SYINSH_HQ_CSW_9407#show running-config
Building configuration...
Current configuration : 34515 bytes
!
! Last configuration change at 16:35:49 SST Mon Feb 22 2021 by admin
!
version 16.9
no service pad
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service call-home
no platform punt-keepalive disable-kernel-core
!
hostname SYINSH_HQ_CSW_9407
!
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
enable secret 5 $1$2/KG$ltn/d7p79zOQHA2J4vQbI/
!
no aaa new-model
clock timezone SST 3 0
stack-mac persistent timer 0
boot system bootflash:packages.conf
power redundancy-mode switch 1 combined
power redundancy-mode switch 2 combined
no power supply switch 1 autoLC shutdown
no power supply switch 2 autoLC shutdown
power supply switch 1 autoLC priority 1 2 5 6 7
power supply switch 2 autoLC priority 1 2 5 6 7
!
!
!
!
stackwise-virtual
domain 1
call-home
contact-email-addr LCCCC@cisco.org
profile "CiscoTAC-1"
active
destination transport-method http
no destination transport-method email
destination address http http://10.200.6.5:80/Transportgateway/services/DeviceRequestHandler
!
!
ip dhcp pool webuidhcp
!
!
!
login on-success log
!
!
!
!
!
!
!
ipv6 unicast-routing
!
crypto pki trustpoint SLA-TrustPoint
enrollment terminal
revocation-check crl
!
crypto pki trustpoint TP-self-signed-3661210606
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3661210606
revocation-check none
rsakeypair TP-self-signed-3661210606
!
!
crypto pki certificate chain SLA-TrustPoint
certificate ca 01
30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030
32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363
6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934
3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305
43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720
526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030
82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D
CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520
1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE
4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC
7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188
68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7
C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191
C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44
DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201
06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85
4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500
03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905
604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B
D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8
467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C
7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B
5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678
80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB
418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0
D697DF7F 28
quit
crypto pki certificate chain TP-self-signed-3661210606
certificate self-signed 01
30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33363631 32313036 3036301E 170D3139 30373230 32313239
35355A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 36363132
31303630 36308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201
0A028201 0100C64D B21D3327 BAAE56E2 5FCC31D6 093F1D74 4F92F1DC B3C1976C
F7AA02AE 0BC07D76 9B36DEAF E44A6984 D3B0279C 9281A998 B2C5D4BF 827149DD
A428DA0B E5AB911F 6454680E 373A3391 3BD9D2B2 8BDD57C0 6A31F51D C3C75000
2EEEE4CE 0C1A9E3A 9EFAD5B4 8E4CD4EE B40E3C1D 4C663C02 6E0D108E 8C0F6B89
D42F6FC6 22FE1C67 524AA5C3 7B13B407 9882A62A CED37AE9 D6DDFE2C BE7FBF8D
1EDD91A9 D7C7C3BD 43822531 F51FC8C2 1B9CF02F 227B347D D6E2210D 3A423630
F5B65FE2 96955FE0 D1357BD0 85DDFBFA 722CCE50 4A0C1BD2 DE647522 06B407C8
7E215F65 320DFB8D 44469BC0 9965C624 A985CE81 69D66CBE CB222D42 8009228F
BCC52C34 23250203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF
301F0603 551D2304 18301680 147D427C 1307972E 27403AA8 0D4AB8D6 9F062E4F
85301D06 03551D0E 04160414 7D427C13 07972E27 403AA80D 4AB8D69F 062E4F85
300D0609 2A864886 F70D0101 05050003 82010100 9D99C2AC 3E0987B2 B543043A
BA780EE5 48769D90 0EF5035D E0825BAA 070895FB AFC7012C A7B3B900 10BCD68F
3E2B294F 9B66B4AD 5C14D0AE 61FBF81F 9B043660 B49F501E 9532361E 7D5D379D
910D4E5F DD7C7671 A5BE6BCD 9C64A414 13C16D86 5C532B70 8FF57AC9 44E1E113
42751778 6D178A26 8BE1F659 60CED1E3 2B11712C 995FC2E7 1FC581AC 5A2AA5D9
1016B45E C8277C8B 046226EF F1C1A38E 5B2003D5 E38E3184 C1021F21 AB86418F
437E2049 41405178 19096EDE 875950E7 3571FE09 C8C54B69 676471C9 432047EB
8DC8F867 E5FBAAD9 D206A86F 8456E786 33EDAACE 7310BA5E E039138A 20D0CC45
A353E132 EF8897D3 99D4230A 8C3F3F24 F4523B44
quit
!
license boot level network-advantage
!
!
diagnostic bootup level minimal
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
!
errdisable recovery cause udld
errdisable recovery cause bpduguard
errdisable recovery cause security-violation
errdisable recovery cause channel-misconfig
errdisable recovery cause pagp-flap
errdisable recovery cause dtp-flap
errdisable recovery cause link-flap
errdisable recovery cause sfp-config-mismatch
errdisable recovery cause gbic-invalid
errdisable recovery cause l2ptguard
errdisable recovery cause psecure-violation
errdisable recovery cause port-mode-failure
errdisable recovery cause dhcp-rate-limit
errdisable recovery cause pppoe-ia-rate-limit
errdisable recovery cause mac-limit
errdisable recovery cause vmps
errdisable recovery cause storm-control
errdisable recovery cause inline-power
errdisable recovery cause arp-inspection
errdisable recovery cause link-monitor-failure
errdisable recovery cause oam-remote-failure
errdisable recovery interval 30
!
username admin privilege 15 password 0 admin123
!
redundancy
mode sso
!
!
!
!
!
lldp run
!
class-map match-any system-cpp-police-topology-control
description Topology control
class-map match-any system-cpp-police-sw-forward
description Sw forwarding, L2 LVX data, LOGGING
class-map match-any system-cpp-default
description Inter FED, EWLC control, EWLC data
class-map match-any system-cpp-police-sys-data
description Learning cache ovfl, High Rate App, Exception, EGR Exception, NFL SAMPLED DATA, RPF Failed
class-map match-any system-cpp-police-punt-webauth
description Punt Webauth
class-map match-any system-cpp-police-l2lvx-control
description L2 LVX control packets
class-map match-any system-cpp-police-forus
description Forus Address resolution and Forus traffic
class-map match-any system-cpp-police-multicast-end-station
description MCAST END STATION
class-map match-any system-cpp-police-high-rate-app
description High Rate Applications
class-map match-any system-cpp-police-multicast
description Transit Traffic and MCAST Data
class-map match-any system-cpp-police-l2-control
description L2 control
class-map match-any system-cpp-police-dot1x-auth
description DOT1X Auth
class-map match-any system-cpp-police-data
description ICMP redirect, ICMP_GEN and BROADCAST
class-map match-any system-cpp-police-stackwise-virt-control
description Stackwise Virtual
class-map match-any non-client-nrt-class
class-map match-any system-cpp-police-routing-control
description Routing control and Low Latency
class-map match-any system-cpp-police-protocol-snooping
description Protocol snooping
class-map match-any system-cpp-police-dhcp-snooping
description DHCP snooping
class-map match-any system-cpp-police-system-critical
description System Critical and Gold Pkt
!
policy-map system-cpp-policy
!
!
!
!
!
!
!
!
!
!
!
interface Port-channel1
description connect to SYINSH_HQ_GFSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel2
description connect to SYINSH_HQ_1FSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel3
description connect to SYINSH_HQ_2FSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel4
description connect to SYINSH_HQ_3FSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel5
description connect to SYINSH_HQ_4FSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel6
description connect to SYINSH_HQ_5FSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface Port-channel7
description connect to SYINSH_HQ_DriverofficeSW
switchport mode trunk
flowcontrol receive on
ip dhcp snooping trust
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
shutdown
negotiation auto
!
1号交换机 / 1层板子/ 0 /1号端口 连接sangfor AF1000防火墙
interface GigabitEthernet1/1/0/1
description To Internet Firewall
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/2
description To SYINSH-HQ-VG
switchport access vlan 90
spanning-tree portfast
!
连接sangfor AC1800，使用10.200.8.X网段，vlan3
interface GigabitEthernet1/1/0/3
description Sanfor Management
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
连接新的CUCM第一台主机
interface GigabitEthernet1/1/0/4
description Connect_To_UCS_1_Port1
switchport trunk allowed vlan 6,90,200
switchport mode trunk
!
连接新的CUCM第二台主机
interface GigabitEthernet1/1/0/5
description Connect_To_UCS_1_CIMC
switchport access vlan 200
switchport mode access
!
interface GigabitEthernet1/1/0/6
!
interface GigabitEthernet1/1/0/7
!
interface GigabitEthernet1/1/0/8
!
interface GigabitEthernet1/1/0/9
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/10
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/11
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/12
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/13
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/14
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/15
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/16
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/17
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/18
!
interface GigabitEthernet1/1/0/19
!
interface GigabitEthernet1/1/0/20
!
interface GigabitEthernet1/1/0/21
!
interface GigabitEthernet1/1/0/22
!
interface GigabitEthernet1/1/0/23
!
interface GigabitEthernet1/1/0/24
!
下方1号交换机，第一层板子的 25号-28号端口为 CCTV监控使用的端口，连接CCTV机房；
interface GigabitEthernet1/1/0/25
switchport access vlan 91
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/26
switchport access vlan 91
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/27
switchport access vlan 91
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/28
switchport access vlan 91
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/1/0/29
!
interface GigabitEthernet1/1/0/30
!
interface GigabitEthernet1/1/0/31
!
interface GigabitEthernet1/1/0/32
!
interface GigabitEthernet1/1/0/33
!
interface GigabitEthernet1/1/0/34
!
interface GigabitEthernet1/1/0/35
!
interface GigabitEthernet1/1/0/36
!
interface GigabitEthernet1/1/0/37
!
interface GigabitEthernet1/1/0/38
!
interface GigabitEthernet1/1/0/39
!
interface GigabitEthernet1/1/0/40
!
interface GigabitEthernet1/1/0/41
!
interface GigabitEthernet1/1/0/42
!
interface GigabitEthernet1/1/0/43
!
interface GigabitEthernet1/1/0/44
!
1号交换机，第一层45号端口 连接InfoGo的eth0端口；
interface GigabitEthernet1/1/0/45
description To_InfoGo_eth0_trunk
switchport mode trunk
!
1号交换机，第一层46号端口 连接InfoGo的eth4端口；作为镜像端口；
interface GigabitEthernet1/1/0/46
!
1号交换机第一层，47号端口，配置了vlan3=10.200.8.x网段
interface GigabitEthernet1/1/0/47
switchport access vlan 3
switchport mode access
spanning-tree portfast
!
1号交换机第一层，最后一个端口 48号，连接WLC3504，允许vlan7，8，17，18，200等几个vlan，vlan200是管理vlan10.200.52.x网段；
interface GigabitEthernet1/1/0/48
description Connect_To_Cisco_Wireless_Controller_3504_Gi_1
switchport trunk allowed vlan 7,8,17,18,200
switchport mode trunk
!
1号交换机第二层板子，0/1端口 ，vlan2 服务器网段；
interface GigabitEthernet1/2/0/1
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/2
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/3
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/4
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/5
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/6
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/7
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/8
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/9
description To Servers
switchport access vlan 2
switchport mode access
shutdown
spanning-tree portfast
!
interface GigabitEthernet1/2/0/10
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/11
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/12
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/13
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/14
description To Servers
switchport access vlan 2
switchport mode access
speed 1000
duplex full
spanning-tree portfast
!
interface GigabitEthernet1/2/0/15
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/16
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/17
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/18
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/19
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/20
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/21
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/22
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/23
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/24
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/25
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/26
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/27
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/28
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/29
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/30
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/31
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/32
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/33
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/34
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/35
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/36
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/37
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/38
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/39
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/40
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/41
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/42
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/43
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/44
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/45
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet1/2/0/46
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
1号交换机，第二层板子，倒数第二个端口 47号，最早用于测试连接TS 机房交换机的，后来换到光口去了；
interface GigabitEthernet1/2/0/47
description To it_backup_system
switchport mode trunk
!
1号交换机，第二层板子，倒数第一个端口 48号，最早用于配置10.200.80.X网卡，作为实验环境；
interface GigabitEthernet1/2/0/48
description Testing device Required by Steven
switchport access vlan 80
switchport mode access
spanning-tree portfast
!
1号交换机，第三层板子；连接2号交换机作为双活配置；
interface TenGigabitEthernet1/3/0/1
stackwise-virtual link 1
description Connect_To_2/3/0/1_Stack_Data_port
!
interface TenGigabitEthernet1/3/0/2
stackwise-virtual dual-active-detection
description Connect_To_2/3/0/2_Stack_DaD_port
!
interface TenGigabitEthernet1/3/0/3
stackwise-virtual link 1
description Connect_To_2/3/0/3_Stack_Data_port
!
interface TenGigabitEthernet1/3/0/4
stackwise-virtual link 1
description Connect_To_2/3/0/4_Stack_Data_port
!
interface TenGigabitEthernet1/3/0/5
!
interface TenGigabitEthernet1/3/0/6
!
interface TenGigabitEthernet1/3/0/7
!
interface TenGigabitEthernet1/3/0/8
!
interface FortyGigabitEthernet1/3/0/9
!
interface FortyGigabitEthernet1/3/0/10
!
1号交换机（下方交换机），第五层板子；这一层为光口板子；
第一个端口连接6楼接入交换机
interface TenGigabitEthernet1/5/0/1
description connect to SYINSH_HQ_5FSW
switchport mode trunk
flowcontrol receive on
channel-group 1 mode active
ip dhcp snooping trust
!
第二个端口连接5楼接入交换机
interface TenGigabitEthernet1/5/0/2
description connect to SYINSH_HQ_4FSW
switchport mode trunk
flowcontrol receive on
channel-group 2 mode active
ip dhcp snooping trust
!
第三个端口连接到4楼接入交换机
interface TenGigabitEthernet1/5/0/3
description connect to SYINSH_HQ_3FSW
switchport mode trunk
flowcontrol receive on
channel-group 3 mode active
ip dhcp snooping trust
!
4号端口连接到3楼交换机
interface TenGigabitEthernet1/5/0/4
description connect to SYINSH_HQ_2FSW
switchport mode trunk
flowcontrol receive on
channel-group 4 mode active
ip dhcp snooping trust
!
5号端口连接到1楼交换机
interface TenGigabitEthernet1/5/0/5
description connect to SYINSH_HQ_GFSW
switchport mode trunk
flowcontrol receive on
channel-group 5 mode active
ip dhcp snooping trust
!
6号端口连接到2楼交换机
interface TenGigabitEthernet1/5/0/6
description connect to SYINSH_HQ_1FSW
switchport mode trunk
flowcontrol receive on
channel-group 6 mode active
ip dhcp snooping trust
!
7号端口连接到unity路由器，通过卫星p2p专线到油田；
interface TenGigabitEthernet1/5/0/7
description connect to unity_router
switchport mode access
spanning-tree portfast
!
8号端口应该是连接到TS机房的光口，没有添加描述；
interface TenGigabitEthernet1/5/0/8
switchport mode trunk
!
9号口连接到司机办公楼交换机；
interface TenGigabitEthernet1/5/0/9
description connect to SYINSH_HQ_DriverofficeSW
switchport mode trunk
flowcontrol receive on
channel-group 7 mode active
ip dhcp snooping trust
!
interface TenGigabitEthernet1/5/0/10
!
interface TenGigabitEthernet1/5/0/11
!
interface TenGigabitEthernet1/5/0/12
!
interface TenGigabitEthernet1/5/0/13
!
interface TenGigabitEthernet1/5/0/14
!
interface TenGigabitEthernet1/5/0/15
!
interface TenGigabitEthernet1/5/0/16
!
interface TenGigabitEthernet1/5/0/17
!
interface TenGigabitEthernet1/5/0/18
!
interface TenGigabitEthernet1/5/0/19
!
interface TenGigabitEthernet1/5/0/20
!
interface TenGigabitEthernet1/5/0/21
!
interface TenGigabitEthernet1/5/0/22
!
interface TenGigabitEthernet1/5/0/23
!
interface TenGigabitEthernet1/5/0/24
!
*-------------------------------------*
* 以下为上方2号交换机 *
*-------------------------------------*
interface GigabitEthernet2/1/0/1
description To Temp-server rack
switchport mode trunk
!
interface GigabitEthernet2/1/0/2
!
interface GigabitEthernet2/1/0/3
!
2号交换机，第一层板子，4号端口 vlan6 10.200.6.X， vlan90 10.200.40.X，vlan200 10.200.52.X
interface GigabitEthernet2/1/0/4
description Connect_To_UCS_2_Port1
switchport trunk allowed vlan 6,90,200
switchport mode trunk
!
interface GigabitEthernet2/1/0/5
description Connect_To_UCS_2_CIMC
switchport access vlan 200
switchport mode access
!
interface GigabitEthernet2/1/0/6
!
interface GigabitEthernet2/1/0/7
!
interface GigabitEthernet2/1/0/8
!
interface GigabitEthernet2/1/0/9
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/1/0/10
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/1/0/11
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/1/0/12
switchport access vlan 20
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/1/0/13
!
interface GigabitEthernet2/1/0/14
!
interface GigabitEthernet2/1/0/15
!
interface GigabitEthernet2/1/0/16
!
interface GigabitEthernet2/1/0/17
!
interface GigabitEthernet2/1/0/18
!
interface GigabitEthernet2/1/0/19
!
interface GigabitEthernet2/1/0/20
!
interface GigabitEthernet2/1/0/21
!
interface GigabitEthernet2/1/0/22
!
interface GigabitEthernet2/1/0/23
!
interface GigabitEthernet2/1/0/24
!
interface GigabitEthernet2/1/0/25
!
interface GigabitEthernet2/1/0/26
!
interface GigabitEthernet2/1/0/27
!
interface GigabitEthernet2/1/0/28
!
interface GigabitEthernet2/1/0/29
!
interface GigabitEthernet2/1/0/30
!
interface GigabitEthernet2/1/0/31
!
interface GigabitEthernet2/1/0/32
!
interface GigabitEthernet2/1/0/33
!
interface GigabitEthernet2/1/0/34
!
interface GigabitEthernet2/1/0/35
!
interface GigabitEthernet2/1/0/36
!
interface GigabitEthernet2/1/0/37
!
interface GigabitEthernet2/1/0/38
!
interface GigabitEthernet2/1/0/39
!
interface GigabitEthernet2/1/0/40
!
interface GigabitEthernet2/1/0/41
!
interface GigabitEthernet2/1/0/42
!
interface GigabitEthernet2/1/0/43
!
interface GigabitEthernet2/1/0/44
!
interface GigabitEthernet2/1/0/45
!
interface GigabitEthernet2/1/0/46
!
interface GigabitEthernet2/1/0/47
!
interface GigabitEthernet2/1/0/48
!
上方2号交换机，第二层板子，和1号交换机二层板子一样，也都配成服务器网段；
interface GigabitEthernet2/2/0/1
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/2
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/3
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/4
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/5
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/6
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/7
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/8
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/9
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/10
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/11
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/12
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/13
description To Servers
switchport access vlan 6
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/14
description To Servers
switchport access vlan 6
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/15
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/16
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/17
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/18
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/19
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/20
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/21
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/22
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/23
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/24
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/25
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/26
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/27
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/28
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/29
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/30
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/31
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/32
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/33
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/34
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/35
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/36
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/37
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/38
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/39
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/40
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/41
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/42
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/43
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/44
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/45
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/46
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/47
description To Servers
switchport access vlan 2
switchport mode access
spanning-tree portfast
!
interface GigabitEthernet2/2/0/48
description Testing device Required by Steven
switchport access vlan 80
switchport mode access
spanning-tree portfast
!
上方2号交换机，第三层板子的配置部分；
interface TenGigabitEthernet2/3/0/1
stackwise-virtual link 1
description Connect_To_1/3/0/1_Stack_Data_port
!
interface TenGigabitEthernet2/3/0/2
stackwise-virtual dual-active-detection
description Connect_To_1/3/0/2_Stack_DaD_port
!
interface TenGigabitEthernet2/3/0/3
stackwise-virtual link 1
description Connect_To_1/3/0/3_Stack_Data_port
!
interface TenGigabitEthernet2/3/0/4
stackwise-virtual link 1
description Connect_To_1/3/0/4_Stack_Data_port
!
interface TenGigabitEthernet2/3/0/5
!
interface TenGigabitEthernet2/3/0/6
!
interface TenGigabitEthernet2/3/0/7
!
interface TenGigabitEthernet2/3/0/8
!
interface FortyGigabitEthernet2/3/0/9
!
interface FortyGigabitEthernet2/3/0/10
!
上方2号交换机，第五层板子的配置部分；
interface TenGigabitEthernet2/5/0/1
channel-group 1 mode active
!
interface TenGigabitEthernet2/5/0/2
channel-group 2 mode active
!
interface TenGigabitEthernet2/5/0/3
channel-group 3 mode active
!
interface TenGigabitEthernet2/5/0/4
channel-group 4 mode active
!
interface TenGigabitEthernet2/5/0/5
channel-group 5 mode active
!
interface TenGigabitEthernet2/5/0/6
channel-group 6 mode active
!
interface TenGigabitEthernet2/5/0/7
!
interface TenGigabitEthernet2/5/0/8
!
interface TenGigabitEthernet2/5/0/9
!
interface TenGigabitEthernet2/5/0/10
!
interface TenGigabitEthernet2/5/0/11
!
interface TenGigabitEthernet2/5/0/12
!
interface TenGigabitEthernet2/5/0/13
!
interface TenGigabitEthernet2/5/0/14
!
interface TenGigabitEthernet2/5/0/15
!
interface TenGigabitEthernet2/5/0/16
!
interface TenGigabitEthernet2/5/0/17
!
interface TenGigabitEthernet2/5/0/18
!
interface TenGigabitEthernet2/5/0/19
!
interface TenGigabitEthernet2/5/0/20
!
interface TenGigabitEthernet2/5/0/21
!
interface TenGigabitEthernet2/5/0/22
!
interface TenGigabitEthernet2/5/0/23
!
interface TenGigabitEthernet2/5/0/24
!
以下vlan配置部分：
interface Vlan1
ip address 10.200.0.1 255.255.255.0
!
interface Vlan2
ip address 10.200.2.1 255.255.255.0
!
vlan3的DHCP服务器 配置有错误，10.200.1.205 应该修改为 10.200.2.79；
该vlan是为公司 有线上网终端准备；IP横跨 10.200.8.X，10.200.9.X，10.200.10.X，10.200.11.X网段
interface Vlan3
ip address 10.200.8.1 255.255.252.0
ip helper-address 10.200.2.80
ip helper-address 10.200.1.205
ip wccp web-cache redirect in
!
interface Vlan4
no ip address
!
interface Vlan6
ip address 10.200.6.1 255.255.255.0
no ip redirects
!
interface Vlan7
ip address 10.200.44.1 255.255.252.0
ip helper-address 10.200.2.79
!
interface Vlan8
ip address 10.200.48.1 255.255.252.0
ip helper-address 10.200.2.79
!
interface Vlan11
no ip address
!
interface Vlan12
no ip address
!
TS服务器的VLAN，连接机房内TS部门的服务器；
interface Vlan20
ip address 192.168.0.1 255.255.255.0
!
实验VLAN，以及TS机房的VLAN；
interface Vlan80
ip address 10.200.80.1 255.255.255.0
!
VOIP电话的VLAN
interface Vlan90
ip address 10.200.40.1 255.255.255.0
ip helper-address 10.200.2.79
!
CCTV监控系统的VLAN
interface Vlan91
description IP Cammera
ip address 10.200.54.1 255.255.255.0
!
网络管理的VLAN
interface Vlan200
ip address 10.200.52.1 255.255.255.0
ip helper-address 10.200.2.79
!
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
以下是路由信息；
--所有通往internet网段的流量都路由到防火墙上
ip route 0.0.0.0 0.0.0.0 10.200.0.210
--通往卫星设备网段10.20.1.X的流量路由到路由器 10.200.0.250上
ip route 10.20.1.0 255.255.255.0 10.200.0.250
ip route 10.90.0.0 255.255.0.0 10.200.0.210
ip route 10.90.30.0 255.255.255.0 10.200.0.210
--通往网段10.100.X.X的流量路由到路由器 10.200.0.250上
ip route 10.100.0.0 255.255.0.0 10.200.0.250
ip route 10.100.30.0 255.255.255.0 10.200.0.210
ip route 10.100.36.0 255.255.255.0 10.200.0.210
--通往油田网段的流量路由到路由器 10.200.0.250上
ip route 10.210.0.0 255.255.0.0 10.200.0.250
ip route 10.220.0.0 255.255.0.0 10.200.0.250
ip route 10.230.0.0 255.255.0.0 10.200.0.250
ip route 10.230.0.0 255.255.255.0 10.200.0.250
ip route 10.230.90.0 255.255.255.0 10.200.0.250
ip route 192.168.2.0 255.255.255.0 10.200.0.250
!
!
!
access-list 1 permit 10.200.80.0 0.0.0.255
!
SNMP协议社区名称为gpocss，配置成只读；
snmp-server community gpocss RO
!
!
control-plane
service-policy input system-cpp-policy
!
!
line con 0
privilege level 15
stopbits 1
line aux 0
stopbits 1
line vty 0 4
privilege level 15
login local
!
!
以下两行为无线准入监控配置，让infoGo监控无线vlan7和8；并把1/1/0/46配置成监听镜像端口；
monitor session 1 source vlan 7 - 8
monitor session 1 destination interface Gi1/1/0/46
将ntp服务器配置成 10.200.6.5
ntp server 10.200.6.5 prefer
!
!
!
!
!
end
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#
SYINSH_HQ_CSW_9407#