output drops na porcie 10Gb

Wiadomość

m4ver · #1

Cześć,

w mojej sieci pojawiła się tajemnicza rzecz. Mam kilka 4506E + sup6L-E + 4648 (dostęp dla serwerów) podłączonych poprzez porty 10Gbps do dystrybucji sup720+6708. Na jednym z bardziej obłożonych switchy zauważyłem, że zacząłem mieć output dropy.

Kod: Zaznacz cały

switch#show int te 1/1 counters all

Port                InBytes       InUcastPkts      InMcastPkts       InBcastPkts
Te1/1         6521115721119        9325116765         13047392           4128417

Port               OutBytes      OutUcastPkts     OutMcastPkts      OutBcastPkts
Te1/1        17019190624906       13988247179         45035912           2414197

Port              InPkts 64        OutPkts 64    InPkts 65-127    OutPkts 65-127
Te1/1                232128             26400       4048013149        2019414156

Port         InPkts 128-255   OutPkts 128-255   InPkts 256-511   OutPkts 256-511
Te1/1            1114866768         623329912        179607069         336141203

Port        InPkts 512-1023  OutPkts 512-1023
Te1/1              57146033         105187866

Port       InPkts 1024-1518 OutPkts 1024-1518 InPkts 1519-1548 OutPkts 1519-1548
Te1/1             224267752         348833956       3718159674       10602763831

Port       InPkts 1549-9216 OutPkts 1549-9216
Te1/1                     0                 0

Port       Tx-Bytes-Queue-1  Tx-Bytes-Queue-2 Tx-Bytes-Queue-3  Tx-Bytes-Queue-4
Te1/1                     0                 0                0                 0

Port       Tx-Bytes-Queue-5  Tx-Bytes-Queue-6 Tx-Bytes-Queue-7  Tx-Bytes-Queue-8
Te1/1                     0                 0                0    17019242625835

Port       Tx-Drops-Queue-1  Tx-Drops-Queue-2 Tx-Drops-Queue-3  Tx-Drops-Queue-4
Te1/1                     0                 0                0                 0

Port       Tx-Drops-Queue-5  Tx-Drops-Queue-6 Tx-Drops-Queue-7  Tx-Drops-Queue-8
Te1/1                     0                 0                0                 0

Port       Dbl-Drops-Queue-1 Dbl-Drops-Queue-2 Dbl-Drops-Queue-3 Dbl-Drops-Queue-4
Te1/1                      0                 0                 0                 0

Port       Dbl-Drops-Queue-5 Dbl-Drops-Queue-6 Dbl-Drops-Queue-7 Dbl-Drops-Queue-8
Te1/1                      0                 0                 0             19419

Port         Rx-No-Pkt-Buff     RxPauseFrames    TxPauseFrames   PauseFramesDrop
Te1/1                     0                 0                0                 0

Port       UnsupOpcodePause
Te1/1                     0

Port           CrcAlign-Err  Dropped-Bad-Pkts       Collisions        Symbol-Err
Te1/1                     0                 0                0                 0

Port              Undersize          Oversize        Fragments           Jabbers
Te1/1                     0                 0                0                 0

Port             Single-Col         Multi-Col         Late-Col        Excess-Col
Te1/1                     0                 0                0                 0

Port           Deferred-Col         False-Car        Carri-Sen      Sequence-Err
Te1/1                     0                 0                0                 0

Port         RxIslTagFrames    TxIslTagFrames RxDot1qTagFrames  TxDot1qTagFrames
Te1/1                     0                 0       9340668282       14034709343

Wszystkie dropy występują w jednej kolejce co się trzyma kupy z racji tego, że w sieci serwerowej nie używamy QoSa.

Ciekawe jest, że dropy przyrastają mniej więcej 1 na 4-5 sekund, więc dramatu nie ma. Link jest obciążony w max 15% ale zakładam, że te output dropy wynikają z microburstów.

Pytanie: czy jest jakiś sposób aby zobaczyć pakiet, który będzie dropnięty z kolejki wychodzącej, podobnie jak mogę zobaczyć pakiety dochodzące do CPU poprzez sesję SPAN?

PZDR

look · #2

sprawdz jakie masz obciazenie na pamieci i procesorze

lipos · #3

Hej,

Radze nastepujace kroki:
1. Spropobuj zainstalowac Cacti zeby monitorowac i graforwac historie dropow, throughput i packet per second. Celem jest znalezenie jakiejs logiki tj moze przy podwyzszonym pps lub throughput bedziesz mial dropy itd.
2. Przy pollingu co 1min w samym cacti nie zobaczysz microburstow. Do tego bedzie potrzebowac pluginu Cacti zwanego Realtime ktory pozwoli ci sciagac SNMP co 5 sekund dla wybranego interfejsu. Z realtime bedziesz widzizl lepiej mikrobursty bo bedziesz mogl sciagac co 5 sekund dane o throughput/pps oraz dropy.

Jezeli potwierdzisz ze masz realne mikrobusty ta technika to juz cos wiesz i to zonacza ze ruszasz sie do przodu. Wtedy masz bardzo duzo opcji chyba ze gdzies hardware nie jest w stanie tego wytrzymac to ..masz duzo zabawy

Nie znam zadnych komend ktore sa w stanie pokazac pakietow dropowanych w kolejce.
Zawsze zaczynam od opcji powyzej pozniewaz czesto mam sytuacje gdzie pakiet loss jest staly (ciagla linia na grafie) co oznacza ze wiekszosci przypadkow dotyczy jakis smieci ktore nie powoduja problemow w sieci. Jezeli pakiet loss na interfejsie rosnie i spada wraz z throughput/pps to masz realny problem.

Ty masz problemy w sieci czy tylko zauwazyles ten packet loss i starasz sie rozwiazac ten problem?

3. Jezeli masz realny problem i presje to radze pogrzebac i posprawdzac rozne komendy ktore moga ci podac konkretna odpowiedz co jest odpowiedzialne za dropy bo twoja komenda powyzej pokazuje tylko number i ilosc dropowa aka malo detali. Jezeli szukasz igly w stosie siana to pamietaj ze szukasz gdzies dokladnie takiego samego numeru jak w twoim liczniku reprezentujacym dropy. Jezlei brak pomyslow to zacznij analizowac sh tech..

4. Jezeli ten proces nie bedzie super powodzeniem to faktycznie SPAN i sniffer do sprawdzenia ktore sejse maja problem bo moze jest w tym jakas logika inna niz random packet loss.

Masz bardzo ciekawy problem bo packet loss is a bitch i moze byc powodowany przez setki roznych rzeczy. Fun, fun fun!

Milej zabawy!

PS
Pamietaj ze kazdy switch potrzebuje milosci a ty nawet nazwy swojego switcha nie zmieniles... Moze dlatego masz problemy.. kto wie

m4ver · #4

@look: dzieki za sugestie ale CPU mam na 5-9% a pamieci ponad połowa jest wolna. Z reszta jakbym mial z tym problemy to nie spowodowały by one output dropów

@lipos: dzieki za sugestie. To tak:
1) Już nad Cacti pracuje, jutro pewnie będę już miał jakieś wyniki. DZIEKI za podrzucenie tego Realtime, zobacze co i jak.
2) jest takie darmowe narzędzie Switch Port Monitor (by Fluke) i on umożliwia odpytywanie do 10sec. No i niestety nim widać, że port jest obciążony 15% albo nawet mniej a dropy są.

Kod: Zaznacz cały

TenGigabitEthernet1/1 is up, line protocol is up (connected) 
  Hardware is Ten Gigabit Ethernet Port, address is c84c.752d.f940 (bia c84c.752d.f940)
  MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec, 
     reliability 255/255, txload 17/255, rxload 5/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 10Gb/s, link type is auto, media type is 10GBase-SR
  input flow-control is on, output flow-control is off
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output never, output hang never
  Last clearing of "show interface" counters 1w0d
  Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 37003
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  30 second input rate 211204000 bits/sec, 42433 packets/sec
  30 second output rate 678500000 bits/sec, 70424 packets/sec

Odpowiadając na Twoje pytanie, nie, nie mam żadnych problemów. Po prostu zauważyłem to kiedyś przypadkiem, a że to uplink to sie przejąłem

3) No niby to nie jest realny problem. Kłopot z tym jest taki, że nie mam z czym tego licznika porównać, bo to nie CPU dropuje po swojej stronie (jak rozumiem), który sobie zlicza jakie pakiety dropnal i dlaczego. Do tego, nawet jak packets per sec spadnie o połowe tego co widzisz wyżej, to też sie pojawiają te dropy :/ Na dodatek output dropy na innych (dostępowych portach) ani drgną! Masz pod ręką jakieś inne komendy na debug output dropów na porcie?

4) No własnie SPAN tu chyba nie nie da, nie? no bo jak bede SPANował uplinka to przeciez output dropów nie zobaczę.

5) hostname w tym outpucie zmieniłem celowo, niewiadomo kto patrzy

I zgadzam się, że bez odpowiedniej dawki miłości, problemy w sieci gwarantowane.

6) Myślę sobie czy channel 20gb nie rozwiązałby tego problemu...

dzieki jeszcze raz i pozdro

lbromirs · #5

Te dropy są generalnie na czym? Na 4500E czy na 6500? Możesz podzielić się zrzutem konfiguracji i wersją IOS?

m4ver · #6

Tak jak pisałem w pierwszym poscie:

Kod: Zaznacz cały

Chassis Type : WS-C4506-E

Power consumed by backplane : 0 Watts

Mod Ports Card Type                              Model              Serial No.
---+-----+--------------------------------------+------------------+-----------
 1     6  Sup 6L-E 10GE (X2), 1000BaseX (SFP)    WS-X45-SUP6L-E     JAE1424XXXX 
 2    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    JAE1434XXXX
 3    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    JAE1434XXXX 
 4    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    JAE1426XXXX 
 5    48  10/100/1000BaseT (RJ45)                WS-X4648-RJ45-E    JAE1453XXXX 

 M MAC addresses                    Hw  Fw           Sw               Status
--+--------------------------------+---+------------+----------------+---------
 1 c84c.752d.f940 to c84c.752d.f945 1.3 12.2(44r)SG5 15.0(2)SG1       Ok       
 2 f866.f24f.9962 to f866.f24f.9991 1.0                               Ok       
 3 f866.f24f.8c02 to f866.f24f.8c31 1.0                               Ok       
 4 c84c.752a.ad7c to c84c.752a.adab 1.0                               Ok       
 5 503d.e51a.e1a1 to 503d.e51a.e1d0 1.0                               Ok

IOS jak widać to Version 15.0(2)SG1.

Config:

Kod: Zaznacz cały

version 15.0
no service pad
service timestamps debug datetime localtime show-timezone
service timestamps log datetime localtime show-timezone
service password-encryption
service compress-config
!
hostname Switch
!
boot-start-marker
boot system bootflash:cat4500e-ipbasek9-mz.150-2.SG1.bin
boot-end-marker
!
logging buffered 512000
enable secret <some_secret>
!
!
!
aaa new-model
!
!
aaa authentication login default group tacacs+ line
aaa authentication enable default group tacacs+ enable
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
aaa accounting system default start-stop group tacacs+
!
!
!
aaa session-id common
clock timezone CET 1
clock summer-time CET recurring
ip subnet-zero
no ip routing
ip domain-list <some_domain>
no ip domain-lookup
ip domain-name <some_domain>
ip name-server <ip1>
ip name-server <ip2>
ip name-server <ip3>
!
!
ip vrf mgmtVrf
!
vtp domain <some_domain>
vtp mode transparent
!
!
!
no errdisable detect cause link-flap
power redundancy-mode redundant
!
!
!
!
spanning-tree mode rapid-pvst
spanning-tree portfast bpduguard default
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 336
 name LAN-mgmt
!
vlan 168
 name Servers
!
vlan 169
 name Servers2
!
vlan 170
 name Servers3
!
vlan 695
 name Isolated-VM
!
vlan 696
 name Isolated-VM-Storage
!
vlan 699
 name Isolated-AV
lldp run
!
ip ssh time-out 60
ip ssh authentication-retries 2
!
!
interface Port-channel10
 switchport
 switchport access vlan 168
 switchport mode access
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Port-channel14
 switchport
 switchport access vlan 170
 switchport mode access
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Port-channel16
 switchport
 switchport access vlan 168
 switchport mode access
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Port-channel17
 switchport
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 load-interval 30
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Port-channel18
 switchport
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface FastEthernet1
 ip vrf forwarding mgmtVrf
 no ip address
 no ip route-cache
 speed auto
 duplex auto
!
interface TenGigabitEthernet1/1
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 336,168-170,696,699
 switchport mode trunk
 logging event link-status
 load-interval 30
 storm-control broadcast level 0.50
 storm-control action trap
!
interface TenGigabitEthernet1/2
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 336,168-170,699
 switchport mode trunk
 logging event link-status
 load-interval 30
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet1/3
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet1/4
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet1/5
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet1/6
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet2/1
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 336,168,169
 switchport mode trunk
 logging event link-status
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet2/2
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/3
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/4
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/5
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/6
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/7
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/8
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/9
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/10
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/11
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/12
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/13
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/14
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/15
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 10 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/16
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 10 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/17
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/18
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/19
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/20
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/21
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/22
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/23
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/24
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/25
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/26
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/27
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/28
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/29
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 14 mode active
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/30
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 14 mode active
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/31
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/32
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/33
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/34
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/35
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/36
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 17 mode active
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/37
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 17 mode active
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/38
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/39
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/40
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/41
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/42
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/43
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/44
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/45
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/46
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/47
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet2/48
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/1
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/2
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/3
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/4
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/5
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/6
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/7
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/8
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/9
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/10
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/11
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/12
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/13
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/14
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/15
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/16
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/17
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/18
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/19
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/20
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/21
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/22
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/23
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/24
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/25
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/26
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/27
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/28
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/29
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/30
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/31
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/32
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/33
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/34
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/35
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/36
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/37
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/38
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/39
 switchport access vlan 170
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/40
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/41
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/42
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/43
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/44
 switchport access vlan 695
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/45
 switchport access vlan 695
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/46
 switchport access vlan 695
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/47
 switchport access vlan 695
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet3/48
 switchport access vlan 695
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/1
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/2
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/3
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/4
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/5
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/6
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/7
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/8
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/9
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/10
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/11
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/12
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/13
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/14
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/15
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/16
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/17
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/18
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/19
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/20
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/21
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/22
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/23
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/24
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/25
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 speed 1000
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 16 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/26
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 speed 1000
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 16 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/27
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168,169
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet4/28
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168,169
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet4/29
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168,169
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
!
interface GigabitEthernet4/30
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/31
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/32
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/33
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/34
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 18 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/35
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 18 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/36
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/37
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/38
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/39
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/40
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/41
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/42
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/43
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/44
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/45
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/46
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/47
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet4/48
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/1
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/2
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/3
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/4
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/5
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/6
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/7
 switchport trunk native vlan XXX
 switchport trunk allowed vlan 168-170
 switchport mode trunk
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast trunk
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/8
 switchport access vlan 696
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/9
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/10
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/11
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/12
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/13
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/14
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/15
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/16
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 speed 100
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/17
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/18
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 speed 100
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/19
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/20
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/21
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/22
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/23
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/24
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/25
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/26
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/27
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/28
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/29
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/30
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/31
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/32
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/33
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/34
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/35
 switchport access vlan 699
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/36
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/37
 switchport access vlan 699
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/38
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/39
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/40
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/41
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/42
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/43
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/44
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/45
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/46
 switchport access vlan 169
 switchport mode access
 no logging event link-status
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/47
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 speed 1000
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 16 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface GigabitEthernet5/48
 switchport access vlan 168
 switchport mode access
 no logging event link-status
 speed 1000
 duplex full
 no snmp trap link-status
 storm-control broadcast level 0.50
 storm-control action trap
 channel-group 16 mode on
 spanning-tree portfast
 spanning-tree bpduguard enable
!
interface Vlan1
 no ip address
 no ip route-cache
 shutdown
!
interface Vlan36
 ip address <ip4> <mask>
 no ip route-cache
!
ip default-gateway <gateway>
no ip http server
no ip http secure-server
!
!
logging trap warnings
logging <ip5>

access-list 150 permit <ip6>

!
snmp-server community <string1> RO 150
snmp-server community <string2> RW 150
snmp-server community <string3> RW 150
snmp-server queue-length 1
snmp-server enable traps snmp linkdown linkup coldstart warmstart
snmp-server enable traps transceiver all
snmp-server enable traps call-home message-send-fail server-fail
snmp-server enable traps ospf state-change
snmp-server enable traps ospf errors
snmp-server enable traps ospf retransmit
snmp-server enable traps ospf lsa
snmp-server enable traps ospf cisco-specific state-change nssa-trans-change
snmp-server enable traps ospf cisco-specific state-change shamlink interface-old
snmp-server enable traps ospf cisco-specific state-change shamlink neighbor
snmp-server enable traps ospf cisco-specific errors
snmp-server enable traps ospf cisco-specific retransmit
snmp-server enable traps ospf cisco-specific lsa
snmp-server enable traps eigrp
snmp-server enable traps flex-links status
snmp-server enable traps fru-ctrl
snmp-server enable traps entity
snmp-server enable traps ethernet cfm cc mep-up mep-down cross-connect loop config
snmp-server enable traps ethernet cfm crosscheck mep-missing mep-unknown service-up
snmp-server enable traps ether-oam
snmp-server enable traps flash insertion removal
snmp-server enable traps l2tc threshold sys-threshold
snmp-server enable traps power-ethernet police
snmp-server enable traps cpu threshold
snmp-server enable traps rep
snmp-server enable traps udld link-fail-rpt
snmp-server enable traps udld status-change
snmp-server enable traps vtp
snmp-server enable traps vlancreate
snmp-server enable traps vlandelete
snmp-server enable traps auth-framework sec-violation
snmp-server enable traps dot1x auth-fail-vlan guest-vlan no-auth-fail-vlan no-guest-vlan
snmp-server enable traps envmon fan shutdown supply temperature status
snmp-server enable traps entity-diag boot-up-fail hm-test-recover hm-thresh-reached scheduled-test-fail
snmp-server enable traps port-security
snmp-server enable traps ethernet evc status create delete
snmp-server enable traps event-manager
snmp-server enable traps rf
snmp-server enable traps cef resource-failure peer-state-change peer-fib-state-change inconsistency
snmp-server enable traps config-copy
snmp-server enable traps config
snmp-server enable traps config-ctid
snmp-server enable traps hsrp
snmp-server enable traps ipmulticast
snmp-server enable traps pim neighbor-change rp-mapping-change invalid-pim-message
snmp-server enable traps energywise
snmp-server enable traps bridge newroot topologychange
snmp-server enable traps stpx inconsistency root-inconsistency loop-inconsistency
snmp-server enable traps rtr
snmp-server enable traps errdisable
snmp-server enable traps ethernet cfm alarm
snmp-server enable traps vlan-membership
snmp-server enable traps mac-notification change move threshold
snmp-server host <ip7> public 
snmp-server host <ip8> public 
snmp ifmib ifindex persist
tacacs-server host <ip9>
tacacs-server host <ip10>
tacacs-server timeout 30
no tacacs-server directed-request
tacacs-server key <key>

line con 0
 exec-timeout 30 0
 password <pass>
 transport preferred none
 stopbits 1
line vty 0 4
 exec-timeout 30 0
 password <pass>
 transport preferred none
 transport input telnet ssh
line vty 5 15
 exec-timeout 30 0
 password <pass>
 transport preferred none
 transport input telnet ssh
!
ntp clock-period 17180239
ntp server <ip11>
mac address-table notification mac-move
end