! Cisco IOS Software, C2960X Software (C2960X-UNIVERSALK9-M), Version 15.2(7)E12, RELEASE SOFTWARE (fc5)
! 
! Image: Software: C2960X-UNIVERSALK9-M, 15.2(7)E12, RELEASE SOFTWARE (fc5)
! Image: Compiled: Wed 02-Apr-25 10:42 by mcpre
! Image: flash:/c2960x-universalk9-mz.152-7.E12.bin
! Chassis type: WS-C2960X-24PS-L
! Memory: main 524288K
! Processor ID: FOC1832S2K1
! CPU: APM86XXX
! Motherboard assembly number     : 73-14193-04
! Motherboard serial number       : FOC18318ALU
! Motherboard revision number     : A0
! 
! VTP: VTP Version capable             : 1 to 3
! VTP: VTP version running             : 1
! VTP: VTP Domain Name                 : BRK-SW1-BNG
! VTP: VTP Pruning Mode                : Disabled
! VTP: VTP Traps Generation            : Disabled
! VTP: Device ID                       : 1cde.a7e1.3580
! VTP: Feature VLAN:
! VTP: --------------
! VTP: VTP Operating Mode                : Transparent
! VTP: Maximum VLANs supported locally   : 1005
! VTP: Number of existing VLANs          : 13
! VTP: Configuration Revision            : 0
! VTP: MD5 digest                        : 0xE8 0xD4 0x82 0x6C 0xBE 0x51 0x9A 0xF9 
! VTP:                                     0x3F 0x52 0xE5 0x58 0xAB 0x8D 0xF8 0x4F 
! 
! NAME: "1", DESCR: "WS-C2960X-24PS-L"
! PID: WS-C2960X-24PS-L  , VID: V01  , SN: FOC1832S2K1
! 
! 
!
!
version 15.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
service unsupported-transceiver
no service dhcp
!
hostname BRK-SW1-BNG
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$L/eK$sPiva/l0RrHy43RjvU6Tv1
!
username admin privilege 15 secret 5 $1$B9n2$Boj6LWOxforSzw2ezw09O1
aaa new-model
!
!
aaa group server tacacs+ bengling
 server name Bengling
!
aaa authentication login default local group bengling
aaa authorization config-commands
aaa authorization exec default local group tacacs+ 
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
!
!
!
!
!
!
aaa session-id common
clock timezone CET 1 0
clock summer-time CEST recurring last Sun Mar 2:00 last Sun Oct 2:00
switch 1 provision ws-c2960x-24ps-l
!
!
!
!
no ip source-route
ip routing
!
!
no ip domain-lookup
ip domain-name bengling.net
vtp domain BRK-SW1-BNG
vtp mode transparent
!
!
!
!
!
!
!
!
!
spanning-tree mode mst
spanning-tree extend system-id
no spanning-tree vlan 1-4094
no errdisable detect cause small-frame
no errdisable detect cause loopback
no errdisable detect cause gbic-invalid
no errdisable detect cause sfp-config-mismatch
no errdisable detect cause pagp-flap
no errdisable detect cause dtp-flap
no errdisable detect cause link-flap
no errdisable detect cause pppoe-ia-rate-limit
no errdisable detect cause dhcp-rate-limit
no errdisable detect cause arp-inspection
!
!
!
!
vlan internal allocation policy ascending
!
vlan 99
 name management
!
vlan 101
 name Intranet
!
vlan 102
 name Brukstuga
!
vlan 105
 name Tele2
!
vlan 500
 name MGMT
!
vlan 501
 name DATA
!
vlan 502 
!
vlan 508
 name ap-mgmt-vlan
!
lldp run
!
! 
!
!
!
!
!
!
!
!
interface FastEthernet0
 no ip address
 no ip route-cache
!
interface GigabitEthernet1/0/1
 description SKR-SW1-BNG
 switchport trunk allowed vlan 99,101,102,105
 switchport mode trunk
 load-interval 30
 power inline never
!
interface GigabitEthernet1/0/2
 switchport trunk allowed vlan 99,101,102,105
 switchport trunk native vlan 99
 switchport mode trunk
 load-interval 30
!
interface GigabitEthernet1/0/3
 description IPTV
 switchport access vlan 105
 switchport mode access
 load-interval 30
 spanning-tree portfast edge
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/4
 description Linksys AP Brukstuga
 switchport access vlan 102
 switchport mode access
 load-interval 30
 spanning-tree portfast edge
 spanning-tree bpdufilter enable
!
interface GigabitEthernet1/0/5
 load-interval 30
!
interface GigabitEthernet1/0/6
 load-interval 30
!
interface GigabitEthernet1/0/7
 load-interval 30
!
interface GigabitEthernet1/0/8
 load-interval 30
!
interface GigabitEthernet1/0/9
 load-interval 30
!
interface GigabitEthernet1/0/10
 load-interval 30
!
interface GigabitEthernet1/0/11
 load-interval 30
!
interface GigabitEthernet1/0/12
 load-interval 30
!
interface GigabitEthernet1/0/13
 load-interval 30
!
interface GigabitEthernet1/0/14
 load-interval 30
!
interface GigabitEthernet1/0/15
 switchport mode trunk
 load-interval 30
!
interface GigabitEthernet1/0/16
 load-interval 30
!
interface GigabitEthernet1/0/17
 load-interval 30
!
interface GigabitEthernet1/0/18
 load-interval 30
!
interface GigabitEthernet1/0/19
 load-interval 30
!
interface GigabitEthernet1/0/20
 load-interval 30
!
interface GigabitEthernet1/0/21
 load-interval 30
!
interface GigabitEthernet1/0/22
 load-interval 30
!
interface GigabitEthernet1/0/23
 description BRK-AP1-BNG
 switchport trunk allowed vlan 99,101,102,105
 switchport trunk native vlan 99
 switchport mode trunk
 load-interval 30
!
interface GigabitEthernet1/0/24
 description BRK-AP2-BNG
 switchport trunk allowed vlan 99,101,102,105
 switchport mode trunk
 load-interval 30
!
interface GigabitEthernet1/0/25
 load-interval 30
!
interface GigabitEthernet1/0/26
 load-interval 30
!
interface GigabitEthernet1/0/27
 load-interval 30
!
interface GigabitEthernet1/0/28
 load-interval 30
!
interface Vlan1
 no ip address
 shutdown
!
interface Vlan99
 description MGMT
 ip address 192.168.21.21 255.255.255.0
 no ip redirects
 no ip unreachables
 no ip proxy-arp
!
!
no ip ftp passive
ip ftp source-interface Vlan99
ip tcp path-mtu-discovery
no ip http server
no ip http secure-server
ip http client source-interface Vlan99
ip tftp source-interface Vlan99
ip route 0.0.0.0 0.0.0.0 Vlan99 192.168.21.1
ip ssh source-interface Vlan99
!
access-list 1 permit 192.168.0.2
access-list 1 permit 192.168.253.1
access-list 1 permit 192.168.254.0 0.0.0.255 log
access-list 1 permit 192.168.21.0 0.0.0.255 log
access-list 1 permit 192.168.42.0 0.0.0.255 log
access-list 1 permit 192.168.251.0 0.0.0.255 log
access-list 1 permit 192.168.40.0 0.0.0.255 log
access-list 1 permit 10.10.97.0 0.0.0.255 log
!
!
tacacs server Bengling
 address ipv4 192.168.21.2
 key 7 047A030C0A391F4B0C1A0D400004040F23
!
!
privilege exec level 1 show
privilege exec level 15 debug
!
line con 0
 exec-timeout 1440 0
 password 7 0217135A18
 stopbits 1
line vty 0 3
 access-class 1 in
 exec-timeout 1440 0
 password 7 08305B4F1A
 transport preferred none
 transport input telnet ssh
 transport output telnet
line vty 4
 access-class 1 in
 exec-timeout 5 0
 password 7 0217135A18
 transport preferred none
 transport input telnet ssh
 transport output telnet
line vty 5 15
 access-class 1 in
 exec-timeout 5 0
 password 7 03154C0A15
 transport preferred none
 transport input telnet ssh
 transport output telnet
!
ntp server 192.168.21.1
!
end

