config-file-header
switch51fe6c
v1.3.7.18 / R750_NIK_1_35_647_358
CLI v1.0
set system mode switch 

file SSD indicator encrypted
@
ssd-control-start 
ssd config 
ssd file passphrase control unrestricted 
no ssd file integrity control 
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0 
!
vlan database
vlan 150,170,200 
exit
voice vlan id 200 
voice vlan state auto-enabled 
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
dot1x system-auth-control
hostname switch51fe6c
encrypted radius-server host 192.168.0.222 key w54SKiyS8pPfpInNRe789JFfEuTzysH1HuiV16ZcTe4= usage dot1.x 
radius-server retransmit 10
radius-server timeout 30
logging buffered debugging 
logging file debugging
aaa accounting dot1x start-stop group radius
no passwords complexity enable 
username cisco password encrypted da39a3ee5e6b4b0d3255bfef95601890afd80709 privilege 15 
ip ssh server
clock timezone " " 1
clock source sntp
sntp unicast client enable
sntp unicast client poll
sntp server 192.168.0.150 
!
interface vlan 1
 ip address 192.168.0.100 255.255.255.0 
!
interface vlan 150
 name guest 
 dot1x guest-vlan 
!
interface vlan 170
 name voice_radius 
!
interface vlan 200
 name voice_default 
!
interface gigabitethernet1
 dot1x violation-mode protect trap 10 
 dot1x max-req 10 
 dot1x reauthentication 
 dot1x timeout quiet-period 10 
 dot1x port-control auto 
!
interface gigabitethernet2
 dot1x guest-vlan enable 
 dot1x reauthentication 
 dot1x authentication 802.1x mac 
 dot1x radius-attributes vlan 
 dot1x port-control auto 
 storm-control broadcast enable 
 storm-control broadcast level 10 
 storm-control include-multicast 
 port security max 10 
 port security mode max-addresses 
 spanning-tree portfast 
 switchport trunk allowed vlan add 200 
 lldp optional-tlv sys-cap 
 lldp optional-tlv 802.1 pvid disable 
 lldp med enable network-policy location poe-pse inventory
 macro description ip_phone_desktop
 !next command is internal.
 macro auto smartport dynamic_type unknown 
!
interface gigabitethernet5
 port monitor GigabitEthernet 2 
 port monitor GigabitEthernet 6 
!
exit