! ! Software version: EC_AS5916-54X-OcNOS-5.1.243-SP-MPLS-S0-P0 09/05/2022 10:26:47 ! !Last configuration change at 09:46:19 EST Fri Jul 19 2024 by knavarro ! no service password-encryption ! logging console 1 logging monitor 2 logging logfile logs 4 logging level auth 7 logging level all 0 snmp-server enable traps link linkDown snmp-server enable traps link linkUp ! debug ssh server ! hardware-profile filter ingress-ipv4-ext enable hardware-profile statistics ingress-acl enable ! ip vrf management ! hostname GD5916-TELECARRIER clock timezone Panama no ip domain-lookup ip domain-lookup vrf management bridge 1 protocol mstp tfo Disable errdisable cause stp-bpdu-guard no feature telnet vrf management feature telnet no feature ssh vrf management feature ssh snmp-server enable snmp snmp-server view all .1 included snmp-server community G314D group network-operator feature ntp ntp enable ntp server 172.31.0.232 ntp source-interface lo username ocnos role network-admin password encrypted $1$bJoW2rW.$n18f986dV3OB3C.JRgvT20 username jacastro role network-admin password encrypted $1$KPoJwyi/$/oevkpmwVZtxbXTceIXO90 username pcarrillom role network-admin password encrypted $1$DgdRnXh1$HU3ZNp4q1FQ9285lwbbDy0 username noc role network-user password encrypted $1$bJoWMOg.$8.115fuQ2rT76EzQw5lS.1 username knavarro role network-admin password encrypted $1$bJoWBkp0$QdJ2V8QoGHFOEVGFXQvf90 username afernandez role network-admin password encrypted $1$bJoWlMm1$1Yy0JWIaizlk.D1u1xHar. username jcarrillo role network-admin password encrypted $1$bJoWtJR1$b34z80LfXZeWX6QWPCp59/ username jmoulanier role network-admin password encrypted $1$bJoWArd1$zmb.VwjqyzoYEikOo0Hcv1 username jlugo role network-admin password encrypted $1$bJoW2Q1.$5c97oBBqGwkb0p89p7Nc3. feature rsyslog vrf management logging remote server 186.96.77.2 6 vrf management lldp run bridge 1 ageing-time 300 ! ip access-list MGMT 7 permit tcp host 186.96.78.226 host 172.17.230.18 eq telnet 8 permit tcp host 186.96.78.226 host 172.17.230.18 eq ssh 9 permit tcp host 186.96.78.226 host 10.0.0.241 eq telnet 10 permit tcp host 186.96.78.226 host 10.0.0.241 eq ssh 17 permit tcp host 186.96.77.41 host 172.17.230.18 eq telnet 18 permit tcp host 186.96.77.41 host 172.17.230.18 eq ssh 19 permit tcp host 186.96.77.41 host 10.0.0.241 eq telnet 20 permit tcp host 186.96.77.41 host 10.0.0.241 eq ssh 37 permit tcp host 186.96.77.7 host 172.17.230.18 eq telnet 38 permit tcp host 186.96.77.7 host 172.17.230.18 eq ssh 39 permit tcp host 186.96.77.7 host 10.0.0.241 eq telnet 40 permit tcp host 186.96.77.7 host 10.0.0.241 eq ssh 47 permit tcp host 131.108.7.146 host 172.17.230.18 eq telnet 48 permit tcp host 131.108.7.146 host 172.17.230.18 eq ssh 49 permit tcp host 131.108.7.146 host 10.0.0.241 eq telnet 50 permit tcp host 131.108.7.146 host 10.0.0.241 eq ssh 57 permit tcp host 199.77.138.134 host 172.17.230.18 eq telnet 58 permit tcp host 199.77.138.134 host 172.17.230.18 eq ssh 59 permit tcp host 199.77.138.134 host 10.0.0.241 eq telnet 60 permit tcp host 199.77.138.134 host 10.0.0.241 eq ssh 67 permit tcp host 200.125.184.2 host 172.17.230.18 eq telnet 68 permit tcp host 200.125.184.2 host 172.17.230.18 eq ssh 69 permit tcp host 200.125.184.2 host 10.0.0.241 eq telnet 70 permit tcp host 200.125.184.2 host 10.0.0.241 eq ssh 77 permit tcp host 45.229.32.8 host 172.17.230.18 eq telnet 78 permit tcp host 45.229.32.8 host 172.17.230.18 eq ssh 79 permit tcp host 45.229.32.8 host 10.0.0.241 eq telnet 80 permit tcp host 45.229.32.8 host 10.0.0.241 eq ssh 87 permit tcp host 45.229.32.18 host 172.17.230.18 eq telnet 88 permit tcp host 45.229.32.18 host 172.17.230.18 eq ssh 89 permit tcp host 45.229.32.18 host 10.0.0.241 eq telnet 90 permit tcp host 45.229.32.18 host 10.0.0.241 eq ssh 97 permit tcp host 168.232.28.21 host 172.17.230.18 eq telnet 98 permit tcp host 168.232.28.21 host 172.17.230.18 eq ssh 99 permit tcp host 168.232.28.21 host 10.0.0.241 eq telnet 100 permit tcp host 168.232.28.21 host 10.0.0.241 eq ssh 107 permit tcp host 172.31.0.232 host 172.17.230.18 eq telnet 108 permit tcp host 172.31.0.232 host 172.17.230.18 eq ssh 110 permit tcp host 172.31.0.232 host 10.0.0.241 eq telnet 120 permit tcp host 172.31.0.232 host 10.0.0.241 eq ssh 280 deny tcp any any eq 830 290 deny tcp any any eq ssh 300 deny tcp any any eq telnet 301 deny tcp any any eq 6513 ! vlan database vlan 111 bridge 1 name Mgmt-GD-2000-IDC-Telered vlan 141 bridge 1 name 1G-KIO-PA-0122-16 vlan 148 bridge 1 name Mgmt-CN-2-Telered-IDC-TC vlan 349 bridge 1 name Mgmt-Clientes-2 vlan 451 bridge 1 name TO-KIO-1G vlan 1014 bridge 1 name Internet-Riba-CDE vlan 1016 bridge 1 name Internet-Riba-Multiplaza vlan 1017 bridge 1 name Internet-Riba-Altaplaza vlan 1028 bridge 1 name Alcon-Vision vlan 1510 bridge 1 name Mgmt-Schenker-Torre-Bicsa vlan 2000 bridge 1 name OSPF-CR-MX960 vlan 3002 bridge 1 name Mgmt-Hormigon-Cativa vlan 3005 bridge 1 name Mgmt-Copama-San-Pablo vlan 3009 bridge 1 name Internet-Real-State-P6 vlan 3010 bridge 1 name Internet-Real-State-P42 vlan 3012 bridge 1 name Internet-BAC-Marbella vlan 3014 bridge 1 name Mgmt-Copama-Costa-Verde vlan 3015 bridge 1 name Mgmt-Copama-Chorrera vlan 3016 bridge 1 name Internet-Shadwell-50M vlan 3017 bridge 1 name Mgmt-Melo-Chorrera vlan 3021 bridge 1 name Internet-Transbal-Siblo-XXI vlan 3026 bridge 1 name Internet-Medcom-CN-3916 vlan 3027 bridge 1 name Mgmt-Copama-Santiago vlan 3043 bridge 1 name Mgmt-Copama-Azuero vlan 3048 bridge 1 name Internet-Nintendo vlan 3049 bridge 1 name Mgmt-Dutty-Free-Aeropuerto vlan 3054 bridge 1 name Internet-GodoyYGoyod-ElDorado vlan 3055 bridge 1 name Internet-Godoy-Transistmica vlan 3056 bridge 1 name Internet-White-Bay vlan 3066 bridge 1 name Mgmt-Servientrega-Arraijan vlan 3067 bridge 1 name Servientrega-David-Calle4ta vlan 3071 bridge 1 name Mgmt-Servientrega-Penonome vlan 3074 bridge 1 name Mgmt-Servientrega-Aguadulce vlan 3075 bridge 1 name Mgmt-Servientre-Plz-Concordia vlan 3078 bridge 1 name Mgmt-Servientrega-Chitre vlan 3079 bridge 1 name Mgmt-Servientrega-Chorrera vlan 3081 bridge 1 name Mgmt-Servientrega-David vlan 3084 bridge 1 name Internet-Connecting-People vlan 3088 bridge 1 name Internet-Esc.Espicopal vlan 3089 bridge 1 name Shahdwell-PA-3260-61-50Mbps vlan 3107 bridge 1 name Mgmt-Rodolfo-Moreno vlan 3120 bridge 1 name Mgmt-Servientrega-La-Dona vlan 3124 bridge 1 name Mgmt-X-Press-Shipping-Agency vlan 3132 bridge 1 name Internet-AirEuropa vlan 3134 bridge 1 name Mgmt-Melo-David vlan 3135 bridge 1 name Mgmt-CN-3930-RS-TR vlan 3136 bridge 1 name Mgmt-Melo-Azuero vlan 3137 bridge 1 name Internet-Medcom vlan 3140 bridge 1 name Mgmt-Copama-Chitre vlan 3159 bridge 1 name Mgmt-Tecnasa-Tocumen vlan 3161 bridge 1 name Mgmt-Melo-Aguadulce vlan 3162 bridge 1 name Mgmt-Copama-Meteti vlan 3163 bridge 1 name Mgmt-Copama-Colon vlan 3168 bridge 1 name Mgmt-Copama-Changuinola vlan 3169 bridge 1 name Mgmt-Copama-Penonome vlan 3171 bridge 1 name Internet-ITSE vlan 3173 bridge 1 name Mgmt-Brinks-Chitre vlan 3174 bridge 1 name Mgmt-Safra vlan 3175 bridge 1 name Mgmt-Brinks-David vlan 3176 bridge 1 name MGMT-Ministerio-de-Cultura vlan 3177 bridge 1 name MGMT-Brinks-Los-Angeles vlan 3179 bridge 1 name Mgmt-Copama-Chiriqui vlan 3231 bridge 1 name Mgmt-ServiEntrega-Colon vlan 3235 bridge 1 name Mgmt-Fedecompras-SangiatoMall vlan 3243 bridge 1 name Mgmt-Hossana-Rod-Carew vlan 3275 bridge 1 name Mgmt-Servientrega-LosAndes vlan 3398 bridge 1 name Mgmt-Servientrega-Santiago vlan 3410 bridge 1 name Mgmt-BG-Technology vlan 3487 bridge 1 name Mgmt-Ciena-TOC vlan 3499 bridge 1 name Ospf-MX480-Corozal-Telecarrier ! interface ce49 ! interface ce50 ! interface ce51 ! interface ce52 ! interface ce53 ! interface ce54 ! interface eth0 ip vrf forwarding management ip address 172.17.230.18/30 ! interface lo ip address 127.0.0.1/8 ip address 10.0.0.241/32 secondary ipv6 address ::1/128 ! interface lo.management ip vrf forwarding management ip address 127.0.0.1/8 ipv6 address ::1/128 ! interface vlan1.111 description Mgmt-GD-2000-IDC-Telered ip address 172.17.125.9/30 ! interface vlan1.141 description 1G-KIO-PA-0122-16 ip address 131.108.4.97/30 ! interface vlan1.148 description Mgmt-CN-2-Telered-IDC-TC ip address 172.17.114.141/30 ! interface vlan1.349 description Mgmt-Clientes-2 ip address 172.17.30.1/24 ! interface vlan1.451 description TO-KIO-1G ip address 186.96.77.97/27 ! interface vlan1.1014 description Internet-Riba-CDE ip address 131.108.6.205/30 ! interface vlan1.1016 description Internet-Riba-Multiplaza ip address 131.108.5.153/30 ! interface vlan1.1017 description Internet-Riba-Altaplaza ip address 131.108.5.77/30 ! interface vlan1.1028 ip address 38.87.252.177/29 ! interface vlan1.1510 description Mgmt-Schenker-Torre-Bicsa ip address 172.17.117.169/30 ! interface vlan1.2000 description OSPF-CR-MX960 ip address 172.17.117.153/30 ip ospf network point-to-point ip ospf cost 999 ! interface vlan1.3002 description Mgmt-Hormigon-Cativa ip address 172.17.170.189/30 ! interface vlan1.3005 description Mgmt-Copama-San-Pablo ip address 172.17.170.57/30 ! interface vlan1.3009 description Internet-Real-State-P6 ip address 131.108.6.129/30 ! interface vlan1.3010 description Internet-Real-State-P42 ip address 131.108.6.133/30 ! interface vlan1.3012 description Internet-BAC-Marbella ip address 131.108.6.33/30 ip address 38.87.210.65/29 secondary ! interface vlan1.3014 description Mgmt-Copama-Costa-Verde ip address 172.17.170.73/30 ! interface vlan1.3015 description Mgmt-Copama-Chorrera ip address 172.17.170.49/30 ! interface vlan1.3016 description Internet-Shadwell-50M ip address 38.87.209.185/29 ! interface vlan1.3017 description Mgmt-Melo-Chorrera ip address 172.17.170.41/30 ! interface vlan1.3021 description Internet-Transbal-Siblo-XXI ip address 131.108.6.9/29 ! interface vlan1.3026 description Internet-Medcom-CN-3916 ip address 38.87.210.57/30 ! interface vlan1.3027 description Mgmt-Copama-Santiago ip address 172.17.170.53/30 ! interface vlan1.3043 description Internet-SACSA ip address 172.17.170.85/30 ! interface vlan1.3048 description Internet-Nintendo ip address 38.87.209.33/28 shutdown ! interface vlan1.3049 description Mgmt-Dutty-Free-Aeropuerto ip address 172.17.117.233/30 ! interface vlan1.3054 description Internet-GodoyYGoyod-ElDorado ip address 131.108.5.177/30 ! interface vlan1.3055 description Internet-Godoy-Transistmica ip address 38.87.208.177/28 ! interface vlan1.3056 description Internet-White-Bay ip address 131.108.5.9/29 ip address 131.108.5.25/29 secondary ! interface vlan1.3066 description MGMT-Servientrega-Arraijan ip address 172.17.170.169/30 ! interface vlan1.3067 description Servientrega-David-Calle4ta ip address 172.17.170.153/30 ! interface vlan1.3071 description MGMT-Servientrega-Penonome ip address 172.17.170.145/30 ! interface vlan1.3074 description MGMT-Servientrega-Aguadulce ip address 172.17.170.157/30 ! interface vlan1.3075 description Mgmt-Servientrega-Plz-Concordia ip address 172.17.170.177/30 ! interface vlan1.3078 description Mgmt-Servientrega-Chitre ip address 172.17.170.161/30 ! interface vlan1.3079 description Mgmt-Servientrega-Chorrera ip address 172.17.170.173/30 ! interface vlan1.3081 description Mgmt-Servientrega-David ip address 172.17.170.149/30 ! interface vlan1.3084 description Internet-Connecting-People ip address 38.87.209.249/29 ip address 38.87.208.33/29 secondary ! interface vlan1.3088 ip address 38.87.208.65/29 ! interface vlan1.3089 description Shahdwell-PA-3260-61-50Mbps ip address 131.108.6.149/30 ! interface vlan1.3107 description MGMT-Rodolfo-Moreno-Tocumen ip address 172.17.190.5/30 ! interface vlan1.3120 description Internet-Servientrega-La-Dona ip address 172.17.170.213/30 ! interface vlan1.3124 description Shipping-Agency ip address 172.17.230.161/30 ! interface vlan1.3132 description Internet-AirEuropa ip address 131.108.5.213/30 ! interface vlan1.3134 description Mgmt-Melo-David ip address 172.17.230.253/30 ! interface vlan1.3135 description Mgmt-3930-RS-TR ip address 172.17.231.21/30 ! interface vlan1.3136 description Mgmt-Melo-Azuero ip address 172.17.230.245/30 ! interface vlan1.3137 description Internet-Medcom ip address 38.87.208.169/30 ! interface vlan1.3140 description Mgmt-Copama-Chitre ip address 172.17.170.81/30 ! interface vlan1.3159 description Mgmt-Tecnasa-Tocumen ip address 172.17.230.21/30 ! interface vlan1.3161 description Mgmt-Melo-Aguadulce ip address 172.17.170.45/30 ! interface vlan1.3162 description Mgmt-Copama-Meteti ip address 172.17.170.65/30 ! interface vlan1.3163 description Mgmt-Copama-Colon ip address 172.17.170.77/30 ! interface vlan1.3168 description Mgmt-Melo-Changuinola ip address 172.17.170.197/30 ! interface vlan1.3169 description Mgmt-Copama-Penonome ip address 172.17.170.193/30 ! interface vlan1.3171 description Internet-ITSE ip address 186.96.77.81/29 ip address 186.96.77.89/29 secondary ! interface vlan1.3173 description Mgmt-Brinks-Chitre ip address 172.17.117.173/30 ! interface vlan1.3174 description Mmgt-Safra ip address 172.17.117.165/30 ! interface vlan1.3175 description Mgmt-Brinks-David ip address 172.17.117.193/30 ! interface vlan1.3176 description MGMT-Ministerio-de-Cultura ip address 172.17.117.205/30 ! interface vlan1.3177 description MGMT-Brinks-Los-Angeles ip address 172.17.117.209/30 ! interface vlan1.3179 description Mgmt-Copama-Chiriqui ip address 172.17.230.77/30 ! interface vlan1.3231 description Mgmt-Servientrega-Colon ip address 172.17.170.185/30 ! interface vlan1.3235 description Mgmt-Fedecompras-SangiatoMall ip address 172.17.170.13/30 ! interface vlan1.3243 description Mgmt-Hossana-Rod-Carew ip address 172.17.170.69/30 ! interface vlan1.3275 description Mgmt-ServiEntrega-LosAndes ip address 172.17.170.221/30 ! interface vlan1.3398 description Mgmt-Servientrega-Santiago ip address 172.17.170.141/30 ! interface vlan1.3487 description Ciena-TOC ip address 172.17.170.9/30 ! interface vlan1.3499 description Ospf-MX480-Corozal-Telecarrier ip address 172.17.117.150/30 ip ospf network point-to-point ipv6 ospf network point-to-point instance-id 0 ipv6 router ospf area 0.0.0.11 instance-id 0 ! interface xe1 description OSPF-MX480 switchport bridge-group 1 spanning-tree disable switchport mode trunk switchport trunk allowed vlan add 2000,3499 mtu 9216 ! interface xe2 ! interface xe3 description CN-3960-2-SFP-9 switchport bridge-group 1 spanning-tree disable switchport mode trunk switchport trunk allowed vlan add 111,141,148,349,451,1014,1016-1017,1028,1510,3002,3005,3009-3010,3012,3014-3017,3021,3026-3027,3043,3048-3049,3054-3056,3066-3067,3071,3074-3075,3078-3079,3081,3084,3088-3089,3107,3120 ,3124,3132,3134-3137,3140,3159,3161-3163,3168-3169,3171,3173-3177,3179,3231,3235,3243,3275,3398,3410,3487 mtu 9216 ! interface xe4 ! interface xe5 ! interface xe6 ! interface xe7 ! interface xe8 ! interface xe9 ! interface xe10 ! interface xe11 ! interface xe12 ! interface xe13 ! interface xe14 ! interface xe15 ! interface xe16 ! interface xe17 ! interface xe18 ! interface xe19 ! interface xe20 ! interface xe21 ! interface xe22 ! interface xe23 ! interface xe24 ! interface xe25 ! interface xe26 ! interface xe27 ! interface xe28 ! interface xe29 ! interface xe30 ! interface xe31 ! interface xe32 ! interface xe33 ! interface xe34 ! interface xe35 ! interface xe36 ! interface xe37 ! interface xe38 ! interface xe39 ! interface xe40 ! interface xe41 ! interface xe42 ! interface xe43 ! interface xe44 ! interface xe45 ! interface xe46 ! interface xe47 ! interface xe48 ! router ospf 28007 ospf router-id 10.0.0.241 log-adjacency-changes detail redistribute connected redistribute static network 172.17.117.148/30 area 0.0.0.11 network 172.17.117.152/30 area 0.0.0.11 ! router ipv6 ospf router-id 10.0.0.241 capability te capability cspf redistribute connected redistribute static log-adjacency-changes detail ! ip route 38.87.208.48/30 172.17.30.3 ip route 38.87.208.248/29 172.17.30.11 ip route 38.87.209.56/30 172.17.170.222 ip route 38.87.209.84/30 172.17.30.37 ip route 38.87.209.124/30 172.17.30.23 ip route 38.87.209.148/30 172.17.30.46 ip route 38.87.209.176/30 172.17.170.170 ip route 38.87.209.192/30 172.17.170.146 ip route 38.87.209.200/30 172.17.170.174 ip route 38.87.209.208/30 172.17.170.150 ip route 38.87.210.16/29 172.17.230.162 ip route 38.87.210.88/30 172.17.30.16 ip route 38.87.210.160/30 172.17.230.78 ip route 38.87.210.172/30 172.17.170.14 ip route 38.87.210.180/30 172.17.230.22 ip route 38.87.210.200/30 172.17.230.254 ip route 38.87.210.204/30 172.17.30.41 ip route 38.87.210.216/30 172.17.170.74 ip route 38.87.211.16/29 172.17.30.14 ip route 38.87.211.24/30 172.17.170.50 ip route 38.87.211.28/30 172.17.170.42 ip route 38.87.211.32/30 172.17.170.54 ip route 38.87.211.36/30 172.17.170.86 ip route 38.87.211.40/30 172.17.230.246 ip route 38.87.211.44/30 172.17.170.82 ip route 38.87.211.48/30 172.17.170.46 ip route 38.87.211.56/30 172.17.170.66 ip route 38.87.211.60/30 172.17.170.78 ip route 38.87.211.76/30 172.17.170.70 ip route 38.87.211.128/29 172.17.30.50 ip route 38.87.216.16/30 172.17.30.25 ip route 38.87.216.64/29 172.17.30.60 ip route 38.87.252.0/30 172.17.117.174 ip route 38.87.252.8/30 172.17.30.36 ip route 38.87.252.12/30 172.17.30.34 ip route 38.87.252.100/30 172.17.30.52 ip route 38.87.252.112/29 172.17.30.56 ip route 38.87.252.120/30 172.17.30.31 ip route 38.87.252.176/29 172.17.30.30 ip route 38.87.252.188/30 172.17.117.206 ip route 38.89.210.124/30 172.17.30.25 ip route 131.108.4.148/30 172.17.170.186 ip route 131.108.4.192/30 172.17.170.158 ip route 131.108.4.216/30 172.17.170.190 ip route 131.108.5.16/29 172.17.30.43 ip route 131.108.5.32/29 172.17.30.21 ip route 131.108.5.128/30 172.17.170.178 ip route 131.108.5.160/30 172.17.230.178 ip route 131.108.5.164/30 172.17.170.142 ip route 131.108.5.200/29 172.17.30.41 ip route 131.108.5.208/30 172.17.170.58 ip route 131.108.6.164/30 172.17.117.210 ip route 131.108.6.192/30 172.17.117.194 ip route 131.108.6.208/30 172.17.30.19 ip route 131.108.7.24/29 172.17.30.9 ip route 131.108.7.108/30 172.17.117.170 ip route 131.108.7.120/30 172.17.170.214 ip route 131.108.7.168/30 172.17.170.194 ip route 131.108.7.184/30 172.17.170.198 ip route 131.108.7.196/30 172.17.30.45 ip route 186.96.77.48/30 172.17.170.154 ip route 186.96.77.52/30 172.17.30.48 ip route 186.96.77.64/29 172.17.117.234 ip route 186.96.77.144/30 172.17.30.7 ip route 186.96.77.204/30 172.17.30.27 ip route 186.96.77.244/30 172.17.30.29 ip route 186.96.77.248/30 172.17.30.39 ip route 186.96.77.252/30 172.17.170.162 ip route vrf management 0.0.0.0/0 172.17.230.17 eth0 ! bridge-domain 1 ! line vty ip access-group MGMT in ! end