!
version 12.2
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname S5
!
!
no aaa new-model
ip subnet-zero
no ip domain-lookup
!
!
!
!
!
macro name PortSetup
storm-control broadcast level 25
switchport mode access
switchport access vlan $VLAN
switchport protected
switchport port-security
switchport port-security maximum $MAC
@
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan access-map Prob12 10
 action drop
 match ip address 100
vlan access-map Prob12 20
 action forward
vlan filter Prob12 vlan-list 1-4094
!
!
interface FastEthernet0/1
 switchport access vlan 10
 switchport mode access
 speed 10
 duplex half
 spanning-tree portfast
!
interface FastEthernet0/2
 switchport mode dynamic desirable
 shutdown
 speed 100
 duplex full
!
interface FastEthernet0/3
 switchport access vlan 30
 switchport mode access
 speed 100
 duplex full
!
interface FastEthernet0/4
 switchport mode dynamic desirable
 shutdown
 speed 100
 duplex full
!
interface FastEthernet0/5
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/6
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/7
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/8
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/9
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/10
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/11
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/12
 switchport access vlan 22
 switchport mode access
 switchport protected
 switchport port-security maximum 4
 switchport port-security
 speed 100
 duplex full
 storm-control broadcast level 25.00
!
interface FastEthernet0/13
 switchport access vlan 24
 switchport mode access
 switchport protected
 switchport port-security maximum 6
 switchport port-security
 speed 100
 duplex full
 macro description PortSetup
 storm-control broadcast level 25.00
!
interface FastEthernet0/14
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/15
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/16
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/17
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/18
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/19
 switchport mode dynamic desirable
 speed 100
 duplex full
!
interface FastEthernet0/20
 switchport mode dynamic desirable
 switchport block unicast
 speed 100
 duplex full
!
interface FastEthernet0/21
 switchport mode access
 switchport port-security
 switchport port-security mac-address 0023.1123.4443
 speed 100
 duplex full
 storm-control broadcast level 50.00
 storm-control multicast level 62.00
!
interface FastEthernet0/22
 switchport mode access
 switchport port-security
 switchport port-security violation restrict
 switchport port-security mac-address 1212.1212.1212
 speed 100
 duplex full
!
interface FastEthernet0/23
 switchport mode dynamic desirable
 shutdown
 speed 100
 duplex full
!
interface FastEthernet0/24
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30
 switchport mode trunk
 switchport nonegotiate
 speed 100
 duplex full
!
interface GigabitEthernet0/1
 switchport mode dynamic desirable
!
interface GigabitEthernet0/2
 switchport mode dynamic desirable
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan10
 ip address 208.28.1.65 255.255.255.240
 no shutdown
!
interface Vlan20
 ip address 208.28.1.130 255.255.255.224
 no shutdown
!
ip classless
ip http server
ip http secure-server
!
!
access-list 100 permit tcp any any eq ident
!
control-plane
!
!
line con 0
 exec-timeout 0 0
 logging synchronous
line vty 0 4
 no login
line vty 5 15
 no login
!
!
end