Switch#
Switch#
Switch#
Switch#
Switch#sh run
Building configuration...

Current configuration : 4204 bytes
!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Switch
!
!
no aaa new-model
ip subnet-zero
ip routing
ip name-server 202.144.50.13
ip name-server 202.144.50.4
ip name-server 4.2.2.2
ip name-server 4.2.2.1
!
!
!
!no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending

interface FastEthernet0/1
 no switchport
 no ip address
spanning-tree portfast
  spanning-tree bpduguard enable
 
interface FastEthernet0/2
switchport access vlan 10
 switchport mode access
 spanning-tree portfast
  spanning-tree bpduguard enable

interface FastEthernet0/3
  switchport access vlan 10
  switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/4
 switchport access vlan 10
 switchport mode access
  spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/5
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/6
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
spanning-tree bpduguard enable
interface FastEthernet0/7
switchport access vlan 10
switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/8
 switchport access vlan 10
 switchport mode access
spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/9
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/10
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable
 interface FastEthernet0/11
switchport access vlan 20
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable
 
interface FastEthernet0/12
 switchport access vlan 20
 switchport mode access
  spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/13
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
  spanning-tree bpduguard enable
 
interface FastEthernet0/14
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/15
 switchport access vlan 30
 switchport mode access
spanning-tree portfast
  spanning-tree bpduguard enable

interface FastEthernet0/16
 switchport access vlan 30
 switchport mode access
spanning-tree portfast
 spanning-tree bpduguard enable
 
interface FastEthernet0/17
 switchport access vlan 30
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable

interface FastEthernet0/18
  switchport access vlan 30
 switchport mode access
 spanning-tree portfast
  spanning-tree bpduguard enable

interface FastEthernet0/19
 switchport access vlan 30
 switchport mode access
 spanning-tree portfast
 spanning-tree bpduguard enable
interface FastEthernet0/20

interface FastEthernet0/21

interface FastEthernet0/22

interface FastEthernet0/23

interface FastEthernet0/24
 switchport access vlan 40
 switchport trunk encapsulation dot1q
  switchport mode trunk
interface GigabitEthernet0/1

interface GigabitEthernet0/2

interface Vlan1
 ip address 192.168.1.254 255.255.255.0
interface Vlan10
 ip address 192.168.10.1 255.255.255.0
 ip access-group 101 in

interface Vlan20
  ip address 192.168.20.1 255.255.255.0
  ip access-group 102 in

 interface Vlan30
 description soc vlan
  ip address 192.168.30.1 255.255.255.0

interface Vlan40
 ip address 172.16.2.2 255.255.255.0
 
ip default-gateway 192.168.1.1
ip classless
 ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip http server
 
access-list 101 permit ip 192.168.10.0 0.0.0.255 192.168.10.0 0.0.0.255
access-list 101 permit ip 192.168.10.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 101 permit ip 192.168.10.0 0.0.0.255 192.168.30.0 0.0.0.255
access-list 102 permit ip 192.168.20.0 0.0.0.255 192.168.20.0 0.0.0.255
access-list 102 deny   ip 192.168.20.0 0.0.0.255 192.168.10.0 0.0.0.255
 control-plane
 line con 0
line vty 0 4
  no login
line vty 5 15
  no login
 
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#
Switch#