1066 lines
29 KiB
INI
1066 lines
29 KiB
INI
Current configuration:
|
|
!
|
|
!Version ArubaOS-CX LL.10.13.1161
|
|
!export-password: default
|
|
hostname sh-noc-a8360-3-a
|
|
banner motd #
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
! You are accessing a PRIVATE COMPUTING FACILITY. !
|
|
! Access to this system is restricted to AUTHORIZED PERSONNEL. !
|
|
! !
|
|
! Anyone who accesses this system without authorization, or in !
|
|
! excess of their authorization could be subject to a fine, !
|
|
! imprisonment, or both under Public and Federal Law. By entering !
|
|
! this system, you consent to having your accesses and activities !
|
|
! monitored and recorded. If this monitoring or record reveals !
|
|
! suspected unauthorized or criminal activity, the evidence will !
|
|
! be provided to supervisory personnel and law enforcement officials. !
|
|
! !
|
|
! IF YOU ARE NOT AUTHORIZED TO BE HERE DISCONNECT NOW! !
|
|
!!!!!!!!!!!!!!!!!!!!!!!!!!!!! WARNING !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
|
|
#
|
|
user admin group administrators password ciphertext AQBapchyXMs91yc46bisUG02SnIUId1PM4GHOvm4J50+iRfEYgAAAHaasxMUB06aaHrR2H5Pt/Kt1lmQJ6fc4h0xxvnEaEWkZblwKMLFPTbOMpDdC+5U9ybIHUNFxzgF/K8gzCejt6YzPNjY0LOrwFoj0wQn+mVvCNEaTdR84hLQHKbakJq3GukL
|
|
clock timezone america/new_york
|
|
router vrrp enable
|
|
profile aggregation-leaf
|
|
vrf outside
|
|
ntp server 10.1.1.2 iburst
|
|
ntp server 10.1.1.3 iburst
|
|
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
|
|
ntp enable
|
|
ntp vrf mgmt
|
|
!
|
|
!
|
|
!
|
|
!
|
|
tacacs-server host 10.1.40.115 key ciphertext AQBapT0kxhaxW24oekYopHJIBsKhp9NhWKCYmcFrgNJcPQ9qCQAAALXj9UwJDK+9Lw== vrf mgmt
|
|
tacacs-server host 10.1.40.116 key ciphertext AQBapQYC8DC1fiJJhQUe3GH2sDEStIQkYIEql1/Oc2xDNUAvCQAAADjEdp/eJzskwA== vrf mgmt
|
|
tacacs-server host 10.1.40.117 key ciphertext AQBapTLsdQ5HZSi8BOYgSSIg4b6APangTBR4lFLWkajsG4SNCQAAAADvD+B/sFjoZg== vrf mgmt
|
|
aaa authentication allow-fail-through
|
|
!
|
|
!
|
|
aaa authentication login default group tacacs local
|
|
aaa accounting all-mgmt console start-stop group tacacs
|
|
aaa accounting all-mgmt https-server start-stop group tacacs
|
|
aaa accounting all-mgmt ssh start-stop group tacacs
|
|
!
|
|
logging 10.1.40.78
|
|
logging 10.1.40.144 severity alert
|
|
ssh server vrf default
|
|
ssh server vrf mgmt
|
|
access-list log-timer 5
|
|
vlan 1
|
|
vlan 3
|
|
name _Connected_to_CT_Data_10.1.3.0_
|
|
description ** Connected_to_CT_Data_10.1.3.0 **
|
|
vlan 5
|
|
name _Connected_to_CT_Data_10.1.5.0_
|
|
description ** Connected_to_CT_Data_10.1.5.0 **
|
|
vlan 6
|
|
name VLAN0006
|
|
vlan 7
|
|
name VLAN0007
|
|
vlan 9
|
|
name eSchool
|
|
description eSchool
|
|
vlan 10
|
|
name VLAN0010
|
|
vlan 11
|
|
name VLAN0011
|
|
vlan 12
|
|
name ContentKeeper_Reporting
|
|
description ContentKeeper_Reporting
|
|
vlan 16
|
|
name Appletalk
|
|
description Appletalk
|
|
vlan 18
|
|
name Peoplesoft
|
|
description Peoplesoft
|
|
vlan 19
|
|
name VLAN0019
|
|
vlan 20
|
|
name Data
|
|
description Data
|
|
vlan 21
|
|
name Imaging
|
|
description Imaging
|
|
vlan 24
|
|
name VDI_Desktops
|
|
description CentralTech VDI_Desktops
|
|
vlan 30
|
|
name IoT
|
|
description IoT
|
|
vlan 34
|
|
name Wireless_-_SCSD_Administrator
|
|
description Wireless - SCSD Administrator
|
|
vlan 35
|
|
name Wireless_Controller_Admin
|
|
description Wireless Controller Admin
|
|
vlan 40
|
|
name Servers
|
|
description Servers
|
|
vlan 45
|
|
name SQLVLAN
|
|
description SQL Server VLAN
|
|
vlan 48
|
|
description Servers
|
|
vlan 50
|
|
name Voice
|
|
description Voice
|
|
vlan 60
|
|
name Z-Band_Video
|
|
description Z-Band Video
|
|
vlan 70
|
|
name Security_Video
|
|
description Security Video
|
|
vlan 72
|
|
name Access_Control
|
|
description Access Control
|
|
vlan 99
|
|
name CT_ITTech
|
|
description CT_ITTech
|
|
vlan 100
|
|
name Wireless_SCSD_Vendor
|
|
description Wireless SCSD_Vendor
|
|
vlan 101
|
|
name mgmt-ct-noc
|
|
description Aruba Management vlan
|
|
vlan 107
|
|
name Syracuse_Community_Health_Cente
|
|
description Syracuse Community Health Center
|
|
vlan 114
|
|
name mgmt-sh-noc
|
|
description Aruba Management vlan114
|
|
vlan 140
|
|
name FortiWeb
|
|
description FortiWeb
|
|
vlan 145
|
|
name Aruba_Switch_Default
|
|
description Aruba Switch Default
|
|
vlan 150
|
|
name INFORMACAST
|
|
description Cisco CallManagers
|
|
vlan 151
|
|
name Voice_Gateway
|
|
description Voice Gateway
|
|
vlan 160
|
|
name Wireless_-_Global_SCSD_staff
|
|
description Wireless - Global SCSD staff
|
|
vlan 161
|
|
name VLAN0161
|
|
vlan 164
|
|
name Intune_Wireless_Imaging
|
|
description Intune Wireless Imaging
|
|
vlan 165
|
|
name VLAN0165
|
|
vlan 168
|
|
name imaging
|
|
description Default VLAN for connecting
|
|
vlan 172
|
|
name isolated_iSCSI_vlan_used_on_Por
|
|
description isolated iSCSI vlan used on Port-Channel 2
|
|
vlan 173
|
|
name CTFiler
|
|
description CTFiler
|
|
vlan 174
|
|
name _To_CTFiler_e0c_
|
|
description *** To CTFiler e0c ***
|
|
vlan 175
|
|
name iSCSI-1
|
|
description iSCSI-1
|
|
vlan 176
|
|
name iSCSI-2
|
|
description iSCSI-2
|
|
vlan 177
|
|
name ClusterComm
|
|
description ClusterComm
|
|
vlan 178
|
|
name LiveMigration
|
|
description LiveMigration
|
|
vlan 179
|
|
name Heartbeat
|
|
description Heartbeat
|
|
vlan 200
|
|
name IP_for_inside_firewall_to_city
|
|
description IP for inside firewall to city
|
|
vlan 203
|
|
name Cyber_Security_Classrooms
|
|
description Cyber Security Classrooms
|
|
vlan 230
|
|
name IoT_HVAC
|
|
description IoT_HVAC
|
|
vlan 236
|
|
name Cogent
|
|
vlan 251
|
|
name VLAN0251
|
|
vlan 252
|
|
name CK_Int_Tunneled
|
|
description CK_Int_Tunneled
|
|
vlan 302
|
|
name CentralTechSecureWLAN
|
|
description CentralTech Secure WLAN
|
|
vlan 303
|
|
name PSLASecureWLAN
|
|
description PSLA Secure WLAN clients
|
|
vlan 304
|
|
name NottinghamSecureWLAN
|
|
description Nottingham Secure WLAN
|
|
vlan 305
|
|
name SteamSecureWLAN
|
|
description STEAM HS Secure WLAN
|
|
vlan 306
|
|
name HenningerSecureWLAN
|
|
description Henninger Secure WLAN clients
|
|
vlan 307
|
|
name CorcoranSecureWLAN
|
|
description Corcoran Secure WLAN
|
|
vlan 308
|
|
name ClarySecureWLAN
|
|
description Clary Secure WLAN
|
|
vlan 309
|
|
name GrantSecureWLAN
|
|
description Grant Secure WLAN
|
|
vlan 310
|
|
name LevySecureWLAN
|
|
description Levy Secure WLAN
|
|
vlan 313
|
|
name LincolnSecureWLAN
|
|
description Lincoln Secure WLAN
|
|
vlan 314
|
|
name SheaSecureWLAN
|
|
description Shea Secure WLAN
|
|
vlan 315
|
|
name HWSmithSecureWLAN
|
|
description HWSmith Secure WLAN clients
|
|
vlan 316
|
|
name BellevueSecureWLAN
|
|
description Bellevue Secure WLAN
|
|
vlan 320
|
|
name Dr_KingSecureWLAN
|
|
description Dr_King Secure WLAN
|
|
vlan 321
|
|
name DanforthSecureWLAN
|
|
description Danforth Secure WLAN
|
|
vlan 322
|
|
name DelawareSecureWLAN
|
|
description Delaware Secure WLAN
|
|
vlan 323
|
|
name ElmwoodSecureWLAN
|
|
description Elmwood Secure WLAN
|
|
vlan 324
|
|
name FranklinSecureWLAN
|
|
description Franklin Secure WLAN
|
|
vlan 325
|
|
name FrazerSecureWLAN
|
|
description Frazer Secure WLAN
|
|
vlan 327
|
|
name ElmcrestSecureWLAN
|
|
description Elmcrest Secure WLAN
|
|
vlan 328
|
|
name HughesSecureWLAN
|
|
description Hughes Secure WLAN
|
|
vlan 329
|
|
name HuntingtonSecureWLAN
|
|
description Huntington Secure WLAN
|
|
vlan 330
|
|
name HydeSecureWLAN
|
|
description Hyde Secure WLAN
|
|
vlan 333
|
|
name LemoyneSecureWLAN
|
|
description Lemoyne Secure WLAN clients
|
|
vlan 334
|
|
name WeeksSecureWLAN
|
|
description Weeks Secure WLAN clients
|
|
vlan 336
|
|
name McKinleySecureWLAN
|
|
description McKinley Secure WLAN
|
|
vlan 337
|
|
name MeachemSecureWLAN
|
|
description Meachem Secure WLAN clients
|
|
vlan 340
|
|
name PorterSecureWLAN
|
|
description Porter Secure WLAN
|
|
vlan 341
|
|
name BovaSecureWLAN
|
|
description Bova Secure WLAN
|
|
vlan 342
|
|
name RobertsSecureWLAN
|
|
description Roberts Secure WLAN
|
|
vlan 344
|
|
name SeymourSecureWLAN
|
|
description Seymour Secure WLAN clients
|
|
vlan 345
|
|
name EdSmithSecureWLAN
|
|
description EdSmith Secure WLAN
|
|
vlan 346
|
|
name Brighton466SecureWLAN
|
|
description Brighton466 Secure WLAN
|
|
vlan 347
|
|
name ELMSSecureWLAN
|
|
description ELMS Secure WLAN
|
|
vlan 348
|
|
name BeardSecureWLAN
|
|
description Beard Secure WLAN
|
|
vlan 349
|
|
name Van_DuynSecureWLAN
|
|
description Van_Duyn Secure WLAN
|
|
vlan 351
|
|
name WebsterSecureWLAN
|
|
description Webster Secure WLAN
|
|
vlan 353
|
|
name BlodgettSecureWLAN
|
|
description Blodgett Secure WLAN
|
|
vlan 354
|
|
name JVCSecureWLAN
|
|
description JVC Secure WLAN
|
|
vlan 355
|
|
name CentralOfficeSecureWLAN
|
|
description CentralOffice Secure WLAN
|
|
vlan 356
|
|
name SchoolServiceCenterSecureWLAN
|
|
description SchoolServiceCenter Secure WLAN
|
|
vlan 357
|
|
name TransportationSecureWLAN
|
|
description Transportation Secure WLAN
|
|
vlan 360
|
|
name TeachersCenterSecureWLAN
|
|
description TeachersCenter Secure WLAN
|
|
vlan 366
|
|
name ENLSecureWLAN
|
|
description ENL Secure WLAN
|
|
vlan 367
|
|
name RAPCenterSecureWLAN
|
|
description RAP Center Secure WLAN
|
|
vlan 368
|
|
name CNYWorksSecureWLAN
|
|
description CNY Works Secure WLAN
|
|
vlan 386
|
|
name StLucySecureWLAN
|
|
description StLucy Secure WLAN
|
|
vlan 402
|
|
name CentralTechVendorWLAN
|
|
description CentralTech Vendor WLAN
|
|
vlan 403
|
|
name PSLAVendorWLAN
|
|
description PSLA Vendor WLAN clients
|
|
vlan 404
|
|
name NottinghamVendorWLAN
|
|
description Nottingham Vendor WLAN
|
|
vlan 405
|
|
name SteamHSVendorWLAN
|
|
description STEAM HS Vendor WLAN
|
|
vlan 406
|
|
name HenningerVendorWLAN
|
|
description Henninger Vendor WLAN clients
|
|
vlan 407
|
|
name CorcoranVendorWLAN
|
|
description Corcoran Vendor WLAN
|
|
vlan 408
|
|
name ClaryVendorWLAN
|
|
description Clary Vendor WLAN
|
|
vlan 409
|
|
name GrantVendorWLAN
|
|
description Grant Vendor WLAN
|
|
vlan 410
|
|
name LevyVendorWLAN
|
|
description Levy Vendor WLAN
|
|
vlan 413
|
|
name LincolnVendorWLAN
|
|
description Lincoln Vendor WLAN
|
|
vlan 414
|
|
name SheaVendorWLAN
|
|
description Shea Vendor WLAN
|
|
vlan 415
|
|
name HWSmithVendorWLAN
|
|
description HWSmith Vendor WLAN clients
|
|
vlan 416
|
|
name BellevueVendorWLAN
|
|
description Bellevue Vendor WLAN
|
|
vlan 420
|
|
name Dr_KingVendorWLAN
|
|
description Dr_King Vendor WLAN
|
|
vlan 421
|
|
name DanforthVendorWLAN
|
|
description Danforth Vendor WLAN
|
|
vlan 422
|
|
name DelawareVendorWLAN
|
|
description Delaware Vendor WLAN
|
|
vlan 423
|
|
name ElmwoodVendorWLAN
|
|
description Elmwood Vendor WLAN
|
|
vlan 424
|
|
name FranklinVendorWLAN
|
|
description Franklin Vendor WLAN
|
|
vlan 425
|
|
name FrazerVendorWLAN
|
|
description Frazer Vendor WLAN
|
|
vlan 427
|
|
name ElmcrestVendorWLAN
|
|
description Elmcrest Vendor WLAN
|
|
vlan 428
|
|
name HughesVendorWLAN
|
|
description Hughes Vendor WLAN
|
|
vlan 429
|
|
name HuntingtonVendorWLAN
|
|
description Huntington Vendor WLAN
|
|
vlan 430
|
|
name HydeVendorWLAN
|
|
description Hyde Vendor WLAN
|
|
vlan 433
|
|
name LemoyneVendorWLAN
|
|
description Lemoyne Vendor WLAN clients
|
|
vlan 434
|
|
name WeeksVendorWLAN
|
|
description Weeks Vendor WLAN clients
|
|
vlan 436
|
|
name McKinleyVendorWLAN
|
|
description McKinley Vendor WLAN
|
|
vlan 437
|
|
name MeachemVendorWLAN
|
|
description Meachem Vendor WLAN clients
|
|
vlan 440
|
|
name PorterVendorWLAN
|
|
description Porter Vendor WLAN
|
|
vlan 441
|
|
name BovaVendorWLAN
|
|
description Bova Vendor WLAN
|
|
vlan 442
|
|
name RobertsVendorWLAN
|
|
description Roberts Vendor WLAN
|
|
vlan 444
|
|
name SeymourVendorWLAN
|
|
description Seymour Vendor WLAN clients
|
|
vlan 445
|
|
name EdSmithVendorWLAN
|
|
description EdSmith Vendor WLAN
|
|
vlan 446
|
|
name Brighton466VendorWLAN
|
|
description Brighton466 Vendor WLAN
|
|
vlan 447
|
|
name ELMSVendorWLAN
|
|
description ELMS Vendor WLAN
|
|
vlan 448
|
|
name BeardVendorWLAN
|
|
description Beard Vendor WLAN
|
|
vlan 449
|
|
name Van_DuynVendorWLAN
|
|
description Van_Duyn Vendor WLAN
|
|
vlan 451
|
|
name WebsterVendorWLAN
|
|
description Webster Vendor WLAN
|
|
vlan 453
|
|
name BlodgettVendorWLAN
|
|
description Blodgett Vendor WLAN
|
|
vlan 454
|
|
name JVCVendorWLAN
|
|
description JVC Vendor WLAN
|
|
vlan 455
|
|
name CentralOfficeVendorWLAN
|
|
description CentralOffice Vendor WLAN
|
|
vlan 456
|
|
name SchoolServiceCenterVendorWLAN
|
|
description SchoolServiceCenter Vendor WLAN
|
|
vlan 457
|
|
name TransportationVendorWLAN
|
|
description Transportation Vendor WLAN
|
|
vlan 460
|
|
name TeachersCenterVendorWLAN
|
|
description TeachersCenter Vendor WLAN
|
|
vlan 466
|
|
name ENLVendorWLAN
|
|
description ENL Vendor WLAN
|
|
vlan 467
|
|
name RAPCenterVendorWLAN
|
|
description RAP Center Vendor WLAN
|
|
vlan 468
|
|
name CNYWorksVendorWLAN
|
|
description CNY Works Vendor WLAN
|
|
vlan 486
|
|
name StLucyVendorWLAN
|
|
description StLucy Vendor WLAN
|
|
vlan 500
|
|
name City_Network
|
|
vlan 501
|
|
name Ring_#1
|
|
description Ring #1 | CCF-MRV-155777-ENET PORT5 | SYRCNYG4M81
|
|
vlan 502
|
|
name Ring_#2
|
|
description Ring #2 | CCF-MRV-155779-ENET PORT5 | SYRCNYG4M82
|
|
vlan 503
|
|
name Ring_#3
|
|
description Ring #3 | CCF-MRV-155778-ENET PORT5 | SYRCNYG4M83
|
|
vlan 504
|
|
name Ring_#4
|
|
description Ring #4 | CCF-MRV-155781-ENET PORT5 | SYRCNYG4M84
|
|
vlan 505
|
|
name Ring_#5
|
|
description Ring #5 | CCF-MRV-155780-ENET PORT5 | SYRCNYG4M85
|
|
vlan 506
|
|
name Ring_#6
|
|
description Ring #6 | CCF-MRV-155782-ENET PORT5 | SYRCNYG4M86
|
|
vlan 507
|
|
name Ring_#7
|
|
description Ring #7 | CCF-MRV-155783-ENET PORT5 | SYRCNYG4M87
|
|
vlan 508
|
|
name Ring_#8
|
|
description Ring #8 | CCF-MRV-155787-ENET PORT5 | SYRCNYG4M88
|
|
vlan 509
|
|
name TestRing
|
|
vlan 521
|
|
description Ring_#1_sh-core-a
|
|
vlan 522
|
|
description Ring_#2_sh-core-a
|
|
vlan 523
|
|
description Ring_#3_sh-core-a
|
|
vlan 524
|
|
description Ring_#4_sh-core-a
|
|
vlan 525
|
|
name stub
|
|
description Ring_#5_sh-core-a
|
|
vlan 526
|
|
description Ring_#6_sh-core-a
|
|
vlan 527
|
|
description Ring_#7_sh-core-a
|
|
vlan 528
|
|
description Ring_#8_sh-core-a
|
|
vlan 529
|
|
description Ring_#9_sh-core-a
|
|
vlan 531
|
|
description Ring_#1_sh-core-b
|
|
vlan 532
|
|
description Ring_#2_sh-core-b
|
|
vlan 533
|
|
description Ring_#3_sh-core-b
|
|
vlan 534
|
|
description Ring_#4_sh-core-b
|
|
vlan 535
|
|
description Ring_#5_sh-core-b
|
|
vlan 536
|
|
description Ring_#6_sh-core-b
|
|
vlan 537
|
|
description Ring_#7_sh-core-b
|
|
vlan 538
|
|
description Ring_#8_sh-core-b
|
|
vlan 539
|
|
description Ring_#9_sh-core-b
|
|
vlan 637
|
|
name Nysernet_RE
|
|
vlan 638
|
|
name Nysernet_CDN
|
|
vlan 699
|
|
name SCSDDCDefaultVLAN
|
|
vlan 811
|
|
name linewize-a-inside
|
|
vlan 812
|
|
vlan 995
|
|
name l3vlan
|
|
vlan 999
|
|
name VPN_Concentrator
|
|
description VPN_Concentrator
|
|
vlan 1202
|
|
name Inside
|
|
vlan 1251
|
|
name InsideFirewall
|
|
vlan 1254
|
|
name OutsideVRFTransit
|
|
vlan 1256
|
|
name InterJuniperLink
|
|
vlan 1298
|
|
name CrownCastle-sh
|
|
vlan 1811
|
|
name linewize-a-outside
|
|
vlan 1812
|
|
vlan 2180
|
|
name Nutanix mgmt sh-noc
|
|
description Nutanix mgmt ct-noc
|
|
vlan 2999
|
|
name NexusToArubaTransit
|
|
description NexusToArubaTransit
|
|
vlan 3000
|
|
name dci_transit
|
|
description dci transit
|
|
spanning-tree mode rpvst
|
|
spanning-tree
|
|
spanning-tree priority 2
|
|
spanning-tree trap topology-change instance 0
|
|
spanning-tree ignore-pvid-inconsistency
|
|
spanning-tree vlan 3,5-7,9-12,16,18-21,24,30,34,35,40,45,48,50,60,70,72,99-101,107,114,140,145,150,151,160,161,164,165,168,172-179,200,203,230,251,252,302-310,313-316,320-325,327-330,333,334,336,337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433,434,436,437,440-442,444-449,451,453-457,460,466-468,486,500-509,521-529,531-539,637,638,699,811,812,995,999,1202,1251,1254,1256,1811,1812,2180,2999,3000
|
|
spanning-tree vlan 3 priority 12
|
|
spanning-tree vlan 5 priority 12
|
|
spanning-tree vlan 6 priority 12
|
|
spanning-tree vlan 7 priority 12
|
|
spanning-tree vlan 9 priority 12
|
|
spanning-tree vlan 10 priority 12
|
|
spanning-tree vlan 11 priority 12
|
|
spanning-tree vlan 12 priority 12
|
|
spanning-tree vlan 16 priority 12
|
|
spanning-tree vlan 18 priority 12
|
|
spanning-tree vlan 19 priority 12
|
|
spanning-tree vlan 20 priority 12
|
|
spanning-tree vlan 21 priority 12
|
|
spanning-tree vlan 24 priority 12
|
|
spanning-tree vlan 30 priority 12
|
|
spanning-tree vlan 34 priority 12
|
|
spanning-tree vlan 35 priority 12
|
|
spanning-tree vlan 40 priority 12
|
|
spanning-tree vlan 45 priority 12
|
|
spanning-tree vlan 48 priority 12
|
|
spanning-tree vlan 50 priority 12
|
|
spanning-tree vlan 60 priority 12
|
|
spanning-tree vlan 70 priority 12
|
|
spanning-tree vlan 72 priority 12
|
|
spanning-tree vlan 99 priority 12
|
|
spanning-tree vlan 100 priority 12
|
|
spanning-tree vlan 101 priority 12
|
|
spanning-tree vlan 107 priority 12
|
|
spanning-tree vlan 114 priority 12
|
|
spanning-tree vlan 140 priority 12
|
|
spanning-tree vlan 145 priority 12
|
|
spanning-tree vlan 150 priority 12
|
|
spanning-tree vlan 151 priority 12
|
|
spanning-tree vlan 160 priority 12
|
|
spanning-tree vlan 161 priority 12
|
|
spanning-tree vlan 164 priority 12
|
|
spanning-tree vlan 165 priority 12
|
|
spanning-tree vlan 168 priority 12
|
|
spanning-tree vlan 172 priority 12
|
|
spanning-tree vlan 173 priority 12
|
|
spanning-tree vlan 174 priority 12
|
|
spanning-tree vlan 175 priority 12
|
|
spanning-tree vlan 176 priority 12
|
|
spanning-tree vlan 177 priority 12
|
|
spanning-tree vlan 178 priority 12
|
|
spanning-tree vlan 179 priority 12
|
|
spanning-tree vlan 200 priority 12
|
|
spanning-tree vlan 203 priority 12
|
|
spanning-tree vlan 230 priority 12
|
|
spanning-tree vlan 251 priority 12
|
|
spanning-tree vlan 252 priority 12
|
|
spanning-tree vlan 302 priority 12
|
|
spanning-tree vlan 303 priority 12
|
|
spanning-tree vlan 304 priority 12
|
|
spanning-tree vlan 305 priority 12
|
|
spanning-tree vlan 306 priority 12
|
|
spanning-tree vlan 307 priority 12
|
|
spanning-tree vlan 308 priority 12
|
|
spanning-tree vlan 309 priority 12
|
|
spanning-tree vlan 310 priority 12
|
|
spanning-tree vlan 313 priority 12
|
|
spanning-tree vlan 314 priority 12
|
|
spanning-tree vlan 315 priority 12
|
|
spanning-tree vlan 316 priority 12
|
|
spanning-tree vlan 320 priority 12
|
|
spanning-tree vlan 321 priority 12
|
|
spanning-tree vlan 322 priority 12
|
|
spanning-tree vlan 323 priority 12
|
|
spanning-tree vlan 324 priority 12
|
|
spanning-tree vlan 325 priority 12
|
|
spanning-tree vlan 327 priority 12
|
|
spanning-tree vlan 328 priority 12
|
|
spanning-tree vlan 329 priority 12
|
|
spanning-tree vlan 330 priority 12
|
|
spanning-tree vlan 333 priority 12
|
|
spanning-tree vlan 334 priority 12
|
|
spanning-tree vlan 336 priority 12
|
|
spanning-tree vlan 337 priority 12
|
|
spanning-tree vlan 340 priority 12
|
|
spanning-tree vlan 341 priority 12
|
|
spanning-tree vlan 342 priority 12
|
|
spanning-tree vlan 344 priority 12
|
|
spanning-tree vlan 345 priority 12
|
|
spanning-tree vlan 346 priority 12
|
|
spanning-tree vlan 347 priority 12
|
|
spanning-tree vlan 348 priority 12
|
|
spanning-tree vlan 349 priority 12
|
|
spanning-tree vlan 351 priority 12
|
|
spanning-tree vlan 353 priority 12
|
|
spanning-tree vlan 354 priority 12
|
|
spanning-tree vlan 355 priority 12
|
|
spanning-tree vlan 356 priority 12
|
|
spanning-tree vlan 357 priority 12
|
|
spanning-tree vlan 360 priority 12
|
|
spanning-tree vlan 366 priority 12
|
|
spanning-tree vlan 367 priority 12
|
|
spanning-tree vlan 368 priority 12
|
|
spanning-tree vlan 386 priority 12
|
|
spanning-tree vlan 402 priority 12
|
|
spanning-tree vlan 403 priority 12
|
|
spanning-tree vlan 404 priority 12
|
|
spanning-tree vlan 405 priority 12
|
|
spanning-tree vlan 406 priority 12
|
|
spanning-tree vlan 407 priority 12
|
|
spanning-tree vlan 408 priority 12
|
|
spanning-tree vlan 409 priority 12
|
|
spanning-tree vlan 410 priority 12
|
|
spanning-tree vlan 413 priority 12
|
|
spanning-tree vlan 414 priority 12
|
|
spanning-tree vlan 415 priority 12
|
|
spanning-tree vlan 416 priority 12
|
|
spanning-tree vlan 420 priority 12
|
|
spanning-tree vlan 421 priority 12
|
|
spanning-tree vlan 422 priority 12
|
|
spanning-tree vlan 423 priority 12
|
|
spanning-tree vlan 424 priority 12
|
|
spanning-tree vlan 425 priority 12
|
|
spanning-tree vlan 427 priority 12
|
|
spanning-tree vlan 428 priority 12
|
|
spanning-tree vlan 429 priority 12
|
|
spanning-tree vlan 430 priority 12
|
|
spanning-tree vlan 433 priority 12
|
|
spanning-tree vlan 434 priority 12
|
|
spanning-tree vlan 436 priority 12
|
|
spanning-tree vlan 437 priority 12
|
|
spanning-tree vlan 440 priority 12
|
|
spanning-tree vlan 441 priority 12
|
|
spanning-tree vlan 442 priority 12
|
|
spanning-tree vlan 444 priority 12
|
|
spanning-tree vlan 445 priority 12
|
|
spanning-tree vlan 446 priority 12
|
|
spanning-tree vlan 447 priority 12
|
|
spanning-tree vlan 448 priority 12
|
|
spanning-tree vlan 449 priority 12
|
|
spanning-tree vlan 451 priority 12
|
|
spanning-tree vlan 453 priority 12
|
|
spanning-tree vlan 454 priority 12
|
|
spanning-tree vlan 455 priority 12
|
|
spanning-tree vlan 456 priority 12
|
|
spanning-tree vlan 457 priority 12
|
|
spanning-tree vlan 460 priority 12
|
|
spanning-tree vlan 466 priority 12
|
|
spanning-tree vlan 467 priority 12
|
|
spanning-tree vlan 468 priority 12
|
|
spanning-tree vlan 486 priority 12
|
|
spanning-tree vlan 500 priority 12
|
|
spanning-tree vlan 501 priority 12
|
|
spanning-tree vlan 502 priority 12
|
|
spanning-tree vlan 503 priority 12
|
|
spanning-tree vlan 504 priority 12
|
|
spanning-tree vlan 505 priority 12
|
|
spanning-tree vlan 506 priority 12
|
|
spanning-tree vlan 507 priority 12
|
|
spanning-tree vlan 508 priority 12
|
|
spanning-tree vlan 509 priority 12
|
|
spanning-tree vlan 521 priority 12
|
|
spanning-tree vlan 522 priority 12
|
|
spanning-tree vlan 523 priority 12
|
|
spanning-tree vlan 524 priority 12
|
|
spanning-tree vlan 525 priority 12
|
|
spanning-tree vlan 526 priority 12
|
|
spanning-tree vlan 527 priority 12
|
|
spanning-tree vlan 528 priority 12
|
|
spanning-tree vlan 529 priority 12
|
|
spanning-tree vlan 531 priority 12
|
|
spanning-tree vlan 532 priority 12
|
|
spanning-tree vlan 533 priority 12
|
|
spanning-tree vlan 534 priority 12
|
|
spanning-tree vlan 535 priority 12
|
|
spanning-tree vlan 536 priority 12
|
|
spanning-tree vlan 537 priority 12
|
|
spanning-tree vlan 538 priority 12
|
|
spanning-tree vlan 539 priority 12
|
|
spanning-tree vlan 637 priority 12
|
|
spanning-tree vlan 638 priority 12
|
|
spanning-tree vlan 699 priority 12
|
|
spanning-tree vlan 811 priority 12
|
|
spanning-tree vlan 995 priority 12
|
|
spanning-tree vlan 999 priority 12
|
|
spanning-tree vlan 1202 priority 12
|
|
spanning-tree vlan 1251 priority 12
|
|
spanning-tree vlan 1254 priority 12
|
|
spanning-tree vlan 1256 priority 12
|
|
spanning-tree vlan 1811 priority 12
|
|
spanning-tree vlan 2180 priority 12
|
|
spanning-tree vlan 2999 priority 12
|
|
spanning-tree vlan 3000 priority 12
|
|
interface mgmt
|
|
no shutdown
|
|
ip static 192.168.114.13/24
|
|
default-gateway 192.168.114.1
|
|
qos queue-profile switchports
|
|
map queue 0 local-priority 0
|
|
map queue 1 local-priority 1
|
|
map queue 2 local-priority 2
|
|
map queue 3 local-priority 3
|
|
map queue 4 local-priority 4
|
|
map queue 5 local-priority 6
|
|
map queue 6 local-priority 7
|
|
map queue 7 local-priority 5
|
|
qos schedule-profile voip
|
|
dwrr queue 0 weight 1
|
|
dwrr queue 1 weight 1
|
|
dwrr queue 2 weight 1
|
|
dwrr queue 3 weight 1
|
|
dwrr queue 4 weight 1
|
|
dwrr queue 5 weight 1
|
|
dwrr queue 6 weight 1
|
|
strict queue 7
|
|
apply qos queue-profile switchports schedule-profile voip
|
|
qos trust dscp
|
|
qos dscp-map 40 local-priority 6 color green name CS5
|
|
qos dscp-map 41 local-priority 6 color green name CS5
|
|
qos dscp-map 42 local-priority 6 color green name CS5
|
|
qos dscp-map 43 local-priority 6 color green name CS5
|
|
qos dscp-map 44 local-priority 6 color green name CS5
|
|
qos dscp-map 45 local-priority 6 color green name CS5
|
|
qos dscp-map 47 local-priority 6 color green name CS5
|
|
system interface-group 1 speed 10g
|
|
!interface group 1 contains ports 1/1/1-1/1/4
|
|
interface lag 20 multi-chassis
|
|
description aruba-wlc-a pc-0
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
|
|
lacp mode active
|
|
interface lag 21 multi-chassis
|
|
description aruba-wlc-b pc-0
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 10,30,35,100,160,164,302-310,313-316,320-325,327-330,333-334,336-337,340-342,344-349,351,353-357,360,366-368,386,402-410,413-416,420-425,427-430,433-434,436-437,440-442,444-449,451,453-457,460,466-468,486
|
|
lacp mode active
|
|
interface lag 106 multi-chassis
|
|
description to to FG-A Inside
|
|
no shutdown
|
|
no routing
|
|
vlan access 1251
|
|
lacp mode active
|
|
interface lag 107 multi-chassis
|
|
description to to FG-A Outside
|
|
no shutdown
|
|
no routing
|
|
vlan access 1202
|
|
lacp mode active
|
|
interface lag 114 multi-chassis
|
|
description to shea-noc-6300 sw1
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699 tag
|
|
vlan trunk allowed all
|
|
lacp mode active
|
|
interface lag 120 multi-chassis
|
|
description Nysernet
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699 tag
|
|
vlan trunk allowed 236,637-638,1202,1256,1298
|
|
lacp mode active
|
|
interface lag 243 multi-chassis
|
|
description Uplink LAG
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699 tag
|
|
vlan trunk allowed all
|
|
lacp mode active
|
|
interface lag 256
|
|
description ISL link
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699 tag
|
|
vlan trunk allowed all
|
|
lacp mode active
|
|
interface 1/1/1
|
|
description Juniper-B
|
|
no shutdown
|
|
lag 120
|
|
interface 1/1/2
|
|
description Northland_Nysernet
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 1
|
|
vlan trunk allowed 236,637-638
|
|
interface 1/1/3
|
|
description Crown_Inet
|
|
no shutdown
|
|
no routing
|
|
vlan access 1298
|
|
interface 1/1/4
|
|
description linewize a inside
|
|
no shutdown
|
|
no routing
|
|
vlan access 811
|
|
interface 1/1/5
|
|
description linewize a outside
|
|
no shutdown
|
|
no routing
|
|
vlan access 1811
|
|
spanning-tree bpdu-filter
|
|
spanning-tree rpvst-filter
|
|
interface 1/1/6
|
|
description to FG-A port 17
|
|
no shutdown
|
|
lag 106
|
|
interface 1/1/7
|
|
description to FG-A port 19
|
|
no shutdown
|
|
lag 107
|
|
interface 1/1/11
|
|
description Ring#1
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 521
|
|
interface 1/1/12
|
|
description Ring#2
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 522
|
|
interface 1/1/13
|
|
description Ring#3
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 523
|
|
interface 1/1/14
|
|
description Ring#4
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 524
|
|
interface 1/1/15
|
|
description Ring#5
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 525
|
|
interface 1/1/16
|
|
description Ring#6
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 526
|
|
interface 1/1/17
|
|
description Ring#7
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 527
|
|
interface 1/1/18
|
|
description Ring#8
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 528
|
|
interface 1/1/19
|
|
description Ring#9
|
|
no shutdown
|
|
no routing
|
|
vlan trunk native 699
|
|
vlan trunk allowed 529
|
|
interface 1/1/20
|
|
description aruba-wlc-a_0/0/2
|
|
no shutdown
|
|
lag 20
|
|
interface 1/1/21
|
|
description aruba-wlc-b
|
|
no shutdown
|
|
lag 21
|
|
interface 1/1/32
|
|
description Uplink LAG shea-noc-6300-sw1
|
|
no shutdown
|
|
lag 114
|
|
interface 1/1/33
|
|
description Uplink LAG
|
|
no shutdown
|
|
lag 243
|
|
interface 1/1/34
|
|
description Uplink LAG
|
|
no shutdown
|
|
lag 243
|
|
interface 1/1/35
|
|
description ISL LAG
|
|
no shutdown
|
|
lag 256
|
|
interface 1/1/36
|
|
description ISL LAG
|
|
no shutdown
|
|
lag 256
|
|
interface vlan 1251
|
|
description ct-noc inside firewall
|
|
vrf attach outside
|
|
ip address 10.251.1.251/24
|
|
ip ospf 2 area 0.0.0.0
|
|
vrrp dual-active-forwarding
|
|
vrrp 1 address-family ipv4
|
|
address 10.251.1.1 primary
|
|
priority 140
|
|
no shutdown
|
|
exit
|
|
interface vlan 1254
|
|
description outside vrf transit-vlan
|
|
vrf attach outside
|
|
ip address 172.31.254.251/24
|
|
ip ospf 2 area 0.0.0.0
|
|
no ip ospf passive
|
|
ip pim-sparse enable
|
|
interface vlan 1811
|
|
description linewize a outside
|
|
vrf attach outside
|
|
ip address 172.31.251.2/24
|
|
ip ospf 2 area 0.0.0.0
|
|
no ip ospf passive
|
|
ip ospf cost 1000
|
|
ip ospf network point-to-point
|
|
snmp-server vrf default
|
|
snmp-server vrf mgmt
|
|
snmp-server system-description sh-noc-8360-3-a
|
|
snmp-server system-location SH NOC
|
|
snmp-server system-contact Tim Marris
|
|
snmp-server community mickey03
|
|
vsx
|
|
system-mac 5a:ea:03:03:03:03
|
|
inter-switch-link lag 256
|
|
role primary
|
|
keepalive peer 192.168.114.23 source 192.168.114.13 vrf mgmt
|
|
ip route 0.0.0.0/0 10.251.1.5 vrf outside
|
|
ip route 10.0.0.0/8 nullroute vrf outside
|
|
ip route 10.11.0.0/20 10.251.1.5 vrf outside
|
|
ip route 10.51.62.32/28 10.251.1.5 vrf outside
|
|
ip route 10.67.0.0/16 10.251.1.5 vrf outside
|
|
ip route 10.68.0.0/16 10.251.1.5 vrf outside
|
|
ip route 10.107.49.0/24 10.251.1.5 vrf outside
|
|
ip route 10.107.50.0/24 10.251.1.5 vrf outside
|
|
ip route 10.107.100.0/24 10.251.1.5 vrf outside
|
|
ip route 10.211.21.16/28 10.251.1.5 vrf outside
|
|
ip route 10.212.134.0/26 10.251.1.5 vrf outside
|
|
ip route 10.222.0.0/16 10.251.1.5 vrf outside
|
|
ip route 10.235.40.0/21 10.251.1.5 vrf outside
|
|
ip route 10.249.0.46/32 10.251.1.5 vrf outside
|
|
ip route 10.249.0.44/32 10.251.1.5 vrf outside
|
|
ip route 10.250.0.0/16 10.251.1.5 vrf outside
|
|
ip route 10.250.100.0/24 10.251.1.5 vrf outside
|
|
ip route 10.253.17.0/24 10.251.1.5 vrf outside
|
|
ip route 10.253.18.0/24 10.251.1.5 vrf outside
|
|
ip route 172.16.0.0/12 nullroute vrf outside
|
|
ip route 172.17.0.0/16 10.252.1.4 vrf outside
|
|
ip route 172.18.0.0/16 10.252.1.5 vrf outside
|
|
ip route 172.19.0.0/16 10.252.1.6 vrf outside
|
|
ip route 172.30.44.0/23 10.251.1.5 vrf outside
|
|
ip route 172.30.45.25/32 10.251.1.5 vrf outside
|
|
ip route 172.30.45.30/32 10.251.1.5 vrf outside
|
|
ip route 172.30.45.35/32 10.251.1.5 vrf outside
|
|
ip route 172.30.45.84/32 10.251.1.5 vrf outside
|
|
ip route 172.30.45.107/32 10.251.1.5 vrf outside
|
|
ip route 172.30.45.109/32 10.251.1.5 vrf outside
|
|
ip route 192.168.0.0/16 nullroute vrf outside
|
|
ip route 192.168.67.0/24 10.251.1.5 vrf outside
|
|
ip route 192.168.68.0/24 10.251.1.5 vrf outside
|
|
ip route 192.168.146.0/24 10.251.1.5 vrf outside
|
|
ip route 192.168.167.0/24 10.251.1.5 vrf outside
|
|
ip dns domain-name scsd.ad
|
|
ip dns server-address 10.1.40.10 vrf mgmt
|
|
ip dns server-address 10.21.48.10 vrf mgmt
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
router ospf 2 vrf outside
|
|
router-id 10.251.1.251
|
|
passive-interface default
|
|
rfc1583-compatibility
|
|
area 0.0.0.0
|
|
https-server vrf default
|
|
https-server vrf mgmt
|
|
configuration-lockout central managed |