! ! Last configuration change at 08:14:54 UTC Wed Sep 3 2008 by support ! NVRAM config last updated at 14:56:16 UTC Sat Aug 23 2008 by support ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime service password-encryption service compress-config ! hostname INHYDAGL-CORE-01 ! boot-start-marker boot-end-marker ! logging buffered 16384 warnings enable secret 5 $1$UK9t$DqIwjjDT96BNjXVM37Vps0 ! aaa new-model ! aaa session-id common vtp mode transparent ip subnet-zero no ip domain-lookup ip dhcp excluded-address 10.138.75.129 10.138.75.131 ip dhcp excluded-address 10.138.75.1 10.138.75.3 ip dhcp excluded-address 10.138.74.193 10.138.74.195 ip dhcp excluded-address 10.138.76.1 10.138.76.3 ip dhcp excluded-address 10.138.77.129 10.138.77.134 ip dhcp excluded-address 10.138.77.161 10.138.77.166 ip dhcp excluded-address 10.138.77.110 10.138.77.123 ip dhcp excluded-address 192.168.100.1 192.168.100.3 ! ip dhcp pool A-V13 network 10.138.75.128 255.255.255.128 default-router 10.138.75.129 dns-server 172.16.0.4 172.16.0.5 ! ip dhcp pool A-V12 network 10.138.75.0 255.255.255.128 default-router 10.138.75.1 dns-server 172.16.0.4 172.16.0.5 ! ip dhcp pool A-V11 network 10.138.74.192 255.255.255.192 default-router 10.138.74.193 dns-server 172.16.0.4 172.16.0.5 ! ip dhcp pool A-V16 network 10.138.77.128 255.255.255.224 default-router 10.138.77.129 dns-server 172.16.0.4 172.16.0.5 ! ip dhcp pool A-V17 network 10.138.77.160 255.255.255.224 default-router 10.138.77.161 dns-server 172.16.0.4 172.16.0.5 ! ip dhcp pool A-V18 network 192.168.100.0 255.255.255.192 default-router 192.168.100.1 ! ! no file verify auto ! spanning-tree mode rapid-pvst spanning-tree extend system-id power redundancy-mode redundant ! ! ! vlan internal allocation policy ascending ! vlan 10 name Management ! vlan 11 name IT ! vlan 12 name Development ! vlan 13 name BPO ! vlan 14 name Voice ! vlan 15 name Server ! vlan 16 name Wireless ! vlan 17 name Wireless-Guest ! vlan 18 name sadf ! vlan 50 name connected-firewall ! class-map match-all voip description "IP Phone Traffic" match access-group 110 class-map match-any signal description "Signalling Traffic" match access-group 111 ! ! policy-map Voice-signal class signal class voip set ip precedence 5 ! ! interface GigabitEthernet1/1 shutdown ! interface GigabitEthernet1/2 shutdown ! interface GigabitEthernet2/1 description *****Connected to Access-Switch-1***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/2 description *****Connected to Access-Switch-2***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/3 switchport trunk encapsulation dot1q switchport mode trunk shutdown ! interface GigabitEthernet2/4 description *****Connected to Access-Switch-4***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/5 description *****Connected to Access-Switch-5***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/6 description *****Connected to Access-Switch-6***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/7 description *****connected to Access-Switch-3****** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet2/8 shutdown ! interface GigabitEthernet2/9 shutdown ! interface GigabitEthernet2/10 shutdown ! interface GigabitEthernet2/11 shutdown ! interface GigabitEthernet2/12 shutdown ! interface GigabitEthernet2/13 shutdown ! interface GigabitEthernet2/14 shutdown ! interface GigabitEthernet2/15 shutdown ! interface GigabitEthernet2/16 shutdown ! interface GigabitEthernet2/17 shutdown ! interface GigabitEthernet2/18 shutdown ! interface GigabitEthernet2/19 shutdown ! interface GigabitEthernet2/20 shutdown ! interface GigabitEthernet2/21 shutdown ! interface GigabitEthernet2/22 shutdown ! interface GigabitEthernet2/23 description *****connected to MPLS Router***** switchport access vlan 15 ! interface GigabitEthernet2/24 description *****Connected to Core-2***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet3/1 description *****Connected to ASA5520-BT-ISP***** switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet3/2 switchport access vlan 15 switchport mode access ! interface GigabitEthernet3/3 description *****connected to VG***** switchport access vlan 15 switchport mode access ! interface GigabitEthernet3/4 switchport access vlan 15 switchport mode access shutdown ! interface GigabitEthernet3/5 shutdown ! interface GigabitEthernet3/6 shutdown ! interface GigabitEthernet3/7 shutdown ! interface GigabitEthernet3/8 shutdown ! interface GigabitEthernet3/9 shutdown ! interface GigabitEthernet3/10 shutdown ! interface GigabitEthernet3/11 shutdown ! interface GigabitEthernet3/12 shutdown ! interface GigabitEthernet3/13 shutdown ! interface GigabitEthernet3/14 shutdown ! interface GigabitEthernet3/15 shutdown ! interface GigabitEthernet3/16 shutdown ! interface GigabitEthernet3/17 shutdown ! interface GigabitEthernet3/18 shutdown ! interface GigabitEthernet3/19 shutdown ! interface GigabitEthernet3/20 shutdown ! interface GigabitEthernet3/21 shutdown ! interface GigabitEthernet3/22 shutdown ! interface GigabitEthernet3/23 shutdown ! interface GigabitEthernet3/24 description *****Connected to Core-2***** switchport trunk encapsulation dot1q switchport mode trunk ! interface Vlan1 ip address dhcp no ip proxy-arp no ip redirects no ip unreachables ! interface Vlan10 description *****Management***** ip address 10.138.74.130 255.255.255.192 no ip proxy-arp no ip redirects no ip unreachables standby 10 ip 10.138.74.129 standby 10 priority 110 standby 10 preempt ! interface Vlan11 description *****IT***** ip address 10.138.74.194 255.255.255.192 no ip proxy-arp no ip redirects no ip unreachables standby 11 ip 10.138.74.193 standby 11 priority 110 standby 11 preempt ! interface Vlan12 description *****Development***** ip address 10.138.75.2 255.255.255.128 no ip proxy-arp no ip redirects no ip unreachables standby 12 ip 10.138.75.1 standby 12 priority 110 standby 12 preempt ! interface Vlan13 description *****BPO***** ip address 10.138.75.130 255.255.255.128 no ip proxy-arp no ip redirects no ip unreachables standby 13 ip 10.138.75.129 standby 13 preempt ! interface Vlan14 description *****Voice***** ip address 10.138.76.2 255.255.255.0 no ip proxy-arp no ip redirects no ip unreachables ip helper-address 10.138.77.101 standby 14 ip 10.138.76.1 standby 14 preempt ! interface Vlan15 description *****Server***** ip address 10.138.77.2 255.255.255.128 no ip proxy-arp no ip redirects no ip unreachables standby 15 ip 10.138.77.1 standby 15 preempt ! interface Vlan16 description *****Wireless***** ip address 10.138.77.130 255.255.255.224 no ip proxy-arp no ip redirects no ip unreachables standby 16 ip 10.138.77.129 standby 16 preempt ! interface Vlan17 ip address 10.138.77.162 255.255.255.224 no ip proxy-arp no ip redirects no ip unreachables ip access-group 117 in standby 17 ip 10.138.77.161 standby 17 preempt ! interface Vlan18 ip address 192.168.100.2 255.255.255.192 no ip proxy-arp no ip redirects no ip unreachables standby 18 ip 192.168.100.1 standby 18 priority 110 standby 18 preempt ! interface Vlan50 ip address 10.138.74.10 255.255.255.240 no ip proxy-arp no ip redirects no ip unreachables standby 50 ip 10.138.74.9 standby 50 preempt ! ip route 0.0.0.0 0.0.0.0 10.138.74.3 ip route 10.64.0.0 255.255.255.0 10.138.77.95 ip route 10.138.0.0 255.255.0.0 10.138.77.95 ip route 10.138.64.0 255.255.248.0 10.138.77.95 ip route 10.138.72.0 255.255.254.0 10.138.77.95 ip route 10.138.78.0 255.255.254.0 10.138.77.95 ip route 10.138.80.0 255.255.248.0 10.138.77.95 ip route 172.16.0.0 255.255.0.0 10.138.74.3 no ip http server ! ! logging source-interface Vlan10 access-list 100 deny ip 10.138.77.0 0.0.0.224 any access-list 100 permit tcp 10.138.77.0 0.0.0.224 any eq www access-list 117 deny ip 10.138.77.160 0.0.0.31 10.138.77.0 0.0.0.127 access-list 117 deny ip 10.138.77.160 0.0.0.31 10.138.76.0 0.0.0.255 access-list 117 deny ip 10.138.77.160 0.0.0.31 10.138.75.0 0.0.0.255 access-list 117 deny ip 10.138.77.160 0.0.0.31 10.138.74.0 0.0.0.255 access-list 117 permit ip any any !