! version 12.2 no service pad service timestamps debug datetime msec localtime show-timezone service timestamps log datetime localtime show-timezone no service password-encryption ! hostname CSW1 ! boot-start-marker boot-end-marker ! logging buffered 16384 logging console warnings enable secret 5 $1$4mWg$eqWTmSlBAh3uQorxo3HYG/ ! username admin secret 5 $1$0up3$16kazjjd6SgWRRQJqWLSd1 aaa new-model ! ! aaa authentication login default local aaa authentication login CONSOLE none aaa authorization exec default local ! ! ! aaa session-id common clock timezone PST -8 clock summer-time PDT recurring system mtu routing 1500 vtp domain TSHOOT vtp mode transparent ip subnet-zero ip routing ip domain-name mgmt.tshoot.local ip name-server 10.1.152.1 no ip dhcp use vrf connected ip dhcp excluded-address 10.1.128.124 10.1.160.126 ip dhcp excluded-address 10.1.128.188 10.1.160.190 ip dhcp excluded-address 10.1.128.252 10.1.160.254 ip dhcp excluded-address 10.1.129.124 10.1.160.126 ip dhcp excluded-address 10.1.129.188 10.1.160.190 ip dhcp excluded-address 10.1.129.252 10.1.160.254 ip dhcp excluded-address 10.1.130.124 10.1.160.126 ip dhcp excluded-address 10.1.130.188 10.1.160.190 ip dhcp excluded-address 10.1.130.252 10.1.160.254 ! ip dhcp pool F1S1-OFFICE network 10.1.128.64 255.255.255.192 default-router 10.1.128.126 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S1-VOICE network 10.1.128.128 255.255.255.192 default-router 10.1.128.190 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S1-GUEST network 10.1.128.192 255.255.255.192 default-router 10.1.128.254 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S2-OFFICE network 10.1.129.64 255.255.255.192 default-router 10.1.129.126 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S2-VOICE network 10.1.129.128 255.255.255.192 default-router 10.1.129.190 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S2-GUEST network 10.1.129.192 255.255.255.192 default-router 10.1.129.254 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S3-OFFICE network 10.1.130.64 255.255.255.192 default-router 10.1.130.126 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S3-VOICE network 10.1.130.128 255.255.255.192 default-router 10.1.130.190 dns-server 10.1.152.1 domain-name tshoot.local ! ip dhcp pool F1S3-GUEST network 10.1.130.192 255.255.255.192 default-router 10.1.130.254 dns-server 10.1.152.1 domain-name tshoot.local ! ! ! ! crypto pki trustpoint TP-self-signed-4156290944 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-4156290944 revocation-check none rsakeypair TP-self-signed-4156290944 ! ! crypto pki certificate chain TP-self-signed-4156290944 certificate self-signed 01 nvram:IOS-Self-Sig#3434.cer ! ! ! errdisable recovery cause bpduguard ! ! archive log config logging enable logging size 50 notify syslog contenttype plaintext hidekeys path tftp://srv1.mgmt.tshoot.local/$h-archive-config write-memory file prompt quiet ! spanning-tree mode rapid-pvst spanning-tree extend system-id spanning-tree vlan 1-15,32-47,64-79,96-111,128-129 priority 24576 spanning-tree vlan 16-31,48-63,80-95,112-127 priority 28672 ! vlan internal allocation policy ascending ! vlan 11 name ISP1 ! vlan 17 name F1S1-OFFICE ! vlan 18 name F1S1-VOICE ! vlan 19 name F1S1-GUEST ! vlan 21 name F1S2-OFFICE ! vlan 22 name F1S2-VOICE ! vlan 23 name F1S2-GUEST ! vlan 25 name F1S3-OFFICE ! vlan 26 name F1S3-VOICE ! vlan 27 name F1S3-GUEST ! vlan 33 name F2S1-OFFICE ! vlan 34 name F2S1-VOICE ! vlan 35 name F2S1-GUEST ! vlan 37 name F2S2-OFFICE ! vlan 38 name F2S2-VOICE ! vlan 39 name F2S2-GUEST ! vlan 41 name F2S3-OFFICE ! vlan 42 name F2S3-VOICE ! vlan 43 name F2S3-GUEST ! vlan 112 name INT-SERVER ! vlan 128 name MGMT ! vlan 129 name TRANSIT ! vlan 1000 name NATIVE ! vlan 1001 name UNUSED ! ip telnet source-interface Vlan128 ip ssh source-interface Vlan128 ! ! ! interface Port-channel1 description Channel to ASW1 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,128 switchport mode trunk switchport nonegotiate ! interface Port-channel10 description Channel to CSW2 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,21-23,25-27,33-35,37-39,41-43,112,128,129 switchport mode trunk switchport nonegotiate ! interface GigabitEthernet0/1 description Channel to ASW1 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,128 switchport mode trunk switchport nonegotiate channel-group 1 mode on ! interface GigabitEthernet0/2 description Channel to ASW1 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,128 switchport mode trunk switchport nonegotiate channel-group 1 mode on ! interface GigabitEthernet0/3 description Channel to CSW2 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,21-23,25-27,33-35,37-39,41-43,112,128,129 switchport mode trunk switchport nonegotiate channel-group 10 mode on ! interface GigabitEthernet0/4 description Channel to CSW2 switchport trunk encapsulation dot1q switchport trunk native vlan 1000 switchport trunk allowed vlan 17-19,21-23,25-27,33-35,37-39,41-43,112,128,129 switchport mode trunk switchport nonegotiate channel-group 10 mode on ! interface GigabitEthernet0/5 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/6 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/7 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown spanning-tree portfast ! interface GigabitEthernet0/8 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/9 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/10 description FE to SRV1 switchport access vlan 112 switchport mode access switchport nonegotiate speed 100 duplex full spanning-tree portfast ! interface GigabitEthernet0/11 description FE to CRO1 no switchport ip address 10.1.192.1 255.255.255.252 speed 100 duplex full ! interface GigabitEthernet0/12 description FE to CRO2 no switchport ip address 10.1.192.5 255.255.255.252 speed 100 duplex full ! interface GigabitEthernet0/13 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/14 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/15 description Vlan ISP1 to IRO1 switchport access vlan 11 switchport mode access switchport nonegotiate speed 100 duplex full spanning-tree portfast ! interface GigabitEthernet0/16 description Vlan TRANSIT to IRO2 switchport access vlan 129 switchport mode access switchport nonegotiate speed 100 duplex full spanning-tree portfast ! interface GigabitEthernet0/17 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/18 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/19 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/20 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/21 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/22 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/23 description Unused switchport access vlan 1001 switchport mode access switchport nonegotiate shutdown ! interface GigabitEthernet0/24 description Metro FE to ISP1 switchport access vlan 11 switchport mode access switchport nonegotiate no cdp enable spanning-tree portfast spanning-tree bpduguard enable ! interface GigabitEthernet0/25 ! interface GigabitEthernet0/26 ! interface GigabitEthernet0/27 ! interface GigabitEthernet0/28 ! interface Vlan1 no ip address shutdown ! interface Vlan17 ip address 10.1.128.124 255.255.255.192 standby 17 ip 10.1.128.126 standby 17 preempt no shutdown ! interface Vlan18 ip address 10.1.128.188 255.255.255.192 standby 18 ip 10.1.128.190 standby 18 preempt no shutdown ! interface Vlan19 ip address 10.1.128.252 255.255.255.192 standby 19 ip 10.1.128.254 standby 19 preempt no shutdown ! interface Vlan21 ip address 10.1.129.124 255.255.255.192 standby 21 ip 10.1.129.126 standby 21 preempt no shutdown ! interface Vlan22 ip address 10.1.129.188 255.255.255.192 standby 22 ip 10.1.129.190 standby 22 preempt no shutdown ! interface Vlan23 ip address 10.1.129.252 255.255.255.192 standby 23 ip 10.1.129.254 standby 23 preempt no shutdown ! interface Vlan25 ip address 10.1.130.124 255.255.255.192 standby 25 ip 10.1.130.126 standby 25 preempt no shutdown ! interface Vlan26 ip address 10.1.130.188 255.255.255.192 standby 26 ip 10.1.130.190 standby 26 preempt no shutdown ! interface Vlan27 ip address 10.1.130.252 255.255.255.192 standby 27 ip 10.1.130.254 standby 27 preempt no shutdown ! interface Vlan33 ip address 10.1.132.124 255.255.255.192 standby 33 ip 10.1.132.126 standby 33 priority 110 standby 33 preempt no shutdown ! interface Vlan34 ip address 10.1.132.188 255.255.255.192 standby 34 ip 10.1.132.190 standby 34 priority 110 standby 34 preempt no shutdown ! interface Vlan35 ip address 10.1.132.252 255.255.255.192 standby 35 ip 10.1.132.254 standby 35 priority 110 standby 35 preempt no shutdown ! interface Vlan37 ip address 10.1.133.124 255.255.255.192 standby 37 ip 10.1.133.126 standby 37 priority 110 standby 37 preempt no shutdown ! interface Vlan38 ip address 10.1.133.188 255.255.255.192 standby 38 ip 10.1.133.190 standby 38 priority 110 standby 38 preempt no shutdown ! interface Vlan39 ip address 10.1.133.252 255.255.255.192 standby 39 ip 10.1.133.254 standby 39 priority 110 standby 39 preempt no shutdown ! interface Vlan41 ip address 10.1.134.124 255.255.255.192 standby 41 ip 10.1.134.126 standby 41 priority 110 standby 41 preempt no shutdown ! interface Vlan42 ip address 10.1.134.188 255.255.255.192 standby 42 ip 10.1.134.190 standby 42 priority 110 standby 42 preempt no shutdown ! interface Vlan43 ip address 10.1.134.252 255.255.255.192 standby 43 ip 10.1.134.254 standby 43 priority 110 standby 43 preempt no shutdown ! interface Vlan112 ip address 10.1.152.252 255.255.255.0 standby 112 ip 10.1.152.254 standby 112 preempt no shutdown ! interface Vlan128 ip address 10.1.159.252 255.255.252.0 standby 128 ip 10.1.159.254 standby 128 priority 110 standby 128 preempt no shutdown ! interface Vlan129 ip address 10.1.192.17 255.255.255.248 no shutdown ! ! router eigrp 1 passive-interface default no passive-interface Vlan129 no passive-interface GigabitEthernet0/11 no passive-interface GigabitEthernet0/12 no auto-summary network 10.1.0.0 0.0.255.255 ! ip classless ip http server ip http secure-server ! ! logging source-interface Vlan128 logging 10.1.152.1 snmp-server community cisco RO snmp-server community san-fran RW snmp-server trap-source Vlan128 snmp-server location TSHOOT Lab Facility snmp-server contact support@mgmt.tshoot.local snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart snmp-server enable traps transceiver all snmp-server enable traps tty snmp-server enable traps eigrp snmp-server enable traps ospf state-change snmp-server enable traps ospf errors snmp-server enable traps ospf retransmit snmp-server enable traps ospf lsa snmp-server enable traps ospf cisco-specific state-change nssa-trans-change snmp-server enable traps ospf cisco-specific state-change shamlink interface-old snmp-server enable traps ospf cisco-specific state-change shamlink neighbor snmp-server enable traps ospf cisco-specific errors snmp-server enable traps ospf cisco-specific retransmit snmp-server enable traps ospf cisco-specific lsa snmp-server enable traps cluster snmp-server enable traps entity snmp-server enable traps cpu threshold snmp-server enable traps power-ethernet group 1 snmp-server enable traps power-ethernet police snmp-server enable traps rep snmp-server enable traps vtp snmp-server enable traps vlancreate snmp-server enable traps vlandelete snmp-server enable traps flash insertion removal snmp-server enable traps port-security snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan snmp-server enable traps envmon fan shutdown supply temperature status snmp-server enable traps bgp snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency snmp-server enable traps config-copy snmp-server enable traps config snmp-server enable traps config-ctid snmp-server enable traps event-manager snmp-server enable traps hsrp snmp-server enable traps ipmulticast snmp-server enable traps msdp snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message snmp-server enable traps bridge newroot topologychange snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency snmp-server enable traps syslog snmp-server enable traps rtr snmp-server enable traps mvpn snmp-server enable traps mac-notification change move threshold snmp-server enable traps vlan-membership snmp-server enable traps errdisable snmp-server host 10.1.152.1 version 2c cisco snmp ifmib ifindex persist ! control-plane ! banner motd ^C ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + + + Troubleshooting and Maintaining Cisco IP Networks (TSHOOT) + + + + Lab 3-1 + + + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ^C alias exec cleanup copy flash:/tshoot/cleanup.cfg running-config alias exec restore configure replace flash:/tshoot/baseline.cfg list force alias exec restore-capstone configure replace flash:/tshoot/capstone.cfg list force alias exec init-2-1 copy flash:/tshoot/lab-2-1.cfg startup-config alias exec init-3-1 copy flash:/tshoot/lab-3-1.cfg startup-config alias exec init-4-1 copy flash:/tshoot/lab-4-1.cfg startup-config alias exec init-4-2 copy flash:/tshoot/lab-4-2.cfg startup-config alias exec init-5-1 copy flash:/tshoot/lab-5-1.cfg startup-config alias exec init-5-2 copy flash:/tshoot/lab-5-2.cfg startup-config alias exec init-5-3 copy flash:/tshoot/lab-5-3.cfg startup-config alias exec init-5-4 copy flash:/tshoot/lab-5-4.cfg running-config alias exec init-6-1 copy flash:/tshoot/lab-6-1.cfg startup-config alias exec init-6-2 copy flash:/tshoot/lab-6-2.cfg startup-config alias exec init-7-1 copy flash:/tshoot/lab-7-1.cfg startup-config ! line con 0 exec-timeout 60 0 logging synchronous login authentication CONSOLE line vty 0 4 transport input telnet ssh line vty 5 15 transport input telnet ssh ! ntp source Vlan128 ntp server 10.1.220.4 ntp server 10.1.220.3 end