! ! Last configuration change at 08:53:19 MDT Fri Mar 22 2019 ! version 15.2 no service pad service tcp-keepalives-in service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname krar-1125-bunk-swa1 ! boot-start-marker boot-end-marker ! logging buffered 64000 informational no logging console no logging monitor aaa new-model ! ! aaa group server tacacs+ ISE-TACACS server name il-chi-eqx-dpsn1 server name tx-dal-eqx-dpsn1 ! aaa authentication login default group ISE-TACACS enable aaa authentication enable default group ISE-TACACS enable aaa authentication ppp default group tacacs+ none aaa authorization console aaa authorization config-commands aaa authorization exec default group ISE-TACACS none aaa authorization commands 1 default group ISE-TACACS none aaa authorization commands 15 default group ISE-TACACS none aaa accounting exec default start-stop group ISE-TACACS aaa accounting commands 15 default start-stop group ISE-TACACS aaa accounting network default start-stop group ISE-TACACS aaa accounting connection default start-stop group ISE-TACACS ! ! ! ! ! ! aaa session-id common clock timezone MNT -7 0 clock summer-time MDT recurring system mtu routing 1500 ! ! no ip domain-lookup ip domain-name net.dvn vtp mode transparent ! ! ! ! ! ! ! ! ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree logging spanning-tree extend system-id spanning-tree uplinkfast spanning-tree backbonefast spanning-tree vlan 1-4094 priority 61440 ! ! ! ! vlan internal allocation policy ascending ! vlan 3 name admin ! vlan 5 name Wireless ! vlan 6 name Security ! ! ! ! ! ! ! ! ! ! ! interface FastEthernet0/1 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/2 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/3 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/4 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/5 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/6 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/7 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/8 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/9 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/10 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/11 switchport access vlan 5 switchport mode access spanning-tree portfast ! interface FastEthernet0/12 switchport access vlan 6 switchport mode access spanning-tree portfast ! interface GigabitEthernet0/1 description Uplink switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/2 ! interface Vlan1 no ip address shutdown ! interface Vlan3 description ## Admin Vlan ip address 10.75.45.2 255.255.255.128 no ip redirects no ip unreachables no ip proxy-arp ! ip default-gateway 10.75.45.1 ip forward-protocol nd no ip http server no ip http secure-server ! ip tacacs source-interface Vlan3 ! ip access-list extended AccessControl permit ip host 10.52.5.69 any permit ip host 10.64.132.69 any permit ip 172.16.5.0 0.0.0.255 any permit ip 172.20.5.0 0.0.0.255 any permit ip 172.24.225.0 0.0.0.255 any permit ip 172.25.225.0 0.0.0.255 any permit tcp host 63.99.29.18 any eq 22 permit tcp host 63.99.29.40 any eq 22 permit tcp host 206.47.24.18 any eq 22 permit tcp host 206.47.24.169 any eq 22 ! logging trap debugging logging facility local5 logging host 172.25.20.61 access-list 96 permit 172.18.2.37 access-list 96 permit 172.18.18.21 access-list 97 permit 10.66.37.101 access-list 97 permit 10.52.12.12 access-list 97 permit 172.16.32.30 access-list 97 permit 172.16.32.31 access-list 97 permit 172.20.32.30 access-list 97 permit 172.20.32.31 access-list 97 permit 172.16.12.104 access-list 97 permit 172.16.32.116 access-list 97 permit 10.64.146.32 access-list 97 permit 172.16.5.0 0.0.0.255 access-list 97 permit 172.20.5.0 0.0.0.255 access-list 97 permit 172.24.225.0 0.0.0.255 access-list 97 permit 172.25.225.0 0.0.0.255 access-list 98 permit 172.25.17.190 access-list 98 permit 172.22.136.17 access-list 98 permit 172.18.200.80 access-list 98 permit 172.18.136.27 access-list 98 permit 172.18.2.121 access-list 98 permit 172.18.66.57 access-list 98 permit 172.18.2.122 access-list 98 permit 172.25.40.78 snmp-server view HPmib-exclude iso included snmp-server view HPmib-exclude lldpMIB excluded snmp-server view HPmib-exclude at excluded snmp-server view HPmib-exclude snmpUsmMIB excluded snmp-server view HPmib-exclude snmpVacmMIB excluded snmp-server view HPmib-exclude snmpCommunityMIB excluded snmp-server view HPmib-exclude ip.21 excluded snmp-server view HPmib-exclude ip.22 excluded snmp-server location Kirby Lake, AB snmp-server contact ENS,58 tacacs-server timeout 6 tacacs-server directed-request tacacs server il-chi-eqx-dpsn1 address ipv4 172.25.243.22 tacacs server tx-dal-eqx-dpsn1 address ipv4 172.24.243.22 ! ! ! banner exec ^CC ***********************SYSTEM DESCRIPTION************************ * * * NAME: krar-1125-bunk-swa1 * * LOCATION: Kirby Lake Aerodrome Bunkhouse * * CORPORATION: Devon Canada Corporation * * CONTACT: Enterprise Network Services * * DESCRIPTION: Cisco 3560-C * * ASSET#: * ***************************************************************** ^C banner motd ^CCC **************************SECURITY NOTICE**************************** * ACCESS TO THIS SYSTEM IS RESTRICTED TO AUTHORIZED PERSONNEL ONLY. * USAGE OF THIS SYSTEM MAY BE LOGGED AND/OR MONITORED WITHOUT NOTICE. * DISCONNECT IMMEDIATELY IF YOU ARE NOT AN AUTHORIZED USER! ********************************************************************* ^C ! line con 0 exec-timeout 15 0 line vty 0 4 exec-timeout 60 0 timeout login response 90 transport input ssh line vty 5 15 session-timeout 5 exec-timeout 60 0 timeout login response 90 transport input ssh ! ntp server 172.20.2.33 prefer ntp server 172.20.2.34 ! end