############### # Device FS # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Ginger_FR ! boot-start-marker boot-end-marker ! enable secret 5 $1$MW6K$ZCWch1S5S1J2XB/heIrQA/ ! no aaa new-model memory-size iomem 10 no network-clock-participate slot 1 no network-clock-participate wic 0 ip cef ! ! ! ! no ip domain lookup ! ! ! frame-relay switching ! ! ! ! ! ! ! ! ! ! ! ! ! ! username admin password 0 remote ! ! ! ! ! ! ! interface FastEthernet0/0 no ip address shutdown speed auto duplex auto ! interface FastEthernet0/1 no ip address shutdown speed auto duplex auto ! interface Serial1/0 description Connection to Router 1 S0/0 no ip address encapsulation frame-relay IETF clock rate 128000 frame-relay intf-type dce frame-relay route 105 interface Serial1/4 501 no shutdown ! interface Serial1/1 no ip address shutdown ! interface Serial1/2 no ip address shutdown ! interface Serial1/3 no ip address shutdown ! interface Serial1/4 description Connection to Router 5 S1/0 no ip address encapsulation frame-relay IETF clock rate 128000 frame-relay intf-type dce frame-relay route 501 interface Serial1/0 105 no shutdown ! interface Serial1/5 no ip address shutdown ! interface Serial1/6 no ip address shutdown ! interface Serial1/7 no ip address shutdown ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 ! ! end ############### # Device R1 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_1 ! boot-start-marker boot-end-marker ! ! no aaa new-model no network-clock-participate slot 1 no network-clock-participate wic 0 ip cef ! ! ! ! no ip domain lookup ! ipv6 unicast-routing ! ! ! ! key chain authenticated_RIP key 1 key-string CISCO ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 170.1.1.1 255.255.255.0 ! interface FastEthernet0/0 ip address 157.1.168.1 255.255.255.0 ip ospf authentication message-digest ip ospf message-digest-key 1 md5 R1toR6 ip ospf priority 0 speed auto duplex auto ipv6 address 2001:157:1:168::/64 eui-64 ipv6 address FE80::1 link-local ipv6 rip R1Rip enable no shutdown ! interface Serial0/0 ip address 157.1.151.1 255.255.255.0 encapsulation frame-relay frame-relay interface-dlci 105 ppp Virtual-Template1 no shutdown ! interface Serial0/0.99 point-to-point ip address 157.1.112.1 255.255.255.252 ip helper-address 157.1.67.255 frame-relay interface-dlci 99 protocol ip 157.1.112.2 no shutdown ! interface FastEthernet0/1 description put ip address 202.1.91.X/24 (X is your pod number) on this int ip address 202.1.91.1 255.255.255.0 ip rip authentication mode md5 ip rip authentication key-chain authenticated_RIP ip policy route-map TelnetToRouter6 speed auto duplex auto no shutdown ! interface Serial0/1 no ip address shutdown ! interface Virtual-Template1 bandwidth 10000 ip address 157.1.15.1 255.255.255.0 ip policy route-map TelnetToRouter6 ipv6 address FEC0:157:1:15::1/64 ipv6 rip R1Rip enable no shutdown ! router ospf 1 router-id 1.1.1.1 log-adjacency-changes redistribute rip subnets network 157.1.168.1 0.0.0.0 area 0 network 170.1.1.1 0.0.0.0 area 0 distance 255 0.0.0.0 255.255.255.255 RipOnly ! router rip version 2 redistribute ospf 1 metric 5 passive-interface FastEthernet0/0 passive-interface Serial0/0 network 157.1.0.0 network 170.1.0.0 network 202.1.91.0 no auto-summary ! router bgp 245 no synchronization bgp router-id 1.1.1.1 bgp log-neighbor-changes bgp dmzlink-bw neighbor 157.1.15.5 remote-as 1368 neighbor 157.1.15.5 dmzlink-bw neighbor 157.1.168.3 remote-as 245 neighbor 157.1.168.6 remote-as 245 neighbor 157.1.168.6 next-hop-self neighbor 157.1.168.6 send-community extended no auto-summary ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ! ip access-list standard RipOnly permit 57.1.94.0 permit 193.91.22.0 permit 193.91.20.0 permit 209.1.95.0 permit 193.91.1.0 permit 193.91.42.0 permit 193.91.40.0 ! ip access-list extended TelnetToRouter6 permit tcp any host 157.1.168.6 eq telnet permit tcp any host 157.1.67.6 eq telnet permit tcp any host 170.1.6.6 eq telnet permit tcp any host 157.1.168.6 eq 22 permit tcp any host 157.1.67.6 eq 22 permit tcp any host 170.1.6.6 eq 22 ! ipv6 router rip R1Rip distribute-list prefix-list NoSiteLocal out ! ! ! ipv6 prefix-list NoSiteLocal seq 5 deny FEC0:157:1::/48 le 128 ipv6 prefix-list NoSiteLocal seq 10 permit ::/0 le 128 route-map TelnetToRouter6 permit 10 match ip address TelnetToRouter6 set ip next-hop 157.1.168.3 ! route-map TelnetToRouter6 permit 20 ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 ! ! end ############### # Device R2 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_2 ! boot-start-marker boot-end-marker ! logging buffered 4096 debugging ! no aaa new-model no network-clock-participate slot 1 no network-clock-participate wic 0 ip cef ! ! ! ! no ip domain lookup ! ipv6 unicast-routing ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 170.1.2.2 255.255.255.0 ! interface FastEthernet0/0 description put ip address 54.1.112.X/24 (X is your pod number) on this int ip address 54.1.112.1 255.255.255.0 speed auto duplex auto ipv6 address 2001:54:1:112::2/64 no shutdown ! interface Serial0/0 no ip address shutdown ! interface FastEthernet0/1 no ip address speed auto duplex auto no shutdown ! interface FastEthernet0/1.24 encapsulation dot1Q 24 ip address 157.1.24.2 255.255.255.0 ip helper-address 170.1.5.5 ip policy route-map LOAD_BALANCE glbp 1 ip 157.1.24.99 glbp 1 weighting 9 glbp 1 load-balancing weighted no shutdown ! interface FastEthernet0/1.245 encapsulation dot1Q 245 ip address 157.1.245.2 255.255.255.0 ipv6 address 2001:157:1:245::2/64 ipv6 nd dad attempts 0 ipv6 rip R2Rip enable ipv6 rip R2Rip default-information originate vrrp 245 ip 157.1.245.254 no shutdown ! interface Serial0/1 no ip address shutdown ! interface Serial0/2 no ip address shutdown ! router bgp 1368 no synchronization bgp router-id 2.2.2.2 bgp log-neighbor-changes network 157.1.24.0 mask 255.255.255.0 neighbor 54.1.112.254 remote-as 54 neighbor 54.1.112.254 route-map NoRoutes in neighbor 157.1.245.5 remote-as 1368 neighbor 157.1.245.5 default-originate no auto-summary ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 54.1.112.254 ip route 0.0.0.0 0.0.0.0 157.1.24.4 ! ! no ip http server no ip http secure-server ! ipv6 router rip R2Rip ! ! route-map LOAD_BALANCE permit 10 set ip next-hop 54.1.112.254 ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 ! scheduler allocate 5000 5000 ! end ############### # Device R3 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_3 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! ! ip cef ! ! no ip domain lookup ! ipv6 unicast-routing ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! class-map match-all IPv6_VIDEO match protocol rtp video match access-group name TUNNEL_IPV6IP ! ! policy-map PRIORITY class IPv6_VIDEO priority 8000 ! ! ! ! ! ! interface Loopback0 ip address 170.1.3.3 255.255.255.0 ! interface Tunnel0 no ip address ipv6 address FEC0:157:1:35::3/64 ipv6 rip R3Rip enable keepalive 10 3 tunnel source Loopback0 tunnel destination 170.1.5.5 tunnel mode ipv6ip no shutdown ! interface FastEthernet0/0 ip address 157.1.168.3 255.255.255.0 ip access-group FILTER_FOR_VLAN in no ip redirects ip local-proxy-arp ip route-cache same-interface ip ospf authentication message-digest ip ospf message-digest-key 2 md5 R3toR6 ip ospf priority 0 speed auto duplex auto ipv6 address 2001:157:1:168::/64 eui-64 ipv6 address FE80::3 link-local ipv6 rip R3Rip enable no shutdown ! interface FastEthernet0/1 ip address 157.1.38.3 255.255.255.0 speed auto duplex auto service-policy output PRIORITY no shutdown ! interface Serial0/0/0 no ip address shutdown ! interface Serial0/0/1 no ip address shutdown clock rate 2000000 ! interface Serial0/1/0 no ip address shutdown clock rate 2000000 ! router eigrp 68 redistribute ospf 1 metric 10000 100 255 1 1500 network 157.1.38.3 0.0.0.0 no auto-summary eigrp router-id 3.3.3.3 ! router ospf 1 router-id 3.3.3.3 log-adjacency-changes redistribute eigrp 68 subnets network 157.1.168.3 0.0.0.0 area 0 network 170.1.3.3 0.0.0.0 area 0 distance 180 0.0.0.0 255.255.255.255 Sw8Loop ! router bgp 245 no synchronization bgp router-id 3.3.3.3 bgp log-neighbor-changes bgp dmzlink-bw neighbor 157.1.38.8 remote-as 1368 neighbor 157.1.38.8 dmzlink-bw neighbor 157.1.168.1 remote-as 245 neighbor 157.1.168.6 remote-as 245 neighbor 157.1.168.6 next-hop-self neighbor 157.1.168.6 send-community extended no auto-summary ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ! ip access-list standard Sw8Loop permit 170.1.8.0 ! ip access-list extended FILTER_FOR_VLAN deny tcp 202.1.91.0 0.0.0.255 host 157.1.168.6 eq telnet deny tcp 202.1.91.0 0.0.0.255 host 157.1.67.6 eq telnet deny tcp 202.1.91.0 0.0.0.255 host 170.1.6.6 eq telnet deny tcp 202.1.91.0 0.0.0.255 host 157.1.168.6 eq 22 deny tcp 202.1.91.0 0.0.0.255 host 157.1.67.6 eq 22 deny tcp 202.1.91.0 0.0.0.255 host 170.1.6.6 eq 22 permit ip any any ip access-list extended TUNNEL_IPV6IP permit 41 any any ! ipv6 router rip R3Rip distribute-list prefix-list NoSiteLocal out ! ! ! ipv6 prefix-list NoSiteLocal seq 5 deny FEC0:157:1::/48 le 128 ipv6 prefix-list NoSiteLocal seq 10 permit ::/0 le 128 ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 ! end ############### # Device R4 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_4 ! boot-start-marker boot-end-marker ! ! no aaa new-model ! ! ip cef ! ! no ip domain lookup ip multicast-routing ! ! voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 170.1.4.4 255.255.255.0 ! interface Tunnel0 ip address 157.1.46.4 255.255.255.0 ip pim dense-mode ip multicast helper-map 224.222.222.222 157.1.24.255 100 keepalive 10 3 tunnel source FastEthernet0/1.24 tunnel destination 157.1.67.6 no shutdown ! interface FastEthernet0/0 description put ip address 172.16.104.X/24 (X is your pod number) on this int ip address 172.16.104.1 255.255.255.0 speed auto duplex auto no shutdown ! interface FastEthernet0/1 no ip address speed auto duplex auto no shutdown ! interface FastEthernet0/1.24 encapsulation dot1Q 24 ip address 157.1.24.4 255.255.255.0 ip helper-address 170.1.5.5 ip directed-broadcast ip pim dense-mode ip policy route-map LOAD_BALANCE glbp 1 ip 157.1.24.99 glbp 1 weighting 6 glbp 1 load-balancing weighted no shutdown ! interface FastEthernet0/1.245 encapsulation dot1Q 245 ip address 157.1.245.4 255.255.255.0 vrrp 245 ip 157.1.245.254 no shutdown ! interface Serial0/0/0 no ip address shutdown ! interface Serial0/0/1 no ip address shutdown ! interface Serial0/1/0 no ip address shutdown ! interface Serial0/1/1 no ip address shutdown ! router bgp 1368 no synchronization bgp router-id 4.4.4.4 bgp log-neighbor-changes network 157.1.24.0 mask 255.255.255.0 neighbor 157.1.245.5 remote-as 1368 neighbor 157.1.245.5 default-originate neighbor 172.16.104.254 remote-as 54 neighbor 172.16.104.254 route-map NoRoutes in no auto-summary ! ip forward-protocol nd ip forward-protocol udp 5555 ip route 0.0.0.0 0.0.0.0 172.16.104.254 ip route 0.0.0.0 0.0.0.0 157.1.24.2 ! ! no ip http server no ip http secure-server ! access-list 100 permit udp any any eq 5555 access-list 100 permit udp any any eq tftp ! route-map LOAD_BALANCE permit 10 set ip next-hop 172.16.104.254 ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 ! end ############### # Device R5 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_5 ! boot-start-marker boot-end-marker ! ! no aaa new-model no network-clock-participate slot 1 ip cef ! ! no ip dhcp use vrf connected no ip dhcp conflict logging ip dhcp excluded-address 157.1.24.1 157.1.24.4 ip dhcp excluded-address 157.1.24.99 ip dhcp ping packets 1 ip dhcp ping timeout 1000 ! ip dhcp pool POOL_VLAN24 network 157.1.24.0 255.255.255.0 dns-server 157.1.67.99 default-router 157.1.24.99 lease 2 update arp ! ! no ip domain lookup ! ipv6 unicast-routing ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! username Secured password 0 CISCO username Secured autocommand access-enable host ! ! ! ! ! ! ! interface Loopback0 ip address 170.1.5.5 255.255.255.0 ! interface Tunnel0 no ip address ipv6 address FEC0:157:1:35::5/64 ipv6 rip R5Rip enable keepalive 10 3 tunnel source Loopback0 tunnel destination 170.1.3.3 tunnel mode ipv6ip no shutdown ! interface FastEthernet0/0 ip address 157.1.245.5 255.255.255.0 ip access-group MYDYNAMIC in speed auto duplex auto ipv6 address 2001:157:1:245::5/64 ipv6 nd dad attempts 0 ipv6 rip R5Rip enable no shutdown ! interface FastEthernet0/1 ip address 157.1.58.5 255.255.255.0 speed auto duplex auto no shutdown ! interface FastEthernet1/0 no ip address shutdown speed auto duplex auto ! interface Serial1/0 ip address 157.1.155.5 255.255.255.0 encapsulation frame-relay frame-relay interface-dlci 501 ppp Virtual-Template1 no shutdown ! interface FastEthernet1/1 no ip address shutdown speed auto duplex auto ! interface Serial1/1 no ip address shutdown clock rate 2000000 ! interface Serial1/2 no ip address shutdown clock rate 2000000 ! interface Serial1/3 no ip address shutdown clock rate 2000000 ! interface Virtual-Template1 bandwidth 1544 ip address 157.1.15.5 255.255.255.0 ip access-group MYDYNAMIC in ipv6 address FEC0:157:1:15::5/64 ipv6 rip R5Rip enable no shutdown ! interface Virtual-Template21 no ip address no shutdown ! router eigrp 68 redistribute rip metric 128 2000 255 1 1500 network 157.1.58.5 0.0.0.0 no auto-summary eigrp router-id 5.5.5.5 ! router rip version 2 redistribute eigrp 68 metric 5 passive-interface FastEthernet0/0 passive-interface FastEthernet0/1 passive-interface Serial1/0 network 157.1.0.0 network 170.1.0.0 no auto-summary ! router bgp 1368 no synchronization bgp router-id 5.5.5.5 bgp log-neighbor-changes network 157.1.58.0 mask 255.255.255.0 aggregate-address 157.1.0.0 255.255.0.0 summary-only neighbor 157.1.15.1 remote-as 245 neighbor 157.1.15.1 route-map NoSum out neighbor 157.1.58.8 remote-as 1368 neighbor 157.1.58.8 send-community neighbor 157.1.58.8 route-map SumJustForYou out neighbor 157.1.245.2 remote-as 1368 neighbor 157.1.245.2 route-reflector-client neighbor 157.1.245.2 route-map NEXT_HOP in neighbor 157.1.245.4 remote-as 1368 neighbor 157.1.245.4 route-reflector-client neighbor 157.1.245.4 route-map NEXT_HOP in no auto-summary ! ip forward-protocol nd ! ! no ip http server no ip http secure-server ! ip access-list extended MYDYNAMIC dynamic Secured permit tcp 157.1.24.0 0.0.0.255 host 157.1.58.200 eq www deny ip any host 157.1.58.200 permit ip any any ! ! ip prefix-list NoSum seq 5 permit 157.1.0.0/16 ipv6 router rip R5Rip distribute-list prefix-list NoSiteLocal out FastEthernet0/0 ! ! ! ipv6 prefix-list NoSiteLocal seq 5 deny FEC0:157:1::/48 le 128 ipv6 prefix-list NoSiteLocal seq 10 permit ::/0 le 128 route-map NEXT_HOP permit 10 set ip next-hop 157.1.245.254 ! route-map NoSum deny 10 match ip address prefix-list NoSum ! route-map NoSum permit 20 ! route-map SumJustForYou permit 10 match ip address prefix-list NoSum set community no-export ! route-map SumJustForYou permit 20 ! ! ! ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 password CISCO login local ! ! end ############### # Device R6 # ############### ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec no service password-encryption ! hostname Router_6 ! boot-start-marker boot-end-marker ! ! no aaa new-model no network-clock-participate slot 1 no network-clock-participate wic 0 ip cef ! ! ! ! no ip domain lookup ip multicast-routing ! ipv6 unicast-routing ipv6 cef voice-card 0 no dspfarm ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! interface Loopback0 ip address 170.1.6.6 255.255.255.0 ! interface Tunnel0 ip address 157.1.46.6 255.255.255.0 ip pim dense-mode keepalive 10 3 tunnel source FastEthernet1/1 tunnel destination 157.1.24.4 no shutdown ! interface GigabitEthernet0/0 ip address 157.1.168.6 255.255.255.0 ip verify unicast reverse-path ip ospf authentication message-digest ip ospf message-digest-key 1 md5 R1toR6 ip ospf message-digest-key 2 md5 R3toR6 speed auto duplex auto media-type rj45 ipv6 address 2001:157:1:168::/64 eui-64 ipv6 verify unicast reverse-path ipv6 rip R6Rip enable no shutdown ! interface GigabitEthernet0/1 no ip address shutdown speed auto duplex auto media-type rj45 ! interface Serial0/0/0 no ip address shutdown ! interface Serial0/0/1 no ip address shutdown ! interface Serial0/0/2 no ip address shutdown ! interface Serial0/0/3 no ip address shutdown ! interface FastEthernet1/0 no ip address shutdown speed auto duplex auto ! interface FastEthernet1/1 ip address 157.1.67.6 255.255.255.0 ip directed-broadcast ip pim dense-mode ip multicast helper-map broadcast 224.222.222.222 100 speed auto duplex auto ipv6 address 2001:157:1:67::/64 eui-64 ipv6 verify unicast reverse-path ipv6 rip R6Rip enable ipv6 policy route-map V6PBR no shutdown ! router ospf 1 router-id 6.6.6.6 log-adjacency-changes area 67 nssa no-summary network 157.1.67.6 0.0.0.0 area 67 network 157.1.168.6 0.0.0.0 area 0 network 170.1.6.6 0.0.0.0 area 0 ! router bgp 245 no synchronization bgp router-id 6.6.6.6 bgp log-neighbor-changes bgp dmzlink-bw neighbor 157.1.168.1 remote-as 245 neighbor 157.1.168.3 remote-as 245 maximum-paths ibgp 2 no auto-summary ! ip forward-protocol nd ip forward-protocol udp 5555 ! ! no ip http server no ip http secure-server ! access-list 100 permit udp any any eq 5555 access-list 100 permit udp any host 255.255.255.255 eq tftp ipv6 router rip R6Rip ! ! route-map V6PBR permit 10 match ipv6 address ThroughR1 set ipv6 next-hop FE80::1 ! route-map V6PBR permit 20 match ipv6 address ThroughR3 set ipv6 next-hop FE80::3 ! route-map V6PBR permit 30 set ipv6 next-hop FE80::1 FE80::3 ! ! ! ! ipv6 access-list ThroughR1 permit ipv6 any 2001:213:112:31::/64 permit ipv6 any 2001:213:112:33::/64 ! ipv6 access-list ThroughR3 permit ipv6 any 2001:212:104:11::/64 permit ipv6 any 2001:212:104:13::/64 ! control-plane ! ! ! ! ! ! ! ! ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line aux 0 line vty 0 4 login ! scheduler allocate 20000 1000 ! end ############### # Device S1 # ############### ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch_1 ! ! no aaa new-model ip subnet-zero ip routing no ip domain-lookup ! ! ! ! ! ! no file verify auto ! spanning-tree mode pvst spanning-tree extend system-id spanning-tree vlan 245 priority 24576 ! vlan internal allocation policy ascending ! ! interface Loopback0 ip address 170.1.7.7 255.255.255.0 ! interface FastEthernet0/1 switchport access vlan 168 switchport mode access spanning-tree bpduguard enable ! interface FastEthernet0/2 switchport access vlan 332 switchport trunk encapsulation dot1q switchport mode access ! interface FastEthernet0/3 switchport access vlan 168 switchport mode access spanning-tree bpduguard enable ! interface FastEthernet0/4 switchport access vlan 224 switchport trunk encapsulation dot1q switchport mode access ! interface FastEthernet0/5 switchport access vlan 245 switchport mode access ! interface FastEthernet0/6 switchport access vlan 67 switchport mode access ! interface FastEthernet0/7 switchport mode dynamic desirable ! interface FastEthernet0/8 switchport mode dynamic desirable ! interface FastEthernet0/9 switchport mode dynamic desirable ! interface FastEthernet0/10 switchport mode dynamic desirable ! interface FastEthernet0/11 switchport mode dynamic desirable ! interface FastEthernet0/12 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/13 switchport mode dynamic desirable shutdown ! interface FastEthernet0/14 switchport mode dynamic desirable shutdown ! interface FastEthernet0/15 switchport mode dynamic desirable ! interface FastEthernet0/16 switchport mode dynamic desirable ! interface FastEthernet0/17 switchport mode dynamic desirable ! interface FastEthernet0/18 switchport mode dynamic desirable ! interface FastEthernet0/19 switchport mode dynamic desirable ! interface FastEthernet0/20 switchport trunk encapsulation dot1q switchport trunk allowed vlan 224,332 switchport mode trunk ! interface FastEthernet0/21 switchport mode dynamic desirable ! interface FastEthernet0/22 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive spanning-tree guard loop ! interface FastEthernet0/23 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive spanning-tree guard loop ! interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive spanning-tree guard loop ! interface GigabitEthernet0/1 switchport mode dynamic desirable ! interface GigabitEthernet0/2 switchport mode dynamic desirable ! interface Vlan1 no ip address shutdown ! interface Vlan7 ip address 157.1.7.7 255.255.255.0 ip access-group DENIED_TELNET in no shutdown ! interface Vlan67 ip address 157.1.67.7 255.255.255.0 no shutdown ! router ospf 1 router-id 7.7.7.7 log-adjacency-changes area 67 nssa redistribute connected subnets network 157.1.67.7 0.0.0.0 area 67 ! ip classless ip http server ip http secure-server ! ! ip access-list extended DENIED_TELNET permit tcp any any neq telnet deny tcp any any permit ip any any ! ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 no login line vty 5 15 no login ! end ############### # Device S2 # ############### ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch_2 ! ! aaa new-model aaa authentication login default none aaa authentication dot1x default group radius ! aaa session-id common ip subnet-zero ip routing no ip domain-lookup ! vtp domain CCIE vtp mode transparent ! ! ! ! ! dot1x system-auth-control no file verify auto spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! vlan 24,58,67,121,168,245 ! class-map match-all IPv6_VIDEO match access-group name TUNNEL_IPV6IP ! ! ! interface Loopback0 ip address 170.1.8.8 255.255.255.0 ! interface FastEthernet0/1 switchport access vlan 121 switchport mode access ! interface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/3 no switchport ip address 157.1.38.8 255.255.255.0 ! interface FastEthernet0/4 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/5 switchport access vlan 58 switchport mode access ! interface FastEthernet0/6 switchport access vlan 67 switchport mode access ! interface FastEthernet0/7 switchport mode access dot1x pae authenticator dot1x port-control auto ! interface FastEthernet0/8 switchport mode dynamic desirable ! interface FastEthernet0/9 switchport mode dynamic desirable ! interface FastEthernet0/10 switchport mode dynamic desirable ! interface FastEthernet0/11 switchport mode dynamic desirable ! interface FastEthernet0/12 switchport trunk encapsulation dot1q switchport mode trunk ! interface FastEthernet0/13 switchport mode dynamic desirable shutdown ! interface FastEthernet0/14 switchport mode dynamic desirable shutdown ! interface FastEthernet0/15 switchport mode dynamic desirable ! interface FastEthernet0/16 switchport mode dynamic desirable ! interface FastEthernet0/17 switchport mode dynamic desirable ! interface FastEthernet0/18 switchport mode dynamic desirable ! interface FastEthernet0/19 switchport mode dynamic desirable ! interface FastEthernet0/20 switchport trunk encapsulation dot1q switchport trunk allowed vlan 121 switchport mode trunk ! interface FastEthernet0/21 switchport mode dynamic desirable ! interface FastEthernet0/22 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive ! interface FastEthernet0/23 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive spanning-tree vlan 245 cost 16 ! interface FastEthernet0/24 switchport trunk encapsulation dot1q switchport mode trunk udld port aggressive spanning-tree vlan 245 cost 12 ! interface GigabitEthernet0/1 switchport mode dynamic desirable ! interface GigabitEthernet0/2 switchport mode dynamic desirable ! interface Vlan1 no ip address shutdown ! interface Vlan58 ip address 157.1.58.8 255.255.255.0 no shutdown ! router eigrp 68 redistribute connected network 157.1.38.8 0.0.0.0 network 157.1.58.8 0.0.0.0 no auto-summary eigrp router-id 8.8.8.8 ! router bgp 1368 no synchronization bgp router-id 8.8.8.8 bgp log-neighbor-changes neighbor 157.1.38.3 remote-as 245 neighbor 157.1.58.5 remote-as 1368 no auto-summary ! ip classless ip http server ip http secure-server ! ip radius source-interface Loopback0 ! radius-server host 157.1.7.99 auth-port 1645 acct-port 1646 radius-server source-ports 1645-1646 radius-server key CISCO ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 5 15 ! end ############### # Device S3 # ############### ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch_3 ! ! no aaa new-model ip subnet-zero no ip domain-lookup ! ! ! ! ! ! no file verify auto spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! ! interface Loopback0 ip address 170.1.9.9 255.255.255.0 ! interface GigabitEthernet0/1 ! interface GigabitEthernet0/2 ! interface GigabitEthernet0/3 ! interface GigabitEthernet0/4 ! interface GigabitEthernet0/5 ! interface GigabitEthernet0/6 switchport access vlan 168 switchport mode access spanning-tree bpduguard enable ! interface GigabitEthernet0/7 ! interface GigabitEthernet0/8 ! interface GigabitEthernet0/9 ! interface GigabitEthernet0/10 ! interface GigabitEthernet0/11 ! interface GigabitEthernet0/12 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/13 shutdown ! interface GigabitEthernet0/14 shutdown ! interface GigabitEthernet0/15 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/16 shutdown ! interface GigabitEthernet0/17 ! interface GigabitEthernet0/18 ! interface GigabitEthernet0/19 ! interface GigabitEthernet0/20 shutdown ! interface GigabitEthernet0/21 ! interface GigabitEthernet0/22 ! interface GigabitEthernet0/23 ! interface GigabitEthernet0/24 ! interface GigabitEthernet0/25 ! interface GigabitEthernet0/26 ! interface GigabitEthernet0/27 ! interface GigabitEthernet0/28 ! interface Vlan1 no ip address shutdown ! ip classless ip http server ip http secure-server ! ! ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 no login line vty 5 15 no login ! end ############### # Device S4 # ############### ! version 12.2 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname Switch_4 ! ! no aaa new-model ip subnet-zero no ip domain-lookup ! ! ! ! ! ! no file verify auto spanning-tree mode pvst spanning-tree extend system-id ! vlan internal allocation policy ascending ! ! interface Loopback0 ip address 170.1.10.10 255.255.255.0 ! interface GigabitEthernet0/1 ! interface GigabitEthernet0/2 ! interface GigabitEthernet0/3 ! interface GigabitEthernet0/4 ! interface GigabitEthernet0/5 ! interface GigabitEthernet0/6 ! interface GigabitEthernet0/7 ! interface GigabitEthernet0/8 ! interface GigabitEthernet0/9 ! interface GigabitEthernet0/10 ! interface GigabitEthernet0/11 ! interface GigabitEthernet0/12 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/13 shutdown ! interface GigabitEthernet0/14 shutdown ! interface GigabitEthernet0/15 switchport trunk encapsulation dot1q switchport mode trunk ! interface GigabitEthernet0/16 shutdown ! interface GigabitEthernet0/17 ! interface GigabitEthernet0/18 ! interface GigabitEthernet0/19 ! interface GigabitEthernet0/20 shutdown ! interface GigabitEthernet0/21 ! interface GigabitEthernet0/22 ! interface GigabitEthernet0/23 ! interface GigabitEthernet0/24 ! interface GigabitEthernet0/25 ! interface GigabitEthernet0/26 ! interface GigabitEthernet0/27 ! interface GigabitEthernet0/28 ! interface Vlan1 no ip address shutdown ! ip classless ip http server ip http secure-server ! ! ! control-plane ! ! line con 0 exec-timeout 0 0 privilege level 15 logging synchronous line vty 0 4 no login line vty 5 15 no login ! end