10.170.232.1 - YN2 D2 - 1F PDCA HJ 03 C9300L B2.cfg Mar 28 18 17 06 19

!
! Last configuration change at 16:36:24 UCT Sat Mar 27 2021 by admin

! NVRAM config last updated at 16:00:00 UCT Fri Mar 26 2021
!
version 16.12
no service pad
service timestamps debug datetime msec
service timestamps log datetime localtime
service password-encryption
service call-home
platform punt-keepalive disable-kernel-core
!
hostname YN2-D2_1F-PDCA-HJ-03-C9300L-B2
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 9 $9$87Yhog2VhlJw6U$KeYlHVGNwEvQqqydt9LFJq2JdGIwfbsAkvK0lvYEBQA
!
aaa new-model
!
!
aaa group server tacacs+ luxshare-ise
server-private 10.171.2.104 key 7 04571E1E1C294D5C0C542C3426
ip tacacs source-interface Vlan232
!
aaa authentication login default group luxshare-ise local enable
aaa authentication login noacs local none
aaa authentication enable default enable none
aaa authorization exec default group luxshare-ise local
aaa authorization commands 0 default group luxshare-ise local
aaa accounting update newinfo
aaa accounting exec default start-stop group luxshare-ise
aaa accounting commands 1 default start-stop group luxshare-ise
aaa accounting commands 15 default start-stop group luxshare-ise
!
!
!
!
!
!
aaa session-id common
clock timezone UCT 7 0
switch 1 provision c9300l-24t-4g
switch 2 provision c9300l-24t-4g
!
!
!
!
call-home
! If contact email address in call-home is configured as sch-smart-
licensing@cisco.com
! the email address configured in Cisco Smart License Portal will be used as
contact email address to send SCH notifications.
contact-email-addr sch-smart-licensing@cisco.com
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
ip routing
!
no ip domain lookup
ip domain name luxshare-ict.com.cn
!
!
!
login on-success log
!
!
!
!
!
no device-tracking logging theft
!
crypto pki trustpoint SLA-TrustPoint
enrollment pkcs12
revocation-check crl
!
crypto pki trustpoint TP-self-signed-1720569585
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1720569585
revocation-check none
rsakeypair TP-self-signed-1720569585
!
!
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
crypto pki certificate chain TP-self-signed-1720569585
certificate self-signed 01
30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373230 35363935 3835301E 170D3230 30373134 31313036
35365A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37323035
36393538 35308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
0A028201 0100B0E5 56F267E3 60592C97 5F36ACEA F09815B8 5B275DD2 12078763
12F148B1 D1974FC8 A1F98301 DD094D84 6538159C 1E39573E D92F565F CE2DFE14
F2D4DA44 EDA9BD74 992CD3C6 62F0C106 F47470E5 F20886D9 5044D61D D155687B
0465D5BB D4CD3E5C 01E321A1 19E2110A 0040EF2B 61871B31 383310E0 C402E735
E5744410 A10AD3D9 82031BF8 D4965279 E4ECA0F3 19CE256E 8EE2F3C0 38DA4598
E29E0910 2BF40619 BCF750C3 0CEF5549 F16720CC 93C97F51 DA6E776C A14F2D6E
FDA4DF87 160993C8 7CC31663 83058D76 044584AC EECD7DA8 F908BC52 189CB876
7F8E0993 6FDD92BC 0B85D46B ED548058 9F7AC506 6FD193A4 BAC24158 14F135B9
B6BC398F 2AE50203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
301F0603 551D2304 18301680 14B5D1FA 552AB30B 519A05D0 D946090F 56AE3587
BD301D06 03551D0E 04160414 B5D1FA55 2AB30B51 9A05D0D9 46090F56 AE3587BD
300D0609 2A864886 F70D0101 05050003 82010100 A8AFF184 75158859 934B8CCB
94E6501D 1BE9CC11 960A806F 2A28E79A DAB00440 ACA397B7 0B69B05B 26CA62C6
5D9D4D01 E912BAE7 3B95F5A7 090A7437 60CE8805 738723C5 00214578 7D51DEDA
D3E22BE8 81FA5365 D874DEF4 4D1FFEB5 CC4B2968 0D1D89BD C2ED06E2 1B8715FB
01D9C16B F01907B5 CBDAAC46 F29A7A25 B9A0B031 21B7B4FB 6219FA46 2270CE52
6903906E 9A9F6562 A7F9028C AEDD34B2 8EF28702 11F12E07 FC820134 2F4CF382
BCFA7CC1 EE655A93 932EBD47 125DC6E5 75AF098D 376F9A19 45971066 669BF936
CD10E916 231BE5AB BE8AAD95 98B02027 FBDBF36A 9A20CD4F 4A085E49 C9810651
459F2429 DFA47E13 A93610EF FAAB9942 BA21A4DB
quit
!
license boot level network-essentials addon dna-essentials
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 2,232 priority 4096
archive
path tftp://10.171.3.69/10.170.232.1_YN2-D2_1F-PDCA-HJ-03-C9300L-B2.cfg
write-memory
time-period 10080
memory free low-watermark processor 134384
!
username admin privilege 15 secret 9 $9$2CVJzFt.b/loC.
$PBnQfNA4yzmmUSGt3QXUU.NFeh.Qefzp0nSoRQjd5VE
!
redundancy
mode sso
!
!
!
!
!
transceiver type all
monitoring
!
!
class-map match-any system-cpp-police-ewlc-control
description EWLC Control
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic
class-map match-any system-cpp-default
description EWLC Data, Inter FED Traffic
class-map match-any system-cpp-police-sys-data
description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
description High Rate Applications
class-map match-any system-cpp-police-multicast
description MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual OOB
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-ios-routing
description L2 control, Topology control, Routing control, Low Latency
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
class-map match-any system-cpp-police-ios-feature
description
ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAut
h,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRE
xcption,NflSampled,RpfFailed
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
switchport mode trunk
spanning-tree guard root
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
no switchport
ip address 10.170.0.222 255.255.255.252
ip ospf network point-to-point
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet1/0/1
channel-group 1 mode active
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
no switchport
no ip address
!
interface AppGigabitEthernet1/0/1
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
no switchport
no ip address
!
interface AppGigabitEthernet2/0/1
!
interface Vlan1
no ip address
!
interface Vlan2
description PDCA-Client
ip address 10.170.124.1 255.255.254.0
ip helper-address 10.170.254.50
!
interface Vlan232
description Network-Managent
ip address 10.170.232.1 255.255.255.0
!
router ospf 300
router-id 10.170.232.1
passive-interface default
no passive-interface GigabitEthernet1/1/4
no passive-interface GigabitEthernet2/1/4
no passive-interface Port-channel28
network 10.170.0.222 0.0.0.0 area 0
network 10.170.124.1 0.0.0.0 area 0
network 10.170.232.1 0.0.0.0 area 0
!
ip forward-protocol nd
no ip http server
ip http authentication local
no ip http secure-server
!
!
kron occurrence Weekly at 16:00 Fri recurring
policy-list save-config
!
kron policy-list save-config
cli write
!
logging trap debugging
logging facility local0
logging source-interface Vlan232
logging host 10.171.3.66
!
snmp-server community luxshare-ict RO
snmp-server community Luxshare-ict RW
tacacs-server directed-request
!
!
!
control-plane
service-policy input system-cpp-policy
!
banner motd #
*******************************************************************************
* W A R N I N G *
* *
* This is a private system for Shenzhen Luxshare Precision Industry Co.,Ltd. *
* It is for authorized use only.Users (authorized or unauthorized) *
* have no explicit or implicit expectation of privacy. *
* *
* Any or all uses of this system may be intercepted, monitored, recorded, *
* copied, audited, inspected,and disclosed to authorized site and law *
* enforcement personnel,as well as authorized officials of other agencies, *
* both domestic and foreign. By using this system, the user consents to such *
* interception, monitoring, recording, copying, auditing, inspection, *
* and disclosure at the discretion of authorized site personnel. *
* *
* Unauthorized or improper use of this system may result in *
* administrative disciplinary action and civil and criminal penalties. *
* By continuing to use this system you indicate your awareness of and *
* consent to these terms and conditions of use. LOG OFF IMMEDIATELY *
* if you do not agree to the conditions stated in this warning. *
*******************************************************************************
#
!
line con 0
logging synchronous
login authentication noacs
stopbits 1
line vty 0 4
exec-timeout 20 20
length 0
transport input all
line vty 5 15
exec-timeout 20 20
transport input all
!
ntp source Vlan232
ntp server 10.168.75.1
!
!
!
!
!
!
end

10.170.232.1 - YN2 D2 - 1F PDCA HJ 03 C9300L B2.cfg Mar 28 18 17 06 19

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

10.170.232.1 - YN2 D2 - 1F PDCA HJ 03 C9300L B2.cfg Mar 28 18 17 06 19

Uploaded by

Copyright:

Available Formats

!

! Last configuration change at 16:36:24 UCT Sat Mar 27 2021 by admin

You might also like