Home > Others

CISCO3750 configuration (production environment)

Source: Internet
Author: User
Tags snmp
Developer on Alibaba Coud: Build your first app with APIs, SDKs, and tutorials on the Alibaba Cloud. Read more ＞

!
Version 12.2
No service pad
Service Timestamps Debug datetime localtime
Service Timestamps log datetime localtime
Service Password-encryption
!
Hostname beijiao3750
!
Boot-start-marker
Boot-end-marker
!
No logging console
Enable Secret 5 $1$asmc$obsenmme6xqdrv6321rve1
Enable password 7 030752180500721b1b59090404011c03162ae
!
!
!
No AAA New-model
Clock timezone Beijing 8
Switch 1 provision ws-c3750g-12s
System MTU Routing 1500
IP Routing
No IP domain-lookup
IP name-server 192.168.100.100
No IP DHCP conflict logging
IP dhcp excluded-address 192.168.198.0
IP dhcp excluded-address 192.168.198.255
IP dhcp excluded-address 192.168.199.0
IP dhcp excluded-address 192.168.198.1 192.168.198.50
!
IP DHCP Pool Beijiao
Network 192.168.198.0 255.255.254.0
Default-router 192.168.199.254
Dns-server 202.98.0.68 202.98.5.68
Lease 0 1
!
!
IP DHCP snooping VLAN 109
No ip DHCP snooping information option
IP DHCP snooping
ip arp inspection VLAN 109
ip arp inspection filter beijiao VLAN 109
IPv6 unicast-routing
!
MLS QoS
!
Crypto PKI Trustpoint tp-self-signed-2705099264
Enrollment selfsigned
Subject-name cn=ios-self-signed-certificate-2705099264
Revocation-check None
Rsakeypair tp-self-signed-2705099264
!
!
Crypto PKI certificate chain tp-self-signed-2705099264
Certificate self-signed 01
30820244 308201AD A0030201 02020101 300d0609 2a864886 f70d0101 04050030
31312F30 2d060355 04031326 494f532d 53656c66 2d536967 6e65642d 43657274
69666963 6174652D 32373035 30393932 3634301E 170d3933 30333031 30303031
34335a17 0d323030 31303130 30303030 305a3031 312f302d 06035504 03132649
4f532d53 656c662d 5369676E 65642d43 65727469 66696361 74652d32 37303530
39393236 3430819F 300d0609 2a864886 f70d0101 01050003 818d0030 81890281
8100ca53 dd5dbb4f 50ce86e1 f9d56795 99b22464 ad20dc15 5c641635 CF1200AD
121033f4 5c833da4 e2138fb1 c9d38453 b7a60505 e7eb5435 3b3abd73 87e0dc58
f2a7424a 9d7e1e26 d3a507b7 ebd96fe3 304184f2 367ce517 6524357C 2b4ee5c5
08776685 1a19d201 1b63aa7c 3f360051 43256218 b7517abf e9c2d94f 93701f97
65950203 010001a3 6c306a30 0f060355 1d130101 FF040530 030101FF 30170603
551d1104 10300E82 0c626569 6a69616f 33373530 2e301f06 03551d23 04183016
80147b7a 802dae52 2c369c7b 53e2e827 86306934 e984301d 0603551D 0E041604
147B7A80 2dae522c 369c7b53 e2e82786 306934E9 84300d06 092a8648 86f70d01
01040500 03818100 9a64c55e 8fa1357d 42f2bab3 1d2e14a1 b80eeb47 327b9d7b
E97F2DCA a418b0c6 fe48522a e2f69c86 0d4f25af 80559994 B8877962 adc3090b
9cbe026c cab1212f acb00db9 d5585da5 d037a1b2 c1e468e4 0772BBCC dacffe4d
33aedb37 24366ac2 ea7a55a9 dcbebdbe d53c4154 45a07d4f 840ed964 04996897
7a7ae69a 6EE310BA
Quit
!
!
!
errdisable recovery Cause UDLD
errdisable recovery Cause Bpduguard
errdisable recovery Cause security-violation
errdisable recovery cause channel-misconfig (STP)
errdisable recovery Cause Pagp-flap
errdisable recovery Cause Dtp-flap
errdisable recovery Cause Link-flap
errdisable recovery Cause Sfp-config-mismatch
errdisable recovery Cause Gbic-invalid
errdisable recovery Cause L2ptguard
errdisable recovery Cause psecure-violation
errdisable recovery Cause Dhcp-rate-limit
errdisable recovery Cause Vmps
errdisable recovery Cause Storm-control
errdisable recovery Cause Inline-power
errdisable recovery Cause arp-inspection
errdisable recovery cause loopback
!
Spanning-tree Mode Pvst
Spanning-tree portfast Default
Spanning-tree Extend System-id
Spanning-tree VLAN 1,109,602 Priority 24576
!
VLAN internal allocation policy ascending
!
!
Class-map Match-all CLASSLIMITUDP
Match Access-group name Limitudp
!
!
Policy-map POLICYLIMITUDP
Class CLASSLIMITUDP
Police 100000 8000 exceed-action Drop
!
!
!
!
Interface Tunnel0
No IP address
!
Interface GIGABITETHERNET1/0/1
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Spanning-tree Portfast
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/2
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/3
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/4
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/5
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/6
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/7
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/8
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/9
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection limit None
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/10
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
IPv6 Traffic-filter Access_port in
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/11
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
IPv6 Traffic-filter Access_port in
Spanning-tree Portfast Trunk
Service-policy input POLICYLIMITUDP
!
Interface GIGABITETHERNET1/0/12
Switchport Trunk Encapsulation dot1q
Switchport mode Trunk
ip arp inspection trust
IPv6 Traffic-filter Access_port in
Spanning-tree Bpdufilter Enable
!
Interface Vlan1
IP address 192.168.100.70 255.255.255.128
IPv6 address 1001:cc0:2020:1::3/64
IPv6 enable
ipv6th ra Suppress
IPv6 OSPF 1 Area 0
!
Interface Vlan109
IP address 192.168.199.254 255.255.254.0
IPv6 address 1001:cc0:2020:3001::1/64
IPv6 enable
ipv6th router-preference High
IPv6 OSPF 1 Area 0
!
Router OSPF 1
Log-adjacency-changes
Passive-interface Default
No Passive-interface Vlan1
Network 192.168.199.254 0.0.0.0 Area 0
Network 192.168.100.70 0.0.0.0 Area 0
!
No IP HTTP Server
IP HTTP access-class 10
IP http secure-server
!
!
IP Access-list Extended limitudp
Deny UDP any any EQ domain bootpc Bootps SNMP snmptrap
Deny IP 192.168.100.0 0.0.0.255 any
Deny IP any 192.168.100.0 0.0.0.255
Deny UDP host 192.168.198.10 any
Deny UDP any host 192.168.30.71
Permit UDP any any
IP Access-list Extended Match_all
Permit IP any any
!
IP SLA Enable Reaction-alerts
Logging 192.168.100.45
Access-list Permit 192.168.100.0 0.0.0.255
Access-list Permit IP host 192.168.198.1 host 192.168.30.70
Access-list Permit IP host 192.168.30.70 host 192.168.198.1
Access-list + deny UDP any any EQ 1434
Access-list + deny UDP any any EQ 1433
Access-list + deny TCP any any EQ 135
Access-list + deny UDP any any EQ 135
Access-list + deny UDP any any EQ netbios-ns
Access-list + deny UDP any any EQ NETBIOS-DGM
Access-list + deny TCP any any EQ 139
Access-list + deny UDP any any EQ netbios-ss
Access-list + deny TCP any any EQ 445
Access-list + deny TCP any any EQ 593
Access-list + deny TCP any any EQ 3389
Access-list + deny TCP any any EQ 1025
Access-list + deny TCP any any EQ 2745
Access-list + deny TCP any any EQ 3127
Access-list + deny TCP any any EQ 6129
Access-list + deny TCP any any EQ 4444
Access-list + deny TCP any any EQ 5554
Access-list + deny TCP any any EQ 9996
Access-list + deny TCP any any EQ 1068
Access-list + deny UDP any any EQ 8000
Access-list + deny ICMP any any
Access-list Permit IP any any
!
ARP access-list Beijiao
Permit IP host 192.168.198.1 mac host 001c.25c9.dfdb
Permit IP host 192.168.198.2 mac host 00e0.b800.0570 log
ARP 192.168.198.1 001c.25c9.dfdb ARPA
ARP 192.168.198.2 00e0.b800.0580 ARPA
IPv6 router OSPF 1
Log-adjacency-changes
!
!
!
Snmp-server Community Rcode RO 10
Snmp-server Community Public RO
Snmp-server Enable traps TTY
Snmp-server Enable traps License
Snmp-server Enable traps stpx root-inconsistency loop-inconsistency
SNMP Ifmib ifindex persist
!
IPv6 access-list Access_port
Remark Block all traffic DHCP server-Client
Deny UDP any EQ 547 any EQ 546
Remark Block Router Advertisements
Deny ICMP any any router-advertisement
Permit IPv6 any
!
IPv6 access-list Vty-v6-acl
Permit IPv6 1001:cc0:2020:1::/64 1001:CC0:2020:1::/64
Permit IPv6 1001:cc0:2020:1001::/64 1001:CC0:2020:1::/64
!
!
Line con 0
Line vty 0 4
Access-class Ten in
Password 7 01100f1758045558741c5e080a16001d19058
IPv6 Access-class Vty-v6-acl in
Login
Line Vty 5 15
Access-class Ten in
Password 7 01100f1758045558741c5e080a16001d19058
IPv6 Access-class Vty-v6-acl in
Login
!
NTP clock-period 36028805
NTP server 192.168.100.45
End

CISCO3750 configuration (production environment)

This article is an English version of an article which is originally in the Chinese language on aliyun.com and is provided for information purposes only. This website makes no representation or warranty of any kind, either expressed or implied, as to the accuracy, completeness ownership or reliability of the article or any translations thereof. If you have any concerns or complaints relating to the article, please send an email, providing a detailed description of the concern or complaint, to info-contact@alibabacloud.com. A staff member will contact you within 5 working days. Once verified, infringing content will be removed immediately.

Related Keywords:
php production wamp production docker production configuration film production plan template lo maximo production downloads adobe audition music production

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

What's Trending
Top 10 Tags
datastax versions naming convention zookeeper client class definition md5 microsoft sql server 2005 data structures exception handling error handling
Top 10 Keywords
microsoft download center down wordpress address url site address url wordpress address url windows installer 4 0 download 302 not found web address url definition site address url wordpress db2 integer mac os installation step by step pdf abbreviation for return

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

Get Started for Free

  • Sales Support

    1 on 1 presale consultation

    Chat Contact Sales

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

    Open a Ticket

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.

    Learn More