!
! Sample configuration published at netrosetta.com.
! Invented for the purpose. Addresses are RFC 5737 documentation ranges.
!
version 15.2
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SAMPLE-ACCESS-SW-01
!
boot-start-marker
boot-end-marker
!
no aaa new-model
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 3:00
!
switch 1 provision ws-c2960x-48fpd-l
!
ip domain-name campus.example.com
no ip domain-lookup
ip name-server 192.0.2.53
ip name-server 192.0.2.54
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 10,20,30 priority 24576
spanning-tree vlan 40,99 priority 28672
!
vtp mode transparent
!
vlan 10
 name USERS
!
vlan 20
 name VOICE
!
vlan 30
 name PRINTERS
!
vlan 40
 name WIFI-CORP
!
vlan 50
 name WIFI-GUEST
!
vlan 99
 name MGMT
!
interface range GigabitEthernet1/0/1-24
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 switchport port-security maximum 3
 switchport port-security violation restrict
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/25
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/26
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/27
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/28
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/29
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/30
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/31
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/32
 description USER-ACCESS
 switchport mode access
 switchport access vlan 10
 switchport voice vlan 20
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/33
 description PRINTER
 switchport mode access
 switchport access vlan 30
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/34
 description PRINTER
 switchport mode access
 switchport access vlan 30
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/35
 description PRINTER
 switchport mode access
 switchport access vlan 30
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/36
 description PRINTER
 switchport mode access
 switchport access vlan 30
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/37
 description WIRELESS-AP
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 99
 switchport trunk allowed vlan 40,50,99
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/38
 description WIRELESS-AP
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 99
 switchport trunk allowed vlan 40,50,99
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/39
 description WIRELESS-AP
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 99
 switchport trunk allowed vlan 40,50,99
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/40
 description WIRELESS-AP
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 99
 switchport trunk allowed vlan 40,50,99
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet1/0/41
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/42
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/43
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/44
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/45
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/46
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/47
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface GigabitEthernet1/0/48
 description SPARE
 switchport mode access
 switchport access vlan 999
 shutdown
!
interface Port-channel1
 description UPLINK-TO-CORE
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30,40,50,99
!
interface TenGigabitEthernet1/1/1
 description UPLINK-TO-CORE
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30,40,50,99
 channel-group 1 mode active
!
interface TenGigabitEthernet1/1/2
 description UPLINK-TO-CORE
 switchport mode trunk
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30,40,50,99
 channel-group 1 mode active
!
interface Vlan99
 description MANAGEMENT
 ip address 192.0.2.11 255.255.255.0
 no shutdown
!
interface Vlan10
 description USERS-GATEWAY
 ip address 198.51.100.1 255.255.255.0
 ip helper-address 192.0.2.60
!
ip default-gateway 192.0.2.1
ip http server
ip http secure-server
!
ip access-list standard MGMT-ACCESS
 permit 192.0.2.0 0.0.0.255
 deny   any log
!
logging host 192.0.2.70
logging trap informational
!
ntp server 192.0.2.80 prefer
ntp server 192.0.2.81
!
snmp-server community REPLACE-BEFORE-USE RO MGMT-ACCESS
snmp-server location Building A, Floor 2, Rack 4
snmp-server contact noc@example.com
snmp-server host 192.0.2.90 version 2c REPLACE-BEFORE-USE
!
banner motd ^C
This is a sample configuration published by netrosetta.
It describes no real network.
^C
!
line con 0
 logging synchronous
line vty 0 4
 access-class MGMT-ACCESS in
 transport input ssh
line vty 5 15
 access-class MGMT-ACCESS in
 transport input ssh
!
end