1.#  
2. version 7.1.045, Release 3109P05  
3.#  
4. sysname Server_Rm_Core1  
5.#  
6. clock timezone Lisbon add 00:00:00  
7. clock protocol none  
8.#  
9. telnet server enable  
10.#  
11. irf mac-address persistent timer  
12. irf auto-update enable  
13. undo irf link-delay  
14. irf member 1 priority 1  
15.#  
16. dhcp enable  
17.#  
18. dns server 172.27.192.1  
19. dns server 172.27.192.10  
20. dns server 172.27.192.48  
21.#  
22. lldp global enable  
23.#  
24. password-recovery enable  
25.#  
26.vlan 1  
27. description Switches  
28.#  
29.vlan 10  
30. description Cluster Comms  
31.#  
32.vlan 20  
33. description Live Migration  
34.#  
35.vlan 25  
36. description Servers  
37.#  
38.vlan 30  
39. description S12  
40.#  
41.vlan 35  
42. description L24  
43.#  
44.vlan 40  
45. description Internal WiFi  
46.#  
47.vlan 45  
48. description BYOD WiFi  
49.#  
50.vlan 50  
51. description KJS WiFi  
52.#  
53.vlan 55  
54. description 6Form  
55.#  
56.vlan 60  
57. description Repro  
58.#  
59.vlan 65  
60. description DT  
61.#  
62.vlan 70  
63. description VoIP Phones  
64.#  
65.vlan 75  
66. description HR  
67.#  
68.vlan 80  
69. description Aruba access points  
70.#  
71.vlan 85  
72. description CCTV  
73.#  
74.vlan 90  
75. description PE/Music  
76.#  
77.vlan 95  
78. description Guest WiFi  
79.#  
80.vlan 100  
81. description Governors WiFi  
82.#  
83.vlan 105  
84. description Print WiFi  
85.#  
86.vlan 110  
87. description Smoothwall/Internet  
88.#  
89.vlan 115  
90. description Blackhole  
91.#  
92. stp mode rstp  
93. stp global enable  
94.#  
95.interface Bridge-Aggregation1  
96. port access vlan 25  
97.#  
98.interface Bridge-Aggregation2  
99. port access vlan 25  
100.#  
101.interface Bridge-Aggregation3  
102. port access vlan 25  
103.#  
104.interface NULL0  
105.#  
106.interface Vlan-interface1  
107. ip address 172.27.198.254 255.255.255.0  
108. undo dhcp select server  
109. dhcp relay server-address 172.27.192.10  
110.#  
111.interface Vlan-interface25  
112. ip address 172.27.192.254 255.255.255.0  
113. undo dhcp select server  
114. dhcp relay server-address 172.27.192.10  
115.#  
116.interface Vlan-interface30  
117. ip address 172.27.193.254 255.255.255.0  
118. dhcp select relay  
119. dhcp relay server-address 172.27.192.10  
120. dhcp relay server-address 172.27.192.35  
121.#  
122.interface Vlan-interface35  
123. ip address 172.27.195.254 255.255.254.0  
124. dhcp select relay  
125. dhcp relay server-address 172.27.192.10  
126. dhcp relay server-address 172.27.192.35  
127.#  
128.interface Vlan-interface40  
129. ip address 172.27.197.254 255.255.254.0  
130. dhcp select relay  
131. dhcp relay server-address 172.27.192.10  
132.#  
133.interface Vlan-interface45  
134. ip address 172.27.199.254 255.255.255.0  
135. dhcp select relay  
136. dhcp relay server-address 172.27.192.10  
137.#  
138.interface Vlan-interface50  
139. ip address 172.27.201.254 255.255.254.0  
140. dhcp select relay  
141. dhcp relay server-address 172.27.192.10  
142.#  
143.interface Vlan-interface55  
144. ip address 172.27.202.126 255.255.255.128  
145. dhcp select relay  
146. dhcp relay server-address 172.27.192.10  
147. dhcp relay server-address 172.27.192.35  
148.#  
149.interface Vlan-interface60  
150. ip address 172.27.202.254 255.255.255.128  
151. dhcp select relay  
152. dhcp relay server-address 172.27.192.10  
153. dhcp relay server-address 172.27.192.35  
154.#  
155.interface Vlan-interface65  
156. ip address 172.27.203.126 255.255.255.128  
157. dhcp select relay  
158. dhcp relay server-address 172.27.192.10  
159. dhcp relay server-address 172.27.192.35  
160.#  
161.interface Vlan-interface70  
162. ip address 172.27.203.254 255.255.255.128  
163. dhcp select relay  
164. dhcp relay server-address 172.27.192.10  
165.#  
166.interface Vlan-interface75  
167. ip address 172.27.204.62 255.255.255.192  
168. dhcp select relay  
169. dhcp relay server-address 172.27.192.10  
170. dhcp relay server-address 172.27.192.35  
171.#  
172.interface Vlan-interface80  
173. ip address 172.27.204.190 255.255.255.192  
174. dhcp select relay  
175. dhcp relay server-address 172.27.192.10  
176.#  
177.interface Vlan-interface85  
178. ip address 172.27.204.254 255.255.255.192  
179. dhcp select relay  
180. dhcp relay server-address 172.27.192.10  
181.#  
182.interface Vlan-interface90  
183. ip address 172.27.204.126 255.255.255.192  
184. dhcp select relay  
185. dhcp relay server-address 172.27.192.10  
186. dhcp relay server-address 172.27.192.35  
187.#  
188.interface Vlan-interface95  
189. ip address 172.27.205.30 255.255.255.224  
190. dhcp select relay  
191. dhcp relay server-address 172.27.192.10  
192.#  
193.interface Vlan-interface100  
194. ip address 172.27.205.46 255.255.255.240  
195. dhcp select relay  
196. dhcp relay server-address 172.27.192.10  
197.#  
198.interface Vlan-interface105  
199. ip address 172.27.205.50 255.255.255.252  
200. dhcp select relay  
201. dhcp relay server-address 172.27.192.10  
202.#  
203.interface Vlan-interface110  
204. ip address 172.27.205.53 255.255.255.252  
205. undo dhcp select server  
206.#  
207.interface GigabitEthernet1/0/1  
208. port access vlan 25  
209.#  
210.interface GigabitEthernet1/0/2  
211. port access vlan 25  
212.#  
213.interface GigabitEthernet1/0/3  
214.#  
215.interface GigabitEthernet1/0/4  
216.#  
217.interface GigabitEthernet1/0/5  
218.#  
219.interface GigabitEthernet1/0/6  
220.#  
221.interface GigabitEthernet1/0/7  
222.#  
223.interface GigabitEthernet1/0/8  
224.#  
225.interface GigabitEthernet1/0/9  
226.#  
227.interface GigabitEthernet1/0/10  
228.#  
229.interface GigabitEthernet1/0/11  
230.#  
231.interface GigabitEthernet1/0/12  
232.#  
233.interface GigabitEthernet1/0/13  
234.#  
235.interface GigabitEthernet1/0/14  
236.#  
237.interface GigabitEthernet1/0/15  
238.#  
239.interface GigabitEthernet1/0/16  
240.#  
241.interface GigabitEthernet1/0/17  
242.#  
243.interface GigabitEthernet1/0/18  
244. port access vlan 25  
245. port link-aggregation group 1  
246.#  
247.interface GigabitEthernet1/0/19  
248. port access vlan 25  
249. port link-aggregation group 1  
250.#  
251.interface GigabitEthernet1/0/20  
252. port access vlan 10  
253.#  
254.interface GigabitEthernet1/0/21  
255. port access vlan 20  
256.#  
257.interface GigabitEthernet1/0/22  
258. port access vlan 25  
259. port link-aggregation group 2  
260.#  
261.interface GigabitEthernet1/0/23  
262. port access vlan 25  
263. port link-aggregation group 2  
264.#  
265.interface GigabitEthernet1/0/24  
266. port access vlan 10  
267.#  
268.interface GigabitEthernet1/0/25  
269. port access vlan 20  
270.#  
271.interface GigabitEthernet1/0/26  
272. port access vlan 25  
273. port link-aggregation group 3  
274.#  
275.interface GigabitEthernet1/0/27  
276. port access vlan 25  
277. port link-aggregation group 3  
278.#  
279.interface GigabitEthernet1/0/28  
280. port access vlan 10  
281.#  
282.interface GigabitEthernet1/0/29  
283. port access vlan 20  
284.#  
285.interface GigabitEthernet1/0/30  
286.#  
287.interface GigabitEthernet1/0/31  
288.#  
289.interface GigabitEthernet1/0/32  
290.#  
291.interface GigabitEthernet1/0/33  
292.#  
293.interface GigabitEthernet1/0/34  
294.#  
295.interface GigabitEthernet1/0/35  
296.#  
297.interface GigabitEthernet1/0/36  
298.#  
299.interface GigabitEthernet1/0/37  
300. port access vlan 110  
301.#  
302.interface GigabitEthernet1/0/38  
303. port link-type hybrid  
304. undo port hybrid vlan 1  
305. port hybrid vlan 25 untagged  
306. port hybrid pvid vlan 25  
307. dhcp snooping trust  
308.#  
309.interface GigabitEthernet1/0/39  
310.#  
311.interface GigabitEthernet1/0/40  
312.#  
313.interface GigabitEthernet1/0/41  
314.#  
315.interface GigabitEthernet1/0/42  
316. port access vlan 25  
317.#  
318.interface GigabitEthernet1/0/43  
319. port access vlan 25  
320.#  
321.interface GigabitEthernet1/0/44  
322. port access vlan 25  
323.#  
324.interface GigabitEthernet1/0/45  
325. port access vlan 25  
326.#  
327.interface GigabitEthernet1/0/46  
328. port access vlan 25  
329.#  
330.interface GigabitEthernet1/0/47  
331. port access vlan 25  
332.#  
333.interface GigabitEthernet1/0/48  
334. port access vlan 25  
335.#  
336.interface Ten-GigabitEthernet1/0/49  
337. port link-type hybrid  
338. port hybrid vlan 25 30 40 45 50 55 60 70 75 80 tagged  
339. port hybrid vlan 85 95 100 105 tagged  
340. port hybrid vlan 1 untagged  
341.#  
342.interface Ten-GigabitEthernet1/0/50  
343. port link-type hybrid  
344. port hybrid vlan 35 40 45 50 70 80 85 95 100 105 tagged  
345. port hybrid vlan 1 untagged  
346.#  
347.interface Ten-GigabitEthernet1/0/51  
348. port link-type hybrid  
349. port hybrid vlan 40 45 50 65 70 80 85 90 95 100 tagged  
350. port hybrid vlan 105 tagged  
351. port hybrid vlan 1 untagged  
352.#  
353.interface Ten-GigabitEthernet1/0/52  
354.#  
355. scheduler logfile size 16  
356.#  
357.line class aux  
358. user-role network-admin  
359.#  
360.line class vty  
361. user-role network-operator  
362.#  
363.line aux 0  
364. authentication-mode password  
365. user-role network-admin  
366. set authentication password hash $h$6$yWe6HejoeItuSGmP$aofI/cphjfXBlqRFZ+CdQzD8z6DE9DVLi+rdZ8cJmEaVQG5EJMuvHl3v6xKKlwyqgB7u8E7TAEJflhO7iw8Zxw==  
367.#  
368.line vty 0  
369. user-role network-admin  
370. user-role network-operator  
371. set authentication password hash $h$6$mAGA4vtYNy1QbiVp$r3lrp94FMkblOddqJY1VHwbejRQG+3nJqPgw9Kd770OyeRK3g3SgMCKIwTbiLI6KEUF0KLv9fMAcPIV2kfuUCg==  
372.#  
373.line vty 1 62  
374. user-role network-operator  
375. set authentication password hash $h$6$mAGA4vtYNy1QbiVp$r3lrp94FMkblOddqJY1VHwbejRQG+3nJqPgw9Kd770OyeRK3g3SgMCKIwTbiLI6KEUF0KLv9fMAcPIV2kfuUCg==  
376.#  
377.line vty 63  
378. user-role network-operator  
379. set authentication password hash $h$6$/D3hu0oZy4tnsArE$E2BQop0e+iaubGkOQTZc1ojvqcFUJ0PQdPVK5cZB63recDfb+9qeCNHizaXhQx+uZ057ie/I+o3+amgYfM0y8g==  
380.#  
381. ip route-static 0.0.0.0 0 172.27.205.54 preference 10  
382. ip route-static 172.27.192.0 19 172.27.198.254  
383.#  
384.radius scheme system  
385. user-name-format without-domain  
386.#  
387.domain system  
388.#  
389. domain default enable system  
390.#  
391.role name level-0  
392. description Predefined level-0 role  
393.#  
394.role name level-1  
395. description Predefined level-1 role  
396.#  
397.role name level-2  
398. description Predefined level-2 role  
399.#  
400.role name level-3  
401. description Predefined level-3 role  
402.#  
403.role name level-4  
404. description Predefined level-4 role  
405.#  
406.role name level-5  
407. description Predefined level-5 role  
408.#  
409.role name level-6  
410. description Predefined level-6 role  
411.#  
412.role name level-7  
413. description Predefined level-7 role  
414.#  
415.role name level-8  
416. description Predefined level-8 role  
417.#  
418.role name level-9  
419. description Predefined level-9 role  
420.#  
421.role name level-10  
422. description Predefined level-10 role  
423.#  
424.role name level-11  
425. description Predefined level-11 role  
426.#  
427.role name level-12  
428. description Predefined level-12 role  
429.#  
430.role name level-13  
431. description Predefined level-13 role  
432.#  
433.role name level-14  
434. description Predefined level-14 role  
435.#  
436.user-group system  
437.#  
438.local-user admin class manage  
439. password hash $h$6$+zFMzQRUdW5KQJ6/$FJVTgmgJbS5sf/73A6s6yzMRozznPC+7YWh7EYWueFHOm1981lOgEr8+x09GEhnBH6c6RqDS0CJ6ITmJ9n6pqQ==  
440. service-type ssh telnet terminal http  
441. authorization-attribute user-role network-admin  
442. authorization-attribute user-role network-operator  
443.#  
444.local-user hemstock class manage  
445. password hash $h$6$2VJlZ1kSf6QhVXdb$GlnTcfxryEqBtwXeqWgto8Ed1hv5J9g7zF4OiSv7o60+pBHao9yMBfVkDPFvodqtqAfWYoK70yBCV4bXhf6Syw==  
446. service-type telnet  
447. authorization-attribute user-role network-admin  
448. authorization-attribute user-role network-operator  
449.#  
450. ip http enable  
451.#  
452.return