hostname %_sys_hostname%
user manager group administrators password plaintext *****
clock timezone %timezone%
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
ip dns server-address 8.8.8.8
!
spanning-tree
ip route 0.0.0.0/0 %gateway_ip%
!
ssh server vrf default
debug ztp all
debug destination console
vlan 1
vlan 100
 name Wi-Fi Corporate Service
vlan 130
 name Wired Devices
vlan 150
 name Wi-Fi Guest Service
vlan 200
 name IoT - Security Devices
vlan 220
 name IoT - Generic Devices
vlan 300
 name Network Management
vlan 301
 name AP Management
interface vlan 300
 ip address %vlan_300_ip%/27
interface lag 1
 no shutdown
 description LAN Uplink
 vlan trunk native 1
 vlan trunk allowed 100,130,150,200,220,300,301
interface 1/1/1
    no shutdown
    description %port1_description%
    loop-protect
    vlan access %port1_vlan%
interface 1/1/2
    no shutdown
    description Wired Device
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port2_vlan%
interface 1/1/3
    no shutdown
    description Wired Device
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port3_vlan%
interface 1/1/4
    no shutdown
    description Wired Device
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port4_vlan%
interface 1/1/5
    no shutdown
    description Wired Device
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port5_vlan%
interface 1/1/6
    no shutdown
    description CCTV
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port6_vlan%
interface 1/1/7
    no shutdown
    description CCTV
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port7_vlan%
interface 1/1/8
    no shutdown
    description CCTV
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port8_vlan%
interface 1/1/9
    no shutdown
    description IoT
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port9_vlan%
interface 1/1/10
    no shutdown
    description IoT
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port10_vlan%
interface 1/1/11
    no shutdown
    description IoT
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port11_vlan%
interface 1/1/12
    no shutdown
    description IoT
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port12_vlan%
interface 1/1/13
    no shutdown
    description Palo Alto firewall MGMT
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    vlan access %port13_vlan%
interface 1/1/14
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/15
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/16
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/17
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/18
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/19
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/20
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/21
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/22
    no shutdown
    description Wi-Fi Access Point
    loop-protect
    spanning-tree bpdu-guard
    spanning-tree port-type admin-edge
    power-over-ethernet priority critical
    vlan trunk native 301
    vlan trunk allowed 100,150,220,301
interface 1/1/23
    no shutdown
    description LAN Uplink
    lag 1
interface 1/1/24
    no shutdown
    description LAN Uplink
    lag 1
interface 1/1/25
    shutdown
    vlan access 1
interface 1/1/26
    shutdown
    vlan access 1
interface 1/1/27
    shutdown
    vlan access 1
interface 1/1/28
    shutdown
    vlan access 1
interface vlan 1
    ip dhcp
!
!
!
snmp-server vrf default
ip source-interface all interface %source_interface%
https-server vrf default
ztp force-provision