Keyboard-interactive authentication prompts from server:

| Password:
End of keyboard-interactive prompts from server

____ ___ ____ _____ ___ ___ ____

| \ / _ \| _ \(___ ) _ \ / _ \| _ \
| | | | |_| | | | |/ __/ |_| | |_| | | | |
|_|_|_|\___/|_| |_(_____)___/ \___/|_| |_|
N E T W O R K S

Device: RTR_Alex_Test
Contact: [email protected]
phone +41 43 5000 474

RTR_Alex_Test#sh run
Building configuration...

Current configuration : 4182 bytes

!
! No configuration change since last restart
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition PASSPOINT
rd 24889:12
!
address-family ipv4
exit-address-family
!
logging buffered 65536 informational
!
aaa new-model
!
!
aaa group server radius GR-RADIUS-MGMT
server name RS-RADIUS-MGMT
!
aaa authentication login default group GR-RADIUS-MGMT local
aaa authorization console
aaa authorization exec default group GR-RADIUS-MGMT local
aaa accounting exec default start-stop group GR-RADIUS-MGMT
!
!
!
!
!
aaa session-id common
ethernet lmi ce
!
!
!
!
!
!
no ip source-route
!
!
!
!
!
!
no ip domain lookup
ip domain name monzoon.net
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9 sn FCZ194693SN
!
!
username monzoon_emerg privilege 15 secret 5 $1$a3Zk$ir.jd9t7RQcaaX8.n4DHq.
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel1
description *** Tunnel: MONZOON ***
vrf forwarding MONZOON
 ip address 10.108.20.2 255.255.255.252
ip tcp adjust-mss 1400
ipv6 address 2A02:200:13B1::2/64
tunnel source GigabitEthernet0/0
tunnel destination 80.254.79.47
!
interface Tunnel12
description *** PASSPOINT ***
vrf forwarding PASSPOINT
ip address 10.108.20.126 255.255.255.252
ip tcp adjust-mss 1400
tunnel source GigabitEthernet0/0
tunnel destination 80.254.64.42
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1 native
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
!
interface GigabitEthernet0/1.2
description *** MONZOON ***
encapsulation dot1Q 2
vrf forwarding MONZOON
ip address 10.211.0.1 255.255.0.0 secondary
ip address 10.108.20.130 255.255.255.252
ip helper-address 80.254.79.46
!
interface GigabitEthernet0/1.12
description *** PASSPOINT ***
encapsulation dot1Q 12
vrf forwarding PASSPOINT
ip address 10.187.0.1 255.255.0.0 secondary
ip address 10.108.20.138 255.255.255.252
ip helper-address 80.254.64.41
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 80.254.71.97
ip route vrf MONZOON 0.0.0.0 0.0.0.0 Tunnel1
ip route vrf PASSPOINT 0.0.0.0 0.0.0.0 Tunnel12
ip ssh version 2
!
ip access-list standard ACL4-SNMP
permit 80.254.77.0 0.0.0.255
deny any
!
ip access-list extended ACL4-MGMT
permit ip 80.254.77.0 0.0.0.255 any
permit ip 10.108.20.0 0.0.3.255 any
deny ip any any
!
logging host 80.254.77.38
!
!
snmp-server community monzoon RO ipv6 ACL6-SNMP ACL4-SNMP
!
radius server RS-RADIUS-MGMT
address ipv4 80.254.77.37 auth-port 1812 acct-port 1813
timeout 5
retransmit 1
key 7 051351580E6A6F21385712163C341C01221E0C0A677132
!
!
!
ipv6 access-list ACL6-MGMT
permit ipv6 2A02:200:1:12::/64 any
permit ipv6 2A02:200:2::/48 any
deny ipv6 any any
!
ipv6 access-list ACL6-SNMP
permit ipv6 2A02:200:1:12::/64 any
deny ipv6 any any
!
control-plane
!
!
banner motd ^C

____ ___ ____ _____ ___ ___ ____

| \ / _ \| _ \(___ ) _ \ / _ \| _ \
| | | | |_| | | | |/ __/ |_| | |_| | | | |
|_|_|_|\___/|_| |_(_____)___/ \___/|_| |_|
N E T W O R K S

Device: $(hostname)
Contact: [email protected]
phone +41 43 5000 474

^C
!
line con 0
stopbits 1
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
 access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
line vty 5 15
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
!
scheduler allocate 20000 1000
sntp server 80.254.79.157
!
end

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#int vlan 66
^
% Invalid input detected at '^' marker.

RTR_Alex_Test(config)#
RTR_Alex_Test#sh int des
RTR_Alex_Test#sh int description
Interface Status Protocol Description
Em0/0 admin down down
Gi0/0 up up
Gi0/1 down down
Gi0/1.1 down down *** Management ***
Gi0/1.2 down down *** MONZOON ***
Gi0/1.12 down down *** PASSPOINT ***
Tu1 up up *** Tunnel: MONZOON ***
Tu12 up up *** PASSPOINT ***
RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#int gig0/1.66
RTR_Alex_Test(config-subif)#encap
RTR_Alex_Test(config-subif)#encapsulation 802
RTR_Alex_Test(config-subif)#encapsulation
RTR_Alex_Test(config-subif)#encapsulation
RTR_Alex_Test(config-subif)#encapsulation
RTR_Alex_Test(config-subif)#encapsulation ?
dot1Q IEEE 802.1Q Virtual LAN
priority-tagged Priority-tagged (VLAN 0)

RTR_Alex_Test(config-subif)#encapsulation ?
dot1Q IEEE 802.1Q Virtual LAN
priority-tagged Priority-tagged (VLAN 0)

RTR_Alex_Test(config-subif)#encapsulation dot1q
% Incomplete command.

RTR_Alex_Test(config-subif)#encapsulation dot1q 66
RTR_Alex_Test(config-subif)#ip add
RTR_Alex_Test(config-subif)#ip address 192.168.66.1 255.255.255.0
RTR_Alex_Test(config-subif)#des
RTR_Alex_Test(config-subif)#description ***vlan66***
RTR_Alex_Test(config-subif)#exit
RTR_Alex_Test(config)#exit
RTR_Alex_Test#sh int des
Interface Status Protocol Description
Em0/0 admin down down
Gi0/0 up up
Gi0/1 down down
Gi0/1.1 down down *** Management ***
Gi0/1.2 down down *** MONZOON ***
Gi0/1.12 down down *** PASSPOINT ***
Gi0/1.66 down down ***vlan66***
Tu1 up up *** Tunnel: MONZOON ***
Tu12 up up *** PASSPOINT ***
RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#ip dhcp ex
RTR_Alex_Test(config)#ip dhcp excluded-address 192.168.66.0 192.168.66.10
RTR_Alex_Test(config)#ip dhcp excluded-address 192.168.66.250 192.168.66.255
RTR_Alex_Test(config)#ip dhcp pool unifistaging
RTR_Alex_Test(dhcp-config)#network 192.168.66.0 255.255.255.0
RTR_Alex_Test(dhcp-config)#def
RTR_Alex_Test(dhcp-config)#default-router 192.168.66.1
RTR_Alex_Test(dhcp-config)#dns
RTR_Alex_Test(dhcp-config)#dns-server 8.8.8.8 8.8.4.4
RTR_Alex_Test(dhcp-config)#ex
RTR_Alex_Test(config)#ex
% Ambiguous command: "ex"
RTR_Alex_Test(config)#ex
% Ambiguous command: "ex"
RTR_Alex_Test(config)#exit
RTR_Alex_Test#sh run
Building configuration...

Current configuration : 4561 bytes

!
! Last configuration change at 13:26:53 UTC Fri Jan 20 2023 by aneukom
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition PASSPOINT
rd 24889:12
!
address-family ipv4
 exit-address-family
!
logging buffered 65536 informational
!
aaa new-model
!
!
aaa group server radius GR-RADIUS-MGMT
server name RS-RADIUS-MGMT
!
aaa authentication login default group GR-RADIUS-MGMT local
aaa authorization console
aaa authorization exec default group GR-RADIUS-MGMT local
aaa accounting exec default start-stop group GR-RADIUS-MGMT
!
!
!
!
!
aaa session-id common
ethernet lmi ce
!
!
!
!
!
!
no ip source-route
!
!
!
ip dhcp excluded-address 192.168.66.0 192.168.66.10
ip dhcp excluded-address 192.168.66.250 192.168.66.255
!
ip dhcp pool unifistaging
network 192.168.66.0 255.255.255.0
default-router 192.168.66.1
dns-server 8.8.8.8 8.8.4.4
!
!
!
no ip domain lookup
ip domain name monzoon.net
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9 sn FCZ194693SN
!
!
username monzoon_emerg privilege 15 secret 5 $1$a3Zk$ir.jd9t7RQcaaX8.n4DHq.
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel1
description *** Tunnel: MONZOON ***
vrf forwarding MONZOON
ip address 10.108.20.2 255.255.255.252
ip tcp adjust-mss 1400
ipv6 address 2A02:200:13B1::2/64
tunnel source GigabitEthernet0/0
tunnel destination 80.254.79.47
!
interface Tunnel12
description *** PASSPOINT ***
vrf forwarding PASSPOINT
ip address 10.108.20.126 255.255.255.252
ip tcp adjust-mss 1400
tunnel source GigabitEthernet0/0
tunnel destination 80.254.64.42
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1 native
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
!
interface GigabitEthernet0/1.2
description *** MONZOON ***
encapsulation dot1Q 2
vrf forwarding MONZOON
ip address 10.211.0.1 255.255.0.0 secondary
ip address 10.108.20.130 255.255.255.252
ip helper-address 80.254.79.46
!
interface GigabitEthernet0/1.12
 description *** PASSPOINT ***
encapsulation dot1Q 12
vrf forwarding PASSPOINT
ip address 10.187.0.1 255.255.0.0 secondary
ip address 10.108.20.138 255.255.255.252
ip helper-address 80.254.64.41
!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66
ip address 192.168.66.1 255.255.255.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 80.254.71.97
ip route vrf MONZOON 0.0.0.0 0.0.0.0 Tunnel1
ip route vrf PASSPOINT 0.0.0.0 0.0.0.0 Tunnel12
ip ssh version 2
!
ip access-list standard ACL4-SNMP
permit 80.254.77.0 0.0.0.255
deny any
!
ip access-list extended ACL4-MGMT
permit ip 80.254.77.0 0.0.0.255 any
permit ip 10.108.20.0 0.0.3.255 any
deny ip any any
!
logging host 80.254.77.38
!
!
snmp-server community monzoon RO ipv6 ACL6-SNMP ACL4-SNMP
!
radius server RS-RADIUS-MGMT
address ipv4 80.254.77.37 auth-port 1812 acct-port 1813
timeout 5
retransmit 1
key 7 051351580E6A6F21385712163C341C01221E0C0A677132
!
!
!
ipv6 access-list ACL6-MGMT
permit ipv6 2A02:200:1:12::/64 any
permit ipv6 2A02:200:2::/48 any
deny ipv6 any any
!
ipv6 access-list ACL6-SNMP
permit ipv6 2A02:200:1:12::/64 any
deny ipv6 any any
!
control-plane
!
!
banner motd ^C

____ ___ ____ _____ ___ ___ ____

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#ip acc
RTR_Alex_Test(config)#ip access
RTR_Alex_Test(config)#ip access-list ex
RTR_Alex_Test(config)#ip access-list extended ACL-UniFiStaging
RTR_Alex_Test(config-ext-nacl)#perm
RTR_Alex_Test(config-ext-nacl)#permit ip 192.168.66.0 0.0.0.255
% Incomplete command.

RTR_Alex_Test(config-ext-nacl)#permit ip 192.168.66.0 0.0.0.255 any

RTR_Alex_Test(config-ext-nacl)#exit
RTR_Alex_Test(config)#exit
RTR_Alex_Test#sh run
Building configuration...

Current configuration : 4640 bytes

!
! Last configuration change at 13:34:39 UTC Fri Jan 20 2023 by aneukom
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition PASSPOINT
rd 24889:12
!
address-family ipv4
exit-address-family
!
logging buffered 65536 informational
!
aaa new-model
!
!
aaa group server radius GR-RADIUS-MGMT
server name RS-RADIUS-MGMT
!
aaa authentication login default group GR-RADIUS-MGMT local
aaa authorization console
aaa authorization exec default group GR-RADIUS-MGMT local
aaa accounting exec default start-stop group GR-RADIUS-MGMT
!
!
!
!
!
aaa session-id common
ethernet lmi ce
!
!
!
!
!
!
no ip source-route
!
!
!
ip dhcp excluded-address 192.168.66.0 192.168.66.10
ip dhcp excluded-address 192.168.66.250 192.168.66.255
!
ip dhcp pool unifistaging
network 192.168.66.0 255.255.255.0
default-router 192.168.66.1
dns-server 8.8.8.8 8.8.4.4
!
!
!
no ip domain lookup
ip domain name monzoon.net
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9 sn FCZ194693SN
!
!
username monzoon_emerg privilege 15 secret 5 $1$a3Zk$ir.jd9t7RQcaaX8.n4DHq.
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel1
description *** Tunnel: MONZOON ***
vrf forwarding MONZOON
ip address 10.108.20.2 255.255.255.252
ip tcp adjust-mss 1400
ipv6 address 2A02:200:13B1::2/64
tunnel source GigabitEthernet0/0
tunnel destination 80.254.79.47
!
interface Tunnel12
description *** PASSPOINT ***
vrf forwarding PASSPOINT
ip address 10.108.20.126 255.255.255.252
ip tcp adjust-mss 1400
tunnel source GigabitEthernet0/0
tunnel destination 80.254.64.42
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1 native
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
!
interface GigabitEthernet0/1.2
description *** MONZOON ***
encapsulation dot1Q 2
vrf forwarding MONZOON
ip address 10.211.0.1 255.255.0.0 secondary
ip address 10.108.20.130 255.255.255.252
ip helper-address 80.254.79.46
!
interface GigabitEthernet0/1.12
description *** PASSPOINT ***
encapsulation dot1Q 12
vrf forwarding PASSPOINT
ip address 10.187.0.1 255.255.0.0 secondary
ip address 10.108.20.138 255.255.255.252
ip helper-address 80.254.64.41
!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66
ip address 192.168.66.1 255.255.255.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip route 0.0.0.0 0.0.0.0 80.254.71.97
ip route vrf MONZOON 0.0.0.0 0.0.0.0 Tunnel1
ip route vrf PASSPOINT 0.0.0.0 0.0.0.0 Tunnel12
ip ssh version 2
!
ip access-list standard ACL4-SNMP
permit 80.254.77.0 0.0.0.255
deny any
!
ip access-list extended ACL-UniFiStaging
permit ip 192.168.66.0 0.0.0.255 any
ip access-list extended ACL4-MGMT
permit ip 80.254.77.0 0.0.0.255 any
permit ip 10.108.20.0 0.0.3.255 any
deny ip any any
!
logging host 80.254.77.38
!
!
snmp-server community monzoon RO ipv6 ACL6-SNMP ACL4-SNMP
!
radius server RS-RADIUS-MGMT
address ipv4 80.254.77.37 auth-port 1812 acct-port 1813
timeout 5
retransmit 1
key 7 051351580E6A6F21385712163C341C01221E0C0A677132
!
!
!
ipv6 access-list ACL6-MGMT
permit ipv6 2A02:200:1:12::/64 any
permit ipv6 2A02:200:2::/48 any
deny ipv6 any any
!
ipv6 access-list ACL6-SNMP
permit ipv6 2A02:200:1:12::/64 any
deny ipv6 any any
!
control-plane
!
!
banner motd ^C

____ ___ ____ _____ ___ ___ ____

| \ / _ \| _ \(___ ) _ \ / _ \| _ \
| | | | |_| | | | |/ __/ |_| | |_| | | | |
|_|_|_|\___/|_| |_(_____)___/ \___/|_| |_|
N E T W O R K S

Device: $(hostname)
Contact: [email protected]
phone +41 43 5000 474

^C
!
line con 0
stopbits 1
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
line vty 5 15
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
!
scheduler allocate 20000 1000
sntp server 80.254.79.157
!
end

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#ip nat so
RTR_Alex_Test(config)#ip nat source list
% Incomplete command.

RTR_Alex_Test(config)#ip nat source?

source

RTR_Alex_Test(config)#ip nat source ?

list Specify access list describing local addresses
route-map Specify route-map
static Specify static local->global mapping

RTR_Alex_Test(config)#ip nat source

% Incomplete command.

RTR_Alex_Test(config)#ip nat source list

% Incomplete command.

RTR_Alex_Test(config)#ip nat source list?

list

RTR_Alex_Test(config)#ip nat source list ?

<1-2699> Access list number for local addresses
WORD Access list name for local addresses

RTR_Alex_Test(config)#ip nat source list

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#ip nat s
RTR_Alex_Test(config)#ip nat so
RTR_Alex_Test(config)#ip nat source list ACL-UniFiStaging ?
interface Specify interface for global address
pool Name pool of global addresses
RTR_Alex_Test(config)#ip nat source list ACL-UniFiStaging inter
RTR_Alex_Test(config)#ip nat source list ACL-UniFiStaging interface ?
Async Async interface
Auto-Template Auto-Template interface
BDI Bridge-Domain interface
BVI Bridge-Group Virtual Interface
CDMA-Ix CDMA Ix interface
CTunnel CTunnel interface
Dialer Dialer interface
Embedded-Service-Engine cisco embedded service engine module
GigabitEthernet GigabitEthernet IEEE 802.3z
LongReachEthernet Long-Reach Ethernet interface
Loopback Loopback interface
Lspvif LSP virtual interface
MFR Multilink Frame Relay bundle interface
Multilink Multilink-group interface
Null Null interface
Port-channel Ethernet Channel of interfaces
Tunnel Tunnel interface
Vif PGM Multicast Host interface
Virtual-PPP Virtual PPP interface
Virtual-Template Virtual Template interface
Virtual-TokenRing Virtual TokenRing
vmi Virtual Multipoint Interface

RTR_Alex_Test(config)#$ce list ACL-UniFiStaging interface gig0/0 over

RTR_Alex_Test(config)#$ce list ACL-UniFiStaging interface gig0/0 overload
RTR_Alex_Test(config)#exit
RTR_Alex_Test#sh run
Building configuration...

Current configuration : 4714 bytes

!
! Last configuration change at 13:45:13 UTC Fri Jan 20 2023 by aneukom
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
vrf definition PASSPOINT
 rd 24889:12
!
address-family ipv4
exit-address-family
!
logging buffered 65536 informational
!
aaa new-model
!
!
aaa group server radius GR-RADIUS-MGMT
server name RS-RADIUS-MGMT
!
aaa authentication login default group GR-RADIUS-MGMT local
aaa authorization console
aaa authorization exec default group GR-RADIUS-MGMT local
aaa accounting exec default start-stop group GR-RADIUS-MGMT
!
!
!
!
!
aaa session-id common
ethernet lmi ce
!
!
!
!
!
!
no ip source-route
!
!
!
ip dhcp excluded-address 192.168.66.0 192.168.66.10
ip dhcp excluded-address 192.168.66.250 192.168.66.255
!
ip dhcp pool unifistaging
network 192.168.66.0 255.255.255.0
default-router 192.168.66.1
dns-server 8.8.8.8 8.8.4.4
!
!
!
no ip domain lookup
ip domain name monzoon.net
ip cef
ipv6 unicast-routing
ipv6 cef
!
multilink bundle-name authenticated
!
!
!
license udi pid CISCO1921/K9 sn FCZ194693SN
!
!
username monzoon_emerg privilege 15 secret 5 $1$a3Zk$ir.jd9t7RQcaaX8.n4DHq.
!
redundancy
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface Tunnel1
description *** Tunnel: MONZOON ***
vrf forwarding MONZOON
ip address 10.108.20.2 255.255.255.252
ip tcp adjust-mss 1400
ipv6 address 2A02:200:13B1::2/64
tunnel source GigabitEthernet0/0
tunnel destination 80.254.79.47
!
interface Tunnel12
description *** PASSPOINT ***
vrf forwarding PASSPOINT
ip address 10.108.20.126 255.255.255.252
ip tcp adjust-mss 1400
tunnel source GigabitEthernet0/0
tunnel destination 80.254.64.42
!
interface Embedded-Service-Engine0/0
no ip address
shutdown
!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1 native
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
!
interface GigabitEthernet0/1.2
description *** MONZOON ***
encapsulation dot1Q 2
vrf forwarding MONZOON
ip address 10.211.0.1 255.255.0.0 secondary
ip address 10.108.20.130 255.255.255.252
 ip helper-address 80.254.79.46
!
interface GigabitEthernet0/1.12
description *** PASSPOINT ***
encapsulation dot1Q 12
vrf forwarding PASSPOINT
ip address 10.187.0.1 255.255.0.0 secondary
ip address 10.108.20.138 255.255.255.252
ip helper-address 80.254.64.41
!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66
ip address 192.168.66.1 255.255.255.0
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat source list ACL-UniFiStaging interface GigabitEthernet0/0 overload
ip route 0.0.0.0 0.0.0.0 80.254.71.97
ip route vrf MONZOON 0.0.0.0 0.0.0.0 Tunnel1
ip route vrf PASSPOINT 0.0.0.0 0.0.0.0 Tunnel12
ip ssh version 2
!
ip access-list standard ACL4-SNMP
permit 80.254.77.0 0.0.0.255
deny any
!
ip access-list extended ACL-UniFiStaging
permit ip 192.168.66.0 0.0.0.255 any
ip access-list extended ACL4-MGMT
permit ip 80.254.77.0 0.0.0.255 any
permit ip 10.108.20.0 0.0.3.255 any
deny ip any any
!
logging host 80.254.77.38
!
!
snmp-server community monzoon RO ipv6 ACL6-SNMP ACL4-SNMP
!
radius server RS-RADIUS-MGMT
address ipv4 80.254.77.37 auth-port 1812 acct-port 1813
timeout 5
retransmit 1
key 7 051351580E6A6F21385712163C341C01221E0C0A677132
!
!
!
ipv6 access-list ACL6-MGMT
permit ipv6 2A02:200:1:12::/64 any
permit ipv6 2A02:200:2::/48 any
deny ipv6 any any
!
ipv6 access-list ACL6-SNMP
permit ipv6 2A02:200:1:12::/64 any
deny ipv6 any any
!
control-plane
!
!
banner motd ^C

____ ___ ____ _____ ___ ___ ____

| \ / _ \| _ \(___ ) _ \ / _ \| _ \
| | | | |_| | | | |/ __/ |_| | |_| | | | |
|_|_|_|\___/|_| |_(_____)___/ \___/|_| |_|
N E T W O R K S

Device: $(hostname)
Contact: [email protected]
phone +41 43 5000 474

^C
!
line con 0
stopbits 1
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
line vty 5 15
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
!
scheduler allocate 20000 1000
sntp server 80.254.79.157
!
end

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#int gig 0/1.66
RTR_Alex_Test(config-subif)#do sh run
Building configuration...

Current configuration : 4714 bytes

!
! Last configuration change at 13:45:13 UTC Fri Jan 20 2023 by aneukom
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!

RTR_Alex_Test(config-subif)#do sh run int gig0/1.66

Building configuration...

Current configuration : 128 bytes

!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66
ip address 192.168.66.1 255.255.255.0
end

RTR_Alex_Test(config-subif)#int gig0/1.66
RTR_Alex_Test(config-subif)#ip nat ins
RTR_Alex_Test(config-subif)#ip nat inside
RTR_Alex_Test(config-subif)#int gig0/0
RTR_Alex_Test(config-if)#do sh run int gig0/0
Building configuration...

Current configuration : 103 bytes

!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
end

RTR_Alex_Test(config-if)#ip nat out

RTR_Alex_Test(config-if)#ip nat outside
RTR_Alex_Test(config-if)#exit
RTR_Alex_Test(config)#exit
RTR_Alex_Test#

| \ / _ \| _ \(___ ) _ \ / _ \| _ \
| | | | |_| | | | |/ __/ |_| | |_| | | | |
|_|_|_|\___/|_| |_(_____)___/ \___/|_| |_|
N E T W O R K S

Device: $(hostname)
Contact: [email protected]
phone +41 43 5000 474
^C
!
line con 0
stopbits 1
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
line vty 5 15
access-class ACL4-MGMT in vrf-also
ipv6 access-class ACL6-MGMT in
transport input ssh
!
scheduler allocate 20000 1000
sntp server 80.254.79.157
!
end

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#int gig 0/1.66
RTR_Alex_Test(config-subif)#do sh run
Building configuration...

Current configuration : 4714 bytes

!
! Last configuration change at 13:45:13 UTC Fri Jan 20 2023 by aneukom
!
version 15.5
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname RTR_Alex_Test
!
boot-start-marker
boot-end-marker
!
!
vrf definition MONZOON
rd 24889:2
!
address-family ipv4
exit-address-family
!

RTR_Alex_Test(config-subif)#do sh run int gig0/1.66

Building configuration...
Current configuration : 128 bytes
!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66
ip address 192.168.66.1 255.255.255.0
end

RTR_Alex_Test(config-subif)#int gig0/1.66
RTR_Alex_Test(config-subif)#ip nat ins
RTR_Alex_Test(config-subif)#ip nat inside
RTR_Alex_Test(config-subif)#int gig0/0
RTR_Alex_Test(config-if)#do sh run int gig0/0
Building configuration...

Current configuration : 103 bytes

!
interface GigabitEthernet0/0
ip address 80.254.71.122 255.255.255.224
duplex auto
speed auto
end

RTR_Alex_Test(config-if)#ip nat out

RTR_Alex_Test(config-if)#ip nat outside
RTR_Alex_Test(config-if)#exit
RTR_Alex_Test(config)#exit
RTR_Alex_Test#
RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#exit
RTR_Alex_Test#sh int de
RTR_Alex_Test#sh int description
Interface Status Protocol Description
Em0/0 admin down down
Gi0/0 up up
Gi0/1 down down
Gi0/1.1 down down *** Management ***
Gi0/1.2 down down *** MONZOON ***
Gi0/1.12 down down *** PASSPOINT ***
Gi0/1.66 down down ***vlan66***
NV0 up up
Tu1 up up *** Tunnel: MONZOON ***
Tu12 up up *** PASSPOINT ***
RTR_Alex_Test#sh run int gig0/1.1
Building configuration...

Current configuration : 162 bytes

!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1 native
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
end

RTR_Alex_Test#conf t
Enter configuration commands, one per line. End with CNTL/Z.
RTR_Alex_Test(config)#int gig0/1.66
RTR_Alex_Test(config-subif)#enca
RTR_Alex_Test(config-subif)#encapsulation dot1q 66 native
RTR_Alex_Test(config-subif)#exit
RTR_Alex_Test(config)#end
RTR_Alex_Test#sh run int gig0/1.66
Building configuration...

Current configuration : 176 bytes

!
interface GigabitEthernet0/1.66
description ***vlan66***
encapsulation dot1Q 66 native
ip address 192.168.66.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
end

RTR_Alex_Test#sh run int gig0/1.1

Building configuration...

Current configuration : 155 bytes

!
interface GigabitEthernet0/1.1
description *** Management ***
encapsulation dot1Q 1
vrf forwarding MONZOON
ip address 10.108.21.1 255.255.255.0
end

RTR_Alex_Test#