version 15.0
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime
service timestamps log datetime msec localtime show-timezone year
service password-encryption
service sequence-numbers
no service dhcp
!
hostname SW-02
!
boot-start-marker
boot-end-marker
!
!
logging buffered 65536 informational
logging console notifications
!
!
clock timezone CST -6 0
clock summer-time CDT recurring
system mtu routing 1500
vtp mode transparent
authentication mac-move permit
no ip source-route
ip routing
no ip domain-lookup
ip domain-name deltacard.com
!
ip vrf MGT
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 200
 name WEB_Access
!
vlan 300
 remote-span
!
vlan 888
 name Native
!
vlan 999
 name Parking
!
ip tftp source-interface FastEthernet0/30
ip ssh time-out 30
ip ssh authentication-retries 1
ip ssh source-interface FastEthernet0/30
ip ssh logging events
ip ssh version 2
!
!
!
interface FastEthernet0/1
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/2
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/3
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/4
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/5
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/6
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/7
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/8
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/9
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/10
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/11
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/12
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/13
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/14
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/15
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/16
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/17
 description FW-02-2 | e0/0 Outside
 switchport access vlan 200
 switchport mode access
 duplex full
 spanning-tree portfast
!
interface FastEthernet0/18
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/19
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/20
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/21
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/22
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/23
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/24
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/25
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/26
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/27
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/28
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/29
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/30
 description MGMT | CORE-SW | Gi7/5
 no switchport
 ip vrf forwarding MGT
 ip address 10.10.100.103 255.255.255.0
 ip access-group MGT_ACCESS in
 no ip redirects
 no ip proxy-arp
!
interface FastEthernet0/31
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/32
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/33
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/34
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/35
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/36
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/37
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/38
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/39
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/40
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/41
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/42
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/43
 description FW-01-2 | Gi0/0
 switchport access vlan 200
 switchport mode access
 duplex full
 spanning-tree portfast
!
interface FastEthernet0/44
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/45
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/46
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/47
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet0/48
 description RT-01 | Gi0/1
 switchport access vlan 200
 switchport mode access
 spanning-tree portfast
!
interface GigabitEthernet0/1
 description SW-01 | Gi0/1
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 200,300
 switchport mode trunk
!
interface GigabitEthernet0/2
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet0/3
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet0/4
 switchport access vlan 999
 switchport mode access
 switchport nonegotiate
 shutdown
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan200
 no ip address
!
no ip http server
no ip http secure-server
!
!
ip route vrf MGT 10.10.10.0 255.255.0.0 10.10.100.1
ip route vrf MGT 10.10.25.0 255.255.255.0 10.10.100.1
!
!
ip sla enable reaction-alerts
logging history informational
!
!
!
line con 0
 exec-timeout 5 0
 logging synchronous
line vty 0 4
 access-class VTY_ACCESS in vrf-also
 exec-timeout 5 0
 logging synchronous
 transport input ssh
 transport output none
line vty 5 15
 access-class VTY_ACCESS in vrf-also
 exec-timeout 5 0
 logging synchronous
 transport input ssh
 transport output none
!
!
monitor session 1 source vlan 200
monitor session 1 destination remote vlan 300 
end