7F-SVR-CSW-001#show running-config Building configuration... Current configuration : 7571 bytes ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service sequence-numbers ! hostname 7F-SVR-CSW-001 ! boot-start-marker boot-end-marker ! enable secret 5 $1$nOvn$tTD5VfHTv6t152203l9o0. ! no aaa new-model system mtu routing 1500 ip subnet-zero ip routing ! ! ! ! crypto pki trustpoint TP-self-signed-1576481280 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1576481280 revocation-check none rsakeypair TP-self-signed-1576481280 ! ! crypto pki certificate chain TP-self-signed-1576481280 certificate self-signed 01 30820247 308201B0 A0030201 02020101 300D0609 2A864886 F70D0101 04050030 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 31353736 34383132 3830301E 170D3933 30333031 30303031 33345A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 35373634 38313238 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281 81009FC6 F0A07FEC E951DDDC B4D7F19B E612B281 2F3ABA6F C37A6BA1 B4D188BF 36670A18 20C29641 C41B6450 D4D201C3 16181EF1 0A441A1B AD911BD8 5E9617AF 16CFA316 42E8D55B 6EFD37BE 974F249D B4CFB886 32DF14F5 4275D368 57FB7A70 9BBB8902 6243FD65 A0190669 C92A7B21 021A966F 1F53A4C5 85C5FFE7 F721B4D8 C8AD0203 010001A3 6F306D30 0F060355 1D130101 FF040530 030101FF 301A0603 551D1104 13301182 0F37462D 5356522D 4353572D 3030312E 301F0603 551D2304 18301680 14EDB1ED 9FDAEDB1 9A1866D0 9763AA99 F005AD68 23301D06 03551D0E 04160414 EDB1ED9F DAEDB19A 1866D097 63AA99F0 05AD6823 300D0609 2A864886 F70D0101 04050003 81810001 4C7C1AFF 9C81C935 68C829E5 3617B455 33BCED5D 04EB3E3C 2F24F0E8 7BF3A85E F9B52718 6AC8A319 E531B01D E354D8A0 4BEB2621 991D03F9 33149139 9EF38F16 047C633F 4C0FC1E8 39D3D0FF 0B224F3D E82A1831 C41011C3 ED429FD0 90B70599 9F900636 0A42D025 B5274D67 78FFDBDA DA21262C B331228F 994B510A FD41E2 quit ! ! ! ! ! spanning-tree mode pvst spanning-tree extend system-id ! ! vlan access-map Wifi 30 action drop match ip address Wifi ! vlan internal allocation policy ascending ! ! ! ! interface Port-channel1 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/1 switchport access vlan 50 switchport mode access ! interface GigabitEthernet0/2 switchport mode access ! interface GigabitEthernet0/3 switchport mode access ! interface GigabitEthernet0/4 switchport access vlan 70 switchport mode access ! interface GigabitEthernet0/5 switchport access vlan 40 switchport mode access ! interface GigabitEthernet0/6 switchport access vlan 70 switchport mode access ! interface GigabitEthernet0/7 switchport access vlan 40 switchport mode access ! interface GigabitEthernet0/8 switchport access vlan 70 switchport mode access ! interface GigabitEthernet0/9 switchport access vlan 40 switchport mode access ! interface GigabitEthernet0/10 switchport access vlan 70 switchport mode access ! interface GigabitEthernet0/11 description Connect to WIFIBD2 switchport access vlan 90 switchport mode access ! interface GigabitEthernet0/12 description Connect to WLC switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/13 switchport access vlan 20 switchport mode access ! interface GigabitEthernet0/14 switchport access vlan 20 switchport mode access ! interface GigabitEthernet0/15 switchport access vlan 20 switchport mode access ! interface GigabitEthernet0/16 switchport access vlan 20 switchport mode access ! interface GigabitEthernet0/17 ! interface GigabitEthernet0/18 switchport access vlan 60 switchport mode access ! interface GigabitEthernet0/19 description Connect to wifibd2 switchport access vlan 110 switchport mode access ! interface GigabitEthernet0/20 switchport access vlan 60 switchport mode access ! interface GigabitEthernet0/21 description "Trunk betwen 9600-3560" switchport trunk encapsulation dot1q switchport mode trunk channel-protocol lacp channel-group 1 mode active ! interface GigabitEthernet0/22 description "Trunk betwen 9600-3560-2" switchport trunk encapsulation dot1q switchport mode trunk channel-protocol lacp channel-group 1 mode active ! interface GigabitEthernet0/23 description Trunk 9600 - 3560 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/24 description Connect to Firewall FG200A ! interface GigabitEthernet0/25 ! interface GigabitEthernet0/26 ! interface GigabitEthernet0/27 ! interface GigabitEthernet0/28 ! interface Vlan1 ip address 192.168.100.1 255.255.255.0 ! interface Vlan3 no ip address ! interface Vlan20 ip address 192.168.102.1 255.255.255.192 ip helper-address 192.168.102.226 ! interface Vlan30 ip address 192.168.102.65 255.255.255.192 ip access-group INTERNETGUEST in ip helper-address 192.168.102.226 ! interface Vlan40 ip address 192.168.102.129 255.255.255.224 ip helper-address 192.168.102.226 ! interface Vlan50 ip address 192.168.102.193 255.255.255.224 ip helper-address 192.168.102.226 ! interface Vlan60 ip address 192.168.102.161 255.255.255.224 ip helper-address 192.168.102.226 ! interface Vlan70 ip address 192.168.102.225 255.255.255.240 ip helper-address 192.168.102.226 ! interface Vlan80 ip address 192.168.102.241 255.255.255.240 ip helper-address 192.168.102.226 ! interface Vlan90 ip address 192.168.103.1 255.255.255.0 ip helper-address 192.168.102.226 ! interface Vlan100 ip address 192.168.104.1 255.255.255.0 ip helper-address 192.168.102.226 ! interface Vlan110 ip address 192.168.105.1 255.255.255.0 ip helper-address 192.168.102.226 ! interface Vlan120 no ip address ip helper-address 192.168.102.226 ! interface Vlan180 ip address 192.168.180.2 255.255.255.0 ! interface Vlan190 ip address 192.168.190.2 255.255.255.0 ! interface Vlan200 ip address 192.168.215.2 255.255.255.0 ! interface Vlan201 ip address 192.168.201.2 255.255.255.0 ! interface Vlan202 ip address 192.168.202.2 255.255.255.0 ! interface Vlan203 ip address 192.168.203.2 255.255.255.0 ! interface Vlan204 ip address 192.168.204.2 255.255.255.0 ! interface Vlan205 ip address 192.168.205.2 255.255.255.0 ! interface Vlan206 ip address 192.168.206.2 255.255.255.0 ! interface Vlan207 ip address 192.168.207.2 255.255.255.0 ! interface Vlan208 ip address 192.168.208.2 255.255.255.0 ! interface Vlan209 ip address 192.168.209.2 255.255.255.0 ! interface Vlan210 ip address 192.168.210.2 255.255.255.0 ! interface Vlan211 ip address 192.168.211.2 255.255.255.0 ! interface Vlan212 ip address 192.168.212.2 255.255.255.128 ! interface Vlan213 ip address 192.168.213.2 255.255.255.0 ! interface Vlan214 ip address 192.168.214.2 255.255.255.0 ! interface Vlan216 ip address 192.168.216.2 255.255.255.0 ! interface Vlan217 ip address 192.168.217.2 255.255.255.0 ! ip default-gateway 192.168.102.235 ip classless ip route 0.0.0.0 0.0.0.0 192.168.100.2 ip http server ip http secure-server ! ! ip access-list extended INTERNETGUEST permit tcp any host 192.168.102.226 eq domain permit udp any host 192.168.102.226 eq domain permit udp any host 192.168.102.226 eq bootps permit udp any host 192.168.102.226 eq bootpc permit ip any host 10.0.1.1 permit ip any any ! ! control-plane ! banner login ^C You're connecting to APU core switch ^C privilege exec level 15 configure ! line con 0 password 7 120D0D161C03040B2B6A767B login line vty 0 4 password 7 120D0D161C03040B2B6A767B login line vty 5 15 login ! end