Building configuration...

Current configuration : 32633 bytes
!
! Last configuration change at 17:22:56 EDT Tue Aug 19 2025 by estein66.admin
! NVRAM config last updated at 17:23:27 EDT Tue Aug 19 2025 by estein66.admin
!
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime localtime
no service password-encryption
service compress-config
!
hostname corcoran-mdf-4507
!
boot-start-marker
boot system flash bootflash:cat4500e-sup8e-firmwareupgrade-151_1r_SG18.SPA
boot system flash bootflash:cat4500e-sup8e-universalk9.SPA.03.11.06.E.152-7.E6.bin
boot-end-marker
!
shell processing full
!
vrf definition mgmtVrf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
logging buffered notifications
no logging console
logging monitor notifications
enable secret 5 $1$7oim$Ct7eP2CcBd21YYHdw2HY7.
!
username admin password 7 13160E005A2D0027222A
aaa new-model
!
!
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization console
aaa authorization exec default group tacacs+ local 
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
aaa accounting network default start-stop group tacacs+
aaa accounting connection default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
!
!
!
!
!
!
aaa session-id common
clock timezone EST -5 0
clock summer-time EDT recurring
!
!
!
!
!
udld aggressive

!
!
!
!
!
!
ip multicast-routing 
no ip domain-lookup
ip domain-name scsd.ad
ip name-server 10.1.40.10
ip dhcp excluded-address 10.7.35.1 10.7.35.10
!
!
!
flow record netflow-record
 match ipv4 tos
 match ipv4 protocol
 match ipv4 source address
 match ipv4 destination address
 match transport source-port
 match transport destination-port
 match interface input
 collect interface output
 collect counter bytes long
 collect counter packets long
!
!
flow exporter netflow-to-orion
 destination 10.1.48.37
 source Vlan501
 transport udp 2055
 template data timeout 60
!
!
flow monitor netflow-monitor
 exporter netflow-to-orion
 cache timeout inactive 10
 cache timeout active 60
 record netflow-record
!
!
!
power redundancy-mode redundant
archive
 log config
  logging enable
  logging size 1000
  notify syslog contenttype plaintext
  hidekeys
 path bootflash:
 maximum 5
file privilege 10
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast edge bpduguard default
spanning-tree extend system-id
spanning-tree uplinkfast
spanning-tree backbonefast
spanning-tree vlan 10,20,30,35,40,50-55,60,62,64,70 priority 8192
!
redundancy
 mode rpr
 main-cpu
  auto-sync startup-config
!
!
vlan configuration 35
vlan internal allocation policy ascending
lldp run
!
!
class-map match-all AutoQos-4.0-Scavenger-Classify
 match access-group name AutoQos-4.0-ACL-Scavenger
class-map match-all AutoQos-4.0-Signaling-Classify
 match access-group name AutoQos-4.0-ACL-Signaling
class-map match-any AutoQos-4.0-Priority-Queue
 match cos  5 
 match dscp ef 
 match dscp cs5 
 match dscp cs4 
class-map match-all AutoQos-4.0-VoIP-Data-Cos
 match cos  5 
class-map match-all AutoQos-VoIP-Control-Dscp26
 match dscp af31 
class-map match-any AutoQos-4.0-Multimedia-Stream-Queue
 match dscp af31 
 match dscp af32 
 match dscp af33 
class-map match-all AutoQos-4.0-VoIP-Signal-Cos
 match cos  3 
class-map match-all AutoQos-VoIP-Control-Dscp24
 match dscp cs3 
class-map match-any AutoQos-4.0-Multimedia-Conf-Queue
 match cos  4 
 match dscp af41 
 match dscp af42 
 match dscp af43 
 match access-group name AutoQos-4.0-ACL-Multimedia-Conf
class-map match-all AutoQos-VoIP-Bearer-Cos
 match cos  5 
class-map match-all AutoQos-4.0-Default-Classify
 match access-group name AutoQos-4.0-ACL-Default
class-map match-any AutoQos-4.0-Bulk-Data-Queue
 match cos  1 
 match dscp af11 
 match dscp af12 
 match dscp af13 
 match access-group name AutoQos-4.0-ACL-Bulk-Data
class-map match-all AutoQos-4.0-Transaction-Classify
 match access-group name AutoQos-4.0-ACL-Transactional-Data
class-map match-all AutoQos-VoIP-Control-QosGroup24
 match qos-group 24
class-map match-all AutoQos-VoIP-Control-QosGroup26
 match qos-group 26
class-map match-all AutoQos-VoIP-Bearer-QosGroup
 match qos-group 46
class-map match-all AutoQos-4.0-VoIP-Video-Cos
 match cos  4 
class-map match-all AutoQos-VoIP-Bearer-Dscp
 match dscp ef 
class-map match-any AutoQos-4.0-Scavenger-Queue
 match dscp cs1 
 match cos  1 
 match access-group name AutoQos-4.0-ACL-Scavenger
class-map match-any AutoQos-4.0-Control-Mgmt-Queue
 match cos  3 
 match dscp cs7 
 match dscp cs6 
 match dscp cs3 
 match dscp cs2 
 match access-group name AutoQos-4.0-ACL-Signaling
class-map match-all AutoQos-4.0-Bulk-Data-Classify
 match access-group name AutoQos-4.0-ACL-Bulk-Data
class-map match-any AutoQos-4.0-Trans-Data-Queue
 match cos  2 
 match dscp af21 
 match dscp af22 
 match dscp af23 
 match access-group name AutoQos-4.0-ACL-Transactional-Data
class-map match-any AutoQos-4.0-VoIP-Data
 match dscp ef 
 match cos  5 
class-map match-all AutoQos-VoIP-Control-Cos
 match cos  3 
class-map match-all AutoQos-4.0-Multimedia-Conf-Classify
 match access-group name AutoQos-4.0-ACL-Multimedia-Conf
class-map match-any AutoQos-4.0-VoIP-Signal
 match dscp cs3 
 match cos  3 
!
policy-map AutoQos-VoIP-Input-Dscp-Policy
 class AutoQos-VoIP-Bearer-Dscp
  set qos-group 46
 class AutoQos-VoIP-Control-Dscp26
  set qos-group 26
 class AutoQos-VoIP-Control-Dscp24
  set qos-group 24
policy-map AutoQos-4.0-Output-Policy
 class AutoQos-4.0-Scavenger-Queue
  bandwidth remaining percent 1 
 class AutoQos-4.0-Priority-Queue
  priority
  police cir percent 30 bc 33 ms
 class AutoQos-4.0-Control-Mgmt-Queue
  bandwidth remaining percent 10 
 class AutoQos-4.0-Multimedia-Conf-Queue
  bandwidth remaining percent 10 
 class AutoQos-4.0-Multimedia-Stream-Queue
  bandwidth remaining percent 10 
 class AutoQos-4.0-Trans-Data-Queue
  bandwidth remaining percent 10 
    dbl
 class AutoQos-4.0-Bulk-Data-Queue
  bandwidth remaining percent 4 
    dbl
 class class-default
  bandwidth remaining percent 25 
    dbl
policy-map AutoQos-VoIP-Output-Policy
 class AutoQos-VoIP-Bearer-QosGroup
  set dscp ef
  set cos 5
  priority
  police cir percent 33
 class AutoQos-VoIP-Control-QosGroup26
  set dscp af31
  set cos 3
  bandwidth remaining percent 5 
 class AutoQos-VoIP-Control-QosGroup24
  set dscp cs3
  set cos 3
  bandwidth remaining percent 5 
 class class-default
    dbl
policy-map AutoQos-VoIP-Input-Cos-Policy
 class AutoQos-VoIP-Bearer-Cos
  set qos-group 46
 class AutoQos-VoIP-Control-Cos
  set qos-group 24
policy-map AutoQos-4.0-Cisco-Phone-Input-Policy
 class AutoQos-4.0-VoIP-Data-Cos
  set dscp ef
  police cir 128000 bc 8000
   exceed-action set-dscp-transmit cs1
   exceed-action set-cos-transmit 1
 class AutoQos-4.0-VoIP-Video-Cos
  set dscp af41
  police cir 10000000 bc 8000
   exceed-action set-dscp-transmit cs1
   exceed-action set-cos-transmit 1
 class AutoQos-4.0-VoIP-Signal-Cos
  set dscp cs3
  police cir 32000 bc 8000
   exceed-action set-dscp-transmit cs1
   exceed-action set-cos-transmit 1
 class class-default
  set dscp default
  set cos 0
!
! 
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Loopback0
 ip address 10.7.254.254 255.255.255.255
!
interface Port-channel5
 description to Corcoran-mdf-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel6
 description to Corcoran-mdf-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel11
 description To Corcoran-idf1-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,48,51,60,62,64,70,72
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel21
 description To Corcoran-idf2-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,52,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel31
 description To Corcoran-idf3-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,53,55,60,62,64,70,72,525
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel41
 description To Corcoran-idf4-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,54,60,62,64,70,230,525
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface Port-channel51
 description To Corcoran-idf5-stack1
 switchport
 switchport trunk allowed vlan 10,20,30,35,40,55,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 flowcontrol receive on
!
interface FastEthernet1
 vrf forwarding mgmtVrf
 no ip address
 shutdown
 speed auto
 duplex auto
!
interface TenGigabitEthernet1/1
 description Corcoran-mdf-stack1 .5
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 5 mode on
!
interface TenGigabitEthernet1/2
 description Corcoran-mdf-stack1 .6
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 6 mode on
!
interface TenGigabitEthernet1/3
 description Corcoran-idf1-stack1 .11
 switchport trunk allowed vlan 10,20,30,35,40,48,51,60,62,64,70,72
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 11 mode on
!
interface TenGigabitEthernet1/4
 description Corcoran-idf2-stack1 .21
 switchport trunk allowed vlan 10,20,30,35,40,52,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 21 mode on
!
interface TenGigabitEthernet1/5
 description Corcoran-idf3-stack1 .31
 switchport trunk allowed vlan 10,20,30,35,40,53,55,60,62,64,70,72,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 31 mode on
!
interface TenGigabitEthernet1/6
 description Corcoran-idf4-stack1 .41
 switchport trunk allowed vlan 10,20,30,35,40,54,60,62,64,70,230,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 41 mode on
!
interface TenGigabitEthernet1/7
 description Corcoran-idf5-stack1 .51
 switchport trunk allowed vlan 10,20,30,35,40,55,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 51 mode on
!
interface TenGigabitEthernet1/8
 description Archive Server2-NVR
 switchport access vlan 70
 switchport mode access
 spanning-tree portfast edge
!
interface TenGigabitEthernet1/9
 description Archive Server2-NVR
 switchport access vlan 70
 switchport mode access
 spanning-tree portfast edge
!
interface TenGigabitEthernet1/10
 description NVR-RING1-CORC_10.7.70.11
 switchport access vlan 70
 switchport mode access
!
interface TenGigabitEthernet1/11
 switchport trunk allowed vlan 10,70
 switchport trunk native vlan 10
 switchport mode trunk
!
interface TenGigabitEthernet1/12
 description Corcoran-3925 VG
 switchport access vlan 50
 switchport trunk native vlan 10
 switchport mode access
!
interface TenGigabitEthernet3/1
 description Corcoran-mdf-stack1 .5
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 5 mode on
!
interface TenGigabitEthernet3/2
 description Corcoran-mdf-stack1 .6
 switchport trunk allowed vlan 10,20,30,35,40,50,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 6 mode on
!
interface TenGigabitEthernet3/3
 description Corcoran-idf1-stack1 .11
 switchport trunk allowed vlan 10,20,30,35,40,48,51,60,62,64,70,72
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 11 mode on
!
interface TenGigabitEthernet3/4
 description Corcoran-idf2-stack1 .21
 switchport trunk allowed vlan 10,20,30,35,40,52,60,62,64,70,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 21 mode on
!
interface TenGigabitEthernet3/5
 description Corcoran-idf3-stack1 .31
 switchport trunk allowed vlan 10,20,30,35,40,53,55,60,62,64,70,72,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 31 mode on
!
interface TenGigabitEthernet3/6
 description Corcoran-idf4-stack1 .41
 switchport trunk allowed vlan 10,20,30,35,40,54,60,62,64,70,230,525
 switchport trunk native vlan 525
 switchport mode trunk
 channel-group 41 mode on
!
interface TenGigabitEthernet3/7
 description to Ring#1 CCF Circuit ID 157699
 switchport trunk allowed vlan 501,511,521,531
 switchport trunk native vlan 525
 switchport mode trunk
 ip flow monitor netflow-monitor input
 udld port disable
 no vtp
 spanning-tree guard none
!
interface TenGigabitEthernet3/8
 description Archive Server-NVR
 switchport access vlan 70
 switchport mode access
!
interface GigabitEthernet7/1
 description Connected to UPS
 switchport access vlan 10
 switchport mode access
!
interface GigabitEthernet7/2
 description NVR-RING1-CORC_10.7.70.13
 switchport access vlan 70
 switchport mode access
!
interface GigabitEthernet7/3
 description nvr-Corcoran-iLO_192.168.7.70
 switchport access vlan 10
 switchport mode access
!
interface GigabitEthernet7/4
 description Archive Server2-NVR
 switchport access vlan 70
 switchport mode access
 spanning-tree portfast edge
!
interface GigabitEthernet7/5
 description Bosch Intrusion Panel
 switchport access vlan 72
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/6
 description nvr-Corcoran2-iLO_192.168.7.201
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast edge
!
interface GigabitEthernet7/7
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/8
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/9
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/10
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/11
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/12
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/13
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/14
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/15
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/16
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/17
 description Connected to Voice and Data Network
 switchport access vlan 20
 switchport mode access
 switchport voice vlan 50
 auto qos voip cisco-phone 
 qos trust device cisco-phone
 spanning-tree portfast edge
 service-policy input AutoQos-4.0-Cisco-Phone-Input-Policy
 service-policy output AutoQos-4.0-Output-Policy
!
interface GigabitEthernet7/18
 description Connected to Archive Server
 switchport access vlan 70
 switchport mode access
 spanning-tree portfast disable
!
interface GigabitEthernet7/19
 description Connected to Archive Server
 switchport access vlan 70
 switchport mode access
 spanning-tree portfast disable
!
interface GigabitEthernet7/20
 description security rack mdf
 switchport trunk allowed vlan 10,20,30,40,53,60,70
 switchport trunk native vlan 10
 switchport mode trunk
!
interface GigabitEthernet7/21
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/22
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/23
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/24
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/25
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/26
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/27
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/28
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/29
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/30
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/31
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/32
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/33
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/34
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/35
 switchport access vlan 35
 no cdp enable
!
interface GigabitEthernet7/36
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/37
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/38
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/39
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/40
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/41
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/42
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/43
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/44
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/45
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/46
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface GigabitEthernet7/47
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
 power inline auto max 22000
!
interface GigabitEthernet7/48
 description To Wireless APs
 switchport trunk allowed vlan 35,59,999
 switchport trunk native vlan 35
 switchport mode trunk
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan10
 ip address 192.168.7.1 255.255.255.0
 no ip redirects
 ip pim sparse-mode
!
interface Vlan20
 ip address 10.7.1.1 255.255.248.0
 ip access-group users in
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.48.189 
 no ip redirects
 ip directed-broadcast 117
 ip pim sparse-mode
!
interface Vlan21
 no ip address
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.189 
 shutdown
!
interface Vlan30
 ip address 10.7.30.1 255.255.254.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan35
 ip address 10.7.35.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 ip helper-address 10.1.40.115 
 ip helper-address 10.1.40.117 
 ip helper-address 10.1.40.116 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan40
 ip address 10.7.40.2 255.255.255.0
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan50
 ip address 10.7.50.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan51
 ip address 10.7.51.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan52
 ip address 10.7.52.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan53
 ip address 10.7.53.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan54
 ip address 10.7.54.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan55
 ip address 10.7.55.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan56
 no ip address
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 shutdown
!
interface Vlan60
 ip address 10.7.60.1 255.255.252.0
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan64
 ip address 10.7.64.1 255.255.252.0
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan70
 description Security Cameras
 ip address 10.7.70.1 255.255.254.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
!
interface Vlan72
 description Access Control
 ip address 10.7.72.1 255.255.255.0
 ip helper-address 10.21.48.20 
 ip helper-address 10.1.40.20 
 no ip redirects
 ip pim sparse-mode
 no autostate
!
interface Vlan107
 no ip address
 ip helper-address 10.1.40.20 
 ip helper-address 10.21.48.20 
 shutdown
!
interface Vlan230
 ip address 10.7.230.1 255.255.255.224
!
interface Vlan501
 description to Ring #1 CCF Service #S200279
 ip address 10.250.201.7 255.255.255.0
 ip pim sparse-mode
 ip ospf cost 3000
!
interface Vlan511
 description ring1_ct-b
 ip address 10.254.211.7 255.255.255.0
 ip pim sparse-mode
 ip ospf cost 4000
!
interface Vlan521
 description ring1_sh-a
 ip address 10.254.221.7 255.255.255.0
 ip pim sparse-mode
 ip ospf cost 1000
!
interface Vlan531
 description ring1_sh-b
 ip address 10.254.231.7 255.255.255.0
 ip pim sparse-mode
 ip ospf cost 2000
!
router ospf 315
 router-id 7.7.7.7
 area 201 nssa
 area 201 range 10.7.0.0 255.255.0.0
 area 201 range 192.168.0.0 255.255.252.0
 passive-interface default
 no passive-interface Vlan501
 no passive-interface Vlan511
 no passive-interface Vlan521
 no passive-interface Vlan531
 network 10.7.230.0 0.0.0.31 area 201
 network 10.7.0.0 0.0.255.255 area 201
 network 10.250.201.7 0.0.0.0 area 0
 network 10.254.211.7 0.0.0.0 area 0
 network 10.254.221.7 0.0.0.0 area 0
 network 10.254.231.7 0.0.0.0 area 0
 network 192.168.7.0 0.0.0.255 area 201
!
ip forward-protocol nd
ip forward-protocol udp netbios-ss
ip forward-protocol udp 1512
ip forward-protocol udp discard
no ip http server
no ip http secure-server
ip pim rp-address 10.1.0.1
ip tftp blocksize 8192
ip tacacs source-interface Vlan10
ip ssh version 2
ip ssh dh min size 4096
ip ssh server algorithm mac hmac-sha2-256 hmac-sha2-512
ip ssh server algorithm encryption aes256-ctr aes128-ctr
ip ssh server algorithm kex diffie-hellman-group14-sha1
ip ssh server algorithm publickey x509v3-ssh-rsa
!
ip access-list extended AutoQos-4.0-ACL-Bulk-Data
 permit tcp any any eq ftp
 permit tcp any any eq ftp-data
 permit tcp any any eq 22
 permit tcp any any eq smtp
 permit tcp any any eq 465
 permit tcp any any eq 143
 permit tcp any any eq 993
 permit tcp any any eq pop3
 permit tcp any any eq 995
 permit tcp any any eq 1914
ip access-list extended AutoQos-4.0-ACL-Default
 permit ip any any
ip access-list extended AutoQos-4.0-ACL-Multimedia-Conf
 permit udp any any range 16384 32767
ip access-list extended AutoQos-4.0-ACL-Scavenger
 permit tcp any any eq 1214
 permit udp any any eq 1214
 permit tcp any any range 2300 2400
 permit udp any any range 2300 2400
 permit tcp any any eq 3689
 permit udp any any eq 3689
 permit tcp any any range 6881 6999
 permit tcp any any eq 11999
 permit tcp any any range 28800 29100
ip access-list extended AutoQos-4.0-ACL-Signaling
 permit tcp any any range 2000 2002
 permit tcp any any range 5060 5061
 permit udp any any range 5060 5061
ip access-list extended AutoQos-4.0-ACL-Transactional-Data
 permit tcp any any eq 443
 permit tcp any any eq 1521
 permit udp any any eq 1521
 permit tcp any any eq 1526
 permit udp any any eq 1526
 permit tcp any any eq 1575
 permit udp any any eq 1575
 permit tcp any any eq 1630
 permit udp any any eq 1630
ip access-list extended dhcpcap
 permit udp host 10.1.40.20 any
 permit udp host 10.21.48.20 any
ip access-list extended users
 deny   ip any 192.168.0.0 0.0.255.255
 permit ip any any
!
logging trap notifications
logging origin-id hostname
logging facility syslog
logging host 10.1.40.78
access-list 101 deny   ip 10.7.50.0 0.0.0.255 host 10.1.150.17
access-list 101 deny   ip 10.7.50.0 0.0.0.255 host 10.1.150.16
access-list 101 deny   ip 10.7.50.0 0.0.0.255 host 10.21.150.18
access-list 101 deny   ip 10.7.50.0 0.0.0.255 host 10.21.150.19
access-list 101 deny   ip host 10.1.150.16 10.7.50.0 0.0.0.255
access-list 101 deny   ip host 10.1.150.17 10.7.50.0 0.0.0.255
access-list 101 deny   ip host 10.21.150.18 10.7.50.0 0.0.0.255
access-list 101 deny   ip host 10.21.150.19 10.7.50.0 0.0.0.255
access-list 101 permit ip any any
access-list 102 deny   ip 10.7.50.0 0.0.0.255 host 10.1.150.16
access-list 102 deny   ip 10.7.50.0 0.0.0.255 host 10.1.150.17
access-list 102 deny   ip 10.7.50.0 0.0.0.255 host 10.21.150.18
access-list 102 deny   ip 10.7.50.0 0.0.0.255 host 10.21.150.19
access-list 102 deny   ip host 10.1.150.16 10.7.50.0 0.0.0.255
access-list 102 deny   ip host 10.1.150.17 10.7.50.0 0.0.0.255
access-list 102 deny   ip host 10.21.150.18 10.7.50.0 0.0.0.255
access-list 102 deny   ip host 10.21.150.19 10.7.50.0 0.0.0.255
access-list 102 permit ip any any
access-list 117 permit udp host 10.1.40.189 any eq discard
!
!
snmp-server community mickey03 RO
snmp-server community mouse99 RW
snmp-server trap-source Vlan10
snmp-server location Corcoran-MDF
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flash insertion removal
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps config
!
tacacs server noc-cp-a
 address ipv4 10.1.40.116
 key 7 08324F5D0D5A00130752
tacacs server noc-cp-b
 address ipv4 10.1.40.117
 key 7 08324F5D0D5A00130752
!
!
privilege configure all level 10 logging
privilege exec level 1 connect
privilege exec level 15 telnet
privilege exec level 10 show running-config view full
privilege exec level 10 show running-config view
privilege exec all level 10 show running-config
privilege exec level 10 show
banner motd ^C
!!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!!
!                                                                         !
!            You are accessing a PRIVATE COMPUTING FACILITY.              !
!        Access to this system is restricted to AUTHORIZED PERSONNEL.     !
!                                                                         !
!     Anyone who accesses this system without authorization, or in        !
!     excess of their authorization could be subject to a fine,           !
!     imprisonment, or both under Public and Federal Law. By entering     !
!     this system, you consent to having your accesses and activities     !
!     monitored and recorded.                                             !
!                                                                         !
!          If this monitoring or record reveals suspected unauthorized    !
!              or criminal activity, the evidence will be provided        !
!           to supervisory personnel and law enforcement officials.       !
!                                                                         !
!            IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW !        !
!                                                                         !
!!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!! WARNING !!!!!                                                     
^C
alias exec show-running-config show running-config view full
!
line con 0
 exec-timeout 0 0
 password 7 121C1C12300E0929
 logging synchronous
 stopbits 1
line vty 0 4
 exec-timeout 0 0
 password 7 01001F160A2A02022842
 length 0
 transport preferred ssh
 transport input ssh
line vty 5 15
 exec-timeout 15 0
 password 7 01001F160A2A02022842
 length 0
 transport preferred ssh
 transport input ssh
!
ntp server 10.1.1.2 prefer
ntp server 10.1.1.3
!
end