|
|
Table Of Contents
Sample DER and AR Switch Configurations for the 10-GE Symmetric Topology
Sample DER and AR Switch Configurations for the 10-GE Symmetric Topology
This appendix presents sample distribution edge router (DER) and aggregation router (AR) switch configurations for the symmetric 10-GE topology described in Configuration 1: 10-GE Layer 3 Symmetric Ring. The following configurations are presented:
Note
Refer to Configuring the 10-GE Symmetric Topology.
Configuration for DER
upgrade fpd autoversion 12.2service timestamps debug datetime msec localtimeservice timestamps log datetime msec localtimeno service password-encryptionservice counters max age 10!hostname DER!boot system disk1:s72033-adventerprisek9_wan-mz.122-18.SXE1.binlogging snmp-authfailenable password cisco123!no aaa new-modelclock timezone PST -8clock summer-time PDT recurringip subnet-zero!!!ip cef load-sharing algorithm originalip multicast-routingip igmp ssm-map enableip domain multicast conronado.netno ip domain-lookupip domain-name coronado.netip name-server 192.168.10.101ip name-server 192.168.11.101ipv6 mfib hardware-switching replication-mode ingressvtp mode transparentmls ip cef load-sharing fullmls ip multicast flow-stat-timer 9no mls flow ipno mls flow ipv6mls qos map dscp-cos 36 to 2mls qos map dscp-cos 38 to 1mls qosno mls acl tcam share-globalmls cef error action freezeno scripting tcl initno scripting tcl encdir!!!!!!!!!!redundancymode ssomain-cpuauto-sync startup-configauto-sync running-configauto-sync standard!spanning-tree mode rapid-pvstspanning-tree portfast bpduguard defaultno spanning-tree optimize bpdu transmissionspanning-tree extend system-idno spanning-tree vlan 800,824,900,924spanning-tree vlan 90 priority 24576diagnostic cns publish cisco.cns.device.diag_resultsdiagnostic cns subscribe cisco.cns.device.diag_commands!vlan internal allocation policy ascendingvlan access-log ratelimit 2000!vlan 10name VLAN_10_Management!vlan 11name VLAN_11_Management!vlan 60name VLAN_60_Unicast_Video!vlan 70name VLAN_70_Multicast_Video!vlan 80name VLAN_80_VoIP!vlan 90name VLAN_90_HSD!vlan 800name VLAN_800_VoIP_to/from_AR1!vlan 824name VLAN_824_VoIP_to/from_AR3!vlan 900name VLAN_900_Video_to/from_AR1!vlan 924name VLAN_924_Video_to/from_AR3!class-map match-all class_VoIPmatch access-group name acl_VoIPclass-map match-all class_video_VoD_highmatch access-group name acl_video_VoD_highclass-map match-all class_video_VoD_lowmatch access-group name acl_video_VoD_lowclass-map match-all class_video_broadcastmatch access-group name acl_video_broadcastclass-map match-all class_VoD_signalingmatch access-group name acl_VoD_signalingclass-map match-all class_HSDmatch access-group name acl_HSD!!policy-map setDSCPdescription Mark DSCP values for ingress trafficclass class_VoIPset dscp efclass class_HSDset dscp defaultclass class_VoD_signalingset dscp cs3class class_video_broadcastset dscp af41class class_video_VoD_highset dscp af42class class_video_VoD_lowset dscp af43!!!interface GigabitEthernet1/1description High speed data ingress/egress portswitchportswitchport access vlan 90switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet1/2no ip addressshutdown!interface GigabitEthernet1/3no ip addressshutdown!! <------ interfaces GigabitEthernet1/4 - 14 omitted ------->!interface GigabitEthernet1/15no ip addressshutdown!interface GigabitEthernet1/16no ip addressshutdown!interface GigabitEthernet2/1description VoIP traffic ingress/egressswitchportswitchport access vlan 80switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/2no ip addressshutdown!interface GigabitEthernet2/3no ip addressshutdown!! <------ interfaces GigabitEthernet2/4 - 6 omitted ------->!interface GigabitEthernet2/7no ip addressshutdown!interface GigabitEthernet2/8no ip addressshutdown!interface GigabitEthernet2/9description Broadcast video source (multicast 232.1.1.1 - 232.1.1.10)switchportswitchport access vlan 70switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/10no ip addressshutdown!interface GigabitEthernet2/11no ip addressshutdown!! <------ interfaces GigabitEthernet2/12 - 14 omitted ------->!interface GigabitEthernet2/15no ip addressshutdown!interface GigabitEthernet2/16no ip addressshutdown!interface GigabitEthernet2/17description Management port from Kasenna LR Server (Eth0)switchportswitchport access vlan 10switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/18description Kasenna VoD Pump Managementswitchportswitchport access vlan 10switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/19description Unicast video from Kasenna VoD Pump (HPN0)switchportswitchport access vlan 60switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/20description Unicast video from Kasenna VoD Pump (HPN1)switchportswitchport access vlan 60switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet2/21no ip addressshutdown!interface GigabitEthernet2/22no ip addressshutdown!! <------ interfaces GigabitEthernet2/23 - 45 omitted ------->!interface GigabitEthernet2/46no ip addressshutdown!interface GigabitEthernet2/47no ip addressshutdown!interface GigabitEthernet2/48description Backup DNS serverswitchportswitchport access vlan 11switchport mode accessno ip addressload-interval 30no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet5/1no ip addressshutdown!interface GigabitEthernet5/2description Primary DNS/DHCP/NTP/TFTP/Syslog serversswitchportswitchport access vlan 10switchport mode accessno ip addressload-interval 30media-type rj45no cdp enablespanning-tree portfastspanning-tree bpduguard enableservice-policy input setDSCP!interface GigabitEthernet6/1no ip addressshutdown!interface GigabitEthernet6/2no ip addressshutdown!interface TenGigabitEthernet7/1description Transport to/from AR1 (TenGig1/1)switchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,800,900switchport mode trunkdampeningno ip addressload-interval 30carrier-delay msec 0wrr-queue bandwidth 64 255 0 0 0 0 0wrr-queue queue-limit 40 50 0 0 0 0 0wrr-queue threshold 1 100 100 100 100 100 100 100 100wrr-queue threshold 2 45 85 100 100 100 100 100 100wrr-queue random-detect min-threshold 1 75 100 100 100 100 100 100 100wrr-queue random-detect max-threshold 1 100 100 100 100 100 100 100 100no wrr-queue random-detect 2wrr-queue cos-map 2 1 1wrr-queue cos-map 2 2 2wrr-queue cos-map 2 3 3 4 6 7mls qos trust dscp!interface TenGigabitEthernet7/2no ip addressshutdown!interface TenGigabitEthernet7/3description Transport to/from AR3 (TenGig1/50)switchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,824,924switchport mode trunkdampeningno ip addressload-interval 30carrier-delay msec 0wrr-queue bandwidth 64 255 0 0 0 0 0wrr-queue queue-limit 40 50 0 0 0 0 0wrr-queue threshold 1 100 100 100 100 100 100 100 100wrr-queue threshold 2 45 85 100 100 100 100 100 100wrr-queue random-detect min-threshold 1 75 100 100 100 100 100 100 100wrr-queue random-detect max-threshold 1 100 100 100 100 100 100 100 100no wrr-queue random-detect 2wrr-queue cos-map 2 1 1wrr-queue cos-map 2 2 2wrr-queue cos-map 2 3 3 4 6 7mls qos trust dscp!interface TenGigabitEthernet7/4no ip addressshutdown!interface Vlan1no ip addressshutdown!interface Vlan10description Management VLAN (VoD signaling, Primary DNS, DHCP, etc)ip address 192.168.10.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan11description Management VLAN (Backup DNS)ip address 192.168.11.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan60description VoD server VLAN (Unicast Video)ip address 192.168.60.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan70description Broadcast video source VLAN (Multicast Video)ip address 192.168.70.1 255.255.255.0no ip redirectsno ip unreachablesip pim sparse-modeload-interval 30!interface Vlan80description VoIP gateway VLANip address 192.168.80.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan800description VoIP transport to/from AR1ip address 192.168.252.1 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan824description VoIP transport to/from AR3ip address 192.168.252.25 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan900description Video transport VLAN to/from AR1ip address 192.168.254.1 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan924description Video transport VLAN to/from AR3ip address 192.168.254.25 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!router ospf 100router-id 1.1.1.1log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan10passive-interface Vlan11passive-interface Vlan60passive-interface Vlan70network 192.168.10.0 0.0.1.255 area 0network 192.168.60.0 0.0.0.255 area 0network 192.168.70.0 0.0.0.255 area 0network 192.168.254.1 0.0.0.0 area 0network 192.168.254.25 0.0.0.0 area 0!router ospf 101router-id 1.1.1.2log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan80network 192.168.80.0 0.0.0.255 area 0network 192.168.252.1 0.0.0.0 area 0network 192.168.252.25 0.0.0.0 area 0!ip classless!no ip http serverip pim ssm default!ip access-list extended acl_HSDremark Identify HSD trafficpermit ip 192.168.90.0 0.0.0.255 anyip access-list extended acl_VoD_signalingremark Identify VoD signaling trafficpermit ip host 192.168.10.102 anypermit ip host 192.168.10.103 anyip access-list extended acl_VoIPremark Identify VoIP trafficpermit ip 192.168.80.0 0.0.0.255 anyip access-list extended acl_video_VoD_highremark Identify high priority VoD trafficpermit udp 192.168.60.0 0.0.0.255 192.168.110.0 0.0.0.255 range 5000 9000permit udp 192.168.60.0 0.0.0.255 192.168.120.0 0.0.0.255 range 5000 9000permit udp 192.168.60.0 0.0.0.255 192.168.130.0 0.0.0.255 range 5000 9000ip access-list extended acl_video_VoD_lowremark Identify low priority VoD trafficpermit udp 192.168.60.0 0.0.0.255 192.168.110.0 0.0.0.255 range 1000 4999permit udp 192.168.60.0 0.0.0.255 192.168.120.0 0.0.0.255 range 1000 4999permit udp 192.168.60.0 0.0.0.255 192.168.130.0 0.0.0.255 range 1000 4999ip access-list extended acl_video_broadcastremark Identify broadcast video traffic (multicast)permit ip 192.168.70.0 0.0.0.255 232.0.0.0 0.255.255.255!logging event link-status defaultlogging trap debugginglogging source-interface Vlan10logging 192.168.10.101!!!control-plane!!!dial-peer cor custom!!!!line con 0exec-timeout 0 0password cisco123logging synchronousloginline vty 0 4exec-timeout 0 0password cisco123logging synchronouslogin!!ntp clock-period 17179953ntp update-calendarntp server 192.168.10.102 preferno cns aaa enableendConfiguration for AR1
upgrade fpd autoversion 12.2service timestamps debug datetime msec localtimeservice timestamps log datetime msec localtimeno service password-encryptionservice counters max age 10!hostname AR1!boot system disk0:s72033-adventerprisek9_wan-mz.122-18.SXE1.binlogging snmp-authfailno logging consoleenable password cisco123!no aaa new-modelclock timezone PST -8clock summer-time PDT recurringip subnet-zero!!!ip cef load-sharing algorithm originalip multicast-routingip igmp ssm-map enableip domain multicast coronado.netno ip domain-lookupip name-server 192.168.10.101ip name-server 192.168.11.101ipv6 mfib hardware-switching replication-mode ingressvtp mode transparentmls ip cef load-sharing fullmls ip multicast flow-stat-timer 9no mls flow ipno mls flow ipv6mls qos map dscp-cos 36 to 2mls qos map dscp-cos 38 to 1mls qosno mls acl tcam share-globalmls cef error action freezeno scripting tcl initno scripting tcl encdir!!!!!!!!!!redundancymode ssomain-cpuauto-sync running-configauto-sync standard!spanning-tree mode rapid-pvstspanning-tree portfast bpduguard defaultno spanning-tree optimize bpdu transmissionno spanning-tree vlan 800,808,900,908diagnostic cns publish cisco.cns.device.diag_resultsdiagnostic cns subscribe cisco.cns.device.diag_commands!vlan internal allocation policy ascendingvlan access-log ratelimit 2000!vlan 90name VLAN_90_HSD!vlan 110name VLAN_110_Video!vlan 111name VLAN_111_VoIP!vlan 800name VLAN_800_VoIP_to/from_DER!vlan 808name VLAN_808_VoIP_to/from_AR2!vlan 900name VLAN_900_Video_to/from_DER!vlan 908name VLAN_908_Video_to/from_AR2!class-map match-all class_VoIPmatch access-group name acl_VoIPclass-map match-all class_VoD_signalingmatch access-group name acl_VoD_signalingclass-map match-all class_HSDmatch access-group name acl_HSD!!policy-map setDSCPdescription Mark DSCP values for ingress trafficclass class_VoIPset dscp efclass class_HSDset dscp defaultclass class_VoD_signalingset dscp cs3!!!interface TenGigabitEthernet1/1description Transport to/from DER (TenGig7/1)switchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,800,900switchport mode trunkdampeningno ip addressload-interval 30carrier-delay msec 0wrr-queue bandwidth 64 255 0 0 0 0 0wrr-queue queue-limit 40 50 0 0 0 0 0wrr-queue threshold 1 100 100 100 100 100 100 100 100wrr-queue threshold 2 45 85 100 100 100 100 100 100wrr-queue random-detect min-threshold 1 75 100 100 100 100 100 100 100wrr-queue random-detect max-threshold 1 100 100 100 100 100 100 100 100no wrr-queue random-detect 2wrr-queue cos-map 2 1 1wrr-queue cos-map 2 2 2wrr-queue cos-map 2 3 3 4 6 7mls qos trust dscp!interface TenGigabitEthernet1/2no ip addressshutdown!interface TenGigabitEthernet1/3description Transport to/from AR2 (TenGig1/1)switchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,808,908switchport mode trunkdampeningno ip addressload-interval 30carrier-delay msec 0wrr-queue bandwidth 64 255 0 0 0 0 0wrr-queue queue-limit 40 50 0 0 0 0 0wrr-queue threshold 1 100 100 100 100 100 100 100 100wrr-queue threshold 2 45 85 100 100 100 100 100 100wrr-queue random-detect min-threshold 1 75 100 100 100 100 100 100 100wrr-queue random-detect max-threshold 1 100 100 100 100 100 100 100 100no wrr-queue random-detect 2wrr-queue cos-map 2 1 1wrr-queue cos-map 2 2 2wrr-queue cos-map 2 3 3 4 6 7mls qos trust dscp!interface TenGigabitEthernet1/4no ip addressshutdown!interface GigabitEthernet2/1description GigE trunk to/from DSLAM uplink GigEswitchportswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,110,111switchport mode trunkswitchport block unicastno ip addressload-interval 30wrr-queue bandwidth 64 255wrr-queue queue-limit 40 50wrr-queue random-detect min-threshold 1 75 100wrr-queue random-detect min-threshold 2 50 100wrr-queue random-detect max-threshold 1 100 100wrr-queue random-detect max-threshold 2 50 100wrr-queue cos-map 1 1 0wrr-queue cos-map 2 1 1wrr-queue cos-map 2 2 2 3 4 6 7no cdp enablespanning-tree portfast trunkservice-policy input setDSCP!interface GigabitEthernet2/2no ip addressshutdown!interface GigabitEthernet2/3no ip addressshutdown!! <------ interfaces GigabitEthernet2/4 - 14 omitted ------->!interface GigabitEthernet2/15no ip addressshutdown!interface GigabitEthernet2/16no ip addressshutdown!interface GigabitEthernet5/1no ip addressshutdown!interface GigabitEthernet5/2no ip addressshutdown!interface Vlan1no ip addressshutdown!interface Vlan110description Video edge VLANip address 192.168.110.1 255.255.255.0no ip redirectsno ip unreachablesip pim sparse-modeip igmp static-group 232.1.1.1 source ssm-mapip igmp static-group 232.1.1.2 source ssm-mapip igmp static-group 232.1.1.3 source ssm-mapip igmp static-group 232.1.1.4 source ssm-mapip igmp static-group 232.1.1.5 source ssm-mapip igmp static-group 232.1.1.6 source ssm-mapip igmp static-group 232.1.1.7 source ssm-mapip igmp static-group 232.1.1.8 source ssm-mapip igmp static-group 232.1.1.9 source ssm-mapip igmp static-group 232.1.1.10 source ssm-mapload-interval 30arp timeout 250!interface Vlan111description VoIP edge VLANip address 192.168.111.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan800description VoIP transport VLAN to/from DERip address 192.168.252.2 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan808description VoIP transport VLAN to/from AR2ip address 192.168.252.9 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan900description Video transport VLAN to/from DERip address 192.168.254.2 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan908description Video transport VLAN to/from AR2ip address 192.168.254.9 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!router ospf 100router-id 2.2.2.1log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan110network 192.168.110.0 0.0.0.255 area 0network 192.168.254.2 0.0.0.0 area 0network 192.168.254.9 0.0.0.0 area 0!router ospf 101router-id 2.2.2.2log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan111network 192.168.111.0 0.0.0.255 area 0network 192.168.252.2 0.0.0.0 area 0network 192.168.252.9 0.0.0.0 area 0!ip classless!no ip http serverip pim ssm default!ip access-list extended acl_HSDremark Identify HSD trafficpermit ip 192.168.90.0 0.0.0.255 anyip access-list extended acl_VoD_signalingremark Identify VoD signaling trafficpermit ip 192.168.110.0 0.0.0.255 192.168.10.102permit ip 192.168.110.0 0.0.0.255 192.168.10.103ip access-list extended acl_VoIPremark Identify VoIP trafficpermit ip 192.168.111.0 0.0.0.255 any!logging event link-status defaultlogging trap debugginglogging source-interface Vlan110logging 192.168.10.101!!!control-plane!!!dial-peer cor custom!!!line con 0exec-timeout 0 0password cisco123logging synchronousloginline vty 0 4exec-timeout 0 0password cisco123logging synchronouslogin!!ntp clock-period 17180008ntp update-calendarntp server 192.168.10.102 preferno cns aaa enableendConfiguration for AR2
version 12.2no service padservice timestamps debug datetime msec localtimeservice timestamps log datetime msec localtimeno service password-encryptionservice compress-config!hostname AR2!boot-start-markerboot system bootflash:cat4000-i9s-mz.122-25.EWA.binboot-end-marker!!redundancymode ssoenable password cisco123!no aaa new-modelclock timezone PST -8clock summer-time PDT recurringhw-module uplink select tengigabitethernetqos map dscp 34 36 38 48 49 50 51 52 to tx-queue 2qos map dscp 53 54 55 56 57 58 59 60 to tx-queue 2qos map dscp 61 62 63 to tx-queue 2qos map dscp 38 to cos 1qos map dscp 36 to cos 2qosvtp mode transparentip subnet-zeroip cef load-sharing algorithm include-ports destinationip domain multicast coronado.netno ip domain-lookupip name-server 192.168.10.101ip name-server 192.168.11.101!ip multicast-routingip igmp ssm-map enable!no file verify auto!spanning-tree mode rapid-pvstspanning-tree portfast bpduguard defaultspanning-tree extend system-idno spanning-tree vlan 808,816,908,916power redundancy-mode redundant!!!vlan internal allocation policy ascending!vlan 90name VLAN_90_HSD!vlan 120name VLAN_120_Video!vlan 121name VLAN_121_VoIP!vlan 808name VLAN_808_VoIP_to/from_AR1!vlan 816name VLAN_816_VoIP_to/from_AR3!vlan 908name VLAN_908_Video_to/from_AR1!vlan 916name VLAN_916_Video_to/from_AR3!class-map match-all class_VoIPmatch access-group name acl_VoIPclass-map match-all class_VoD_signalingmatch access-group name acl_VoD_signalingclass-map match-all class_HSDmatch access-group name acl_HSD!!policy-map setDSCPdescription Mark DSCP values for ingress trafficclass class_VoIPset dscp efclass class_HSDset dscp defaultclass class_VoD_signalingset dscp cs3!!interface TenGigabitEthernet1/1description Transport to/from AR1 (TenGig1/3)switchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,808,908switchport mode trunkdampeningload-interval 30carrier-delay msec 0qos trust dscptx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1!interface TenGigabitEthernet1/2description Transport to/from AR3 (TenGig1/49)switchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,816,916switchport mode trunkdampeningload-interval 30carrier-delay msec 0qos trust dscptx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1spanning-tree cost 10!interface GigabitEthernet1/3!interface GigabitEthernet1/4!interface GigabitEthernet1/5!interface GigabitEthernet1/6!interface GigabitEthernet5/1description GigE trunk to/from DSLAM uplink GigEswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,120,121switchport mode trunkswitchport block unicastservice-policy input setDSCPload-interval 30tx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1no cdp enablespanning-tree portfast trunk!interface GigabitEthernet5/2!interface GigabitEthernet5/3!! <------ interfaces GigabitEthernet5/4 - 46 omitted ------->!interface GigabitEthernet5/47!interface GigabitEthernet5/48!interface Vlan1no ip address!interface Vlan120description Video edge VLANip address 192.168.120.1 255.255.255.0no ip redirectsno ip unreachablesip pim sparse-modeip igmp static-group 232.1.1.1 source ssm-mapip igmp static-group 232.1.1.2 source ssm-mapip igmp static-group 232.1.1.3 source ssm-mapip igmp static-group 232.1.1.4 source ssm-mapip igmp static-group 232.1.1.5 source ssm-mapip igmp static-group 232.1.1.6 source ssm-mapip igmp static-group 232.1.1.7 source ssm-mapip igmp static-group 232.1.1.8 source ssm-mapip igmp static-group 232.1.1.9 source ssm-mapip igmp static-group 232.1.1.10 source ssm-mapload-interval 30arp timeout 250!interface Vlan121description VoIP edge VLANip address 192.168.121.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan808description VoIP transport VLAN to/from AR1ip address 192.168.252.10 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan816description VoIP transport VLAN to/from AR3ip address 192.168.252.17 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan908description Video transport VLAN to/from AR1ip address 192.168.254.10 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan916description Video transport VLAN to/from AR3ip address 192.168.254.17 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!router ospf 100router-id 3.3.3.1log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan120network 192.168.120.0 0.0.0.255 area 0network 192.168.254.10 0.0.0.0 area 0network 192.168.254.17 0.0.0.0 area 0!router ospf 101router-id 3.3.3.2log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan121network 192.168.121.0 0.0.0.255 area 0network 192.168.252.10 0.0.0.0 area 0network 192.168.252.17 0.0.0.0 area 0!!no ip http server!ip pim ssm default!!ip access-list extended acl_HSDremark Identify HSD trafficpermit ip 192.168.90.0 0.0.0.255 anyip access-list extended acl_VoD_signalingremark Identify VoD signaling trafficpermit ip 192.168.120.0 0.0.0.255 192.168.10.102permit ip 192.168.120.0 0.0.0.255 192.168.10.103ip access-list extended acl_VoIPremark Identify VoIP trafficpermit ip 192.168.121.0 0.0.0.255 any!logging trap debugginglogging source-interface Vlan120logging 192.168.10.101!!!line con 0exec-timeout 0 0password cisco123logging synchronousloginstopbits 1line vty 0 4exec-timeout 0 0password cisco123logging synchronouslogin!!ntp clock-period 17180679ntp update-calendarntp server 192.168.10.102 prefer!endConfiguration for AR3
version 12.2no service padservice timestamps debug datetime msec localtimeservice timestamps log datetime msec localtimeno service password-encryptionservice compress-config!hostname AR3!boot-start-markerboot system bootflash:cat4000-i5s-mz.122-25.EWA.binboot-end-marker!enable password cisco123!no aaa new-modelclock timezone PST -8clock summer-time PDT recurringqos map dscp 34 36 38 48 49 50 51 52 to tx-queue 2qos map dscp 53 54 55 56 57 58 59 60 to tx-queue 2qos map dscp 61 62 63 to tx-queue 2qos map dscp 38 to cos 1qos map dscp 36 to cos 2qosvtp mode transparentip subnet-zeroip cef load-sharing algorithm originalip domain multicast coronado.netno ip domain-lookupip name-server 192.168.10.101ip name-server 192.168.11.101!ip multicast-routingip igmp ssm-map enable!no file verify auto!spanning-tree mode rapid-pvstspanning-tree portfast bpduguard defaultspanning-tree extend system-idno spanning-tree vlan 816,824,916,924power redundancy-mode redundant!!!vlan internal allocation policy ascending!vlan 90name VLAN_90_HSD!vlan 130name VLAN_130_Video!vlan 131name VLAN_131_VoIP!vlan 816name VLAN_816_VoIP_to/from_AR2!vlan 824name VLAN_824_VoIP_to/from_DER!vlan 916name VLAN_916_Video_to/from_AR2!vlan 924name VLAN_924_Video_to/from_DER!class-map match-all class_VoIPmatch access-group name acl_VoIPclass-map match-all class_VoD_signalingmatch access-group name acl_VoD_signalingclass-map match-all class_HSDmatch access-group name acl_HSD!!policy-map setDSCPdescription Mark DSCP values for ingress trafficclass class_VoIPset dscp efclass class_HSDset dscp defaultclass class_VoD_signalingset dscp cs3!!interface GigabitEthernet1/1description GigE trunk to/from DSLAM uplink GigEswitchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,130,131switchport mode trunkswitchport block unicastservice-policy input setDSCPload-interval 30tx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1no cdp enablespanning-tree portfast trunk!interface GigabitEthernet1/2!interface GigabitEthernet1/3!! <------ interfaces GigabitEthernet1/4 - 46 omitted ------->!interface GigabitEthernet1/47!interface GigabitEthernet1/48!interface TenGigabitEthernet1/49description Transport to/from AR2 (TenGig1/2)switchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,816,916switchport mode trunkdampeningload-interval 30carrier-delay msec 0qos trust dscptx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1!interface TenGigabitEthernet1/50description Transport to/from DER (TenGig7/3)switchport trunk encapsulation dot1qswitchport trunk allowed vlan 90,824,924switchport mode trunkdampeningload-interval 30carrier-delay msec 0qos trust dscptx-queue 1bandwidth percent 19tx-queue 2bandwidth percent 80tx-queue 3priority hightx-queue 4bandwidth percent 1!interface Vlan1no ip address!interface Vlan130description Video edge VLANip address 192.168.130.1 255.255.255.0no ip redirectsno ip unreachablesip pim sparse-modeip igmp static-group 232.1.1.1 source ssm-mapip igmp static-group 232.1.1.2 source ssm-mapip igmp static-group 232.1.1.3 source ssm-mapip igmp static-group 232.1.1.4 source ssm-mapip igmp static-group 232.1.1.5 source ssm-mapip igmp static-group 232.1.1.6 source ssm-mapip igmp static-group 232.1.1.7 source ssm-mapip igmp static-group 232.1.1.8 source ssm-mapip igmp static-group 232.1.1.9 source ssm-mapip igmp static-group 232.1.1.10 source ssm-mapload-interval 30arp timeout 250!interface Vlan131description VoIP edge VLANip address 192.168.131.1 255.255.255.0no ip redirectsno ip unreachablesload-interval 30!interface Vlan816description VoIP transport VLAN to/from AR2ip address 192.168.252.18 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan824description VoIP transport VLAN to/from DERip address 192.168.252.26 255.255.255.252ip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan916description Video transport VLAN to/from AR2ip address 192.168.254.18 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!interface Vlan924description Video transport VLAN to/from DERip address 192.168.254.26 255.255.255.252ip pim sparse-modeip ospf network point-to-pointip ospf hello-interval 1load-interval 30!router ospf 100router-id 4.4.4.1log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan130network 192.168.130.0 0.0.0.255 area 0network 192.168.254.18 0.0.0.0 area 0network 192.168.254.26 0.0.0.0 area 0!router ospf 101router-id 4.4.4.2log-adjacency-changestimers throttle spf 10 100 1000timers throttle lsa all 1 10 1000timers lsa arrival 100passive-interface Vlan131network 192.168.131.0 0.0.0.255 area 0network 192.168.252.18 0.0.0.0 area 0network 192.168.252.26 0.0.0.0 area 0!no ip http server!ip pim ssm default!!ip access-list extended acl_HSDremark Identify HSD trafficpermit ip 192.168.90.0 0.0.0.255 anyip access-list extended acl_VoD_signalingremark Identify VoD signaling trafficpermit ip 192.168.130.0 0.0.0.255 192.168.10.102permit ip 192.168.130.0 0.0.0.255 192.168.10.103ip access-list extended acl_VoIPremark Identify VoIP trafficpermit ip 192.168.131.0 0.0.0.255 any!logging trap debugginglogging source-interface Vlan130logging 192.168.10.101!!!line con 0exec-timeout 0 0password cisco123logging synchronousloginstopbits 1line vty 0 4exec-timeout 0 0password cisco123logging synchronouslogin!!ntp clock-period 17180737ntp update-calendarntp server 192.168.10.102 prefer!end
Posted: Wed Sep 20 08:57:36 PDT 2006
All contents are Copyright © 1992--2006 Cisco Systems, Inc. All rights reserved.
Important Notices and Privacy Statement.