DLS2#show run
Building configuration...

Current configuration : 3770 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname DLS2
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
system mtu routing 1500
vtp domain SWPOD
vtp mode transparent
udld enable

ip subnet-zero
ip routing
ip dhcp relay information trust-all
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1,100 priority 28672
spanning-tree vlan 200 priority 24576
!
vlan internal allocation policy ascending
!
vlan 100
 name Staff
!
vlan 150
 name server-farm
  private-vlan primary
  private-vlan association 151-152
!
vlan 151
  private-vlan isolated
!
vlan 152
  private-vlan community
!
vlan 200
 name Student
!
!
!
!
interface FastEthernet0/1
 udld port aggressive
!
interface FastEthernet0/2
 udld port aggressive
!
interface FastEthernet0/3
 udld port aggressive
!
interface FastEthernet0/4
 udld port aggressive
!
interface FastEthernet0/5
 udld port aggressive
!
interface FastEthernet0/6
 switchport private-vlan host-association 150 151
 switchport mode private-vlan host
 udld port aggressive
!
interface FastEthernet0/7
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/8
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/9
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/10
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/11
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/12
 switchport trunk encapsulation dot1q
 switchport mode trunk
 udld port aggressive
!
interface FastEthernet0/13
 udld port aggressive
 spanning-tree guard root
!
interface FastEthernet0/14
 udld port aggressive
 spanning-tree guard root
!
interface FastEthernet0/15
 udld port aggressive
!
interface FastEthernet0/16
 udld port aggressive
!
interface FastEthernet0/17
 udld port aggressive
!
interface FastEthernet0/18
 switchport private-vlan host-association 150 152
 switchport mode private-vlan host
 udld port aggressive
!
interface FastEthernet0/19
 switchport private-vlan host-association 150 152
 switchport mode private-vlan host
 udld port aggressive
!
interface FastEthernet0/20
 switchport private-vlan host-association 150 152
 switchport mode private-vlan host
 udld port aggressive
!
interface FastEthernet0/21
 udld port aggressive
!
interface FastEthernet0/22
 udld port aggressive
!
interface FastEthernet0/23
 udld port aggressive
!
interface FastEthernet0/24
 udld port aggressive
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
 ip address 172.16.1.4 255.255.255.0
 standby 1 ip 172.16.1.1
 standby 1 preempt
!
interface Vlan100
 ip address 172.16.100.4 255.255.255.0
 ip access-group 100 in
 standby 1 ip 172.16.100.1
 standby 1 preempt
!
interface Vlan150
 ip address 172.16.150.4 255.255.255.0
 private-vlan mapping 151-152
 standby 1 ip 172.16.150.1
 standby 1 preempt
!
interface Vlan200
 ip address 172.16.200.4 255.255.255.0
 ip access-group 100 in
 standby 1 ip 172.16.200.1
 standby 1 priority 150
 standby 1 preempt
!
ip classless
ip http server
ip http secure-server
!
!
access-list 100 permit tcp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 establi
shed
access-list 100 permit icmp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 echo-r
eply
access-list 100 permit icmp 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255 echo
access-list 100 deny   ip 172.16.200.0 0.0.0.255 172.16.100.0 0.0.0.255
access-list 100 permit ip any any
!
control-plane
!
!
line con 0
line vty 5 15
!
end

DLS2#

ALS2#show run
Building configuration...

Current configuration : 3657 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ALS2
!
boot-start-marker
boot-end-marker
!
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
udld enable

ip subnet-zero
!
!
ip dhcp snooping vlan 100,200
ip dhcp snooping
!
!
!
!
!
!
spanning-tree mode pvst
spanning-tree portfast bpduguard default
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
!
!
interface FastEthernet0/1
 udld port aggressive
!
interface FastEthernet0/2
 udld port aggressive
!
interface FastEthernet0/3
 udld port aggressive
!
interface FastEthernet0/4
 udld port aggressive
!
interface FastEthernet0/5
 udld port aggressive
!
interface FastEthernet0/6
 udld port aggressive
!
interface FastEthernet0/7
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/8
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/9
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/10
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/11
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/12
 switchport mode trunk
 udld port aggressive
 ip dhcp snooping trust
!
interface FastEthernet0/13
 udld port aggressive
 spanning-tree guard root
!
interface FastEthernet0/14
 udld port aggressive
 spanning-tree guard root
!
interface FastEthernet0/15
 switchport access vlan 200
 switchport mode access
 udld port aggressive
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/16
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/17
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/18
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/19
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/20
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/21
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/22
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/23
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface FastEthernet0/24
 switchport access vlan 200
 switchport mode access
 switchport port-security
 udld port aggressive
 spanning-tree portfast
 ip dhcp snooping limit rate 20
!
interface GigabitEthernet0/1
!
interface GigabitEthernet0/2
!
interface Vlan1
 ip address 172.16.1.102 255.255.255.0
 no ip route-cache
!
ip default-gateway 172.16.1.1
ip http server
ip http secure-server
ip sla enable reaction-alerts
!
line con 0
line vty 5 15
!
end

ALS2#