Core Igdtu

IGDTUW-Core#sho
IGDTUW-Core#show run
IGDTUW-Core#show running-config
Building configuration...
Current configuration : 26232 bytes

!
! Last configuration change at 10:48:12 IST Tue Jun 22 2021 by admin
! NVRAM config last updated at 15:27:32 IST Mon Jun 14 2021
!
version 16.3
no service pad
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service compress-config
no platform punt-keepalive disable-kernel-core
!
hostname IGDTUW-Core
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable password 7 151B0C08103F3C04796166
!
aaa new-model
!
!
aaa group server radius ise-group
server name IGDTUW-ISE
!
aaa authentication login default enable
aaa authentication login NO-ISE none
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting auth-proxy default start-stop group radius
aaa accounting dot1x default start-stop group radius
!
!
!
!
!
aaa server radius dynamic-author
client 172.16.0.5 server-key 7 141E150F18113D0B757A60
!
aaa session-id common
boot system switch all flash:cat3k_caa-universalk9.16.03.09.SPA.conf
clock timezone IST 5 30
switch 1 provision ws-c3850-12xs
switch 2 provision ws-c3850-12xs
!
!
!
!
!
coap http enable
!
ip routing
!
!
!
ip name-server 172.16.0.227
ip domain name igdtuw.ac.in
ip dhcp-server 172.16.0.1
ip dhcp excluded-address 172.16.35.1 172.16.35.10
ip dhcp excluded-address 172.16.18.245
!
ip dhcp pool IGDTUW_WIFI_MGMT
network 172.16.35.0 255.255.255.0
default-router 172.16.35.1
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_STUDENT-UG
network 172.16.48.0 255.255.240.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_STUDENT-PG
network 172.16.64.0 255.255.248.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_FACULTY
network 172.16.72.0 255.255.252.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_Administration
network 172.16.76.0 255.255.252.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_GUEST
network 172.16.80.0 255.255.255.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IGDTUW_Event
network 172.16.81.0 255.255.255.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Applied_Science
network 172.16.2.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool CSE
network 172.16.4.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Architecture
network 172.16.10.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool MAE
network 172.16.12.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Library
network 172.16.16.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Admin
network 172.16.18.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Hostel_UG
network 172.16.20.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Hostel_PG
network 172.16.22.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Finace
network 172.16.24.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Faculty_2
network 172.16.14.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool Electronics
network 172.16.6.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool IT
network 172.16.8.0 255.255.254.0
dns-server 172.16.0.227 8.8.8.8
!
ip dhcp pool admin
!
!
!
!
!
!
!
!
!
!
authentication mac-move permit
!
flow record PrimeNFRec
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
collect counter bytes long
collect counter packets long
!
!
flow exporter PrimeNFExp
destination 172.16.0.10
transport udp 9991
option exporter-stats timeout 20
!
!
flow monitor PrimeNFMon
exporter PrimeNFExp
record PrimeNFRec
!
sampler PrimeNFSem
mode random 1 out-of 100
!
!
crypto pki trustpoint TP-self-signed-2977094785
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-2977094785
revocation-check none
rsakeypair TP-self-signed-2977094785
!
!
crypto pki certificate chain TP-self-signed-2977094785
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 32393737 30393437 3835301E 170D3138 30393138 31313337
30375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 39373730
39343738 3530819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100BC1D 884CFD62 51F8B063 6D5D019B 0F9B698E 67F2517D 96BF0712 F5CF106A
182A3179 FBB59DB7 B137227B AD090D9E 7A373E20 31F29E2F EFF14CAB 99739207
DD123BE3 85274B65 13C630FD A899F78C 2F38C570 3BE17CC7 68E96C5A A91A5513
02270737 B4AD2E8C 289F7822 E4BACDBD C8883F5D FFEDA976 EF2B61A0 BE0B917D
E73B0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14E28C4F B575C84D 34D7FC2A 72533A0B 2AC2EF39 71301D06
03551D0E 04160414 E28C4FB5 75C84D34 D7FC2A72 533A0B2A C2EF3971 300D0609
2A864886 F70D0101 05050003 81810066 0845E23C B844990C 20FE489E 94B1EB7C
4FF80AA4 89B23EDB 99055AF0 21B9111F 99914F40 241CAEC4 8A089C61 54FB09DE
59A4E495 98D5346F B0A76DC0 1AEB8F13 181E4574 22333354 75CCDF6E DD91684A
962B4B7D FF084383 755A3DAC 5AF5A76F 924B98EB 5B7C1C29 0841886F 06087767
4F62C88C 5610ACB5 1F1BF347 09C621
quit
!
dot1x system-auth-control
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause loopback
license boot level ipservicesk9
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
spanning-tree portfast bpduguard default
spanning-tree portfast bpdufilter default
spanning-tree extend system-id
spanning-tree vlan 1-99,101,103,105,107,109,111,113,115,117,119 priority 24576
spanning-tree vlan 121,123,125,127,129,131-133,136-147,149-163 priority 24576
spanning-tree vlan 165-171,173-175,177-179,182-4094 priority 24576
spanning-tree vlan 100,102,104,106,108,110,112,114,116,118,120 priority 16384
spanning-tree vlan 122,124,126,128,130,134-135,148,164,172,176 priority 16384
spanning-tree vlan 180-181 priority 16384
!
username admin password 7 130C10161F19130A7A767B
!
redundancy
mode sso
!
!
transceiver type all
monitoring
hw-switch switch 1 logging onboard message
hw-switch switch 2 logging onboard message
!
!
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, SGT Cache Full, LOGGING
class-map match-any system-cpp-default
description DHCP snooping, show forward and rest of traffic
class-map match-any system-cpp-police-sys-data
description Learning cache ovfl, Crypto Control, Exception, EGR Exception, NFL
SAMPLED DATA, Gold Pkt, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-multicast
description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-control-low-priority
description ICMP redirect and general punt
class-map match-any system-cpp-police-wireless-priority1
description Wireless priority 1
class-map match-any system-cpp-police-wireless-priority2
description Wireless priority 2
class-map match-any system-cpp-police-wireless-priority3-4-5
description Wireless priority 3,4 and 5
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
!
policy-map port_child_policy
class non-client-nrt-class
bandwidth remaining ratio 10
policy-map system-cpp-policy
class system-cpp-police-data
police rate 200 pps
class system-cpp-police-sys-data
police rate 100 pps
class system-cpp-police-sw-forward
police rate 1000 pps
class system-cpp-police-multicast
police rate 500 pps
class system-cpp-police-multicast-end-station
class system-cpp-police-punt-webauth
class system-cpp-police-l2-control
class system-cpp-police-routing-control
class system-cpp-police-control-low-priority
class system-cpp-police-wireless-priority1
class system-cpp-police-wireless-priority2
class system-cpp-police-wireless-priority3-4-5
class system-cpp-police-topology-control
class system-cpp-police-dot1x-auth
class system-cpp-police-protocol-snooping
class system-cpp-police-forus
class system-cpp-default
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
description ******** LAN To FIREWALL ************
switchport access vlan 200
switchport mode access
!
description ********DMZ TO FIREWALL ********
!
description ***Core To CC***
switchport mode trunk
!
description ***Core To IT Dept.***
!
description ***Core To EC Dept.***
!
description ****core to UG***
!
description ****core to PG***
!
description ***Core To MAE Dept.***
!
description ****core to admin***
!
description ******** LAN To FIREWALL ************
!
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
negotiation auto
!
interface TenGigabitEthernet1/0/1
description ***** Core To ISE *****
!
description ***Core To PI-NMS***
!
description ***** Core To WLC *****
!
description ***Core To Computer Center***
ip flow monitor PrimeNFMon input
ip flow monitor PrimeNFMon output
channel-protocol lacp
channel-group 4 mode active
!
!
!
description ***Core To UG Hostel***
!
description ***Core To PG Hostel***
!
!
description ***Core To Admin Dept.***
!
!
!
!
!
!
!
!
!
!
description ***Core To Computer Center***
ip flow monitor PrimeNFMon output
!
!
!
description ***Core To UG Hostel***
!
description ***Core To PG Hostel***
!
!
description ***Core To Admin Dept.***
!
!
!
!
!
!
!
interface Vlan1
no ip address
!
interface Vlan2
no ip address
!
interface Vlan10
ip address 192.168.10.1 255.255.255.0
!
interface Vlan11
ip address 192.168.11.1 255.255.255.224
!
interface Vlan50
no ip address
!
interface Vlan100
ip address 172.16.0.1 255.255.255.0
!
interface Vlan102
ip address 172.16.2.1 255.255.254.0
!
interface Vlan104
ip address 172.16.4.1 255.255.254.0
!
interface Vlan106
ip address 172.16.6.1 255.255.254.0
!
interface Vlan108
ip address 172.16.8.1 255.255.254.0
!
interface Vlan110
ip address 172.16.10.1 255.255.254.0
!
interface Vlan112
ip address 172.16.12.1 255.255.254.0
!
interface Vlan114
ip address 172.16.14.1 255.255.254.0
!
interface Vlan116
ip address 172.16.16.1 255.255.254.0
!
interface Vlan118
ip address 172.16.18.1 255.255.254.0
!
interface Vlan120
ip address 172.16.20.1 255.255.254.0
!
interface Vlan122
ip address 172.16.22.1 255.255.254.0
!
interface Vlan124
ip address 172.16.24.1 255.255.254.0
!
interface Vlan126
ip address 172.16.26.1 255.255.254.0
!
interface Vlan128
ip address 172.16.28.1 255.255.254.0
!
interface Vlan130
ip address 172.16.30.1 255.255.254.0
!
interface Vlan133
ip address 172.16.33.1 255.255.255.0
!
interface Vlan135
ip address 172.16.35.1 255.255.255.0
!
interface Vlan148
ip address 172.16.48.1 255.255.240.0
!
interface Vlan164
ip address 172.16.64.1 255.255.248.0
!
interface Vlan172
ip address 172.16.72.1 255.255.252.0
!
interface Vlan176
ip address 172.16.76.1 255.255.252.0
!
interface Vlan180
ip address 172.16.80.1 255.255.255.0
!
interface Vlan181
ip address 172.16.81.1 255.255.255.0
!
interface Vlan200
ip address 172.16.100.1 255.255.255.0
!
interface Vlan210
ip address 172.16.220.1 255.255.255.0
ip helper-address 172.16.0.100
!
interface Vlan300
ip address 192.168.13.1 255.255.255.0
!
interface Vlan999
ip address 192.168.5.1 255.255.255.0
!
ip default-gateway 172.16.100.2
ip forward-protocol nd
ip http server
ip http secure-server
ip tftp source-interface Vlan104
ip route 0.0.0.0 0.0.0.0 172.16.100.2
!
!
ip access-list extended AutoQos-4.0-wlan-Acl-Bulk-Data
permit tcp any any eq 22
permit tcp any any eq ftp
permit tcp any any eq ftp-data
permit tcp any any eq smtp
permit tcp any any eq pop3
ip access-list extended AutoQos-4.0-wlan-Acl-MultiEnhanced-Conf
permit udp any any range 16384 32767
permit tcp any any range 50000 59999
ip access-list extended AutoQos-4.0-wlan-Acl-Scavanger
permit udp any any eq 1214
ip access-list extended AutoQos-4.0-wlan-Acl-Signaling
ip access-list extended AutoQos-4.0-wlan-Acl-Transactional-Data
!
!
snmp-server community IGDTUW RW
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flowmon
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps eigrp
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps port-security
snmp-server enable traps license
snmp-server enable traps cpu threshold
snmp-server enable traps memory bufferpeak
snmp-server enable traps stackwise
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps fru-ctrl
snmp-server enable traps flash insertion removal
snmp-server enable traps energywise
snmp-server enable traps power-ethernet police
snmp-server enable traps entity
snmp-server enable traps trustsec-sxp conn-srcaddr-err msg-parse-err conn-config-
err binding-err conn-up conn-down binding-expn-fail oper-nodeid-change binding-
conflict
snmp-server enable traps trustsec authz-file-error cache-file-error keystore-file-
error keystore-sync-fail random-number-fail src-entropy-fail
snmp-server enable traps trustsec-interface unauthorized sap-fail authc-fail
supplicant-fail authz-fail
snmp-server enable traps trustsec-server radius-server provision-secret
snmp-server enable traps ike policy add
snmp-server enable traps ike policy delete
snmp-server enable traps ike tunnel start
snmp-server enable traps ike tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps ipsla
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-
change inconsistency
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps dhcp
snmp-server enable traps event-manager
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps msdp
snmp-server enable traps ospfv3 state-change
snmp-server enable traps ospfv3 errors
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps bgp cbgp2
snmp-server enable traps isis
snmp-server enable traps local-auth
snmp-server enable traps vlan-membership
snmp-server enable traps errdisable
snmp-server enable traps rf
snmp-server enable traps transceiver all
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server host 172.16.0.10 version 2c IGDTUW
!
!
radius-server attribute 6 on-for-login-auth
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server timeout 2
!
radius server ISE
address ipv4 172.16.0.5 auth-port 1812 acct-port 1813
key 7 020F035F1F1318011D1C5A
!
!
control-plane
service-policy input system-cpp-policy
!
banner motd ^CCC
USER NOTICE
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@
@
@ @
@<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>@
@ @
@ Use is restricted to IGDTUW DELHI authorized users who must comply with the @
@ Acceptable User Policy (AUP). Usage is monitored; unauthorized use will @
@ be prosecuted. @
@<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>@
@ @
@ IGDTUW-DELHI @
@ @
@~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~@
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@^C
!
line con 0
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password 7 060F0825585B1E39544541
transport input all
line vty 5 15
!
ntp master 1
!
wsma agent exec
profile httplistener
profile httpslistener
!
wsma agent config
!
wsma agent filesys
!
wsma agent notify
!
!
wsma profile listener httplistener
transport http
!
wsma profile listener httpslistener
transport https
!
ap dot11 airtime-fairness policy-name Default 0
ap group default-group
ap hyperlocation ble-beacon 0
end

Core Igdtu

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Core Igdtu

Uploaded by

Copyright:

Available Formats

IGDTUW-Core#sho

Current configuration : 26232 bytes

You might also like