVI

ip address 10.21.25.28 255.255.255.0 !

interface Vlan99

description Management VLAN for CISCOACA.local domain

no ip address !

ip default-gateway 10.21.25.1

ip forward-protocol nd

ip http server

ip http authentication local

ip http secure-server !

ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data

permit tcp any any eq 22

permit tcp any any eq 465

permit tcp any any eq 143

permit tcp any any eq 993

permit tcp any any eq 995

permit tcp any any eq 1914

permit tcp any any eq ftp

permit tcp any any eq ftp-data

permit tcp any any eq smtp

permit tcp any any eq pop3

ip access-list extended AutoQos-4.0-wlan-Acl-MultiEnhanced-Conf

permit udp any any range 16384 32767

permit tcp any any range 50000 59999

ip access-list extended AutoQos-4.0-wlan-Acl-Scavanger

permit tcp any any range 2300 2400

permit udp any any range 2300 2400

permit tcp any any range 6881 6999

permit tcp any any range 28800 29100

permit tcp any any eq 1214

permit udp any any eq 1214

permit tcp any any eq 3689

permit udp any any eq 3689

permit tcp any any eq 11999

ip access-list extended AutoQos-4.0-wlan-Acl-Signaling

permit tcp any any range 2000 2002

permit tcp any any range 5060 5061

permit udp any any range 5060 5061

ip access-list extended AutoQos-4.0-wlan-Acl-Transactional-Data

permit tcp any any eq 443

permit tcp any any eq 1521

permit udp any any eq 1521

permit tcp any any eq 1526

permit udp any any eq 1526

permit tcp any any eq 1575

permit udp any any eq 1575

permit tcp any any eq 1630

permit udp any any eq 1630

permit tcp any any eq 1527

permit tcp any any eq 6200

permit tcp any any eq 3389

permit tcp any any eq 5985

permit tcp any any eq 8080 !!!

control-plane

service-policy input system-cpp-policy !

banner motd ^CAuthorized personnel only! Violators will be subject to the wrath of Chambie!^C !

line con 0

password 7 080078764D4B554742

logging synchronous

login

stopbits 1

line aux 0

stopbits 1

line vty 0 4

password 7 080878764A4A554742

logging synchronous

login local

line vty 5 15

password 7 080878764A4A554742

logging synchronous

login !!

wsma agent exec !

wsma agent config !

wsma agent filesys !

wsma agent notify !!

ap dot11 airtime-fairness policy-name Default 0

ap group default-group

ap hyperlocation ble-beacon 0

ap hyperlocation ble-beacon 1

ap hyperlocation ble-beacon 2

ap hyperlocation ble-beacon 3

ap hyperlocation ble-beacon 4

end

Notes:

When running an UnRaid server the normal {(C-IF)#channel-group on}command may NOT work, instead use {(C-IF)#channel-protocol lacp}to independently force LACP on all ports in range. (THIS WILL USUALLY BE NEEDED WHEN USING BOND MODE "ACTIVE-BACKUP (#)" ON UNRAID.)