no spanning-tree
!
vlan database
 vlan 50,249,1108,1149,3458
exit
!
loopback-detection enable
loopback-detection interval 10
!
errdisable recovery interval 60
errdisable recovery cause loopback-detection
errdisable recovery cause port-security
errdisable recovery cause dot1x-src-address
errdisable recovery cause acl-deny
errdisable recovery cause stp-bpdu-guard
errdisable recovery cause stp-loopback-guard
errdisable recovery cause unidirectional-link
errdisable recovery cause storm-control
errdisable recovery cause l2pt-guard
!
ip dhcp relay address 10.10.10.144
ip dhcp relay enable
ip dhcp information option
ip dhcp relay information option format-type option pv delimeter space
ip dhcp information option format-type option pv delimeter space
!
ip igmp snooping
ip igmp snooping vlan 1149
!
ip access-list extended 1
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 2
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 3
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 4
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 5
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 6
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 7
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 8
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 9
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 10
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 11
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 12
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 13
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 14
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 15
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 16
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 17
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 18
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 19
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 20
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 21
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 22
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
 permit ip 10.222.0.0 0.0.255.255 any ace-priority 60
 deny ip any any ace-priority 80
exit
!
ip access-list extended 23
 permit udp any any any bootps ace-priority 20
 permit ip 10.220.0.0 0.0.255.255 any ace-priority 40
exit
!
!
hostname MES-10.170.108.226
!
encrypted radius-server host 10.10.10.3 timeout 2 key CPzJEbLlNb3ebb88+X8FLFZ3ekeomvMRTtwLMeH3o8E=
!
management access-list vty
 permit ip-source 10.10.0.0 mask 255.255.0.0
 permit ip-source 10.201.52.0 mask 255.255.255.0
 permit ip-source 10.170.0.0 mask 255.255.0.0
 permit ip-source 10.114.139.0 mask 255.255.255.0
exit
!
management access-class vty
!
logging host 10.10.10.3
no logging console
logging file informational
!
line telnet
 exec-timeout 60
exit
!
line ssh
 exec-timeout 60
exit
!
username admin password encrypted f3107e9e34e8582925197d707d9650587ad27742 privilege 15
!
ip ssh server
!
snmp-server server
encrypted snmp-server community hXKI/nU2kUzqKGixTrnUEJk2X9/GnPd4ihiuEf9vIco= ro view Default
!
!
aaa authentication login default radius local
!
no ip http server
!
clock timezone MSK +3
!
sntp server 10.10.10.3
!
no ip domain lookup
ip domain name ip-home.net
ip name-server  10.10.10.3
!
backup server tftp://10.10.10.200
backup path /
backup time-period 86400
backup auto
!
interface gigabitethernet1/0/1
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 1
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/2
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 2
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/3
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 3
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/4
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 4
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/5
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 5
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/6
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 6
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/7
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 7
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/8
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 8
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/9
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 9
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/10
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 10
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/11
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 11
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/12
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 12
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/13
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 13
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/14
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 14
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/15
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 15
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/16
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 16
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/17
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 17
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/18
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 18
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/19
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 19
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/20
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 20
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/21
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 21
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/22
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 service-acl input 22
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/23
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 port security discard
 switchport access vlan 3458
 switchport access multicast-tv vlan 1149
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface gigabitethernet1/0/24
 loopback-detection enable
 bridge multicast unregistered filtering
 port security mode max-addresses
 switchport mode trunk
 switchport trunk allowed vlan add 50
 lldp notifications enable
 switchport forbidden default-vlan
exit
!
interface tengigabitethernet1/0/1
 switchport mode trunk
 switchport trunk allowed vlan add 1108,1149,3458
exit
!
interface tengigabitethernet1/0/2
 switchport mode trunk
 switchport trunk allowed vlan add 1108,1149,3458
exit
!
interface tengigabitethernet1/0/3
 switchport mode trunk
 switchport trunk allowed vlan add 1108,1149,3458
exit
!
interface tengigabitethernet1/0/4
 switchport mode trunk
 switchport trunk allowed vlan add 1108,1149,3458
 switchport forbidden default-vlan
exit
!
interface vlan 50
 ip address 10.10.10.180 255.255.255.0
exit
!
interface vlan 1108
 ip address 10.170.108.226 255.255.255.0
exit
!
interface vlan 3458
 ip dhcp relay enable
exit
!
!
ip default-gateway 10.10.10.254
!