IMSSW01.

1 # show config
#
# Module devmgr configuration.
#
configure snmp sysName "IMSSW01"
configure snmp sysLocation "Springfield Vermont USA"
configure snmp sysContact "Vermont Tel"
configure timezone -300
configure sys-recovery-level switch reset
#
# Module vlan configuration.
#
configure vlan default delete ports all
configure vr VR-Default delete ports 1-28
create vr "media_cn"
create vr "om_MRS"
create vr "sig_dmz"
create vr "sig_IMS_cn"
create vr "sig_IMS_sc"
configure vlan default delete ports 1-28
create vlan "eMe_traffic_uplink" vr sig_dmz
configure vlan eMe_traffic_uplink tag 1331
create vlan "media_access_1" vr media_cn
configure vlan media_access_1 tag 1211
create vlan "media_access_2" vr media_cn
configure vlan media_access_2 tag 1212
create vlan "media_access_3" vr media_cn
configure vlan media_access_3 tag 2096
create vlan "media_BGF_LI" vr media_cn
configure vlan media_BGF_LI tag 1215
create vlan "media_cn_1" vr media_cn
configure vlan media_cn_1 tag 1205
create vlan "media_cn_4" vr media_cn
configure vlan media_cn_4 tag 1208
create vlan "media_ext_IMS_FW" vr media_cn
configure vlan media_ext_IMS_FW tag 1216
create vlan "media_IMS_FW" vr media_cn
configure vlan media_IMS_FW tag 1210
create vlan "media_LI" vr media_cn
configure vlan media_LI tag 1213
create vlan "media_meta" vr media_cn
configure vlan media_meta tag 1214
create vlan "om_cn_mg_MRS" vr om_MRS
configure vlan om_cn_mg_MRS tag 1464
create vlan "remote_mirror"
configure vlan remote_mirror tag 4094 remote-mirroring
disable learning vlan remote_mirror
create vlan "sig_cn_mg" vr sig_IMS_cn
configure vlan sig_cn_mg tag 1317
create vlan "sig_dmz_PGM_FW" vr sig_dmz
configure vlan sig_dmz_PGM_FW tag 1324
create vlan "sig_dmz_tl1" vr sig_dmz
configure vlan sig_dmz_tl1 tag 1323
create vlan "sig_dmz_tl2" vr sig_dmz
configure vlan sig_dmz_tl2 tag 1330
create vlan "sig_IMS_cn_FW" vr sig_IMS_cn
configure vlan sig_IMS_cn_FW tag 1318
create vlan "sig_IMS_sc_FW" vr sig_IMS_sc
configure vlan sig_IMS_sc_FW tag 1328

create vlan "sig_IMS_tl1" vr sig_IMS_sc

configure vlan sig_IMS_tl1 tag 1321
create vlan "sig_IMS_tl2" vr sig_IMS_sc
configure vlan sig_IMS_tl2 tag 1322
create vlan "sig_meta" vr sig_IMS_sc
configure vlan sig_meta tag 1327
create vlan "sig_SBG_core" vr sig_IMS_sc
configure vlan sig_SBG_core tag 1329
create vlan "toext_open_IMS_noQoS"
configure vlan toext_open_IMS_noQoS tag 1131
create vlan "toext_open_IMS_QoS"
configure vlan toext_open_IMS_QoS tag 1130
create vlan "toext_open_IMS_wifi"
configure vlan toext_open_IMS_wifi tag 1135
configure ports 6 auto on speed 1000
configure ports 16 auto on speed 1000
configure ports 17 far-end-fault-indication on
enable sharing 1 grouping 1-2 algorithm address-based L3_L4 lacp
configure mirror DefaultMirror to port 22
enable mirror DefaultMirror
configure vlan eMe_traffic_uplink add ports 1 tagged
configure vlan eMe_traffic_uplink add ports 5 untagged
configure vlan media_access_1 add ports 1, 19 tagged
configure vlan media_access_2 add ports 1, 19 tagged
configure vlan media_access_3 add ports 1, 19 tagged
configure vlan media_BGF_LI add ports 1, 19 tagged
configure vlan media_cn_1 add ports 1, 7 tagged
configure vlan media_cn_4 add ports 1, 15, 21 tagged
configure vlan media_ext_IMS_FW add ports 1, 4 tagged
configure vlan media_IMS_FW add ports 1, 4 tagged
configure vlan media_LI add ports 1, 19 tagged
configure vlan media_meta add ports 1 tagged
configure vlan media_meta add ports 13 untagged
configure vlan om_cn_mg_MRS add ports 1, 3 tagged
configure vlan om_cn_mg_MRS add ports 16 untagged
configure vlan remote_mirror add ports 24 untagged
configure vlan sig_cn_mg add ports 1, 6, 8-9, 20 tagged
configure vlan sig_dmz_PGM_FW add ports 1, 4 tagged
configure vlan sig_dmz_tl1 add ports 1 tagged
configure vlan sig_dmz_tl1 add ports 17 untagged
configure vlan sig_dmz_tl2 add ports 1 tagged
configure vlan sig_IMS_cn_FW add ports 1, 4 tagged
configure vlan sig_IMS_sc_FW add ports 1, 4 tagged
configure vlan sig_IMS_tl1 add ports 1 tagged
configure vlan sig_IMS_tl1 add ports 10, 12, 14 untagged
configure vlan sig_IMS_tl2 add ports 1 tagged
configure vlan sig_meta add ports 1 tagged
configure vlan sig_meta add ports 11 untagged
configure vlan sig_SBG_core add ports 1 tagged
configure vlan toext_open_IMS_noQoS add ports 1, 3, 8-9 tagged
configure vlan toext_open_IMS_QoS add ports 1, 3, 8-9 tagged
configure vlan toext_open_IMS_wifi add ports 1, 3, 8-9 tagged
configure vlan Mgmt ipaddress 172.16.10.75 255.255.255.240
configure vlan sig_IMS_tl1 ipaddress 172.16.4.65 255.255.255.240
enable ipforwarding vlan sig_IMS_tl1
configure vlan sig_IMS_tl2 ipaddress 172.16.4.81 255.255.255.240
enable ipforwarding vlan sig_IMS_tl2
configure vlan sig_meta ipaddress 172.16.3.65 255.255.255.240
enable ipforwarding vlan sig_meta
configure vlan sig_IMS_sc_FW ipaddress 172.16.15.169 255.255.255.248

enable ipforwarding vlan sig_IMS_sc_FW

configure vlan sig_IMS_cn_FW ipaddress 172.16.15.177 255.255.255.248
enable ipforwarding vlan sig_IMS_cn_FW
configure vlan sig_cn_mg ipaddress 172.16.4.225 255.255.255.224
enable ipforwarding vlan sig_cn_mg
configure vlan media_IMS_FW ipaddress 172.16.2.81 255.255.255.248
enable ipforwarding vlan media_IMS_FW
configure vlan media_cn_1 ipaddress 172.16.2.33 255.255.255.240
enable ipforwarding vlan media_cn_1
configure vlan media_cn_4 ipaddress 172.16.2.65 255.255.255.240
enable ipforwarding vlan media_cn_4
configure vlan media_meta ipaddress 172.16.3.81 255.255.255.240
enable ipforwarding vlan media_meta
configure vlan media_access_1 ipaddress 172.16.2.89 255.255.255.248
enable ipforwarding vlan media_access_1
configure vlan media_access_2 ipaddress 172.16.2.97 255.255.255.248
enable ipforwarding vlan media_access_2
configure vlan media_LI ipaddress 172.16.2.105 255.255.255.248
enable ipforwarding vlan media_LI
configure vlan media_BGF_LI ipaddress 172.16.2.113 255.255.255.248
enable ipforwarding vlan media_BGF_LI
configure vlan sig_dmz_PGM_FW ipaddress 172.16.4.41 255.255.255.248
enable ipforwarding vlan sig_dmz_PGM_FW
configure vlan sig_dmz_tl1 ipaddress 172.16.15.33 255.255.255.248
enable ipforwarding vlan sig_dmz_tl1
configure vlan sig_dmz_tl2 ipaddress 172.16.15.41 255.255.255.248
enable ipforwarding vlan sig_dmz_tl2
configure vlan media_ext_IMS_FW ipaddress 172.16.2.121 255.255.255.248
enable ipforwarding vlan media_ext_IMS_FW
configure vlan media_access_3 ipaddress 66.220.238.65 255.255.255.248
enable ipforwarding vlan media_access_3
configure vlan eMe_traffic_uplink ipaddress 172.16.3.105 255.255.255.248
enable ipforwarding vlan eMe_traffic_uplink
configure vr sig_dmz add protocol ospf
configure vr sig_IMS_sc add protocol ospf
configure mirror DefaultMirror add vlan eMe_traffic_uplink ingress
configure mirror DefaultMirror add vlan media_access_1 ingress
configure mirror DefaultMirror add vlan media_access_2 ingress
configure mirror DefaultMirror add vlan media_access_3 ingress
configure mirror DefaultMirror add vlan media_cn_1 ingress
configure mirror DefaultMirror add vlan media_cn_4 ingress
configure mirror DefaultMirror add vlan remote_mirror ingress
configure mirror DefaultMirror add vlan sig_cn_mg ingress
configure mirror DefaultMirror add vlan sig_dmz_PGM_FW ingress
configure mirror DefaultMirror add vlan sig_dmz_tl1 ingress
configure mirror DefaultMirror add vlan sig_dmz_tl2 ingress
configure mirror DefaultMirror add vlan sig_IMS_cn_FW ingress
configure mirror DefaultMirror add vlan sig_IMS_sc_FW ingress
configure mirror DefaultMirror add vlan sig_IMS_tl1 ingress
configure mirror DefaultMirror add vlan sig_IMS_tl2 ingress
configure mirror DefaultMirror add vlan sig_meta ingress
configure mirror DefaultMirror add vlan sig_SBG_core ingress
configure mirror DefaultMirror add vlan toext_open_IMS_noQoS ingress
configure mirror DefaultMirror add vlan toext_open_IMS_QoS ingress
configure mirror DefaultMirror add vlan toext_open_IMS_wifi ingress
#
# Module fdb configuration.
#

#
# Module rtmgr configuration.
#
configure iproute add default 172.16.10.67 vr VR-Mgmt
configure iproute add 10.50.0.160 255.255.255.224 172.16.15.172 vr sig_IMS_sc
configure iproute add 10.50.0.64 255.255.255.192 172.16.15.172 vr sig_IMS_sc
configure iproute add 10.50.0.32 255.255.255.224 172.16.15.172 vr sig_IMS_sc
configure iproute add 10.50.0.0 255.255.255.224 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.0.32 255.255.255.252 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.0.28 255.255.255.252 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.0.24 255.255.255.252 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.3.128 255.255.255.224 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.3.112 255.255.255.248 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.3.104 255.255.255.248 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.4.181 255.255.255.255 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.4.128 255.255.255.240 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.15.104 255.255.255.248 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.20.9 255.255.255.255 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.15.40 255.255.255.248 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.15.32 255.255.255.248 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.4.224 255.255.255.224 172.16.15.172 vr sig_IMS_sc
configure iproute add 172.16.15.104 255.255.255.248 172.16.4.230 vr sig_IMS_cn
configure iproute add 172.16.4.128 255.255.255.240 172.16.15.180 vr sig_IMS_cn
configure iproute add 172.16.31.248 255.255.255.248 172.16.15.180 vr sig_IMS_cn
configure iproute add default 172.16.10.172 vr sig_IMS_cn
configure iproute add 172.16.4.176 255.255.255.248 172.16.15.180 vr sig_IMS_cn
configure iproute add 172.16.4.64 255.255.255.240 172.16.15.180 vr sig_IMS_cn
configure iproute add 172.16.20.19 255.255.255.255 172.16.15.180 vr sig_IMS_cn
configure iproute add 10.50.0.160 255.255.255.224 172.16.2.84 vr media_cn
configure iproute add 10.50.0.64 255.255.255.192 172.16.2.84 vr media_cn
configure iproute add 10.50.0.32 255.255.255.224 172.16.2.84 vr media_cn
configure iproute add 10.50.0.0 255.255.255.224 172.16.2.84 vr media_cn
configure iproute add 172.16.0.32 255.255.255.252 172.16.2.84 vr media_cn
configure iproute add 172.16.0.28 255.255.255.252 172.16.2.84 vr media_cn
configure iproute add 172.16.0.24 255.255.255.252 172.16.2.84 vr media_cn
configure iproute add 172.16.3.128 255.255.255.224 172.16.2.84 vr media_cn
configure iproute add 172.16.3.112 255.255.255.248 172.16.2.84 vr media_cn
configure iproute add 172.16.3.104 255.255.255.248 172.16.2.84 vr media_cn
configure iproute add 172.16.4.128 255.255.255.240 172.16.2.84 vr media_cn
configure iproute add 172.17.0.0 255.255.0.0 172.16.2.124 vr media_cn
configure iproute add default 172.16.2.124 vr media_cn
configure iproute add 172.16.3.128 255.255.255.224 172.16.3.110 vr sig_dmz
configure iproute add 172.16.3.112 255.255.255.248 172.16.3.110 vr sig_dmz
configure iproute add 172.16.4.177 255.255.255.255 172.16.4.44 vr sig_dmz
configure iproute add 172.16.2.96 255.255.255.248 172.16.4.44 vr sig_dmz
configure iproute add 172.16.2.88 255.255.255.248 172.16.4.44 vr sig_dmz
configure iproute add 172.16.4.64 255.255.255.240 172.16.4.44 vr sig_dmz
configure iproute add 172.16.4.178 255.255.255.255 172.16.4.44 vr sig_dmz
configure iproute add 172.16.20.13 255.255.255.255 172.16.4.44 vr sig_dmz
configure iproute add 172.16.4.181 255.255.255.255 172.16.4.44 vr sig_dmz
configure iproute add 172.16.4.128 255.255.255.240 172.16.4.44 vr sig_dmz
configure iproute add default 172.16.4.44 vr sig_dmz
#
# Module mcmgr configuration.
#
disable igmp snooping vlan "remote_mirror"
#
# Module aaa configuration.

#
configure account admin encrypted "bVw1/v$/zqimy6U8ohCorvUjV5.u1"
create account admin ossuser encrypted "AuS..v$8H/cRhtnj33ufCLZVM4q91"
#
# Module acl configuration.
#

configure
configure
y 4
configure
ty 5
configure

access-list zone SYSTEM application NetLogin application-priority 3

access-list zone SYSTEM application HealthCheckLAG application-priorit
access-list zone SYSTEM application IdentityManager application-priori
access-list zone SYSTEM application VMTracking application-priority 6

#
# Module bfd configuration.
#
#
# Module bgp configuration.
#
#
# Module ces configuration.
#
#
# Module cfgmgr configuration.
#
#
# Module dosprotect configuration.
#
#
# Module dot1ag configuration.
#
#
# Module eaps configuration.
#
#
# Module edp configuration.
#
#
# Module elrp configuration.
#
#
# Module ems configuration.
#
#
# Module epm configuration.
#

#
# Module erps configuration.
#
#
# Module esrp configuration.
#
#
# Module ethoam configuration.
#
#
# Module etmon configuration.
#
#
# Module hal configuration.
#
#
# Module idMgr configuration.
#
create ldap domain "Unknown" default
configure ldap domain "Unknown" base-dn none
#
# Module ipSecurity configuration.
#
#
# Module ipfix configuration.
#
#
# Module isis configuration.
#
#
# Module lacp configuration.
#
#
# Module lldp configuration.
#
#
# Module mrp configuration.
#
#
# Module msdp configuration.
#
#
# Module netLogin configuration.
#
#

# Module netTools configuration.

#
configure sntp-client primary 172.16.11.20 vr VR-Mgmt
configure sntp-client secondary 172.16.11.21 vr VR-Mgmt
enable sntp-client
#
# Module ntp configuration.
#
enable ntp
configure ntp server add 172.16.11.20
#
# Module ospf configuration.
#
#
# Module ospf configuration on virtual router sig_IMS_sc.
#
virtual-router sig_IMS_sc
enable ospf
enable ospf export direct cost 10 type ase-type-2
enable ospf export static cost 10 type ase-type-2
create ospf area 1.1.2.4
configure ospf area 1.1.2.4 stub nosummary stub-default-cost 10
configure ospf vlan sig_IMS_sc_FW priority 255
configure ospf add vlan sig_IMS_tl1 area 1.1.2.4
configure ospf vlan sig_IMS_tl1 priority 255
configure ospf vlan sig_IMS_tl1 timer 3 1 3 9 9
configure ospf add vlan sig_IMS_tl2 area 1.1.2.4
configure ospf vlan sig_IMS_tl2 priority 255
configure ospf vlan sig_IMS_tl2 timer 3 1 3 9 9
configure ospf vlan sig_meta priority 255
virtual-router VR-Default
#
# Module ospf configuration on virtual router sig_dmz.
#
virtual-router sig_dmz
enable ospf
enable ospf export direct cost 10 type ase-type-2
enable ospf export static cost 10 type ase-type-2
create ospf area 1.1.2.5
configure ospf area 1.1.2.5 stub nosummary stub-default-cost 10
configure ospf add vlan sig_dmz_tl1 area 1.1.2.5
configure ospf vlan sig_dmz_tl1 priority 255
configure ospf vlan sig_dmz_tl1 timer 3 1 3 9 9
configure ospf add vlan sig_dmz_tl2 area 1.1.2.5
configure ospf vlan sig_dmz_tl2 priority 255
configure ospf vlan sig_dmz_tl2 timer 3 1 3 9 9
virtual-router VR-Default
#
# Module ospfv3 configuration.
#
#
# Module pim configuration.
#

configure pim register-checksum-to include-data

#
# Module poe configuration.
#
#
# Module rip configuration.
#
#
# Module ripng configuration.
#
#
# Module snmpMaster configuration.
#
#
# Module stp configuration.
#
configure mstp region 0004967e0542
configure stpd s0 delete vlan default ports all
disable stpd s0 auto-bind vlan default
enable stpd s0 auto-bind vlan Default
#
# Module synce configuration.
#
#
# Module telnetd configuration.
#
#
# Module tftpd configuration.
#
#
# Module thttpd configuration.
#
#
# Module vmt configuration.
#
#
# Module vrrp configuration.
#
create vrrp vlan sig_meta vrid 56
configure vrrp vlan sig_meta vrid 56 priority 254
create vrrp vlan sig_IMS_sc_FW vrid 66
configure vrrp vlan sig_IMS_sc_FW vrid 66 priority 254
create vrrp vlan sig_IMS_cn_FW vrid 65
configure vrrp vlan sig_IMS_cn_FW vrid 65 priority 254
create vrrp vlan sig_cn_mg vrid 39
configure vrrp vlan sig_cn_mg vrid 39 priority 254
create vrrp vlan media_IMS_FW vrid 56
configure vrrp vlan media_IMS_FW vrid 56 priority 254
create vrrp vlan media_cn_1 vrid 42

configure vrrp vlan media_cn_1 vrid 42 priority 254

create vrrp vlan media_cn_4 vrid 43
configure vrrp vlan media_cn_4 vrid 43 priority 254
create vrrp vlan media_meta vrid 55
configure vrrp vlan media_meta vrid 55 priority 254
create vrrp vlan media_access_1 vrid 66
configure vrrp vlan media_access_1 vrid 66 priority 254
create vrrp vlan media_access_2 vrid 65
configure vrrp vlan media_access_2 vrid 65 priority 254
create vrrp vlan media_LI vrid 39
configure vrrp vlan media_LI vrid 39 priority 254
create vrrp vlan media_BGF_LI vrid 42
configure vrrp vlan media_BGF_LI vrid 42 priority 254
create vrrp vlan sig_dmz_PGM_FW vrid 56
configure vrrp vlan sig_dmz_PGM_FW vrid 56 priority 254
create vrrp vlan media_ext_IMS_FW vrid 43
configure vrrp vlan media_ext_IMS_FW vrid 43 priority 254
create vrrp vlan media_access_3 vrid 56
configure vrrp vlan media_access_3 vrid 56 priority 254
create vrrp vlan eMe_traffic_uplink vrid 55
configure vrrp vlan eMe_traffic_uplink vrid 55 priority 254
configure vrrp vlan sig_meta vrid 56 add 172.16.3.67
configure vrrp vlan sig_IMS_sc_FW vrid 66 add 172.16.15.171
configure vrrp vlan sig_IMS_cn_FW vrid 65 add 172.16.15.179
configure vrrp vlan sig_cn_mg vrid 39 add 172.16.4.227
configure vrrp vlan media_IMS_FW vrid 56 add 172.16.2.83
configure vrrp vlan media_cn_1 vrid 42 add 172.16.2.35
configure vrrp vlan media_cn_4 vrid 43 add 172.16.2.67
configure vrrp vlan media_meta vrid 55 add 172.16.3.83
configure vrrp vlan media_access_1 vrid 66 add 172.16.2.91
configure vrrp vlan media_access_2 vrid 65 add 172.16.2.99
configure vrrp vlan media_LI vrid 39 add 172.16.2.107
configure vrrp vlan media_BGF_LI vrid 42 add 172.16.2.115
configure vrrp vlan sig_dmz_PGM_FW vrid 56 add 172.16.4.43
configure vrrp vlan media_ext_IMS_FW vrid 43 add 172.16.2.123
configure vrrp vlan media_access_3 vrid 56 add 66.220.238.67
configure vrrp vlan eMe_traffic_uplink vrid 55 add 172.16.3.107
enable vrrp vlan sig_meta vrid 56
enable vrrp vlan sig_IMS_sc_FW vrid 66
enable vrrp vlan sig_IMS_cn_FW vrid 65
enable vrrp vlan sig_cn_mg vrid 39
enable vrrp vlan media_IMS_FW vrid 56
enable vrrp vlan media_cn_1 vrid 42
enable vrrp vlan media_cn_4 vrid 43
enable vrrp vlan media_meta vrid 55
enable vrrp vlan media_access_1 vrid 66
enable vrrp vlan media_access_2 vrid 65
enable vrrp vlan media_LI vrid 39
enable vrrp vlan media_BGF_LI vrid 42
enable vrrp vlan sig_dmz_PGM_FW vrid 56
enable vrrp vlan media_ext_IMS_FW vrid 43
enable vrrp vlan media_access_3 vrid 56
enable vrrp vlan eMe_traffic_uplink vrid 55
#
# Module vsm configuration.
#