cisco 3650show run
Building configuration...
Current configuration : 16334 bytes
!
version 12.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname hexin-3560x
!
boot-start-marker
boot-end-marker
!
enable secret level 14 5 $1$gVG5$VOVN1a/JvY8GPWyZ7VHLs.
enable secret 5 $1$wZck$YBmO1G1QdAIwbOGvLFEGT0
enable password 7 044C1C1141781B42081B4B141D06
!
!
!
no aaa new-model
system mtu routing 1500
authentication mac-move permit
ip subnet-zero
ip routing
!
!
!
!
crypto pki trustpoint TP-self-signed-4054247296
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4054247296
revocation-check none
rsakeypair TP-self-signed-4054247296
!
!
crypto pki certificate chain TP-self-signed-4054247296
certificate self-signed 01
30820244 308201AD A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 34303534 32343732 3936301E 170D3933 30333031 30303031
32365A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D34 30353432
34373239 3630819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100DD44 04D2C89D A5DB1672 E908A6EB 756B6818 CB91D793 E0846400 17082381
B5D1FF66 C073CC74 D40EE848 BBD298F2 BE689263 3D567E60 AFDBBEA5 8C404B2F
29FC33FE BE338C08 84DA5812 87FBDC13 08F5BE9C F8DC4BA6 DBDB58B6 D1DB82DC
BC5D723E 6D74592E 7D44D76B BE496DDE 09E5F2B0 5BD640B4 462D2443 42D5F2E5
EF770203 010001A3 6C306A30 0F060355 1D130101 FF040530 030101FF 30170603
551D1104 10300E82 0C686578 696E2D33 35363078 2E301F06 03551D23 04183016
80149E6B 5E464BA4 CE05FD96 5337F5D2 6EDDA2A3 63BF301D 0603551D 0E041604
149E6B5E 464BA4CE 05FD9653 37F5D26E DDA2A363 BF300D06 092A8648 86F70D01
01040500 03818100 17845CD5 0C0A9F58 90D066A7 A4F2D6B5 A222069D 9168ABCA
DFFBF7E9 6720B0E5 2D6B7882 810C543E E22AD958 74745750 873DDA29 DA15CBF1
396DAE61 027556CA 7AC2876D 1120D364 D5E8EAEE 3E7D592D D07B28A3 AB049187
1EF993D2 C0042173 A7CDF9E9 53793330 B1D6C1C4 1D8C9373 31E05BC8 5D07E37E
1EDA533B C031DF7C
quit
spanning-tree mode pvst
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
!
!
!
!
vlan internal allocation policy ascending
!
!
class-map match-all zys
!
!
!
interface FastEthernet0
no ip address
no ip route-cache cef
no ip route-cache
no ip mroute-cache
shutdown
!
interface GigabitEthernet0/1
no switchport
ip address 172.16.100.1 255.255.255.0
ip access-group zys out
!
interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/3
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/4
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/5
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/6
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/7
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/8
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/9
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/10
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/11
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/12
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/13
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/14
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/15
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/16
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/17
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/18
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/19
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/20
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/21
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet0/22
switchport access vlan 60
switchport trunk encapsulation dot1q
switchport mode access
!
interface GigabitEthernet0/23
switchport access vlan 50
switchport trunk encapsulation dot1q
switchport mode access
!
interface GigabitEthernet0/24
description link to DHCP-SERVER
switchport access vlan 50
!
interface GigabitEthernet1/1
!
interface GigabitEthernet1/2
!
interface GigabitEthernet1/3
!
interface GigabitEthernet1/4
!
interface TenGigabitEthernet1/1
!
interface TenGigabitEthernet1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan10
ip address 172.16.5.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan20
ip address 172.16.2.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan30
ip address 172.16.3.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan40
ip address 172.16.4.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan50
ip address 172.16.1.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan60
ip address 172.16.6.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan70
ip address 172.16.7.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan80
ip address 172.16.8.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan90
ip address 172.16.9.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan100
ip address 172.16.10.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan110
ip address 172.16.11.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan120
ip address 172.16.12.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan130
ip address 172.16.13.1 255.255.255.0
ip helper-address 172.16.1.8
!
interface Vlan200
ip address 172.16.20.1 255.255.255.0
!
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.100.2
ip route 192.168.0.0 255.255.248.0 172.16.6.2
ip http server
ip http secure-server
!
ip access-list extended zys
deny icmp any host 58.255.253.179
deny icmp any host 203.166.160.139
deny icmp any host 203.166.160.140
deny icmp any host 121.9.210.218
deny icmp any 211.152.35.0 0.0.0.255
deny icmp any host 121.9.210.207
deny icmp any host 211.100.99.36
deny icmp any host 211.100.99.35
permit icmp any any
permit tcp any any eq domain
permit udp any any eq domain
permit tcp host 123.124.198.111 any
permit ip host 123.124.198.111 any
permit tcp host 123.124.198.112 any
permit ip host 123.124.198.112 any
permit tcp any host 59.151.52.23 eq www
permit ip any host 59.151.52.23
permit tcp any host 219.232.254.121 eq www
permit tcp any host 220.181.86.133 eq 7745
permit tcp any host 220.181.86.133 eq 7746
permit tcp any host 203.81.21.15 eq www
permit tcp any host 203.81.21.34 eq www
permit tcp any host 59.151.43.24 eq www
permit tcp any host 121.198.77.100 eq www
permit tcp any 211.157.29.0 0.0.0.255 eq www
permit tcp any host 221.238.196.87 eq 1755
permit tcp any 211.157.28.0 0.0.0.255 eq www
permit tcp any 211.157.7.0 0.0.0.63 eq www
permit ip any host 219.232.255.19
permit tcp any 211.157.52.0 0.0.0.63 eq www
permit tcp any 211.157.53.0 0.0.0.255 eq www
permit tcp any 61.135.155.128 0.0.0.31 eq www
permit tcp any 121.15.210.96 0.0.0.31 eq www
permit tcp any 210.73.192.0 0.0.0.127 eq www
permit tcp any 222.73.58.0 0.0.0.255 eq www
permit tcp any 61.152.199.0 0.0.0.255 eq www
permit tcp any 61.152.189.0 0.0.0.255 eq www
permit tcp any 202.109.106.0 0.0.0.127 eq www
permit tcp any 202.109.107.0 0.0.0.255 eq www
permit tcp any 222.66.168.0 0.0.0.255 eq www
permit tcp any 202.105.115.0 0.0.0.255 eq www
permit tcp any 121.35.254.0 0.0.0.255 eq www
permit tcp any 60.28.160.0 0.0.0.255 eq www
permit tcp any 211.144.192.0 0.0.0.255 eq www
permit tcp any 121.9.220.64 0.0.0.63 eq www
permit tcp any host 210.51.2.112 eq www
permit tcp any host 123.183.210.183 eq www
permit tcp any host 210.73.192.79 eq www
permit tcp any host 218.30.64.24 eq www
permit tcp any host 207.46.48.140 eq www
permit tcp any host 207.46.107.69 eq www
permit tcp any host 121.0.19.134 eq www
permit tcp any host 211.157.29.50 eq www
permit tcp any 211.157.28.192 0.0.0.31 eq www
permit ip any host 121.198.77.100
permit ip any 211.157.29.0 0.0.0.255
permit ip any 211.157.28.0 0.0.0.255
permit ip any 211.157.7.0 0.0.0.63
permit ip any 211.157.52.0 0.0.0.63
permit ip any 211.157.53.0 0.0.0.255
permit ip any 61.135.155.128 0.0.0.31
permit ip any 121.15.210.96 0.0.0.31
permit ip any 210.73.192.0 0.0.0.127
permit ip any 222.73.58.0 0.0.0.255
permit ip any 61.152.199.0 0.0.0.255
permit ip any 61.152.189.0 0.0.0.255
permit ip any 202.109.106.0 0.0.0.127
permit ip any 202.109.107.0 0.0.0.255
permit ip any 222.66.168.0 0.0.0.255
permit ip any 202.105.115.0 0.0.0.255
permit ip any 121.35.254.0 0.0.0.255
permit ip any 60.28.160.0 0.0.0.255
permit ip any 211.144.192.0 0.0.0.255
permit ip any 121.9.220.64 0.0.0.63
permit ip any host 210.73.192.79
permit ip any host 218.30.64.24
permit ip any host 207.46.48.140
permit ip any host 207.46.107.69
permit ip any host 121.0.19.134
permit ip any host 211.157.29.50
permit ip any 211.157.28.192 0.0.0.31
permit ip any host 221.238.196.87
permit ip any 59.151.52.0 0.0.0.63
permit ip any 59.151.53.0 0.0.0.255
permit tcp any 59.151.52.0 0.0.0.63 eq www
permit tcp any 59.151.53.0 0.0.0.255 eq www
permit tcp any host 59.151.7.59
permit tcp any host 119.167.247.125 eq www
permit tcp any host 219.232.255.3 eq www
permit tcp any host 219.232.255.5 eq www
permit tcp any host 219.232.255.6 eq www
permit tcp any host 219.232.255.13 eq www
permit tcp any host 219.232.255.35 eq www
permit tcp any host 219.232.255.36 eq www
permit tcp any 59.151.114.0 0.0.0.255 eq www
permit tcp any 125.39.96.32 0.0.0.31 eq www
permit tcp any 25.76.233.0 0.0.0.255 eq www
permit tcp any host 119.167.247.126 eq www
permit tcp any host 119.167.247.124 eq www
permit tcp any host 219.232.255.10 eq www
permit tcp any host 219.232.255.12 eq www
permit tcp any host 219.237.16.47 eq www
permit tcp any host 59.175.238.39 eq www
permit tcp any host 59.151.7.18 eq www
permit tcp any host 219.232.255.43 eq www
permit tcp any host 219.232.255.22 eq www
permit tcp any host 219.232.255.30 eq www
permit tcp any host 219.232.255.31 eq www
permit tcp any host 219.232.255.32 eq www
permit tcp any host 219.232.255.44 eq www
permit tcp any host 202.99.30.209 eq www
permit tcp any host 209.99.10.132 eq www
permit tcp any host 210.73.90.9 eq www
permit tcp any host 202.108.88.50 eq www
permit tcp any host 202.108.88.8 eq 443
permit tcp any host 114.255.11.194 eq 443
permit tcp any host 219.142.79.192 eq 443
permit tcp any host 210.83.224.215 eq 443
permit tcp any host 202.99.10.132 eq 443
permit tcp any host 220.248.79.41 eq 443
permit tcp any 219.232.255.0 0.0.0.255 eq www
permit tcp any host 123.125.163.54 eq www
permit tcp any host 123.125.163.53 eq www
permit tcp any host 60.28.183.201 eq www
permit tcp any host 60.28.183.202 eq www
permit tcp any host 211.157.29.120 eq www
permit tcp any host 202.106.199.37 eq www
permit tcp any host 202.106.199.39 eq www
permit tcp any host 202.106.199.36 eq www
permit tcp any host 60.210.16.40 eq www
permit tcp any host 60.210.16.46 eq www
permit tcp any host 61.158.128.169 eq www
permit tcp any host 123.125.163.39 eq www
permit tcp any host 125.39.42.46 eq www
permit tcp any host 125.39.42.47 eq www
permit tcp any host 125.39.42.114 eq www
permit tcp any host 125.39.42.115 eq www
permit tcp any host 59.151.52.20 eq www
permit tcp any host 59.151.52.20 eq 1433
permit tcp any host 59.151.53.130 eq www
permit tcp any host 61.152.199.29 eq www
permit tcp any host 59.151.114.210 eq 443
permit tcp any host 59.151.114.211 eq 443
permit tcp any host 59.151.114.211 eq www
permit tcp any host 59.151.114.210 eq www
permit tcp any host 59.151.114.63 eq 443
permit tcp any host 59.151.7.20 eq www
permit tcp any host 123.125.163.59 eq www
permit tcp any host 59.151.114.49 eq 443
permit tcp any host 123.125.163.22 eq www
permit tcp any host 123.125.163.23 eq www
permit tcp any host 123.125.163.45 eq www
permit tcp any 123.125.163.0 0.0.0.255 eq www
permit tcp any host 202.106.199.36 eq 443
permit tcp any host 202.106.199.37 eq 443
permit tcp any host 202.106.199.39 eq 443
permit tcp any host 123.103.97.207 eq www
permit tcp any host 211.144.223.207 eq www
permit tcp any host 211.144.223.207 eq 443
permit tcp any host 123.103.97.197 eq www
permit tcp any host 123.103.97.197 eq 443
permit tcp any host 123.103.97.207 eq 443
permit tcp any host 222.73.58.34 eq www
permit tcp any host 222.77.181.151 eq www
permit tcp any host 1.202.235.250 eq smtp
permit tcp any host 1.202.235.250 eq pop3
permit tcp any host 1.202.235.250 eq www
permit tcp any host 221.204.223.24 eq www
permit tcp any host 221.204.223.29 eq www
permit tcp any host 203.171.227.208 eq www
permit tcp any host 122.70.185.188 eq www
permit tcp any host 201.106.199.34 eq www
permit tcp any host 123.132.254.15 eq www
permit tcp any host 124.131.239.55 eq www
permit tcp any host 222.80.93.137 eq www
permit tcp any host 222.80.93.169 eq www
permit tcp any host 210.192.120.228 eq www
permit tcp any host 222.88.93.137 eq www
permit tcp any host 222.88.93.169 eq www
permit tcp any host 203.171.235.84 eq www
permit tcp any host 59.173.14.40 eq www
permit tcp any host 59.173.14.41 eq www
permit tcp any host 124.248.39.229 eq www
permit ip any host 10.20.91.241
permit ip any host 10.20.80.36
permit ip any host 10.20.90.240
permit tcp any host 124.248.39.226
permit tcp any host 10.20.80.36
permit tcp any host 10.20.90.240
permit tcp any host 10.20.91.241
permit tcp any host 10.20.90.254
permit ip any host 59.151.114.128
permit ip any host 115.238.239.33
permit ip any host 115.238.230.162
permit ip any host 210.14.70.236
permit ip any host 210.14.71.124
permit tcp any host 124.248.39.228
permit ip any host 115.238.239.22
permit ip any host 115.238.230.154
permit ip any host 115.238.230.158
permit ip any host 220.181.112.34
permit ip any host 59.151.114.57
permit ip any host 59.151.114.212
permit ip any host 59.151.114.63
permit ip any host 213.248.117.56
permit tcp any host 124.248.39.229
permit ip any host 157.56.51.122
permit ip any host 211.157.29.148
permit ip any host 202.109.107.73
permit tcp any host 121.9.210.212 eq www
permit tcp any host 121.9.210.215 eq www
permit tcp any host 123.183.210.171 eq www
permit tcp any host 123.183.210.174 eq www
permit ip any host 117.27.137.17
permit ip any host 222.76.126.50
permit tcp any host 123.183.210.178 eq www
permit tcp any host 123.183.210.179 eq www
permit tcp any host 123.183.210.188 eq www
permit tcp any host 123.183.210.189 eq www
permit tcp any host 121.9.210.220 eq www
permit tcp any host 220.181.86.132 eq 7712
permit tcp any host 220.181.86.132 eq 7715
permit tcp any 125.39.0.0 0.0.255.255 eq www
permit tcp any host 202.108.251.68 eq www
permit tcp any host 205.204.70.252 eq www
permit tcp any 210.14.141.0 0.0.0.255 eq www
permit tcp any 211.152.35.0 0.0.0.255 eq 7715
permit tcp any host 211.154.163.33 eq www
permit tcp any host 123.150.197.201 eq www
permit tcp any host 123.150.202.167 eq www
permit tcp any host 123.150.197.159 eq www
permit tcp any 220.181.0.0 0.0.255.255 eq www
permit tcp any 110.75.187.0 0.0.0.255 eq www
permit tcp any 60.28.0.0 0.0.255.255 eq www
permit tcp any host 119.42.227.250 eq www
permit tcp any host 59.151.6.132 eq www
deny ip 172.16.8.0 0.0.0.255 any
deny ip 172.16.10.0 0.0.0.255 any
deny ip 172.16.9.0 0.0.0.255 any
permit ip any any
!
ip sla enable reaction-alerts
access-list 10 permit 172.16.4.44
access-list 10 permit 172.16.4.23
arp 172.16.4.54 1234.5678.7890 ARPA
snmp-server community !@QWASZX RO
!
!
line con 0
line vty 0 4
access-class 10 in
password 7 015226356C2A3535191F1A0C0B0111111D
login
line vty 5 15
login
!
end