Você está na página 1de 54

Esporte Interativo

Descritivo de Instalacao
Cisco Catalyst 3750 – X

No. Controle e Versão v1

Data de Preparação 10/Dezembro/2013


Confidencialidade
A Brasvideo submete este documento baseado em informações obtidas da empresa Es-
porte Interativo.

Este documento é confidencial e contém informações proprietárias e confidenciais da Bras-


video cujo uso será exclusivamente para avaliação do mesmo pela empresa Esporte Inte-
rativo. Sendo que este não pode publicar, divulgar, copiar integral ou parcialmente este do-
cumento sem conhecimento e permissão de um executivo da Brasvideo.

A informação contida neste documento é correta e verdadeira no momento de sua publica-


ção.
Índice
Sumário Executivo................................................................................................................4
Descritivo de Hardware ........................................................................................................5
Lista de Part-Numbers Cisco ................................................................................................................... 5
Topologia Proposta ..............................................................................................................6
Topologia de Vlans – Esporte Interativo .................................................................................................. 6
Credenciais de Acesso .........................................................................................................7
Credenciais de Acesso: Usuario .............................................................................................................. 7
Linhas de configuração ............................................................................................................................ 7
Port-Channel Servidores ......................................................................................................8
Protocolo de Balanceamento ................................................................................................................... 8
Configuracao das intefaces e seus membros .......................................................................................... 8
spanning-tree Protocol .........................................................................................................9
Modo do spanning-tree ............................................................................................................................ 9
SNMP ...................................................................................................................................10
Community SNMP .................................................................................................................................. 10
Configuração.......................................................................................................................12
Ultima configuração valida ..................................................................................................................... 12
Conclusão ...........................................................................................................................54
Sumário Executivo

Apresentamos o detalhamento técnico de instalação da infraestrutura necessária para


o ambiente VME do cliente Esporte Interativo.

Agradecemos a oportunidade de contar com a confiança de V.Sas., e desta forma po-


der participar deste processo compartilhando nosso conhecimento técnico para a ins-
talação do seu ambiente, bem como as melhores práticas técnicas.

Visando atender as necessidades solicitadas pela empresa Esporte Interativo e procu-


rando exceder as expectativas relacionadas com as atividades descritas neste docu-
mento, a Brasvideo agradece a oportunidade de participar deste processo.

Elaborado por Maurício Bellucci Página 4 de 54


Descritivo de Hardware

Lista de Part-Numbers Cisco


Foram sugeridas diversas opções de equipamentos para o cliente visando a melhor
performance envolvida, foi escolhida a opção contendo os Part-Numbers abaixo.
Nesta solução não está contemplada a instalação, configuração ou customização de
nenhum tipo de gateway ou firewall de rede para garantir toda a performance ne-
cessária. Nossa recomendação e que seja implantado um dispositivo dessa catego-
ria para garantir a segurança e performance desejada. Em nosso projeto inicial fo-
ram sugeridos firewalls da empresa Juniper Networks por causa de sua robustez e
performance medidas em outros projetos instalados. Segue abaixo a lista de Part-
Numbers que foram comprados pelo cliente e instalados em seu parque.

Part-Number Descrição Quantidade


C3KX-NM-1G= (PROMO FT) Catalyst 3K-X 1G Network Module 5
CAB-CONSOLE-USB= Console Cable 6 ft. with USB Type A and mini-B 5
CON-OSP-3750X4TS ONSITE 24x7x4 Catalyst 3750X 48 Port Data IP Base 5
CON-SNT-2960S4TS SMARTNET 8X5XNBD 2960S4TS 3
GLC-SX-MMD= 1000BASE-SX SFP transceiver module, MMF, 850nm, DOM 13
(PROMO FT) Catalyst 2960S 48 GigE, 4 x SFP LAN Base (serviço CON-SMBS-
WS-C2960S-48TS-L 3
2960S4TS ou superior é recomendado para esse item)
Catalyst 3750X 48 Port Data IP Base (serviço CON-SNT-3750X4TS ou superior é
WS-C3750X-48T-S 5
recomendado para esse item)

Elaborado por Maurício Bellucci Página 5 de 54


Topologia Proposta

Topologia de Vlans – Esporte Interativo

Elaborado por Maurício Bellucci Página 6 de 54


Credenciais de Acesso

Credenciais de Acesso: Usuario

Segue abaixo as linhas de configuração que foram utilizadas para permitir as creden-
cias de acesso a caixa. Somente é permitido o acesso através de um emulador de
terminal SSH, tal como TeraTerm, Putty, Security CRT entre outros. A versão do SSH
utilizada é a Version 2 e a chave de criptografia é RSA em 768 Bits. Existe configurado
apenas um usuário na caixa para permitir a credencial.

Username admespint
User Exec Mode 1234567
User Privileged Mode i11+8+Xiko

Linhas de configuração
!
enable secret 5 $1$xeNq$QT73g5B46BwQZz/E4zVgK.
!
username admespint privilege 15 secret 4
Wv1DPfalTExx6fFKwG2ZTQ2ZHVw/NZBkFqC1ubRhx/E
aaa new-model
!
!
aaa authentication login default local enable
aaa authentication enable default enable
aaa authorization config-commands
!
!
!
line con 0
line vty 0 4
exec-timeout 0 0
length 0
transport input ssh
line vty 5 15
exec-timeout 0 0
transport input ssh
!

Elaborado por Maurício Bellucci Página 7 de 54


Port-Channel Servidores

Protocolo de Balanceamento

Para ligação dos servidores que necessitavam de duas ou mais placas de rede foi
configurado o protocolo de balanceamento IEEE 802.3ad ou simplesmente o LACP
como é mais conhecido. Este protocolo tem a função de balancear o trafego simetri-
camente entre as interfaces envolvidas respeitando o padrão configurado abaixo.

show etherchannel load-balance


EtherChannel Load-Balancing Configuration:
src-dst-mac

Configuracao das intefaces e seus membros


Segue abaixo como estao distribuídas físicas pelos etherchannels.

show etherchannel summary

Flags: D - down P - bundled in port-channel


I - stand-alone s – suspended H - Hot-standby (LACP only)
R - Layer3 S - Layer2
U - in use f - failed to allocate aggregator
M - not in use, minimum links not met u - unsuitable for bundling
w - waiting to be aggregated d - default port

Number of channel-groups in use: 20


Number of aggregators: 20

Group Port-channel Protocol Ports


1 Po1(SU) LACP Gi1/0/1(P) Gi2/0/1(P)
2 Po2(SU) LACP Gi1/0/2(P) Gi2/0/2(P)
3 Po3(SU) LACP Gi1/0/3(P) Gi2/0/3(P)
4 Po4(SU) LACP Gi1/0/4(P) Gi2/0/4(P)
5 Po5(SU) LACP Gi1/0/5(P) Gi1/0/6(P) Gi2/0/5(P) Gi2/0/6(P)
6 Po6(SU) LACP Gi1/0/7(P) Gi1/0/8(P) Gi2/0/7(P) Gi2/0/8(P)
7 Po7(SU) LACP Gi1/0/9(P) Gi1/0/10(P) Gi2/0/9(P) Gi2/0/10(P)
8 Po8(SU) LACP Gi1/0/11(P) Gi1/0/12(P) Gi2/0/11(P) Gi2/0/12(D)
9 Po9(SU) LACP Gi1/0/13(P) Gi1/0/14(P) Gi2/0/13(P) Gi2/0/14(P)
10 Po10(SU) LACP Gi1/0/15(P) Gi1/0/16(P) Gi2/0/15(P) Gi2/0/16(P)
11 Po11(SU) LACP Gi1/0/17(P) Gi1/0/18(P) Gi2/0/17(P) Gi2/0/18(P)
12 Po12(SU) LACP Gi1/0/19(P) Gi1/0/20(D) Gi2/0/19(P) Gi2/0/20(P)
13 Po13(SU) LACP Gi1/0/21(P) Gi1/0/22(P) Gi2/0/21(P) Gi2/0/22(P)
14 Po14(SU) LACP Gi1/0/23(P) Gi1/0/24(P) Gi2/0/23(P) Gi2/0/24(P)
15 Po15(SU) LACP Gi1/0/25(P) Gi2/0/25(P)
16 Po16(SU) LACP Gi1/0/26(P) Gi2/0/26(P)
17 Po17(SU) LACP Gi1/0/27(P) Gi2/0/27(P)
18 Po18(SU) LACP Gi1/0/28(P) Gi2/0/28(P)
19 Po19(SU) LACP Gi1/0/32(P) Gi1/0/33(P) Gi2/0/32(P) Gi2/0/33(P)
20 Po20(SU) LACP Gi1/0/34(P) Gi1/0/35(P) Gi2/0/34(P) Gi2/0/35(P)

Elaborado por Maurício Bellucci Página 8 de 54


spanning-tree Protocol

Modo do spanning-tree

o spanning-tree serve para evitar loops de rede na infraestrutura. Configuramos o


spanning-tree em modo PVRST+, este modo é proprietário Cisco e garante uma rápi-
da convergência da rede em caso de mudança de topologia. Para asseguramos que o
Root Bridge da rede seja sempre a Catalyst manipulamos a priority de 32768 para
8192 e forcamos o switch como primário da rede. Segue abaixo as linhas de configu-
ração que utilizamos para garantir isso.

!
!
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
no spanning-tree vlan 1
spanning-tree vlan 1-1024 priority 8192
!
!

Features de seguranca nas interfaces

Habilitamos algumas features de segurança nas interfaces para garantir e minimizar


ao máximo um problema de loop na rede. Foi habilitado os seguintes comandos abai-
xo.

!
!
spanning-tree portfast – permite uma garantia de rapidez na convergência da porta.
Este comando é utilizado exclusivamente nas interfaces dos servidores para garantir
que não haja a consulta de 50 segundos na hora que a porta sobe. Isso serve para
que o servidor esteja pronto para utilização em tempo imediato.

spanning-tree bpduguard enable – comando habilitado nas interfaces para garantir que
não seja instalado um equipamento que produza BPDU. O BPDU e gerado pelos swit-
ches para informar as características da rede spanning-tree, com esse comando habili-
tado garantimos que somente o pessoal autorizado e que saiba o que está fazendo
instale algum dispositivo na rede para ampliar portas. Sem esse comando a rede se
torna vulnerável e um simples loop pode derrubar todo o core de rede.
!
!

Elaborado por Maurício Bellucci Página 9 de 54


SNMP

Community SNMP

Configuramos as communitys de Read Only e Read Write conforme as linhas de co-


mando abaixo. Caso o cliente achar interessante e tiver ao seu dispor algum sistema
de monitoramento, seria muito interessante monitorar o histórico de operação do
switch bem como o estado de suas interfaces. Existem várias ferramentas no mercado
voltadas a leitura e interpretação das communits geradas pelos equipamentos.

!
snmp-server community %zrN-i674k RO
snmp-server community ZUtCissy+! RW
!
!
snmp-server contact ### www.ipns.net.br - Mauricio Bellucci - (11) 99425-6010 ###
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flowmon
snmp-server enable traps transceiver all
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps license
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps bfd
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change
inconsistency
snmp-server enable traps cluster
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps trustsec authz-file-error cache-file-error keystore-file-error
keystore-sync-fail random-number-fail src-entropy-fail
snmp-server enable traps trustsec-sxp conn-srcaddr-err msg-parse-err conn-config-err
binding-err conn-up conn-down binding-expn-fail oper-nodeid-change binding-conflict
snmp-server enable traps energywise
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps event-manager
snmp-server enable traps hsrp

Elaborado por Maurício Bellucci Página 10 de 54


snmp-server enable traps ipmulticast
snmp-server enable traps ike policy add
snmp-server enable traps ike policy delete
snmp-server enable traps ike tunnel start
snmp-server enable traps ike tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete
snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps ospfv3 state-change
snmp-server enable traps ospfv3 errors
snmp-server enable traps power-ethernet police
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-
message
snmp-server enable traps cpu threshold
snmp-server enable traps rep
snmp-server enable traps ipsla
snmp-server enable traps vstack
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps trustsec-interface unauthorized sap-fail authc-fail supplicant-
fail authz-fail
snmp-server enable traps trustsec-server radius-server provision-secret
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps stackwise
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server enable traps errdisable
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vlan-membership
!
!

Elaborado por Maurício Bellucci Página 11 de 54


Configuração

Ultima configuração valida

Segue o output de comandos de configuração do switch, este arquivo serve como re-
ferencia caso seja necessário a reconfiguração parcial ou total do STACK de switches.

version 15.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime year
service timestamps log datetime msec localtime year
service password-encryption
!
hostname ESPINTCSW001
!
boot-start-marker
boot-end-marker
!
logging buffered 10000
enable secret 5 $1$xeNq$QT73g5B46BwQZz/E4zVgK.
!
username admin password 7 06105E3B5A1F0D1C55
username admespint privilege 15 secret 4
Wv1DPfalTExx6fFKwG2ZTQ2ZHVw/NZBkFqC1ubRhx/E
aaa new-model
!
!
aaa authentication login default local enable
aaa authentication enable default enable
aaa authorization config-commands
!!
!
!
aaa session-id common
clock timezone BRA -3 0
clock summer-time BRST recurring 3 Sun Oct 0:00 3 Sun Feb 0:00
switch 1 provision ws-c3750x-48
switch 2 provision ws-c3750x-48
switch 3 provision ws-c3750x-48
switch 4 provision ws-c3750x-48
system mtu routing 1500
no ip source-route
no ip gratuitous-arps
!
!
no ip domain-lookup

Elaborado por Maurício Bellucci Página 12 de 54


ip domain-name esporteInterativo.local
ip device tracking
!
!
crypto pki trustpoint TP-self-signed-3940391296
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3940391296
revocation-check none
rsakeypair TP-self-signed-3940391296
!
!
crypto pki certificate chain TP-self-signed-3940391296
certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
!
!
spanning-tree mode rapid-pvst
spanning-tree loopguard default
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
no spanning-tree vlan 1
spanning-tree vlan 1-1024 priority 8192
!
!
!
port-channel load-balance src-dst-mac
!
!
!
!
vlan internal allocation policy ascending
!
ip ssh time-out 60
ip ssh version 2
!
!
!
!
!
interface Port-channel1
description ### VMECORE01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel2
description ### VMECORE02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel3

Elaborado por Maurício Bellucci Página 13 de 54


description ### VMEDB01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel4
description ### VMEDB02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel5
description ### VMELR01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel6
description ### VMELR02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel7
description ### VMEVMP01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel8
description ### VMEVMP02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel9
description ### VMEVMP03 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 14 de 54


interface Port-channel10
description ### VMEVMP04 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel11
description ### VMEHR01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel12
description ### VMEHR02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel13
description ### VMEHR03 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel14
description ### VMEHR04 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel15
description ### VMEODEL01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel16
description ### VMEODEL02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100

Elaborado por Maurício Bellucci Página 15 de 54


!
interface Port-channel17
description ### VMEOTR01 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel18
description ### VMEOTR02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel19
description ### VMETSM02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface Port-channel20
description ### VMETSM02 - Port-Channel ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface FastEthernet0
no ip address
shutdown
!
interface GigabitEthernet1/0/1
description ### VMECORE01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 1 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/2
description ### VMECORE02 - Interface-01 ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable

Elaborado por Maurício Bellucci Página 16 de 54


channel-protocol lacp
channel-group 2 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/3
description ### VMEDB01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 3 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/4
description ### VMEDB02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 4 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/5
description ### VMELR01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 5 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/6
description ### VMELR01 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 5 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/7
description ### VMELR02 - Interface-01 ###
switchport access vlan 10

Elaborado por Maurício Bellucci Página 17 de 54


switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 6 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/8
description ### VMELR02 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 6 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/9
description ### VMEVMP01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 7 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/10
description ### VMEVMP01 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 7 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/11
description ### VMEVMP02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 8 mode active

Elaborado por Maurício Bellucci Página 18 de 54


ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/12
description ### VMEVMP02 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 8 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/13
description ### VMEVMP03 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 9 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/14
description ### VMEVMP03 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 9 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/15
description ### VMEVMP04 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 10 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/16
description ### VMEVMP04 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000

Elaborado por Maurício Bellucci Página 19 de 54


duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 10 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/17
description ### VMEHR01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 11 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/18
description ### VMEHR01 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 11 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/19
description ### VMEHR02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 12 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/20
description ### VMEHR02 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 12 mode active
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 20 de 54


interface GigabitEthernet1/0/21
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 13 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/22
description ### VMEHR03 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 13 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/23
description ### VMEHR04 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 14 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/24
description ### VMEHR04 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 14 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/25
description ### VMEODEL01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable

Elaborado por Maurício Bellucci Página 21 de 54


channel-protocol lacp
channel-group 15 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/26
description ### VMEODEL02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 16 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/27
description ### VMEOTR01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 17 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/28
description ### VMEOTR02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 18 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/29
description ### VMEVVE01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/30
description ### VMEVVE02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast

Elaborado por Maurício Bellucci Página 22 de 54


spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/31
description ### VMEVVE03 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/32
description ### VMETSM01 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 19 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/33
description ### VMETSM01 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 19 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/34
description ### VMETSM02 - Interface-01 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 20 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/35
description ### VMETSM02 - Interface-03 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast

Elaborado por Maurício Bellucci Página 23 de 54


spanning-tree bpduguard enable
channel-protocol lacp
channel-group 20 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/36
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/37
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/38
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/39
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/40
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/41
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/42
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/43

Elaborado por Maurício Bellucci Página 24 de 54


switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/44
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/45
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/46
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/47
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet1/0/48
switchport access vlan 10
!
interface GigabitEthernet1/1/1
!
interface GigabitEthernet1/1/2
!
interface GigabitEthernet1/1/3
!
interface GigabitEthernet1/1/4
!
interface TenGigabitEthernet1/1/1
!
interface TenGigabitEthernet1/1/2
!
interface GigabitEthernet2/0/1
description ### VMECORE01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full

Elaborado por Maurício Bellucci Página 25 de 54


spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 1 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/2
description ### VMECORE02 - Interface-02 ###
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 2 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/3
description ### VMEDB01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 3 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/4
description ### VMEDB02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 4 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/5
description ### VMELR01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 5 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/6
description ### VMELR01 - Interface-04 ###
switchport access vlan 10

Elaborado por Maurício Bellucci Página 26 de 54


switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 5 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/7
description ### VMELR02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 6 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/8
description ### VMELR02 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 6 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/9
description ### VMEVMP01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 7 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/10
description ### VMEVMP01 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 7 mode active

Elaborado por Maurício Bellucci Página 27 de 54


ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/11
description ### VMEVMP02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 8 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/12
description ### VMEVMP02 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 8 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/13
description ### VMEVMP03 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 9 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/14
description ### VMEVMP03 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 9 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/15
description ### VMEVMP04 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000

Elaborado por Maurício Bellucci Página 28 de 54


duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 10 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/16
description ### VMEVMP04 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 10 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/17
description ### VMEHR01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 11 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/18
description ### VMEHR01 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 11 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/19
description ### VMEHR02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 12 mode active
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 29 de 54


interface GigabitEthernet2/0/20
description ### VMEHR02 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 12 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/21
description ### VMEHR03 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 13 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/22
description ### VMEHR03 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 13 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/23
description ### VMEHR04 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 14 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/24
description ### VMEHR04 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast

Elaborado por Maurício Bellucci Página 30 de 54


spanning-tree bpduguard enable
channel-protocol lacp
channel-group 14 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/25
description ### VMEODEL01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 15 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/26
description ### VMEODEL02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 16 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/27
description ### VMEOTR01 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 17 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/28
description ### VMEOTR02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 18 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/29
description ### VMEVVE01 - Interface-02 ###

Elaborado por Maurício Bellucci Página 31 de 54


switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/30
description ### VMEVVE02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/31
description ### VMEVVE03 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/32
description ### VMETSM02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 19 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/33
description ### VMETSM02 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 19 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/34
description ### VMETSM02 - Interface-02 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full

Elaborado por Maurício Bellucci Página 32 de 54


spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 20 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/35
description ### VMETSM02 - Interface-04 ###
switchport access vlan 10
switchport mode access
speed 1000
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
channel-protocol lacp
channel-group 20 mode active
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/36
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/37
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/38
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/39
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/40
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/41
switchport access vlan 10

Elaborado por Maurício Bellucci Página 33 de 54


switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/42
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/43
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/44
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/45
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/46
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/47
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/0/48
switchport access vlan 10
switchport mode access
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet2/1/1

Elaborado por Maurício Bellucci Página 34 de 54


!
interface GigabitEthernet2/1/2
!
interface GigabitEthernet2/1/3
!
interface GigabitEthernet2/1/4
!
interface TenGigabitEthernet2/1/1
!
interface TenGigabitEthernet2/1/2
!
interface GigabitEthernet3/0/1
description ### DBMAIN ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/2
description ### DBCLONE ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/3
description ### AUTOMAIN ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/4
description ### AUTOCLONE ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/5
description ### MEMO01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100

Elaborado por Maurício Bellucci Página 35 de 54


!
interface GigabitEthernet3/0/6
description ### MEMO02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/7
description ### MOS ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/8
description ### MTX01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/9
description ### MTX02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/10
description ### MTX03 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/11
description ### MOXA01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 36 de 54


interface GigabitEthernet3/0/12
description ### MOXA02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/13
description ### SCHED-PC01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/14
description ### MASTER-PC01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/15
description ### MASTER-PC02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/16
description ### ING-PC01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
!
interface GigabitEthernet3/0/17
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/18
description ### VAGO ###
switchport access vlan 20

Elaborado por Maurício Bellucci Página 37 de 54


switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/19
description ### NV-01 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/20
description ### NV-02 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/21
description ### ISM-750-1 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/22
description ### ISM-750-2 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/23
description ### ISM-750-3 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/24
description ### ISM-3901-1 ###
switchport access vlan 30
switchport mode access

Elaborado por Maurício Bellucci Página 38 de 54


duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/25
description ### ISM-3901-2 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/26
description ### IMC-PNL01 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/27
description ### IMC-PNL02 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/28
description ### GUI-PC ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/29
description ### VAGO ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/30
description ### VAGO ###
switchport access vlan 30
switchport mode access
duplex full

Elaborado por Maurício Bellucci Página 39 de 54


spanning-tree portfast
!
interface GigabitEthernet3/0/31
description ### NV-01 ###
switchport access vlan 30
switchport mode access
duplex full
spanning-tree portfast
ip dhcp snooping trust
!
interface GigabitEthernet3/0/32
description ### NV-01 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
ip dhcp snooping trust
!
interface GigabitEthernet3/0/33
description ### NV-02 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/34
description ### RTR-01 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/35
description ### NV9601-1 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/36
description ### NV9601-2 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100

Elaborado por Maurício Bellucci Página 40 de 54


!
interface GigabitEthernet3/0/37
description ### NV9604-1 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/38
description ### NV9604-2 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/39
description ### NV9604-3 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/40
description ### NV9604-4 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/41
description ### NV9605-1 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/42
description ### NV9605-2 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 41 de 54


interface GigabitEthernet3/0/43
description ### NV9605-3 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/44
description ### NV9605-4 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/45
description ### NV9605-5 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/46
description ### NV9605-6 ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/47
description ### VAGO ###
switchport access vlan 40
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet3/0/48
switchport access vlan 30
!
interface GigabitEthernet3/1/1
!
interface GigabitEthernet3/1/2
!
interface GigabitEthernet3/1/3
!
interface GigabitEthernet3/1/4

Elaborado por Maurício Bellucci Página 42 de 54


!
interface TenGigabitEthernet3/1/1
!
interface TenGigabitEthernet3/1/2
!
interface GigabitEthernet4/0/1
description ### DBMAIN ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/2
description ### DBCLONE ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/3
description ### AUTOMAIN ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/4
description ### AUTOCLONE ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/5
description ### MEMO01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/6
description ### MEMO02 ###
switchport access vlan 20
switchport mode access
duplex full

Elaborado por Maurício Bellucci Página 43 de 54


spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/7
description ### MOS ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/8
description ### MTX01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/9
description ### MTX02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/10
description ### MTX03 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/11
description ### MOXA01 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/12
description ### MOXA02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast

Elaborado por Maurício Bellucci Página 44 de 54


spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/13
description ### SCHED-PC02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/14
description ### MASTER-PC02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/15
description ### MASTER-PC04 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/16
description ### ING-PC02 ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/17
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/18
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable

Elaborado por Maurício Bellucci Página 45 de 54


ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/19
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/20
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/21
description ### VAGO ###
switchport access vlan 20
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/22
description ### OOB-01 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/23
description ### OOB-02 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/24
description ### OOB-03 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100

Elaborado por Maurício Bellucci Página 46 de 54


!
interface GigabitEthernet4/0/25
description ### OOB-04 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/26
description ### OOB-05 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/27
description ### OOB-06 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/28
description ### OOB-07 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/29
description ### OOB-08 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/30
description ### OOB-09 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!

Elaborado por Maurício Bellucci Página 47 de 54


interface GigabitEthernet4/0/31
description ### OOB-10 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/32
description ### OOB-11 ##
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/33
description ### OOB-12 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/34
description ### OOB-13 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/35
description ### OOB-14 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/36
description ### OOB-15 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/37

Elaborado por Maurício Bellucci Página 48 de 54


description ### OOB-16 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/38
description ### OOB-17 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/39
description ### OOB-18 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/40
description ### OOB-19 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/41
description ### OOB-20 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/42
description ### OOB-21 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
!
interface GigabitEthernet4/0/43
description ### OOB-22 ###
switchport access vlan 50
switchport mode access

Elaborado por Maurício Bellucci Página 49 de 54


duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/44
description ### OOB-23 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/45
description ### OOB-24 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/46
description ### OOB-25 ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/47
description ### VAGO ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/0/48
description ### VAGO ###
switchport access vlan 50
switchport mode access
duplex full
spanning-tree portfast
spanning-tree bpduguard enable
ip dhcp snooping limit rate 100
!
interface GigabitEthernet4/1/1
!
interface GigabitEthernet4/1/2
!
interface GigabitEthernet4/1/3

Elaborado por Maurício Bellucci Página 50 de 54


!
interface GigabitEthernet4/1/4
!
interface TenGigabitEthernet4/1/1
!
interface TenGigabitEthernet4/1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan5
description #### VLAN 5 - ESPIN_Management ####
ip address 192.168.5.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
!
interface Vlan10
description #### VLAN 10 - ESPINT_VIZRT ####
ip address 10.21.0.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
!
interface Vlan20
description #### VLAN 20 - ESPINT_ETERE ####
ip address 10.21.30.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
!
interface Vlan30
description #### VLAN 30 - ESPINT_MIRANDA ####
ip address 192.168.7.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
!
interface Vlan40
description #### VLAN 40 - ESPINT_ ####
ip address 192.168.1.254 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip route-cache
!
interface Vlan50
description #### VLAN 40 - ESPINT_OOB ####
ip address 192.168.75.254 255.255.255.0
no ip redirects

Elaborado por Maurício Bellucci Página 51 de 54


no ip unreachables
no ip proxy-arp
no ip route-cache
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
!
logging trap debugging
!
snmp-server community %zrN-i674k RO
snmp-server community ZUtCissy+! RW
snmp-server contact ### www.ipns.net.br - Mauricio Bellucci - (11) 99347-4199 ###
snmp-server enable traps snmp authentication linkdown linkup coldstart warmstart
snmp-server enable traps flowmon
snmp-server enable traps transceiver all
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps tty
snmp-server enable traps eigrp
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps license
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps bfd
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change
inconsistency
snmp-server enable traps cluster
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps trustsec authz-file-error cache-file-error keystore-file-error
keystore-sync-fail random-number-fail src-entropy-fail
snmp-server enable traps trustsec-sxp conn-srcaddr-err msg-parse-err conn-config-err
binding-err conn-up conn-down binding-expn-fail oper-nodeid-change binding-conflict
snmp-server enable traps energywise
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps event-manager
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps ike policy add
snmp-server enable traps ike policy delete
snmp-server enable traps ike tunnel start
snmp-server enable traps ike tunnel stop
snmp-server enable traps ipsec cryptomap add
snmp-server enable traps ipsec cryptomap delete

Elaborado por Maurício Bellucci Página 52 de 54


snmp-server enable traps ipsec cryptomap attach
snmp-server enable traps ipsec cryptomap detach
snmp-server enable traps ipsec tunnel start
snmp-server enable traps ipsec tunnel stop
snmp-server enable traps ipsec too-many-sas
snmp-server enable traps ospfv3 state-change
snmp-server enable traps ospfv3 errors
snmp-server enable traps power-ethernet police
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-
message
snmp-server enable traps cpu threshold
snmp-server enable traps rep
snmp-server enable traps ipsla
snmp-server enable traps vstack
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps syslog
snmp-server enable traps trustsec-interface unauthorized sap-fail authc-fail supplicant-
fail authz-fail
snmp-server enable traps trustsec-server radius-server provision-secret
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps flash insertion removal
snmp-server enable traps port-security
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps stackwise
snmp-server enable traps bulkstat collection transfer
snmp-server enable traps vrfmib vrf-up vrf-down vnet-trunk-up vnet-trunk-down
snmp-server enable traps errdisable
snmp-server enable traps mac-notification change move threshold
snmp-server enable traps vlan-membership
!
!
line con 0
line vty 0 4
exec-timeout 0 0
length 0
transport input ssh
line vty 5 15
exec-timeout 0 0
transport input ssh
!
ntp server 10.21.0.16
ntp server 10.21.0.15
end

Elaborado por Maurício Bellucci Página 53 de 54


Conclusão

Este documento serve como base para pesquisas futuras de como se encontra a con-
figuração do switch bem como a topologia montada para suportar a rede de automa-
ção da Esporte Interativo. Não foram citados nenhum tipo de referencia a firewalls,
proxys ou gateways neste documento. Este documento serve como referência para
quem for instalar a parte de segurança e portanto se encontra fora do escopo da pro-
posta inicial que foi a implantação do ambiente sem se preocupar com a parte corpora-
tiva ou outra não relacionada com o ambiente da VizRT.

Sugerimos que seja implantado algum tipo de sistema para garantir a segurança e per-
formance do ambiente, lembrando que para o sucesso do projeto tudo deve ser relaci-
onado como uma única topologia e as ferramentas instaladas na rede que não supor-
tem o throughput especificado pelo fabricante do sistema de automação podem influ-
enciar na perda de performance e a frustação quanto a sistema, ocasionando lentidão
e falta de produtividade no ambiente.

Elaborado por Maurício Bellucci Página 54 de 54

Você também pode gostar