[nsp] 6509 Help - Please! :)

John Wong JohnWong at crimsonlogic.com
Thu Mar 18 20:27:15 EST 2004


Paul,

Do you have any ports in VLAN2 with devices connected to it?
1 funny thing I found out about Cat6500 switches was that if
we do not have any connected devices in that VLAN, the MSFC
VLAN interface will actually not be brought up/online.

Hope it helps.



> -----Original Message-----
> From: Paul Stewart [mailto:pauls at nexicom.net] 
> Sent: Friday, March 19, 2004 9:20 AM
> To: cisco-nsp at puck.nether.net
> Subject: [nsp] 6509 Help - Please! :)
> 
> 
> Hi everyone...
> 
> I'm trying to bring a new 6509 online in hybrid mode... This 
> is my first
> attempt at hybrid mode (although I am used to 5500's with RSM cards so
> hoping it's not much different)....
> 
> Anyways, my problem is getting native vlan online.  
> 
> At the moment this switch is configured but not live... 
> However I cannot get
> vlan 2 (my default vlan) to come online.. Trying to avoid 
> using vlan 1 for
> political reasons.  This is all in an effort to run policing 
> on vlan ports
> and limit bandwidth.  Since my last posts I have discovered 
> that a 6509 we
> connect to via fiber is running hybrid mode and doing 
> policing on vlan's no
> problem hence why we dumped native ios for the time being.... ;)
> 
> Anyways, here's my configs... Hope someone has a minute to 
> browse them and
> let me know where I'm going wrong... My main concern is to 
> get vlan2 up..
> Once it's up I believe the rest should fall into place..  But 
> I'm really
> lost at this point (geesh, these configs are long haha)
> 
> Our setup is *really* simple... Port 3/1 is a trunked isl 
> port that has
> multiple vlan's on it.  *All* other ports are part of vlan2 
> itself.  That's
> it.  It's a low traffic site and my goal is simple to get 
> everything running
> through it and hopefully do some policing on the vlan's in 
> the "router".
> Oh, and this switch is the vtp master as well...
> 
> Right now I cannot ping my own address while on the router 
> side even... Vlan
> 2 is down/down as are all other vlans.  From the switch side 
> I cannot ping
> it's own address or the router side neither...
> 
> Sorry that the configs are so long but didn't want to miss 
> anything that
> might be important...  I've tried to cutout the obvious stuff...
> 
> Thanks so much in advance to the group.. You guys/gals  have been
> wonderful...  I'm now 3 days longer at the client site and 
> this is getting
> embarrassing..;)
> 
> Paul
> 
> begin
> !
> # ***** ALL (DEFAULT and NON-DEFAULT) CONFIGURATION *****
> !
> !
> #time: Fri Mar 19 2004, 00:59:31
> !
> #version 8.2(1)
> !
> set feature agg-link-partner disable
> set option long-cable disable
> set password xxxxxxx
> set enablepass xxxxxxxx
> set prompt xxxxxxx>
> set length 24 default
> set logout 20
> set config mode binary
> set banner motd ^C^C
> set banner lcd ^C^C
> !
> #test
> set test diaglevel minimal
> set test diagfail-action offline
> !
> #dot1x
> set dot1x system-auth-control enable
> set dot1x quiet-period 60
> set dot1x tx-period 30
> set dot1x shutdown-timeout 300
> set dot1x supp-timeout 30
> set dot1x server-timeout 30
> set dot1x max-req 2
> set dot1x re-authperiod 3600
> set feature dot1x-radius-keepalive enable
> !
> #errordetection
> set errordetection inband disable
> set errordetection memory disable
> set errordetection portcounter disable
> !
> #system
> set system baud  9600
> set system modem disable
> set traffic monitor 100
> set system highavailability disable
> set system highavailability versioning disable
> set system info-log disable
> set system info-log tftp 0.0.0.0 sysinfo
> set system info-log interval 1440
> set system crossbar-fallback bus-mode
> set system switchmode allow truncated
> set system switchmode threshold 2
> set system core-dump disable
> set system core-file  slot0:crashinfo
> set system syslog-dump disable
> set system syslog-file  slot0:sysloginfo
> set system supervisor-update disable
> set feature log-command enable
> set feature loop-detect enable
> set feature supmon enable
> !
> #power
> set power redundancy enable
> !
> #Default Inlinepower
> set inlinepower defaultallocation 15400
> !
> #frame distribution method
> set port channel all distribution ip both
> !
> #mac address reduction
> set spantree macreduction disable
> !
> #default portcost mode
> set spantree defaultcostmode short
> !
> #Local User
> set localuser authentication disable
> !
> #stp mode
> set spantree mode rapid-pvst
> !
> #vtp
> set vtp domain xxxxx
> set vtp mode server
> set vtp mode server vlan
> set vtp passwd xxxxxx
> set vtp version 1
> set vtp pruning disable
> set vtp pruneeligible 2-1000
> clear vtp pruneeligible 1001-1005
> set vlan 2 name Management_VLAN type ethernet mtu 1500 said 
> 100002 state
> active
> set vlan 50 name xxxxxxx type ethernet mtu 1500 said 100050 
> state active
> set vlan 99 name xxxxxx type ethernet mtu 1500 said 100099 
> state active
> set vlan 200 name xxxxxx type ethernet mtu 1500 said 100200 
> state active
> set vlan 201 name xxxxxx type ethernet mtu 1500 said 100201 
> state active
> set vlan 202 name xxxxxxx type ethernet mtu 1500 said 100202 
> state active
> set vlan 203 name xxxxxx type ethernet mtu 1500 said 100203 
> state active
> set vlan 204 name xxxxxx type ethernet mtu 1500 said 100204 
> state active
> set vlan 205 name xxxxxx type ethernet mtu 1500 said 100205 
> state active
> set vlan 1002 name fddi-default type fddi mtu 1500 said 
> 101002 state active
> set vlan 1004 name fddinet-default type fddinet mtu 1500 said 
> 101004 state
> active stp ibm
> set vlan 1005 name trnet-default type trbrf mtu 1500 said 101005 state
> active stp ibm
> <this part I find quite weird...for vlan 1>
> set vlan 1
> set vlan 1003 name token-ring-default type trcrf mtu 1500 
> said 101003 state
> active mode srb aremaxhop 0 stemaxhop 0 backupcrf off
> set vlan 1 translation 1002 translation 1003
> set vlan 1002 translation 1 translation 1003
> set vlan 1003 translation 1 translation 1002
> !
> #dot1q-all-tagged
> set dot1q-all-tagged disable
> !
> #Layer 2 protocol tunnel
> set l2protocol-tunnel cos 5
> set l2protocol-tunnel trunk disable
> !
> #ip
> set feature mdg enable
> set feature psync-recovery no-powerdown
> set interface sc0 1 xxx.xxx.100.14/255.255.255.0 xxx.xxx.100.255
> 
> set interface sc0 up
> set interface trap sc0 disable
> set interface sl0 0.0.0.0 0.0.0.0
> set interface sl0 up
> set interface trap sl0 disable
> set interface sc1 2 0.0.0.0/0.0.0.0 0.0.0.0
> 
> set interface sc1 down
> set interface trap sc1 disable
> set arp agingtime 1200
> set ip redirect   enable
> set ip unreachable   enable
> set ip fragmentation enable
> set ip route 0.0.0.0/0.0.0.0         xxx.xxx.100.1
> set ip alias default         0.0.0.0
> !
> #command alias
> !
> #vmps
> set vmps server retry 3
> set vmps server reconfirminterval 60
> set vmps downloadmethod tftp
> set vmps downloadserver 0.0.0.0 vmps-config-database.1
> set vmps state disable
> 
> !
> #rcp
> set rcp username
> !
> #ftp
> set ftp username
> set ftp password encrypted
> set ftp mode passive enable
> !
> #dns
> set ip dns server 216.168.96.10 primary
> set ip dns server 216.168.96.13
> set ip dns enable
> set ip dns domain nexicom.net
> !
> #spantree
> #spantree global defaults
> set spantree global-default portfast disable
> set spantree global-default loop-guard disable
> #portfast
> set spantree global-default bpdu-guard disable
> set spantree global-default bpdu-filter disable
> #bpdu-skewing
> set spantree bpdu-skewing disable
> 
> #MST (IEEE 802.1s)
> set spantree fwddelay 15 mst
> set spantree hello 2  mst
> set spantree maxage 20 mst
> set spantree mst maxhops 20
> set spantree priority 32768 mst
> set spantree priority 32768 mst 1
> set spantree priority 32768 mst 2
> set spantree priority 32768 mst 3
> set spantree priority 32768 mst 4
> set spantree priority 32768 mst 5
> set spantree priority 32768 mst 6
> set spantree priority 32768 mst 7
> set spantree priority 32768 mst 8
> set spantree priority 32768 mst 9
> set spantree priority 32768 mst 10
> set spantree priority 32768 mst 11
> set spantree priority 32768 mst 12
> set spantree priority 32768 mst 13
> set spantree priority 32768 mst 14
> set spantree priority 32768 mst 15
> 
> #MST Configuration
> set spantree mst config rollback force
> set spantree mst config name  revision 0
> set spantree mst 0 vlan 1-4094
> set spantree mst config commit
> 
> #uplinkfast groups
> set spantree uplinkfast disable
> #backbonefast
> set spantree backbonefast disable
> #vlan                         <VlanId>
> #vlan(defaults)
> set spantree enable  1-2,50,99,200-205
> set spantree fwddelay 15     1-2,50,99,200-205
> set spantree hello    2      1-2,50,99,200-205
> set spantree maxage   20     1-2,50,99,200-205
> set spantree priority 32768  1-2,50,99,200-205
> !
> #set boot command
> set boot config-register 0x2102
> set boot config-register auto-config overwrite
> set boot config-register auto-config sync disable
> set boot system flash bootflash:cat6000-sup2k8.8-2-1.bin
> set config acl nvram
> !
> !
> #permanent arp entries
> !
> #igmp
> set igmp enable
> set igmp fastleave disable
> set igmp v3-processing disable
> set igmp fastblock disable
> set igmp ratelimit disable
> set igmp ratelimit general-query 100
> set igmp ratelimit dvmrp 100
> set igmp ratelimit mospf1 100
> set igmp ratelimit mosfp2 100
> set igmp ratelimit pimv2 100
> !
> #igmp querier
> set igmp querier disable 1-1005,1025-4094
> set igmp querier 1-1005,1025-4094 qi 125
> set igmp querier 1-1005,1025-4094 oqi 300
> !
> #rgmp
> set rgmp disable
> !
> #protocolfilter
> set protocolfilter disable
> !
> #mls
> set mls flow full
> set mls rate 0
> set mls cef load-balance source-destination-ip
> set mls cef per-prefix-stats enable
> set mls verify checksum enable
> set mls verify length ip minimum enable
> set mls verify length ip inconsistant enable
> set mls verify length ipx minimum enable
> set mls verify length ipx inconsistant enable
> set mls bridged-flow-statistics disable 1-1000,1025-4094
> set mls nde version 7
> set mls nde destination-ifindex enable
> set mls nde source-ifindex enable
> set mls agingtime long-duration 320
> set mls agingtime 12
> set mls agingtime ipx 12
> set mls agingtime fast 0 0
> set mls nde disable
> !
> #vlan mapping
> !
> #gmrp
> set gmrp disable
> !
> #garp
> set garp timer all 200 600 10000
> !
> #cdp
> set cdp interval 60
> set cdp holdtime 180
> set cdp enable
> set cdp version v2
> set cdp format device-id other
> !
> #cops
> set cops retry-interval 30 30 300
> !
> #acllog
> set acllog ratelimit 0
> !
> !
> #mmls nonrpf
> set mmls nonrpf enable
> set mmls nonrpf timer 60
> set mmls nonrpf window 10
> set mmls nonrpf timer 10
> !
> #mmls flow-statistics
> set mmls flow-statistics timer 20
> set mmls flow-statistics threshold 60
> !
> #udld
> set udld disable
> set udld interval 15
> !
> #LACP channel
> set lacp-channel system-priority 32768
> !
> #channelprotocol
> set channelprotocol pagp 1
> set channelprotocol pagp 3
> set channelprotocol pagp 4
> !
> #port channel
> set port channel 1/1-2 85
> set port channel 3/1-4 87
> set port channel 3/5-8 88
> set port channel 3/9-12 89
> set port channel 3/13-16 90
> set port channel 3/17-20 91
> set port channel 3/21-24 92
> set port channel 3/25-28 93
> set port channel 3/29-32 94
> set port channel 3/33-36 95
> set port channel 3/37-40 96
> set port channel 3/41-44 97
> set port channel 3/45-48 98
> set port channel 4/1-4 99
> set port channel 4/5-8 100
> set port channel 4/9-12 101
> set port channel 4/13-16 102
> set port channel 4/17-20 103
> set port channel 4/21-24 104
> set port channel 4/25-28 105
> set port channel 4/29-32 106
> set port channel 4/33-36 107
> set port channel 4/37-40 108
> set port channel 4/41-44 109
> set port channel 4/45-48 110
> !
> #security ACLs
> set security acl arp-inspection match-mac enable
> set security acl arp-inspection address-validation enable
> set security acl feature ratelimit 500
> set security acl log maxflow 500
> set security acl log ratelimit 2500
> !
> #accounting
> set accounting exec disable
> set accounting connect disable
> set accounting system disable
> set accounting commands disable
> set accounting suppress null-username disable
> set accounting update new-info
> !
> #errdisable timeout
> set errdisable-timeout disable other
> set errdisable-timeout disable udld
> set errdisable-timeout disable duplex-mismatch
> set errdisable-timeout disable bpdu-guard
> set errdisable-timeout disable channel-misconfig
> set errdisable-timeout disable crossbar-fallback
> set errdisable-timeout disable gl2pt-ingress-loop
> set errdisable-timeout disable gl2pt-threshold-exceed
> set errdisable-timeout disable bcast-suppression
> set errdisable-timeout disable authentication-fail
> set errdisable-timeout disable md5-fail
> set errdisable-timeout disable arp-inspection
> set errdisable-timeout disable nostatic-power
> set errdisable-timeout interval 300
> !
> #http configuration
> set ip http server disable
> set ip http port 80
> !
> #private vlans
> !
> #crypto key
> !
> #qos statistics data export
> set qos statistics export disable
> set qos statistics export interval 300
> set qos statistics export destination 0.0.0.0 0
> !
> #mmls srm
> set mmls srm leak-start 30
> set mmls srm purge 120
> set mmls srm enable
> set mmls srm leak-end 90
> set mmls srm batch-size 10
> !
> #port security
> set port security auto-configure disable
> !
> # default port status is enable
> !
> !
> #module 1 : 2-port 1000BaseX Supervisor
> set module name    1
> set vlan 1    1/1-2
> set port enable     1/1-2
> set port clock 1/1-2 auto
> set port trap       1/1-2  disable
> set port name       1/1-2
> set port security 1/1-2 disable age 0 maximum 1 shutdown 0 
> unicast-flood
> enable violation shutdown
> set port dot1x 1/1-2 port-control force-authorized
> set port dot1x 1/1-2 multiple-host disable
> set port dot1x 1/1-2 multiple-authentication disable
> set port dot1x 1/1-2 shutdown-timeout disable
> set port dot1x 1/1-2 re-authentication disable
> set port dot1x 1/1-2 guest-vlan none
> set port broadcast  1/1-2  100.00% violation drop-packets 
> multicast disable
> unicast disable
> set port membership 1/1-2  static
> set port protocol 1/1-2 ip on
> set port protocol 1/1-2 ipx auto
> set port protocol 1/1-2 group auto
> set port negotiation 1/1-2 enable
> set port flowcontrol    1/1-2 send desired
> set port flowcontrol    1/1-2 receive off
> set port vtp 1/1-2 enable
> set cdp enable   1/1-2
> set udld aggressive-mode disable 1/1-2
> set trunk 1/1  auto negotiate 1-1005,1025-4094
> set trunk 1/2  auto negotiate 1-1005,1025-4094
> set spantree portfast    1/1-2 default
> set spantree bpdu-filter 1/1-2 default
> set spantree bpdu-guard 1/1-2 default
> set spantree link-type 1/1-2 auto
> set spantree portpri     1/1-2  32 mst
> set spantree portinstancepri 1/1  0 mst
> set spantree portinstancepri 1/2  0 mst
> set spantree portcost    1/1-2  20000 mst
> set spantree portinstancecost 1/1  cost 19999 mst
> set spantree portinstancecost 1/2  cost 19999 mst
> set spantree portcost    1/1-2  4
> set spantree portpri     1/1-2  32
> set spantree portvlanpri 1/1  0
> set spantree portvlanpri 1/2  0
> set spantree portvlancost 1/1  cost 3
> set spantree portvlancost 1/2  cost 3
> set spantree guard default 1/1-2
> set port qos 1/1-2 cos 0
> set port qos 1/1-2 trust untrusted
> set port qos 1/1-2 port-based
> set port qos 1/1-2 policy-source cops
> set port rsvp 1/1-2 dsbm-election disable 128
> set port gvrp     1/1-2  disable
> set gvrp registration normal   1/1-2
> set gvrp applicant normal   1/1-2
> set port gmrp   1/1-2  enable
> set gmrp registration normal   1/1-2
> set gmrp fwdall disable    1/1-2
> set port jumbo  1/1-2  disable
> set port dot1qtunnel 1/1-2 disable
> set port dot1q-all-tagged 1/1-2 enable
> set port dot1q-ethertype 1/1  8100
> set port dot1q-ethertype 1/2  8100
> set port l2protocol-tunnel 1/1-2 cdp stp vtp disable
> set port l2protocol-tunnel 1/1  drop-threshold 0 shutdown-threshold 0
> set port l2protocol-tunnel 1/2  drop-threshold 0 shutdown-threshold 0
> set port arp-inspection 1/1  drop-threshold 0 shutdown-threshold 0
> set port arp-inspection 1/2  drop-threshold 0 shutdown-threshold 0
> set qos statistics export port 1/1 disable
> set qos statistics export port 1/2 disable
> set port sync-restart-delay 1/1 210
> set port sync-restart-delay 1/2 210
> set port debounce 1/1 disable
> set port debounce 1/1 delay 10
> set port debounce 1/2 disable
> set port debounce 1/2 delay 10
> set port unicast-flood 1/1-2 enable
> set port errdisable-timeout 1/1-2 enable
> set cam notification added disable 1/1-2
> set cam notification removed disable 1/1-2
> set port channel 1/1-2 mode auto silent
> !
> #module 2 empty
> !
> #module 3 : 48-port 10/100BaseTX Ethernet
> set module name    3
> set module enable  3
> set vlan 2    3/1-48
> set port auxiliaryvlan 3/1-48 none
> set port qos 3/1-48 trust-ext untrusted
> set port qos 3/1-48 cos-ext 0
> set port qos 3/1-48 trust-device none
> set port enable     3/1-48
> set port speed      3/1-48  auto
> set port trap       3/1-48  disable
> set port name       3/1  Fiber_Port
> set port name       3/2-48
> set port security 3/1-48 disable age 0 maximum 1 shutdown 0 
> unicast-flood
> enable violation shutdown
> set port dot1x 3/1-48 port-control force-authorized
> set port dot1x 3/1-48 multiple-host disable
> set port dot1x 3/1-48 multiple-authentication disable
> set port dot1x 3/1-48 shutdown-timeout disable
> set port dot1x 3/1-48 re-authentication disable
> set port dot1x 3/1-48 guest-vlan none
> set port broadcast  3/1-48  100.00% violation drop-packets
> set port membership 3/1-48  static
> set port protocol 3/1-48 ip on
> set port protocol 3/1-48 ipx off
> set port protocol 3/1-48 group auto
> set port flowcontrol    3/1-48 send off
> set port flowcontrol    3/1-48 receive off
> set port vtp 3/1-48 enable
> set cdp enable   3/1-48
> set udld disable 3/1-48
> set udld aggressive-mode disable 3/1-48
> set trunk 3/1  on isl 1-1005,1025-4094
> set trunk 3/2  auto negotiate 1-1005,1025-4094
> set trunk 3/3  auto negotiate 1-1005,1025-4094
> set trunk 3/4  auto negotiate 1-1005,1025-4094
> ...
> set spantree portfast    3/1-48 default
> set spantree bpdu-filter 3/1-48 default
> set spantree bpdu-guard 3/1-48 default
> set spantree link-type 3/1-48 auto
> set spantree portpri     3/1-48  32 mst
> set spantree portinstancepri 3/1  0 mst
> set spantree portinstancepri 3/2  0 mst
> set spantree portinstancepri 3/3  0 mst
> ...
> set spantree portcost    3/1-3,3/5-48  2000000 mst
> set spantree portcost    3/4  200000 mst
> set spantree portinstancecost 3/1  cost 1999999 mst
> set spantree portinstancecost 3/2  cost 1999999 mst
> set spantree portinstancecost 3/3  cost 1999999 mst
> set spantree portinstancecost 3/4  cost 199999 mst
> ...
> set spantree portcost    3/4  19
> set spantree portcost    3/1-3,3/5-48  100
> set spantree portpri     3/1-48  32
> set spantree portvlanpri 3/1  0
> set spantree portvlanpri 3/2  0
> ...
> set spantree portvlancost 3/1  cost 99
> set spantree portvlancost 3/2  cost 99
> set spantree portvlancost 3/3  cost 99
> ...
> set spantree guard default 3/1-48
> set port qos 3/1-48 cos 0
> set port qos 3/1-48 trust untrusted
> set port qos 3/1-48 port-based
> set port qos 3/1-48 policy-source cops
> set port rsvp 3/1-48 dsbm-election disable 128
> set port gvrp     3/1-48  disable
> set gvrp registration normal   3/1-48
> set gvrp applicant normal   3/1-48
> set port gmrp   3/1-48  enable
> set gmrp registration normal   3/1-48
> set gmrp fwdall disable    3/1-48
> set port jumbo  3/1-48  disable
> set port dot1qtunnel 3/1-48 disable
> set port dot1q-all-tagged 3/1-48 enable
> set port l2protocol-tunnel 3/1-48 cdp stp vtp disable
> set port l2protocol-tunnel 3/1  drop-threshold 0 shutdown-threshold 0
> set port l2protocol-tunnel 3/2  drop-threshold 0 shutdown-threshold 0
> set port l2protocol-tunnel 3/3  drop-threshold 0 shutdown-threshold 0
> ...
> set port arp-inspection 3/1  drop-threshold 0 shutdown-threshold 0
> set port arp-inspection 3/2  drop-threshold 0 shutdown-threshold 0
> set port arp-inspection 3/3  drop-threshold 0 shutdown-threshold 0
> set port arp-inspection 3/4  drop-threshold 0 shutdown-threshold 0
> ...
> set qos statistics export port 3/1 disable
> set qos statistics export port 3/2 disable
> set qos statistics export port 3/3 disable
> ...
> set port debounce 3/1 disable
> set port debounce 3/2 disable
> set port debounce 3/3 disable
> ...
> set port unicast-flood 3/1-48 enable
> set port errdisable-timeout 3/1-48 enable
> set cam notification added disable 3/1-48
> set cam notification removed disable 3/1-48
> set port channel 3/1-48 mode auto silent
> !
> !
> #module 5 empty
> !
> #module 6 empty
> !
> #module 7 empty
> !
> #module 8 empty
> !
> #module 9 empty
> !
> #module 15 : 1-port Multilayer Switch Feature Card
> set module name    15
> set module enable  15
> set vlan 2    15/1
> set port name       15/1
> set port vtp 15/1 enable
> set cdp enable   15/1
> clear trunk 15/1  1-1005,1025-4094
> set trunk 15/1  nonegotiate isl
> set spantree portcost    15/1  20000 mst
> set spantree portinstancecost 15/1  cost 19999 mst
> set spantree portcost    15/1  4
> set spantree portpri     15/1  32
> set spantree portvlanpri 15/1  0
> set spantree portvlancost 15/1  cost 3
> set spantree guard default 15/1
> set port gmrp   15/1  enable
> set gmrp registration normal   15/1
> set gmrp fwdall disable    15/1
> set port jumbo  15/1  disable
> set port arp-inspection 15/1  drop-threshold 0 shutdown-threshold 0
> set cam notification added disable 15/1
> set cam notification removed disable 15/1
> !
> #module 16 empty
> !
> #switch port analyzer
> !
> #cam
> set cam agingtime 1-2,50,99,200-205 300
> set cam notification disable
> set cam notification interval 300
> set cam notification historysize 1
> set cam notification threshold disable
> set cam notification threshold limit 50
> set cam notification threshold interval 300
> set cam notification move disable
> !
> #gvrp
> set gvrp dynamic-vlan-creation disable
> set gvrp disable
> !
> #vlan verify-port-provisioning
> set vlan verify-port-provisioning disable
> !
> #authorization
> set authorization exec disable console
> set authorization exec disable telnet
> set authorization enable disable console
> set authorization enable disable telnet
> set authorization commands disable console
> set authorization commands disable telnet
> end
> 
> 
> MSFC CONFIG
> 
> Building configuration...
> 
> Current configuration : 2066 bytes
> !
> version 12.2
> service timestamps debug uptime
> service timestamps log uptime
> service password-encryption
> !
> hostname xxxx
> !
> boot system flash sup-slot0:c6msfc2-jsv-mz.122-14.ZA7.bin
> logging snmp-authfail
> logging queue-limit 100
> enable secret 5 xxxxxxx
> !
> clock timezone est -5
> ip subnet-zero
> !
> !
> !
> !
> !
> !
> interface Vlan1
>  no ip address
>  shutdown
> !
> interface Vlan2
>  ip address xxx.xxx.100.1 255.255.255.0
> !
> interface Vlan50
>  ip address xxx.xxx.103.1 255.255.255.252
> !
> interface Vlan99
>  ip address xxx.xxx.116.49 255.255.255.252
> !
> interface Vlan200
>  ip address xxx.xxx.106.105 255.255.255.252
> !
> interface Vlan201
>  ip address xxx.xxx.116.9 255.255.255.248
> !
> interface Vlan202
>  ip address xxx.xxx.119.193 255.255.255.252
> !
> interface Vlan203
>  ip address xxx.xxx.106.113 255.255.255.248
> !
> interface Vlan204
>  ip address xxx.xxx.119.197 255.255.255.252
> !
> interface Vlan205
>  ip address xxx.xxx.119.209 255.255.255.252
> !
> !
> ip default-gateway xxx.xxx.103.2
> ip classless
> ip route 0.0.0.0 0.0.0.0 xxx.xxx.103.2
> ip route xxx.xxx.100.64 255.255.255.192 xxx.xxx.108.7
> ip route xxx.xxx.100.128 255.255.255.128 xxx.xxx.108.7
> ip route xxx.xxx.101.0 255.255.255.128 xxx.xxx.108.8
> ip route xxx.xxx.101.128 255.255.255.128 xxx.xxx.100.6
> ip route xxx.xxx.105.64 255.255.255.240 xxx.xxx.100.2
> ip route xxx.xxx.108.64 255.255.255.192 xxx.xxx.108.6
> ip route xxx.xxx.108.128 255.255.255.128 xxx.xxx.108.6
> ip route xxx.xxx.119.200 255.255.255.248 xxx.xxx.116.50
> ip route xxx.xxx.120.0 255.255.255.0 xxx.xxx.100.2
> no ip http server
> !
> !
> !
> !
> !
> line con 0
>  exec-timeout 0 0
> line vty 0 4
>  password 7 xxxxxxxxxx
>  login
> !
> end
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list