! ! Last configuration change at 16:47:42 UTC Thu Feb 7 2019 by abernard ! NVRAM config last updated at 16:47:44 UTC Thu Feb 7 2019 by abernard ! version 12.2 no service pad service tcp-keepalives-in service timestamps debug datetime msec localtime show-timezone service timestamps log datetime msec localtime show-timezone service password-encryption ! hostname jdld-1433-mnt-swa1 ! boot-start-marker boot-end-marker ! logging buffered 32000 informational no logging console no logging monitor enable secret 5 $1$y5kT$cYtzUw4uzK2zlfaZs.lZ50 ! ! ! aaa new-model ! ! aaa authentication login default group tacacs+ enable aaa authentication enable default group tacacs+ enable aaa authorization console aaa authorization config-commands aaa authorization exec default group tacacs+ none aaa authorization commands 1 default group tacacs+ none aaa authorization commands 15 default group tacacs+ none aaa authorization network default group tacacs+ none aaa accounting exec default start-stop group tacacs+ aaa accounting commands 15 default start-stop group tacacs+ aaa accounting network default start-stop group tacacs+ aaa accounting connection default start-stop group tacacs+ aaa accounting system default start-stop group tacacs+ ! ! ! aaa session-id common system mtu routing 1500 no ip source-route ! ! no ip domain-lookup ip domain-name net.dvn vtp mode transparent ! ! crypto pki trustpoint TP-self-signed-2811451520 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2811451520 revocation-check none rsakeypair TP-self-signed-2811451520 ! ! crypto pki certificate chain TP-self-signed-2811451520 certificate self-signed 01 nvram:IOS-Self-Sig#3030.cer ! spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree logging spanning-tree portfast bpduguard default spanning-tree portfast bpdufilter default spanning-tree extend system-id ! ! ! ! vlan internal allocation policy ascending ! vlan 121 name jckdsttOf10VoIP ! vlan 221 name jckdsttOf10PCs ! vlan 420 name Ving ! vlan 507 name Management ! ! ! interface GigabitEthernet0/1 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/2 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/3 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/4 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/5 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/6 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/7 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/8 switchport access vlan 221 switchport mode access switchport voice vlan 121 spanning-tree portfast ! interface GigabitEthernet0/9 description jdld-1433-wngf-swa1 G3/0/47 switchport trunk encapsulation dot1q switchport trunk allowed vlan 121,221,420,507 switchport mode trunk ip dhcp snooping trust ! interface GigabitEthernet0/10 shutdown ! interface Vlan1 no ip address shutdown ! interface Vlan507 description ## Management Interface ip address 10.77.96.53 255.255.255.0 ! ip default-gateway 10.77.96.2 ip classless no ip http server no ip http secure-server ip tacacs source-interface Vlan507 ! ip access-list extended AccessControl permit ip host 10.52.5.69 any permit ip host 10.64.132.69 any permit ip 172.16.5.0 0.0.0.255 any permit ip 172.20.5.0 0.0.0.255 any permit ip 172.24.225.0 0.0.0.255 any permit ip 172.25.225.0 0.0.0.255 any permit tcp host 63.99.29.18 any eq 22 permit tcp host 63.99.29.40 any eq 22 permit tcp host 206.47.24.18 any eq 22 permit tcp host 206.47.24.169 any eq 22 ! ip sla enable reaction-alerts logging trap debugging logging facility local5 logging 172.25.20.61 access-list 96 permit 172.18.2.37 access-list 96 permit 172.18.18.21 access-list 97 permit 10.66.37.101 access-list 97 permit 10.52.12.12 access-list 97 permit 172.16.32.30 access-list 97 permit 172.16.32.31 access-list 97 permit 172.20.32.30 access-list 97 permit 172.20.32.31 access-list 97 permit 172.16.12.104 access-list 97 permit 172.16.32.116 access-list 97 permit 10.64.146.32 access-list 97 permit 172.16.5.0 0.0.0.255 access-list 97 permit 172.20.5.0 0.0.0.255 access-list 97 permit 172.24.225.0 0.0.0.255 access-list 97 permit 172.25.225.0 0.0.0.255 access-list 98 permit 172.25.36.129 access-list 98 permit 172.25.17.190 access-list 98 permit 172.22.136.17 access-list 98 permit 172.18.200.80 access-list 98 permit 172.18.136.27 access-list 98 permit 172.18.2.121 access-list 98 permit 172.18.66.57 access-list 98 permit 172.18.2.122 access-list 98 permit 172.25.40.78 ! snmp-server group HPpriv v3 priv read HPmib-exclude access 98 snmp-server group DevonPriv v3 priv notify *tv.FFFFFFFF.FFFFFFFF.FFFFFFFF.FFFFFFFF7F access 97 snmp-server group SNMPninja v3 priv snmp-server view HPmib-exclude iso included snmp-server view HPmib-exclude lldpMIB excluded snmp-server view HPmib-exclude at excluded snmp-server view HPmib-exclude snmpUsmMIB excluded snmp-server view HPmib-exclude snmpVacmMIB excluded snmp-server view HPmib-exclude snmpCommunityMIB excluded snmp-server view HPmib-exclude ip.21 excluded snmp-server view HPmib-exclude ip.22 excluded snmp-server trap-source Vlan507 snmp-server location Jackfish Lodge, AB snmp-server contact Network Services snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart snmp-server enable traps transceiver all snmp-server enable traps tty snmp-server enable traps eigrp snmp-server enable traps ospf state-change snmp-server enable traps ospf errors snmp-server enable traps ospf retransmit snmp-server enable traps ospf lsa snmp-server enable traps ospf cisco-specific state-change nssa-trans-change snmp-server enable traps ospf cisco-specific state-change shamlink interface-old snmp-server enable traps ospf cisco-specific state-change shamlink neighbor snmp-server enable traps ospf cisco-specific errors snmp-server enable traps ospf cisco-specific retransmit snmp-server enable traps ospf cisco-specific lsa snmp-server enable traps license snmp-server enable traps auth-framework sec-violation snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency snmp-server enable traps cluster snmp-server enable traps config-copy snmp-server enable traps config snmp-server enable traps config-ctid snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan snmp-server enable traps energywise snmp-server enable traps fru-ctrl snmp-server enable traps entity snmp-server enable traps event-manager snmp-server enable traps hsrp snmp-server enable traps ipmulticast snmp-server enable traps power-ethernet group 1 snmp-server enable traps power-ethernet police snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message snmp-server enable traps cpu threshold snmp-server enable traps rep snmp-server enable traps rtr snmp-server enable traps vstack snmp-server enable traps bridge newroot topologychange snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency snmp-server enable traps syslog snmp-server enable traps vtp snmp-server enable traps vlancreate snmp-server enable traps vlandelete snmp-server enable traps flash insertion removal snmp-server enable traps port-security snmp-server enable traps envmon fan shutdown supply temperature status snmp-server enable traps errdisable snmp-server enable traps mac-notification change move threshold snmp-server enable traps vlan-membership snmp-server host 172.16.5.50 version 3 priv SNMPninja snmp-server host 172.20.5.50 version 3 priv SNMPninja snmp-server host 172.20.5.82 version 3 priv SNMPninja tacacs-server host 172.25.243.22 tacacs-server host 172.24.243.22 tacacs-server timeout 6 tacacs-server directed-request tacacs-server key 7 08221D5D0A165102130508092F ! banner exec ^C ***********************SYSTEM DESCRIPTION************************ * * * NAME: jdld-1433-mnt-swa1 * * LOCATION: Jackfish District Lodge Maintenance * * CORPORATION: Devon Canada Corporation * * SITE CONTACT: Enterprise Network Services * * DESCRIPTION: Cisco WS-C3560CG-8PC-S * * ASSET#: * * NOTES: * ***************************************************************** ^C banner motd ^CCC **************************SECURITY NOTICE**************************** * ACCESS TO THIS SYSTEM IS RESTRICTED TO AUTHORIZED PERSONNEL ONLY. * USAGE OF THIS SYSTEM MAY BE LOGGED AND/OR MONITORED WITHOUT NOTICE. * DISCONNECT IMMEDIATELY IF YOU ARE NOT AN AUTHORIZED USER! ********************************************************************* ^C ! line con 0 password 7 044F0A0D0A70185A011C11121306 line vty 0 4 session-timeout 5 access-class AccessControl in exec-timeout 60 0 timeout login response 90 password 7 051F0704241D1A1D110003170A01 transport input all line vty 5 15 session-timeout 5 access-class AccessControl in exec-timeout 60 0 timeout login response 90 password 7 03105A00035E7558460C0D00161F transport input all ! ntp clock-period 22519149 ntp server 172.20.2.34 ntp server 172.20.2.33 end