conf term no ip dhcp use vrf connected vrf definition guestVrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! exit ip dhcp pool GUEST-WiFi-Clients network 10.66.40.0 255.255.254.0 default-router 10.66.40.1 dns-server 8.8.8.8 8.8.4.4 domain-name cnrl.com netbios-node-type h-node lease 0 0 15 ! exit interface Port-channel30 switchport trunk allowed vlan remove 922, 924 interface Port-channel31 switchport trunk allowed vlan remove 922, 924 interface TenGigabitEthernet1/3/1 switchport trunk allowed vlan remove 603 interface TenGigabitEthernet1/3/2 switchport trunk allowed vlan remove 612 interface GigabitEthernet1/6/30 switchport trunk allowed vlan remove 922, 924 interface GigabitEthernet1/6/31 switchport trunk allowed vlan remove 922, 924 interface Vlan200 description CNRL-GUEST ip vrf forwarding guestVrf ip address 10.66.40.1 255.255.248.0 no ip helper-address 172.31.1.243 no ip helper-address 172.31.3.243 ! interface Vlan211 description jckdstt Wing1 PCs ip vrf forwarding guestVrf ip address 192.168.32.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan212 description jckdstt Wing2 PCs ip vrf forwarding guestVrf ip address 192.168.33.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan213 description jckdstt Wing3 PCs ip vrf forwarding guestVrf ip address 192.168.34.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan214 description jckdstt Wing4 PCs ip vrf forwarding guestVrf ip address 192.168.35.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan215 description jckdstt Wing5 PCs ip vrf forwarding guestVrf ip address 192.168.36.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan216 description jckdstt Wing6 PCs ip vrf forwarding guestVrf ip address 192.168.37.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan217 description jckdstt Wing7 PCs ip vrf forwarding guestVrf ip address 192.168.38.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan218 description jckdstt Wing8 PCs ip vrf forwarding guestVrf ip address 192.168.39.1 255.255.255.0 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan219 description jckdstt Wing9 PCs ip vrf forwarding guestVrf ip address 192.168.40.1 255.255.255.0 no ip access-group CampInternet_Access in no ip helper-address 172.31.1.243 no ip helper-address 172.31.3.243 no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan220 description jckdstt Wing10 PCs ip vrf forwarding guestVrf ip address 192.168.41.1 255.255.255.0 no ip access-group CampInternet_Access in no ip helper-address 172.31.1.243 no ip helper-address 172.31.3.243 no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan228 description jckdstt watr raw ip vrf forwarding guestVrf ip address 192.168.42.1 255.255.255.128 no ip access-group CampInternet_Access in no ip policy route-map JACKFISH-WIRED-INTERNET ! interface Vlan229 description jckdstt wste raw ip vrf forwarding guestVrf ip address 192.168.42.129 255.255.255.128 ! interface Vlan802 no description new-WEBsence-FW-Core description P2P Core-Firewall ip vrf forwarding guestVrf ip address 10.66.39.17 255.255.255.240 no ip redirects ! interface Vlan2100 description JDLD-Contractor1 ip vrf forwarding guestVrf ip address 192.168.240.1 255.255.255.0 no ip access-group JDLD_Contractor in no ip policy route-map JACKFISH-WIRED-INTERNET ! exit router ospf 100 no area 20 range 192.168.32.0 255.255.240.0 cost 20 passive-interface Vlan802 no network 10.66.37.129 0.0.0.0 area 20 no network 10.66.39.1 0.0.0.0 area 50 no network 10.66.39.17 0.0.0.0 area 50 no network 10.77.17.106 0.0.0.0 area 20 no network 10.77.98.1 0.0.0.0 area 20 no network 10.77.98.129 0.0.0.0 area 20 no network 10.77.99.1 0.0.0.0 area 20 no network 10.77.99.129 0.0.0.0 area 20 no network 10.77.100.1 0.0.0.0 area 20 no network 10.77.100.129 0.0.0.0 area 20 no network 10.77.101.1 0.0.0.0 area 20 no network 10.77.101.129 0.0.0.0 area 20 no network 10.77.102.1 0.0.0.0 area 20 no network 10.77.102.129 0.0.0.0 area 20 no network 192.168.30.1 0.0.0.0 area 20 no network 192.168.32.1 0.0.0.0 area 20 no network 192.168.33.1 0.0.0.0 area 20 no network 192.168.34.1 0.0.0.0 area 20 no network 192.168.35.1 0.0.0.0 area 20 no network 192.168.36.1 0.0.0.0 area 20 no network 192.168.37.1 0.0.0.0 area 20 no network 192.168.38.1 0.0.0.0 area 20 no network 192.168.39.1 0.0.0.0 area 20 no network 192.168.40.1 0.0.0.0 area 20 no network 192.168.41.1 0.0.0.0 area 20 no network 192.168.42.1 0.0.0.0 area 20 no network 192.168.42.129 0.0.0.0 area 20 no network 192.168.43.1 0.0.0.0 area 20 exit router ospf 110 vrf guestVrf router-id 9.9.9.9 passive-interface default no passive-interface Vlan802 network 10.66.40.1 0.0.0.0 area 0 network 10.66.39.17 0.0.0.0 area 50 network 192.168.30.1 0.0.0.0 area 0 network 192.168.32.1 0.0.0.0 area 0 network 192.168.33.1 0.0.0.0 area 0 network 192.168.34.1 0.0.0.0 area 0 network 192.168.35.1 0.0.0.0 area 0 network 192.168.36.1 0.0.0.0 area 0 network 192.168.37.1 0.0.0.0 area 0 network 192.168.38.1 0.0.0.0 area 0 network 192.168.39.1 0.0.0.0 area 0 network 192.168.40.1 0.0.0.0 area 0 network 192.168.41.1 0.0.0.0 area 0 network 192.168.42.1 0.0.0.0 area 0 network 192.168.42.129 0.0.0.0 area 0 network 192.168.240.1 0.0.0.0 area 0 exit no ip route 10.77.91.0 255.255.255.0 10.66.39.19 ip route vrf guestVrf 0.0.0.0 0.0.0.0 10.66.39.19 no interface Vlan21 no interface Vlan111 no interface Vlan112 no interface Vlan113 no interface Vlan114 no interface Vlan115 no interface Vlan116 no interface Vlan117 no interface Vlan118 no interface Vlan119 no interface Vlan120 no interface Vlan232 no interface Vlan500 no interface Vlan612 no interface Vlan613 no interface Vlan801 no interface Vlan914 no interface Vlan922 no interface Vlan924 no interface Vlan950 no ip dhcp excluded-address 10.77.98.1 10.77.98.20 no ip dhcp excluded-address 10.77.98.129 10.77.98.149 no ip dhcp excluded-address 10.77.99.1 10.77.99.20 no ip dhcp excluded-address 10.77.99.129 10.77.99.149 no ip dhcp excluded-address 10.77.100.1 10.77.100.20 no ip dhcp excluded-address 10.77.100.129 10.77.100.149 no ip dhcp excluded-address 10.77.101.1 10.77.101.20 no ip dhcp excluded-address 10.77.102.129 10.77.102.149 no ip dhcp excluded-address 10.77.101.129 10.77.101.149 no ip dhcp excluded-address 10.77.102.1 10.77.102.20 no ip dhcp excluded-address 10.66.48.1 10.66.48.20 no ip dhcp pool jckdstt-Wn1-VoIP no ip dhcp pool jckdstt-Wn2-VoIP no ip dhcp pool jckdstt-Wn3-VoIP no ip dhcp pool jckdstt-Wn4-VoIP no ip dhcp pool jckdstt-Wn5-VoIP no ip dhcp pool jckdstt-Wn6-VoIP no ip dhcp pool jckdstt-Wn7-VoIP no ip dhcp pool jckdstt-Wn8-VoIP no ip dhcp pool jckdstt-Wn9-VoIP no ip dhcp pool jckdstt-Wn10-VoIP no ip dhcp pool jckdstt-jck2ctlr-APs no ip dhcp pool CORP-WiFi-Clients no ip dhcp pool TESTAV no vlan 11 no vlan 21 no vlan 111 no vlan 112 no vlan 113 no vlan 114 no vlan 115 no vlan 116 no vlan 117 no vlan 118 no vlan 119 no vlan 120 no vlan 122 no vlan 232 no vlan 500 no vlan 603 no vlan 612 no vlan 613 no vlan 801 no vlan 914 no vlan 922 no vlan 924 no vlan 950 no vlan 960 no vlan 3000 vlan 802 no name name P2P Core-Firewall ! vlan 12 no name name Edge Router ! exit default interface GigabitEthernet1/6/16 default interface GigabitEthernet1/6/41 default interface GigabitEthernet1/6/42 default interface GigabitEthernet1/7/29 default interface GigabitEthernet2/6/17 default interface GigabitEthernet2/6/41 default interface GigabitEthernet2/6/42 default interface GigabitEthernet2/7/29 default interface GigabitEthernet2/6/48 no ip access-list standard telnet no ip access-list extended ACL-DEFAULT no ip access-list extended ACL-WEBAUTH-REDIRECT no ip access-list extended CampInternet_Access no ip access-list extended InternetOnly no ip access-list extended jackfish_wired_internet no ip access-list extended jackfish_wired_internet2 no ip access-list extended test2 no ip sla 10 no route-map JACKFISH-WIRED-INTERNET no route-map JACKFISH-WIRED-INTERNET2 end