sh run Building configuration... Current configuration : 12057 bytes ! !

Last configuration change at 13:32:17 UTC Mon Aug 8 2011 by D35c45w1tch ! NVRAM config last updated at 13:43:29 UTC Mon Aug 8 2011 by D35c45w1tch ! version 12.2 no service pad service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption service compress-config ! hostname C4507-24-MAN-MDB1-1 ! boot-start-marker boot-end-marker ! enable secret 5 $1$vWKq$RGy7mRhj8LgJq9z6Khs130 ! username D35c45w1tch privilege 15 secret 5 $1$4DwF$HAeQTclQ/WvIDJ7zRoEjk1 username jupasang privilege 5 secret 5 $1$SOig$d89CZPSr9S8ZJ2pxz84QZ. no aaa new-model hw-module uplink mode shared-backplane hw-module module 3 port-group 1 select gigabitethernet hw-module module 4 port-group 1 select gigabitethernet ip subnet-zero no ip domain-lookup ip domain-name API no ip dhcp use vrf connected ip dhcp excluded-address 10.34.74.1 ! ip dhcp pool VLAN_594 network 10.34.74.0 255.255.255.0 option 150 ip 10.33.168.250 default-router 10.34.74.1 ! ! ip vrf mgmtVrf ! vtp domain '' vtp mode transparent ! ! ! errdisable detect cause bpduguard shutdown vlan errdisable recovery cause bpduguard errdisable recovery cause psecure-violation errdisable recovery interval 30 power redundancy-mode redundant ! ! ! ! ! ! spanning-tree mode pvst spanning-tree portfast bpduguard default

spanning-tree extend system-id spanning-tree vlan 590-1593 priority 0 ! redundancy mode sso ! vlan internal allocation policy ascending ! vlan 590 name Servidores ! vlan 591 name Base1 ! vlan 592 name Base2 ! vlan 593 name Exterior ! vlan 594 name Voz_Telefonos ! vlan 595 name Datos_Core ! vlan 596 name Voz_Control ! vlan 597 name Datos_Control ! vlan 598 name Inside_ASA ! vlan 599 name Interconexion_SCT ! vlan 1590 name MAPEO_TRUST_590 ! vlan 1591 name MAPEO_TRUST_591 ! vlan 1592 name MAPEO_TRUST_592 ! vlan 1593 name MAPEO_TRUST_593 ! ip ssh version 2 ! class-map match-all AutoQos-VoIP-Control-Dscp26 match dscp af31 class-map match-all AutoQos-VoIP-Control-Dscp24 match dscp cs3 class-map match-all AutoQos-VoIP-Bearer-Cos match cos 5 class-map match-all AutoQos-VoIP-Control-QosGroup24 match qos-group 24

class-map match-all AutoQos-VoIP-Control-QosGroup26 match qos-group 26 class-map match-all AutoQos-VoIP-Bearer-QosGroup match qos-group 46 class-map match-all AutoQos-VoIP-Bearer-Dscp match dscp ef class-map match-all AutoQos-VoIP-Control-Cos match cos 3 ! ! policy-map AutoQos-VoIP-Input-Dscp-Policy class AutoQos-VoIP-Bearer-Dscp set qos-group 46 class AutoQos-VoIP-Control-Dscp26 set qos-group 26 class AutoQos-VoIP-Control-Dscp24 set qos-group 24 policy-map AutoQos-VoIP-Input-Cos-Policy class AutoQos-VoIP-Bearer-Cos set qos-group 46 class AutoQos-VoIP-Control-Cos set qos-group 24 policy-map AutoQos-VoIP-Output-Policy class AutoQos-VoIP-Bearer-QosGroup set dscp ef set cos 5 priority police cir percent 33 class AutoQos-VoIP-Control-QosGroup26 set dscp af31 set cos 3 bandwidth remaining percent 5 class AutoQos-VoIP-Control-QosGroup24 set dscp cs3 set cos 3 bandwidth remaining percent 5 class class-default dbl ! ! ! interface FastEthernet1 ip vrf forwarding mgmtVrf no ip address speed auto duplex auto ! interface GigabitEthernet1/1 description TO_ASA_INSIDE no switchport ip address 10.34.75.97 255.255.255.224 auto qos voip trust service-policy input AutoQos-VoIP-Input-Dscp-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/2 description to NAC_UNTRUSTED switchport access vlan 591 switchport mode access shutdown

service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/3 description to NAC_TRUSTED switchport trunk native vlan 4093 switchport trunk allowed vlan 597,1590-1593 switchport mode trunk shutdown auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/4 description to NAC_ST_UNTRUSTED switchport trunk native vlan 4092 switchport trunk allowed vlan 590-593 switchport mode trunk shutdown auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/5 description TO_NAC_ST_TRUSTED switchport trunk native vlan 4093 switchport trunk allowed vlan 597,1590-1593 switchport mode trunk shutdown auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/6 description VIDEO-CONF switchport access vlan 597 switchport mode access auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/7 description TO_ROUTER_PSTN switchport access vlan 596 switchport mode access switchport port-security maximum 1 vlan access auto qos voip trust spanning-tree portfast service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/8 description TO_ASA_OUTSIDE switchport access vlan 599 switchport mode access switchport port-security maximum 1 vlan access auto qos voip trust spanning-tree portfast service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy !

interface GigabitEthernet1/9 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/10 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/11 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/12 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/13 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/14 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/15 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/16 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/17 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/18 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/19 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access ! interface GigabitEthernet1/20 description CONEXIONES_SERVIDORES switchport access vlan 590 switchport mode access !

interface GigabitEthernet1/21 switchport access vlan 590 switchport mode access switchport voice vlan 594 auto qos voip cisco-phone qos trust device cisco-phone service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/22 switchport access vlan 590 switchport mode access switchport voice vlan 594 auto qos voip cisco-phone qos trust device cisco-phone service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet1/23 description UPLINK_CCTM switchport trunk allowed vlan 590-599 switchport mode trunk ! interface GigabitEthernet1/24 description BACK_UP_MDB1-1 switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface TenGigabitEthernet3/1 ! interface TenGigabitEthernet3/2 ! interface GigabitEthernet3/3 description TO_SCT switchport access vlan 599 switchport mode access switchport port-security maximum 1 vlan access auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet3/4 switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk shutdown auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet3/5 switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk shutdown auto qos voip trust

service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet3/6 description TO_BASE2 switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface TenGigabitEthernet4/1 shutdown ! interface TenGigabitEthernet4/2 shutdown ! interface GigabitEthernet4/3 description TO_EMERGENCIAS switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet4/4 description TO_GESTIONES switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface GigabitEthernet4/5 shutdown ! interface GigabitEthernet4/6 description TO_PROTECCION switchport trunk native vlan 4093 switchport trunk allowed vlan 590-599 switchport mode trunk auto qos voip trust service-policy input AutoQos-VoIP-Input-Cos-Policy service-policy output AutoQos-VoIP-Output-Policy ! interface Vlan1 no ip address shutdown ! interface Vlan590 ip address 10.34.71.1 255.255.255.192 ! interface Vlan591 description Base1 ip address 10.34.71.65 255.255.255.192 ip helper-address 10.34.71.3 !

interface Vlan592 description Base2 ip address 10.34.71.129 255.255.255.192 ip access-group 10 out ip helper-address 10.34.71.3 ! interface Vlan593 description Exteriores ip address 10.34.71.193 255.255.255.192 ip access-group 15 out ip helper-address 10.34.71.3 ! interface Vlan594 ip address 10.34.74.1 255.255.255.0 ! interface Vlan595 ip address 10.34.75.1 255.255.255.224 ! interface Vlan596 ip address 10.34.75.33 255.255.255.224 ! interface Vlan597 ip address 10.34.75.65 255.255.255.224 ! router ospf 1 router-id 10.34.75.97 log-adjacency-changes passive-interface default no passive-interface GigabitEthernet1/1 network 10.34.0.0 0.0.255.255 area 13 ! ip route 0.0.0.0 0.0.0.0 10.34.71.62 ip route 192.168.0.0 255.255.0.0 10.34.71.62 ip http server no ip http secure-server ! ip access-list standard ADMINISTRACION_REMOTA permit 10.0.0.0 0.255.255.255 ! ! access-list 10 permit 10.34.71.120 access-list 10 permit 10.34.71.119 access-list 10 permit 10.34.71.118 access-list 10 permit 10.34.71.117 access-list 10 permit 10.34.71.116 access-list 10 remark RULE_592 access-list 10 permit 10.34.71.115 access-list 10 deny 10.34.71.64 0.0.0.63 access-list 10 deny 10.34.71.192 0.0.0.63 access-list 10 permit any access-list 15 permit 10.34.71.120 access-list 15 permit 10.34.71.119 access-list 15 permit 10.34.71.118 access-list 15 permit 10.34.71.117 access-list 15 permit 10.34.71.116 access-list 15 remark RULE_593 access-list 15 permit 10.34.71.115 access-list 15 deny 10.34.71.64 0.0.0.63 access-list 15 deny 10.34.71.128 0.0.0.63 access-list 15 permit any

! snmp-server engineID local 800000090300F866F24FA994 snmp-server community SoC%GeStIoN RO 2 snmp-server host 10.33.148.138 SoC%GeStIoN ! line con 0 login local stopbits 1 line vty 0 4 access-class ADMINISTRACION_REMOTA in exec-timeout 15 0 login local length 0 transport input ssh line vty 5 15 access-class ADMINISTRACION_REMOTA in exec-timeout 15 0 login local transport input ssh ! end C4507-24-MAN-MDB1-1#10.188 34.1 75.2 Trying 10.34.75.2 ... % Connection refused by remote host C4507-24-MAN-MDB1-1#ssh 10.34.75.2 Password: C3560-48-MAN-MDB1-1#