SW1#sh run
Building configuration...

Current configuration : 6747 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname SW1
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxx
!
username xxxxxxxxxx password 7 xxxxxxxxxx
aaa new-model
!
!
aaa authentication login default group radius local
aaa authentication login localauth local
aaa authentication ppp default if-needed group radius local
aaa authentication dot1x default group radius
aaa authorization exec default group radius local
aaa authorization network default group radius local
aaa accounting delay-start
aaa accounting exec default start-stop group radius
aaa accounting network default start-stop group radius
!
!
!
aaa session-id common
system mtu routing 1500
ip subnet-zero
ip routing
ip dhcp use vrf connected
ip dhcp excluded-address 192.168.10.1 192.168.10.20
!
ip dhcp pool PRIVATE
   network 192.168.10.0 255.255.255.0
   default-router 192.168.10.1
   dns-server 208.67.222.222 9.9.9.9
   lease 0 5
!
ip dhcp pool GUEST
   network 192.168.30.0 255.255.255.240
   default-router 192.168.30.1
   dns-server 208.67.222.222 9.9.9.9
   lease 0 2
!
!
!
!
crypto pki trustpoint TP-self-signed-2498546944
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate-2498546944
 revocation-check none
 rsakeypair TP-self-signed-2498546944
!
!
crypto pki certificate chain TP-self-signed-2498546944
 certificate self-signed 01
...
!
!
!
!
!
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
vlan internal allocation policy ascending
vlan dot1q tag native
!
!
!
interface FastEthernet0/1
 description NETADMIN
 switchport access vlan 99
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/2
 description TRUNK TO AP10
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30
 switchport mode trunk
!
interface FastEthernet0/3
 description TRUNK TO AP20
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30
 switchport mode trunk
!
interface FastEthernet0/4
 description TRUNK TO AP30
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30
 switchport mode trunk
 spanning-tree portfast
!
interface FastEthernet0/5
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/6
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/7
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/8
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/9
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/10
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/11
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/12
 switchport access vlan 10
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/13
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/14
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/15
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/16
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/17
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/18
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/19
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/20
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/21
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/22
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/23
 switchport access vlan 20
 switchport mode access
 spanning-tree portfast
!
interface FastEthernet0/24
 switchport access vlan 20
 switchport mode access
!
interface GigabitEthernet0/1
 description TRUNK TO R1
 switchport trunk encapsulation dot1q
 switchport trunk allowed vlan 10,20,30,99
 switchport mode trunk
!
interface GigabitEthernet0/2
 description EXPANSION TRUNK
 switchport trunk encapsulation dot1q
 switchport mode trunk
!
interface Vlan1
 no ip address
!
interface Vlan10
 description PRIVATE ACCESS
 ip address 192.168.10.1 255.255.255.0
 spanning-tree guard loop
!
interface Vlan20
 description ISOLATED ACCESS
 ip address 192.168.20.1 255.255.255.0
!
interface Vlan30
 description GUEST ACCESS
 ip address 192.168.30.1 255.255.255.240
!
interface Vlan99
 description ASTARO
 ip address 192.168.99.1 255.255.255.252
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.0.1
ip http server
ip http secure-server
!
radius-server attribute 4 192.168.99.100
radius-server host 192.168.99.2 auth-port 1812 acct-port 1813 key 7 xxxxxxxxxx
!
control-plane
!
!
line con 0
 password 7 xxxxxxxxxx
 logging synchronous
line vty 0 4
 no exec
line vty 5 15
 no exec
!
end