05771-103-LNR-FIC30110ABX#show run Building configuration... Current configuration : 14100 bytes ! ! Last configuration change at 14:24:20 UTC Mon Aug 31 2026 by admin ! version 17.18 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption service unsupported-transceiver ! hostname 05771-103-LNR-FIC30110ABX ! ! vrf definition Mgmt-vrf ! address-family ipv4 exit-address-family ! address-family ipv6 exit-address-family ! aaa new-model ! ! aaa authentication login default local aaa authentication dot1x default group radius aaa authorization console aaa authorization exec default local if-authenticated aaa authorization network default local if-authenticated aaa accounting dot1x default start-stop group radius aaa accounting system default start-stop group radius ! ! aaa session-id common boot system bootflash:packages.conf ! ip multicast-routing no ip domain lookup ip domain name imfs.ch ! ! ! login on-success log ipv6 nd cache expire 14400 refresh ipv6 unicast-routing ipv6 multicast-routing vtp mode transparent ! ! ! ! ! ! ! l2vpn evpn replication-type ingress router-id Loopback1 ! Incomplete or invalid interface ! l2vpn evpn instance 2 vlan-based encapsulation vxlan ! Incomplete EVPN instance config, no RD or Router ID configured route-target export 65000:2 route-target import 65000:2 replication-type ingress ! ! crypto pki trustpoint TP-self-signed-2568310651 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-2568310651 revocation-check none rsakeypair TP-self-signed-2568310651 hash sha512 ! crypto pki trustpoint SLA-TrustPoint enrollment pkcs12 revocation-check crl hash sha512 ! ! crypto pki certificate chain TP-self-signed-2568310651 certificate self-signed 01 30820330 30820218 A0030201 02020101 300D0609 2A864886 F70D0101 0D050030 31312F30 2D060355 04030C26 494F532D 53656C66 2D536967 6E65642D 43657274 69666963 6174652D 32353638 33313036 3531301E 170D3236 30363033 30373139 32385A17 0D333630 36303230 37313932 385A3031 312F302D 06035504 030C2649 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D32 35363833 31303635 31308201 22300D06 092A8648 86F70D01 01010500 0382010F 00308201 0A028201 0100EEDE 30901C84 FA05E6AC 4565B24C D28C6B3E FF080999 5DD6CE1D 3A3A6CA3 0143CE09 51373541 740B7A53 C3789134 AB177EBD 345A2EA4 C0070024 091C3CFC 21B3941E 954672EA 1BC7A838 152FBCAB CC26E3CB 29A0932B 0F39EC93 2B019F30 E25A7002 890040BF E04AEE90 A6269C30 0C3BFCB4 1036041F 2202E4A4 C87E6F15 76863158 FA7655A8 8C02BA99 F741B814 F1FC8B70 B22275A0 69903FA0 6B05F35C 0E7EA9FF 73985746 BF1F9BF2 31BAC429 FECB1D5A 84CAFB5F 8E7C3779 55D20758 7A3523F9 CD0B569E 42572767 5DB65EE2 F33F59C5 B2E820CD 51FE81CA 1B7D757E 0F2B7400 4A882C7F 5BF4D92E FF12A978 1890ABF5 AA3370F5 15D2CF35 0F1B6A67 B1250203 010001A3 53305130 1D060355 1D0E0416 041453F3 1429DEE9 9D1DD43D B83CBDFF B2911B02 8CA0301F 0603551D 23041830 16801453 F31429DE E99D1DD4 3DB83CBD FFB2911B 028CA030 0F060355 1D130101 FF040530 030101FF 300D0609 2A864886 F70D0101 0D050003 82010100 0F39F6DF 8A2C96A6 28777F12 C3A9CC87 E00B3EDA D43A45C6 ACBBD6D6 A8A6AFC9 FE4D5913 B8A1AD83 D6E393C5 27CB421E 2843027D E47D47B1 FC5D5CEC 7B75A32B DA2360F1 BAC01A8D D60EB446 054B1F71 9D1C2BBE CC3CABE4 4B9125CA 373BB435 448ED4EB BD92AF23 E60C81CE 9F318805 1FF9C4D8 42FBFF97 69EF4412 31AC243F 6428F05E 98F4DF5E 284B3E5C A0BDD055 CA8658A9 17F91FA2 5A53E9B6 EE3D2C7C CA1E9116 6A907277 44EB1C6E CF4B45D7 AFFD8CFB F8BCC9A8 B049AFCA 84FF0E38 68F6A684 7DD16685 34B7A938 BBDC7A38 78BD0DC3 87FD8CBE 8916CCDC 1DD1DCC0 A027A01C E0717353 4CC95C2A 99E648DB 83EC58D6 24F7BF26 14664A22 AEFB994E quit crypto pki certificate chain SLA-TrustPoint certificate ca 01 30820321 30820209 A0030201 02020101 300D0609 2A864886 F70D0101 0B050030 32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720 526F6F74 20434130 1E170D31 33303533 30313934 3834375A 170D3338 30353330 31393438 34375A30 32310E30 0C060355 040A1305 43697363 6F312030 1E060355 04031317 43697363 6F204C69 63656E73 696E6720 526F6F74 20434130 82012230 0D06092A 864886F7 0D010101 05000382 010F0030 82010A02 82010100 A6BCBD96 131E05F7 145EA72C 2CD686E6 17222EA1 F1EFF64D CBB4C798 212AA147 C655D8D7 9471380D 8711441E 1AAF071A 9CAE6388 8A38E520 1C394D78 462EF239 C659F715 B98C0A59 5BBB5CBD 0CFEBEA3 700A8BF7 D8F256EE 4AA4E80D DB6FD1C9 60B1FD18 FFC69C96 6FA68957 A2617DE7 104FDC5F EA2956AC 7390A3EB 2B5436AD C847A2C5 DAB553EB 69A9A535 58E9F3E3 C0BD23CF 58BD7188 68E69491 20F320E7 948E71D7 AE3BCC84 F10684C7 4BC8E00F 539BA42B 42C68BB7 C7479096 B4CB2D62 EA2F505D C7B062A4 6811D95B E8250FC4 5D5D5FB8 8F27D191 C55F0D76 61F9A4CD 3D992327 A8BB03BD 4E6D7069 7CBADF8B DF5F4368 95135E44 DFC7C6CF 04DD7FD1 02030100 01A34230 40300E06 03551D0F 0101FF04 04030201 06300F06 03551D13 0101FF04 05300301 01FF301D 0603551D 0E041604 1449DC85 4B3D31E5 1B3E6A17 606AF333 3D3B4C73 E8300D06 092A8648 86F70D01 010B0500 03820101 00507F24 D3932A66 86025D9F E838AE5C 6D4DF6B0 49631C78 240DA905 604EDCDE FF4FED2B 77FC460E CD636FDB DD44681E 3A5673AB 9093D3B1 6C9E3D8B D98987BF E40CBD9E 1AECA0C2 2189BB5C 8FA85686 CD98B646 5575B146 8DFC66A8 467A3DF4 4D565700 6ADF0F0D CF835015 3C04FF7C 21E878AC 11BA9CD2 55A9232C 7CA7B7E6 C1AF74F6 152E99B7 B1FCF9BB E973DE7F 5BDDEB86 C71E3B49 1765308B 5FB0DA06 B92AFE7F 494E8A9E 07B85737 F3A58BE1 1A48A229 C37C1E69 39F08678 80DDCD16 D6BACECA EEBC7CF9 8428787B 35202CDC 60E4616A B623CDBD 230E3AFB 418616A9 4093E049 4D10AB75 27E86F73 932E35B5 8862FDAE 0275156F 719BB2F0 D697DF7F 28 quit ! ! license boot level network-advantage addon dna-advantage dot1x system-auth-control dot1x supplicant force-multicast dot1x supplicant controlled transient memory free low-watermark processor 262173 ! system mtu 9198 diagnostic bootup level minimal ! spanning-tree mode rapid-pvst spanning-tree extend system-id ! ! ! ! username admin privilege 15 secret 9 $14$POFc$/wIAScQY0fGFek$wOCmKADuBn34eDPmN1ZTGd5OIg4uHpBi.f9bFremkfk ! redundancy crypto engine compliance shield disable ! ! ! ! ! transceiver type all monitoring ! vlan configuration 200 member evpn-instance 2 vni 4096 ! vlan 10 name Management_LRtoNS ! vlan 200 name vxlan-vni4096 ! vlan 210 ! lldp run ! class-map match-any system-cpp-police-ewlc-control description EWLC Control class-map match-any system-cpp-police-topology-control description Topology control class-map match-any system-cpp-police-sw-forward description Sw forwarding, L2 LVX data packets, LOGGING, Transit Traffic class-map match-any system-cpp-default description EWLC Data, Inter FED Traffic class-map match-any system-cpp-police-sys-data description Openflow, Exception, EGR Exception, NFL Sampled Data, RPF Failed class-map match-any system-cpp-police-punt-webauth description Punt Webauth class-map match-any system-cpp-police-l2lvx-control description L2 LVX control packets class-map match-any system-cpp-police-forus description Forus traffic class-map match-any system-cpp-police-multicast-end-station description MCAST END STATION class-map match-any system-cpp-police-forus-addr-resolution description Forus Address resolution class-map match-any system-cpp-police-high-rate-app description High Rate Applications class-map match-any system-cpp-police-multicast description MCAST Data class-map match-any system-cpp-police-meraki-next-tunnel description Meraki Next tunnel class-map match-any system-cpp-police-l2-control description L2 control class-map match-any system-cpp-police-dot1x-auth description DOT1X Auth class-map match-any system-cpp-police-data description ICMP redirect, ICMP_GEN and BROADCAST class-map match-any system-cpp-police-stackwise-virt-control description Stackwise Virtual OOB class-map match-any non-client-nrt-class class-map match-any system-cpp-police-routing-control description Routing control and Low Latency class-map match-any system-cpp-police-protocol-snooping description Protocol snooping class-map match-any system-cpp-police-dhcp-snooping description DHCP snooping class-map match-any system-cpp-police-ios-routing description L2 control, Topology control, Routing control, Low Latency class-map match-any system-cpp-police-system-critical description System Critical and Gold Pkt class-map match-any system-cpp-police-ios-feature description ICMPGEN,BROADCAST,ICMP,L2LVXCntrl,ProtoSnoop,PuntWebauth,MCASTData,Transit,DOT1XAuth,Swfwd,LOGGING,L2LVXData,ForusTraffic,ForusARP,McastEndStn,Openflow,Exception,EGRExcption,NflSampled,RpfFailed ! policy-map system-cpp-policy class system-cpp-police-meraki-next-tunnel police rate 750 pps ! ! ! ! ! ! ! ! ! ! ! ! interface GigabitEthernet0/0 vrf forwarding Mgmt-vrf ip dhcp client client-id ascii eimfs-n200-lr ip address dhcp hostname eimfs-n200-lr negotiation auto ! interface TwentyFiveGigE1/0/1 description to Proxmox underlay no switchport ip address 172.28.1.10 255.255.255.0 ! interface TwentyFiveGigE1/0/2 description untagged access into VNI 2 switchport access vlan 200 switchport mode access spanning-tree portfast edge ! interface TwentyFiveGigE1/0/3 switchport mode access ! interface TwentyFiveGigE1/0/4 ! interface TwentyFiveGigE1/0/5 description UNUSED shutdown ! interface TwentyFiveGigE1/0/6 description UNUSED shutdown ! interface TwentyFiveGigE1/0/7 description UNUSED shutdown ! interface TwentyFiveGigE1/0/8 description UNUSED shutdown ! interface TwentyFiveGigE1/0/9 description UNUSED shutdown ! interface TwentyFiveGigE1/0/10 description UNUSED shutdown ! interface TwentyFiveGigE1/0/11 description UNUSED shutdown ! interface TwentyFiveGigE1/0/12 description UNUSED shutdown ! interface TwentyFiveGigE1/0/13 description UNUSED shutdown ! interface TwentyFiveGigE1/0/14 description UNUSED shutdown ! interface TwentyFiveGigE1/0/15 description UNUSED shutdown ! interface TwentyFiveGigE1/0/16 description UNUSED shutdown ! interface TwentyFiveGigE1/0/17 description UNUSED shutdown ! interface TwentyFiveGigE1/0/18 description UNUSED shutdown ! interface TwentyFiveGigE1/0/19 description UNUSED shutdown ! interface TwentyFiveGigE1/0/20 description UNUSED shutdown ! interface TwentyFiveGigE1/0/21 description UNUSED shutdown ! interface TwentyFiveGigE1/0/22 description UNUSED shutdown ! interface TwentyFiveGigE1/0/23 description UNUSED shutdown ! interface TwentyFiveGigE1/0/24 description UNUSED shutdown ! interface TwentyFiveGigE1/0/25 description UNUSED shutdown ! interface TwentyFiveGigE1/0/26 description UNUSED shutdown ! interface TwentyFiveGigE1/0/27 description UNUSED shutdown ! interface TwentyFiveGigE1/0/28 description UNUSED shutdown ! interface TwentyFiveGigE1/0/29 description UNUSED shutdown ! interface TwentyFiveGigE1/0/30 description UNUSED shutdown ! interface TwentyFiveGigE1/0/31 description UNUSED shutdown ! interface TwentyFiveGigE1/0/32 description UNUSED shutdown ! interface TwentyFiveGigE1/0/33 description UNUSED shutdown ! interface TwentyFiveGigE1/0/34 description UNUSED shutdown ! interface TwentyFiveGigE1/0/35 description UNUSED shutdown ! interface TwentyFiveGigE1/0/36 description UNUSED shutdown ! interface TwentyFiveGigE1/0/37 description UNUSED shutdown ! interface TwentyFiveGigE1/0/38 description UNUSED shutdown ! interface TwentyFiveGigE1/0/39 description UNUSED shutdown ! interface TwentyFiveGigE1/0/40 description UNUSED shutdown ! interface TwentyFiveGigE1/0/41 description UNUSED shutdown ! interface TwentyFiveGigE1/0/42 description UNUSED shutdown ! interface TwentyFiveGigE1/0/43 description UNUSED shutdown ! interface TwentyFiveGigE1/0/44 description UNUSED shutdown ! interface TwentyFiveGigE1/0/45 description UNUSED shutdown ! interface TwentyFiveGigE1/0/46 description UNUSED shutdown ! interface TwentyFiveGigE1/0/47 description UNUSED shutdown ! interface TwentyFiveGigE1/0/48 description DATA/Mgmt LR to NS switchport trunk allowed vlan 10,1280-1791,2109 switchport mode trunk no cdp enable ! interface HundredGigE1/0/49 description UNUSED shutdown ! interface HundredGigE1/0/50 description UNUSED shutdown ! interface HundredGigE1/0/51 description DATA LR to SC C1 FPGA 100G switchport trunk allowed vlan 2080-2591 switchport mode trunk no cdp enable ! interface HundredGigE1/0/52 description UNUSED shutdown ! interface Vlan1 no ip address shutdown ! interface Vlan10 ip dhcp client request option 42 ip address dhcp hostname 05771-103-LNR-FIC30110ABX ip mtu 1500 ! interface nve1 no ip address source-interface TwentyFiveGigE1/0/1 host-reachability protocol bgp member vni 4096 ingress-replication ! router bgp 65000 bgp router-id 172.28.1.10 bgp log-neighbor-changes bgp listen range 172.28.1.0/24 peer-group PVE no bgp default ipv4-unicast neighbor PVE peer-group neighbor PVE remote-as 65000 neighbor 172.28.1.40 peer-group PVE neighbor 172.28.1.50 peer-group PVE neighbor 172.28.1.55 peer-group PVE neighbor 172.28.1.180 peer-group PVE neighbor 172.28.1.182 peer-group PVE ! address-family ipv4 exit-address-family ! address-family l2vpn evpn neighbor PVE activate neighbor PVE send-community both exit-address-family ! ip forward-protocol nd no ip http server ip http authentication local no ip http secure-server ip http client source-interface GigabitEthernet0/0 ip tftp source-interface GigabitEthernet0/0 ip ssh bulk-mode 131072 ip ssh pubkey-chain username admin key-hash ssh-rsa 340C596960455AA3DB59E4FEFAC7CDA5 eimfs-dev@ruag ip ssh server algorithm mac hmac-sha2-256 hmac-sha2-256-etm@openssh.com hmac-sha2-512 hmac-sha2-512-etm@openssh.com ip scp server enable ! ! ip access-list standard SSM_GROUPS 10 permit 224.0.0.0 15.255.255.255 ! snmp-server group eimfs_nmbackend v3 priv ! ! radius server RADIUS address ipv4 192.168.200.1 auth-port 1812 acct-port 1813 key 7 111D1C16031B050B557878 ! ! ! control-plane service-policy input system-cpp-policy ! ! ! line con 0 stopbits 1 line aux 0 line vty 0 4 transport input ssh line vty 5 15 transport input ssh ! ntp server 192.168.200.1 ! ! ! ! ! ! end 05771-103-LNR-FIC30110ABX#