Compare commits
28 Commits
227a7e5270
...
f81b99baaf
| Author | SHA1 | Date | |
|---|---|---|---|
| f81b99baaf | |||
| acc99fe017 | |||
| b3a3edb5a6 | |||
| b834921f5e | |||
| 773cf6ad01 | |||
| 3c1b7a4592 | |||
| 11bef1072c | |||
| 44a9e22e3f | |||
| 0932943a21 | |||
| 0b963f3a21 | |||
| e1d17bf6ca | |||
| 30ab992d4f | |||
| 39e9c5bbc3 | |||
| 6a14691ad2 | |||
| 82c9ad356e | |||
| c582359120 | |||
| 4f79180fbd | |||
| 1079186b63 | |||
| 7cf7e15338 | |||
| eb2062c956 | |||
| cf9beef679 | |||
| f99f7c0d2d | |||
| 75e4a6fefc | |||
| adcc8ab07b | |||
| c9f5ac7b62 | |||
| 9a5f3ca07c | |||
| fc85da95c3 | |||
| a888f3a8a3 |
@ -45,6 +45,7 @@ aaa accounting all-mgmt https-server start-stop group radius
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
object-group ip address clearpass_servers
|
||||
|
||||
@ -44,6 +44,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
@ -2317,12 +2318,12 @@ https-server vrf default
|
||||
https-server vrf mgmt
|
||||
router msdp
|
||||
enable
|
||||
ip msdp peer 10.101.254.253
|
||||
ip msdp peer 10.114.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.114.254.254
|
||||
ip msdp peer 10.101.254.253
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
|
||||
@ -44,6 +44,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
@ -2304,12 +2305,12 @@ https-server vrf default
|
||||
https-server vrf mgmt
|
||||
router msdp
|
||||
enable
|
||||
ip msdp peer 10.114.254.253
|
||||
ip msdp peer 10.101.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.254
|
||||
ip msdp peer 10.114.254.253
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
|
||||
@ -42,6 +42,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -40,6 +40,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -42,6 +42,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
user johnp authorized-key ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOTR1RB6i2+q3Uowzgk3Zj2OnPWgfhXOc16iqmZZJvF6 johnp@JP-T480S
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
|
||||
@ -41,6 +41,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -54,6 +54,7 @@ radius dyn-authorization enable
|
||||
radius dyn-authorization client 10.1.40.115 replay-protection enable secret-key ciphertext AQBapdnIE2FNvoogRkpJl/ZuwykWLHmd/fTvyZgCIG/3v4r2CQAAAOEQtqkUDdiHIQ==
|
||||
radius dyn-authorization client 10.1.40.116 replay-protection enable secret-key ciphertext AQBapWvYPppJSj3xHhiE1gkzB+C3/PyQn47nEWIgmkkVtuc1CQAAANedzl/ZTjTqCg==
|
||||
radius dyn-authorization client 10.1.40.117 replay-protection enable secret-key ciphertext AQBapSNwoTvxxdmfzKtuW53EJoL6/U0I6T2/UiPZgvMVyWGWCQAAAN3uenBRrhnjjA==
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
ssh key-exchange-algorithms curve25519-sha256 curve25519-sha256@libssh.org diffie-hellman-group14-sha1 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512
|
||||
|
||||
@ -54,6 +54,7 @@ radius dyn-authorization enable
|
||||
radius dyn-authorization client 10.1.40.115 replay-protection enable secret-key ciphertext AQBapcuuvXYr/nxDhTpYOb4lApT3nNx9bb8XOMhBvMj3/REoCQAAAGbOSEMM6jD2qQ==
|
||||
radius dyn-authorization client 10.1.40.116 replay-protection enable secret-key ciphertext AQBapeKNJHLE9rJEx/ibZBFHEgX6Q0sQ/et6TLnzuyXV3jR8CQAAAD2Ex4451yiOkA==
|
||||
radius dyn-authorization client 10.1.40.117 replay-protection enable secret-key ciphertext AQBapbmIS2Gf4fkkk1fGgDHYXlVPlwFjQwrigmXQclBEXtWjCQAAABwdb4YciW283Q==
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
ssh key-exchange-algorithms curve25519-sha256 curve25519-sha256@libssh.org diffie-hellman-group14-sha1 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512
|
||||
|
||||
@ -44,6 +44,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
@ -2030,12 +2031,12 @@ router msdp
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.253
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
|
||||
@ -42,6 +42,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
@ -2021,12 +2022,12 @@ router msdp
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.253
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
mesh-group core-meshgrp
|
||||
ip msdp peer 10.101.254.254
|
||||
connect-source loopback0
|
||||
sa-limit 2048
|
||||
enable
|
||||
|
||||
@ -43,6 +43,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -43,6 +43,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -43,6 +43,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -43,6 +43,7 @@ aaa accounting all-mgmt https-server start-stop group tacacs
|
||||
aaa accounting all-mgmt ssh start-stop group tacacs
|
||||
!
|
||||
logging 10.1.40.78
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
access-list log-timer 5
|
||||
|
||||
@ -56,6 +56,7 @@ radius dyn-authorization enable
|
||||
radius dyn-authorization client 10.1.40.115 replay-protection enable secret-key ciphertext AQBapdnIE2FNvoogRkpJl/ZuwykWLHmd/fTvyZgCIG/3v4r2CQAAAOEQtqkUDdiHIQ==
|
||||
radius dyn-authorization client 10.1.40.116 replay-protection enable secret-key ciphertext AQBapWvYPppJSj3xHhiE1gkzB+C3/PyQn47nEWIgmkkVtuc1CQAAANedzl/ZTjTqCg==
|
||||
radius dyn-authorization client 10.1.40.117 replay-protection enable secret-key ciphertext AQBapSNwoTvxxdmfzKtuW53EJoL6/U0I6T2/UiPZgvMVyWGWCQAAAN3uenBRrhnjjA==
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
ssh key-exchange-algorithms curve25519-sha256 curve25519-sha256@libssh.org diffie-hellman-group14-sha1 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512
|
||||
|
||||
@ -54,6 +54,7 @@ radius dyn-authorization enable
|
||||
radius dyn-authorization client 10.1.40.115 replay-protection enable secret-key ciphertext AQBapei8HcoFxRF6aGdTnGSg+3b9X97J0d0bGLxUAo+eFQuUCQAAAG/NcjyWurbIsw==
|
||||
radius dyn-authorization client 10.1.40.116 replay-protection enable secret-key ciphertext AQBapY0JkWCVZwnhsDi876WbgSVjxgHBtfcnIktSVQwuR0gUCQAAACNqI7sOEWJFEQ==
|
||||
radius dyn-authorization client 10.1.40.117 replay-protection enable secret-key ciphertext AQBapfBk87uR2zcL2cVgGuF+TOujlm8J9zwQqL458p7Xkp5eCQAAAN41D5TjWh1TeA==
|
||||
logging 10.1.40.144 severity alert
|
||||
ssh server vrf default
|
||||
ssh server vrf mgmt
|
||||
ssh key-exchange-algorithms curve25519-sha256 curve25519-sha256@libssh.org diffie-hellman-group14-sha1 diffie-hellman-group14-sha256 diffie-hellman-group16-sha512
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user