!
!Version ArubaOS-CX GL.10.13.1000
!export-password: default
hostname RSVDC-CORE1-1
user admin group administrators password ciphertext AQBapetVmtD4dXlkd3rWXjrI57yHNA4Zr0HszgOE7BgeEtekYgAAALC1aBsgvgOxs5UvlJtdipTnLbOzykRphH6kLpXi7FKHrFgrrm0n7EGSjtSLbOEvADjo8TtIC9hU1ZJbe25QdO2znb4JzsYtdE9yq4IMMFtzARalPNC85VYOcbZylD+0iEeF
clock timezone america/los_angeles
profile l3-agg
ntp server 10.2.120.98 prefer
ntp server 10.2.120.99 prefer
ntp server pool.ntp.org minpoll 4 maxpoll 4 iburst
ntp enable
ntp vrf mgmt
!
!
!
!
tacacs-server host 10.2.120.94 key ciphertext AQBapah6J58j0GKl3+uHUBUlAKt4DOo0wBo+DyDjLrayIJ8jCQAAANRLzagS8NJrTQ== vrf mgmt
tacacs-server host 10.2.120.95 key ciphertext AQBapWA2l0klkgqYXjMyTwXPBiM4rnR4xSc41ul+Ufo7PaAhCQAAAJvSMgzD8n1wWw== vrf mgmt
!
!
!
ssh server vrf mgmt
vlan 1
vlan 101
name PROD-WEB
vlan 102
name PROD-DB
vlan 4000
name CORE-ROUTING
spanning-tree
spanning-tree priority 0
spanning-tree config-name RSVDC
interface mgmt
no shutdown
ip dhcp
interface lag 1 multi-chassis
description RACK-1
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
lacp fallback
spanning-tree root-guard
interface lag 2 multi-chassis
description RACK-2
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
lacp fallback
spanning-tree root-guard
interface lag 101 multi-chassis
description EXT-FW1-1
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed 4000
lacp mode active
lacp fallback
spanning-tree root-guard
interface lag 102 multi-chassis
description EXT-FW1-2
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed 4000
lacp mode active
lacp fallback
spanning-tree root-guard
interface lag 256
description VSX_ISL_LAG
no shutdown
no routing
vlan trunk native 1
vlan trunk allowed all
lacp mode active
interface 1/1/1
description RSVDC-ACCESS1-1
no shutdown
mtu 9198
lag 1
interface 1/1/2
description RSVDC-ACCESS1-2
no shutdown
mtu 9198
lag 1
interface 1/1/3
description RSVDC-ACCESS2-1
no shutdown
mtu 9198
lag 2
interface 1/1/4
description RSVDC-ACCESS2-2
no shutdown
mtu 9198
lag 2
interface 1/1/5
no shutdown
no routing
vlan access 1
interface 1/1/6
no shutdown
no routing
vlan access 1
interface 1/1/7
no shutdown
no routing
vlan access 1
interface 1/1/8
no shutdown
no routing
vlan access 1
interface 1/1/9
no shutdown
no routing
vlan access 1
interface 1/1/10
no shutdown
no routing
vlan access 1
interface 1/1/11
no shutdown
no routing
vlan access 1
interface 1/1/12
no shutdown
no routing
vlan access 1
interface 1/1/13
no shutdown
no routing
vlan access 1
interface 1/1/14
no shutdown
no routing
vlan access 1
interface 1/1/15
no shutdown
no routing
vlan access 1
interface 1/1/16
no shutdown
no routing
vlan access 1
interface 1/1/17
no shutdown
no routing
vlan access 1
interface 1/1/18
no shutdown
no routing
vlan access 1
interface 1/1/19
no shutdown
no routing
vlan access 1
interface 1/1/20
no shutdown
no routing
vlan access 1
interface 1/1/21
no shutdown
no routing
vlan access 1
interface 1/1/22
no shutdown
no routing
vlan access 1
interface 1/1/23
no shutdown
no routing
vlan access 1
interface 1/1/24
no shutdown
no routing
vlan access 1
interface 1/1/25
no shutdown
no routing
vlan access 1
interface 1/1/26
no shutdown
no routing
vlan access 1
interface 1/1/27
no shutdown
no routing
vlan access 1
interface 1/1/28
no shutdown
no routing
vlan access 1
interface 1/1/29
description EXT-FW1-1
no shutdown
mtu 9198
lag 101
interface 1/1/30
description EXT-FW1-2
no shutdown
mtu 9198
lag 102
interface 1/1/31
description VSX-ISL
no shutdown
mtu 9198
lag 256
interface 1/1/32
description VSX-ISL
no shutdown
mtu 9198
lag 256
interface loopback 0
ip address 10.250.12.1/32
ip ospf 1 area 0.0.0.0
interface vlan 101
description PROD-WEB-SVI
ip mtu 9198
ip address 10.12.101.2/24
active-gateway ip mac 02:00:0a:01:65:01
active-gateway ip 10.12.101.1
ip ospf 1 area 0.0.0.0
ip igmp enable
ip pim-sparse enable
interface vlan 102
description PROD-DB-SVI
ip mtu 9198
ip address 10.12.102.2/24
active-gateway ip mac 02:00:0a:01:65:01
active-gateway ip 10.12.102.1
ip ospf 1 area 0.0.0.0
ip igmp enable
ip pim-sparse enable
interface vlan 4000
description CORE-ROUTING-SVI
ip mtu 9000
ip address 10.255.12.1/29
ip ospf 1 area 0.0.0.0
no ip ospf passive
ip pim-sparse enable
snmp-server system-location DC01, Roseville, CA
snmp-server system-contact netadmin@orangetme.local
vsx
system-mac 02:00:00:00:10:00
inter-switch-link lag 256
role primary
keepalive peer 172.16.104.102 source 172.16.104.101 vrf mgmt
ip dns domain-name example.local vrf mgmt
ip dns server-address 10.2.120.98 vrf mgmt
ip dns server-address 10.2.120.99 vrf mgmt
!
!
!
!
!
router ospf 1
router-id 10.250.12.1
passive-interface default
area 0.0.0.0
router pim
enable
active-active
https-server vrf mgmt
configuration-lockout central managed