no service pad
service timestamps debug uptime
service timestamps log datetime
no service password-encryption
service sequence-numbers
!
hostname SWITCHCA1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$mERr$MqXjA/cvC270.q198pRgp0
!
aaa new-model
!
username Admin privilege 15 secret 5 $1$kJkG2d5$Zj1ruL0L/DP9OovjZ3o
username michal secret 5 $1$mYLWuzB6$RyjBLuizMp.9EKYle0
aaa authentication login MojRADIUS group radius local group radius
!
clock timezone UTC 1 0
system mtu routing 1500
!
ip routing
!
!
ip domain-name firma.sk
!
mls qos map cos-dscp 0 8 16 26 32 46 48 56
mls qos srr-queue input bandwidth 40 10
mls qos srr-queue input threshold 1 8 16
mls qos srr-queue input threshold 2 34 66
mls qos srr-queue input buffers 67 33 
mls qos srr-queue input cos-map queue 1 threshold 2 1
mls qos srr-queue input cos-map queue 1 threshold 3 0
mls qos srr-queue input cos-map queue 2 threshold 1 2
mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7
mls qos srr-queue input cos-map queue 2 threshold 3 3 5
mls qos srr-queue input dscp-map queue 1 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 4 5 6 7
mls qos srr-queue input dscp-map queue 1 threshold 3 32
mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 18 19 20 21 22 23
mls qos srr-queue input dscp-map queue 2 threshold 2 33 34 35 36 37 38 39 48
mls qos srr-queue input dscp-map queue 2 threshold 2 49 50 51 52 53 54 55 56
mls qos srr-queue input dscp-map queue 2 threshold 2 57 58 59 60 61 62 63
mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue input dscp-map queue 2 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output cos-map queue 1 threshold 3 5
mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7
mls qos srr-queue output cos-map queue 3 threshold 3 2 4
mls qos srr-queue output cos-map queue 4 threshold 2 1
mls qos srr-queue output cos-map queue 4 threshold 3 0
mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 42 43 44 45 46 47
mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 26 27 28 29 30 31
mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 50 51 52 53 54 55
mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 58 59 60 61 62 63
mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 18 19 20 21 22 23
mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 34 35 36 37 38 39
mls qos srr-queue output dscp-map queue 4 threshold 1 8
mls qos srr-queue output dscp-map queue 4 threshold 2 9 10 11 12 13 14 15
mls qos srr-queue output dscp-map queue 4 threshold 3 0 1 2 3 4 5 6 7
mls qos queue-set output 1 threshold 1 138 138 92 138
mls qos queue-set output 1 threshold 2 138 138 92 400
mls qos queue-set output 1 threshold 3 36 77 100 318
mls qos queue-set output 1 threshold 4 20 50 67 400
mls qos queue-set output 2 threshold 1 149 149 100 149
mls qos queue-set output 2 threshold 2 118 118 100 235
mls qos queue-set output 2 threshold 3 41 68 100 272
mls qos queue-set output 2 threshold 4 42 72 100 242
mls qos queue-set output 1 buffers 10 10 26 54
mls qos queue-set output 2 buffers 16 6 17 61
mls qos
!
!
crypto pki trustpoint TP-self-signed- 8349583422
 enrollment selfsigned
 subject-name cn=IOS-Self-Signed-Certificate- 8349583422
 revocation-check none
 rsakeypair TP-self-signed- 8349583422
!
!
crypto pki certificate chain TP-self-signed-8349583422
 certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
!
!
!
port-channel load-balance src-dst-ip
!
spanning-tree mode pvst
spanning-tree extend system-id
spanning-tree vlan 1,31-34,40,44,100 priority 24576
!
vlan internal allocation policy ascending
!
!
interface Port-channel1
 description port channel do vm
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31,32,34,61,64
 switchport mode trunk
 switchport nonegotiate
!
interface GigabitEthernet0/1
 description port do proxy serveru
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/2
 description port do vyroba Firewallu 
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/3
 description port do navsteva firewallu
 switchport access vlan 32
 switchport mode access
!
interface GigabitEthernet0/4
 description port do push firewallu
 switchport access vlan 33
 switchport mode access
!
interface GigabitEthernet0/5
 description port smerom do internetu
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/6
 channel-group 1 mode on
 switchport mode trunk
!
interface GigabitEthernet0/7
 channel-group 1 mode on
 switchport mode trunk
!
interface GigabitEthernet0/8
 description port smerom na server
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/9
 description port smerom na server
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/10
 description Prepoj do budovy B
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 32-33,40,100
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/11
 description port smerom do mpls
 switchport access vlan 101
 switchport mode access
!
interface GigabitEthernet0/12
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/13
 switchport access vlan 31
 switchport mode access
!
interface GigabitEthernet0/14
 switchport access vlan 34
 switchport mode access
!
interface GigabitEthernet0/15
 switchport access vlan 34
 switchport mode access
!
interface GigabitEthernet0/16
 switchport access vlan 34
 switchport mode access
!
interface GigabitEthernet0/17
 switchport access vlan 34
 switchport mode access
!
interface GigabitEthernet0/18
 switchport access vlan 32
 switchport mode access
!
interface GigabitEthernet0/19
 switchport access vlan 33
 switchport mode access
!
interface GigabitEthernet0/20
 switchport access vlan 40
 switchport mode access
!
interface GigabitEthernet0/21
 switchport access vlan 44
 switchport mode access
!
interface GigabitEthernet0/22
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31-33,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/23
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31-33,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/24
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31-33,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/25
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31-34,40,44
 switchport mode trunk
 switchport nonegotiate
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust dscp
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/26
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31,33-34,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/27
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31,33-34,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust dscp
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface GigabitEthernet0/28
 switchport trunk encapsulation dot1q
 switchport trunk native vlan 40
 switchport trunk allowed vlan 31,33-34,40,44
 switchport mode trunk
 srr-queue bandwidth share 10 10 60 20
 srr-queue bandwidth shape 10 0 0 0
 queue-set 2
 mls qos trust cos
 auto qos voip trust 
 macro description cisco-switch
 spanning-tree link-type point-to-point
!
interface Vlan1
 no ip address
!
interface Vlan31
 ip address 172.30.28.1 255.255.252.0
!
interface Vlan32
 no ip address
!
interface Vlan33
 no ip address
!
interface Vlan34
 ip address 172.30.32.5 255.255.252.0
!
interface Vlan40
 no ip address
!
interface Vlan44
 ip address 172.30.44.1 255.255.255.0
!
interface Vlan100
 ip address 192.168.100.1 255.255.255.0
!
interface Vlan101
 ip address 10.100.10.5 255.255.252.192
!
ip default-gateway 172.30.28.3
ip http server
ip http authentication local
ip http secure-server
radius-server host 172.33.28.12 auth-port 1645 acct-port 1646 key nejakeHeslo
!
ip classless
ip route 172.30.64.0 255.255.252.0 192.168.100.2 
ip route 172.30.45.0 255.255.255.0 192.168.100.2 
ip route 172.30.60.0 255.255.252.0 192.168.100.2 
ip route 172.30.32.0 255.255.252.0 172.30.28.48 
ip route 0.0.0.0 0.0.0.0 172.30.28.3 
!
!
logging esm config
!
snmp-server community SNMPreadCommunity RO
snmp-server community SNMwriteCommunity RW
snmp-server location SystemLocation
snmp-server contact SystemConact
!
!
line con 0
line vty 0 4
 password [heslo]
 login authentication MojRADIUS
 transport input telnet ssh
line vty 5 15
!
