! show version ! ! Cisco Nexus Operating System (NX-OS) Software ! TAC support: http://www.cisco.com/tac ! Documents: http://www.cisco.com/en/US/products/ps9372/tsd_products_support_series_home.html ! Copyright (c) 2002-2014, Cisco Systems, Inc. All rights reserved. ! The copyrights to certain works contained herein are owned by ! other third parties and are used and distributed under license. ! Some parts of this software are covered under the GNU Public ! License. A copy of the license is available at ! http://www.gnu.org/licenses/gpl.html. ! ! Software ! BIOS: version 1.2.0 ! loader: version N/A ! kickstart: version 6.0(2)U2(9Z) ! system: version 6.0(2)U2(9Z) ! Power Sequencer Firmware: ! Module 1: version v4.4 ! BIOS compile time: 08/25/2011 ! kickstart image file is: bootflash:///n3000-uk9-kickstart.6.0.2.U2.9z.bin ! kickstart compile time: 5/15/2014 22:00:00 [05/15/2014 23:08:36] ! system image file is: bootflash:///n3000-uk9.6.0.2.U2.9z.bin ! system compile time: 5/15/2014 22:00:00 [05/16/2014 00:49:05] ! ! ! Hardware ! cisco Nexus 3048 Chassis ("48x1GE + 4x10G Supervisor") ! Intel(R) Celeron(R) CPU P450 with 3785072 kB of memory. ! Processor Board ID FOC17052P27 ! ! Device name: SV7-CB44-MR-N3048-A-44U ! bootflash: 2007040 kB ! ! show inventory ! ! NAME: "Chassis", DESCR: "Nexus 3048 Chassis" ! PID: N3K-C3048TP-1GE , VID: V01 , SN: FOC1705R1HC ! ! NAME: "Module 1", DESCR: "48x1GE + 4x10G Supervisor" ! PID: N3K-C3048TP-1GE , VID: V01 , SN: FOC17052P27 ! ! NAME: "Fan 1", DESCR: "Chassis fan module" ! PID: N3K-C3048-FAN , VID: N/A , SN: N/A ! ! NAME: "Power supply 1", DESCR: "AC power supply" ! PID: N2200-PAC-400W , VID: V04 , SN: DTN1652P2KW ! ! NAME: "Power supply 2", DESCR: "AC power supply" ! PID: N2200-PAC-400W , VID: V05 , SN: LIT19280RE3 ! ! ! show running-config !Command: show running-config version 6.0(2)U2(9Z) hostname SV7-CB44-MR-N3048-A-44U feature privilege no feature telnet feature tacacs+ feature interface-vlan feature lacp feature dhcp feature lldp username admin password 5 $5$rUk92qMT$Wvn7G9m1Dc87PFX8/7EovOTcLeBX775Hzn/S73bShp role network-admin enable secret 5 $1$6e5551ac$fe8d53af974ab636 no ip domain-lookup ip domain-name SV7-CB44-MR-N3048-A-44U ip tacacs source-interface mgmt0 tacacs-server host 199.180.100.29 key 7 "uwoxeamy123" tacacs-server host 64.71.150.196 key 7 "uwoxeamy123" aaa group server tacacs+ peg server 199.180.100.29 server 64.71.150.196 source-interface mgmt0 crypto key param rsa label COLO-QTS-AJ18-n3048-45U-luyuheng.COLO-QTS-AJ18-n3048-45U-luyuheng modulus 1024 logging event link-status default service unsupported-transceiver ip access-list acl4intEthernet1/3 10 permit udp any any eq bootps 20 permit udp any any eq bootpc 30 deny tcp any any eq 3372 40 deny udp any any eq 0 50 deny udp any any eq 80 210 deny tcp any any eq smtp 220 deny tcp any eq smtp any 230 deny tcp any any eq 465 240 deny tcp any eq 465 any 250 deny tcp any any eq 587 260 deny tcp any eq 587 any 420 deny tcp any any eq 1723 430 deny tcp any eq 1723 any 440 deny udp any any eq isakmp 450 deny udp any eq isakmp any 460 deny udp any any eq non500-isakmp 470 deny udp any eq non500-isakmp any 480 permit ip 104.233.216.11/32 any 490 permit ip 104.233.216.12/32 any 500 permit ip 104.233.216.13/32 any 510 permit ip 104.233.216.14/32 any 520 permit ip 104.233.216.15/32 any 530 permit ip 104.233.195.112/28 any ip access-list acl4internal-access 10 permit ip 10.255.0.0/16 any 20 deny ip 64.71.150.215/32 any 30 deny ip 64.71.150.216/32 any 40 deny ip 64.71.150.217/32 any 50 permit ip 64.71.150.128/25 any 60 permit ip 198.47.96.0/24 any 70 deny ip 199.180.100.11/32 any 80 deny ip 199.180.100.12/32 any 90 deny ip 199.180.100.13/32 any 100 permit ip 199.180.100.0/27 any 110 permit ip 199.180.101.96/28 any 120 permit ip 137.175.10.64/27 any 130 permit ip 137.175.96.0/24 any 140 permit ip 142.4.110.64/27 any 150 permit ip 107.148.208.208/28 any 160 permit ip 198.2.211.160/27 any 170 permit ip 198.2.215.208/28 any 180 permit ip 137.175.43.128/26 any 190 permit udp 116.58.208.30/32 any eq snmp 200 permit udp 137.175.13.76/32 any eq snmp 210 permit ip 142.4.100.48/28 any ip access-list acl4outintEthernet1/3 10 deny tcp any any eq 135 20 deny tcp any any eq 137 30 deny tcp any any eq 138 40 deny tcp any any eq 139 50 deny tcp any any eq 445 810 permit ip any any ip access-list acl4snmp 10 permit ip 104.192.85.96/28 any 20 permit ip 10.255.0.0/16 any 30 permit ip 64.71.150.128/25 any 40 permit ip 198.47.96.0/24 any 50 permit ip 199.180.100.0/27 any 60 permit ip 199.180.101.96/28 any 70 permit ip 137.175.10.64/27 any 80 permit ip 137.175.96.0/24 any 90 permit ip 142.4.110.64/27 any 100 permit ip 107.121.208.208/28 any 110 permit ip 198.2.211.160/27 any 120 permit ip 198.2.215.208/28 any 130 permit ip 199.180.100.112/29 any 140 permit ip 192.74.251.0/24 any ip access-list acl4speed 10 permit ip any any ip access-list copp-system-acl-eigrp 10 permit eigrp any 224.0.0.10/32 ipv6 access-list copp-system-acl-eigrp6 10 permit 88 any ff02::000a/128 ip access-list copp-system-acl-icmp 10 permit icmp any any ip access-list copp-system-acl-igmp 10 permit igmp any any ip access-list copp-system-acl-ntp 10 permit udp any any eq ntp 20 permit udp any eq ntp any ip access-list copp-system-acl-pimreg 10 permit pim any any ip access-list copp-system-acl-ping 10 permit icmp any any echo 20 permit icmp any any echo-reply ip access-list copp-system-acl-routingproto1 10 permit tcp any gt 1024 any eq bgp 20 permit tcp any eq bgp any gt 1024 30 permit udp any 224.0.0.0/24 eq rip 40 permit tcp any gt 1024 any eq 639 50 permit tcp any eq 639 any gt 1024 70 permit ospf any any 80 permit ospf any 224.0.0.5/32 90 permit ospf any 224.0.0.6/32 ip access-list copp-system-acl-routingproto2 10 permit udp any 224.0.0.0/24 eq 1985 20 permit 112 any 224.0.0.0/24 ip access-list copp-system-acl-snmp 10 permit udp any any eq snmp 20 permit udp any any eq snmptrap ip access-list copp-system-acl-ssh 10 permit tcp any any eq 22 20 permit tcp any eq 22 any ip access-list copp-system-acl-stftp 10 permit udp any any eq tftp 20 permit udp any any eq 1758 30 permit udp any eq tftp any 40 permit udp any eq 1758 any 50 permit tcp any any eq 115 60 permit tcp any eq 115 any ip access-list copp-system-acl-tacacsradius 10 permit tcp any any eq tacacs 20 permit tcp any eq tacacs any 30 permit udp any any eq 1812 40 permit udp any any eq 1813 50 permit udp any any eq 1645 60 permit udp any any eq 1646 70 permit udp any eq 1812 any 80 permit udp any eq 1813 any 90 permit udp any eq 1645 any 100 permit udp any eq 1646 any ip access-list copp-system-acl-telnet 10 permit tcp any any eq telnet 20 permit tcp any any eq 107 30 permit tcp any eq telnet any 40 permit tcp any eq 107 any ipv6 access-list copp-system-acl-v6routingProto2 10 permit udp any ff02::0066/128 eq 2029 20 permit udp any ff02::00fb/128 eq 5353 30 permit 112 any ff02::0012/128 ipv6 access-list copp-system-acl-v6routingproto1 10 permit 89 any ff02::0005/128 20 permit 89 any ff02::0006/128 30 permit udp any ff02::0009/128 eq 521 ip access-list copp-system-dhcp-relay 10 permit udp any eq bootps any eq bootps class-map type control-plane match-any copp-icmp match access-group name copp-system-acl-icmp class-map type control-plane match-any copp-ntp match access-group name copp-system-acl-ntp class-map type control-plane match-any copp-s class-map type control-plane match-any copp-s-arp class-map type control-plane match-any copp-s-bfd class-map type control-plane match-any copp-s-bpdu class-map type control-plane match-any copp-s-dai class-map type control-plane match-any copp-s-default class-map type control-plane match-any copp-s-dhcpreq class-map type control-plane match-any copp-s-dhcpresp match access-group name copp-system-dhcp-relay class-map type control-plane match-any copp-s-dpss class-map type control-plane match-any copp-s-eigrp match access-group name copp-system-acl-eigrp match access-group name copp-system-acl-eigrp6 class-map type control-plane match-any copp-s-glean class-map type control-plane match-any copp-s-igmp match access-group name copp-system-acl-igmp class-map type control-plane match-any copp-s-ipmcmiss class-map type control-plane match-any copp-s-l2switched class-map type control-plane match-any copp-s-l3destmiss class-map type control-plane match-any copp-s-l3mtufai class-map type control-plane match-any copp-s-l3mtufail class-map type control-plane match-any copp-s-l3slowpath class-map type control-plane match-any copp-s-mpls class-map type control-plane match-any copp-s-pimautorp class-map type control-plane match-any copp-s-pimreg match access-group name copp-system-acl-pimreg class-map type control-plane match-any copp-s-ping match access-group name copp-system-acl-ping class-map type control-plane match-any copp-s-ptp class-map type control-plane match-any copp-s-routingProto1 match access-group name copp-system-acl-routingproto1 match access-group name copp-system-acl-v6routingproto1 class-map type control-plane match-any copp-s-routingProto2 match access-group name copp-system-acl-routingproto2 class-map type control-plane match-any copp-s-selfIp class-map type control-plane match-any copp-s-ttl1 class-map type control-plane match-any copp-s-v6routingProto2 match access-group name copp-system-acl-v6routingProto2 class-map type control-plane match-any copp-s-vxlan class-map type control-plane match-any copp-snmp match access-group name copp-system-acl-snmp class-map type control-plane match-any copp-ssh match access-group name copp-system-acl-ssh class-map type control-plane match-any copp-stftp match access-group name copp-system-acl-stftp class-map type control-plane match-any copp-tacacsradius match access-group name copp-system-acl-tacacsradius class-map type control-plane match-any copp-telnet match access-group name copp-system-acl-telnet policy-map type control-plane copp-system-policy class copp-s-selfIp police pps 500 class copp-s-default police pps 400 class copp-s-l2switched police pps 200 class copp-s-ping police pps 100 class copp-s-l3destmiss police pps 100 class copp-s-glean police pps 500 class copp-s-l3mtufail police pps 100 class copp-s-ttl1 police pps 100 class copp-s-ipmcmiss police pps 400 class copp-s-l3slowpath police pps 100 class copp-s-dhcpreq police pps 300 class copp-s-dhcpresp police pps 300 class copp-s-dai police pps 300 class copp-s-igmp police pps 400 class copp-s-routingProto2 police pps 1300 class copp-s-v6routingProto2 police pps 1300 class copp-s-eigrp police pps 200 class copp-s-pimreg police pps 200 class copp-s-pimautorp police pps 200 class copp-s-routingProto1 police pps 1000 class copp-s-arp police pps 200 class copp-s-ptp police pps 1000 class copp-s-vxlan police pps 1000 class copp-s-bfd police pps 350 class copp-s-bpdu police pps 12000 class copp-s-dpss police pps 1000 class copp-icmp police pps 200 class copp-telnet police pps 500 class copp-ssh police pps 500 class copp-snmp police pps 500 class copp-ntp police pps 100 class copp-tacacsradius police pps 400 class copp-stftp police pps 400 class copp-s-mpls police pps 100 control-plane service-policy input copp-system-policy hardware profile tcam region racl 256 hardware profile tcam region ifacl 640 snmp-server user admin network-admin auth md5 0x568fa4063763145bc124c0c4ed6d098f priv 0x568fa4063763145bc124c0c4ed6d098f localizedkey rmon event 1 log trap public description FATAL(1) owner PMON@FATAL rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL rmon event 3 log trap public description ERROR(3) owner PMON@ERROR rmon event 4 log trap public description WARNING(4) owner PMON@WARNING rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO snmp-server community raksmartv2 group network-operator ntp server 64.71.150.196 ntp server 199.180.100.29 aaa authentication login default group peg aaa authentication login console none aaa authorization config-commands default group peg local aaa authorization commands default group peg local aaa accounting default group peg vrf context management ip route 0.0.0.0/0 10.0.48.254 ip route 0.0.0.0/0 10.0.98.254 ip route 0.0.0.0/0 10.0.128.254 vlan 1,666,999 spanning-tree port type edge default service dhcp ip dhcp relay interface Vlan1 interface Vlan666 no shutdown ip address 10.0.48.100/24 interface port-channel30 description sv6-ah22-mr-po30 switchport mode trunk switchport trunk allowed vlan 666,999 no negotiate auto interface Ethernet1/1 switchport access vlan 666 interface Ethernet1/2 switchport access vlan 666 interface Ethernet1/3 switchport access vlan 666 interface Ethernet1/4 switchport access vlan 666 interface Ethernet1/5 switchport access vlan 666 interface Ethernet1/6 switchport access vlan 666 interface Ethernet1/7 switchport access vlan 666 interface Ethernet1/8 switchport access vlan 666 interface Ethernet1/9 switchport access vlan 666 interface Ethernet1/10 switchport access vlan 666 interface Ethernet1/11 switchport access vlan 666 interface Ethernet1/12 switchport access vlan 666 interface Ethernet1/13 switchport access vlan 666 interface Ethernet1/14 switchport access vlan 666 interface Ethernet1/15 switchport access vlan 666 interface Ethernet1/16 switchport access vlan 666 interface Ethernet1/17 switchport access vlan 666 interface Ethernet1/18 switchport access vlan 666 interface Ethernet1/19 switchport access vlan 666 interface Ethernet1/20 switchport access vlan 666 interface Ethernet1/21 switchport access vlan 666 interface Ethernet1/22 switchport access vlan 666 interface Ethernet1/23 switchport access vlan 666 interface Ethernet1/24 switchport access vlan 666 interface Ethernet1/25 switchport access vlan 666 interface Ethernet1/26 switchport access vlan 666 interface Ethernet1/27 switchport access vlan 666 interface Ethernet1/28 switchport access vlan 666 interface Ethernet1/29 switchport access vlan 666 interface Ethernet1/30 switchport access vlan 666 interface Ethernet1/31 switchport access vlan 666 interface Ethernet1/32 switchport access vlan 666 interface Ethernet1/33 switchport access vlan 666 interface Ethernet1/34 switchport access vlan 666 interface Ethernet1/35 switchport access vlan 666 interface Ethernet1/36 switchport access vlan 666 interface Ethernet1/37 switchport access vlan 666 interface Ethernet1/38 switchport access vlan 666 interface Ethernet1/39 switchport access vlan 666 interface Ethernet1/40 switchport access vlan 666 interface Ethernet1/41 switchport access vlan 666 interface Ethernet1/42 switchport access vlan 666 interface Ethernet1/43 switchport access vlan 666 interface Ethernet1/44 switchport access vlan 666 interface Ethernet1/45 switchport access vlan 666 interface Ethernet1/46 description wifi_port switchport access vlan 999 interface Ethernet1/47 switchport access vlan 666 interface Ethernet1/48 switchport access vlan 666 interface Ethernet1/49 description SV7-CORE-9010-A@te0/1/0/24 shutdown interface Ethernet1/50 description SV7-CORE-9010-A@te0/2/0/24 shutdown interface Ethernet1/51 description sv6-ah22-mr-e1/51 switchport mode trunk switchport trunk allowed vlan 666,999 channel-group 30 mode active interface Ethernet1/52 description sv6-ah22-mr-e1/52 switchport mode trunk switchport trunk allowed vlan 666,999 channel-group 30 mode active interface mgmt0 vrf member management ip address 10.0.48.250/24 clock timezone PST -8 0 line console exec-timeout 10 line vty exec-timeout 10 access-class acl4internal-access in boot kickstart bootflash:/n3000-uk9-kickstart.6.0.2.U2.9z.bin boot system bootflash:/n3000-uk9.6.0.2.U2.9z.bin ip access-list match-local-traffic no logging monitor