!
version v10.4(3) Release(117920)(Wed Jun 22 09:55:14 CST 2011 -ngcf62)
hostname 3610
!
!
co-operate enable
!
!
!
!
nfpp
dhcpv6-guard rate-limit per-src-mac 1
dhcpv6-guard rate-limit per-port 10
dhcpv6-guard attack-threshold per-src-mac 2
dhcpv6-guard attack-threshold per-port 10
dhcp-guard isolate-period 30
dhcp-guard monitored-host-limit 500
dhcp-guard rate-limit per-src-mac 3
dhcp-guard rate-limit per-port 15
dhcp-guard attack-threshold per-src-mac 5
dhcp-guard attack-threshold per-port 25
arp-guard isolate-period 30
arp-guard scan-threshold 300
arp-guard rate-limit per-src-ip 10
arp-guard rate-limit per-src-mac 10
arp-guard rate-limit per-port 500
arp-guard attack-threshold per-src-ip 30
arp-guard attack-threshold per-src-mac 30
arp-guard attack-threshold per-port 1500
!
!
vlan 1
!
vlan 3
!
vlan 38
name multicast
!
vlan 108
!
vlan 399
!
vlan 500
name supervlan
supervlan
subvlan 501-2000
!
vlan 501
!
...<здесь объявлния vlan 501 - 2000>...
!
vlan 2000
!
!
key chain core_rip
key 0
key-string XXX
!
username XXX password 7 XXX
username XXX privilege 15
service password-encryption
service dhcp
service timestamps debug datetime msec
service timestamps log datetime msec year
ip http authentication local
!
ip dhcp relay information option82
!
!
!
!
!
!
!
!
!
!
!
!
!
!
ip access-list standard 10
10 deny XXX 0.0.0.255
20 deny XXX 0.0.0.255
30 permit any
!
!
cpu-protect type dot1x pps 10
cpu-protect type rldp pps 10
cpu-protect type rerp pps 10
cpu-protect type erps pps 10
cpu-protect type ipv4-icmp-local pps 128
cpu-protect type lldp pps 10
cpu-protect type lldp_cdp pps 10
cpu-protect type cfm-pdu pps 10
cpu-protect type dhcps-ipv4 pps 90
cpu-protect type dhcps-ipv6 pps 10
cpu-protect type gvrp pps 10
cpu-protect type tunnel-gvrp pps 10
cpu-protect type dvmrp pps 10
cpu-protect type igmp pps 128
cpu-protect type mld pps 10
cpu-protect type ospf-v2 pps 128
cpu-protect type pim-ipv4 pps 128
cpu-protect type pim-ipv6 pps 10
cpu-protect type rip-ipv4 pps 128
cpu-protect type ripng pps 10
cpu-protect type vrrp-ipv4 pps 10
cpu-protect type vrrp-ipv6 pps 10
cpu-protect type stargv pps 10
cpu-protect type stargvv6 pps 10
cpu-protect type bgp-ttl1 pps 10
cpu-protect type err-ttl0 pps 64
cpu-protect type err-ttl1 pps 64
cpu-protect type ospf-v3 pps 10
cpu-protect type isis-es pps 10
cpu-protect type isis-is pps 10
cpu-protect type isis-l1is pps 10
cpu-protect type isis-l2is pps 10
cpu-protect type dhcpv6-client pps 1
cpu-protect type dhcpv6-server pps 1
cpu-protect type nd-snp-ns-na pps 10
cpu-protect type nd-snp-rs pps 10
cpu-protect type nd-snp-ra-redirect pps 10
cpu-protect type ttl1-ipmcv6 pps 1
cpu-protect type error-hop-limit pps 128
cpu-protect type unknown-ipmcv6 pps 1
cpu-protect type dhcpv4-relay-c pps 128
cpu-protect type dhcpv4-relay-s pps 128
cpu-protect type option82 pps 128
cpu-protect type udp-helper pps 128
cpu-protect type dhcp-client pps 128
clock timezone GMT+4 4 0
!
!
logging buffered 32768
logging console critical
logging monitor critical
enable secret 5 XXX
!
!
!
!
!
!
!
!
!
!
interface GigabitEthernet 0/1
switchport mode trunk
switchport trunk allowed vlan remove 2-37,39-620,645-788,813-4094
!
interface GigabitEthernet 0/2
switchport mode trunk
switchport trunk allowed vlan remove 2-37,39-500,621-4094
!
interface GigabitEthernet 0/3
switchport mode trunk
switchport trunk allowed vlan remove 2-37,39-644,669-764,789-4094
!
interface GigabitEthernet 0/4
switchport mode trunk
switchport trunk allowed vlan remove 2-37,39-668,717-4094
!
interface GigabitEthernet 0/5
switchport mode trunk
switchport trunk allowed vlan remove 2-37,39-716,765-4094
!
interface GigabitEthernet 0/6
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-812,837-4094
!
interface GigabitEthernet 0/7
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-836,861-4094
!
interface GigabitEthernet 0/8
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-860,885-4094
!
interface GigabitEthernet 0/9
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-884,909-4094
!
interface GigabitEthernet 0/10
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-908,933-4094
!
interface GigabitEthernet 0/11
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-932,957-4094
!
interface GigabitEthernet 0/12
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-956,981-4094
!
interface GigabitEthernet 0/13
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-980,1005-4094
medium-type fiber
!
interface GigabitEthernet 0/14
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1004,1029-4094
medium-type fiber
!
interface GigabitEthernet 0/15
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1028,1053-4094
medium-type fiber
!
interface GigabitEthernet 0/16
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1052,1077-4094
medium-type fiber
!
interface GigabitEthernet 0/17
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1076,1101-4094
medium-type fiber
!
interface GigabitEthernet 0/18
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1100,1125-4094
medium-type fiber
!
interface GigabitEthernet 0/19
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1124,1149-4094
medium-type fiber
!
interface GigabitEthernet 0/20
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1148,1173-4094
medium-type fiber
!
interface GigabitEthernet 0/21
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1172,1197-4094
medium-type fiber
!
interface GigabitEthernet 0/22
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1196,1221-4094
medium-type fiber
!
interface GigabitEthernet 0/23
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 1-2,4-37,39-1220,1269-4094
medium-type fiber
!
interface GigabitEthernet 0/24
switchport mode trunk
switchport trunk native vlan 3
switchport trunk allowed vlan remove 2,4-37,39-107,109-398,400-1999,2001-4094
medium-type fiber
!
interface VLAN 3
no ip proxy-arp
ip address 192.168.152.2 255.255.255.0
!
interface VLAN 108
ip rip send version 2
ip rip receive version 2
ip rip authentication key-chain core_rip
no ip proxy-arp
ip address 192.168.20.12 255.255.255.0
!
interface VLAN 399
no ip proxy-arp
ip address 192.168.249.50 255.255.255.0
!
interface VLAN 500
ip proxy-arp
ip helper-address 192.168.249.49
ip address 10.1.0.49 255.255.240.0
ip address XXX 255.255.255.0 secondary
ip address XXX 255.255.255.0 secondary
ip address XXX 255.255.255.0 secondary
!
ntp update-calendar
ntp server XXX version 2
!
!
!
!
!
arp retry times 1
arp retry interval 30
!
!
!
!
!
!
!
!
!
!
!
!
router rip
version 2
network 192.168.20.0
neighbor XXX
...
neighbor XXX
no auto-summary
redistribute connected
distribute-list 10 out
!
!
ip route 0.0.0.0 0.0.0.0 192.168.249.49
!
ip igmp snooping ivgl
no ip igmp snooping vlan 1
no ip igmp snooping vlan 3
no ip igmp snooping vlan 108
no ip igmp snooping vlan 399
no ip igmp snooping vlan 500
!
snmp-server community XXX ro
snmp-server community XXX rw
line con 0
line vty 0 4
session-timeout 5760
exec-timeout 5760 0
login
password 7 XXX
!
!
end