version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname switch-lan2
!
boot-start-marker
boot-end-marker
!
security authentication failure rate 2 log
enable secret 5 $1$iFts$S1WO3xMMg/znQS1k/ONiB.
!
aaa new-model
!
!
aaa authentication login default group tacacs+
aaa authentication login SSH-LOGIN group tacacs+
aaa authentication login CONSOLE line local
!
aaa session-id common
memory-size iomem 5
!
!
ip cef
no ip domain lookup
ip domain name lab.local
no ip dhcp use vrf connected
ip dhcp excluded-address 192.168.12.1 192.168.12.10
ip dhcp excluded-address 192.168.120.1 192.168.120.10
!
ip dhcp pool ADMINS-POOL
   network 192.168.12.0 255.255.255.0
   dns-server 8.8.8.8
   default-router 192.168.12.1
!
ip dhcp pool USERS-POOL
   network 192.168.120.0 255.255.255.0
   dns-server 8.8.8.8
   default-router 192.168.120.1
!
!
login block-for 300 attempts 2 within 120
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username admin privilege 15 secret 5 $1$BpwI$mjNQCH9Czx1gwbTcb8Wun1
!
!
ip ssh maxstartups 3
ip ssh time-out 60
ip ssh authentication-retries 5
ip ssh version 2
!
!
!
!
!
interface FastEthernet0/0
 switchport mode trunk
!
interface FastEthernet0/1
 switchport access vlan 12
!
interface FastEthernet0/2
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/3
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/4
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/5
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/6
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/7
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/8
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/9
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/10
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/11
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/12
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/13
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/14
 switchport access vlan 666
 shutdown
!
interface FastEthernet0/15
 switchport access vlan 666
 shutdown
!
interface Vlan1
 no ip address
!
interface Vlan12
 ip address 192.168.12.3 255.255.255.0
!
interface Vlan120
 ip address 192.168.120.3 255.255.255.0
 ip access-group USERS-NET in
!
!
no ip http server
no ip http secure-server
ip route 0.0.0.0 0.0.0.0 192.168.12.1
!
!
!
!
ip access-list extended USERS-NET
 deny   icmp 192.168.120.0 0.0.0.255 host 192.168.120.3 echo
 deny   tcp 192.168.120.0 0.0.0.255 host 192.168.120.3 eq 22
 deny   icmp 192.168.120.0 0.0.0.255 host 192.168.120.3 echo-reply
 deny   icmp 192.168.120.0 0.0.0.255 host 192.168.120.3
logging trap notifications
logging 192.168.11.10
mac-address-table static 0800.27f5.2260 interface FastEthernet0/1 vlan 12
mac-address-table static 0800.2704.23e4 interface FastEthernet0/2 vlan 120
no cdp run
!
!
tacacs-server host 192.168.11.10
tacacs-server key 7 063C0E301D1C1E0A1D
!
control-plane
!
!
!
!
!
!
!
!
!
banner motd ^CZariadenie switch-lan1. Nepovoleny pristup zakazny!!!!!!^C
!
line con 0
 exec-timeout 30 0
 logging synchronous
 login authentication CONSOLE
line aux 0
 no exec
line vty 0 4
 exec-timeout 30 0
 logging synchronous
 login authentication SSH-LOGIN
 transport input ssh
!
!
end
