Sei sulla pagina 1di 10

login as: belltech

Using keyboard-interactive authentication.


Keyboard-interactive authentication
Enter password for belltech:
ExtremeXOS
Copyright (C) 1996-2016 Extreme Networks. All rights reserved.
This product is protected by one or more US patents listed at
http://www.extremenetworks.com/patents along with their foreign counterparts.
==============================================================================

Press the <tab> or '?' key at any time for completions.


Remember to save your configuration changes.

T_PRIM_VILLAVO_CORE1.1 # sh configuration
#
# Module devmgr configuration.
#
configure snmp sysName "T_PRIM_VILLAVO_CORE1"
configure snmp sysLocation "TF_PRIMAVERA_VILLAVO"
configure snmp sysContact "telecomunicacionescolombia@falabella.com.co"
configure timezone name COT -300 noautodst
configure sys-recovery-level switch reset

#
# Module vlan configuration.
#
configure vlan default delete ports all
configure vr VR-Default delete ports 1-34
configure vr VR-Default add ports 1-34
configure vlan default delete ports 1-34
create vlan "DATOS"
configure vlan DATOS tag 310
create vlan "DATOS_BANCO"
configure vlan DATOS_BANCO tag 10
create vlan "Enlace_Principal"
create vlan "Inter_SW"
configure vlan Inter_SW tag 100
create vlan "NEGOCIOS"
configure vlan NEGOCIOS tag 350
create vlan "OSPF_ID"
enable loopback-mode vlan OSPF_ID
create vlan "PASO_FW"
configure vlan PASO_FW tag 360
create vlan "POS"
configure vlan POS tag 330
create vlan "VIDEOSEG_BANCO"
configure vlan VIDEOSEG_BANCO tag 50
create vlan "VOZ"
configure vlan VOZ tag 320
create vlan "VOZ_BANCO"
configure vlan VOZ_BANCO tag 20
create vlan "WIFI"
configure vlan WIFI tag 380
configure ports 1 display-string CONEX_CORE2
configure ports 2 display-string CONEX_STACK1
configure ports 3 display-string CONEX_STACK2
configure ports 4 display-string CONEX_IDF1
configure ports 5 display-string CONEX_IDF2
configure ports 6 display-string CONEX_SEG
configure ports 7 display-string CONEX_SWBANCO
configure ports 8 display-string CONEX_S2_IDF
configure ports 21 display-string CONEX_CLARO
configure ports 21 medium copper auto off speed 100 duplex full
configure ports 22 display-string POS1
configure ports 23 display-string CARUBA
configure ports 24 display-string FIREWALL
configure ports 25 display-string GATEWAY
configure ports 25 auto off speed 100 duplex full
configure ports 26 display-string POS_BASE
configure ports 29 auto off speed 10000 duplex full
configure ports 30 auto off speed 10000 duplex full
configure ports 31 auto off speed 10000 duplex full
configure ports 32 auto off speed 10000 duplex full
configure ports 33 auto off speed 10000 duplex full
configure ports 34 auto off speed 10000 duplex full
create mirror "Mirror_Avaya"
configure mirror Mirror_Avaya to port 27
configure vlan DATOS add ports 1-6, 8, 24 tagged
configure vlan DATOS_BANCO add ports 1-8 tagged
configure vlan Enlace_Principal add ports 21 untagged
configure vlan Inter_SW add ports 1 tagged
configure vlan NEGOCIOS add ports 1, 6, 24 tagged
configure vlan PASO_FW add ports 1, 24 tagged
configure vlan POS add ports 1-6, 8, 24 tagged
configure vlan POS add ports 22, 26 untagged
configure vlan VIDEOSEG_BANCO add ports 1-8 tagged
configure vlan VOZ add ports 1-6, 8, 24 tagged
configure vlan VOZ add ports 25 untagged
configure vlan VOZ_BANCO add ports 1-8 tagged
configure vlan WIFI add ports 1-6, 8, 24 tagged
configure vlan WIFI add ports 23 untagged
configure vlan Mgmt ipaddress 172.16.100.1 255.255.255.0
configure vlan Enlace_Principal ipaddress 10.120.2.61 255.255.255.252
enable ipforwarding vlan Enlace_Principal
configure vlan Inter_SW ipaddress 10.120.2.77 255.255.255.252
enable ipforwarding vlan Inter_SW
configure vlan OSPF_ID ipaddress 10.120.254.134 255.255.255.255
enable ipforwarding vlan OSPF_ID
configure vlan PASO_FW ipaddress 10.120.2.65 255.255.255.248
enable ipforwarding vlan PASO_FW
configure mirror Mirror_Avaya add vlan VOZ port 25 ingress

#
# Module fdb configuration.
#
configure iparp vr VR-Default max_entries 4096
configure neighbor-discovery vr VR-Default timeout 10
configure neighbor-discovery vr VR-Mgmt timeout 10

#
# Module rtmgr configuration.
#
configure iproute add 10.121.163.0 255.255.255.0 10.120.2.70
configure iproute add 10.121.164.0 255.255.255.0 10.120.2.70
configure iproute add 10.121.165.0 255.255.255.0 10.120.2.70
configure iproute add 10.121.166.0 255.255.255.0 10.120.2.70
configure iproute add 10.121.167.0 255.255.255.0 10.120.2.70
disable iproute ipv4 compression
disable iproute ipv6 compression

#
# Module mcmgr configuration.
#

#
# Module aaa configuration.
#
configure account admin encrypted "0speZ.$jUeVNESVB2I6vjjUOgK0S."
create account admin rbarajas encrypted "xIBAZ.$LJdf9SGdwwgFIUYhkN.G6/"
create account admin maleon encrypted ".VpvZ.$Xu1LFFql.EOBAuiEFctVc0"
create account admin jvillamizar encrypted "3VqAa.$5PLT6LbHJn2dUyPZrR.YL."
create account admin aaprado encrypted "/bUNa.$dP0EjK2cNxMsyFObcev0s1"
create account admin belltech encrypted "T3faa.$aGFsDNN1WE2v0bxTAeoBN1"
create account admin soportechile encrypted "fmZta.$x6AeeBzJBKw8tt5mi0mML1"
create account admin gerencia encrypted "BIj7b.$XaYd7ei6nd4fhWZ86OHu20"
create account admin jmleon encrypted "DLH0c.$t48gj3MZsuPi1hwTFBFKo/"
create account admin hherlopez encrypted "ee2jc.$h1Z1.FqAxBcvNFS8eumCo."
create account admin netsight encrypted "mzyd/Y$toGDqhdJMxX7D55THPd6R/"

#
# Module acl configuration.
#

configure access-list zone DOS application Dos application-priority 1


configure access-list zone SYSTEM application NetLogin application-priority 3
configure access-list zone SYSTEM application FIPSnooping application-priority 4
configure access-list zone SYSTEM application ESVT application-priority 5
configure access-list zone DOS move hal to-zone SYSTEM application-priority 6
configure access-list zone SYSTEM application HealthCheckLAG application-priority 7
configure access-list zone SYSTEM application IdentityManager application-priority
8
configure access-list zone SYSTEM application VMTracking application-priority 9
configure access-list zone SYSTEM application PolicyManager application-priority 10
configure access-list zone SYSTEM application OpenFlow application-priority 11
configure access-list zone SYSTEM application L2PT_PF application-priority 12
configure access-list zone SYSTEM application Snmp application-priority 15
configure access-list zone SYSTEM application Telnet application-priority 16
configure access-list zone SYSTEM application Http application-priority 17
configure access-list zone SYSTEM application Ssh2 application-priority 18

#
# Module bfd configuration.
#

#
# Module bgp configuration.
#

#
# Module ces configuration.
#

#
# Module cfgmgr configuration.
#
enable cli-config-logging

#
# Module dosprotect configuration.
#

#
# Module dot1ag configuration.
#

#
# Module eaps configuration.
#

#
# Module edp configuration.
#

#
# Module elrp configuration.
#
enable elrp-client

#
# Module ems configuration.
#
configure log filter DefaultFilter add events ELRP.DebugSummary
configure log filter DefaultFilter add events EAPS.DebugSummary
configure log filter DefaultFilter add events EPM.cpu_debug
configure log filter DefaultFilter add exclude events DM.Notice match string
"hwclock"
enable log target console
configure log target console filter DefaultFilter severity Debug-Summary
configure syslog add 10.120.11.130:514 vr VR-Default local0
enable log target syslog 10.120.11.130:514 vr VR-Default local0
configure log target syslog 10.120.11.130:514 vr VR-Default local0 filter
DefaultFilter severity Warning
configure log target syslog 10.120.11.130:514 vr VR-Default local0 match Any
configure log target syslog 10.120.11.130:514 vr VR-Default local0 format timestamp
seconds date mm/dd/yyyy event-name none host-name tag-id tag-name
configure syslog add 10.120.11.89:514 vr VR-Default local7
enable log target syslog 10.120.11.89:514 vr VR-Default local7
configure log target syslog 10.120.11.89:514 vr VR-Default local7 filter
DefaultFilter severity Info
configure log target syslog 10.120.11.89:514 vr VR-Default local7 match Any
configure log target syslog 10.120.11.89:514 vr VR-Default local7 format timestamp
seconds date Mmm-dd event-name component host-name
configure syslog add 10.120.11.89:514 vr VR-Default local0
enable log target syslog 10.120.11.89:514 vr VR-Default local0
configure log target syslog 10.120.11.89:514 vr VR-Default local0 filter
DefaultFilter severity Warning
configure log target syslog 10.120.11.89:514 vr VR-Default local0 match Any
configure log target syslog 10.120.11.89:514 vr VR-Default local0 format timestamp
seconds date Mmm-dd event-name component host-name
configure syslog add 10.120.11.89:514 vr VR-Default local6
enable log target syslog 10.120.11.89:514 vr VR-Default local6
configure log target syslog 10.120.11.89:514 vr VR-Default local6 filter
DefaultFilter severity Info
configure log target syslog 10.120.11.89:514 vr VR-Default local6 match Any
configure log target syslog 10.120.11.89:514 vr VR-Default local6 format timestamp
seconds date Mmm-dd event-name component host-name
configure syslog add 10.120.11.60:514 vr VR-Default local7
enable log target syslog 10.120.11.60:514 vr VR-Default local7
configure log target syslog 10.120.11.60:514 vr VR-Default local7 filter
DefaultFilter severity Info
configure log target syslog 10.120.11.60:514 vr VR-Default local7 match Any
configure log target syslog 10.120.11.60:514 vr VR-Default local7 format timestamp
seconds date Mmm-dd event-name component host-name
configure syslog add 10.120.11.60:514 vr VR-Default local0
enable log target syslog 10.120.11.60:514 vr VR-Default local0
configure log target syslog 10.120.11.60:514 vr VR-Default local0 filter
DefaultFilter severity Warning
configure log target syslog 10.120.11.60:514 vr VR-Default local0 match Any
configure log target syslog 10.120.11.60:514 vr VR-Default local0 format timestamp
seconds date Mmm-dd event-name component host-name
configure syslog add 10.120.11.60:514 vr VR-Default local6
enable log target syslog 10.120.11.60:514 vr VR-Default local6
configure log target syslog 10.120.11.60:514 vr VR-Default local6 filter
DefaultFilter severity Info
configure log target syslog 10.120.11.60:514 vr VR-Default local6 match Any
configure log target syslog 10.120.11.60:514 vr VR-Default local6 format timestamp
seconds date Mmm-dd event-name component host-name

#
# Module epm configuration.
#
configure sys-recovery-level None
disable watchdog
enable cpu-monitoring interval 20 threshold 60

#
# Module erps configuration.
#

#
# Module esrp configuration.
#

#
# Module ethoam configuration.
#

#
# Module etmon configuration.
#
enable sflow
configure sflow collector 10.120.11.60 port 6343 vr "VR-Default"
configure sflow agent ipaddress 10.120.254.134
enable sflow ports 21 both
enable sflow ports 25 both
enable rmon

#
# Module exsshd configuration.
#
enable ssh2
#
# Module gptp configuration.
#

#
# Module hal configuration.
#

#
# Module idMgr configuration.
#

#
# Module ipSecurity configuration.
#

#
# Module ipfix configuration.
#

#
# Module isis configuration.
#

#
# Module lldp configuration.
#
disable lldp ports 1
disable lldp ports 2
disable lldp ports 3
disable lldp ports 4
disable lldp ports 5
disable lldp ports 6
disable lldp ports 7
disable lldp ports 8
disable lldp ports 9
disable lldp ports 10
disable lldp ports 11
disable lldp ports 12
disable lldp ports 13
disable lldp ports 14
disable lldp ports 15
disable lldp ports 16
disable lldp ports 17
disable lldp ports 18
disable lldp ports 19
disable lldp ports 20
disable lldp ports 21
disable lldp ports 22
disable lldp ports 23
disable lldp ports 24
disable lldp ports 25
disable lldp ports 26
disable lldp ports 27
disable lldp ports 28
disable lldp ports 29
disable lldp ports 30
disable lldp ports 31
disable lldp ports 32
disable lldp ports 33
disable lldp ports 34

#
# Module mpls configuration.
#

#
# Module mrp configuration.
#

#
# Module msdp configuration.
#

#
# Module netLogin configuration.
#

#
# Module netTools configuration.
#
enable sntp-client
configure bootprelay add 120.11.10.6 vr VR-Default
configure bootprelay add 10.120.11.204 vr VR-Default
enable bootprelay ipv4 vlan DATOS
enable bootprelay ipv4 vlan Enlace_Principal
enable bootprelay ipv4 vlan Inter_SW
enable bootprelay ipv4 vlan NEGOCIOS
enable bootprelay ipv4 vlan OSPF_ID
enable bootprelay ipv4 vlan PASO_FW
enable bootprelay ipv4 vlan POS
enable bootprelay ipv4 vlan VOZ
enable bootprelay ipv4 vlan WIFI

#
# Module ntp configuration.
#

#
# Module ospf configuration.
#
configure ospf routerid 10.120.254.134
configure ospf vlan Enlace_Principal priority 0
configure ospf vlan Inter_SW priority 0
configure ospf vlan OSPF_ID priority 0
configure ospf vlan PASO_FW priority 0

#
# Module ospfv3 configuration.
#

#
# Module pim configuration.
#

#
# Module poe configuration.
#

#
# Module rip configuration.
#
configure rip garbagetime 20
configure rip routetimeout 30
configure rip updatetime 10
enable rip use-ip-router-alert
enable rip
enable rip export direct cost 1
enable rip export static cost 1
configure rip add vlan Enlace_Principal
configure rip vlan Enlace_Principal route-policy out pol_rip_OUT_dg
configure rip vlan Enlace_Principal route-policy in pol_rip_IN_dg
configure rip vlan Enlace_Principal rxmode v2only
configure rip add vlan Inter_SW
configure rip vlan Inter_SW rxmode v2only

#
# Module ripng configuration.
#

#
# Module snmpMaster configuration.
#
configure snmpv3 add user "belltech" engine-id 80:00:07:7c:03:00:04:96:97:79:be
authentication md5 auth-encrypted localized-key
23:d3:4b:23:e3:37:23:94:53:23:bd:5e:58:23:d8:37:32:23:a2:23:db:7c:23:8c privacy
privacy-encrypted localized-key
23:d3:4b:23:e3:37:23:94:53:23:bd:5e:58:23:d8:37:32:23:a2:23:db:7c:23:8c
configure snmpv3 add user "belltech_snmpv3" engine-id
80:00:07:7c:03:00:04:96:97:79:be authentication md5 auth-encrypted localized-key
23:d3:4b:23:e3:37:23:94:53:23:bd:5e:58:23:d8:37:32:23:a2:23:db:7c:23:8c privacy
privacy-encrypted localized-key
23:d1:23:c5:5d:23:81:23:e6:7a:23:e0:23:c2:23:cd:23:07:5c:23:05:75:5a:2c:7c
configure snmpv3 add group "v1v2cNotifyGroup" user "v1v2cNotifyUser2" sec-model
snmpv2c
configure snmpv3 add group "testbelltech" user "belltech" sec-model usm
configure snmpv3 add group "netsight7_snmp" user "belltech_snmpv3" sec-model usm
configure snmpv3 add access "testbelltech" sec-model usm sec-level priv read-view
"defaultAdminView" write-view "defaultAdminView" notify-view "defaultNotifyView"
configure snmpv3 add access "netsight7_snmp" sec-model usm sec-level priv read-view
"defaultAdminView" write-view "defaultAdminView" notify-view "defaultNotifyView"
configure snmpv3 add mib-view "internet" subtree 1.0/80 type included
configure snmpv3 add mib-view "defaultUserView" subtree 1.0/80 type included
configure snmpv3 add mib-view "defaultNotifyView" subtree 1.0/80 type included
configure snmpv3 add community "ch1kg0" name "ch1kg0" user "v1v2c_ro"
configure snmpv3 add community "v1v2cNotifyComm1" name "ch1kg0" user
"v1v2cNotifyUser1"
configure snmpv3 add community "v1v2cNotifyComm2" name "ch1kg0" user
"v1v2cNotifyUser2"
configure snmpv3 add target-addr "TVbelltech_snmpv3" param "TV1belltech_snmpv3"
ipaddress 10.120.11.130 transport-port 162 tag-list "TVInformTag"
configure snmpv3 add target-addr "TVc0a819fbTV1belltech" param "TV1belltech"
ipaddress 192.168.25.251 transport-port 162 tag-list "TVTrapTag"
configure snmpv3 add target-addr "TVc0a819fbTV1public" param "TV1public" ipaddress
192.168.25.251 transport-port 162 tag-list "TVTrapTag"
configure snmpv3 add target-params "TV1belltech" user "belltech" mp-model snmpv3
sec-model usm sec-level priv
configure snmpv3 add target-params "TV1belltech_snmpv3" user "belltech_snmpv3" mp-
model snmpv3 sec-model usm sec-level priv
configure snmpv3 add target-params "TV1public" user "public" mp-model snmpv2c sec-
model snmpv2c sec-level noauth
configure snmpv3 add notify "TVInformTag" tag "TVInformTag" type inform
configure snmpv3 add notify "TVTrapTag" tag "TVTrapTag"

#
# Module stp configuration.
#
configure mstp region 000496355fa2
configure stpd s0 delete vlan default ports all
disable stpd s0 auto-bind vlan default
enable stpd s0 auto-bind vlan Default

#
# Module synce configuration.
#

#
# Module techSupport configuration.
#
enable tech-support collector
debug tech-support configure max-collectors 2
configure tech-support collector 12.38.14.200 tcp-port 800 from 172.16.100.1 ssl
off

#
# Module telnetd configuration.
#

#
# Module tftpd configuration.
#

#
# Module thttpd configuration.
#

#
# Module trill configuration.
#

#
# Module vmt configuration.
#

#
# Module vrrp configuration.
#
create vrrp vlan PASO_FW vrid 1
configure vrrp vlan PASO_FW vrid 1 priority 200
configure vrrp vlan PASO_FW vrid 1 add 10.120.2.67
enable vrrp vlan PASO_FW vrid 1

#
# Module vsm configuration.
#
T_PRIM_VILLAVO_CORE1.2 # sh edp ports all

Port Neighbor Neighbor-ID Remote Age Num


Port Vlans
=============================================================================
1 T_PRIM_VILLAVO_CORE2 00:00:00:04:96:97:79:bd 1:1 58 10
2 T_PRIM_VILLAVO_S1_CC 00:00:02:04:96:9a:79:43 1:23 1 7
3 T_PRIM_VILLAVO_S2_CC 00:00:02:04:96:98:23:85 1:23 23 7
4 T_PRIM_VILLAVO_S3_CC 00:00:02:04:96:9a:79:25 1:23 23 7
5 T_PRIM_VILLAVO_S1_IDF 00:00:02:04:96:9a:79:5f 1:23 8 7
6 T_PRIM_VILLAVO_SEGUROS 00:00:00:04:96:9a:13:93 1:23 48 4
7 BF_TF_VILLAVO_SW1 00:00:00:04:96:9a:79:58 1:22 18 4
=============================================================================
T_PRIM_VILLAVO_CORE1.3 # sh licenses
Enabled License Level:
Advanced Edge
Enabled Feature Packs:
None
T_PRIM_VILLAVO_CORE1.4 #