Schools SRA Configuration Supplement

Available Languages

Download Options

PDF (2.6 MB)
View with Adobe Reader on a variety of devices

Updated:November 10, 2009

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Schools SRA Configuration Supplement

Contents

Network Diagram

Validated Platforms and Software Versions

Network Infrastructure

Emerging Technologies

Core/Distribution/WAN Edge

PSTN Edge

School 100

Access

Core/Distribution/WAN Edge

PSTN Edge

Schools SRA Configuration Supplement

This document, contains the network diagram, and a list of all the platforms and software releases which were validated for the Schools Service Ready Architecture. The last section includes the configurations for each platform (CLI only, no GUI).

Provides a efficient and flexible network architecture for secondary schools, while enabling advanced services, such as security, unified wireless access, unified voice communications services, and presence services. The network is designed to meet the needs of the education environment:

•Academic Excellence

•Administrative Efficiency

•School safety and security

Network Diagram

Figure 1 Physical Topology

Validated Platforms and Software Versions

Network Infrastructure

Table 1 School SRA Network Infrastructure
School Location	Platform	Role	Software
District Office	2960	Access	12.2(50)SE
	2975 - Stackwise		12.2(46)EX
	3560		12.2(50)SE
	3750		12.2(50)SE
	3750 - Stackwise		12.2(50)SE
	4507R-E - Sup6E/SupV	Core/Distribution	12.2(52)SG
	3750ME	WAN Aggregation	12.2(50)SE
	2851	PSTN Edge	12.4(15)T1
	WLC 4400 - 2100	Wireless LAN Controller	6.0
	Mobile Service Engine	Location	6.0
County school 1	2960	Access	12.2(50)SE
	3560
	3750
	3750 - Stackwise
	4507R-E - SupV-10GE	Core/Distribution/WAN Edge	12.2(52)SG
	2851	PSTN Edge	12.4(15)T1
	WLC 4400 - 2100	Wireless LAN Controller	6.0
	NAC Appliance	Network Admission	4.5
County school 2-99	3750	Core/Distribution/WAN Edge	12.2(50)SE
County school 100	2960	Access	12.2(50)SE
	3560
	3750
	3750 - Stackwise
	3750 - Stackwise	Core/Distribution/WAN Edge	12.2(50)SE
	2851	PSTN Edge	12.4(15)T1
	WLC 4400 - 2100	Wireless LAN Controller	6.0
	NAC Appliance	Network Admission	4.5

Emerging Technologies

Table 2 Emerging Technologies
School Location	Platform	Role	Software
District Office	CUCM	Call Manager	7.0
	Presence Server	Presence	7.0
	7960G	IP Phone
	7965G
	7975G
	7985G	Video Phone
	ASA5520	Firewall	8.0
	WSA
	NAC Appliance (CAS, CAM)	Network Admission	4.5.1
	Cisco ACS	Radius Server	4.2
County school 1	7960G	IP Phone
	7965G
	7975G
County school 2-99	Emulated IP Phones	IP Phone
County school 100	7960G	IP Phone
	7965G
	7975G
	NAC Appliance (CAM, CAS)	Network Admission	4.5.1
	Cisco ACS	Radius Server	4.2

Configurations

This section contains a copy of the complete configuration for each platform validated in the School Service Ready Architecture validation (only for platforms with CLI configurations, does not include GUI configurations).

Note Externally accessible IP addresses and passwords have been replaced with descriptive text.

District Office

Access

Cr24-2960-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr24-2960-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$XK8W$tZTDCYAq5eBMNKtqjisAw.

enable password 7 104D000A0618

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

ip dhcp snooping vlan 101-110

no ip dhcp snooping information option

ip dhcp snooping

no ip domain-lookup

ip arp inspection vlan 101-110

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR

 enrollment selfsigned

 serial-number

 revocation-check none

 rsakeypair HTTPS_SS_CERT_KEYPAIR

crypto pki certificate chain HTTPS_SS_CERT_KEYPAIR

 certificate self-signed 01 nvram:F9154780host#2E2E.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 101

 name cr2960_Dept1_VLAN

vlan 102

 name cr2960_Dept2_VLAN

vlan 103

 name cr2960_Dept3_VLAN

vlan 104

 name cr2960_Dept4_VLAN

vlan 105

 name cr2960_Dept5_VLAN

vlan 106

 name cr2960_Dept6_VLAN

vlan 107

 name cr2960_Dept7_VLAN

vlan 108

 name cr2960_Dept8_VLAN

vlan 109

 name cr2960_Dept9_VLAN

vlan 110

 name cr2960_Dept10_VLAN

vlan 201

 name Guest_VLAN

vlan 802

 name Hopping_VLAN

vlan 900

 name Mgmt_VLAN

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.2 255.255.255.255

 no ip route-cache

interface Port-channel1

 description Connected to cr24-4507-DO

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 101

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 102

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface FastEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 103

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 104

 switchport mode access

 switchport block unicast

 switchport voice vlan 105

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface FastEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 106

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 107

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 108

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/8

interface FastEthernet0/9

interface FastEthernet0/10

 description Connected to IXIA - ALM - 2/1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/11

 description Connected to IXIA - STX - 3/1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/12

interface FastEthernet0/13

interface FastEthernet0/14

interface FastEthernet0/15

interface FastEthernet0/16

interface FastEthernet0/17

interface FastEthernet0/18

interface FastEthernet0/19

interface FastEthernet0/20

interface FastEthernet0/21

interface FastEthernet0/22

interface FastEthernet0/23

interface FastEthernet0/24

 description Connected to FlashNet

 switchport mode access

 load-interval 30

interface FastEthernet0/25

interface FastEthernet0/26

interface FastEthernet0/27

interface FastEthernet0/28

interface FastEthernet0/29

interface FastEthernet0/30

interface FastEthernet0/31

interface FastEthernet0/32

interface FastEthernet0/33

interface FastEthernet0/34

interface FastEthernet0/35

interface FastEthernet0/36

interface FastEthernet0/37

interface FastEthernet0/38

interface FastEthernet0/39

interface FastEthernet0/40

interface FastEthernet0/41

interface FastEthernet0/42

interface FastEthernet0/43

interface FastEthernet0/44

interface FastEthernet0/45

interface FastEthernet0/46

interface FastEthernet0/47

interface FastEthernet0/48

interface GigabitEthernet0/1

 description Connected to cr24-4507-DO

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/2

 description Connected to cr24-4507-DO

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/3

interface GigabitEthernet0/4

interface Vlan1

 description Connected to FlashNet

 ip address 172.26.160.188 255.255.254.0

 no ip redirects

 no ip proxy-arp

 no ip route-cache

interface Vlan900

 ip address 10.125.34.2 255.255.255.224

 no ip redirects

 no ip unreachables

 no ip route-cache

 load-interval 30

no ip http server

no ip http secure-server

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 01100F1758044A5E731F

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028997

ntp server 172.26.160.10

end

Cr26-2975-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr26-2975-DO

boot-start-marker

boot-end-marker

enable password 7 094F471A1A0A

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c2975gs-48ps-l

switch 2 provision ws-c2975gs-48ps-l

switch 3 provision ws-c2975gs-48ps-l

stack-mac persistent timer 0

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

ip dhcp snooping vlan 111-120

no ip dhcp snooping information option

ip dhcp snooping

no ip domain-lookup

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2  24

mls qos srr-queue input dscp-map queue 1 threshold 3  48 56

mls qos srr-queue input dscp-map queue 2 threshold 3  32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3  32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1  16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1  36 38

mls qos srr-queue output dscp-map queue 2 threshold 2  24

mls qos srr-queue output dscp-map queue 2 threshold 3  48 56

mls qos srr-queue output dscp-map queue 3 threshold 3  0

mls qos srr-queue output dscp-map queue 4 threshold 1  8

mls qos srr-queue output dscp-map queue 4 threshold 2  10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 111-120

vlan 202

 name Guest_VLAN

vlan 803

 name Hopping_VLAN

vlan 900

 name Mgmt_VLAN

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.3 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/1

 description CONNECTED TO UNTRUSTED-PC

 switchport access vlan 111

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

interface GigabitEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 112

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

interface GigabitEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 113

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

interface GigabitEthernet1/0/4

interface GigabitEthernet1/0/5

interface GigabitEthernet1/0/6

interface GigabitEthernet1/0/7

interface GigabitEthernet1/0/8

interface GigabitEthernet1/0/9

interface GigabitEthernet1/0/10

interface GigabitEthernet1/0/11

interface GigabitEthernet1/0/12

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

interface GigabitEthernet1/0/22

interface GigabitEthernet1/0/23

interface GigabitEthernet1/0/24

interface GigabitEthernet1/0/25

interface GigabitEthernet1/0/26

interface GigabitEthernet1/0/27

interface GigabitEthernet1/0/28

interface GigabitEthernet1/0/29

interface GigabitEthernet1/0/30

interface GigabitEthernet1/0/31

interface GigabitEthernet1/0/32

interface GigabitEthernet1/0/33

interface GigabitEthernet1/0/34

interface GigabitEthernet1/0/35

interface GigabitEthernet1/0/36

interface GigabitEthernet1/0/37

interface GigabitEthernet1/0/38

interface GigabitEthernet1/0/39

interface GigabitEthernet1/0/40

interface GigabitEthernet1/0/41

interface GigabitEthernet1/0/42

interface GigabitEthernet1/0/43

interface GigabitEthernet1/0/44

interface GigabitEthernet1/0/45

interface GigabitEthernet1/0/46

interface GigabitEthernet1/0/47

interface GigabitEthernet1/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet1/0/49

 description Connected to cr24-4507-DO

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/50

interface GigabitEthernet1/0/51

interface GigabitEthernet1/0/52

interface GigabitEthernet2/0/1

interface GigabitEthernet2/0/2

interface GigabitEthernet2/0/3

interface GigabitEthernet2/0/4

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

interface GigabitEthernet2/0/22

interface GigabitEthernet2/0/23

interface GigabitEthernet2/0/24

interface GigabitEthernet2/0/25

interface GigabitEthernet2/0/26

interface GigabitEthernet2/0/27

interface GigabitEthernet2/0/28

interface GigabitEthernet2/0/29

interface GigabitEthernet2/0/30

interface GigabitEthernet2/0/31

interface GigabitEthernet2/0/32

interface GigabitEthernet2/0/33

interface GigabitEthernet2/0/34

interface GigabitEthernet2/0/35

interface GigabitEthernet2/0/36

interface GigabitEthernet2/0/37

interface GigabitEthernet2/0/38

interface GigabitEthernet2/0/39

interface GigabitEthernet2/0/40

interface GigabitEthernet2/0/41

interface GigabitEthernet2/0/42

interface GigabitEthernet2/0/43

interface GigabitEthernet2/0/44

interface GigabitEthernet2/0/45

interface GigabitEthernet2/0/46

interface GigabitEthernet2/0/47

interface GigabitEthernet2/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet2/0/49

interface GigabitEthernet2/0/50

interface GigabitEthernet2/0/51

interface GigabitEthernet2/0/52

interface GigabitEthernet3/0/1

 description CONNECTED TO PHONE+PC

 switchport access vlan 114

 switchport mode access

 switchport block unicast

 switchport voice vlan 115

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

interface GigabitEthernet3/0/2

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 116

 switchport mode access

 switchport block unicast

 switchport port-security

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet3/0/3

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 117

 switchport mode access

 switchport block unicast

 switchport port-security

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet3/0/4

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 118

 switchport mode access

 switchport block unicast

 switchport port-security

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 dot1x mac-auth-bypass

 dot1x pae authenticator

 dot1x violation-mode protect

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet3/0/5

interface GigabitEthernet3/0/6

interface GigabitEthernet3/0/7

interface GigabitEthernet3/0/8

interface GigabitEthernet3/0/9

interface GigabitEthernet3/0/10

 description Connected to IXIA - ALM - 2/2

 switchport trunk native vlan 202

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 spanning-tree guard root

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet3/0/11

 description Connected to IXIA - STX - 3/2

 switchport trunk native vlan 202

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 spanning-tree guard root

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet3/0/12

interface GigabitEthernet3/0/13

interface GigabitEthernet3/0/14

interface GigabitEthernet3/0/15

interface GigabitEthernet3/0/16

interface GigabitEthernet3/0/17

interface GigabitEthernet3/0/18

interface GigabitEthernet3/0/19

interface GigabitEthernet3/0/20

interface GigabitEthernet3/0/21

interface GigabitEthernet3/0/22

interface GigabitEthernet3/0/23

interface GigabitEthernet3/0/24

interface GigabitEthernet3/0/25

interface GigabitEthernet3/0/26

interface GigabitEthernet3/0/27

interface GigabitEthernet3/0/28

interface GigabitEthernet3/0/29

interface GigabitEthernet3/0/30

interface GigabitEthernet3/0/31

interface GigabitEthernet3/0/32

interface GigabitEthernet3/0/33

interface GigabitEthernet3/0/34

interface GigabitEthernet3/0/35

interface GigabitEthernet3/0/36

interface GigabitEthernet3/0/37

interface GigabitEthernet3/0/38

interface GigabitEthernet3/0/39

interface GigabitEthernet3/0/40

interface GigabitEthernet3/0/41

interface GigabitEthernet3/0/42

interface GigabitEthernet3/0/43

interface GigabitEthernet3/0/44

interface GigabitEthernet3/0/45

interface GigabitEthernet3/0/46

interface GigabitEthernet3/0/47

interface GigabitEthernet3/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet3/0/49

 description Connected to cr24-4507-DO

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet3/0/50

interface GigabitEthernet3/0/51

interface GigabitEthernet3/0/52

interface Vlan1

 ip address dhcp

 shutdown

interface Vlan2

 description Connected to FlashNet - DO NOT ROUTE

 ip address 172.26.160.190 255.255.254.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

interface Vlan900

 description Mgmt_VLAN

 ip address 10.125.34.3 255.255.255.224

 no ip redirects

 no ip unreachables

 load-interval 30

no ip http server

no ip http secure-server

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 094F471A1A0A5B43595F

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

 logging synchronous

 speed 115200

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

 logging synchronous

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028631

ntp server 172.26.160.10

end

Cr24-3560r-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr24-3560r-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$nwph$/o52o3VuKVOHNwYCaEu/w.

enable password 7 13061E010803

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip dhcp snooping vlan 11-20

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 11-20

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 045802150C2E

crypto pki trustpoint TP-self-signed-3151740416

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-3151740416

 revocation-check none

 rsakeypair TP-self-signed-3151740416

crypto pki certificate chain TP-self-signed-3151740416

 certificate self-signed 01 nvram:IOS-Self-Sig#3636.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

no spanning-tree optimize bpdu transmission

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 11-20

vlan 203

 name Guest_VLAN

ip ftp username nimishguest

ip ftp password 7 030A5F0C130A3258

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.4 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 no switchport

 dampening

 ip address 10.125.32.1 255.255.255.254

 ip pim sparse-mode

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet0/1

 description CONNECTED TO UNTRUSTED-PC

 switchport access vlan 11

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 12

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface FastEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 13

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 14

 switchport mode access

 switchport block unicast

 switchport voice vlan 15

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface FastEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 16

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 17

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 18

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/8

 no mdix auto

interface FastEthernet0/9

 switchport access vlan 11

 switchport mode access

 no mdix auto

 spanning-tree portfast

interface FastEthernet0/10

 description Connected to IXIA - ALM - 2/3

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 203

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/11

 description Connected to IXIA - STX - 3/3

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 203

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/12

 no mdix auto

interface FastEthernet0/13

 no mdix auto

interface FastEthernet0/14

 no mdix auto

interface FastEthernet0/15

 no mdix auto

interface FastEthernet0/16

 no mdix auto

interface FastEthernet0/17

 no mdix auto

interface FastEthernet0/18

 no mdix auto

interface FastEthernet0/19

 no mdix auto

interface FastEthernet0/20

 no mdix auto

interface FastEthernet0/21

 no mdix auto

interface FastEthernet0/22

 no mdix auto

interface FastEthernet0/23

 no mdix auto

interface FastEthernet0/24

 no mdix auto

interface FastEthernet0/25

 no mdix auto

interface FastEthernet0/26

 no mdix auto

interface FastEthernet0/27

 no mdix auto

interface FastEthernet0/28

 no mdix auto

interface FastEthernet0/29

 no mdix auto

interface FastEthernet0/30

 no mdix auto

interface FastEthernet0/31

 no mdix auto

interface FastEthernet0/32

 no mdix auto

interface FastEthernet0/33

 no mdix auto

interface FastEthernet0/34

 no mdix auto

interface FastEthernet0/35

 no mdix auto

interface FastEthernet0/36

 no mdix auto

interface FastEthernet0/37

 no mdix auto

interface FastEthernet0/38

 no mdix auto

interface FastEthernet0/39

 no mdix auto

interface FastEthernet0/40

 no mdix auto

interface FastEthernet0/41

 no mdix auto

interface FastEthernet0/42

 no mdix auto

interface FastEthernet0/43

 no mdix auto

interface FastEthernet0/44

 no mdix auto

interface FastEthernet0/45

 no mdix auto

interface FastEthernet0/46

 no mdix auto

interface FastEthernet0/47

 no mdix auto

interface FastEthernet0/48

 no switchport

 ip address 172.26.160.187 255.255.254.0

 no ip redirects

 no ip proxy-arp

 no mdix auto

interface GigabitEthernet0/1

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet0/2

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet0/3

interface GigabitEthernet0/4

interface Vlan1

 no ip address

 shutdown

interface Vlan11

 dampening

 ip address 10.125.11.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan12

 dampening

 ip address 10.125.11.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan13

 dampening

 ip address 10.125.12.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan14

 dampening

 ip address 10.125.12.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan15

 dampening

 ip address 10.125.13.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan16

 dampening

 ip address 10.125.13.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan17

 dampening

 ip address 10.125.14.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan18

 dampening

 ip address 10.125.14.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan19

 dampening

 ip address 10.125.15.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan20

 dampening

 ip address 10.125.15.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Port-channel1

 no auto-summary

 eigrp router-id 10.125.100.4

 eigrp stub connected

 network 10.125.0.0 0.0.255.255

ip classless

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 00071A15075447575D72

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

 logging synchronous

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028444

ntp server 172.26.160.10

end

Cr25-3750-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr25-3750-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$rZnh$VH5sfvkInDxIlKe6HvlHO.

enable password 7 094F471A1A0A

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750g-24ts-1u

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

no ip domain-lookup

ip dhcp snooping vlan 121-130

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 121-130

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint TP-self-signed-250233728

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-250233728

 revocation-check none

 rsakeypair TP-self-signed-250233728

crypto pki certificate chain TP-self-signed-250233728

 certificate self-signed 01 nvram:IOS-Self-Sig#3838.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 121

 name cr25_3750_Dept21

vlan 122

 name cr25_3750_Dept22

vlan 123

 name cr25_3750_Dept23

vlan 124

 name cr25_3750_Dept24

vlan 125

 name cr25_3750_Dept25

vlan 126

 name cr25_3750_Dept26

vlan 127

 name cr25_3750_Dept27

vlan 128

 name cr25_3750_Dept28

vlan 129

 name cr25_3750_Dept29

vlan 130

 name cr25_3750_Dept30

vlan 204

 name Guest_VLAN

vlan 804

 name Hopping_VLAN

vlan 900

 name Mgmt_VLAN

ip ftp username nimishguest

ip ftp password 7 0701254B5B0C0A11

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.5 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,204,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 121

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 122

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 123

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface GigabitEthernet1/0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 124

 switchport mode access

 switchport block unicast

 switchport voice vlan 125

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet1/0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 126

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 127

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 128

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/8

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

interface GigabitEthernet1/0/9

interface GigabitEthernet1/0/10

 description Connected to IXIA - ALM - 2/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/11

 description Connected to IXIA - STX - 3/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/12

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

interface GigabitEthernet1/0/22

interface GigabitEthernet1/0/23

interface GigabitEthernet1/0/24

 description Flashnet DO NOT ROUTE

 no switchport

 ip address 172.26.160.200 255.255.254.0

 no ip proxy-arp

 duplex full

interface GigabitEthernet1/0/25

interface GigabitEthernet1/0/26

interface GigabitEthernet1/0/27

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,204,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/28

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,204,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface Vlan1

 no ip address

 shutdown

interface Vlan900

 description Mgmt_VLAN

 ip address 10.125.34.4 255.255.255.224

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 13061E010803487B7977

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36029250

ntp server 172.26.160.10

end

Cr26-3750r-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr26-3750r-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$d/Sc$Ha0.t0aRa.T2i2rSdNk7e1

enable password 7 05080F1C2243

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750e-24pd

switch 2 provision ws-c3750e-24pd

switch 3 provision ws-c3750e-24pd

stack-mac persistent timer 0

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip dhcp snooping vlan 11-20

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 11-20

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 104D000A0618

crypto pki trustpoint TP-self-signed-1384443008

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-1384443008

 revocation-check none

 rsakeypair TP-self-signed-1384443008

crypto pki trustpoint TP-self-signed-721582080

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-721582080

 revocation-check none

 rsakeypair TP-self-signed-721582080

crypto pki certificate chain TP-self-signed-1384443008

 certificate self-signed

  quit

crypto pki certificate chain TP-self-signed-721582080

license boot level ipservices switch 1

license boot level ipservices switch 3

license boot level ipservices

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 11-20

vlan 205

 name Guest_VLAN

vlan 900

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.6 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 no switchport

 dampening

 ip address 10.125.32.3 255.255.255.254

 ip pim sparse-mode

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet0

 no ip address

 no ip route-cache cef

 no ip route-cache

 no ip mroute-cache

 shutdown

interface GigabitEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 11

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 12

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 13

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface GigabitEthernet1/0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 14

 switchport mode access

 switchport block unicast

 switchport voice vlan 15

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet1/0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 16

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 17

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 18

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/8

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/9

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/10

 description Connected to IXIA - ALM - 2/5

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/11

 description Connected to IXIA - STX - 4/1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/12

 description Connected to FlashNet

 switchport access vlan 900

 switchport mode access

 load-interval 30

 spanning-tree portfast

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

interface GigabitEthernet1/0/22

interface GigabitEthernet1/0/23

interface GigabitEthernet1/0/24

interface GigabitEthernet1/0/25

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 ip pim sparse-mode

 ip hold-time eigrp 100 20

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/26

interface GigabitEthernet1/0/27

interface GigabitEthernet1/0/28

interface TenGigabitEthernet1/0/1

interface TenGigabitEthernet1/0/2

interface GigabitEthernet2/0/1

interface GigabitEthernet2/0/2

interface GigabitEthernet2/0/3

interface GigabitEthernet2/0/4

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

 description FlashNet - DO NOT ROUTE

 switchport access vlan 900

 switchport mode access

 load-interval 30

 spanning-tree portfast

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

interface GigabitEthernet2/0/22

interface GigabitEthernet2/0/23

interface GigabitEthernet2/0/24

interface GigabitEthernet2/0/25

 channel-protocol lacp

interface GigabitEthernet2/0/26

interface GigabitEthernet2/0/27

interface GigabitEthernet2/0/28

interface TenGigabitEthernet2/0/1

interface TenGigabitEthernet2/0/2

interface GigabitEthernet3/0/1

interface GigabitEthernet3/0/2

interface GigabitEthernet3/0/3

interface GigabitEthernet3/0/4

interface GigabitEthernet3/0/5

interface GigabitEthernet3/0/6

interface GigabitEthernet3/0/7

interface GigabitEthernet3/0/8

interface GigabitEthernet3/0/9

interface GigabitEthernet3/0/10

interface GigabitEthernet3/0/11

interface GigabitEthernet3/0/12

 description FlashNet - DO NOT ROUTE

 switchport access vlan 900

 switchport mode access

 load-interval 30

 spanning-tree portfast

interface GigabitEthernet3/0/13

interface GigabitEthernet3/0/14

interface GigabitEthernet3/0/15

interface GigabitEthernet3/0/16

interface GigabitEthernet3/0/17

interface GigabitEthernet3/0/18

interface GigabitEthernet3/0/19

interface GigabitEthernet3/0/20

interface GigabitEthernet3/0/21

interface GigabitEthernet3/0/22

interface GigabitEthernet3/0/23

interface GigabitEthernet3/0/24

interface GigabitEthernet3/0/25

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/26

interface GigabitEthernet3/0/27

interface GigabitEthernet3/0/28

interface TenGigabitEthernet3/0/1

interface TenGigabitEthernet3/0/2

interface Vlan1

 no ip address

 shutdown

interface Vlan11

 dampening

 ip address 10.125.21.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan12

 dampening

 ip address 10.125.21.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan13

 dampening

 ip address 10.125.22.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan14

 dampening

 ip address 10.125.22.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan15

 dampening

 ip address 10.125.23.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan16

 dampening

 ip address 10.125.23.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan17

 dampening

 ip address 10.125.24.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan18

 dampening

 ip address 10.125.24.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan19

 dampening

 ip address 10.125.25.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan20

 dampening

 ip address 10.125.25.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan900

 ip address 172.26.158.238 255.255.254.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Port-channel1

 no auto-summary

 eigrp router-id 10.125.100.6

 eigrp stub connected

 network 10.125.0.0 0.0.255.255

nsf

ip classless

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 02050D48080943701E1D

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36026851

ntp server 172.26.158.10

end

Cr25-3750s-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr25-3750s-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$wQrW$jkV1e46Qfbs8PzbR/vO7O/

enable password 7 02050D480809

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750g-24ts

switch 2 provision ws-c3750g-24ts

stack-mac persistent timer 0

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

no ip domain-lookup

ip dhcp snooping vlan 131-140

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 131-140

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint TP-self-signed-1942438528

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-1942438528

 revocation-check none

 rsakeypair TP-self-signed-1942438528

crypto pki certificate chain TP-self-signed-1942438528

 certificate self-signed 01 nvram:IOS-Self-Sig#3838.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 131

 name cr26_3750s_Dept31

vlan 132

 name cr26_3750s_Dept32

vlan 133

 name cr26_3750s_Dept33

vlan 134

 name cr26_3750s_Dept34

vlan 135

 name cr26_3750s_Dept35

vlan 136

 name cr26_3750s_Dept36

vlan 137

 name cr26_3750s_Dept37

vlan 138

 name cr26_3750s_Dept38

vlan 139

 name cr26_3750s_Dept39

vlan 140

 name cr26_3750s_Dept40

vlan 206

 name Guest_VLAN

vlan 805

 name Hopping_VLAN

vlan 900

 name Mgmt_VLAN

ip ftp username nimishguest

ip ftp password 7 09424A0E0C000406

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.7 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 ip arp inspection trust

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 131

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/2

interface GigabitEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 133

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone-Policy

 ip verify source

interface GigabitEthernet1/0/4

 ip arp inspection limit rate 100

interface GigabitEthernet1/0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 136

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 authentication open

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 137

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 authentication open

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 138

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 authentication open

mab

 mls qos trust dscp

 dot1x pae authenticator

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/8

interface GigabitEthernet1/0/9

interface GigabitEthernet1/0/10

 description Connected to IXIA - ALM - 2/6

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/11

 description Connected to IXIA - STX - 4/2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/12

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

interface GigabitEthernet1/0/22

interface GigabitEthernet1/0/23

interface GigabitEthernet1/0/24

 description Flashnet DO NOT ROUTE

 switchport access vlan 2

 switchport mode access

interface GigabitEthernet1/0/25

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/26

interface GigabitEthernet1/0/27

interface GigabitEthernet1/0/28

interface GigabitEthernet2/0/1

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 132

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface GigabitEthernet2/0/2

 ip arp inspection limit rate 100

interface GigabitEthernet2/0/3

 description CONNECTED TO PHONE+PC

 switchport access vlan 134

 switchport mode access

 switchport block unicast

 switchport voice vlan 135

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet2/0/4

 ip arp inspection limit rate 100

interface GigabitEthernet2/0/5

 ip arp inspection limit rate 100

interface GigabitEthernet2/0/6

 ip arp inspection limit rate 100

interface GigabitEthernet2/0/7

 ip arp inspection limit rate 100

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

interface GigabitEthernet2/0/22

interface GigabitEthernet2/0/23

interface GigabitEthernet2/0/24

 description Flashnet DO NOT ROUTE

 switchport access vlan 2

 switchport mode access

interface GigabitEthernet2/0/25

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet2/0/26

interface GigabitEthernet2/0/27

interface GigabitEthernet2/0/28

interface Vlan1

 no ip address

 shutdown

interface Vlan2

 description Flashnet DO NOT ROUTE

 ip address 172.26.160.201 255.255.254.0

 no ip redirects

 no ip proxy-arp

interface Vlan900

 description Mgmt_VLAN

 ip address 10.125.34.5 255.255.255.224

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 094F471A1A0A5B43595F

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028937

ntp server 172.26.160.10

end

Cr26-3750DC-DO

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009 by cisco

! NVRAM config last updated at 22:53:54 EDT Wed Sep 2 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr26-3750DC-DO

boot-start-marker

boot-end-marker

enable password 7 070C285F4D06

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750g-12s

switch 2 provision ws-c3750g-12s

switch 3 provision ws-c3750g-12s

stack-mac persistent timer 0

system mtu routing 1500

vtp domain District-Office

vtp mode transparent

ip subnet-zero

no ip domain-lookup

ip multicast-routing distributed

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint TP-self-signed-721633024

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-721633024

 revocation-check none

 rsakeypair TP-self-signed-721633024

crypto pki certificate chain TP-self-signed-721633024

 certificate self-signed 01 nvram:IOS-Self-Sig#3434.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_Vlan

vlan 141

 name cr26_3750s_DC_Group1

vlan 142

 name cr26_3750s_DC_Group2

vlan 143

 name cr26_3750s_DC_Group3

vlan 144

 name cr26_3750s_DC_Group4

vlan 145

 name cr26_3750s_DC_Group5

vlan 146

 name cr26_3750s_DC_Group6

vlan 147

 name cr26_3750s_DC_Group7

vlan 148

 name cr26_3750s_DC_Group8

vlan 149

 name cr26_3750s_DC_Group9

vlan 150

 name cr26_3750s_DC_Grou10

vlan 806

 name Hopping_Vlan

vlan 900

 name Mgmt_VLAN

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.8 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/1

interface GigabitEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 141

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

interface GigabitEthernet1/0/3

 description Connected to IXIA - LSM - 1/3

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 142

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/4

 description Connected to IXIA - LSM - 1/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 143

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/5

 description Connected to IXIA - LSM - 1/5

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 144

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/6

 description Connected to IXIA - LSM - 1/6

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 145

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/7

 description Connected to IXIA - LSM - 1/7

 switchport access vlan 141

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/8

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/9

 description Connected to cr25-w2k-2

 switchport access vlan 141

interface GigabitEthernet1/0/10

 switchport access vlan 141

interface GigabitEthernet1/0/11

 switchport access vlan 141

interface GigabitEthernet1/0/12

 switchport access vlan 2

 switchport mode access

interface GigabitEthernet2/0/1

 switchport access vlan 141

interface GigabitEthernet2/0/2

 switchport access vlan 141

interface GigabitEthernet2/0/3

interface GigabitEthernet2/0/4

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

 switchport access vlan 2

 switchport mode access

interface GigabitEthernet3/0/1

 description Connected to IXIA - LSM - 1/7

 switchport access vlan 141

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 146

 switchport mode trunk

 switchport nonegotiate

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/2

 description CONNECTED TO PHONE

 switchport access vlan 141

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone-Policy

interface GigabitEthernet3/0/3

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 141

 mls qos trust dscp

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet3/0/4

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 141

 priority-queue out

 mls qos trust dscp

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet3/0/5

 switchport access vlan 141

interface GigabitEthernet3/0/6

 switchport access vlan 141

interface GigabitEthernet3/0/7

 switchport access vlan 141

interface GigabitEthernet3/0/8

 description Connected to cr24-4507-DO

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/9

 switchport access vlan 141

 speed 100

 duplex half

interface GigabitEthernet3/0/10

interface GigabitEthernet3/0/11

 switchport access vlan 141

interface GigabitEthernet3/0/12

 switchport access vlan 2

 switchport mode access

interface Vlan1

 no ip address

 shutdown

interface Vlan2

 description FlashNet VLAN

 ip address 172.26.160.189 255.255.254.0

 no ip redirects

 no ip proxy-arp

interface Vlan900

 description Mgmt_VLAN

 ip address 10.125.34.6 255.255.255.224

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

ip classless

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 02050D48080943701E1D

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028995

ntp server 172.26.160.10

end

Core/Distribution

Cr24-4507-D

! Last configuration change at 22:53:38 EDT Wed Sep 2 2009

! NVRAM config last updated at 22:53:55 EDT Wed Sep 2 2009

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

service compress-config

hostname cr24-4507-DO

boot-start-marker

boot system flash slot0:cat4500e-entservicesk9-mz.122-53.SG

boot-end-marker

enable secret 5 $1$UMTH$xnQm5GcPPGxmEWdUoGWj7.

enable password 7 094F471A1A0A

no aaa new-model

clock timezone EST -5

clock summer-time EDT recurring

hw-module uplink mode shared-backplane

hw-module module 3 port-group 1 select gigabitethernet

hw-module module 4 port-group 1 select gigabitethernet

ip subnet-zero

no ip domain-lookup

ip vrf mgmtVrf

ip multicast-routing

vtp domain District-Office

vtp mode transparent

table-map WLC-DSCP-COS

 default copy

key chain eigrp-key

 key 1

   key-string 7 045802150C2E

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery interval 120

power redundancy-mode redundant

spanning-tree mode rapid-pvst

spanning-tree extend system-id

spanning-tree vlan 1-4094 priority 24576

redundancy

 mode sso

 main-cpu

  auto-sync standard

process-max-time 20

vlan internal allocation policy ascending

vlan 11-20

vlan 101

 name cr24_2960_Dept1

vlan 102

 name cr24_2960_Dept2

vlan 103

 name cr24_2960_Dept3

vlan 104

 name cr24_2960_Dept4

vlan 105

 name cr24_2960_Dept5

vlan 106

 name cr24_2960_Dept6

vlan 107

 name cr24_2960_Dept7

vlan 108

 name cr24_2960_Dept8

vlan 109

 name cr24_2960_Dept9

vlan 110

 name cr24_2960_Dept10

vlan 111

 name cr24_3550_Dept11

vlan 112

 name cr24_3550_Dept12

vlan 113

 name cr24_3550_Dept13

vlan 114

 name cr24_3550_Dept14

vlan 115

 name cr24_3550_Dept15

vlan 116

 name cr24_3550_Dept16

vlan 117

 name cr24_3550_Dept17

vlan 118

 name cr24_3550_Dept18

vlan 119

 name cr24_3550_Dept19

vlan 120

 name cr24_3550_Dept20

vlan 121

 name cr25_3750_Dept21

vlan 122

 name cr25_3750_Dept22

vlan 123

 name cr25_3750_Dept23

vlan 124

 name cr25_3750_Dept24

vlan 125

 name cr25_3750_Dept25

vlan 126

 name cr25_3750_Dept26

vlan 127

 name cr25_3750_Dept27

vlan 128

 name cr25_3750_Dept28

vlan 129

 name cr25_3750_Dept29

vlan 130

 name cr25_3750_Dept30

vlan 131

 name cr26_3750s_Dept31

vlan 132

 name cr26_3750s_Dept32

vlan 133

 name cr26_3750s_Dept33

vlan 134

 name cr26_3750s_Dept34

vlan 135

 name cr26_3750s_Dept35

vlan 136

 name cr26_3750s_Dept36

vlan 137

 name cr26_3750s_Dept37

vlan 138

 name cr26_3750s_Dept38

vlan 139

 name cr26_3750s_Dept39

vlan 140

 name cr26_3750s_Dept40

vlan 141

 name cr26_3750s_DC_Group1

vlan 142

 name cr26_3750s_DC_Group2

vlan 143

 name cr26_3750s_DC_Group3

vlan 144

 name cr26_3750s_DC_Group4

vlan 145

 name cr26_3750s_DC_Group5

vlan 146

 name cr26_3750s_DC_Group6

vlan 147

 name cr26_3750s_DC_Group7

vlan 148

 name cr26_3750s_DC_Group8

vlan 149

 name cr26_3750s_DC_Group9

vlan 150

 name cr26_3750s_DC_Grou10

vlan 200

 name cr24_4507_FW_Inside

vlan 801

 name cr24_3750DC_Hopping

vlan 802

 name cr25_3550_Hopping

vlan 803

 name cr24_2975_Hopping

vlan 804

 name cr24_3560_Hopping

vlan 805

 name cr24_3750_Hopping

vlan 806

 name cr26_3750DC_Hopping

vlan 900

 name Mgmt_VLAN

ip ftp username nimishguest

ip ftp password 7 000A1701115E1812

class-map match-all MULTIMEDIA-STREAMING-QUEUE

 match  dscp af31  af32  af33

class-map match-any CONTROL-MGMT-QUEUE

 match  dscp cs7

 match  dscp cs6

 match  dscp cs3

 match  dscp cs2

class-map match-all TRANSACTIONAL-DATA-QUEUE

 match  dscp af21  af22  af23

class-map match-all COPP-CRITICAL-APPLICATIONS

 match access-group name COPP-CRITICAL-APPLICATIONS

class-map match-all COPP-FILE-MANAGEMENT

 match access-group name COPP-FILE-MANAGEMENT

class-map match-all SCAVENGER-QUEUE

 match  dscp cs1

class-map match-all COPP-MONITORING

 match access-group name COPP-MONITORING

class-map match-all MULTIMEDIA-CONFERENCING-QUEUE

 match  dscp af41  af42  af43

class-map match-all BULK-DATA-QUEUE

 match  dscp af11  af12  af13

class-map match-all COPP-INTERACTIVE-MANAGEMENT

 match access-group name COPP-INTERACTIVE-MANAGEMENT

class-map match-any PRIORITY-QUEUE

 match  dscp ef

 match  dscp cs5

 match  dscp cs4

class-map match-all COPP-UNDESIRABLE

 match access-group name COPP-UNDESIRABLE

class-map match-all COPP-IGP

 match access-group name COPP-IGP

policy-map EGRESS-POLICY

 class PRIORITY-QUEUE

    priority

 class CONTROL-MGMT-QUEUE

    bandwidth remaining percent 10

 class MULTIMEDIA-CONFERENCING-QUEUE

    bandwidth remaining percent 10

 class MULTIMEDIA-STREAMING-QUEUE

    bandwidth remaining percent 10

 class TRANSACTIONAL-DATA-QUEUE

    bandwidth remaining percent 10

dbl

 class BULK-DATA-QUEUE

    bandwidth remaining percent 4

dbl

 class SCAVENGER-QUEUE

    bandwidth remaining percent 1

 class class-default

    bandwidth remaining percent 25

dbl

policy-map PQ-POLICER

 class PRIORITY-QUEUE

    police cir 300000000

      conform-action transmit

      exceed-action drop

policy-map system-cpp-policy

 class COPP-IGP

    police cir 300000 bc 3000 be 3000

      conform-action transmit

      exceed-action drop

      violate-action drop

 class COPP-INTERACTIVE-MANAGEMENT

    police cir 500000 bc 5000 be 5000

      conform-action transmit

      exceed-action drop

      violate-action drop

 class COPP-FILE-MANAGEMENT

    police cir 6000000 bc 60000 be 60000

      conform-action transmit

      exceed-action drop

      violate-action drop

 class COPP-MONITORING

    police cir 900000 bc 9000 be 9000

      conform-action transmit

      exceed-action drop

      violate-action drop

 class COPP-CRITICAL-APPLICATIONS

    police cir 900000 bc 9000 be 9000

      conform-action transmit

      exceed-action drop

      violate-action drop

 class COPP-UNDESIRABLE

    police cir 32000 bc 3000 be 3000

      conform-action drop

      exceed-action drop

      violate-action drop

 class class-default

    police cir 500000 bc 5000 be 5000

      conform-action transmit

      exceed-action drop

      violate-action drop

interface Loopback0

 ip address 10.125.100.1 255.255.255.255

interface Loopback1

 description RP

 ip address 10.125.100.100 255.255.255.255

interface Port-channel1

 description Connected to cr24-3750ME-DO

 dampening

 ip address 10.125.32.4 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel2

 description Connected to cr24-2851-DO

 ip address 10.125.32.6 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel11

 description Connected to cr24-2960-DO

 switchport

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel12

 description Connected to cr24-2975-DO

 switchport

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel13

 description Connected to cr24-3560r-DO

 dampening

 ip address 10.125.32.0 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel14

 description Connected to cr25-3750-DO

 switchport

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel15

 description Connected to cr26-3750r-DO

 dampening

 ip address 10.125.32.2 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel16

 description Connected to cr25-3750s-DO

 switchport

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface Port-channel17

 description Connected to cr26-3750DC-DO

 switchport

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 service-policy output PQ-POLICER

interface FastEthernet1

 ip vrf forwarding mgmtVrf

 no ip address

 speed auto

 duplex auto

interface GigabitEthernet1/1

 description Connected to cr24-2960-DO

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 11 mode desirable

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet1/2

 description Connected to cr24-2975-DO

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 12 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet1/3

 description Connected to cr24-3560r-DO

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-group 13 mode desirable

 service-policy output EGRESS-POLICY

interface GigabitEthernet1/4

 description Connected to cr25-3750-DO

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 14 mode desirable

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet1/5

 description Connected to cr26-3750-DO

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 15 mode active

 service-policy output EGRESS-POLICY

interface GigabitEthernet1/6

 description Connected to cr26-3750s-DO

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 16 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/1

 description Connected to cr24-2960-DO

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 11 mode desirable

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/2

 description Connected to cr24-2975-DO

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 12 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/3

 description Connected to cr24-3560r-DO

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 udld port

 channel-group 13 mode desirable

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/4

 description Connected to cr25-3750-DO

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 14 mode desirable

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/5

 description Connected to cr26-3750-DO

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 15 mode active

 service-policy output EGRESS-POLICY

interface GigabitEthernet2/6

 description Connected to cr26-3750s-DO

 switchport trunk native vlan 805

 switchport trunk allowed vlan 131-140,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 16 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface TenGigabitEthernet3/1

interface TenGigabitEthernet3/2

interface GigabitEthernet3/3

interface GigabitEthernet3/4

 no switchport

 no ip address

 load-interval 30

interface GigabitEthernet3/5

 no switchport

 no ip address

 load-interval 30

interface GigabitEthernet3/6

 no switchport

 no ip address

 load-interval 30

interface TenGigabitEthernet4/1

interface TenGigabitEthernet4/2

interface GigabitEthernet4/3

interface GigabitEthernet4/4

 description backup link to cr26-asa5520-DO

 switchport access vlan 200

 switchport mode access

 switchport block unicast

 load-interval 30

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet4/5

 no switchport

 no ip address

 load-interval 30

interface GigabitEthernet4/6

 no switchport

 no ip address

 load-interval 30

interface GigabitEthernet5/1

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 17 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet5/2

interface GigabitEthernet5/3

 description Connected to cr26-asa5520-DO

 switchport access vlan 200

 switchport mode access

 switchport block unicast

 load-interval 30

 media-type rj45

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet5/4

 no switchport

 no ip address

 load-interval 30

 shutdown

 media-type rj45

 service-policy output EGRESS-POLICY

interface GigabitEthernet5/5

interface GigabitEthernet5/6

 description Connected to cr24-3750ME-DO

 no switchport

 dampening

 no ip address

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 1 mode desirable

 service-policy output EGRESS-POLICY

interface GigabitEthernet6/1

 switchport trunk native vlan 806

 switchport trunk allowed vlan 141-150,900

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol lacp

 channel-group 17 mode active

 spanning-tree guard root

 service-policy output EGRESS-POLICY

interface GigabitEthernet6/2

 load-interval 30

interface GigabitEthernet6/3

 description Connects to IronPort WSA T1 (L4TM)

 media-type rj45

 speed 1000

 duplex full

 service-policy output EGRESS-POLICY

interface GigabitEthernet6/4

 description Connected to IronPort

 media-type rj45

 service-policy output EGRESS-POLICY

interface GigabitEthernet6/5

interface GigabitEthernet6/6

 description Connected to cr24-3750ME-DO

 no switchport

 dampening

 no ip address

 load-interval 30

 carrier-delay msec 0

 udld port

 channel-protocol pagp

 channel-group 1 mode desirable

 service-policy output EGRESS-POLICY

interface GigabitEthernet7/1

 description Connected to FlashNet - DO NOT ROUTE

 no switchport

 ip address 172.26.160.185 255.255.252.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

interface GigabitEthernet7/2

 switchport mode trunk

interface GigabitEthernet7/3

 description Connects to IronPort WSA P1

 switchport access vlan 200

 switchport mode access

 switchport block unicast

 load-interval 30

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet7/4

interface GigabitEthernet7/5

interface GigabitEthernet7/6

interface GigabitEthernet7/7

interface GigabitEthernet7/8

interface GigabitEthernet7/9

interface GigabitEthernet7/10

interface GigabitEthernet7/11

interface GigabitEthernet7/12

interface GigabitEthernet7/13

interface GigabitEthernet7/14

interface GigabitEthernet7/15

interface GigabitEthernet7/16

interface GigabitEthernet7/17

interface GigabitEthernet7/18

interface GigabitEthernet7/19

interface GigabitEthernet7/20

interface GigabitEthernet7/21

interface GigabitEthernet7/22

interface GigabitEthernet7/23

interface GigabitEthernet7/24

interface GigabitEthernet7/25

interface GigabitEthernet7/26

interface GigabitEthernet7/27

interface GigabitEthernet7/28

interface GigabitEthernet7/29

interface GigabitEthernet7/30

interface GigabitEthernet7/31

interface GigabitEthernet7/32

interface GigabitEthernet7/33

interface GigabitEthernet7/34

interface GigabitEthernet7/35

interface GigabitEthernet7/36

interface GigabitEthernet7/37

interface GigabitEthernet7/38

interface GigabitEthernet7/39

interface GigabitEthernet7/40

interface GigabitEthernet7/41

interface GigabitEthernet7/42

interface GigabitEthernet7/43

interface GigabitEthernet7/44

interface GigabitEthernet7/45

interface GigabitEthernet7/46

interface GigabitEthernet7/47

interface GigabitEthernet7/48

interface Vlan1

 no ip address

 shutdown

interface Vlan101

 description Connected to cr24_2960_Dept_1_VLAN

 dampening

 ip address 10.125.1.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan102

 description Connected to cr24_2960_Dept_2_VLAN

 dampening

 ip address 10.125.1.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan103

 description Connected to cr24_2960_Dept_3_VLAN

 dampening

 ip address 10.125.2.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan104

 description Connected to cr24_2960_Dept_4_VLAN

 dampening

 ip address 10.125.2.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan105

 description Connected to cr24_2960_Dept_5_VLAN

 dampening

 ip address 10.125.3.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan106

 description Connected to cr24_2960_Dept_6_VLAN

 dampening

 ip address 10.125.3.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan107

 description Connected to cr24_2960_Dept_7_VLAN

 dampening

 ip address 10.125.4.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan108

 description Connected to cr24_2960_Dept_8_VLAN

 dampening

 ip address 10.125.4.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan109

 description Connected to cr24_2960_Dept_9_VLAN

 dampening

 ip address 10.125.5.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan110

 description Connected to cr24_2960_Dept_10_VLAN

 dampening

 ip address 10.125.5.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan111

 description Connected to cr24_2975_Dept_11_VLAN

 dampening

 ip address 10.125.6.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan112

 description Connected to cr24_2975_Dept_12_VLAN

 dampening

 ip address 10.125.6.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan113

 description Connected to cr24_2975_Dept_13_VLAN

 dampening

 ip address 10.125.7.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan114

 description Connected to cr24_2975_Dept_14_VLAN

 dampening

 ip address 10.125.7.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan115

 description Connected to cr24_2975_Dept_15_VLAN

 dampening

 ip address 10.125.8.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan116

 description Connected to cr24_2975_Dept_16_VLAN

 dampening

 ip address 10.125.8.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan117

 description Connected to cr24_2975_Dept_17_VLAN

 dampening

 ip address 10.125.9.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan118

 description Connected to cr24_2975_Dept_18_VLAN

 dampening

 ip address 10.125.9.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan119

 description Connected to cr24_2975_Dept_19_VLAN

 dampening

 ip address 10.125.10.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan120

 description Connected to cr24_2975_Dept_20_VLAN

 dampening

 ip address 10.125.10.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan121

 description Connected to cr26_3750_Dept_31_VLAN

 dampening

 ip address 10.125.16.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan122

 description Connected to cr26_3750_Dept_32_VLAN

 dampening

 ip address 10.125.16.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan123

 description Connected to cr26_3750_Dept_33_VLAN

 dampening

 ip address 10.125.17.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan124

 description Connected to cr26_3750_Dept_34_VLAN

 dampening

 ip address 10.125.17.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan125

 description Connected to cr26_3750_Dept_35_VLAN

 dampening

 ip address 10.125.18.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan126

 description Connected to cr26_3750_Dept_36_VLAN

 dampening

 ip address 10.125.18.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan127

 description Connected to cr26_3750_Dept_37_VLAN

 dampening

 ip address 10.125.19.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan128

 description Connected to cr26_3750_Dept_38_VLAN

 dampening

 ip address 10.125.19.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan129

 description Connected to cr26_3750_Dept_39_VLAN

 dampening

 ip address 10.125.20.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan130

 description Connected to cr26_3750_Dept_40_VLAN

 dampening

 ip address 10.125.20.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan131

 description Connected to cr25_3750s_Dept_31_VLAN

 dampening

 ip address 10.125.26.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan132

 description Connected to cr25_3750s_Dept_32_VLAN

 dampening

 ip address 10.125.26.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan133

 description Connected to cr25_3750s_Dept_33_VLAN

 dampening

 ip address 10.125.27.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan134

 description Connected to cr25_3750s_Dept_34_VLAN

 dampening

 ip address 10.125.27.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan135

 description Connected to cr25_3750s_Dept_35_VLAN

 dampening

 ip address 10.125.28.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan136

 description Connected to cr25_3750s_Dept_36_VLAN

 dampening

 ip address 10.125.28.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan137

 description Connected to cr25_3750s_Dept_37_VLAN

 dampening

 ip address 10.125.29.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan138

 description Connected to cr25_3750s_Dept_38_VLAN

 dampening

 ip address 10.125.29.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan139

 description Connected to cr25_3750s_Dept_39_VLAN

 dampening

 ip address 10.125.30.1 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan140

 description Connected to cr25_3750s_Dept_40_VLAN

 dampening

 ip address 10.125.30.129 255.255.255.128

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan141

 dampening

 ip address 10.125.31.1 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan142

 dampening

 ip address 10.125.31.17 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan143

 dampening

 ip address 10.125.31.33 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan144

 dampening

 ip address 10.125.31.49 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan145

 dampening

 ip address 10.125.31.65 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan146

 dampening

 ip address 10.125.31.81 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim dr-priority 100

 ip pim sparse-mode

 load-interval 30

interface Vlan147

 dampening

 ip address 10.125.31.97 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan148

 dampening

 ip address 10.125.31.113 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan149

 dampening

 ip address 10.125.31.129 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan150

 dampening

 ip address 10.125.31.145 255.255.255.240

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan200

 description Connected to cr24_ASA_Inside_Port

 dampening

 ip address 10.125.33.9 255.255.255.0

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 logging event link-status

 load-interval 30

 carrier-delay msec 0

interface Vlan900

 description Mgmt_VLAN

 dampening

 ip address 10.125.34.1 255.255.255.224

 no ip redirects

 no ip unreachables

 no ip proxy-arp

 ip pim dr-priority 100

 ip pim sparse-mode

 ip summary-address eigrp 100 10.125.0.0 255.255.0.0 5

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Vlan200

 no passive-interface GigabitEthernet3/3

 no passive-interface GigabitEthernet4/3

 no passive-interface GigabitEthernet4/4

 no passive-interface GigabitEthernet4/6

 no passive-interface GigabitEthernet5/4

 no passive-interface GigabitEthernet5/5

 no passive-interface GigabitEthernet5/6

 no passive-interface GigabitEthernet6/2

 no passive-interface GigabitEthernet6/5

 no passive-interface GigabitEthernet6/6

 no passive-interface Port-channel1

 no passive-interface Port-channel13

 no passive-interface Port-channel15

 no passive-interface Port-channel17

 distribute-list route-map EIGRP_STUB_ROUTES out Vlan200

 distribute-list route-map EIGRP_STUB_ROUTES out Port-channel13

 distribute-list route-map EIGRP_STUB_ROUTES out Port-channel15

 no auto-summary

 eigrp router-id 10.125.100.1

 network 10.125.0.0 0.0.255.255

nsf

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended COPP-CRITICAL-APPLICATIONS

 remark DHCP

 permit udp host 0.0.0.0 host 255.255.255.255 eq bootps

 permit udp host 10.125.31.2 eq bootps any eq bootps

ip access-list extended COPP-FILE-MANAGEMENT

 remark (initiated) FTP (active and passive)

 permit tcp 172.26.160.0 0.0.3.255 eq ftp host 172.26.160.185 gt 1023 established

 permit tcp 172.26.160.0 0.0.3.255 eq ftp-data host 172.26.160.185 gt 1023

 permit tcp 172.26.160.0 0.0.3.255 gt 1023 host 172.26.160.185 gt 1023 established

 remark (initiated) TFTP

 permit udp 172.26.160.0 0.0.3.255 gt 1023 host 172.26.160.185 gt 1023

ip access-list extended COPP-IGP

 remark IGP (EIGRP)

 permit eigrp any host 224.0.0.10

 permit eigrp any any

ip access-list extended COPP-INTERACTIVE-MANAGEMENT

 remark RADIUS (return traffic)

 permit udp host 10.125.31.4 host 10.125.100.2

 remark SSH

 permit tcp 10.124.0.0 0.3.255.255 host 10.125.100.2 eq 22

 remark SNMP

 permit udp host 172.26.160.100 host 10.125.100.2 eq snmp

 remark NTP

 permit udp host 172.26.160.10 host 172.26.160.185 eq ntp

ip access-list extended COPP-MONITORING

 remark PING-ECHO

 permit icmp any any echo

 remark PING-ECHO-REPLY

 permit icmp any any echo-reply

 remark TRACEROUTE

 permit icmp any any ttl-exceeded

 permit icmp any any port-unreachable

ip access-list extended COPP-UNDESIRABLE

 remark UNDESIRABLE

 permit udp any any eq 1434

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

access-list 1 permit 0.0.0.0

access-list 1 permit 10.126.0.0

access-list 1 permit 10.127.0.0

access-list 1 permit 10.125.0.0

route-map EIGRP_STUB_ROUTES permit 10

 match ip address 1

control-plane

 service-policy input system-cpp-policy

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

alias exec dsno show ip dhcp snooping bind

line con 0

 exec-timeout 0 0

 password 7 104D000A0618

 stopbits 1

line vty 0 4

 exec-timeout 0 0

 password 7 0822455D0A16

 login

line vty 5 15

 exec-timeout 0 0

 login

monitor session 10 source interface Gi4/4

monitor session 10 source interface Gi5/3

monitor session 10 filter packet-type good rx

monitor session 10 destination interface Gi6/3

ntp clock-period 17181779

ntp server 172.26.160.10

end

WAN Aggregation

Cr24-3750ME-DO

! Last configuration change at 22:59:31 EDT Wed Sep 2 2009

! NVRAM config last updated at 22:59:37 EDT Wed Sep 2 2009

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr24-3750ME-DO

boot-start-marker

boot-end-marker

enable secret 5 $1$.2Ap$J0k3w04nQHip4UNN28KxX0

no aaa new-model

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

ip subnet-zero

ip routing

no ip domain-lookup

ip multicast-routing distributed

vtp domain District-Office

vtp mode transparent

no mpls traffic-eng auto-bw timers frequency 0

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 02050D480809

crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR

 enrollment selfsigned

 serial-number

 revocation-check none

 rsakeypair HTTPS_SS_CERT_KEYPAIR

crypto pki certificate chain HTTPS_SS_CERT_KEYPAIR

 certificate self-signed 01 nvram:8F1F4D80host#2E2E.cer

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause storm-control

errdisable recovery interval 120

port-channel load-balance src-dst-ip

vlan internal allocation policy ascending

vlan 501

 name School-Site1

vlan 502

 name School-Site2

vlan 503

 name School-Site3

vlan 504

 name School-Site4

vlan 505

 name School-Site5

vlan 506

 name School-Site6

vlan 507

 name School-Site7

vlan 508

 name School-Site8

vlan 509

 name School-Site9

vlan 510

 name School-Site10

vlan 511

 name School-Site11

vlan 512

 name School-Site12

vlan 513

 name School-Site13

vlan 514

 name School-Site14

vlan 515

 name School-Site15

vlan 516

 name School-Site16

vlan 517

 name School-Site17

vlan 518

 name School-Site18

vlan 519

 name School-Site19

vlan 520

 name School-Site20

vlan 521

 name School-Site21

vlan 522

 name School-Site22

vlan 523

 name School-Site23

vlan 524

 name School-Site24

vlan 525

 name School-Site25

vlan 526

 name School-Site26

vlan 527

 name School-Site27

vlan 528

 name School-Site28

vlan 529

 name School-Site29

vlan 530

 name School-Site30

vlan 531

 name School-Site31

vlan 532

 name School-Site32

vlan 533

 name School-Site33

vlan 534

 name School-Site34

vlan 535

 name School-Site35

vlan 536

 name School-Site36

vlan 537

 name School-Site37

vlan 538

 name School-Site38

vlan 539

 name School-Site39

vlan 540

 name School-Site40

vlan 541

 name School-Site41

vlan 542

 name School-Site42

vlan 543

 name School-Site43

vlan 544

 name School-Site44

vlan 545

 name School-Site45

vlan 546

 name School-Site46

vlan 547

 name School-Site47

vlan 548

 name School-Site48

vlan 549

 name School-Site49

vlan 550

 name School-Site50

vlan 601

 name School-Site51

vlan 602

 name School-Site52

vlan 603

 name School-Site53

vlan 604

 name School-Site54

vlan 605

 name School-Site55

vlan 606

 name School-Site56

vlan 607

 name School-Site57

vlan 608

 name School-Site58

vlan 609

 name School-Site59

vlan 610

 name School-Site60

vlan 611

 name School-Site61

vlan 612

 name School-Site62

vlan 613

 name School-Site63

vlan 614

 name School-Site64

vlan 615

 name School-Site65

vlan 616

 name School-Site66

vlan 617

 name School-Site67

vlan 618

 name School-Site68

vlan 619

 name School-Site69

vlan 620

 name School-Site70

vlan 621

 name School-Site71

vlan 622

 name School-Site72

vlan 623

 name School-Site73

vlan 624

 name School-Site74

vlan 625

 name School-Site75

vlan 626

 name School-Site76

vlan 627

 name School-Site77

vlan 628

 name School-Site78

vlan 629

 name School-Site79

vlan 630

 name School-Site80

vlan 631

 name School-Site81

vlan 632

 name School-Site82

vlan 633

 name School-Site83

vlan 634

 name School-Site84

vlan 635

 name School-Site85

vlan 636

 name School-Site86

vlan 637

 name School-Site87

vlan 638

 name School-Site88

vlan 639

 name School-Site89

vlan 640

 name School-Site90

vlan 641

 name School-Site91

vlan 642

 name School-Site92

vlan 643

 name School-Site93

vlan 644

 name School-Site94

vlan 645

 name School-Site95

vlan 646

 name School-Site96

vlan 647

 name School-Site97

vlan 648

 name School-Site98

vlan 649

 name School-Site99

vlan 650

 name School-Site100

vlan 801

 name MetroE_G1/1/1_Hopping_VLAN

vlan 802

 name MetroE_G1/1/2_Hopping_VLAN

class-map match-all GOLD

 match ip dscp cs6

 match ip dscp cs7

 match ip dscp cs3

 match ip dscp cs2

class-map match-all SILVER

 match ip dscp af21

 match ip dscp af22

 match ip dscp af23

 match ip dscp af11

 match ip dscp af12

 match ip dscp af13

 match ip dscp af31

 match ip dscp af32

 match ip dscp af33

 match ip dscp af41

 match ip dscp af42

 match ip dscp af43

class-map match-all School_Site11

  description 3750-SS11

 match vlan  511

class-map match-all School_Site22

  description 3750-SS22

 match vlan  522

class-map match-all School_Site33

  description 3750-SS33

 match vlan  533

class-map match-all School_Site44

  description 3750-SS44

 match vlan  544

class-map match-all School_Site55

  description 3750-SS55

 match vlan  606

class-map match-all School_Site66

  description 3750-SS66

 match vlan  617

class-map match-all School_Site77

  description 3750-SS77

 match vlan  628

class-map match-all School_Site88

  description 3750-SS88

 match vlan  639

class-map match-all School_Site99

  description 3750-SS99

 match vlan  650

class-map match-all School_Site10

  description 3750-SS10

 match vlan  510

class-map match-all School_Site23

  description 3750-SS23

 match vlan  523

class-map match-all School_Site32

  description 3750-SS32

 match vlan  532

class-map match-all School_Site45

  description 3750-SS45

 match vlan  545

class-map match-all School_Site54

  description 3750-SS54

 match vlan  605

class-map match-all School_Site67

  description 3750-SS67

 match vlan  618

class-map match-all School_Site76

  description 3750-SS76

 match vlan  627

class-map match-all School_Site89

  description 3750-SS89

 match vlan  640

class-map match-all School_Site98

  description 3750-SS98

 match vlan  649

class-map match-all School_Site13

  description 3750-SS13

 match vlan  513

class-map match-all School_Site20

  description 3750-SS20

 match vlan  520

class-map match-all School_Site31

  description 3750-SS31

 match vlan  531

class-map match-all School_Site46

  description 3750-SS46

 match vlan  546

class-map match-all School_Site57

  description 3750-SS57

 match vlan  608

class-map match-all School_Site64

  description 3750-SS64

 match vlan  615

class-map match-all School_Site75

  description 3750-SS75

 match vlan  626

class-map match-all School_Site12

  description 3750-SS12

 match vlan  512

class-map match-all School_Site21

  description 3750-SS21

 match vlan  521

class-map match-all School_Site30

  description 3750-SS30

 match vlan  530

class-map match-all School_Site47

  description 3750-SS47

 match vlan  547

class-map match-all School_Site56

  description 3750-SS56

 match vlan  607

class-map match-all School_Site65

  description 3750-SS65

 match vlan  616

class-map match-all School_Site74

  description 3750-SS74

 match vlan  625

class-map match-all School_Site15

  description 3750-SS15

 match vlan  515

class-map match-all School_Site26

  description 3750-SS26

 match vlan  526

class-map match-all School_Site37

  description 3750-SS37

 match vlan  537

class-map match-all School_Site40

  description 3750-SS40

 match vlan  540

class-map match-all School_Site51

  description 3750-SS51

 match vlan  602

class-map match-all School_Site62

  description 3750-SS62

 match vlan  613

class-map match-all School_Site73

  description 3750-SS73

 match vlan  624

class-map match-all School_Site14

  description 3750-SS14

 match vlan  514

class-map match-all School_Site27

  description 3750-SS27

 match vlan  527

class-map match-all School_Site36

  description 3750-SS36

 match vlan  536

class-map match-all School_Site41

  description 3750-SS41

 match vlan  541

class-map match-all School_Site50

  description 3750-SS50

 match vlan  550

class-map match-all School_Site63

  description 3750-SS63

 match vlan  614

class-map match-all School_Site72

  description 3750-SS72

 match vlan  623

class-map match-all School_Site17

  description 3750-SS17

 match vlan  517

class-map match-all School_Site24

  description 3750-SS24

 match vlan  524

class-map match-all School_Site35

  description 3750-SS35

 match vlan  535

class-map match-all School_Site42

  description 3750-SS42

 match vlan  542

class-map match-all School_Site53

  description 3750-SS53

 match vlan  604

class-map match-all School_Site60

  description 3750-SS60

 match vlan  611

class-map match-all School_Site71

  description 3750-SS71

 match vlan  622

class-map match-all School_Site16

  description 3750-SS16

 match vlan  516

class-map match-all School_Site25

  description 3750-SS25

 match vlan  525

class-map match-all School_Site34

  description 3750-SS34

 match vlan  534

class-map match-all School_Site43

  description 3750-SS43

 match vlan  543

class-map match-all School_Site52

  description 3750-SS52

 match vlan  603

class-map match-all School_Site61

  description 3750-SS61

 match vlan  612

class-map match-all School_Site70

  description 3750-SS70

 match vlan  621

class-map match-all School_Site19

  description 3750-SS19

 match vlan  519

class-map match-all School_Site80

  description 3750-SS80

 match vlan  631

class-map match-all School_Site91

  description 3750-SS91

 match vlan  642

class-map match-all School_Site18

  description 3750-SS18

 match vlan  518

class-map match-all School_Site81

  description 3750-SS81

 match vlan  632

class-map match-all School_Site90

  description 3750-SS90

 match vlan  641

class-map match-all School_Site28

  description 3750-SS28

 match vlan  528

class-map match-all School_Site39

  description 3750-SS39

 match vlan  539

class-map match-all School_Site82

  description 3750-SS82

 match vlan  633

class-map match-all School_Site93

  description 3750-SS93

 match vlan  644

class-map match-all School_Site29

  description 3750-SS29

 match vlan  529

class-map match-all School_Site38

  description 3750-SS38

 match vlan  538

class-map match-all School_Site83

  description 3750-SS83

 match vlan  634

class-map match-all School_Site92

  description 3750-SS92

 match vlan  643

class-map match-all School_Site48

  description 3750-SS48

 match vlan  548

class-map match-all School_Site59

  description 3750-SS59

 match vlan  610

class-map match-all School_Site84

  description 3750-SS84

 match vlan  635

class-map match-all School_Site95

  description 3750-SS95

 match vlan  646

class-map match-all School_Site49

  description 3750-SS49

 match vlan  549

class-map match-all School_Site58

  description 3750-SS58

 match vlan  609

class-map match-all School_Site85

  description 3750-SS85

 match vlan  636

class-map match-all School_Site94

  description 3750-SS94

 match vlan  645

class-map match-all School_Site68

  description 3750-SS68

 match vlan  619

class-map match-all School_Site79

  description 3750-SS79

 match vlan  630

class-map match-all School_Site86

  description 3750-SS86

 match vlan  637

class-map match-all School_Site97

  description 3750-SS97

 match vlan  648

class-map match-all School_Site69

  description 3750-SS69

 match vlan  620

class-map match-all School_Site78

  description 3750-SS78

 match vlan  629

class-map match-all School_Site87

  description 3750-SS87

 match vlan  638

class-map match-all School_Site96

  description 3750-SS96

 match vlan  647

class-map match-all REAL_TIME

 match ip dscp ef

 match ip dscp cs5

 match ip dscp cs4

class-map match-all School_Site1

  description cr2-4507-SS1

 match vlan  501

class-map match-all School_Site100

  description cr36-3750s-SS100

 match vlan  650

class-map match-all School_Site2

  description 3750-SS2

 match vlan  502

class-map match-all School_Site3

  description 3750-SS3

 match vlan  503

class-map match-all School_Site4

  description 3750-SS4

 match vlan  504

class-map match-all School_Site5

  description 3750-SS5

 match vlan  505

class-map match-all School_Site6

  description 3750-SS6

 match vlan  506

class-map match-all School_Site7

  description 3750-SS7

 match vlan  507

class-map match-all School_Site8

  description 3750-SS8

 match vlan  508

class-map match-all School_Site9

  description 3750-SS9

 match vlan  509

policy-map School-Child-Policy-Map

 class REAL_TIME

    priority

   police cir percent 30 conform-action set-cos-transmit 5 exceed-action drop 
violate-action drop

  set cos 5

 class GOLD

    bandwidth percent 5

  set cos 3

 class SILVER

    bandwidth percent 30

  set cos 2

 class class-default

    bandwidth percent 35

  set cos 0

policy-map School-51to100-Parent-Policy-Map

 class School_Site100

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site51

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site52

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site53

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site54

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site55

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site56

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site57

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site58

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site59

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site60

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site61

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site62

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site63

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site64

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site65

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site66

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site67

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site68

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site69

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site70

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site71

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site72

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site73

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site74

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site75

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site76

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site77

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site78

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site79

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site80

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site81

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site82

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site83

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site84

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site85

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site86

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site87

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site88

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site89

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site90

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site91

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site92

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site93

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site94

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site95

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site96

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site97

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site98

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site99

    shape average 10000000

  service-policy School-Child-Policy-Map

policy-map School-1to50-Parent-Policy-Map

 class School_Site1

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site2

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site3

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site4

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site5

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site6

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site7

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site8

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site9

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site10

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site11

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site12

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site13

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site14

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site15

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site16

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site17

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site18

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site19

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site20

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site21

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site22

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site23

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site24

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site25

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site26

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site27

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site28

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site29

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site30

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site31

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site32

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site33

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site34

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site35

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site36

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site37

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site38

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site39

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site40

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site41

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site42

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site43

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site44

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site45

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site46

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site47

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site48

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site49

    shape average 20000000

  service-policy School-Child-Policy-Map

 class School_Site50

    shape average 10000000

  service-policy School-Child-Policy-Map

interface Loopback0

 ip address 10.126.100.1 255.255.255.255

interface Port-channel1

 description Connected to cr24-4507-DO

 no switchport

 dampening

 ip address 10.125.32.5 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.127.0.0 255.255.0.0 5

 ip summary-address eigrp 100 10.126.0.0 255.255.0.0 5

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet1/0/1

interface FastEthernet1/0/2

interface FastEthernet1/0/3

interface FastEthernet1/0/4

interface FastEthernet1/0/5

interface FastEthernet1/0/6

interface FastEthernet1/0/7

interface FastEthernet1/0/8

interface FastEthernet1/0/9

interface FastEthernet1/0/10

interface FastEthernet1/0/11

interface FastEthernet1/0/12

interface FastEthernet1/0/13

interface FastEthernet1/0/14

interface FastEthernet1/0/15

interface FastEthernet1/0/16

interface FastEthernet1/0/17

interface FastEthernet1/0/18

interface FastEthernet1/0/19

interface FastEthernet1/0/20

interface FastEthernet1/0/21

interface FastEthernet1/0/22

interface FastEthernet1/0/23

interface FastEthernet1/0/24

 description Connected to FlashNet

 no switchport

 ip address 172.26.160.184 255.255.254.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

interface GigabitEthernet1/0/1

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

interface GigabitEthernet1/0/2

 description Connected to cr24-4507-DO

 no switchport

 no ip address

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

interface GigabitEthernet1/1/1

 description Connected to SP-MPLS-Core-cr24-6500-1

 switchport trunk native vlan 801

 switchport trunk allowed vlan 501-550

 switchport mode trunk

 logging event trunk-status

 load-interval 30

 carrier-delay msec 0

 priority-queue out

 mls qos trust dscp

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree guard root

 service-policy output School-1to50-Parent-Policy-Map

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/1/2

 description Connected to SP-MPLS-Core-cr24-6500-1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 601-650

 switchport mode trunk

 logging event trunk-status

 load-interval 30

 carrier-delay msec 0

 priority-queue out

 mls qos trust dscp

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree guard root

 service-policy output School-51to100-Parent-Policy-Map

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan1

 no ip address

 shutdown

interface Vlan501

 description Connected to cr35-4507-SS1

 dampening

 ip address 10.126.0.0 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan502

 dampening

 ip address 10.126.0.2 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan503

 dampening

 ip address 10.126.0.4 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan504

 dampening

 ip address 10.126.0.6 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan505

 dampening

 ip address 10.126.0.8 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan506

 dampening

 ip address 10.126.0.10 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan507

 dampening

 ip address 10.126.0.12 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan508

 dampening

 ip address 10.126.0.14 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan509

 dampening

 ip address 10.126.0.16 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan510

 dampening

 ip address 10.126.0.18 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan511

 dampening

 ip address 10.126.0.20 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan512

 dampening

 ip address 10.126.0.22 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan513

 dampening

 ip address 10.126.0.24 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan514

 dampening

 ip address 10.126.0.26 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan515

 dampening

 ip address 10.126.0.28 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan516

 dampening

 ip address 10.126.0.30 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan517

 dampening

 ip address 10.126.0.32 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan518

 dampening

 ip address 10.126.0.34 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan519

 dampening

 ip address 10.126.0.36 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan520

 dampening

 ip address 10.126.0.38 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan521

 dampening

 ip address 10.126.0.40 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan522

 dampening

 ip address 10.126.0.42 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan523

 dampening

 ip address 10.126.0.44 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan524

 dampening

 ip address 10.126.0.46 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan525

 dampening

 ip address 10.126.0.48 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan526

 dampening

 ip address 10.126.0.50 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan527

 dampening

 ip address 10.126.0.52 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan528

 dampening

 ip address 10.126.0.54 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan529

 dampening

 ip address 10.126.0.56 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan530

 dampening

 ip address 10.126.0.58 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan531

 dampening

 ip address 10.126.0.60 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan532

 dampening

 ip address 10.126.0.62 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan533

 dampening

 ip address 10.126.0.64 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan534

 dampening

 ip address 10.126.0.66 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan535

 dampening

 ip address 10.126.0.68 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan536

 dampening

 ip address 10.126.0.70 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan537

 dampening

 ip address 10.126.0.72 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan538

 dampening

 ip address 10.126.0.74 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan539

 dampening

 ip address 10.126.0.76 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan540

 dampening

 ip address 10.126.0.78 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan541

 dampening

 ip address 10.126.0.80 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan542

 dampening

 ip address 10.126.0.82 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan543

 dampening

 ip address 10.126.0.84 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan544

 dampening

 ip address 10.126.0.86 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan545

 dampening

 ip address 10.126.0.88 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan546

 dampening

 ip address 10.126.0.90 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan547

 dampening

 ip address 10.126.0.92 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan548

 dampening

 ip address 10.126.0.94 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan549

 dampening

 ip address 10.126.0.96 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan550

 dampening

 ip address 10.126.0.98 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan601

 description Connected to cr36-3750-SS2

 dampening

 ip address 10.126.1.0 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan602

 dampening

 ip address 10.126.1.2 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan603

 dampening

 ip address 10.126.1.4 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan604

 dampening

 ip address 10.126.1.6 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan605

 dampening

 ip address 10.126.1.8 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan606

 dampening

 ip address 10.126.1.10 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan607

 dampening

 ip address 10.126.1.12 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan608

 dampening

 ip address 10.126.1.14 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan609

 dampening

 ip address 10.126.1.16 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan610

 dampening

 ip address 10.126.1.18 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan611

 dampening

 ip address 10.126.1.20 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan612

 dampening

 ip address 10.126.1.22 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan613

 dampening

 ip address 10.126.1.24 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan614

 dampening

 ip address 10.126.1.26 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan615

 dampening

 ip address 10.126.1.28 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan616

 dampening

 ip address 10.126.1.30 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan617

 dampening

 ip address 10.126.1.32 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan618

 dampening

 ip address 10.126.1.34 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan619

 dampening

 ip address 10.126.1.36 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan620

 dampening

 ip address 10.126.1.38 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan621

 dampening

 ip address 10.126.1.40 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan622

 dampening

 ip address 10.126.1.42 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan623

 dampening

 ip address 10.126.1.44 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan624

 dampening

 ip address 10.126.1.46 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan625

 dampening

 ip address 10.126.1.48 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan626

 dampening

 ip address 10.126.1.50 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan627

 dampening

 ip address 10.126.1.52 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan628

 dampening

 ip address 10.126.1.54 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan629

 dampening

 ip address 10.126.1.56 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan630

 dampening

 ip address 10.126.1.58 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan631

 dampening

 ip address 10.126.1.60 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan632

 dampening

 ip address 10.126.1.62 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan633

 dampening

 ip address 10.126.1.64 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan634

 dampening

 ip address 10.126.1.66 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan635

 dampening

 ip address 10.126.1.68 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan636

 dampening

 ip address 10.126.1.70 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan637

 dampening

 ip address 10.126.1.72 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan638

 dampening

 ip address 10.126.1.74 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan639

 dampening

 ip address 10.126.1.76 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan640

 dampening

 ip address 10.126.1.78 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan641

 dampening

 ip address 10.126.1.80 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan642

 dampening

 ip address 10.126.1.82 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan643

 dampening

 ip address 10.126.1.84 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan644

 dampening

 ip address 10.126.1.86 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan645

 dampening

 ip address 10.126.1.88 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan646

 dampening

 ip address 10.126.1.90 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan647

 dampening

 ip address 10.126.1.92 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan648

 dampening

 ip address 10.126.1.94 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan649

 dampening

 ip address 10.126.1.96 255.255.255.254

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan650

 dampening

 ip address 10.126.1.98 255.255.255.254

 ip hold-time eigrp 100 20

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.124.0.0 255.252.0.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

router eigrp 100

 passive-interface default

 no passive-interface Vlan501

 no passive-interface Vlan502

 no passive-interface Vlan503

 no passive-interface Vlan504

 no passive-interface Vlan505

 no passive-interface Vlan506

 no passive-interface Vlan507

 no passive-interface Vlan508

 no passive-interface Vlan509

 no passive-interface Vlan510

 no passive-interface Vlan511

 no passive-interface Vlan512

 no passive-interface Vlan513

 no passive-interface Vlan514

 no passive-interface Vlan515

 no passive-interface Vlan516

 no passive-interface Vlan517

 no passive-interface Vlan518

 no passive-interface Vlan519

 no passive-interface Vlan520

 no passive-interface Vlan521

 no passive-interface Vlan522

 no passive-interface Vlan523

 no passive-interface Vlan524

 no passive-interface Vlan525

 no passive-interface Vlan526

 no passive-interface Vlan527

 no passive-interface Vlan528

 no passive-interface Vlan529

 no passive-interface Vlan530

 no passive-interface Vlan531

 no passive-interface Vlan532

 no passive-interface Vlan533

 no passive-interface Vlan534

 no passive-interface Vlan535

 no passive-interface Vlan536

 no passive-interface Vlan537

 no passive-interface Vlan538

 no passive-interface Vlan539

 no passive-interface Vlan540

 no passive-interface Vlan541

 no passive-interface Vlan542

 no passive-interface Vlan543

 no passive-interface Vlan544

 no passive-interface Vlan545

 no passive-interface Vlan546

 no passive-interface Vlan547

 no passive-interface Vlan548

 no passive-interface Vlan549

 no passive-interface Vlan550

 no passive-interface Vlan601

 no passive-interface Vlan602

 no passive-interface Vlan603

 no passive-interface Vlan604

 no passive-interface Vlan605

 no passive-interface Vlan606

 no passive-interface Vlan607

 no passive-interface Vlan608

 no passive-interface Vlan609

 no passive-interface Vlan610

 no passive-interface Vlan611

 no passive-interface Vlan612

 no passive-interface Vlan613

 no passive-interface Vlan614

 no passive-interface Vlan615

 no passive-interface Vlan616

 no passive-interface Vlan617

 no passive-interface Vlan618

 no passive-interface Vlan619

 no passive-interface Vlan620

 no passive-interface Vlan621

 no passive-interface Vlan622

 no passive-interface Vlan623

 no passive-interface Vlan624

 no passive-interface Vlan625

 no passive-interface Vlan626

 no passive-interface Vlan627

 no passive-interface Vlan628

 no passive-interface Vlan629

 no passive-interface Vlan630

 no passive-interface Vlan631

 no passive-interface Vlan632

 no passive-interface Vlan633

 no passive-interface Vlan634

 no passive-interface Vlan635

 no passive-interface Vlan636

 no passive-interface Vlan637

 no passive-interface Vlan638

 no passive-interface Vlan639

 no passive-interface Vlan640

 no passive-interface Vlan641

 no passive-interface Vlan642

 no passive-interface Vlan643

 no passive-interface Vlan644

 no passive-interface Vlan645

 no passive-interface Vlan646

 no passive-interface Vlan647

 no passive-interface Vlan648

 no passive-interface Vlan649

 no passive-interface Vlan650

 no passive-interface Port-channel1

 no auto-summary

 eigrp router-id 10.126.100.1

 network 10.125.0.0 0.0.255.255

 network 10.126.0.0 0.0.255.255

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list standard Deny_PIM_DM_Fallback

 deny   224.0.1.39

 deny   224.0.1.40

 permit any

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

alias exec dsno show ip dhcp snooping bind

line con 0

 exec-timeout 0 0

 password 7 00071A150754

line vty 0 4

 exec-timeout 0 0

 password 7 02050D480809

 login

line vty 5 15

 exec-timeout 0 0

 no login

ntp clock-period 36028666

ntp server 172.26.160.10

end

Cr26-asa5520-DO

cr26-asa5520-do# wr t

: Saved

ASA Version 8.2(1)

hostname cr26-asa5520-do

domain-name cisco.com

enable password 8Ry2YjIyt7RRXU24 encrypted

passwd 2KFQnbNIdI.2KYOU encrypted

names

dns-guard

interface GigabitEthernet0/0

 description Connected to cr24-4507-DO

 no nameif

 no security-level

 no ip address

interface GigabitEthernet0/1

 description backup to cr24-4507-DO

 no nameif

 no security-level

 no ip address

interface GigabitEthernet0/2

 description Connected to Internet - cr26-6500-1

 nameif outside

 security-level 0

 ip address 198.133.219.5 255.255.255.0

 ospf message-digest-key 1 md5 <removed>

 ospf authentication message-digest

interface GigabitEthernet0/3

 description School DMZ

 nameif dmz

 security-level 50

 ip address 10.25.34.1 255.255.255.0

interface Management0/0

 nameif management

 security-level 100

 ip address 172.26.160.225 255.255.252.0

 management-only

interface Redundant1

 description Connected to cr24-4507-DO

 member-interface GigabitEthernet0/0

 member-interface GigabitEthernet0/1

 nameif inside

 security-level 100

 allow-ssc-mgmt

 ip address 10.125.33.10 255.255.255.0

 authentication key eigrp 100 <removed> key-id 1

 authentication mode eigrp 100 md5

boot system disk0:/asa821-k8.bin

ftp mode passive

dns server-group DefaultDNS

 domain-name cisco.com

access-list wsa-farm extended permit ip host 10.125.33.8 any

access-list proxylist extended deny ip host 10.125.33.8 any

access-list proxylist extended permit tcp 10.0.0.0 255.0.0.0 any eq www

access-list proxylist extended permit tcp 10.0.0.0 255.0.0.0 any eq https

access-list Outbound extended permit tcp 10.0.0.0 255.0.0.0 any eq www

access-list Outbound extended permit tcp 10.0.0.0 255.0.0.0 any eq https

access-list Outbound extended permit icmp 10.0.0.0 255.0.0.0 any echo

access-list Outbound extended permit udp 10.0.0.0 255.0.0.0 host 10.25.34.13 eq domain

access-list Outbound extended permit tcp 10.0.0.0 255.0.0.0 host 10.25.34.12 eq smtp

access-list Outbound extended permit tcp 10.0.0.0 255.0.0.0 host 10.25.34.12 eq pop3

access-list Outbound extended permit tcp 10.0.0.0 255.0.0.0 host 10.25.34.12 eq imap4

access-list Inbound-Routes standard permit host 0.0.0.0

access-list DMZ extended permit udp host 10.25.34.13 any eq domain

access-list DMZ extended permit tcp host 10.25.34.13 any eq domain

access-list DMZ extended permit tcp host 10.25.34.12 any eq smtp

access-list DMZ extended permit tcp host 10.25.34.11 any eq www

access-list DMZ extended permit tcp host 10.25.34.11 any eq https

access-list Inbound extended permit udp any host 198.133.219.13 eq domain

access-list Inbound extended permit tcp any host 198.133.219.13 eq domain

access-list Inbound extended permit tcp any host 198.133.219.11 eq smtp

access-list Inbound extended permit tcp any host 198.133.219.10 eq www

access-list Inbound extended permit tcp any host 198.133.219.10 eq https

pager lines 24

logging enable

logging console critical

logging buffered debugging

logging asdm informational

mtu outside 1500

mtu management 1500

mtu inside 1500

mtu dmz 1500

no failover

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-507.bin

no asdm history enable

arp timeout 14400

global (outside) 10 interface

nat (inside) 10 10.0.0.0 255.0.0.0

static (inside,outside) 198.133.219.2 10.125.31.2 netmask 255.255.255.255

static (dmz,outside) 198.133.219.10 10.25.34.10 netmask 255.255.255.255

static (dmz,outside) 198.133.219.11 10.25.34.11 netmask 255.255.255.255

static (dmz,outside) 198.133.219.12 10.25.34.12 netmask 255.255.255.255

static (dmz,outside) 198.133.219.13 10.25.34.13 netmask 255.255.255.255

static (inside,dmz) 10.0.0.0 10.0.0.0 netmask 255.0.0.0

access-group Outbound in interface inside

access-group DMZ in interface dmz

access-group Inbound in interface outside

route-map Inbound-EIGRP permit 10

 match ip address Inbound-Routes

router eigrp 100

 no auto-summary

 eigrp stub redistributed

 network 10.125.33.0 255.255.255.0

 passive-interface default

 no passive-interface inside

 redistribute ospf 200 metric 1000000 2000 255 1 1500 route-map Inbound-EIGRP

router ospf 200

 network 198.133.219.0 255.255.255.0 area 100

 area 100 authentication message-digest

 log-adj-changes

route management 172.26.0.0 255.255.0.0 172.26.160.1 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

timeout tcp-proxy-reassembly 0:01:00

dynamic-access-policy-record DfltAccessPolicy

aaa-server tacacs-servers protocol tacacs+

aaa-server tacacs-servers (management) host <tacacs+ server>

 key <secret key>

aaa authentication ssh console tacacs-servers LOCAL

aaa authentication serial console tacacs-servers LOCAL

aaa authentication enable console tacacs-servers LOCAL

aaa authentication http console tacacs-servers LOCAL

aaa authorization command tacacs-servers LOCAL

aaa accounting ssh console tacacs-servers

aaa accounting serial console tacacs-servers

aaa accounting command tacacs-servers

aaa accounting enable console tacacs-servers

aaa authorization exec authentication-server

http server enable

http 172.26.0.0 255.255.0.0 management

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

telnet timeout 5

ssh 172.26.0.0 255.255.0.0 management

ssh timeout 5

ssh version 1

console timeout 0

threat-detection basic-threat

threat-detection statistics access-list

no threat-detection statistics tcp-intercept

wccp 10 redirect-list proxylist group-list wsa-farm password cisco

wccp interface inside 10 redirect in

ntp authentication-key 10 md5 *

ntp authenticate

ntp trusted-key 10

ntp server <NTP Server> source management

webvpn

username admin password e1z89R3cZe9Kt6Ib encrypted privilege 15

class-map inspection_default

 match default-inspection-traffic

policy-map type inspect dns migrated_dns_map_1

 parameters

  message-length maximum 512

policy-map global_policy

 class inspection_default

  inspect dns migrated_dns_map_1

  inspect ftp

  inspect h323 h225

  inspect h323 ras

  inspect rsh

  inspect rtsp

  inspect esmtp

  inspect sqlnet

  inspect skinny

  inspect sunrpc

  inspect xdmcp

  inspect sip

  inspect netbios

  inspect tftp

  inspect icmp

service-policy global_policy global

prompt hostname context

Cryptochecksum:196fd610af2a2ae145f302e32cc50ab1

: end

[OK]

cr26-asa5520-do#

PSTN Edge

DO-ISR#term len 0

DO-ISR#sh run

Building configuration...

Current configuration : 7860 bytes

! Last configuration change at 21:32:46 UTC Mon Aug 31 2009 by cisco

! NVRAM config last updated at 21:15:27 UTC Mon Aug 31 2009 by cisco

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname DO-ISR

boot-start-marker

boot-end-marker

logging buffered 51200 warnings

no aaa new-model

network-clock-participate wic 0

network-clock-participate wic 1

ip cef

ip domain name ese.local

ip name-server 10.33.32.5

multilink bundle-name authenticated

isdn switch-type primary-4ess

voice-card 0

 no dspfarm

voice translation-rule 1

 rule 1 /^1/ /4445671/

voice translation-rule 2

 rule 2 /^2/ /2223452/

voice translation-profile to-s1

 translate called 1

voice translation-profile to-s2

 translate called 2

crypto pki trustpoint TP-self-signed-1102421159

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-1102421159

 revocation-check none

 rsakeypair TP-self-signed-1102421159

crypto pki certificate chain TP-self-signed-1102421159

 certificate self-signed 01

  30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 31313032 34323131 3539301E 170D3039 30343033 32333133

  33315A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 31303234

  32313135 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100B92E A977CB6E 985B7AD1 DAC05B57 8E8C35D7 9E6F16AB 84DE64A5 05B3B815

  4067A8A8 72B52E2E 16C0CFEC EE0E564B 1068DC76 F67EA152 7421ADC9 17300C81

  C34282C6 CC622DA1 F4551B71 8E1E0F62 86CB3995 4D265865 74776DE4 C9912ABB

  C2F527B4 17949311 7C8CA645 19EF813D 3B142D33 3305A1FA B7478C1A 6F29F416

  F1D10203 010001A3 70306E30 0F060355 1D130101 FF040530 030101FF 301B0603

  551D1104 14301282 10444F2D 4953522E 6573652E 6C6F6361 6C301F06 03551D23

  04183016 80140003 33E976A8 DCA4D4EA 6112E18F B0EB88A5 7373301D 0603551D

  0E041604 14000333 E976A8DC A4D4EA61 12E18FB0 EB88A573 73300D06 092A8648

  86F70D01 01040500 03818100 8E4406BA 63A6B9A1 19A48B05 DED9791B 797018CF

  A6F177A1 46263C4D 2E6ACA82 2D26071F CA6BC27B 778D19F4 57604A4A C569BEE2

  0AE94456 2EE01342 413C3832 B41F39F3 3F4BC20C 1C07F535 659EB32A 857DE248

  07DC2667 1ADB1090 81CAA2CD 1E423927 838C1106 6131D3DC 4F31DD88 60B6565F

  631965CB 3E3563E6 A9056FC0

  quit

username cisco privilege 15 secret 5 $1$jjeA$UcUyfEOgP0shCRkl.LGWI.

controller T1 0/0/0

 framing esf

 linecode b8zs

 pri-group timeslots 1-24 service mgcp

controller T1 0/0/1

 framing esf

 linecode b8zs

controller T1 0/1/0

 framing esf

 linecode b8zs

controller T1 0/1/1

 framing esf

 linecode b8zs

interface Port-channel3

 description port-channel to core stack

 ip address 10.40.94.17 255.255.255.0

 hold-queue 150 in

interface GigabitEthernet0/0

 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface GigabitEthernet0/1

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface FastEthernet0/2/0

interface FastEthernet0/2/1

interface FastEthernet0/2/2

interface FastEthernet0/2/3

interface Serial0/0/0:23

 description to simulated PSTN

 no ip address

 encapsulation hdlc

 isdn switch-type primary-ni

 isdn incoming-voice voice

 isdn bind-l3 ccm-manager

 no cdp enable

interface Integrated-Service-Engine1/0

 no ip address

 shutdown

 no keepalive

interface Integrated-Service-Engine2/0

 no ip address

 shutdown

 no keepalive

interface Vlan1

 no ip address

ip route 0.0.0.0 0.0.0.0 Port-channel3

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

access-list 23 permit 10.10.10.0 0.0.0.7

control-plane

voice-port 0/0/0:23

ccm-manager fallback-mgcp

ccm-manager mgcp

ccm-manager music-on-hold

ccm-manager config server 10.33.32.22

ccm-manager config

mgcp

mgcp call-agent CUCM7-Pub 2427 service-type mgcp version 0.1

mgcp dtmf-relay voip codec all mode out-of-band

mgcp rtp unreachable timeout 1000 action notify

mgcp modem passthrough voip mode nse

mgcp package-capability rtp-package

no mgcp package-capability res-package

mgcp package-capability sst-package

no mgcp package-capability fxr-package

mgcp package-capability pre-package

no mgcp timer receive-rtcp

mgcp sdp simple

mgcp rtp payload-type g726r16 static

mgcp bind control source-interface Port-channel3

mgcp bind media source-interface Port-channel3

mgcp profile default

dial-peer voice 1 pots

 service mgcpapp

 incoming called-number .

 direct-inward-dial

 port 0/0/0:23

 forward-digits 10

dial-peer voice 81222 pots

 description SRST

 destination-pattern 81222.......

 port 0/0/0:23

 forward-digits 10

dial-peer voice 81333 pots

 description SRST

 destination-pattern 81333.......

 port 0/0/0:23

 forward-digits 10

dial-peer voice 81444 pots

 description SRST

 destination-pattern 81444.......

 port 0/0/0:23

 forward-digits 10

dial-peer voice 81555 pots

 description SRST

 destination-pattern 81555.......

 port 0/0/0:23

 forward-digits 10

dial-peer voice 8456 pots

 description SRST site 1 local dialing (PSTN-router num-exp adds area code)

 destination-pattern 8456....

 port 0/0/0:23

 forward-digits 7

dial-peer voice 1000 pots

 description srst 4 digits to Site 1

 translation-profile outgoing to-s1

 destination-pattern 1...

 port 0/0/0:23

 forward-digits 10

dial-peer voice 2000 pots

 description srst 4 digits to Site 2

 translation-profile outgoing to-s2

 destination-pattern 2...

 port 0/0/0:23

 forward-digits 10

dial-peer voice 8911 pots

 description SRST

 destination-pattern 8911

 port 0/0/0:23

 forward-digits 4

dial-peer voice 911 pots

 description SRST

 destination-pattern 911

 port 0/0/0:23

 forward-digits 3

call-manager-fallback

 max-conferences 12 gain -6

 transfer-system full-consult

 ip source-address 10.40.63.9 port 2000

 max-ephones 10

 max-dn 20

 dialplan-pattern 1 33345630.. extension-length 4

banner login ^C

-----------------------------------------------------------------------

Cisco Router and Security Device Manager (SDM) is installed on this device.

This feature requires the one-time use of the username "cisco"

with the password "cisco". The default username and password have a privilege level of 15.

Please change these publicly known initial credentials using SDM or the IOS CLI.

Here are the Cisco IOS commands.

username <myuser>  privilege 15 secret 0 <mypassword>

no username cisco

Replace <myuser> and <mypassword> with the username and password you want to use.

For more information about SDM please follow the instructions in the QUICK START

GUIDE for your router or go to http://www.cisco.com/go/sdm

-----------------------------------------------------------------------

^C

line con 0

 exec-timeout 0 0

 login local

 stopbits 1

line aux 0

 stopbits 1

line 66

 no activation-character

 no exec

 transport preferred none

 transport input all

 transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh

line 130

 no activation-character

 no exec

 transport preferred none

 transport input all

 transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh

line vty 0 4

 access-class 23 in

 privilege level 15

 login local

 transport input telnet ssh

line vty 5 15

 access-class 23 in

 privilege level 15

 login local

 transport input telnet ssh

scheduler allocate 20000 1000

ntp authentication-key 2 md5 00361A03135407021B 7

ntp authenticate

ntp trusted-key 2

ntp clock-period 17180344

ntp source Port-channel3

ntp max-associations 150

ntp server 10.33.32.16

end

DO-ISR#

School 1

Access

Cr35-2960-SS1

! Last configuration change at 13:16:40 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:18:08 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr35-2960-SS1

boot-start-marker

boot-end-marker

enable password 7 070C285F4D06

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain School-Site-1

vtp mode transparent

ip subnet-zero

ip dhcp snooping vlan 101-110

no ip dhcp snooping information option

ip dhcp snooping

no ip domain-lookup

ip arp inspection vlan 101-110

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR

 enrollment selfsigned

 serial-number

 revocation-check none

 rsakeypair HTTPS_SS_CERT_KEYPAIR

crypto pki certificate chain HTTPS_SS_CERT_KEYPAIR

 certificate self-signed 01 nvram:F9154580host#2E2E.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 101

 name cr2960_Dept1_VLAN

vlan 102

 name cr2960_Dept2_VLAN

vlan 103

 name cr2960_Dept3_VLAN

vlan 104

 name cr2960_Dept4_VLAN

vlan 105

 name cr2960_Dept5_VLAN

vlan 106

 name cr2960_Dept6_VLAN

vlan 107

 name cr2960_Dept7_VLAN

vlan 108

 name cr2960_Dept8_VLAN

vlan 109

 name cr2960_Dept9_VLAN

vlan 110

 name cr2960_Dept10_VLAN

vlan 201

 name Guest_VLAN

vlan 802

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 04550F011A245F5A

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.3 255.255.255.255

 no ip route-cache

interface Port-channel1

 description Connected to cr35-4507-SS1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 101

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 102

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface FastEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 103

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 104

 switchport mode access

 switchport block unicast

 switchport voice vlan 105

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface FastEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 106

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 107

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 108

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/8

interface FastEthernet0/9

interface FastEthernet0/10

 description Connected to IXIA - ALM - 2/7

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/11

 description Connected to IXIA - STX - 4/3

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/12

interface FastEthernet0/13

interface FastEthernet0/14

interface FastEthernet0/15

interface FastEthernet0/16

interface FastEthernet0/17

interface FastEthernet0/18

interface FastEthernet0/19

interface FastEthernet0/20

interface FastEthernet0/21

interface FastEthernet0/22

interface FastEthernet0/23

interface FastEthernet0/24

interface FastEthernet0/25

interface FastEthernet0/26

interface FastEthernet0/27

interface FastEthernet0/28

interface FastEthernet0/29

interface FastEthernet0/30

interface FastEthernet0/31

interface FastEthernet0/32

interface FastEthernet0/33

interface FastEthernet0/34

interface FastEthernet0/35

interface FastEthernet0/36

interface FastEthernet0/37

interface FastEthernet0/38

interface FastEthernet0/39

interface FastEthernet0/40

interface FastEthernet0/41

interface FastEthernet0/42

interface FastEthernet0/43

interface FastEthernet0/44

interface FastEthernet0/45

interface FastEthernet0/46

interface FastEthernet0/47

interface FastEthernet0/48

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet0/1

 description Connected to cr35-4507-SS1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/2

 description Connected to cr35-4507-SS1

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,201

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/3

interface GigabitEthernet0/4

interface Vlan1

 no ip address

 no ip route-cache

 shutdown

interface Vlan2

 description Connected to FlashNet - DO NOT ROUTE

 ip address 172.26.160.192 255.255.254.0

 no ip redirects

 no ip proxy-arp

 no ip route-cache

 load-interval 30

ip default-gateway 172.26.160.1

no ip http server

no ip http secure-server

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 0822455D0A1649464058

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36029012

ntp server 172.26.160.10

end

Cr35-3560-SS1

! Last configuration change at 13:07:51 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:07:54 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr35-3560-SS1

boot-start-marker

boot-end-marker

enable password 7 094F471A1A0A

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain School-Site-1

vtp mode transparent

udld enable

ip subnet-zero

no ip domain-lookup

ip dhcp snooping vlan 111-120

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 111-120

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 13061E010803

crypto pki trustpoint TP-self-signed-4313216

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-4313216

 revocation-check none

 rsakeypair TP-self-signed-4313216

crypto pki certificate chain TP-self-signed-4313216

 certificate self-signed 01 nvram:IOS-Self-Sig#3636.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

no spanning-tree optimize bpdu transmission

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 111

 name cr35_3560_Dept1

vlan 112

 name cr35_3560_Dept2

vlan 113

 name cr35_3560_Dept3

vlan 114

 name cr35_3560_Dept4

vlan 115

 name cr35_3560_Dept5

vlan 116

 name cr35_3560_Dept6

vlan 117

 name cr35_3560_Dept7

vlan 118

 name cr35_3560_Dept8

vlan 119

 name cr35_3560_Dept9

vlan 120

 name cr35_3560_Dept_10

vlan 202

 name Guest_VLAN

vlan 803

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 1419160C1901393F

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.125.100.4 255.255.255.255

interface Port-channel1

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 111

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 112

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface FastEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 113

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 113

 switchport mode access

 switchport block unicast

 switchport voice vlan 114

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface FastEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 115

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 116

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 117

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/8

 no mdix auto

interface FastEthernet0/9

 no mdix auto

interface FastEthernet0/10

 description Connected to IXIA - ALM - 2/8

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 202

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/11

 description Connected to IXIA - STX - 4/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 202

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/12

 no mdix auto

interface FastEthernet0/13

 no mdix auto

interface FastEthernet0/14

 no mdix auto

interface FastEthernet0/15

 no mdix auto

interface FastEthernet0/16

 no mdix auto

interface FastEthernet0/17

 no mdix auto

interface FastEthernet0/18

 no mdix auto

interface FastEthernet0/19

 no mdix auto

interface FastEthernet0/20

 no mdix auto

interface FastEthernet0/21

 no mdix auto

interface FastEthernet0/22

 no mdix auto

interface FastEthernet0/23

 no mdix auto

interface FastEthernet0/24

 no mdix auto

interface FastEthernet0/25

 no mdix auto

interface FastEthernet0/26

 no mdix auto

interface FastEthernet0/27

 no mdix auto

interface FastEthernet0/28

 no mdix auto

interface FastEthernet0/29

 no mdix auto

interface FastEthernet0/30

 no mdix auto

interface FastEthernet0/31

 no mdix auto

interface FastEthernet0/32

 no mdix auto

interface FastEthernet0/33

 no mdix auto

interface FastEthernet0/34

 no mdix auto

interface FastEthernet0/35

 no mdix auto

interface FastEthernet0/36

 no mdix auto

interface FastEthernet0/37

 no mdix auto

interface FastEthernet0/38

 no mdix auto

interface FastEthernet0/39

 no mdix auto

interface FastEthernet0/40

 no mdix auto

interface FastEthernet0/41

 no mdix auto

interface FastEthernet0/42

 no mdix auto

interface FastEthernet0/43

 no mdix auto

interface FastEthernet0/44

 no mdix auto

interface FastEthernet0/45

 no mdix auto

interface FastEthernet0/46

 no mdix auto

interface FastEthernet0/47

 no mdix auto

interface FastEthernet0/48

 description Connected to FlashNet

 no switchport

 ip address 172.26.160.193 255.255.254.0

 no ip redirects

 no ip proxy-arp

 no ip route-cache

 no mdix auto

interface GigabitEthernet0/1

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/2

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/3

interface GigabitEthernet0/4

interface Vlan1

 no ip address

 no ip route-cache

 shutdown

ip classless

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 0822455D0A1649464058

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36029222

ntp server 172.26.160.10

end

Cr35-3750-SS1

! Last configuration change at 13:07:51 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:07:53 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr35-3750-SS1

boot-start-marker

boot-end-marker

logging buffered 16000

no logging console

enable secret 5 $1$vE3p$UNuh7kbqn0zV3HU1uc/cG0

enable password 7 13061E010803

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750g-12s

system mtu routing 1500

vtp domain School-Site-1

vtp mode transparent

ip subnet-zero

no ip domain-lookup

ip dhcp snooping vlan 121-130,203

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 121-130,203

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint TP-self-signed-721634816

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-721634816

 revocation-check none

 rsakeypair TP-self-signed-721634816

crypto pki certificate chain TP-self-signed-721634816

 certificate self-signed 01 nvram:IOS-Self-Sig#3636.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 121

 name cr36_3750_Dept1

vlan 122

 name cr36_3750_Dept2

vlan 123

 name cr36_3750_Dept3

vlan 124

 name cr36_3750_Dept4

vlan 125

 name cr36_3750_Dept5

vlan 126

 name cr36_3750_Dept6

vlan 127

 name cr36_3750_Dept7

vlan 128

 name cr36_3750_Dept8

vlan 129

 name cr36_3750_Dept9

vlan 130

 name cr36_3750_Dept10

vlan 203

 name Guest_VLAN

vlan 804

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 151C0F0B112F3830

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.5 255.255.255.255

interface Port-channel1

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 121

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 122

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface GigabitEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 123

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface GigabitEthernet1/0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 124

 switchport mode access

 switchport block unicast

 switchport voice vlan 125

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet1/0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 126

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 127

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 128

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet1/0/8

 description Connected to FlashNet

 no switchport

 ip address 172.26.160.194 255.255.254.0

 no ip redirects

 no ip proxy-arp

interface GigabitEthernet1/0/9

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/10

 description Connected to IXIA - ALM - 5/1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 204

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/11

 description Connected to IXIA - STX - 6/1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 204

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no mdix auto

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/12

 description Connected to cr35-4507-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol pagp

 channel-group 1 mode desirable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface Vlan1

 ip address dhcp

 shutdown

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 1511021F072567757A60

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36029518

ntp server 172.26.160.10

end

Cr35-3750r-SS1

! Last configuration change at 13:07:51 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:07:55 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr35-3750r-SS1

boot-start-marker

boot-end-marker

enable password 7 0822455D0A16

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750-48p

switch 2 provision ws-c3750g-48ps

stack-mac persistent timer 0

system mtu routing 1500

vtp domain School-Site-1

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip dhcp snooping vlan 11-20

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 11-20

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 104D000A0618

crypto pki trustpoint TP-self-signed-1654402816

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-1654402816

 revocation-check none

 rsakeypair TP-self-signed-1654402816

crypto pki certificate chain TP-self-signed-1654402816

 certificate self-signed 01 nvram:IOS-Self-Sig#3636.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 11,13-20

vlan 204

 name Guest_VLAN

ip ftp username nimishguest

ip ftp password 7 000A1701115E1812

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.6 255.255.255.255

interface Port-channel1

 description Connected to cr35-4507-SS1

 no switchport

 dampening

 ip address 10.127.7.194 255.255.255.192

 ip pim sparse-mode

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 11

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 12

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Trusted-PC-Policy

 ip verify source

interface FastEthernet1/0/3

 description CONNECTED TO PHONE

 switchport access vlan 14

 switchport mode access

 switchport block unicast

 switchport voice vlan 13

 switchport port-security maximum 3

 switchport port-security maximum 1 vlan

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet1/0/4

interface FastEthernet1/0/5

interface FastEthernet1/0/6

interface FastEthernet1/0/7

interface FastEthernet1/0/8

interface FastEthernet1/0/9

interface FastEthernet1/0/10

interface FastEthernet1/0/11

interface FastEthernet1/0/12

interface FastEthernet1/0/13

interface FastEthernet1/0/14

interface FastEthernet1/0/15

interface FastEthernet1/0/16

interface FastEthernet1/0/17

interface FastEthernet1/0/18

interface FastEthernet1/0/19

interface FastEthernet1/0/20

interface FastEthernet1/0/21

interface FastEthernet1/0/22

interface FastEthernet1/0/23

interface FastEthernet1/0/24

interface FastEthernet1/0/25

interface FastEthernet1/0/26

interface FastEthernet1/0/27

interface FastEthernet1/0/28

interface FastEthernet1/0/29

interface FastEthernet1/0/30

interface FastEthernet1/0/31

interface FastEthernet1/0/32

interface FastEthernet1/0/33

interface FastEthernet1/0/34

interface FastEthernet1/0/35

interface FastEthernet1/0/36

interface FastEthernet1/0/37

interface FastEthernet1/0/38

interface FastEthernet1/0/39

interface FastEthernet1/0/40

interface FastEthernet1/0/41

interface FastEthernet1/0/42

interface FastEthernet1/0/43

interface FastEthernet1/0/44

interface FastEthernet1/0/45

interface FastEthernet1/0/46

interface FastEthernet1/0/47

interface FastEthernet1/0/48

 description FlashNet - DO NOT ROUTE

 switchport access vlan 2

 load-interval 30

interface GigabitEthernet1/0/1

 description Connected to cr35-4507-SS1

 no switchport

 no ip address

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

interface GigabitEthernet1/0/2

interface GigabitEthernet1/0/3

interface GigabitEthernet1/0/4

interface GigabitEthernet2/0/1

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 16

 switchport mode access

 switchport block unicast

 switchport voice vlan 15

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet2/0/2

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 17

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet2/0/3

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 18

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet2/0/4

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

 description Connected to IXIA - ALM - 5/2

 switchport trunk encapsulation dot1q

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet2/0/11

 description Connected to IXIA - STX - 6/2

 switchport trunk encapsulation dot1q

 switchport trunk allowed vlan 11-20

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree bpduguard enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet2/0/12

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

interface GigabitEthernet2/0/22

interface GigabitEthernet2/0/23

interface GigabitEthernet2/0/24

interface GigabitEthernet2/0/25

interface GigabitEthernet2/0/26

interface GigabitEthernet2/0/27

interface GigabitEthernet2/0/28

interface GigabitEthernet2/0/29

interface GigabitEthernet2/0/30

interface GigabitEthernet2/0/31

interface GigabitEthernet2/0/32

interface GigabitEthernet2/0/33

interface GigabitEthernet2/0/34

interface GigabitEthernet2/0/35

interface GigabitEthernet2/0/36

interface GigabitEthernet2/0/37

interface GigabitEthernet2/0/38

interface GigabitEthernet2/0/39

interface GigabitEthernet2/0/40

interface GigabitEthernet2/0/41

interface GigabitEthernet2/0/42

interface GigabitEthernet2/0/43

interface GigabitEthernet2/0/44

interface GigabitEthernet2/0/45

interface GigabitEthernet2/0/46

interface GigabitEthernet2/0/47

interface GigabitEthernet2/0/48

interface GigabitEthernet2/0/49

 description Connected to cr35-4507-SS1

 no switchport

 no ip address

 logging event bundle-status

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

interface GigabitEthernet2/0/50

interface GigabitEthernet2/0/51

interface GigabitEthernet2/0/52

interface Vlan1

 ip address dhcp

 shutdown

interface Vlan2

 description FlashNet - DO NOT ROUTE

 ip address 172.26.160.222 255.255.252.0

 no ip redirects

 no ip proxy-arp

interface Vlan11

 ip address 10.127.7.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Port-channel1

 no auto-summary

 eigrp router-id 10.126.100.6

 eigrp stub connected

 network 10.126.0.0 0.1.255.255

nsf

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 121A0C04110440557878

radius-server deadtime 1

control-plane

alias exec dsno show ip dhcp snooping bind

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028695

ntp server 172.26.160.10

end

Core/Distribution/WAN Edge

Cr35-4507-SS1

! Last configuration change at 13:15:17 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:15:32 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

service compress-config

hostname cr35-4507-SS1

boot-start-marker

boot system flash bootflash:cat4500-entservicesk9-mz.122-50.SG

boot-end-marker

enable password 7 110A1016141D

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

qos

qos dbl exceed-action ecn

qos dbl dscp-based 0-31,33-39,41-45,47-63

qos map dscp 0 to tx-queue 2

qos map dscp 16 18 20 22 24 26 28 30 to tx-queue 4

qos map dscp 34 36 38 to tx-queue 4

udld enable

ip subnet-zero

no ip domain-lookup

ip vrf mgmtVrf

ip multicast-routing

vtp domain School-Site-1

vtp mode transparent

cluster run

key chain eigrp-key

 key 1

   key-string 7 045802150C2E

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

power redundancy-mode combined

macro global description system-cpp | system-cpp

spanning-tree mode rapid-pvst

spanning-tree extend system-id

spanning-tree vlan 1-4094 priority 24576

redundancy

 mode sso

 main-cpu

  auto-sync standard

process-max-time 20

vlan internal allocation policy ascending

vlan 101

 name cr35_2960_Dept1

vlan 102

 name cr35_2960_Dept2

vlan 103

 name cr35_2960_Dept3

vlan 104

 name cr35_2960_Dept4

vlan 105

 name cr35_2960_Dept5

vlan 106

 name cr35_2960_Dept6

vlan 107

 name cr35_2960_Dept7

vlan 108

 name cr35_2960_Dept8

vlan 109

 name cr35_2960_Dept9

vlan 110

 name cr35_2960_Dept10

vlan 111

 name cr35_3560_Dept11

vlan 112

 name cr35_3560_Dept12

vlan 113

 name cr35_3560_Dept13

vlan 114

 name cr35_3560_Dept14

vlan 115

 name cr35_3560_Dept15

vlan 116

 name cr35_3560_Dept16

vlan 117

 name cr35_3560_Dept17

vlan 118

 name cr35_3560_Dept18

vlan 119

 name cr35_3560_Dept19

vlan 120

 name cr35_3560_Dept20

vlan 121

 name cr35_3750_Dept21

vlan 122

 name cr35_3750_Dept22

vlan 123

 name cr35_3750_Dept23

vlan 124

 name cr35_3750_Dept24

vlan 125

 name cr35_3750_Dept25

vlan 126

 name cr35_3750_Dept26

vlan 127

 name cr35_3750_Dept27

vlan 128

 name cr35_3750_Dept28

vlan 129

 name cr35_3750_Dept29

vlan 130

 name cr35_3750_Dept30

vlan 501

 name cr24_3750ME_DO

vlan 801

 name MetroE_Hopping_VLAN

vlan 802

 name cr36_2960-Hopping-VL

vlan 803

 name cr36_3560-Hopping-VL

vlan 804

 name cr36_3750-Hopping-VL

ip ftp username nimishguest

ip ftp password 7 000A1701115E1812

class-map match-all COPP-CRITICAL-APPLICATIONS

 match access-group name COPP-CRITICAL-APPLICATIONS

class-map match-all system-cpp-cdp

 match access-group name system-cpp-cdp

class-map match-all system-cpp-pim

 match access-group name system-cpp-pim

class-map match-all COPP-FILE-MANAGEMENT

 match access-group name COPP-FILE-MANAGEMENT

class-map match-all system-cpp-pppoe-disc

 match access-group name system-cpp-pppoe-disc

class-map match-all COPP-MONITORING

 match access-group name COPP-MONITORING

class-map match-all system-cpp-bpdu-range

 match access-group name system-cpp-bpdu-range

class-map match-all system-cpp-dhcp-cs

 match access-group name system-cpp-dhcp-cs

class-map match-all system-cpp-dhcp-sc

 match access-group name system-cpp-dhcp-sc

class-map match-all system-cpp-all-systems-on-subnet

 match access-group name system-cpp-all-systems-on-subnet

class-map match-all system-cpp-all-routers-on-subnet

 match access-group name system-cpp-all-routers-on-subnet

class-map match-all system-cpp-ripv2

 match access-group name system-cpp-ripv2

class-map match-all system-cpp-mcast-cfm

 match access-group name system-cpp-mcast-cfm

class-map match-all system-cpp-dot1x

 match access-group name system-cpp-dot1x

class-map match-all system-cpp-ucast-cfm

 match access-group name system-cpp-ucast-cfm

class-map match-all system-cpp-dhcp-ss

 match access-group name system-cpp-dhcp-ss

class-map match-all COPP-INTERACTIVE-MANAGEMENT

 match access-group name COPP-INTERACTIVE-MANAGEMENT

class-map match-all system-cpp-sstp

 match access-group name system-cpp-sstp

class-map match-all system-cpp-ospf

 match access-group name system-cpp-ospf

class-map match-all NON-REALTIME

 match not ip dscp ef

 match not ip dscp cs5

 match not ip dscp cs4

class-map match-all system-cpp-lldp

 match access-group name system-cpp-lldp

class-map match-all system-cpp-igmp

 match access-group name system-cpp-igmp

class-map match-all COPP-UNDESIRABLE

 match access-group name COPP-UNDESIRABLE

class-map match-all system-cpp-ip-mcast-linklocal

 match access-group name system-cpp-ip-mcast-linklocal

class-map match-all COPP-IGP

 match access-group name COPP-IGP

class-map match-all system-cpp-cgmp

 match access-group name system-cpp-cgmp

policy-map WAN-EGRESS-CHILD

 class NON-REALTIME

    police 13200 kbps 1000 byte conform-action transmit exceed-action drop

policy-map DBL

 class class-default

dbl

policy-map WAN-EGRESS-PARENT

 class class-default

    police 20 mbps 1000 byte conform-action transmit exceed-action drop

dbl

  service-policy WAN-EGRESS-CHILD

policy-map system-cpp-policy

 class system-cpp-dot1x

 class system-cpp-lldp

 class system-cpp-bpdu-range

 class system-cpp-cdp

 class system-cpp-sstp

 class system-cpp-cgmp

 class system-cpp-mcast-cfm

 class system-cpp-ucast-cfm

 class system-cpp-pppoe-disc

 class system-cpp-ospf

 class system-cpp-igmp

 class system-cpp-pim

 class system-cpp-all-systems-on-subnet

 class system-cpp-all-routers-on-subnet

 class system-cpp-ripv2

 class system-cpp-ip-mcast-linklocal

 class system-cpp-dhcp-cs

 class system-cpp-dhcp-sc

 class system-cpp-dhcp-ss

 class COPP-IGP

    police 300000 bps 3000 byte conform-action transmit exceed-action drop

 class COPP-INTERACTIVE-MANAGEMENT

    police 500000 bps 5000 byte conform-action transmit exceed-action drop

 class COPP-FILE-MANAGEMENT

    police 6000000 bps 60000 byte conform-action transmit exceed-action drop

 class COPP-MONITORING

    police 900000 bps 9000 byte conform-action transmit exceed-action drop

 class COPP-CRITICAL-APPLICATIONS

    police 900000 bps 9000 byte conform-action transmit exceed-action drop

 class COPP-UNDESIRABLE

    police 32000 bps 3000 byte conform-action drop exceed-action drop

 class class-default

    police 500000 bps 5000 byte conform-action transmit exceed-action drop

interface Loopback0

 ip address 10.126.100.2 255.255.255.255

interface Port-channel11

 description Connected to cr35-2960-SS1

 switchport

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

interface Port-channel12

 description Connected to cr35-3560-SS1

 switchport

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

interface Port-channel13

 description Connected to cr35-3750-SS1

 switchport

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

interface Port-channel14

 description Connected to cr35-3750r-SS1

 dampening

 ip address 10.127.7.193 255.255.255.192

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.127.0.0 255.255.248.0 5

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

interface FastEthernet1

 ip vrf forwarding mgmtVrf

 no ip address

 speed auto

 duplex auto

interface GigabitEthernet1/1

 description Connected to MetroE-Core-cr25-6500-1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 801

 switchport trunk allowed vlan 501

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 udld port disable

 tx-queue 1

   bandwidth 1 mbps

 tx-queue 2

   bandwidth 7 mbps

 tx-queue 3

   bandwidth 6 mbps

   priority high

 tx-queue 4

   bandwidth 6 mbps

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 spanning-tree guard root

 service-policy output WAN-EGRESS-PARENT

interface GigabitEthernet1/2

 description Connected to cr35_2960_SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 11 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet1/3

 description Connected to cr35_3560_SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 12 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet1/4

 description Connected to cr35-3750-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 13 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet1/5

 description Connected to cr35-3750r-SS1

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol lacp

 channel-group 14 mode active

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet1/6

 switchport trunk encapsulation dot1q

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet2/1

 switchport trunk encapsulation dot1q

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 spanning-tree guard root

interface GigabitEthernet2/2

 description Connected to cr35_2960_SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 11 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet2/3

 description Connected to cr35_3560_SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 12 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet2/4

 description Connected to cr35-3750-SS1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol pagp

 channel-group 13 mode desirable

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet2/5

 description Connected to cr35-3750r-SS1

 no switchport

 dampening

 no ip address

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 channel-protocol lacp

 channel-group 14 mode active

 spanning-tree guard root

 service-policy output DBL

interface GigabitEthernet2/6

 switchport trunk encapsulation dot1q

 switchport mode trunk

 logging event link-status

 load-interval 30

 carrier-delay msec 0

 shutdown

 qos trust dscp

 tx-queue 1

   bandwidth percent 5

 tx-queue 2

   bandwidth percent 35

 tx-queue 3

   bandwidth percent 30

   priority high

 tx-queue 4

   bandwidth percent 30

 spanning-tree guard root

 service-policy output DBL

interface TenGigabitEthernet3/1

interface TenGigabitEthernet3/2

interface GigabitEthernet3/3

interface GigabitEthernet3/4

interface GigabitEthernet3/5

interface GigabitEthernet3/6

interface TenGigabitEthernet4/1

interface TenGigabitEthernet4/2

interface GigabitEthernet4/3

interface GigabitEthernet4/4

interface GigabitEthernet4/5

interface GigabitEthernet4/6

interface GigabitEthernet6/1

 description Connected to FlashNet

 no switchport

 ip address 172.26.160.191 255.255.254.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

interface GigabitEthernet6/2

 switchport trunk encapsulation dot1q

 switchport trunk allowed vlan 101

 switchport mode trunk

interface GigabitEthernet6/3

interface GigabitEthernet6/4

interface GigabitEthernet6/5

interface GigabitEthernet6/6

interface GigabitEthernet6/7

interface GigabitEthernet6/8

interface GigabitEthernet6/9

interface GigabitEthernet6/10

interface GigabitEthernet6/11

interface GigabitEthernet6/12

interface GigabitEthernet6/13

interface GigabitEthernet6/14

interface GigabitEthernet6/15

interface GigabitEthernet6/16

interface GigabitEthernet6/17

interface GigabitEthernet6/18

interface GigabitEthernet6/19

interface GigabitEthernet6/20

interface GigabitEthernet6/21

interface GigabitEthernet6/22

interface GigabitEthernet6/23

interface GigabitEthernet6/24

interface GigabitEthernet6/25

interface GigabitEthernet6/26

interface GigabitEthernet6/27

interface GigabitEthernet6/28

interface GigabitEthernet6/29

interface GigabitEthernet6/30

interface GigabitEthernet6/31

interface GigabitEthernet6/32

interface GigabitEthernet6/33

interface GigabitEthernet6/34

interface GigabitEthernet6/35

interface GigabitEthernet6/36

interface GigabitEthernet6/37

interface GigabitEthernet6/38

interface GigabitEthernet6/39

interface GigabitEthernet6/40

interface GigabitEthernet6/41

interface GigabitEthernet6/42

interface GigabitEthernet6/43

interface GigabitEthernet6/44

interface GigabitEthernet6/45

interface GigabitEthernet6/46

interface GigabitEthernet6/47

interface GigabitEthernet6/48

interface Vlan1

 no ip address

 shutdown

interface Vlan101

 description Connected to cr35_2960_Dept_1_VLAN

 dampening

 ip address 10.127.0.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan102

 description Connected to cr35_2960_Dept_2_VLAN

 dampening

 ip address 10.127.0.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan103

 description Connected to cr35_2960_Dept_3_VLAN

 dampening

 ip address 10.127.0.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan104

 description Connected to cr35_2960_Dept_4_VLAN

 dampening

 ip address 10.127.0.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan105

 description Connected to cr35_2960_Dept_5_VLAN

 dampening

 ip address 10.127.1.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan106

 description Connected to cr35_2960_Dept_6_VLAN

 dampening

 ip address 10.127.1.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan107

 description Connected to cr35_2960_Dept_7_VLAN

 dampening

 ip address 10.127.1.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan108

 description Connected to cr35_2960_Dept_8_VLAN

 dampening

 ip address 10.127.1.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan109

 description Connected to cr35_2960_Dept_9_VLAN

 dampening

 ip address 10.127.2.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan110

 description Connected to cr35_2960_Dept_10_VLAN

 dampening

 ip address 10.127.2.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan111

 description Connected to cr35_3560_Dept_1_VLAN

 dampening

 ip address 10.127.2.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan112

 description Connected to cr35_3560_Dept_2_VLAN

 dampening

 ip address 10.127.2.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan113

 description Connected to cr35_3560_Dept_3_VLAN

 dampening

 ip address 10.127.3.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan114

 description Connected to cr35_3560_Dept_4_VLAN

 dampening

 ip address 10.127.3.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan115

 description Connected to cr35_3560_Dept_5_VLAN

 dampening

 ip address 10.127.3.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan116

 description Connected to cr35_3560_Dept_6_VLAN

 dampening

 ip address 10.127.3.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan117

 description Connected to cr35_3560_Dept_7_VLAN

 dampening

 ip address 10.127.4.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan118

 description Connected to cr35_3560_Dept_8_VLAN

 dampening

 ip address 10.127.4.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan119

 description Connected to cr35_3560_Dept_9_VLAN

 dampening

 ip address 10.127.4.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan120

 description Connected to cr35_3560_Dept_10_VLAN

 dampening

 ip address 10.127.4.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan121

 description Connected to cr35_3750_Dept_1_VLAN

 dampening

 ip address 10.127.5.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan122

 description Connected to cr35_3750_Dept_2_VLAN

 dampening

 ip address 10.127.5.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan123

 description Connected to cr35_3750_Dept_3_VLAN

 dampening

 ip address 10.127.5.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan124

 description Connected to cr35_3750_Dept_4_VLAN

 dampening

 ip address 10.127.5.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan125

 description Connected to cr35_3750_Dept_5_VLAN

 dampening

 ip address 10.127.6.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan126

 description Connected to cr35_3750_Dept_6_VLAN

 dampening

 ip address 10.127.6.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan127

 description Connected to cr35_3750_Dept_7_VLAN

 dampening

 ip address 10.127.6.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan128

 description Connected to cr35_3750_Dept_8_VLAN

 dampening

 ip address 10.127.6.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan129

 description Connected to cr35_3750_Dept_9_VLAN

 dampening

 ip address 10.127.7.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan130

 description Connected to cr35_3750_Dept_10_VLAN

 dampening

 ip address 10.127.7.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan501

 description Connected to cr24-3750ME-DO

 dampening

 ip address 10.126.0.1 255.255.255.254

 no ip redirects

 no ip unreachables

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip pim sparse-mode

 ip summary-address eigrp 100 10.127.0.0 255.255.248.0 5

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Vlan501

 no passive-interface Port-channel14

 distribute-list route-map EIGRP_STUB_ROUTES out Port-channel14

 no auto-summary

 eigrp router-id 10.126.100.2

 network 10.126.0.0 0.1.255.255

nsf

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended COPP-CRITICAL-APPLICATIONS

 remark DHCP

 permit udp host 0.0.0.0 host 255.255.255.255 eq bootps

 permit udp host 10.125.31.2 eq bootps any eq bootps

ip access-list extended COPP-FILE-MANAGEMENT

 remark (initiated) FTP (active and passive)

 permit tcp 172.26.160.0 0.0.3.255 eq ftp host 172.26.160.191 gt 1023 established

 permit tcp 172.26.160.0 0.0.3.255 eq ftp-data host 172.26.160.191 gt 1023

 permit tcp 172.26.160.0 0.0.3.255 gt 1023 host 172.26.160.191 gt 1023 established

 remark (initiated) TFTP

 permit udp 172.26.160.0 0.0.3.255 gt 1023 host 172.26.160.191 gt 1023

ip access-list extended COPP-IGP

 remark IGP (EIGRP)

 permit eigrp any host 224.0.0.10

 permit eigrp any any

ip access-list extended COPP-INTERACTIVE-MANAGEMENT

 remark RADIUS (return traffic)

 permit udp host 10.125.31.4 host 10.126.100.2

 remark SSH

 permit tcp 10.124.0.0 0.3.255.255 host 10.126.100.2 eq 22

 remark SNMP

 permit udp host 172.26.160.100 host 10.126.100.2 eq snmp

 remark NTP

 permit udp host 172.26.160.10 host 172.26.160.191 eq ntp

ip access-list extended COPP-MONITORING

 remark PING-ECHO

 permit icmp any any echo

 remark PING-ECHO-REPLY

 permit icmp any any echo-reply

 remark TRACEROUTE

 permit icmp any any ttl-exceeded

 permit icmp any any port-unreachable

ip access-list extended COPP-UNDESIRABLE

 remark UNDESIRABLE

 permit udp any any eq 1434

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

access-list 1 permit 0.0.0.0

access-list 1 permit 10.127.0.0

access-list 1 permit 10.124.0.0

route-map EIGRP_STUB_ROUTES permit 10

 match ip address 1

snmp-server engineID local 800000090300001D45735179

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.31.4 auth-port 1645 acct-port 1646 key 7 104D000A06185E5A5E57

radius-server deadtime 1

control-plane

 service-policy input system-cpp-policy

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

 stopbits 1

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 17180908

ntp server 172.26.160.10

end

PSTN Edge

School2-B1L#term len 0

School2-B1L#wri

Building configuration...

[OK]

School2-B1L#sh run

Building configuration...

Current configuration : 9069 bytes

! Last configuration change at 16:54:51 UTC Tue Sep 8 2009

! NVRAM config last updated at 16:55:16 UTC Tue Sep 8 2009

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname School2-B1L

boot-start-marker

boot system flash:c3825-advipservicesk9-mz.124-15.T1.bin

boot-end-marker

card type t1 2 0

logging buffered 4096

no aaa new-model

monitor session 1 destination interface Fa1/15

no network-clock-participate slot 2

no network-clock-participate wic 0

no ip dhcp use vrf connected

ip dhcp excluded-address 10.41.51.0 10.41.51.49

ip dhcp excluded-address 10.41.51.100 10.41.51.255

ip dhcp pool SRST

   network 10.41.51.0 255.255.255.0

   option 150 ip 10.33.32.20

   default-router 10.41.51.1

ip cef

ip domain name ese.local

ip name-server 10.33.32.5

multilink bundle-name authenticated

isdn switch-type primary-ni

voice-card 0

 no dspfarm

voice-card 2

 no dspfarm

key chain eigrp-chain

 key 100

   key-string cisco

voice translation-rule 1

 rule 1 /^222345/ /8222/

voice translation-rule 10

 rule 1 /^84441/ /4445671/

 rule 2 /^83331/ /3334561/

voice translation-profile S2-SRST-in

 translate called 1

voice translation-profile S2-SRST-out

 translate called 10

application

  global

  service alternate default

crypto pki trustpoint TP-self-signed-3021612211

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-3021612211

 revocation-check none

 rsakeypair TP-self-signed-3021612211

crypto pki certificate chain TP-self-signed-3021612211

 certificate self-signed 01

  30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 33303231 36313232 3131301E 170D3039 30363131 32323231

  34305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30323136

  31323231 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100952E 74B22996 55A51E37 8DA60200 0590F983 0375EFFE 60E9A360 AEAEEC74

  66F6C188 2ADFFE99 D7A5CAA3 4E55140F 91E6C706 F6107740 8551210F DD0B47CF

  C0801EEA 80CF9456 66CFAC2D 8B2C2EC0 762D92E7 A0E62EA9 F8D406F3 D3907060

  0D4E8053 70E8EE96 AD39C98C 04B365C6 4E57BDF3 A2B43190 B02939E0 DF0C0B10

  A8270203 010001A3 6D306B30 0F060355 1D130101 FF040530 030101FF 30180603

  551D1104 11300F82 0D62316C 2E657365 2E6C6F63 616C301F 0603551D 23041830

  168014B2 D0D56B23 AD137366 E12C01FB A052FB71 9CE48630 1D060355 1D0E0416

  0414B2D0 D56B23AD 137366E1 2C01FBA0 52FB719C E486300D 06092A86 4886F70D

  01010405 00038181 0029B1C4 FBF3A9EA C044C909 5641CE13 BE7BB985 C705847A

  7BCB2E46 2C151D24 DBB1296D 0F13B937 EC22F0D0 57C815CE 5FCA28F3 2ADFA571

  BF450B05 92BD038B 4948882B E455759A BD282100 7681C58B DFA5EB51 48E15611

  1EC4EB13 3853A6BA 5009AB43 372620A1 71D5B283 4BD1BF8A 822CB1E1 E1AA8CD5

  42028C49 CE83A384 A5

        quit

username cisco secret 5 $1$lbdn$P7ro8OilCa9puLAhNkMrF0

username Cisc0123 secret 5 $1$ssbG$.ASxHSEZHbNxPhJch8pcx1

username admin secret 5 $1$UFHA$Ij/BzRhF91OsTvvRxeTNF0

archive

 log config

  hidekeys

controller T1 2/0/0

 framing esf

 linecode b8zs

 pri-group timeslots 1-24 service mgcp

controller T1 2/0/1

 framing esf

 linecode b8zs

 pri-group timeslots 1-24 service mgcp

interface Loopback1

 ip address 10.33.9.23 255.255.255.0

interface Port-channel3

 description port-channel to core stack

 ip address 10.40.79.9 255.255.255.252

 hold-queue 150 in

interface GigabitEthernet0/0

 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface GigabitEthernet0/1

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface Serial0/0/0

 description serial link from B1R to A1R

 ip address 10.33.4.5 255.255.255.254

 load-interval 30

 carrier-delay msec 0

 clock rate 2016000

interface Serial0/0/1

 no ip address

 shutdown

 clock rate 2016000

interface Serial0/0/2

 no ip address

 shutdown

 clock rate 2016000

interface Serial0/0/3

 no ip address

 shutdown

 clock rate 2016000

interface FastEthernet1/0

 switchport trunk native vlan 50

 switchport mode trunk

interface FastEthernet1/1

interface FastEthernet1/2

interface FastEthernet1/3

 switchport access vlan 41

interface FastEthernet1/4

interface FastEthernet1/5

interface FastEthernet1/6

interface FastEthernet1/7

interface FastEthernet1/8

interface FastEthernet1/9

interface FastEthernet1/10

interface FastEthernet1/11

interface FastEthernet1/12

interface FastEthernet1/13

interface FastEthernet1/14

interface FastEthernet1/15

interface Serial2/0/0:23

 no ip address

 encapsulation hdlc

 isdn switch-type primary-ni

 isdn incoming-voice voice

 no cdp enable

interface Serial2/0/1:23

 no ip address

 encapsulation hdlc

 isdn switch-type primary-ni

 isdn incoming-voice voice

 no cdp enable

interface Vlan1

 no ip address

interface Vlan50

 ip address 10.41.50.1 255.255.255.0

interface Vlan51

 ip address 10.41.51.1 255.255.255.0

ip route 0.0.0.0 0.0.0.0 10.33.4.4

ip route 0.0.0.0 0.0.0.0 Port-channel3

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

access-list 23 permit 10.10.10.0 0.0.0.7

control-plane

voice-port 2/0/0:23

voice-port 2/0/1:23

ccm-manager fallback-mgcp

ccm-manager mgcp

ccm-manager music-on-hold

ccm-manager config server 10.33.32.22

ccm-manager config

mgcp

mgcp call-agent CUCM7-Pub 2427 service-type mgcp version 0.1

mgcp dtmf-relay voip codec all mode out-of-band

mgcp rtp unreachable timeout 1000 action notify

mgcp modem passthrough voip mode nse

mgcp package-capability rtp-package

mgcp package-capability sst-package

mgcp package-capability pre-package

no mgcp package-capability res-package

no mgcp package-capability fxr-package

no mgcp timer receive-rtcp

mgcp sdp simple

mgcp rtp payload-type g726r16 static

mgcp bind control source-interface Port-channel3

mgcp bind media source-interface Port-channel3

mgcp profile default

dial-peer voice 1 pots

 description srst incoming

 translation-profile incoming S2-SRST-in

 service mgcpapp

 incoming called-number .

 direct-inward-dial

 port 2/0/1:23

 forward-digits 8

dial-peer voice 91 pots

 description SRST; Any long distance number

 destination-pattern 91..........

 port 2/0/1:23

 forward-digits 10

dial-peer voice 91444 pots

 description SRST; PSTN School2  to School1

 destination-pattern 91444.......

 port 2/0/1:23

 forward-digits 10

dial-peer voice 91333 pots

 description SRST; PSTN School2 to District Office

 destination-pattern 91333.......

 port 2/0/1:23

 forward-digits 10

dial-peer voice 91222 pots

 description SRST; School2 local dialing with area code

 destination-pattern 91222.......

 port 2/0/1:23

 forward-digits 10

dial-peer voice 9345 pots

 description SRST; School2 local dialing (PSTN-router num-exp adds area code)

 destination-pattern 9345....

 port 2/0/1:23

 forward-digits 7

dial-peer voice 911 pots

 description SRST; Emergency call without External access code

 destination-pattern 911

 port 2/0/1:23

 forward-digits 3

dial-peer voice 84441 pots

 description SRST; translate calls to School1 using internal number format

 translation-profile outgoing S2-SRST-out

 destination-pattern 84441...

 port 2/0/1:23

 forward-digits 10

dial-peer voice 83331 pots

 description SRST; translate calls to District office using internal number f

 translation-profile outgoing S2-SRST-out

 destination-pattern 83331...

 port 2/0/1:23

 forward-digits 10

dial-peer voice 9911 pots

 description SRST; Emergency call with External access code

 destination-pattern 9911

 port 2/0/1:23

 forward-digits 3

call-manager-fallback

 max-conferences 12 gain -6

 transfer-system full-consult

 ip source-address 10.40.79.9 port 2000

 max-ephones 10

 max-dn 20

 dialplan-pattern 1 82221... extension-length 8

banner exec ^CC

-----------------------------------------------------------------------

This is Router B1L

-----------------------------------------------------------------------

^C

banner login ^CC

-----------------------------------------------------------------------

This is Router B1L

-----------------------------------------------------------------------

^C

alias exec run sh run | begin

alias exec int sh ip int brief

line con 0

 exec-timeout 0 0

 length 0

 stopbits 1

line aux 0

 stopbits 1

line vty 0 4

 access-class 23 in

 privilege level 15

 login local

 transport input none

line vty 5 15

 access-class 23 in

 privilege level 15

 login local

 transport input telnet ssh

scheduler allocate 20000 1000

ntp authentication-key 2 md5 15200209132527203C 7

ntp authenticate

ntp trusted-key 2

ntp clock-period 17180073

ntp source Port-channel3

ntp max-associations 150

ntp server 10.40.94.17 key 2

webvpn cef

end

School2-B1L#

School 100

Access

Cr36-2960-SS100

! Last configuration change at 13:39:58 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:39:58 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr36-2960-SS100

boot-start-marker

boot-end-marker

enable password 7 121A0C041104

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain School-Site

vtp mode transparent

ip subnet-zero

ip dhcp snooping vlan 101-110,201

no ip dhcp snooping information option

ip dhcp snooping

no ip domain-lookup

ip arp inspection vlan 101-110

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR

 enrollment selfsigned

 serial-number

 revocation-check none

 rsakeypair HTTPS_SS_CERT_KEYPAIR

crypto pki certificate chain HTTPS_SS_CERT_KEYPAIR

 certificate self-signed 01 nvram:F9406600host#2E2E.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 101-110

vlan 201

 name Guest_VLAN

vlan 802

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 04550F011A245F5A

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 1000000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 1000000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.107 255.255.255.255

 no ip route-cache

interface Port-channel1

 description Connected to cr36-3750-Core-SS2

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 101

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 102

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 ip verify source

interface FastEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 103

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 104

 switchport mode access

 switchport block unicast

 switchport voice vlan 105

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface FastEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 106

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 107

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 108

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet0/8

interface FastEthernet0/9

interface FastEthernet0/10

 description Connected to IXIA - ALM - 5/3

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/11

 description Connected to IXIA - STX - 6/3

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0/12

interface FastEthernet0/13

interface FastEthernet0/14

interface FastEthernet0/15

interface FastEthernet0/16

interface FastEthernet0/17

interface FastEthernet0/18

interface FastEthernet0/19

interface FastEthernet0/20

interface FastEthernet0/21

interface FastEthernet0/22

interface FastEthernet0/23

interface FastEthernet0/24

interface FastEthernet0/25

interface FastEthernet0/26

interface FastEthernet0/27

interface FastEthernet0/28

interface FastEthernet0/29

interface FastEthernet0/30

interface FastEthernet0/31

interface FastEthernet0/32

interface FastEthernet0/33

interface FastEthernet0/34

interface FastEthernet0/35

interface FastEthernet0/36

interface FastEthernet0/37

interface FastEthernet0/38

interface FastEthernet0/39

interface FastEthernet0/40

interface FastEthernet0/41

interface FastEthernet0/42

interface FastEthernet0/43

interface FastEthernet0/44

interface FastEthernet0/45

interface FastEthernet0/46

interface FastEthernet0/47

interface FastEthernet0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet0/1

 description Connected to cr36-3750-Core-SS2

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 ip dhcp snooping trust

interface GigabitEthernet0/2

 description Connected to cr36-3750-Core-SS2

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 ip dhcp snooping trust

interface GigabitEthernet0/3

interface GigabitEthernet0/4

interface Vlan1

 no ip address

 no ip route-cache

 shutdown

interface Vlan2

 description Connected to FlashNet

 ip address 172.26.160.196 255.255.254.0

 no ip redirects

 no ip proxy-arp

 no ip route-cache

no ip http server

no ip http secure-server

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.34.4 auth-port 1645 acct-port 1646 key 7 1511021F072567757A60

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028943

ntp server 172.26.160.10

end

Cr36-3560-SS100

! Last configuration change at 13:38:21 EDT Thu Sep 3 2009 by cisco

! NVRAM config last updated at 13:38:44 EDT Thu Sep 3 2009 by cisco

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr36-3560-SS100

boot-start-marker

boot-end-marker

enable password 7 030752180500

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

system mtu routing 1500

vtp domain School-Site

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip dhcp snooping vlan 111-120,202

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 111-120,202

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

crypto pki trustpoint HTTPS_SS_CERT_KEYPAIR

 enrollment selfsigned

 serial-number

 revocation-check none

 rsakeypair HTTPS_SS_CERT_KEYPAIR

crypto pki certificate chain HTTPS_SS_CERT_KEYPAIR

 certificate self-signed 01 nvram:5597A00hostn#2E2E.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 111-120

vlan 202

 name Guest_VLAN

vlan 803

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 082F48491C1C1603

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map Phone+PC-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.108 255.255.255.255

interface Port-channel1

 description Connected to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,202

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet0

 no ip address

 no ip route-cache cef

 no ip route-cache

 no ip mroute-cache

 shutdown

interface GigabitEthernet0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 111

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface GigabitEthernet0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 112

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 ip verify source

interface GigabitEthernet0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 113

 switchport port-security maximum 2

 switchport port-security maximum 1 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface GigabitEthernet0/4

 description CONNECTED TO PHONE+PC

 switchport access vlan 114

 switchport mode access

 switchport block unicast

 switchport voice vlan 115

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input Phone+PC-Policy

 ip verify source

interface GigabitEthernet0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 116

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 117

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 duplex full

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 118

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface GigabitEthernet0/8

interface GigabitEthernet0/9

interface GigabitEthernet0/10

 description Connected to IXIA - ALM - 5/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/11

 description Connected to IXIA - STX - 6/4

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet0/12

interface GigabitEthernet0/13

interface GigabitEthernet0/14

interface GigabitEthernet0/15

interface GigabitEthernet0/16

interface GigabitEthernet0/17

interface GigabitEthernet0/18

interface GigabitEthernet0/19

interface GigabitEthernet0/20

interface GigabitEthernet0/21

interface GigabitEthernet0/22

interface GigabitEthernet0/23

interface GigabitEthernet0/24

interface GigabitEthernet0/25

interface GigabitEthernet0/26

interface GigabitEthernet0/27

interface GigabitEthernet0/28

interface GigabitEthernet0/29

interface GigabitEthernet0/30

interface GigabitEthernet0/31

interface GigabitEthernet0/32

interface GigabitEthernet0/33

interface GigabitEthernet0/34

interface GigabitEthernet0/35

interface GigabitEthernet0/36

interface GigabitEthernet0/37

interface GigabitEthernet0/38

interface GigabitEthernet0/39

interface GigabitEthernet0/40

interface GigabitEthernet0/41

interface GigabitEthernet0/42

interface GigabitEthernet0/43

interface GigabitEthernet0/44

interface GigabitEthernet0/45

interface GigabitEthernet0/46

interface GigabitEthernet0/47

interface GigabitEthernet0/48

 description Connected to FlashNet

 no switchport

 ip address 172.26.160.197 255.255.255.0

 no ip redirects

 no ip proxy-arp

interface GigabitEthernet0/49

 description Connected to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,202

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 ip dhcp snooping trust

interface GigabitEthernet0/50

 description Connected to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,202

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 ip dhcp snooping trust

interface GigabitEthernet0/51

interface GigabitEthernet0/52

interface TenGigabitEthernet0/1

interface TenGigabitEthernet0/2

interface Vlan1

 no ip address

 shutdown

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server host 10.125.34.4 auth-port 1645 acct-port 1646 key 7 060506324F4145485744

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028803

ntp server 172.26.160.10

end

Cr36-3750-SS100

! Last configuration change at 13:40:57 EDT Thu Sep 3 2009

! NVRAM config last updated at 13:41:35 EDT Thu Sep 3 2009

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

no service dhcp

hostname cr36-3750-SS100

boot-start-marker

boot-end-marker

enable password 7 104D000A0618

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750-24ts

system mtu routing 1500

vtp domain School-Site

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip dhcp snooping vlan 121-130

no ip dhcp snooping information option

ip dhcp snooping

ip multicast-routing distributed

ip arp inspection vlan 121-130

ip arp inspection validate src-mac dst-mac ip allow zeros

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 121-130

vlan 203

 name Guest_VLAN

vlan 804

 name Hopping_VLAN

ip ftp username nimishguest

ip ftp password 7 011D02034E0E151B

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map PhonePolicy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.109 255.255.255.255

interface Port-channel1

 description Conneted to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 ip dhcp snooping trust

interface FastEthernet1/0/1

 description CONNECTED TO UNTRUSTED PC

 switchport access vlan 121

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input UnTrusted-PC-Policy

 ip verify source

interface FastEthernet1/0/2

 description CONNECTED TO TRUSTED-PC

 switchport access vlan 122

 switchport mode access

 switchport block unicast

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 ip verify source

interface FastEthernet1/0/3

 description CONNECTED TO PHONE

 switchport mode access

 switchport block unicast

 switchport voice vlan 123

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security violation restrict

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 service-policy input Phone-Policy

 ip verify source

interface FastEthernet1/0/4

 description CONNECTED TO PHONE

 switchport access vlan 124

 switchport mode access

 switchport block unicast

 switchport voice vlan 125

 switchport port-security maximum 3

 switchport port-security maximum 2 vlan access

 switchport port-security maximum 1 vlan voice

 switchport port-security

 switchport port-security aging time 5

 switchport port-security violation restrict

 switchport port-security aging type inactivity

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust device cisco-phone

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

 service-policy input PhonePolicy

 ip verify source

interface FastEthernet1/0/5

 description CONNECTED TO IPVS 2500 - CAMERA

 switchport access vlan 126

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet1/0/6

 description CONNECTED TO IPVS 4500 - CAMERA

 switchport access vlan 127

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet1/0/7

 description CONNECTED TO DIGITAL MEDIA PLAYER

 switchport access vlan 128

 switchport mode access

 switchport block unicast

 switchport port-security

 ip arp inspection limit rate 100

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 storm-control broadcast level pps 1k

 storm-control multicast level pps 2k

 storm-control action trap

 spanning-tree portfast

 spanning-tree bpduguard enable

interface FastEthernet1/0/8

interface FastEthernet1/0/9

interface FastEthernet1/0/10

 description Connected to IXIA - ALM - 5/5

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet1/0/11

 description Connected to IXIA - STX - 7/1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet1/0/12

interface FastEthernet1/0/13

interface FastEthernet1/0/14

interface FastEthernet1/0/15

interface FastEthernet1/0/16

interface FastEthernet1/0/17

interface FastEthernet1/0/18

interface FastEthernet1/0/19

interface FastEthernet1/0/20

interface FastEthernet1/0/21

interface FastEthernet1/0/22

interface FastEthernet1/0/23

interface FastEthernet1/0/24

 no switchport

 ip address 172.26.160.198 255.255.254.0

 no ip redirects

 no ip proxy-arp

interface GigabitEthernet1/0/1

 description Conneted to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface GigabitEthernet1/0/2

 description Conneted to cr36-3750-Core-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130

 switchport mode trunk

 ip arp inspection trust

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface Vlan1

 no ip address

 shutdown

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36029151

ntp server 172.26.160.10

end

Cr36-3750r-SS100

! Last configuration change at 13:44:09 EDT Thu Sep 3 2009

! NVRAM config last updated at 13:45:28 EDT Thu Sep 3 2009

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr36-3750r-SS100

boot-start-marker

boot-end-marker

enable password 7 00071A150754

no aaa new-model

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750-24ts

switch 2 provision ws-c3750-24ts

stack-mac persistent timer 0

system mtu routing 1500

vtp domain School-Site

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip multicast-routing distributed

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 14141B180F0B

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 11

ip ftp username nimishguest

ip ftp password 7 000A1701115E1812

class-map match-all BULK-DATA

 match access-group name BULK-DATA

class-map match-all VVLAN-SIGNALING

 match ip dscp cs3

class-map match-all MULTIMEDIA-CONFERENCING

 match access-group name MULTIMEDIA-CONFERENCING

class-map match-all DEFAULT

 match access-group name DEFAULT

class-map match-all SCAVENGER

 match access-group name SCAVENGER

class-map match-all SIGNALING

 match access-group name SIGNALING

class-map match-all VVLAN-VOIP

 match ip dscp ef

class-map match-all TRANSACTIONAL-DATA

 match access-group name TRANSACTIONAL-DATA

policy-map Phone-Policy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

policy-map UnTrusted-PC-Policy

 class class-default

  police 10000000 8000 exceed-action drop

  set dscp default

policy-map Trusted-PC-Policy

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 32000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

policy-map PhonePolicy

 class VVLAN-VOIP

  police 128000 8000 exceed-action drop

  set dscp ef

 class VVLAN-SIGNALING

  police 32000 8000 exceed-action drop

  set dscp cs3

 class MULTIMEDIA-CONFERENCING

  set dscp af41

  police 5000000 8000 exceed-action drop

 class SIGNALING

  set dscp cs3

  police 1000000 8000 exceed-action drop

 class TRANSACTIONAL-DATA

  set dscp af21

  police 10000000 8000 exceed-action policed-dscp-transmit

 class BULK-DATA

  set dscp af11

  police 10000000 8000 exceed-action policed-dscp-transmit

 class SCAVENGER

  set dscp cs1

  police 10000000 8000 exceed-action drop

 class DEFAULT

  set dscp default

  police 10000000 8000 exceed-action policed-dscp-transmit

interface Loopback0

 ip address 10.126.100.110 255.255.255.255

interface Port-channel1

 description Connected to cr36-3750s-SS100

 no switchport

 dampening

 ip address 10.127.119.194 255.255.255.192

 ip pim sparse-mode

 ip hold-time eigrp 100 20

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet1/0/1

interface FastEthernet1/0/2

interface FastEthernet1/0/3

interface FastEthernet1/0/4

interface FastEthernet1/0/5

interface FastEthernet1/0/6

interface FastEthernet1/0/7

interface FastEthernet1/0/8

interface FastEthernet1/0/9

interface FastEthernet1/0/10

 description Connected to IXIA - ALM - 5/6

 switchport trunk encapsulation dot1q

 switchport trunk allowed vlan 11

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet1/0/11

 description Connected to IXIA - STX - 7/2

 switchport trunk encapsulation dot1q

 switchport trunk allowed vlan 11

 switchport mode trunk

 switchport nonegotiate

 ip arp inspection trust

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

 ip dhcp snooping trust

interface FastEthernet1/0/12

interface FastEthernet1/0/13

interface FastEthernet1/0/14

interface FastEthernet1/0/15

interface FastEthernet1/0/16

interface FastEthernet1/0/17

interface FastEthernet1/0/18

interface FastEthernet1/0/19

interface FastEthernet1/0/20

interface FastEthernet1/0/21

interface FastEthernet1/0/22

interface FastEthernet1/0/23

interface FastEthernet1/0/24

 description FlashNet - DO NOT ROUTE

 switchport access vlan 2

 switchport mode access

 load-interval 30

 spanning-tree portfast

interface GigabitEthernet1/0/1

 description Connected to cr36-3750s-SS100

 no switchport

 dampening

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/2

interface FastEthernet2/0/1

interface FastEthernet2/0/2

interface FastEthernet2/0/3

interface FastEthernet2/0/4

interface FastEthernet2/0/5

interface FastEthernet2/0/6

interface FastEthernet2/0/7

interface FastEthernet2/0/8

interface FastEthernet2/0/9

interface FastEthernet2/0/10

interface FastEthernet2/0/11

interface FastEthernet2/0/12

interface FastEthernet2/0/13

interface FastEthernet2/0/14

interface FastEthernet2/0/15

interface FastEthernet2/0/16

interface FastEthernet2/0/17

interface FastEthernet2/0/18

interface FastEthernet2/0/19

interface FastEthernet2/0/20

interface FastEthernet2/0/21

interface FastEthernet2/0/22

interface FastEthernet2/0/23

interface FastEthernet2/0/24

 description FlashNet - DO NOT ROUTE

 switchport access vlan 2

 switchport mode access

 load-interval 30

 spanning-tree portfast

interface GigabitEthernet2/0/1

 description Connected to cr36-3750s-SS100

 no switchport

 dampening

 no ip address

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 1 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet2/0/2

interface Vlan1

 ip address dhcp

 shutdown

interface Vlan2

 description FlashNet - DO NOT ROUTE

 ip address 172.26.160.221 255.255.254.0

 no ip redirects

 no ip proxy-arp

interface Vlan11

 dampening

 ip address 10.127.119.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

router eigrp 100

 passive-interface default

 no passive-interface Port-channel1

 no auto-summary

 eigrp router-id 10.126.100.110

 eigrp stub connected

 network 10.127.0.0 0.0.255.255

nsf

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

 login

line vty 5 15

 exec-timeout 0 0

 no login

ntp clock-period 36029246

ntp server 172.26.160.10

end

Core/Distribution/WAN Edge

Cr36-3750s-SS100

! Last configuration change at 13:37:04 EDT Thu Sep 3 2009

! NVRAM config last updated at 13:37:12 EDT Thu Sep 3 2009

version 12.2

no service pad

service timestamps debug datetime msec localtime

service timestamps log datetime msec localtime

service password-encryption

hostname cr36-3750s-SS100

boot-start-marker

boot-end-marker

enable password 7 01100F175804

aaa new-model

aaa authentication login default group radius enable line

aaa authentication dot1x default group radius

aaa session-id common

clock timezone EST -5

clock summer-time EDT recurring

switch 1 provision ws-c3750e-48pd

switch 2 provision ws-c3750e-48pd

switch 3 provision ws-c3750e-48pd

stack-mac persistent timer 0

system mtu routing 1500

vtp domain School-Site

vtp mode transparent

ip subnet-zero

ip routing

no ip domain-lookup

ip multicast-routing distributed

mls qos map cos-dscp 0 8 16 24 32 46 48 56

mls qos srr-queue input bandwidth 70 30

mls qos srr-queue input threshold 1 80 90

mls qos srr-queue input priority-queue 2 bandwidth 30

mls qos srr-queue input dscp-map queue 1 threshold 2 24

mls qos srr-queue input dscp-map queue 1 threshold 3 48 56

mls qos srr-queue input dscp-map queue 2 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 1 threshold 3 32 40 46

mls qos srr-queue output dscp-map queue 2 threshold 1 16 18 20 22 26 28 30 34

mls qos srr-queue output dscp-map queue 2 threshold 1 36 38

mls qos srr-queue output dscp-map queue 2 threshold 2 24

mls qos srr-queue output dscp-map queue 2 threshold 3 48 56

mls qos srr-queue output dscp-map queue 3 threshold 3 0

mls qos srr-queue output dscp-map queue 4 threshold 1 8

mls qos srr-queue output dscp-map queue 4 threshold 2 10 12 14

mls qos queue-set output 1 threshold 2 80 90 100 100

mls qos queue-set output 1 threshold 4 60 100 100 100

mls qos

key chain eigrp-key

 key 1

   key-string 7 05080F1C2243

crypto pki trustpoint TP-self-signed-3197398400

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-3197398400

 revocation-check none

 rsakeypair TP-self-signed-3197398400

crypto pki certificate chain TP-self-signed-3197398400

 certificate self-signed 01 nvram:IOS-Self-Sig#3030.cer

dot1x system-auth-control

dot1x guest-vlan supplicant

errdisable recovery cause udld

errdisable recovery cause bpduguard

errdisable recovery cause dhcp-rate-limit

errdisable recovery cause storm-control

errdisable recovery cause arp-inspection

errdisable recovery interval 120

port-channel load-balance src-dst-ip

spanning-tree mode rapid-pvst

spanning-tree etherchannel guard misconfig

spanning-tree extend system-id

vlan internal allocation policy ascending

vlan 2

 name FlashNet_VLAN

vlan 101

 name cr36_2960_Dept1

vlan 102

 name cr36_2960_Dept2

vlan 103

 name cr36_2960_Dept3

vlan 104

 name cr36_2960_Dept4

vlan 105

 name cr36_2960_Dept5

vlan 106

 name cr36_2960_Dept6

vlan 107

 name cr36_2960_Dept7

vlan 108

 name cr36_2960_Dept8

vlan 109

 name cr36_2960_Dept9

vlan 110

 name cr36_2960_Dept10

vlan 111

 name cr36_3560_Dept11

vlan 112

 name cr36_3560_Dept12

vlan 113

 name cr36_3560_Dept13

vlan 114

 name cr36_3560_Dept14

vlan 115

 name cr36_3560_Dept15

vlan 116

 name cr36_3560_Dept16

vlan 117

 name cr36_3560_Dept17

vlan 118

 name cr36_3560_Dept18

vlan 119

 name cr36_3560_Dept19

vlan 120

 name cr36_3560_Dept20

vlan 121

 name cr36_3750_Dept21

vlan 122

 name cr36_3750_Dept22

vlan 123

 name cr36_3750_Dept23

vlan 124

 name cr36_3750_Dept24

vlan 125

 name cr36_3750_Dept25

vlan 126

 name cr36_3750_Dept26

vlan 127

 name cr36_3750_Dept27

vlan 128

 name cr36_3750_Dept28

vlan 129

 name cr36_3750_Dept29

vlan 130

 name cr36_3750_Dept30

vlan 650

 name cr24_3750ME_DO

vlan 801

 name MetroE_Hopping_VLAN

vlan 802

 name cr36_2960_Hopping_VLAN

vlan 803

 name cr36_3560_Hopping_VLAN

vlan 804

 name cr36_3750_Hopping_VLAN

vlan 900

 name Mgmt_VLAN

ip ftp username nimishguest

ip ftp password 7 000A1701115E1812

interface Loopback0

 ip address 10.126.100.106 255.255.255.255

interface Port-channel11

 description Connected to cr36-2960-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface Port-channel12

 description Connected to cr36-3560-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface Port-channel13

 description Connected to cr36-3750-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface Port-channel14

 description Connected to cr36-3750r-SS2

 no switchport

 dampening

 ip address 10.127.119.193 255.255.255.192

 ip pim sparse-mode

 ip hold-time eigrp 100 20

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip summary-address eigrp 100 10.127.112.0 255.255.248.0 5

 load-interval 30

 carrier-delay msec 0

 hold-queue 2000 in

 hold-queue 2000 out

interface FastEthernet0

 no ip address

 no ip route-cache cef

 no ip route-cache

 no ip mroute-cache

 shutdown

interface GigabitEthernet1/0/1

interface GigabitEthernet1/0/2

 description Connected to  MetroE-Core-cr24-6500-1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 801

 switchport trunk allowed vlan 650

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/3

interface GigabitEthernet1/0/4

interface GigabitEthernet1/0/5

interface GigabitEthernet1/0/6

interface GigabitEthernet1/0/7

interface GigabitEthernet1/0/8

interface GigabitEthernet1/0/9

interface GigabitEthernet1/0/10

interface GigabitEthernet1/0/11

interface GigabitEthernet1/0/12

interface GigabitEthernet1/0/13

interface GigabitEthernet1/0/14

interface GigabitEthernet1/0/15

interface GigabitEthernet1/0/16

interface GigabitEthernet1/0/17

interface GigabitEthernet1/0/18

interface GigabitEthernet1/0/19

interface GigabitEthernet1/0/20

interface GigabitEthernet1/0/21

interface GigabitEthernet1/0/22

interface GigabitEthernet1/0/23

interface GigabitEthernet1/0/24

interface GigabitEthernet1/0/25

interface GigabitEthernet1/0/26

interface GigabitEthernet1/0/27

interface GigabitEthernet1/0/28

interface GigabitEthernet1/0/29

interface GigabitEthernet1/0/30

interface GigabitEthernet1/0/31

interface GigabitEthernet1/0/32

interface GigabitEthernet1/0/33

interface GigabitEthernet1/0/34

interface GigabitEthernet1/0/35

interface GigabitEthernet1/0/36

interface GigabitEthernet1/0/37

interface GigabitEthernet1/0/38

interface GigabitEthernet1/0/39

interface GigabitEthernet1/0/40

interface GigabitEthernet1/0/41

interface GigabitEthernet1/0/42

interface GigabitEthernet1/0/43

interface GigabitEthernet1/0/44

interface GigabitEthernet1/0/45

interface GigabitEthernet1/0/46

interface GigabitEthernet1/0/47

interface GigabitEthernet1/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet1/0/49

 description Connected to cr36-2960-SS100

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 11 mode active

 spanning-tree guard root

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/50

 description Connected to cr36-3560-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 12 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/51

 description Connected to cr36-3750-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 13 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet1/0/52

 description Connected to cr36-3750r-SS100

 no switchport

 dampening

 no ip address

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 14 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface TenGigabitEthernet1/0/1

interface TenGigabitEthernet1/0/2

interface GigabitEthernet2/0/1

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 mls qos trust dscp

interface GigabitEthernet2/0/2

 description Connected to  MetroE-Core-cr24-6500-1

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 801

 switchport trunk allowed vlan 650

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 srr-queue bandwidth shape 35 15 25 25

 srr-queue bandwidth limit 10

 priority-queue out

 mls qos trust dscp

 no cdp enable

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet2/0/3

interface GigabitEthernet2/0/4

interface GigabitEthernet2/0/5

interface GigabitEthernet2/0/6

interface GigabitEthernet2/0/7

interface GigabitEthernet2/0/8

interface GigabitEthernet2/0/9

interface GigabitEthernet2/0/10

interface GigabitEthernet2/0/11

interface GigabitEthernet2/0/12

interface GigabitEthernet2/0/13

interface GigabitEthernet2/0/14

interface GigabitEthernet2/0/15

interface GigabitEthernet2/0/16

interface GigabitEthernet2/0/17

interface GigabitEthernet2/0/18

interface GigabitEthernet2/0/19

interface GigabitEthernet2/0/20

interface GigabitEthernet2/0/21

interface GigabitEthernet2/0/22

interface GigabitEthernet2/0/23

interface GigabitEthernet2/0/24

interface GigabitEthernet2/0/25

interface GigabitEthernet2/0/26

interface GigabitEthernet2/0/27

interface GigabitEthernet2/0/28

interface GigabitEthernet2/0/29

interface GigabitEthernet2/0/30

interface GigabitEthernet2/0/31

interface GigabitEthernet2/0/32

interface GigabitEthernet2/0/33

interface GigabitEthernet2/0/34

interface GigabitEthernet2/0/35

interface GigabitEthernet2/0/36

interface GigabitEthernet2/0/37

interface GigabitEthernet2/0/38

interface GigabitEthernet2/0/39

interface GigabitEthernet2/0/40

interface GigabitEthernet2/0/41

interface GigabitEthernet2/0/42

interface GigabitEthernet2/0/43

interface GigabitEthernet2/0/44

interface GigabitEthernet2/0/45

interface GigabitEthernet2/0/46

interface GigabitEthernet2/0/47

interface GigabitEthernet2/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet2/0/49

interface GigabitEthernet2/0/50

interface GigabitEthernet2/0/51

interface GigabitEthernet2/0/52

interface TenGigabitEthernet2/0/1

interface TenGigabitEthernet2/0/2

interface GigabitEthernet3/0/1

interface GigabitEthernet3/0/2

interface GigabitEthernet3/0/3

interface GigabitEthernet3/0/4

interface GigabitEthernet3/0/5

interface GigabitEthernet3/0/6

interface GigabitEthernet3/0/7

interface GigabitEthernet3/0/8

interface GigabitEthernet3/0/9

interface GigabitEthernet3/0/10

interface GigabitEthernet3/0/11

interface GigabitEthernet3/0/12

interface GigabitEthernet3/0/13

interface GigabitEthernet3/0/14

interface GigabitEthernet3/0/15

interface GigabitEthernet3/0/16

interface GigabitEthernet3/0/17

interface GigabitEthernet3/0/18

interface GigabitEthernet3/0/19

interface GigabitEthernet3/0/20

interface GigabitEthernet3/0/21

interface GigabitEthernet3/0/22

interface GigabitEthernet3/0/23

interface GigabitEthernet3/0/24

interface GigabitEthernet3/0/25

interface GigabitEthernet3/0/26

interface GigabitEthernet3/0/27

interface GigabitEthernet3/0/28

interface GigabitEthernet3/0/29

interface GigabitEthernet3/0/30

interface GigabitEthernet3/0/31

interface GigabitEthernet3/0/32

interface GigabitEthernet3/0/33

interface GigabitEthernet3/0/34

interface GigabitEthernet3/0/35

interface GigabitEthernet3/0/36

interface GigabitEthernet3/0/37

interface GigabitEthernet3/0/38

interface GigabitEthernet3/0/39

interface GigabitEthernet3/0/40

interface GigabitEthernet3/0/41

interface GigabitEthernet3/0/42

interface GigabitEthernet3/0/43

interface GigabitEthernet3/0/44

interface GigabitEthernet3/0/45

interface GigabitEthernet3/0/46

interface GigabitEthernet3/0/47

interface GigabitEthernet3/0/48

 description Connected to FlashNet

 switchport access vlan 2

 switchport mode access

 load-interval 30

interface GigabitEthernet3/0/49

 description Connected to cr36-2960-SS100

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 802

 switchport trunk allowed vlan 101-110,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 11 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/50

 description Connected to cr36-3560-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 803

 switchport trunk allowed vlan 111-120,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 12 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/51

 description Connected to cr36-3750-SS2

 switchport trunk encapsulation dot1q

 switchport trunk native vlan 804

 switchport trunk allowed vlan 121-130,900

 switchport mode trunk

 load-interval 30

 carrier-delay msec 0

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 13 mode active

 hold-queue 2000 in

 hold-queue 2000 out

interface GigabitEthernet3/0/52

 description Connected to cr36-3750r-SS100

 no switchport

 dampening

 no ip address

 load-interval 30

 srr-queue bandwidth share 1 30 35 5

 priority-queue out

 udld port

 mls qos trust dscp

 channel-protocol lacp

 channel-group 14 mode active

 spanning-tree portfast trunk

 spanning-tree bpdufilter enable

 hold-queue 2000 in

 hold-queue 2000 out

interface TenGigabitEthernet3/0/1

interface TenGigabitEthernet3/0/2

interface Vlan1

 no ip address

 shutdown

interface Vlan2

 description Connected to FlashNet

 ip address 172.26.160.195 255.255.254.0

 no ip redirects

 no ip proxy-arp

 load-interval 30

interface Vlan101

 description Connected to cr36_2960_Dept_1_VLAN

 dampening

 ip address 10.127.112.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan102

 description Connected to cr36_2960_Dept_2_VLAN

 dampening

 ip address 10.127.112.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan103

 description Connected to cr36_2960_Dept_3_VLAN

 dampening

 ip address 10.127.112.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan104

 description Connected to cr36_2960_Dept_4_VLAN

 dampening

 ip address 10.127.112.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan105

 description Connected to cr36_2960_Dept_5_VLAN

 dampening

 ip address 10.127.113.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan106

 description Connected to cr36_2960_Dept_6_VLAN

 dampening

 ip address 10.127.113.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan107

 description Connected to cr36_2960_Dept_7_VLAN

 dampening

 ip address 10.127.113.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan108

 description Connected to cr36_2960_Dept_8_VLAN

 dampening

 ip address 10.127.113.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan109

 description Connected to cr36_2960_Dept_9_VLAN

 dampening

 ip address 10.127.114.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan110

 description Connected to cr36_2960_Dept_10_VLAN

 dampening

 ip address 10.127.114.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan111

 description Connected to cr36_3560_Dept_1_VLAN

 dampening

 ip address 10.127.114.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan112

 description Connected to cr36_3560_Dept_2_VLAN

 dampening

 ip address 10.127.114.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan113

 description Connected to cr36_3560_Dept_3_VLAN

 dampening

 ip address 10.127.115.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan114

 description Connected to cr36_3560_Dept_4_VLAN

 dampening

 ip address 10.127.115.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan115

 description Connected to cr36_3560_Dept_5_VLAN

 dampening

 ip address 10.127.115.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan116

 description Connected to cr36_3560_Dept_6_VLAN

 dampening

 ip address 10.127.115.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan117

 description Connected to cr36_3560_Dept_7_VLAN

 dampening

 ip address 10.127.116.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan118

 description Connected to cr36_3560_Dept_8_VLAN

 dampening

 ip address 10.127.116.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan119

 description Connected to cr36_3560_Dept_9_VLAN

 dampening

 ip address 10.127.116.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan120

 description Connected to cr36_3560_Dept_10_VLAN

 dampening

 ip address 10.127.116.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan121

 description Connected to cr36_3750_Dept_1_VLAN

 dampening

 ip address 10.127.117.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan122

 description Connected to cr36_3750_Dept_2_VLAN

 dampening

 ip address 10.127.117.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan123

 description Connected to cr36_3750_Dept_3_VLAN

 dampening

 ip address 10.127.117.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan124

 description Connected to cr36_3750_Dept_4_VLAN

 dampening

 ip address 10.127.117.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan125

 description Connected to cr36_3750_Dept_5_VLAN

 dampening

 ip address 10.127.118.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan126

 description Connected to cr36_3750_Dept_6_VLAN

 dampening

 ip address 10.127.118.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan127

 description Connected to cr36_3750_Dept_7_VLAN

 dampening

 ip address 10.127.118.129 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan128

 description Connected to cr36_3750_Dept_8_VLAN

 dampening

 ip address 10.127.118.193 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan129

 description Connected to cr36_3750_Dept_9_VLAN

 dampening

 ip address 10.127.119.1 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan130

 description Connected to cr36_3750_Dept_10_VLAN

 dampening

 ip address 10.127.119.65 255.255.255.192

 ip helper-address 10.125.31.2

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 load-interval 30

interface Vlan650

 dampening

 ip address 10.126.1.99 255.255.255.254

 no ip redirects

 no ip unreachables

 ip pim sparse-mode

 ip hold-time eigrp 100 20

 ip authentication mode eigrp 100 md5

 ip authentication key-chain eigrp 100 eigrp-key

 ip summary-address eigrp 100 10.127.112.0 255.255.248.0 5

 load-interval 30

 hold-queue 2000 in

 hold-queue 2000 out

interface Vlan900

 no ip address

router eigrp 100

 passive-interface default

 no passive-interface Vlan650

 no passive-interface GigabitEthernet1/0/52

 no passive-interface GigabitEthernet3/0/52

 no passive-interface Port-channel14

 distribute-list route-map EIGRP_STUB_ROUTES out GigabitEthernet1/0/52

 distribute-list route-map EIGRP_STUB_ROUTES out GigabitEthernet3/0/52

 distribute-list route-map EIGRP_STUB_ROUTES out Port-channel14

 no auto-summary

 eigrp router-id 10.126.100.106

 network 10.126.0.0 0.1.255.255

 network 11.1.0.0 0.0.255.255

nsf

ip classless

ip route 172.26.158.0 255.255.255.0 172.26.160.1

no ip http server

no ip http secure-server

ip pim rp-address 10.125.100.100 Allowed_MCAST_Groups override

ip pim spt-threshold infinity

ip pim accept-register list PERMIT-SOURCES

ip access-list standard Allowed_MCAST_Groups

 permit 224.0.1.39

 permit 224.0.1.40

 permit 239.192.0.0 0.0.255.255

ip access-list extended BULK-DATA

 remark FTP

 permit tcp any any eq ftp

 permit tcp any any eq ftp-data

 remark SSH/SFTP

 permit tcp any any eq 22

 remark SMTP/SECURE SMTP

 permit tcp any any eq smtp

 permit tcp any any eq 465

 remark IMAP/SECURE IMAP

 permit tcp any any eq 143

 permit tcp any any eq 993

 remark POP3/SECURE POP3

 permit tcp any any eq pop3

 permit tcp any any eq 995

 remark CONNECTED PC BACKUP

 permit tcp any eq 1914 any

ip access-list extended DEFAULT

 remark EXPLICIT CLASS-DEFAULT

 permit ip any any

ip access-list extended MULTIMEDIA-CONFERENCING

 remark RTP

 permit udp any any range 16384 32767

ip access-list extended PERMIT-SOURCES

 permit ip 10.125.31.80 0.0.0.15 239.192.0.0 0.0.255.255

ip access-list extended PXE

 permit tcp any any established

 permit udp any any eq bootps

 permit udp any host 10.125.31.11 eq domain

 permit udp any host 10.125.31.12 eq tftp

ip access-list extended SCAVENGER

 remark KAZAA

 permit tcp any any eq 1214

 permit udp any any eq 1214

 remark MICROSOFT DIRECT X GAMING

 permit tcp any any range 2300 2400

 permit udp any any range 2300 2400

 remark APPLE ITUNES MUSIC SHARING

 permit tcp any any eq 3689

 permit udp any any eq 3689

 remark BITTORRENT

 permit tcp any any range 6881 6999

 remark YAHOO GAMES

 permit tcp any any eq 11999

 remark MSN GAMING ZONE

 permit tcp any any range 28800 29100

ip access-list extended SIGNALING

 remark SCCP

 permit tcp any any range 2000 2002

 remark SIP

 permit tcp any any range 5060 5061

 permit udp any any range 5060 5061

ip access-list extended TRANSACTIONAL-DATA

 remark HTTPS

 permit tcp any any eq 443

 remark ORACLE-SQL*NET

 permit tcp any any eq 1521

 permit udp any any eq 1521

 remark ORACLE

 permit tcp any any eq 1526

 permit udp any any eq 1526

 permit tcp any any eq 1575

 permit udp any any eq 1575

 permit tcp any any eq 1630

access-list 1 permit 0.0.0.0

access-list 1 permit 10.127.112.0

access-list 1 permit 10.124.0.0

route-map EIGRP_STUB_ROUTES permit 10

 match ip address 1

snmp-server community public RO

snmp-server community k12 RW

snmp-server trap-source Loopback0

snmp-server host 172.26.158.251 version 2c k12

radius-server dead-criteria time 15 tries 3

radius-server deadtime 1

control-plane

alias exec ct config t

alias exec srb sh run | begin

alias exec sri sh run int

alias exec cl clear logg

alias exec rib show ip route

alias exec ec sh etherchannel

alias exec cc clea count

alias exec sac sh access-list

alias exec cpu show proc c s | inc CPU

alias exec sin show ip int brief | ex unassi

line con 0

 exec-timeout 0 0

 password 7 121A0C041104

line vty 0 4

 exec-timeout 0 0

 password 7 121A0C041104

line vty 5 15

 exec-timeout 0 0

ntp clock-period 36028897

ntp server 172.26.160.10

end

PSTN Edge

School1-B1R#term len 0

School1-B1R#sh run

Building configuration...

Current configuration : 8585 bytes

! Last configuration change at 16:52:10 UTC Tue Sep 8 2009

! NVRAM config last updated at 16:52:12 UTC Tue Sep 8 2009

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

hostname School1-B1R

boot-start-marker

boot system flash:c3825-advipservicesk9-mz.124-15.T1.bin

boot-end-marker

card type t1 2 1

logging buffered 51200 warnings

no aaa new-model

no network-clock-participate slot 2

no network-clock-participate wic 0

ip cef

no ip domain lookup

ip domain name ese.local

ip name-server 10.33.32.5

multilink bundle-name authenticated

isdn switch-type primary-ni

voice-card 0

 no dspfarm

voice-card 2

 no dspfarm

key chain eigrp-chain

 key 100

   key-string cisco

voice translation-rule 1

 rule 1 /^444567/ /8444/

voice translation-rule 10

 rule 1 /^82221/ /2223451/

 rule 2 /^83331/ /3334561/

voice translation-profile S1-SRST-in

 translate called 1

voice translation-profile S1-SRST-out

 translate called 10

voice translation-profile S1-SRTS-in

 translate called 1

voice translation-profile S1-SRTS-out

 translate called 10

application

  global

  service alternate default

crypto pki trustpoint TP-self-signed-2533920657

 enrollment selfsigned

 subject-name cn=IOS-Self-Signed-Certificate-2533920657

 revocation-check none

 rsakeypair TP-self-signed-2533920657

crypto pki certificate chain TP-self-signed-2533920657

 certificate self-signed 01

  30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030

  31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274

  69666963 6174652D 32353333 39323036 3537301E 170D3039 30333233 30303332

  35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649

  4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35333339

  32303635 3730819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281

  8100C4CF 56547BED 94F2C7CB F804CFE3 4EF4E717 D4F45158 0323CDC6 15D57A1C

  EEF6E208 A638F3CF 68E3ED79 6A5A2599 3535A184 142D2FB8 9F90BFC6 688DA885

  0F01452F CB77727F 49E88D22 EBE8C8FE 79C603B4 400036EC A7E46F95 67556DB7

  418CC9C9 855452C1 7A1F43D5 FC517ECE D2A016A2 D22469A7 B04F29D6 2D1F7D6A

  CD170203 010001A3 6D306B30 0F060355 1D130101 FF040530 030101FF 30180603

  551D1104 11300F82 0D623172 2E657365 2E6C6F63 616C301F 0603551D 23041830

  16801462 21F5D80D A391D7D8 81DEBE96 EAC85A83 1D5FC830 1D060355 1D0E0416

  04146221 F5D80DA3 91D7D881 DEBE96EA C85A831D 5FC8300D 06092A86 4886F70D

  01010405 00038181 00682E54 6D74F19D BC8642C5 D73A980A 977C2BD7 6FEC7C5D

  6B78D63E B60E5EA3 00D8B281 EAD97996 71EC669E C2CD1B53 A8FA35FE 69A431E7

  434C76AB 69C7AD8C 75125C78 D1B59887 BA744878 7CBF83D1 9E947524 DB4F0A2E

  760C4DF3 8D72E317 FDD224C2 55FC2B1F 737A4F6E 72E5D6A2 BBF56AD5 49587E49

  2807367C E83C477F A7

        quit

username cisco secret 5 $1$80Id$RaudGd7tcWPCMbRIK0jlQ0

username Cisc0123 secret 5 $1$p0S6$1mALRMHiKoDpH5w3V5CqO1

username admin secret 5 $1$dOZk$BZ75VO488cehdyLDZiRjI1

archive

 log config

  hidekeys

controller T1 2/0

 framing esf

 linecode b8zs

 pri-group timeslots 1-24 service mgcp

controller T1 2/1

 framing esf

 linecode b8zs

interface Loopback0

 ip address 10.40.63.1 255.255.255.255

interface Loopback1

 ip address 10.33.9.22 255.255.255.0

interface Port-channel1

 no ip address

 hold-queue 0 in

interface Port-channel3

 description port-channel to core stack

 ip address 10.40.63.9 255.255.255.252

 hold-queue 150 in

interface GigabitEthernet0/0

 description $ETH-LAN$$ETH-SW-LAUNCH$$INTF-INFO-GE 0/0$

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface GigabitEthernet0/1

 no ip address

 duplex auto

 speed auto

 media-type rj45

 no keepalive

 channel-group 3

interface Serial0/0/0

 description serial link from B1R to A1R

 ip address 10.33.4.3 255.255.255.254

 load-interval 30

 carrier-delay msec 0

 clock rate 2016000

interface Serial0/0/1

 no ip address

 shutdown

 clock rate 2016000

interface Serial0/0/2

 no ip address

 shutdown

 clock rate 2016000

interface Serial0/0/3

 no ip address

 shutdown

 clock rate 2016000

interface FastEthernet1/0

interface FastEthernet1/1

interface FastEthernet1/2

interface FastEthernet1/3

interface FastEthernet1/4

interface FastEthernet1/5

interface FastEthernet1/6

interface FastEthernet1/7

interface FastEthernet1/8

interface FastEthernet1/9

interface FastEthernet1/10

interface FastEthernet1/11

interface FastEthernet1/12

interface FastEthernet1/13

interface FastEthernet1/14

interface FastEthernet1/15

interface Serial2/0:23

 description to simulated PSTN

 no ip address

 encapsulation hdlc

 isdn switch-type primary-ni

 isdn incoming-voice voice

 isdn bind-l3 ccm-manager

 no cdp enable

interface Vlan1

 no ip address

ip route 0.0.0.0 0.0.0.0 Port-channel3

ip http server

ip http access-class 23

ip http authentication local

ip http secure-server

ip http timeout-policy idle 60 life 86400 requests 10000

access-list 23 permit 10.10.10.0 0.0.0.7

control-plane

voice-port 2/0:23

ccm-manager fallback-mgcp

ccm-manager mgcp

ccm-manager music-on-hold

ccm-manager config server 10.33.32.22

ccm-manager config

mgcp

mgcp call-agent CUCM7-Pub 2427 service-type mgcp version 0.1

mgcp dtmf-relay voip codec all mode out-of-band

mgcp rtp unreachable timeout 1000 action notify

mgcp modem passthrough voip mode nse

mgcp package-capability rtp-package

mgcp package-capability sst-package

mgcp package-capability pre-package

no mgcp package-capability res-package

no mgcp package-capability fxr-package

no mgcp timer receive-rtcp

mgcp sdp simple

mgcp rtp payload-type g726r16 static

mgcp bind control source-interface Port-channel3

mgcp bind media source-interface Port-channel3

mgcp profile default

dial-peer voice 83331 pots

 description SRST; translate calls to District office using internal number f

 translation-profile outgoing S1-SRTS-out

 destination-pattern 83331...

 port 2/0:23

 forward-digits 10

dial-peer voice 1 pots

 description srst incoming

 translation-profile incoming S1-SRTS-in

 service mgcpapp

 incoming called-number .

 direct-inward-dial

 port 2/0:23

 forward-digits 8

dial-peer voice 91 pots

 description SRST; Any long distance number

 destination-pattern 91..........

 port 2/0:23

 forward-digits 10

dial-peer voice 91222 pots

 description SRST; PSTN School1  to School2

 destination-pattern 91222.......

 port 2/0:23

 forward-digits 10

dial-peer voice 91333 pots

 description SRST; PSTN School1 to District Office

 destination-pattern 91333.......

 port 2/0:23

 forward-digits 10

dial-peer voice 91444 pots

 description SRST; School1 local dialing with area code

 destination-pattern 91444.......

 port 2/0:23

 forward-digits 10

dial-peer voice 9567 pots

 description SRST; School1 local dialing (PSTN-router num-exp adds area code)

 destination-pattern 9567....

 port 2/0:23

 forward-digits 7

dial-peer voice 911 pots

 description SRST; Emergency call without External access code

 destination-pattern 911

 port 2/0:23

 forward-digits 3

dial-peer voice 82221 pots

 description SRST; translate calls to School2 using internal number format

 translation-profile outgoing S1-SRTS-out

 destination-pattern 82221...

 port 2/0:23

 forward-digits 10

dial-peer voice 9911 pots

 description SRST; Emergency call with External access code

 destination-pattern 9911

 port 2/0:23

 forward-digits 3

call-manager-fallback

 max-conferences 12 gain -6

 transfer-system f

Sep  8 16:52:37.667: %ISDN-6-LAYER2DOWN: Layer 2 for Interface Se2/0:23, TEI 0 changed to 
downull-consult

 ip source-address 10.40.63.9 port 2000

 max-ephones 10

 max-dn 20

banner exec ^CC

-----------------------------------------------------------------------

This is Router B1R

-----------------------------------------------------------------------

^C

banner login ^CC

-----------------------------------------------------------------------

This is Router B1R

-----------------------------------------------------------------------

^C

alias exec run sh run | begin

alias exec int sh ip int brief

line con 0

 exec-timeout 0 0

 length 0

 stopbits 1

line aux 0

 stopbits 1

line vty 0 4

 access-class 23 in

 privilege level 15

 login local

 transport input telnet ssh

line vty 5 15

 access-class 23 in

 privilege level 15

 login local

 transport input telnet ssh

scheduler allocate 20000 1000

ntp authentication-key 2 md5 04690203182E404A1D 7

ntp authenticate

ntp trusted-key 2

ntp clock-period 17179727

ntp max-associations 150

ntp server 10.40.94.17 key 2

webvpn cef

end

School1-B1R#

Was this Document Helpful?

Feedback

Contact Cisco

Open a Support Case
(Requires a Cisco Service Contract)

Schools SRA Configuration Supplement

Available Languages

Download Options

Bias-Free Language

Table Of Contents

Schools SRA Configuration Supplement

Contents

Network Diagram

Validated Platforms and Software Versions

Network Infrastructure

Emerging Technologies

Configurations

District Office

Access

Core/Distribution

WAN Aggregation

PSTN Edge

School 1

Access

Core/Distribution/WAN Edge

PSTN Edge

School 100

Access

Core/Distribution/WAN Edge

PSTN Edge

Was this Document Helpful?

Contact Cisco