! version 12.1 no service pad service timestamps debug uptime service timestamps log uptime no service password-encryption ! hostname NAP-rack-switch ! aaa new-model aaa authentication dot1x default group radius aaa authorization network default group radius enable secret 5 $1$XZOE$iCtYU7m0snVPkBZqTyJvY0 enable password Cisco ! username Cisco password 0 Cisco username admin username user nopassword ip subnet-zero ip routing ! ip dhcp-server 10.0.0.1 vtp mode transparent ! ! spanning-tree mode pvst spanning-tree portfast default spanning-tree extend system-id no spanning-tree vlan 1-3,800 dot1x system-auth-control ! ! ! ! vlan 2 name NAP-FullAccess ! vlan 3 name NAP-Restricted ! ! interface FastEthernet0/1 switchport access vlan 3 switchport mode access dot1x port-control auto dot1x guest-vlan 3 no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/2 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/3 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/4 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/5 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/6 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/7 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/8 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/9 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/10 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/11 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/12 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/13 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/14 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/15 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/16 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/17 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/18 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/19 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/20 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/21 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/22 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/23 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/24 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/25 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/26 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/27 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/28 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/29 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/30 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/31 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/32 switchport mode access no cdp enable spanning-tree portfast spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/33 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/34 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/35 description ConLab-Sv1 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/36 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/37 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/38 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/39 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/40 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/41 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/42 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/43 switchport mode access no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/44 description Trunk to Foundry switchport trunk encapsulation dot1q switchport trunk allowed vlan 2,3 switchport mode trunk switchport nonegotiate no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/45 description Trunk to Aruba AP Controller switchport trunk encapsulation dot1q switchport trunk allowed vlan 1-3 switchport mode trunk switchport nonegotiate no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/46 description Trunk to Enterasys switchport trunk encapsulation dot1q switchport trunk allowed vlan 1-3 switchport mode trunk switchport nonegotiate no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/47 description Trunk to Cisco AP switchport trunk encapsulation dot1q switchport trunk allowed vlan 1-3 switchport mode trunk switchport nonegotiate no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface FastEthernet0/48 description Eng-exe private vlan test switchport trunk encapsulation dot1q switchport trunk allowed vlan 800 switchport mode dynamic auto no cdp enable spanning-tree bpdufilter disable spanning-tree bpduguard disable ! interface GigabitEthernet0/1 switchport mode access no cdp enable ! interface GigabitEthernet0/2 switchport mode access no cdp enable ! interface Vlan1 ip address 10.0.0.6 255.0.0.0 ! interface Vlan2 ip address 20.4.0.1 255.255.0.0 ip helper-address 10.0.0.1 ! interface Vlan3 ip address 30.4.0.1 255.255.0.0 ip helper-address 10.0.0.1 ! no ip classless ip route 20.0.0.0 255.255.0.0 Vlan2 ip route 30.0.0.0 255.255.0.0 Vlan3 ip http server ! no cdp run radius-server host 10.0.0.1 auth-port 1812 acct-port 1813 key secret radius-server retransmit 3 ! line con 0 line vty 0 4 password Cisco line vty 5 15 password Cisco ! ! end