!
password-encryption enable
!
hostname CoreSW_SWX3220-30TCs
!
enable password 8 (パスワード※：必須) ※暗号化されて表示されます。
!
username (ユーザー名：必須) privilege on password 8 (パスワード※：必須) ※暗号化されて表示されます。
!
qos enable
!
dns-client enable
dns-client name-server 172.16.0.253
dns-client name-server 172.16.0.254
multiple-vlan transfer ympi disable
port-channel load-balance src-dst-ip
lldp run
lldp auto-setting enable
maximum-paths 8
!
access-list 10 description VLAN10
access-list 10 10 deny any any 172.16.0.0 0.0.0.255
access-list 10 20 deny any any 172.22.0.0 0.0.3.255
access-list 10 30 deny any any 172.23.0.0 0.0.3.255
access-list 10 40 deny any any 172.30.0.0 0.0.0.255
access-list 20 description VLAN20
access-list 20 10 deny any any 172.16.0.0 0.0.0.255
access-list 20 20 deny any any 172.21.0.0 0.0.3.255
access-list 20 30 deny any any 172.23.0.0 0.0.3.255
access-list 20 40 deny any any 172.30.0.0 0.0.0.255
access-list 30 description VLAN30
access-list 30 10 deny any any 172.16.0.0 0.0.0.255
access-list 30 20 deny any any 172.21.0.0 0.0.3.255
access-list 30 30 deny any any 172.22.0.0 0.0.3.255
access-list 30 40 deny any any 172.30.0.0 0.0.0.255
access-list 50 description VLAN50
access-list 50 10 deny any any 172.30.0.0 0.0.0.255
access-list 90 description VLAN90
access-list 90 10 deny any any 172.16.0.0 0.0.0.255
access-list 90 20 deny any any 172.21.0.0 0.0.3.255
access-list 90 30 deny any any 172.22.0.0 0.0.3.255
access-list 90 40 deny any any 172.23.0.0 0.0.3.255
access-list 90 50 deny any any 172.25.0.0 0.0.0.255
access-list 100 description Guest_dst
access-list 100 10 permit any any 172.30.0.0 0.0.0.255
access-list 101 description Guest_src
access-list 101 10 permit any 172.30.0.0 0.0.0.255 any
!
dhcp-server enable
!
dns-forwarding enable
dns-forwarding name-server 172.16.0.253
dns-forwarding name-server 172.16.0.254
!
class-map class-limit1
 match access-list 100
!
class-map class-limit2
 match access-list 101
!
policy-map pmap1
 class class-limit1
  police single-rate 100000 10240 10240 yellow-action drop red-action drop
!
policy-map pmap2
 class class-limit2
  police single-rate 100000 10240 10240 yellow-action drop red-action drop
!
vlan database
 vlan 10,20,30,50,90
!
interface port1.1
 description RTX1300(1)
 switchport
 switchport mode access
 service-policy input pmap1
 no shutdown
 lldp-agent
  set lldp enable txrx 
  tlv-select basic-mgmt  
  exit 
!
interface port1.2
 description RTX1300(2)
 switchport
 switchport mode access
 service-policy input pmap1
 no shutdown
 lldp-agent
  set lldp enable txrx 
  tlv-select basic-mgmt  
  exit 
!
interface port1.3
 description VPN(1)
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.4
 description VPN(2)
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.5
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 10 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.6
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 10 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.7
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 20 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.8
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 20 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.9
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 30 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.10
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 30 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.11
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 40 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.12
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 channel-group 40 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.13
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.14
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.15
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.16
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.17
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.18
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.19
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.20
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.21
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.22
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.23
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.24
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.25
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.26
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.27
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.28
 switchport
 switchport mode access
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.29
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50
 channel-group 1 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface port1.30
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50
 channel-group 1 mode active
 no shutdown
 lldp-agent
  set lldp enable txrx
  tlv-select basic-mgmt
  exit
!
interface vlan1
 description Management
 no switchport
 auto-ip enable
 ip address 172.16.0.1/24
 no shutdown
 dns-forwarding enable
 l2-mcast flood 239.192.128.250
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface vlan10
 description Department_A
 no switchport
 ip address 172.21.0.1/22
 no shutdown
 dhcp-server enable
 dns-forwarding enable
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface vlan20
 description Department_B
 no switchport
 ip address 172.22.0.1/22
 no shutdown
 dhcp-server enable
 dns-forwarding enable
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface vlan30
 description Department_C
 no switchport
 ip address 172.23.0.1/22
 no shutdown
 dhcp-server enable
 dns-forwarding enable
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface vlan50
 description Common
 no switchport
 ip address 172.25.0.1/24
 no shutdown
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface vlan90
 description Guest
 no switchport
 ip address 172.30.0.1/24
 no shutdown
 dhcp-server enable
 dns-forwarding enable
 ip igmp snooping disable
 ipv6 mld snooping disable
!
interface po1
 description ServerSW
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50
 no shutdown
!
interface po10
 description 1F_floorSW
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 service-policy input pmap2
 no shutdown
!
interface po20
 description 2F_floorSW
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 service-policy input pmap2
 no shutdown
!
interface po30
 description 3F_floorSW
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 service-policy input pmap2
 no shutdown
!
interface po40
 description 4F_floorSW
 switchport
 switchport mode trunk
 switchport trunk allowed vlan add 10,20,30,50,90
 service-policy input pmap2
 no shutdown
!
vlan access-map VAM-010
 match access-list 10
!
vlan access-map VAM-020
 match access-list 20
!
vlan access-map VAM-030
 match access-list 30
!
vlan access-map VAM-050
 match access-list 50
!
vlan access-map VAM-090
 match access-list 90
!
vlan filter VAM-010 10 in
!
vlan filter VAM-020 20 in
!
vlan filter VAM-030 30 in
!
vlan filter VAM-050 50 in
!
vlan filter VAM-090 90 in
!
ip route 0.0.0.0/0 172.16.0.253
ip route 0.0.0.0/0 172.16.0.254
!
crypto pki generate key 3072 ca (認証局名)
!
radius-server local interface vlan1
radius-server local enable
!
!
clock timezone JST
!
ntpdate server name ntp.nict.jp
ntpdate interval 24
!
snmp-server community (コミュニティー名) ro
snmp-server enable trap coldstart warmstart linkdown linkup authentication temperature fan psu l2ms errdisable rmon termmonitor bridge loopdetect vrrp stack
snmp-server host (SNMPマネージャーのIPアドレス) traps version 2c (コミュニティー名)
snmp-server access permit (SNMPマネージャーのIPアドレス) community (コミュニティー名)
!
http-server enable
http-proxy enable
!
telnet-server enable
!
telnet-client enable
!
dhcp pool pool_vlan10
 network 172.21.0.0/22
 range 172.21.0.2 172.21.3.191
 default-router 172.21.0.1
 dns-server 172.21.0.1
!
dhcp pool pool_vlan20
 network 172.22.0.0/22
 range 172.22.0.2 172.22.3.191
 default-router 172.22.0.1
 dns-server 172.22.0.1
!
dhcp pool pool_vlan30
 network 172.23.0.0/22
 range 172.23.0.2 172.23.3.191
 default-router 172.23.0.1
 dns-server 172.23.0.1
!
dhcp pool pool_vlan90
 network 172.30.0.0/24
 range 172.30.0.2 172.30.0.191
 default-router 172.30.0.1
 dns-server 172.30.0.1
!
line con 0
line vty 0 7
!
l2ms configuration
 l2ms role manager
!
snapshot enable
!
end
