no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname jck3-csu1-sw3 ! boot-start-marker boot-end-marker ! logging buffered 64000 informational no logging console no logging monitor enable secret 5 $1$s2Sw$8QPX9Q3K.OUtfBnpom30E/ ! ! ! aaa new-model ! ! aaa authentication login default group tacacs+ enable aaa authentication enable default group tacacs+ enable aaa authorization console aaa authorization config-commands aaa authorization exec default group tacacs+ none aaa authorization commands 1 default group tacacs+ none aaa authorization commands 15 default group tacacs+ none aaa authorization network default group tacacs+ none aaa accounting exec default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ aaa accounting network default start-stop group tacacs+ aaa accounting connection default start-stop group tacacs+ aaa accounting system default start-stop group tacacs+ ! ! ! aaa session-id common clock timezone MNT -7 clock summer-time MDT recurring system mtu routing 1500 ! ! no ip domain-lookup ip domain-name net.dvn vtp mode transparent ! ! ! ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree logging spanning-tree extend system-id spanning-tree uplinkfast spanning-tree backbonefast spanning-tree vlan 1-4094 priority 61440 ! ! ! ! vlan internal allocation policy ascending ! vlan 114 name CSU-VoIP ! vlan 213 name CSU-PCs ! vlan 507 name ENS-Management ! ! ! interface GigabitEthernet0/1 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/2 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/3 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/4 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/5 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/6 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/7 switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/8 description Printer switchport access vlan 213 switchport mode access switchport voice vlan 114 spanning-tree portfast ! interface GigabitEthernet0/9 description jck3-csu1-sw1 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/10 switchport access vlan 213 switchport mode access spanning-tree portfast ! interface Vlan1 no ip address shutdown ! interface Vlan507 description ENS-Management ip address 10.77.64.43 255.255.255.0 ! ip default-gateway 10.77.64.2 ip classless no ip http server no ip http secure-server ip tacacs source-interface Vlan507 ! ip access-list extended AccessControl permit ip 172.16.5.0 0.0.0.255 any permit ip 172.20.5.0 0.0.0.255 any permit ip host 172.20.2.40 any permit ip host 10.64.132.69 any permit tcp host 63.99.29.169 any eq 22 permit tcp host 63.99.29.18 any eq 22 permit tcp host 63.99.29.40 any eq 22 permit tcp host 206.47.24.169 any eq 22 permit tcp host 206.47.24.18 any eq 22 permit tcp host 206.47.24.40 any eq 22 permit tcp host 206.47.24.7 any eq 22 permit tcp host 216.208.7.254 any eq 22 deny ip any any log ! ip sla enable reaction-alerts logging trap debugging logging facility local5 logging 172.20.5.82 access-list 61 permit 172.22.66.20 access-list 61 permit 10.64.91.0 0.0.0.255 access-list 61 permit 172.16.5.0 0.0.0.255 access-list 61 permit 172.20.5.0 0.0.0.255 access-list 61 deny any log access-list 96 permit 172.20.5.50 access-list 96 permit 172.20.4.13 access-list 96 permit 172.16.5.12 access-list 97 permit 172.16.5.0 0.0.0.255 access-list 97 permit 172.20.5.0 0.0.0.255 access-list 97 deny any log ! snmp-server group HPpriv v3 priv read HPmib-exclude access 98 snmp-server group DevonPriv v3 priv notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF7F access 97 snmp-server group SNMPninja v3 priv notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF0F snmp-server group DevonCutDown v3 priv read mib-exclude access 97 snmp-server view mib-exclude iso included snmp-server view mib-exclude lldpMIB excluded snmp-server view HPmib-exclude iso included snmp-server view HPmib-exclude lldpMIB excluded snmp-server view HPmib-exclude at excluded snmp-server view HPmib-exclude snmpUsmMIB excluded snmp-server view HPmib-exclude snmpVacmMIB excluded snmp-server view HPmib-exclude snmpCommunityMIB excluded snmp-server view HPmib-exclude ip.21 excluded snmp-server view HPmib-exclude ip.22 excluded snmp-server trap-source Vlan507 snmp-server location Jackfish3, AB snmp-server contact Infrastructure snmp-server enable traps transceiver all snmp-server enable traps auth-framework sec-violation snmp-server enable traps cluster snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan snmp-server enable traps energywise snmp-server enable traps power-ethernet group 1 snmp-server enable traps power-ethernet police snmp-server enable traps rep snmp-server enable traps rtr snmp-server enable traps vstack snmp-server enable traps bridge newroot topologychange snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency snmp-server enable traps vtp snmp-server enable traps vlancreate snmp-server enable traps vlandelete snmp-server enable traps port-security snmp-server enable traps errdisable snmp-server enable traps mac-notification change move threshold snmp-server enable traps vlan-membership snmp-server host 172.16.5.50 version 3 priv SNMPninja snmp-server host 172.20.5.50 version 3 priv SNMPninja snmp-server host 10.64.132.32 version 2c public snmp ifmib ifindex persist tacacs-server host 172.25.243.22 tacacs-server host 172.24.243.22 tacacs-server timeout 6 tacacs-server directed-request tacacs-server key 7 15115A1F07257F31293D312F16 ! banner exec ^C ***********************SYSTEM DESCRIPTION************************ * * * NAME: jck3-csu1-sw3 * * LOCATION: Jackfish 3 CSU Trailer * * CORPORATION: Devon Canada Corporation * * SITE CONTACT: Enterprise Network Services * * DESCRIPTION: Cisco WS-C3560C-8 Switch * ***************************************************************** ^C banner motd ^C ******IS SYSTEM MAY BE LOGGED AND/OR MONITORED WITHOUT NOTICE. * DISCONNECT IMMEDIATELY IF YOU ARE NOT AN AUTHORIZED USER! ********************************************************************* ^C ! line con 0 exec-timeout 15 0 password 7 044F0A0D0A70185A011C11121306 line vty 0 4 session-timeout 5 exec-timeout 60 0 timeout login response 90 password 7 051F0704241D1A1D110003170A01 transport input ssh line vty 5 15 session-timeout 5 exec-timeout 60 0 timeout login response 90 password 7 03105A00035E7558460C0D00161F transport input ssh ! ntp clock-period 22519107 ntp server 172.20.2.34 ntp server 172.20.2.33 end